Edit tour

Windows Analysis Report
https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor

Overview

General Information

Sample URL:	https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor
Analysis ID:	1435785
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site or detected (based on various text indicators)

HTML body with high number of embedded SVGs detected

HTML body with high number of embedded images detected

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2552,i,2343868332596157846,7063458701623905572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5920 --field-trial-handle=2552,i,2343868332596157846,7063458701623905572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.3

OCR Text: O Office 365 A document has been sent through One Drive. Click the Access Document button below and Log in with your email account to view it. Access Docurnent The Trial Version

Source: https://short.io/?utm_source=link_not_found

HTTP Parser: Total embedded SVG size: 638426

Source: https://short.io/?utm_source=link_not_found

HTTP Parser: Total embedded image size: 56360

Source: Chrome DOM: 1.3

ML Model on OCR Text: Matched 98.3% probability on "O Office 365 A document has been sent through One Drive. Click the Access Document button below and Log in with your email account to view it. Access Docurnent The Trial Version "

Source: about:blank	HTTP Parser: No favicon
Source: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdO8JcUAAAAAJWQi_B27yDFuShbD2Cvq4AqcOCQ&co=aHR0cHM6Ly9zaG9ydC5pbzo0NDM.&hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH&size=invisible&cb=lffsssil4bn5	HTTP Parser: No favicon
Source: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdO8JcUAAAAAJWQi_B27yDFuShbD2Cvq4AqcOCQ&co=aHR0cHM6Ly9zaG9ydC5pbzo0NDM.&hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH&size=invisible&cb=lffsssil4bn5	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/784219015?random=1714711513345&cv=11&fst=1714711513345&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.5:49754 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/451da5240d983e12.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/e1307de400adca1e.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/fcd7f69ec08e4999.en.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/b8de9bd12fba5246.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/b6298cf502cc13d0.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/e113aa3e935a6b0d.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/873aa379081c784a.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/fdd78af6781822ca.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/9e2d4720ffac5af4.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/368a11563437cc62.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/5b2d464c2f59a733.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/2475682c8d5b76fa.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/006564064b6c66ac.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /chunk-batch/8b0efce4dcfa662a.ltr.css+edb83b7fb0f55858.ltr.css+7579b1ef84cb4721.ltr.css+600ca02efe4b30d9.ltr.css+31f53896cc2c323b.ltr.css+c462f102b34f80f4.ltr.css HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /chunk-batch/6647f35392aa70f6.js+417c62e513c0b3c2.js+ba8cda51a99f46d3.vendor.js+8e82ba8db0d6b18d.js+98c70a64f41e40c7.js+cc32cfc96d47808d.js+7693127bffb8514f.js+c5b6907854a89666.js+880d457741e39ad1.js+1c5ac52ad7165cc8.js+a17fdee60a10aa7a.js+45289403e160a2f4.js+34a4828ac8521b19.js+3bedbe9da81e71e9.js+8d8161777ba9d7c7.js+05b9dec1d6ad0ee7.js+289d46569ebc6b34.js+8d89a659626a2d7c.vendor.js+87dc93060d688e5f.vendor.js+53c5f62f8542e2d5.vendor.js+c60c10a90fbee0d2.vendor.js+465acf2d61fe3aef.js+da63b553e5f04517.js+05933124bc87daac.js+fa1d7006fea5d810.js+707974868651152d.js+0c2b0b465710b0c0.js+cfc0eaca77e313af.js+fc899ef176474fda.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /chunk-batch/95474928a9a5af52.js+dc07c5a1154ad7a0.js+5076922314c2ed51.js+f93dccbffe488059.js+0237a18c22b25e38.js+40cb2db19562ec27.js+dae762eb4978b801.js+17450c9d444078d8.vendor.js+285485d1434d4bdd.js+efe0e692df3b9c60.js+a90e3dd08aac95a4.js+50b53a1734a4b30f.js+0dc631ee4e9245c1.js+f393d4cc8de0a0a8.js+6c0ea36590d49674.strings.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/3c8e57c2a7031e58.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/6d89f736629eee73.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/b3ad105788169a6a.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/9dc21140fdbdfcf9.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/dc22c2df3a9e4bfe.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/fa3fb504fdf0aaea.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/2a50bb2d56bddf16.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/84db60d234c256f8.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/b3a01de3e1e9ec62.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/7a73108cf0c439a8.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/7108335d226a91c9.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/84e6389ec6a6ae32.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/9c9f5e37fb9eefe6.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/bc6d536e475100e2.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/3f6d75465bef692f.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/a76430df1ee91ba0.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/513226526f0cbf1e.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/df1c6555d629a225.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/9794b708e04ecac0.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /web/b9914c5d2e1d14a5.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/1767683/envelope/?sentry_key=944d224d45b943ba9f96396432dfd868&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/87dd97e63f924243 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /_ajax/reaction/config/DAGEBBzq9KM?documentExtension=jvjE01qRbaOyWhWyDOHDeg HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: design_viewersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 2f0e5d2X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: getreactionconfigapisec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240501-22sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /_ajax/reaction/reactions/summaries?parentArtifactType=DOCUMENT&source=B&reactedObjectType=B&limit=100&documentId=DAGEBBzq9KM&documentExtension=jvjE01qRbaOyWhWyDOHDeg HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: design_viewersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 2f0e5d2X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: findreactionsummaryapisec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240501-22sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /web/images/0483f2b648dcc986d01385062052ae1c.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /web/images/8777e8ed572c4159d71b08cca2972b15.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /_fb/s/31ed695fc889d00593852e4078080fe8.css HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
Source: global traffic	HTTP traffic detected: GET /web/images/749002f5a04f784cc1802d77d2fed423.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2 HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.canva.com/web/2a50bb2d56bddf16.ltr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/87e22a62965f141aa08e93699b0b3527.jpg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/reaction/reactions/summaries?parentArtifactType=DOCUMENT&source=B&reactedObjectType=B&limit=100&documentId=DAGEBBzq9KM&documentExtension=jvjE01qRbaOyWhWyDOHDeg HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/e5c5a4d109aeb5234e4405032dfd4800.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /_ajax/reaction/config/DAGEBBzq9KM?documentExtension=jvjE01qRbaOyWhWyDOHDeg HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3
Source: global traffic	HTTP traffic detected: GET /chunk-batch/118052af16110a6a.ltr.css+bbb36937bb9b2d18.ltr.css+f78d925eed25c026.ltr.css+0b904b0a14653f4e.ltr.css+77072c60218aa8fb.ltr.css+c58cd64d3a3f686a.ltr.css+44120d0e86f58fdd.ltr.css+0361d809f049c847.ltr.css+70f83d7290d33057.ltr.css HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /chunk-batch/1b96dc175117e75c.vendor.js+9a5bc247025fb8e8.js+96fce9fe2ad37a14.js+5b978aa1138d2dd3.js+cf288a3082e4672a.js+94def58aeb89e59c.js+c21b21bfb9577647.js+d7eb0d9b71092908.js+ab6a3e2e8cac7ce6.strings.js+570865c4d06b4285.js+f6632b2cc8e6c080.js+ccfc93f09f159cf4.strings.js+9ef9aea75d0fa20b.js+e31595af787f9905.js+d4aef339bff5f630.js+74ab07a470990b34.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /YAFcfhdOoGk/0/calibri.b242995fdba37a55d447fe541d829654.036b3d3daa452ce192466bbba1b30205.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YAFdJt8dAY0/0/OpenSans-Light11079511804754366555.edc5ef6407f2e2e0713337f40bb724fd.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/712_189_92_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAPYxeOmPyW1bzVYb40NMA0bprSvrwK8HvGIql4lomZuh&exp=1714727913&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAGIqZFKlSkxdgQR7mXGP2n_ohxCdpEqOs_fVMzH2HDwU HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_53_75_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAB6daLSOMIMldyWCy4W8HA8OQDYBB1CM9WO_lTXa_UQd&exp=1714727913&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAABhv6lWY6En1hWe0SjUShCcYXN4KBGo_Fd_AjJojQYM2 HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/395_96_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAGHbvX3xneW7SjcGPwRyf6_pp2Citdqk7T-79AamUlok&exp=1714727649&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAKAHhCl6skExOp6e0a73StuXf5NL8aE0ulbOhjloKTh5 HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/0483f2b648dcc986d01385062052ae1c.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/8777e8ed572c4159d71b08cca2972b15.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /YAFdJt8dAY0/0/OpenSans-Regular3933337718930570939.58b2543abe9187bb7f592b6bcdbf20d7.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_48_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAFJXAnYIQQ0xHcsErDaJWXvVvtPZT7fcxtbi8yxPG4l-&exp=1714727649&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAJsWmwRuJ3REECkw2TqnylaoozkHUBm97ga09yUfD0Mu HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_190_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9pbmkway9NQUdFQkVpbmkway8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAHRtDJvT4iVHw-xk1cPTFzL_AKPah711V_ojCRfXlk8W&exp=1714728782&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAHGrLooAC_luHub6PE2uoo57xdsg8PXRO3LxkbO0hXKD HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/191_103_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9ZNHF6QS9NQUdFQkVZNHF6QS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAPzzLTNqWZXC4ApwNoIboqnc3sHGuUnKwnPPgAAqhb-R&exp=1714727114&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAEjx9Y7Qv0dKUIQPTqG4yvdZEScjaUd-e9V-GcQPK5Kd HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0EaXY/MAGEBD0EaXY/1/p.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJWF6QO3UH4PAAJ6Q%2F20240503%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240503T013957Z&X-Amz-Expires=25634&X-Amz-Signature=8330df290c95a272f32bfef9462c8809d9e2bebdfd3e24ad40f5cce4a3583c06&X-Amz-SignedHeaders=host%3Bx-amz-expected-bucket-owner&response-expires=Fri%2C%2003%20May%202024%2008%3A47%3A11%20GMT HTTP/1.1Host: media-private.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_101_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS8wRWFYWS9NQUdFQkQwRWFYWS8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAO6e1PFmX2Er29AZfuvpz3512Xs_nbEFc3SEhvnaFaBu&exp=1714726031&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAPervKft4ICsWkqyBLRADT82t2PjahptjPl0muanri_Z HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chunk-batch/c9da08c886dcc2fd.ltr.css+40f0ce866d9a0621.ltr.css HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /chunk-batch/ce299b70190d23a5.js+cc24037a755de754.strings.js+4a15dab279524914.js+6f50888fcddc9770.strings.js+0a7fa6587a575f97.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: design_viewersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 2f0e5d2X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: recordanalyticseventbatchsec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240501-22sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3
Source: global traffic	HTTP traffic detected: GET /web/images/e5c5a4d109aeb5234e4405032dfd4800.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/87e22a62965f141aa08e93699b0b3527.jpg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /web/images/749002f5a04f784cc1802d77d2fed423.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /0EaXY/MAGEBD0EaXY/1/p.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJWF6QO3UH4PAAJ6Q%2F20240503%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240503T013957Z&X-Amz-Expires=25634&X-Amz-Signature=8330df290c95a272f32bfef9462c8809d9e2bebdfd3e24ad40f5cce4a3583c06&X-Amz-SignedHeaders=host%3Bx-amz-expected-bucket-owner&response-expires=Fri%2C%2003%20May%202024%2008%3A47%3A11%20GMT HTTP/1.1Host: media-private.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_53_75_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAB6daLSOMIMldyWCy4W8HA8OQDYBB1CM9WO_lTXa_UQd&exp=1714727913&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAABhv6lWY6En1hWe0SjUShCcYXN4KBGo_Fd_AjJojQYM2 HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/712_189_92_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAPYxeOmPyW1bzVYb40NMA0bprSvrwK8HvGIql4lomZuh&exp=1714727913&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAGIqZFKlSkxdgQR7mXGP2n_ohxCdpEqOs_fVMzH2HDwU HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/395_96_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAGHbvX3xneW7SjcGPwRyf6_pp2Citdqk7T-79AamUlok&exp=1714727649&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAKAHhCl6skExOp6e0a73StuXf5NL8aE0ulbOhjloKTh5 HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_190_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9pbmkway9NQUdFQkVpbmkway8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAHRtDJvT4iVHw-xk1cPTFzL_AKPah711V_ojCRfXlk8W&exp=1714728782&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAHGrLooAC_luHub6PE2uoo57xdsg8PXRO3LxkbO0hXKD HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_48_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAFJXAnYIQQ0xHcsErDaJWXvVvtPZT7fcxtbi8yxPG4l-&exp=1714727649&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAJsWmwRuJ3REECkw2TqnylaoozkHUBm97ga09yUfD0Mu HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/191_103_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9ZNHF6QS9NQUdFQkVZNHF6QS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAPzzLTNqWZXC4ApwNoIboqnc3sHGuUnKwnPPgAAqhb-R&exp=1714727114&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAEjx9Y7Qv0dKUIQPTqG4yvdZEScjaUd-e9V-GcQPK5Kd HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_101_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS8wRWFYWS9NQUdFQkQwRWFYWS8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAO6e1PFmX2Er29AZfuvpz3512Xs_nbEFc3SEhvnaFaBu&exp=1714726031&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAPervKft4ICsWkqyBLRADT82t2PjahptjPl0muanri_Z HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/designinsight HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: design_viewersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 2f0e5d2X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: recordheartbeatsec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240501-22sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3
Source: global traffic	HTTP traffic detected: GET /site-insights.js HTTP/1.1Host: cdn.metadata.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/designinsight HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1714711456187&gtmcb=1280289369 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/favicon-1.ico HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505
Source: global traffic	HTTP traffic detected: GET /_worker/service/web/service_worker.js?runtime=BROWSER HTTP/1.1Host: www.canva.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editorUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lvq6xg05fyd2tcbhb4l; Metadata_session_id=lvq6xg06grsearshz5b; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556235&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=19399&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=deleted
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556267&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_doctype_id=TAGAkMpLE1g&ep.custom_product_variant=web-2&_et=54&tfd=19474&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505If-None-Match: W/"ba9c619e1ba6a9272c44084a93375283"If-Modified-Since: Wed, 01 Nov 2023 23:04:36 GMT
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=705921340 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lvq6xg05fyd2tcbhb4l; Metadata_session_id=lvq6xg06grsearshz5b; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /static/images/favicon-1.ico HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1714711456187&gtmcb=1280289369 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556267&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_doctype_id=TAGAkMpLE1g&ep.custom_product_variant=web-2&_et=54&tfd=19474&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=881380805 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=437237257 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556235&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=19399&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /web/af8d419008ac4515.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=437237257 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1917436ed9f0d0be4991d251714711460; PID=1A77436ed9d5a0be4991b721714711460; XID=1917436ed9f0d0be4991d251714711460
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=881380805 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=77c06a31-361f-4a2e-806e-98e63d50b1c6
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=453093911&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&tiba=Canva%20Design&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20267%3Bevent_id%3D1714712356152_171471202556267%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_doctype_id%3DTAGAkMpLE1g%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1&uip=191.96.227.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAgiYwbECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZTtuYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&eitems=ChEI8PPMsQYQ8_GcgbTNvdD8ARIdAHjCH3T7gEIs4SY3yxKzDJlnKoMoJ93VrrBTMQA&pscrd=CI796dOknpHTMCITCPyVhfzV8IUDFTUNaAgdWSwCFjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhZodHRwczovL3d3dy5jYW52YS5jb20v HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&_eu=AEA&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.sp=1&sst.em_event=1&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_17147120255620&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&epn.percent_scrolled=90&_et=56&tfd=24611&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-navigation-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=AgSJD0GS8PJcR0b6JFHeWd7dTxIhlkAsQkbXC%2BAwLW5BlOko1pCtQJxvP4sklsv5ZpR5LD83btp7gpm6AJm25UBgQOllLmTPQ7z7FYLIh9%2FlgMKc7fs8xsPJv%2B27ZQ%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D
Source: global traffic	HTTP traffic detected: GET /web/3ca27320fba118d7.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=AgSJD0GS8PJcR0b6JFHeWd7dTxIhlkAsQkbXC%2BAwLW5BlOko1pCtQJxvP4sklsv5ZpR5LD83btp7gpm6AJm25UBgQOllLmTPQ7z7FYLIh9%2FlgMKc7fs8xsPJv%2B27ZQ%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=453093911&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&tiba=Canva%20Design&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20267%3Bevent_id%3D1714712356152_171471202556267%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_doctype_id%3DTAGAkMpLE1g%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1&uip=191.96.227.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAgiYwbECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZTtuYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CI796dOknpHTMCITCPyVhfzV8IUDFTUNaAgdWSwCFjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSGwB7FLtqtmHmhgRlzWvJMtjGClMcgRxMXO8c7w&eitems=ChEI8PPMsQYQ8_GcgbTNvdD8ARIdAHjCH3R4LFFU2HMSo6MeY-dRhCSjqOvosAHnnpw&random=4193458467 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=437237257 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1917436ed9f0d0be4991d251714711460
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lvq6xg05fyd2tcbhb4l; Metadata_session_id=lvq6xg06grsearshz5b; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=YYMsjjGL%2F%2FBhKSXSsxnqZ4SQE7JC4K8kazRkn9KWgDupwYZkBsfhEPwVLbVoKHCwHKnQ8nH2VX%2BB81LiVYtyQriDX5zMM0eF9xsF2VgGih8mON9xjh2VNISHR8rqbw%3D%3D
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&_eu=AEA&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.sp=1&sst.em_event=1&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_17147120255620&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&epn.percent_scrolled=90&_et=56&tfd=24611&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=YYMsjjGL%2F%2FBhKSXSsxnqZ4SQE7JC4K8kazRkn9KWgDupwYZkBsfhEPwVLbVoKHCwHKnQ8nH2VX%2BB81LiVYtyQriDX5zMM0eF9xsF2VgGih8mON9xjh2VNISHR8rqbw%3D%3D
Source: global traffic	HTTP traffic detected: GET /web/hjfept.e74599b4a81b369e.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=YYMsjjGL%2F%2FBhKSXSsxnqZ4SQE7JC4K8kazRkn9KWgDupwYZkBsfhEPwVLbVoKHCwHKnQ8nH2VX%2BB81LiVYtyQriDX5zMM0eF9xsF2VgGih8mON9xjh2VNISHR8rqbw%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=453093911&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&tiba=Canva%20Design&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20267%3Bevent_id%3D1714712356152_171471202556267%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_doctype_id%3DTAGAkMpLE1g%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1&uip=191.96.227.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAgiYwbECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZTtuYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CI796dOknpHTMCITCPyVhfzV8IUDFTUNaAgdWSwCFjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSGwB7FLtqtmHmhgRlzWvJMtjGClMcgRxMXO8c7w&eitems=ChEI8PPMsQYQ8_GcgbTNvdD8ARIdAHjCH3R4LFFU2HMSo6MeY-dRhCSjqOvosAHnnpw&random=4193458467 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/8dd0898976a6bb84.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lvq6xg05fyd2tcbhb4l; Metadata_session_id=lvq6xg06grsearshz5b; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lvq6xg05fyd2tcbhb4l; Metadata_session_id=lvq6xg06grsearshz5b; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lvq6xg05fyd2tcbhb4l; Metadata_session_id=lvq6xg06grsearshz5b; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /WOo1se&design=DAGEBBzq9KM&accessRole=viewer&linkSource=document HTTP/1.1Host: link.childedocushare.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lvq6xg05fyd2tcbhb4l; Metadata_session_id=lvq6xg06grsearshz5b; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /redirector/link-does-not-exist.png HTTP/1.1Host: d2te5kruq0pvbl.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://link.childedocushare.site/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1714711456192,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lvq6xg05fyd2tcbhb4l; Metadata_session_id=lvq6xg06grsearshz5b; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /redirector/link-does-not-exist.png HTTP/1.1Host: d2te5kruq0pvbl.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?utm_source=link_not_found HTTP/1.1Host: short.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.0f0d0189161b3d582858.css HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/hero-da68e1f98d49eea0edcc5cc53fba8dd1.avif HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webpack-runtime-b7cae2b65a67c6a710e2.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /framework-d8026fe3df59b77201cc.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app-03b578d60f542c677ed5.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xhr.html HTTP/1.1Host: app.short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/Graphik-Regular-Web-d3151eef921a9fea9980627ea3af95b4.woff2 HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://short.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/Graphik-Medium-Web-2a840b356254e218b9b3a2c600652730.woff2 HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://short.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/Graphik-Semibold-Web-483a378d3eceb3b9ca5c6b0eb2e273f0.woff2 HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://short.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/star-d38c032d63bee9674f56de0a6cb578e7.svg HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/small-planet-e3789c1103edc526be0f3eb2b4c28d03.png HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/pumpkin-308a8ade7af387bedeca727644710baf.png HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/index/page-data.json?utm_source=link_not_found HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chat-8b5b6f04fb69dbe0a772f7d695503bbb.svg HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/support-background-5c8af4d33bb148d57a2ab16ae8132caa.png HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/medium-03-459ab7b8d6ddab3db59a811ce69ca557.png HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1242162299.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1467288770.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/2048126111.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/2385355646.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/pumpkin-308a8ade7af387bedeca727644710baf.png HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/small-planet-e3789c1103edc526be0f3eb2b4c28d03.png HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/hero-da68e1f98d49eea0edcc5cc53fba8dd1.avif HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/star-d38c032d63bee9674f56de0a6cb578e7.svg HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/index/page-data.json?utm_source=link_not_found HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/2562819187.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/medium-02-b924d3f3e6b83880002b74f126d8be45.png HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/5729459/envelope/?sentry_key=0559e45064ad45fd8ca4c7912b6287c4&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.112.2 HTTP/1.1Host: sentry-relay.short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/03-d26b079ea5970bce38a0e708d0cff905.svg HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/universal-music-group-4923aecff27e9e6bc93fcea741271061.svg HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/raspberry-pi-941b09e756b134ff119b7a893a3d900c.svg HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stats-15e710f22b373350ce9729f5fb4b2383.svg HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/chat-8b5b6f04fb69dbe0a772f7d695503bbb.svg HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/medium-03-459ab7b8d6ddab3db59a811ce69ca557.png HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/support-background-5c8af4d33bb148d57a2ab16ae8132caa.png HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1242162299.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/2048126111.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1467288770.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stats-a6d9e893096b5c669d8cc5160be1482e.svg HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ea88be26-ca08e4c3b26e1cdbc62c.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1alpha/publicKeys HTTP/1.1Host: publickeyservice.aws.privacysandboxservices.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/2385355646.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a88f938da5de181922832d50f06213eec0b7550e-ec2257cdde6a79943bb5.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8235685ff385744a4e98baf37fa1220d2a52f68a-d2c6e11abf704479efde.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d4bba0e56524b98c7438ba84a7dae7c0b050da0f-d32dd0c39334c86598f9.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/2562819187.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /component---src-pages-index-tsx-ca1b83f425a6d364586f.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/omelette-a8254318025275264ddf581532bf02ce.png HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/avocado-509e0714a39e8881beb85352538ea3b5.png HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/styles.0f0d0189161b3d582858.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /108-639038011f01d16f61d8.js HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/rmf95u7h HTTP/1.1Host: widget.intercom.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /changelog HTTP/1.1Host: profile.short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://short.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/enterprise/page-data.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://short.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/features/page-data.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://short.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/pricing/page-data.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://short.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/index/page-data.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://short.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /frame-modern.26b8f221.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor-modern.07772018.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs/ccpa/stub.js HTTP/1.1Host: cdn.iubenda.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs/iubenda_cs.js HTTP/1.1Host: cdn.iubenda.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdO8JcUAAAAAJWQi_B27yDFuShbD2Cvq4AqcOCQ&co=aHR0cHM6Ly9zaG9ydC5pbzo0NDM.&hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH&size=invisible&cb=lffsssil4bn5 HTTP/1.1Host: recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/medium-02-b924d3f3e6b83880002b74f126d8be45.png HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/03-d26b079ea5970bce38a0e708d0cff905.svg HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/universal-music-group-4923aecff27e9e6bc93fcea741271061.svg HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/raspberry-pi-941b09e756b134ff119b7a893a3d900c.svg HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stats-15e710f22b373350ce9729f5fb4b2383.svg HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie_solution/iubenda_cs/1.60.0/core-en.js HTTP/1.1Host: cdn.iubenda.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/stats-a6d9e893096b5c669d8cc5160be1482e.svg HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /changelog HTTP/1.1Host: profile.short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/omelette-a8254318025275264ddf581532bf02ce.png HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/integrations/page-data.json HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://short.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/avocado-509e0714a39e8881beb85352538ea3b5.png HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-solution/confs/js/52677371.js HTTP/1.1Host: cs.iubenda.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubsub/5-oe9Jdgva14npGIl3GGLf-jUOPZJu1Cx_cQSdJqI17Eq0KBoyEmi-f284VgTIeddbp_FdvXf5vnVrANy46fdLZkdTmNn-gCS-vfo1?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1Host: nexus-websocket-a.intercom.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://short.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: S2AcDl5pDbvlowOELUjXuA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /page-data/index/page-data.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
Source: global traffic	HTTP traffic detected: GET /page-data/enterprise/page-data.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
Source: global traffic	HTTP traffic detected: GET /page-data/pricing/page-data.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
Source: global traffic	HTTP traffic detected: GET /page-data/features/page-data.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
Source: global traffic	HTTP traffic detected: GET /page-data/integrations/page-data.json HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
Source: global traffic	HTTP traffic detected: GET /messenger/web/ping HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH HTTP/1.1Host: recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdO8JcUAAAAAJWQi_B27yDFuShbD2Cvq4AqcOCQ&co=aHR0cHM6Ly9zaG9ydC5pbzo0NDM.&hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH&size=invisible&cb=lffsssil4bn5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/tKcPQSh2okjZHiZ2jIssRExVWo45mlVHOakavsOpwK4.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://recaptcha.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/icon-144x144.png?v=e684309adfdf6efa515a707d11a3e1f1 HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f; _ga=GA1.1.84728328.1714711503; _ga_JVCX6B1JPE=GS1.1.1714711500.1.0.1714711504.60.0.576514287; _gcl_au=1.1.1019735161.1714711509
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png?v=e684309adfdf6efa515a707d11a3e1f1 HTTP/1.1Host: short.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/?utm_source=link_not_foundAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f; _ga=GA1.1.84728328.1714711503; _ga_JVCX6B1JPE=GS1.1.1714711500.1.0.1714711504.60.0.576514287; _gcl_au=1.1.1019735161.1714711509
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1940192.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendors~app~tooltips-modern.7e0e68e9.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendors~app-modern.115fb6b0.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app~tooltips-modern.3bf1c58b.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app-modern.b556ed0e.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /launcher-discovery-modern.0d71e4ad.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/784219015/?random=1714711513345&cv=11&fst=1714711513345&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkbcRcZuieg13XrjDkDuw8IkBxgvs0fJsRhK8zTzV5APMBFsZVZ6JPClaWs
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13r3r3n3n5&rnd=2024227052.1714711509&url=https%3A%2F%2Fshort.io%2F&dma=0&npa=0&gtm=45He4510n71KRWKR2v72734998za200&auid=1019735161.1714711509 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkbcRcZuieg13XrjDkDuw8IkBxgvs0fJsRhK8zTzV5APMBFsZVZ6JPClaWs
Source: global traffic	HTTP traffic detected: GET /modules.842bcec28f9fd12bb79e.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/784219015?random=1714711513345&cv=11&fst=1714711513345&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkbcRcZuieg13XrjDkDuw8IkBxgvs0fJsRhK8zTzV5APMBFsZVZ6JPClaWs
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/784219015/?random=1714711513345&cv=11&fst=1714708800000&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqYDRSEX3eYOxEjKViMHizVMWip1c4RSk-T8fdf3sUExxCaHKM&random=1432778233&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://short.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/icon-144x144.png?v=e684309adfdf6efa515a707d11a3e1f1 HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f; _ga=GA1.1.84728328.1714711503; _ga_JVCX6B1JPE=GS1.1.1714711500.1.0.1714711504.60.0.576514287; _gcl_au=1.1.1019735161.1714711509; _uetsid=ee7ccfe0090711ef838dbfb898906ddc; _uetvid=ee7d3d30090711efab5c199ac5070e62
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png?v=e684309adfdf6efa515a707d11a3e1f1 HTTP/1.1Host: short.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f; _ga=GA1.1.84728328.1714711503; _ga_JVCX6B1JPE=GS1.1.1714711500.1.0.1714711504.60.0.576514287; _gcl_au=1.1.1019735161.1714711509; _uetsid=ee7ccfe0090711ef838dbfb898906ddc; _uetvid=ee7d3d30090711efab5c199ac5070e62
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/784219015/?random=1714711513345&cv=11&fst=1714708800000&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqYDRSEX3eYOxEjKViMHizVMWip1c4RSk-T8fdf3sUExxCaHKM&random=1432778233&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/web/metrics HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?utm_source=link_not_found HTTP/1.1Host: short.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_260.2.dr, chromecache_336.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Wj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_260.2.dr, chromecache_336.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Xg:d,Vg:e,Wg:f,Kh:g,Lh:h,ye:m,zb:b},p=G.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!CC&&JC(x[B],n.ye))return sc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_344.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Jz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!p.length)return!0;var q=Fz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;P(121);if("https://www.facebook.com/tr/"===r)return P(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!uI(q, equals www.facebook.com (Facebook)
Source: chromecache_387.2.dr	String found in binary or memory: ra:500,Da:500,Lg:!1,icon:Gm},{name:"Gfycat",Bg:["https?://.gfycat.com/","https?://gfycat.com/"].map(EF),ra:960,Da:540,Lg:!1,icon:Gm},{name:"Twitter",Bg:["https?://twitter.com/","https?://www.twitter.com/"].map(EF),ra:270,Da:440,Lg:!1,icon:Gm},{name:"Facebook",Bg:["https?://facebook.com/","https?://www.facebook.com/"].map(EF),ra:500,Da:500,Lg:!1,icon:Gm},{name:"Tumblr",Bg:["https?://.tumblr.com/"].map(EF),ra:510,Da:450,Lg:!1,icon:Gm},{name:"Pinterest",Bg:["https?://pinterest.com","https?://www.pinterest.com*"].map(EF), equals www.facebook.com (Facebook)
Source: chromecache_387.2.dr	String found in binary or memory: ra:500,Da:500,Lg:!1,icon:Gm},{name:"Gfycat",Bg:["https?://.gfycat.com/","https?://gfycat.com/"].map(EF),ra:960,Da:540,Lg:!1,icon:Gm},{name:"Twitter",Bg:["https?://twitter.com/","https?://www.twitter.com/"].map(EF),ra:270,Da:440,Lg:!1,icon:Gm},{name:"Facebook",Bg:["https?://facebook.com/","https?://www.facebook.com/"].map(EF),ra:500,Da:500,Lg:!1,icon:Gm},{name:"Tumblr",Bg:["https?://.tumblr.com/"].map(EF),ra:510,Da:450,Lg:!1,icon:Gm},{name:"Pinterest",Bg:["https?://pinterest.com","https?://www.pinterest.com*"].map(EF), equals www.twitter.com (Twitter)
Source: chromecache_218.2.dr, chromecache_350.2.dr, chromecache_344.2.dr	String found in binary or memory: return b}yC.K="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr	String found in binary or memory: s</a></li></ul><div class="socials"><a href="https://twitter.com/short_io" class="socialLink"><img src="data:image/svg+xml;base64,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" alt="twitter icon" loading="lazy"/></a><a href="https://www.linkedin.com/company/short.cm" class="socialLink"><img src="data:image/svg+xml;base64,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" alt="linkedin icon" loading="lazy"/></a><a href="https://www.facebook.com/shortio.links" class="socialLink"><img src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMzIiIGhlaWdodD0iMzIiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CiAgPHBhdGggZmlsbC1ydWxlPSJldmVub2RkIiBjbGlwLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik0xNi4yIDMxLjc0aC0uMDdhMTUuODcgMTUuODcgMCAxMTIuNzItLjI0VjIwLjNoMy44N2wuNzMtNC42NWgtNC42di0zLjAyYzAtMS4yNy42NC0yLjUxIDIuNy0yLjUxaDIuMVY2LjE2cy0xLjktLjMxLTMuNzItLjMxYy0zLjc5IDAtNi4yNyAyLjIyLTYuMjcgNi4yNnYzLjU0SDkuNDV2NC42NWg0LjIxdjExLjI0Yy44My4xMyAxLjY3LjIgMi41My4yeiIgZmlsbD0iI2ZmZiIvPgo8L3N2Zz4K" alt="facebook icon" loading="lazy"/></a></div></div><div class="section footerBottom"><span class="copyright"> equals www.facebook.com (Facebook)
Source: chromecache_196.2.dr	String found in binary or memory: s</a></li></ul><div class="socials"><a href="https://twitter.com/short_io" class="socialLink"><img src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMzIiIGhlaWdodD0iMzIiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CiAgPHBhdGggZD0iTTMxIDYuMDhjLTEuMTQuNTItMi4zNy44Ny0zLjY1IDEuMDNhNi41NSA2LjU1IDAgMDAyLjgtMy42MyAxMi41IDEyLjUgMCAwMS00LjA0IDEuNkE2LjI2IDYuMjYgMCAwMDIxLjQ1IDNhNi40NiA2LjQ2IDAgMDAtNi4zNiA2LjU2YzAgLjUyLjA2IDEuMDIuMTcgMS41QTE3Ljg3IDE3Ljg3IDAgMDEyLjE2IDQuMmE2LjcgNi43IDAgMDAxLjk3IDguNzYgNi4xOSA2LjE5IDAgMDEtMi44OC0uODJ2LjA5YzAgMy4xOCAyLjE5IDUuODMgNS4xIDYuNDNhNi4yIDYuMiAwIDAxLTIuODguMTEgNi40IDYuNCAwIDAwNS45NSA0LjU2QTEyLjUxIDEyLjUxIDAgMDEwIDI2LjA1IDE3LjYgMTcuNiAwIDAwOS43NSAyOWMxMS43IDAgMTguMS0xMCAxOC4xLTE4LjY4bC0uMDItLjg0QTEzLjE1IDEzLjE1IDAgMDAzMSA2LjA4eiIgZmlsbD0iI2ZmZiIvPgo8L3N2Zz4K" alt="twitter icon" loading="lazy"/></a><a href="https://www.linkedin.com/company/short.cm" class="socialLink"><img src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMzIiIGhlaWdodD0iMzIiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CiAgPHBhdGggZD0iTTI3LjI3IDI3LjI3aC00Ljc1di03LjQzYzAtMS43Ny0uMDMtNC4wNS0yLjQ2LTQuMDUtMi40NyAwLTIuODUgMS45My0yLjg1IDMuOTJ2Ny41NmgtNC43NFYxMmg0LjU1djIuMDhoLjA2YTQuOTkgNC45OSAwIDAxNC41LTIuNDZjNC44IDAgNS42OSAzLjE2IDUuNjkgNy4yN3Y4LjM4ek03LjEyIDkuOWEyLjc1IDIuNzUgMCAxMTAtNS41IDIuNzUgMi43NSAwIDAxMCA1LjV6bTIuMzcgMTcuMzZINC43NFYxMkg5LjV2MTUuMjd6TTI5LjYzIDBIMi4zNkEyLjM0IDIuMzQgMCAwMDAgMi4zdjI3LjRBMi4zNCAyLjM0IDAgMDAyLjM2IDMyaDI3LjI3QTIuMzQgMi4zNCAwIDAwMzIgMjkuN1YyLjNBMi4zNCAyLjM0IDAgMDAyOS42MyAweiIgZmlsbD0iI2ZmZiIvPgo8L3N2Zz4K" alt="linkedin icon" loading="lazy"/></a><a href="https://www.facebook.com/shortio.links" class="socialLink"><img src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMzIiIGhlaWdodD0iMzIiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CiAgPHBhdGggZmlsbC1ydWxlPSJldmVub2RkIiBjbGlwLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik0xNi4yIDMxLjc0aC0uMDdhMTUuODcgMTUuODcgMCAxMTIuNzItLjI0VjIwLjNoMy44N2wuNzMtNC42NWgtNC42di0zLjAyYzAtMS4yNy42NC0yLjUxIDIuNy0yLjUxaDIuMVY2LjE2cy0xLjktLjMxLTMuNzItLjMxYy0zLjc5IDAtNi4yNyAyLjIyLTYuMjcgNi4yNnYzLjU0SDkuNDV2NC42NWg0LjIxdjExLjI0Yy44My4xMyAxLjY3LjIgMi41My4yeiIgZmlsbD0iI2ZmZiIvPgo8L3N2Zz4K" alt="facebook icon" loading="lazy"/></a></div></div><div class="section footerBottom"><span class="copyright"> equals www.linkedin.com (Linkedin)
Source: chromecache_196.2.dr	String found in binary or memory: s</a></li></ul><div class="socials"><a href="https://twitter.com/short_io" class="socialLink"><img src="data:image/svg+xml;base64,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" alt="twitter icon" loading="lazy"/></a><a href="https://www.linkedin.com/company/short.cm" class="socialLink"><img src="data:image/svg+xml;base64,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" alt="linkedin icon" loading="lazy"/></a><a href="https://www.facebook.com/shortio.links" class="socialLink"><img src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMzIiIGhlaWdodD0iMzIiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CiAgPHBhdGggZmlsbC1ydWxlPSJldmVub2RkIiBjbGlwLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik0xNi4yIDMxLjc0aC0uMDdhMTUuODcgMTUuODcgMCAxMTIuNzItLjI0VjIwLjNoMy44N2wuNzMtNC42NWgtNC42di0zLjAyYzAtMS4yNy42NC0yLjUxIDIuNy0yLjUxaDIuMVY2LjE2cy0xLjktLjMxLTMuNzItLjMxYy0zLjc5IDAtNi4yNyAyLjIyLTYuMjcgNi4yNnYzLjU0SDkuNDV2NC42NWg0LjIxdjExLjI0Yy44My4xMyAxLjY3LjIgMi41My4yeiIgZmlsbD0iI2ZmZiIvPgo8L3N2Zz4K" alt="facebook icon" loading="lazy"/></a></div></div><div class="section footerBottom"><span class="copyright"> equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: www.canva.com
Source: global traffic	DNS traffic detected: DNS query: static.canva.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: o13855.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: chunk-composing.canva.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: font-public.canva.com
Source: global traffic	DNS traffic detected: DNS query: media.canva.com
Source: global traffic	DNS traffic detected: DNS query: media-private.canva.com
Source: global traffic	DNS traffic detected: DNS query: telemetry.canva.com
Source: global traffic	DNS traffic detected: DNS query: cdn.metadata.io
Source: global traffic	DNS traffic detected: DNS query: collector-22324.us.tvsquared.com
Source: global traffic	DNS traffic detected: DNS query: ct.canva.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: p.tvpixel.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: sdk.iad-01.braze.com
Source: global traffic	DNS traffic detected: DNS query: link.childedocushare.site
Source: global traffic	DNS traffic detected: DNS query: d2te5kruq0pvbl.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: short.io
Source: global traffic	DNS traffic detected: DNS query: app.short.io
Source: global traffic	DNS traffic detected: DNS query: sentry-relay.short.io
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.aws.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic	DNS traffic detected: DNS query: profile.short.io
Source: global traffic	DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.iubenda.com
Source: global traffic	DNS traffic detected: DNS query: api-iam.intercom.io
Source: global traffic	DNS traffic detected: DNS query: nexus-websocket-a.intercom.io
Source: global traffic	DNS traffic detected: DNS query: cs.iubenda.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: hits-i.iubenda.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net

Source: unknown

HTTP traffic detected: POST /api/1767683/envelope/?sentry_key=944d224d45b943ba9f96396432dfd868&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveContent-Length: 465sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:18 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd98575e7b8c59-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd98575e7b8c59X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nisoc5swxMcNWzKGKvHmohOQfJvOEXhA%2FtmSucJomFOuFFQmAT%2BGXiZkIUXuxxNoKQo49ge3yCMxQZLmtat6JDZwU01Dq5TCMYHelKWJ2g1zFr6F3Ti%2FvRzojZqbTwk%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:18 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd985759588c35-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd985759588c35X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ZFD%2FlvZPcwT%2Bf2Ypu7%2FMrmRWWfm3AyH9vfw9MjXxgbn1EaTzIyOgLL4BO2E69gwR5aZ0zcZ%2BhQB37KONI0AFbSEYpzV72Y8MI3%2F%2FbX4CxxoPUkkb9cywSnduxOapXE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:20 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd9862abf7420b-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd9862abf7420bX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mZzIoCirQRhf60CSiW1sxozsQGysB0Cb37QH3hf3C3A1FNKB3cJ%2BAvfZL%2Fic4E0lgM5rqJ4kJtadRZ2Nzii4Fzn4vFpRORLRAvTC9SrrqilZviPZjgmUNwuAVK9Hn4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:25 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd98814e58429a-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd98814e58429aX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yXbXsDftqRrzrvRrRYst%2FYotuCgbc2KLRQct8AQylc92lznwg4Ki6E0kU4IJRKCnZWG1cx9fugx97nTbJm4hSHqN5OjbLHQ3SgY6vX6mXVHpTJFVX2FZx6SstfNBDAU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:29 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd989f391b1889-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd989f391b1889X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lF0p0OUkP3f6AxBwbwUwVDmvMzbS2JplnRh%2B7eiuAaJkIKbuD23cS3cT9AGt00jP6K9CY%2BOOdwXkPluBGVd8ayIraOe3Z%2F8PUxtfN3DsRqS5SPat1Ya0ioqKAhquut0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:31 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd98a8b9ad7d08-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd98a8b9ad7d08X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gd8y%2F2P4tttmemJpAcB2%2FrLfkclZjb3ijlkPqNYD4xYxIVJGtxx720gLLMVBhdAWAZMtc9s%2F25mBO76QFY8JX2kfyTRTnCqfX8w30eei7%2BiL3Iz45Vf7xAXF%2FWXVLXo%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:33 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd98b7eac918ee-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd98b7eac918eeX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6drZVw0cN3DiAy4Fu5MHRuh58PmQP1KSsinWpovGlk8xI15kMIEH9Yx25GYi9zNPXFnRXQ51RyhFTUp48zmEWK08OPsPjU1XT9WQY6Wdvf3U6O8T3hKGjO6oQnxSKQg%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-Content-Type-Options: nosniffX-Powered-By: Short.io/EdgeDate: Fri, 03 May 2024 04:44:36 GMTContent-Type: text/html; charset=utf-8Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:36 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd98c62d63196c-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd98c62d63196cX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vgOkiybIaWJF58ykP1bbWs5lFJ7USiu6Ldfp%2BqekHpaTIox7Kb8udEzRVG8cAzpp2qs5D%2FQ9mQHNa0%2F8bDtLBWRp8ym37fGsQOlzHvmvCeg1NsDoA4ML6fOxqU%2Bt7Ak%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 May 2024 04:44:38 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87dd98d708af42d2-EWRCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 87dd98d708af42d2X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fbt03sJUB0MakZ4szsH38FZwFvY6Hb8DsRHNkFDc%2BTm3JoHLJGC0Cq5H4g2M1RRggN3UiAK0xtLbcZU4GB1KUp2bdxJRizJhwKxqo6%2FKNmB2FgZpikIinFRN6LfKwfc%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare

Source: chromecache_387.2.dr	String found in binary or memory: http://codepen.io/
Source: chromecache_387.2.dr	String found in binary or memory: http://codesandbox.io/
Source: chromecache_339.2.dr	String found in binary or memory: http://short.io/?utm_source=link_not_found
Source: chromecache_387.2.dr	String found in binary or memory: http://tally.so/
Source: chromecache_387.2.dr	String found in binary or memory: http://youtu.be/
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_337.2.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_225.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_274.2.dr, chromecache_310.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;
Source: chromecache_252.2.dr, chromecache_401.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;
Source: chromecache_310.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44
Source: chromecache_274.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=804583618;gtm=45j91e44u
Source: chromecache_252.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1668577346;gtm=45j91e45
Source: chromecache_401.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u
Source: chromecache_218.2.dr, chromecache_350.2.dr, chromecache_260.2.dr, chromecache_336.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_218.2.dr, chromecache_350.2.dr, chromecache_260.2.dr, chromecache_336.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_365.2.dr	String found in binary or memory: https://api-gw.metadata.io
Source: chromecache_196.2.dr	String found in binary or memory: https://app.short.io/xhr.html
Source: chromecache_334.2.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/js/swan-2.0.21.js
Source: chromecache_218.2.dr, chromecache_350.2.dr, chromecache_260.2.dr, chromecache_344.2.dr, chromecache_336.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_387.2.dr	String found in binary or memory: https://cdn.iframe.ly
Source: chromecache_371.2.dr	String found in binary or memory: https://cdn.iubenda.com/cookie_solution/iubenda_cs/1.60.0/core-
Source: chromecache_243.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/11_sourcemaps/ce299b70190d23a5.js.map
Source: chromecache_387.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/1351_sourcemaps/95474928a9a5af52.js.map
Source: chromecache_337.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/16_sourcemaps/6647f35392aa70f6.js.map
Source: chromecache_398.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/118052af16110a6a.ltr.css.map
Source: chromecache_334.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/1b96dc175117e75c.vendor.js.map
Source: chromecache_299.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/8b0efce4dcfa662a.ltr.css.map
Source: chromecache_255.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/c9da08c886dcc2fd.ltr.css.map
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_387.2.dr	String found in binary or memory: https://codepen.io/
Source: chromecache_387.2.dr	String found in binary or memory: https://codesandbox.io/
Source: chromecache_344.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_339.2.dr	String found in binary or memory: https://d2te5kruq0pvbl.cloudfront.net
Source: chromecache_339.2.dr	String found in binary or memory: https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist-2x.png
Source: chromecache_339.2.dr	String found in binary or memory: https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png
Source: chromecache_225.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_225.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_225.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_225.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/ai-powered-slug-generation
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/custom-favicon
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/custom-ssl-certificate-upload
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/link-router
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/new-feature-folder-settings
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/new-nameservers-for-purchased-domains
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/privacy-policy-update-amplitude-removed
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/public-qr-code-generator-utm-builder
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/shortio-is-now-iso-certified
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://feedback.short.io/changelog/transparency-border-radius-for-qr-codes
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/02.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/02.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/02.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/03.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/03.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/03.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/04.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/04.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/04.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/05.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/05.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/05.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/09.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/09.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/09.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0A.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0A.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0A.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0B.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0B.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0B.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0C.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0C.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0C.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/11.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/11.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/11.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/12.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/12.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/12.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/16-quadratic.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/16.otf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/16.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/16.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/17-quadratic.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/17.otf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/17.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/17.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/23.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/23.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/23.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/24.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/24.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/24.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/26.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/26.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/26.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/27.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/27.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/27.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/28.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/28.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/28.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/29.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/29.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/29.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2C.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2C.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2C.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2D.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2D.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2D.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2E.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2E.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2E.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2F.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2F.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2F.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/31.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/31.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/31.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/32.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/32.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/32.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/38.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/38.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/38.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/39.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/39.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/39.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3C.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3C.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3C.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3D.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3D.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3D.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3E.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3E.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3E.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3F.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3F.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3F.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/46.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/46.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/46.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/47.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/47.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/47.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4B.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4B.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4B.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4C.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4C.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4C.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/55.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/55.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/55.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/56.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/56.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/56.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/60.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/60.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/60.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/61.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/61.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/61.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/6F.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/6F.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/6F.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/70.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/70.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/70.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/71.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/71.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/71.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/72.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/72.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/72.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/75.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/75.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/75.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/76.ttf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/76.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/76.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7D-quadratic.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7D.otf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7D.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7D.woff2)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7E-quadratic.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7E.otf)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7E.woff)
Source: chromecache_227.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7E.woff2)
Source: chromecache_339.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Hind:wght
Source: chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_186.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbER2SjQpf.woff2)
Source: chromecache_186.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbERKSjQpf.woff2)
Source: chromecache_186.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbERySjQ.woff2)
Source: chromecache_186.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGd4BCOz.woff2)
Source: chromecache_186.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGh4BCOz.woff2)
Source: chromecache_186.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_350.2.dr	String found in binary or memory: https://google.com
Source: chromecache_350.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_334.2.dr	String found in binary or memory: https://hm.baidu.com
Source: chromecache_334.2.dr	String found in binary or memory: https://logx.optimizely.com/v1/events
Source: chromecache_225.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_336.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_256.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_218.2.dr, chromecache_350.2.dr, chromecache_260.2.dr, chromecache_344.2.dr, chromecache_336.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_244.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_334.2.dr	String found in binary or memory: https://player.vimeo.com
Source: chromecache_387.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_344.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=
Source: chromecache_244.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_373.2.dr	String found in binary or memory: https://recaptcha.net/recaptcha/api2/
Source: chromecache_334.2.dr	String found in binary or memory: https://res.wx.qq.com/open/js/jweixin-1.4.0.js
Source: chromecache_259.2.dr	String found in binary or memory: https://short.io
Source: chromecache_196.2.dr	String found in binary or memory: https://short.io/
Source: chromecache_344.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_350.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_260.2.dr, chromecache_336.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_260.2.dr, chromecache_336.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_244.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_387.2.dr	String found in binary or memory: https://tally.so/
Source: chromecache_218.2.dr, chromecache_350.2.dr, chromecache_260.2.dr, chromecache_344.2.dr, chromecache_336.2.dr, chromecache_256.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_256.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bjs
Source: chromecache_256.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bts
Source: chromecache_256.2.dr	String found in binary or memory: https://td.doubleclick.net/td/buyer.wasm
Source: chromecache_256.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j733924421
Source: chromecache_256.2.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=138174409564
Source: chromecache_256.2.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=158892927526
Source: chromecache_196.2.dr	String found in binary or memory: https://twitter.com/short_io
Source: chromecache_387.2.dr	String found in binary or memory: https://vimeo.com/
Source: chromecache_387.2.dr	String found in binary or memory: https://vimeo.com/album/
Source: chromecache_387.2.dr	String found in binary or memory: https://vimeo.com/channels/
Source: chromecache_387.2.dr	String found in binary or memory: https://vimeo.com/groups/
Source: chromecache_387.2.dr	String found in binary or memory: https://vimeo.com/ondemand/
Source: chromecache_307.2.dr	String found in binary or memory: https://www.canva.com/help/get-in-touch/contact-support
Source: chromecache_334.2.dr	String found in binary or memory: https://www.canva.com/ko_kr/policies/mandatory-collection-notice
Source: chromecache_334.2.dr	String found in binary or memory: https://www.canva.com/ko_kr/policies/terms-of-use
Source: chromecache_350.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_336.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_360.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/784219015/?random
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_334.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=$
Source: chromecache_350.2.dr, chromecache_260.2.dr, chromecache_344.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_274.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=581167953&fst=1714711460816&cv=
Source: chromecache_310.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=99786785&fst=1714711459753&cv=1
Source: chromecache_336.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_334.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_311.2.dr, chromecache_244.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/WQcDpAcHn0sjM6ZiVkU8JwNH/recaptcha__.
Source: chromecache_296.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/WQcDpAcHn0sjM6ZiVkU8JwNH/recaptcha__en.js
Source: chromecache_354.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.intercert.com/customers/certification-verification
Source: chromecache_196.2.dr	String found in binary or memory: https://www.linkedin.com/company/short.cm
Source: chromecache_260.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_344.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_260.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_387.2.dr	String found in binary or memory: https://youtu.be/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.5:49754 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@24/393@135/42

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2552,i,2343868332596157846,7063458701623905572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5920 --field-trial-handle=2552,i,2343868332596157846,7063458701623905572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2552,i,2343868332596157846,7063458701623905572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5920 --field-trial-handle=2552,i,2343868332596157846,7063458701623905572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor	0%	Avira URL Cloud	safe
https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor	0%	Virustotal		Browse
https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
spdc-global.pbp.gysm.yahoodns.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
p.tvpixel.com	0%	Virustotal	Browse
short.io	0%	Virustotal	Browse
collectoru.us.tvsquared.com	0%	Virustotal	Browse
publickeyservice.msmt-1.aws.privacysandboxservices.com	0%	Virustotal	Browse
static.cloudflareinsights.com	0%	Virustotal	Browse
app.short.io	0%	Virustotal	Browse
collector-22324.us.tvsquared.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
recaptcha.net	0%	Virustotal	Browse
cname.short.io	0%	Virustotal	Browse
publickeyservice.aws.privacysandboxservices.com	0%	Virustotal	Browse
cdn.metadata.io	0%	Virustotal	Browse
sb.scorecardresearch.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://short.io/static/pumpkin-308a8ade7af387bedeca727644710baf.png	0%	Avira URL Cloud	safe
https://short.io/8235685ff385744a4e98baf37fa1220d2a52f68a-d2c6e11abf704479efde.js	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://short.io/styles.0f0d0189161b3d582858.css	0%	Avira URL Cloud	safe
https://short.io/static/Graphik-Regular-Web-d3151eef921a9fea9980627ea3af95b4.woff2	0%	Avira URL Cloud	safe
https://cdn.iframe.ly	0%	Avira URL Cloud	safe
https://short.io/static/support-background-5c8af4d33bb148d57a2ab16ae8132caa.png	0%	Avira URL Cloud	safe
https://www.intercert.com/customers/certification-verification	0%	Avira URL Cloud	safe
https://cdn.iframe.ly	0%	Virustotal		Browse
https://short.io/static/03-d26b079ea5970bce38a0e708d0cff905.svg	0%	Avira URL Cloud	safe
https://short.io/	0%	Avira URL Cloud	safe
https://short.io/framework-d8026fe3df59b77201cc.js	0%	Avira URL Cloud	safe
https://api-gw.metadata.io	0%	Avira URL Cloud	safe
https://feedback.short.io/changelog/custom-favicon	0%	Avira URL Cloud	safe
https://feedback.short.io/changelog/new-nameservers-for-purchased-domains	0%	Avira URL Cloud	safe
https://short.io/static/stats-a6d9e893096b5c669d8cc5160be1482e.svg	0%	Avira URL Cloud	safe
https://short.io/static/medium-03-459ab7b8d6ddab3db59a811ce69ca557.png	0%	Avira URL Cloud	safe
https://www.intercert.com/customers/certification-verification	0%	Virustotal		Browse
https://api-gw.metadata.io	0%	Virustotal		Browse
https://short.io/	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
static.cloudflareinsights.com	104.16.80.73	true	false	0%, Virustotal, Browse	unknown
cname.short.io	52.2.56.64	true	false	0%, Virustotal, Browse	unknown
p.tvpixel.com	75.2.57.54	true	false	0%, Virustotal, Browse	unknown
www.canva.com	104.16.102.112	true	false		high
cdn-iubenda.b-cdn.net	138.199.40.58	true	false		high
adservice.google.com	142.250.176.194	true	false		high
short.io	18.164.96.43	true	false	0%, Virustotal, Browse	unknown
recaptcha.net	142.251.40.131	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
collectoru.us.tvsquared.com	18.219.60.11	true	false	0%, Virustotal, Browse	unknown
spdc-global.pbp.gysm.yahoodns.net	50.17.194.92	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	142.251.16.157	true	false		high
d1w725hft9421a.cloudfront.net	13.35.93.63	true	false		high
ct.canva.com	216.239.32.21	true	false		high
script.hotjar.com	18.164.96.46	true	false		high
static.canva.com	104.16.102.112	true	false		high
media.canva.com	104.16.103.112	true	false		high
font-public.canva.com	104.16.103.112	true	false		high
www.google.com	142.251.40.196	true	false		high
nexus-websocket-a.intercom.io	35.174.127.31	true	false		high
hits-iubenda.b-cdn.net	138.199.40.58	true	false		high
d2te5kruq0pvbl.cloudfront.net	18.164.96.43	true	false		high
js.intercomcdn.com	108.139.47.46	true	false		high
static-cdn.hotjar.com	108.138.106.126	true	false		high
publickeyservice.msmt-1.aws.privacysandboxservices.com	13.35.93.76	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false		high
o13855.ingest.sentry.io	34.120.195.249	true	false		high
app.short.io	108.139.29.30	true	false	0%, Virustotal, Browse	unknown
profile.short.io	3.94.39.175	true	false		unknown
ad.doubleclick.net	142.251.35.166	true	false		high
widget.intercom.io	13.226.34.3	true	false		high
chunk-composing.canva.com	104.16.102.112	true	false		high
api-iam.intercom.io	52.22.196.150	true	false		high
sentry-relay.short.io	3.94.39.175	true	false		unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
telemetry.canva.com	104.16.102.112	true	false		high
googleads.g.doubleclick.net	142.250.65.226	true	false		high
sb.scorecardresearch.com	18.238.49.74	true	false	0%, Virustotal, Browse	unknown
analytics.google.com	142.250.80.78	true	false		high
td.doubleclick.net	142.250.80.2	true	false		high
cs-iubenda.b-cdn.net	138.199.40.58	true	false		high
media-private.canva.com	104.16.102.112	true	false		high
sp.analytics.yahoo.com	unknown	unknown	false		high
collector-22324.us.tvsquared.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cs.iubenda.com	unknown	unknown	false		high
sdk.iad-01.braze.com	unknown	unknown	false		high
link.childedocushare.site	unknown	unknown	false		unknown
publickeyservice.aws.privacysandboxservices.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
static.hotjar.com	unknown	unknown	false		high
cdn.metadata.io	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.iubenda.com	unknown	unknown	false		high
hits-i.iubenda.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.canva.com/web/b8de9bd12fba5246.runtime.js	false		high
https://short.io/static/pumpkin-308a8ade7af387bedeca727644710baf.png	false	Avira URL Cloud: safe	unknown
https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png	false		high
https://link.childedocushare.site/WOo1se&design=DAGEBBzq9KM&accessRole=viewer&linkSource=document	false		unknown
https://short.io/8235685ff385744a4e98baf37fa1220d2a52f68a-d2c6e11abf704479efde.js	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://short.io/styles.0f0d0189161b3d582858.css	false	Avira URL Cloud: safe	unknown
https://static.canva.com/static/images/favicon-1.ico	false		high
https://hits-i.iubenda.com/write?db=hits1	false		high
https://static.canva.com/web/84e6389ec6a6ae32.js	false		high
https://short.io/static/Graphik-Regular-Web-d3151eef921a9fea9980627ea3af95b4.woff2	false	Avira URL Cloud: safe	unknown
https://cdn.iubenda.com/cookie_solution/iubenda_cs/1.60.0/core-en.js	false		high
https://short.io/static/support-background-5c8af4d33bb148d57a2ab16ae8132caa.png	false	Avira URL Cloud: safe	unknown
https://short.io/static/03-d26b079ea5970bce38a0e708d0cff905.svg	false	Avira URL Cloud: safe	unknown
https://static.canva.com/web/e113aa3e935a6b0d.vendor.js	false		high
https://www.canva.com/_ajax/ae/createBatch	false		high
https://www.google.com/pagead/1p-conversion/804757079/?random=453093911&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&tiba=Canva%20Design&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20267%3Bevent_id%3D1714712356152_171471202556267%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_doctype_id%3DTAGAkMpLE1g%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1&uip=191.96.227.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIIl8GxAgiYwbECIgEBQAFKJ3RyaWdnZXIsIGV2ZW50LXNvdXJjZTtuYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CI796dOknpHTMCITCPyVhfzV8IUDFTUNaAgdWSwCFjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSGwB7FLtqtmHmhgRlzWvJMtjGClMcgRxMXO8c7w&eitems=ChEI8PPMsQYQ8_GcgbTNvdD8ARIdAHjCH3R4LFFU2HMSo6MeY-dRhCSjqOvosAHnnpw&random=4193458467	false		high
https://static.canva.com/web/images/b46630e470f4040eba7033cf2435edce.woff	false		high
https://short.io/framework-d8026fe3df59b77201cc.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13r3r3n3n5&rnd=2024227052.1714711509&url=https%3A%2F%2Fshort.io%2F&dma=0&npa=0&gtm=45He4510n71KRWKR2v72734998za200&auid=1019735161.1714711509	false		high
https://api-iam.intercom.io/messenger/web/ping	false		high
https://www.canva.com/_ajax/reaction/config/DAGEBBzq9KM?documentExtension=jvjE01qRbaOyWhWyDOHDeg	false		high
https://chunk-composing.canva.com/chunk-batch/c9da08c886dcc2fd.ltr.css+40f0ce866d9a0621.ltr.css	false		high
https://widget.intercom.io/widget/rmf95u7h	false		high
https://static.canva.com/web/3f6d75465bef692f.js	false		high
https://static.canva.com/web/bc6d536e475100e2.vendor.js	false		high
https://static.canva.com/web/af8d419008ac4515.runtime.js	false		high
https://chunk-composing.canva.com/chunk-batch/118052af16110a6a.ltr.css+bbb36937bb9b2d18.ltr.css+f78d925eed25c026.ltr.css+0b904b0a14653f4e.ltr.css+77072c60218aa8fb.ltr.css+c58cd64d3a3f686a.ltr.css+44120d0e86f58fdd.ltr.css+0361d809f049c847.ltr.css+70f83d7290d33057.ltr.css	false		high
https://cdn.iubenda.com/cs/iubenda_cs.js	false		high
https://chunk-composing.canva.com/chunk-batch/8b0efce4dcfa662a.ltr.css+edb83b7fb0f55858.ltr.css+7579b1ef84cb4721.ltr.css+600ca02efe4b30d9.ltr.css+31f53896cc2c323b.ltr.css+c462f102b34f80f4.ltr.css	false		high
https://static.canva.com/web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg	false		high
https://static.canva.com/web/3c8e57c2a7031e58.ltr.css	false		high
https://static.canva.com/web/9794b708e04ecac0.js	false		high
https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor?	false		high
https://a.nel.cloudflare.com/report/v4?s=fbt03sJUB0MakZ4szsH38FZwFvY6Hb8DsRHNkFDc%2BTm3JoHLJGC0Cq5H4g2M1RRggN3UiAK0xtLbcZU4GB1KUp2bdxJRizJhwKxqo6%2FKNmB2FgZpikIinFRN6LfKwfc%3D	false		high
https://short.io/static/stats-a6d9e893096b5c669d8cc5160be1482e.svg	false	Avira URL Cloud: safe	unknown
https://short.io/static/medium-03-459ab7b8d6ddab3db59a811ce69ca557.png	false	Avira URL Cloud: safe	unknown
https://telemetry.canva.com/v1/traces	false		high
https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556235&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=19399&richsstsse	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://font-public.canva.com/_fb/0/17.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/31.woff)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/04.woff)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/71.woff)	chromecache_227.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_311.2.dr, chromecache_244.2.dr	false		high
https://font-public.canva.com/_fb/0/02.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/2E.ttf)	chromecache_227.2.dr	false		high
https://support.google.com/recaptcha	chromecache_244.2.dr	false		high
https://cdn.iframe.ly	chromecache_387.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://font-public.canva.com/_fb/0/76.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/0B.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/61.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/28.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/7E-quadratic.woff)	chromecache_227.2.dr	false		high
https://www.intercert.com/customers/certification-verification	chromecache_354.2.dr, chromecache_294.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://font-public.canva.com/_fb/0/31.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/24.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/2D.woff2)	chromecache_227.2.dr	false		high
https://px.ads.linkedin.com/collect/?pid=	chromecache_344.2.dr	false		high
https://font-public.canva.com/_fb/0/4C.woff2)	chromecache_227.2.dr	false		high
https://short.io/	chromecache_196.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://font-public.canva.com/_fb/0/47.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/6F.woff)	chromecache_227.2.dr	false		high
https://api-gw.metadata.io	chromecache_365.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://font-public.canva.com/_fb/0/3D.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/02.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/17.woff)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/60.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/47.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/39.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/09.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/6F.ttf)	chromecache_227.2.dr	false		high
http://youtu.be/	chromecache_387.2.dr	false		high
https://font-public.canva.com/_fb/0/26.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/76.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/31.woff2)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/32.woff2)	chromecache_227.2.dr	false		high
https://vimeo.com/album/	chromecache_387.2.dr	false		high
https://font-public.canva.com/_fb/0/27.ttf)	chromecache_227.2.dr	false		high
https://cloud.google.com/contact	chromecache_311.2.dr, chromecache_244.2.dr	false		high
https://youtu.be/	chromecache_387.2.dr	false		high
https://td.doubleclick.net/td/update?ig_name=1j733924421	chromecache_256.2.dr	false		high
https://font-public.canva.com/_fb/0/23.woff)	chromecache_227.2.dr	false		high
https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/1b96dc175117e75c.vendor.js.map	chromecache_334.2.dr	false		high
https://font-public.canva.com/_fb/0/2D.woff)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/60.woff)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/09.woff2)	chromecache_227.2.dr	false		high
https://github.com/getsentry/sentry-javascript	chromecache_224.2.dr	false		high
https://codesandbox.io/	chromecache_387.2.dr	false		high
https://font-public.canva.com/_fb/0/55.woff)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/56.ttf)	chromecache_227.2.dr	false		high
https://feedback.short.io/changelog/custom-favicon	chromecache_354.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://feedback.short.io/changelog/new-nameservers-for-purchased-domains	chromecache_354.2.dr, chromecache_294.2.dr	false	Avira URL Cloud: safe	unknown
https://font-public.canva.com/_fb/0/16.otf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/3C.ttf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/0A.woff2)	chromecache_227.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_311.2.dr, chromecache_244.2.dr	false		high
https://font-public.canva.com/_fb/0/17.otf)	chromecache_227.2.dr	false		high
https://font-public.canva.com/_fb/0/76.woff)	chromecache_227.2.dr	false		high
https://static.hotjar.com/c/hotjar-	chromecache_350.2.dr	false		high
https://b.bdstatic.com/searchbox/icms/searchbox/js/swan-2.0.21.js	chromecache_334.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.35.93.76	publickeyservice.msmt-1.aws.privacysandboxservices.com	United States	16509	AMAZON-02US	false
138.199.40.58	cdn-iubenda.b-cdn.net	European Union	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
108.139.47.46	js.intercomcdn.com	United States	16509	AMAZON-02US	false
35.174.127.31	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
18.238.49.74	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
104.16.102.112	www.canva.com	United States	13335	CLOUDFLARENETUS	false
52.22.196.150	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
142.250.80.2	td.doubleclick.net	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.65.198	unknown	United States	15169	GOOGLEUS	false
52.2.56.64	cname.short.io	United States	14618	AMAZON-AESUS	false
142.250.80.36	unknown	United States	15169	GOOGLEUS	false
13.35.93.63	d1w725hft9421a.cloudfront.net	United States	16509	AMAZON-02US	false
3.94.39.175	profile.short.io	United States	14618	AMAZON-AESUS	false
142.250.80.78	analytics.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.164.96.43	short.io	United States	3	MIT-GATEWAYSUS	false
108.138.106.126	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
18.219.60.11	collectoru.us.tvsquared.com	United States	16509	AMAZON-02US	false
142.251.41.4	unknown	United States	15169	GOOGLEUS	false
18.164.96.46	script.hotjar.com	United States	3	MIT-GATEWAYSUS	false
13.226.34.3	widget.intercom.io	United States	16509	AMAZON-02US	false
142.251.40.227	unknown	United States	15169	GOOGLEUS	false
142.251.16.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.40.230	unknown	United States	15169	GOOGLEUS	false
216.239.34.21	unknown	United States	15169	GOOGLEUS	false
18.164.96.95	unknown	United States	3	MIT-GATEWAYSUS	false
142.251.32.98	unknown	United States	15169	GOOGLEUS	false
142.251.40.196	www.google.com	United States	15169	GOOGLEUS	false
54.235.206.80	unknown	United States	14618	AMAZON-AESUS	false
216.239.32.21	ct.canva.com	United States	15169	GOOGLEUS	false
104.16.103.112	media.canva.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.162	unknown	United States	15169	GOOGLEUS	false
108.139.29.30	app.short.io	United States	16509	AMAZON-02US	false
142.251.35.166	ad.doubleclick.net	United States	15169	GOOGLEUS	false
75.2.57.54	p.tvpixel.com	United States	16509	AMAZON-02US	false
50.17.194.92	spdc-global.pbp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
142.250.65.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.120.195.249	o13855.ingest.sentry.io	United States	15169	GOOGLEUS	false
142.250.176.194	adservice.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1435785
Start date and time:	2024-05-03 06:43:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@24/393@135/42
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://link.childedocushare.site/WOo1se&design=DAGEBBzq9KM&accessRole=viewer&linkSource=document Browse: http://short.io/?utm_source=link_not_found

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.195, 142.251.41.14, 172.253.122.84, 34.104.35.123, 142.250.80.72, 172.253.115.84, 199.232.210.172, 13.85.23.86, 142.251.167.84, 192.229.211.108, 20.166.126.56, 142.251.35.162, 172.64.148.181, 104.18.39.75, 23.206.121.28, 23.206.121.39, 52.165.164.15, 142.250.80.99, 142.251.40.234, 142.251.40.194, 142.251.32.104, 142.250.176.195, 142.250.80.67, 142.251.40.202, 142.250.81.234, 142.251.32.106, 142.250.176.202, 142.250.65.170, 142.250.65.202, 142.250.72.106, 142.251.41.10, 142.250.64.74, 142.251.35.170, 142.251.40.106, 142.251.40.170, 172.217.165.138, 142.250.65.234, 142.251.40.138, 142.250.65.238, 142.251.40.131, 142.250.80.3, 13.107.21.237, 204.79.197.237, 72.21.81.240, 142.250.81.238, 104.102.251.89, 104.102.251.17
Excluded domains from analysis (whitelisted): www.googleadservices.com, bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, bat.bing.com, hlb.apr-52dd2-0.edgecastdns.net, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, dual-a-0034.a-msedge.net, clients.l.google.com, sdk.iad-01.br
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 3 03:43:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9818981540986207
Encrypted:	false
SSDEEP:	48:8XdNTVJ5H1idAKZdA19ehwiZUklqehsJy+3:8X/1BJy
MD5:	73EF18949328F204AB71387E3A527A7C
SHA1:	75E600AE83C5605056F256A65B2E816C8C0BDF27
SHA-256:	5D7ECA1CBFED0FC74F44DBBD0D75B6770B125952EEA27C6773A9311E7901CBB0
SHA-512:	485A4C5A9B277D7A5CDD1329286C2547C7F047D385AD263BCF4AF810DB98DF1DD648420F3AF4F1A468630CC468ACE8D41EAFC0D51B0173ED89E7D61992C97A59
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....[J.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xz%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xz%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xz%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xz%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;m=q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 3 03:43:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9934990910099386
Encrypted:	false
SSDEEP:	48:8/dNTVJ5H1idAKZdA1weh/iZUkAQkqehxJy+2:8P/v9Q+Jy
MD5:	4E8F45395D8D5DBDF5D4498463BE1D51
SHA1:	9033F47F01D74C44061DF9BD3181A3A87346534C
SHA-256:	7303A15F8F6C6A2B422ECFDE82C45402979A802F79B8126EEE050DD661CA6863
SHA-512:	98DB14EA6E80F21F0D39B0B55F6B7AD27C4CB1C836BA7E933F7D722426D9804DB8CFB6AAFDFCDF9A1DE2D3BA48130C586E3260F34F33CF721DF7A78B6E738D76
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......?.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xz%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xz%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xz%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xz%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;m=q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006401528077781
Encrypted:	false
SSDEEP:	48:8xadNTVJsH1idAKZdA14tseh7sFiZUkmgqeh7srJy+BX:8xg/cndJy
MD5:	DFB9E5D29A6D46BE33E7E5795A2338A8
SHA1:	85478B978791D57FA418630526D9A013A41FD7D1
SHA-256:	5819BF6504706ED869424B23267650BBF28815799C556B15621B0F80F485F65D
SHA-512:	CA9695AE6CE0397D002297B1AF8B5FFC4A84774F65DC3E39C1D68DF4F9925C2F495EC7CF7B3C598E00C79C2B578024C4521AD3D3177732590BFB9B53848BB003
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xz%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xz%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xz%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xz%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;m=q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 3 03:43:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.996253075331719
Encrypted:	false
SSDEEP:	48:8FdNTVJ5H1idAKZdA1vehDiZUkwqeh1Jy+R:8V/MjJy
MD5:	756AF9C1A5BE8FBFBFAAB53B6AD7CBE5
SHA1:	3680CA8B61CAD6E8999D088491EC5795B7736F2B
SHA-256:	29C4758B2597A7D3F2C839082B6FC19FE1F74BDEE309B98A4477A7B56D4820B8
SHA-512:	0B5F3E0067FE168157C413C8B4A5CF4380DE17E025B3962DBD9E2939C92A95968FBE91580848B2F83368CE7314111902719F45B2E9B5B1EE1385D8E59B2B4B31
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xz%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xz%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xz%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xz%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;m=q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 3 03:43:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9810921105165535
Encrypted:	false
SSDEEP:	48:8TdNTVJ5H1idAKZdA1hehBiZUk1W1qehnJy+C:8r/89HJy
MD5:	DF9A573DB3CD8558ACD20A84C21D7423
SHA1:	4020B8F4AFE31FB0845FCAF1BD41082ACBA594DE
SHA-256:	8E6B0372BE5678B58D389474F24DF2952C433C759616D284670842D696DAB5B0
SHA-512:	CA7330801553EFEA75F6C40F6ABA49DC0F509D64AC460AF0369B523BCEE1A0EA4D7AE3CEC72391CE2871F674CD4D3811D893DD7349EE5B75B569C2F368318C42
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....:E.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xz%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xz%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xz%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xz%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;m=q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri May 3 03:43:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9925346190584996
Encrypted:	false
SSDEEP:	48:8HdNTVJ5H1idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdJy+yT+:8H/ST/TbxWOvTbdJy7T
MD5:	15FE92AA596D3C152933F8B975AD8F8E
SHA1:	88C336F61EC676874E234BB973BA3A483672A8A0
SHA-256:	148CFB865A770468868FC8C3973A9E3831811C773B86A7B16355CD571B4D3073
SHA-512:	D7316A65DB4371F89C5D722D8D52A720520EC59BAB8A13849CEC14C8BF1B67EDB73D8AB3B6F131C2F7034CBB2302D3A6DBECF4718A2F8ADCD5702A9D3009219D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xz%....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xz%....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xz%....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xz%..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.%...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........;m=q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2216
Entropy (8bit):	5.379962251664108
Encrypted:	false
SSDEEP:	48:MOEaUohOEaUoaRVc+uiOEaUoYN0oBeOXacOXaoTRVc+uiOXabN0oD:MOEazOEaAVc+uiOEaeNMOXacOXaiVc+h
MD5:	FC6CF2DA6DCE65F0ACE52B1A52F1381E
SHA1:	82B17CFA16FBAEF0741B32CA5672DADBF2E471EA
SHA-256:	7BB3A1A797F64F7E2D1A26556BA3FE707CD8724F3C8AB15559FB9A0B971AC702
SHA-512:	6876DBEF4B9787B332B244447C20696F25F168CA2A7EFA83A8D4E476B24FD4C712DD88073147089F7C3DED687C4E85826A021D8C551787A2D28E4BDFCFDEE93D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Hind:wght@400;500&display=swap
Preview:	/* devanagari /.@font-face {. font-family: 'Hind';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGh4BCOz.woff2) format('woff2');. unicode-range: U+0900-097F, U+1CD0-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B09;.}./ latin-ext /.@font-face {. font-family: 'Hind';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGd4BCOz.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Hind';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	9157
Entropy (8bit):	5.998919923419676
Encrypted:	false
SSDEEP:	192:A/Jv4Wi1Tk3Q4WTlNUgJghCO2w6T6NBgaAjOCa7TDNTgbk3/tBNXnBlf8sT2+wLN:MJue/WpwCO76GNG8fsk31BNXnBlfZqjJ
MD5:	F07FAB8DD745B1734872E85E1992EC6E
SHA1:	9670BFD17B2C63E586895A4B4CE0108EC4A39781
SHA-256:	D6A98FBA694586D0CE69EA7B7B22F5ECCC47F214D2759F06AD826B02AD3E0383
SHA-512:	4D4061FEC8B4623F88E2FAAD85D87CF23C7D2D8F67DD4A606A05C469F575446145366C8D4469FA7053E8CCE482EE221F3105F6F55825483EE2DDCF9C93A089C5
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/sq/d/1242162299.json
Preview:	{"data":{"medium_01":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,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

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11213)
Category:	downloaded
Size (bytes):	11303
Entropy (8bit):	5.357691239882856
Encrypted:	false
SSDEEP:	192:C+CmA43Cfcv7CPNvLUVm5SpsiPY2IU0A7W7z38mw+wj+WrU7Wb+BaozrzNeretHf:C+Cmn3CkvmhLUVm53iPQUg7KGa4TJCpe
MD5:	528D00B48BCC8E695A5BDF6BFE0AA29E
SHA1:	A9B3A8A81A145BE874B81CE15FFC2D226B4687FF
SHA-256:	98EAE396AA073DBC5F96C1916E643145B7DB9364F895036CF67AA64952AACB10
SHA-512:	9EDAC32A852FCFE26D61945D024114324A73EC99CC18E3C8ADFE62BF10394C72F580A54B9EACCB47441103118FDEB8EE9ED07D6F8C1D2F9253E8E88FF198DE67
Malicious:	false
Reputation:	low
URL:	https://short.io/a88f938da5de181922832d50f06213eec0b7550e-ec2257cdde6a79943bb5.js
Preview:	"use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[945],{2729:function(e){const t=/[\p{Lu}]/u,a=/[\p{Ll}]/u,r=/^[\p{Lu}](?![\p{Lu}])/gu,s=/([\p{Alpha}\p{N}_]\|$)/u,n=/[_.\- ]+/,i=new RegExp("^"+n.source),l=new RegExp(n.source+s.source,"gu"),o=new RegExp("\\d+"+s.source,"gu"),c=(e,s)=>{if("string"!=typeof e&&!Array.isArray(e))throw new TypeError("Expected the input to be `string \| string[]`");if(s={pascalCase:!1,preserveConsecutiveUppercase:!1,...s},0===(e=Array.isArray(e)?e.map((e=>e.trim())).filter((e=>e.length)).join("-"):e.trim()).length)return"";const n=!1===s.locale?e=>e.toLowerCase():e=>e.toLocaleLowerCase(s.locale),c=!1===s.locale?e=>e.toUpperCase():e=>e.toLocaleUpperCase(s.locale);if(1===e.length)return s.pascalCase?c(e):n(e);return e!==n(e)&&(e=((e,r,s)=>{let n=!1,i=!1,l=!1;for(let o=0;o<e.length;o++){const c=e[o];n&&t.test(c)?(e=e.slice(0,o)+"-"+e.slice(o),n=!1,l=i,i=!0,o++):i&&l&&a.test(c)?(e=e.slice(0,o-1)+"-"+e.slice(o-1),l=i,i=!1,n=!0):(n=r(c)===

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1268)
Category:	downloaded
Size (bytes):	2762
Entropy (8bit):	5.53019216157366
Encrypted:	false
SSDEEP:	48:AOAeK0AyD7yIC0MGbUvn5Gbrt+WFvqtEYNTDC6286iEKERmfwaEE+VyK:xZLXAvi/FCtEYZDv21iERRmeT7
MD5:	AB33D00F3B8159D9D4ED8237F6BE4491
SHA1:	5DD214BB1B212802274569615CEE606412128B9F
SHA-256:	1996102B47DE87D6F3FFCE3DDA79A4ECC2E0C088B356DED7BB52CC8B90E83395
SHA-512:	588BBD9C6817A74B36CD74C0EDF5A88F9BD563A9239796CB7A32093D742ADD40BC7324810D79F5192B5DE91A6DE6FFBF2FE323D410DB0B99132E600331613251
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/3f6d75465bef692f.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1587],{../***/ 708358:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var Wta,Xta,Yta;__c.Mr=function(a,b){const c=[],d=[];let e=0;for(const f of a)b(f,e)?c.push(f):d.push(f),e++;return[c,d]};Wta=function(){var a=window;a.addEventListener("dragstart",b=>{null!=b.target&&(b.target instanceof a.HTMLElement&&!1===b.target.draggable\|\|b.target instanceof a.SVGElement)&&(b.preventDefault(),b.stopPropagation())},!0)};__c.Nr=function(a,b,c){c=!!c&&c.yya;const d=new Map;for(const e of a){a=b(e);if(c&&null==a)continue;const f=d.get(a);f?f.push(e):d.set(a,[e])}return d};.__c.Or=function(a,b){return b?[...__c.Nr(a,b).values()].map(c=>c[0]):[...(new Set(a))]};Xta=function(a){return(b,c,d,e)=>{d/=e;return 0===d?b:1===d?c:b+(

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 493458
Category:	downloaded
Size (bytes):	150799
Entropy (8bit):	7.998173297503546
Encrypted:	true
SSDEEP:	3072:vYrOhBH6u8nTTU6u5cnuHBSeVD1K9Mf12kF5+YPgei/v16zW:wrHucHUb5jBtVA9O2o5+UgH/EzW
MD5:	B27B573E6B04DAED0B4144A6E206BA93
SHA1:	026B3BC8B3F967D7096191718F9B999C06A090AF
SHA-256:	70371467412BCA4624E5589F75D4A2BB10581E6C4C9CE9F2520AC9DA5A60DECF
SHA-512:	E1787EE13F039FA01B01EF018B70FF38C5BC179EF3AEEA19E013C4DFD308D628FE9BDF91AD9B5BD47489BA1C061E68DFC9A03BA10CE28534516DB2FEFF9C4756
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendor-modern.07772018.js
Preview:	...........i{.8.(....6'.!#Z..2...T.v.gb...**=..I,S.BR^.....9X..r......X.....8...oo....0..(e[A4.....q.....Q)c[.,..dw..,......N.}..#m..x}....g[...?s..#/...i......l...Q.q<......Z..Vs.Lgf...........c2;.#.}.h,.oY..3.{9......&A.>&.%....p.......a?.z.9.........<>.o.Xv.....O;.-...1b..p..a...V.qP...3#...^..A'.B.N..........=.^.^.X...2..HS.Y.lg'l..I......d..Zc..}..N...=vey>z.:n........ ...1.W...Ys<..0g/3.......e.$.t"k.]....+j.8..<=q..z]...U..z.0...`..d....u....g...V......^E...Q...e....9...k..8Y3].Af..&.....z...\|i..o....Z`VL.>...0..y..V+c..F...\|.E.hv..3...;2Rb........B."<......Q...&.....s..y>.K.b..Y.p.B@.8y....f.!..^..y...5.Q...V.e.x..8.._..c.JNlS.2kNY.2...-3f...-.@c..AX.a.g....a.....@......5......Y....s%M.V.5q.A.1\Nar-sl.i..c...E.(.ys.U....c..........K....K. .0wNd.3..`6.......S...p<;..1..._;]0.?@....R.l.Y....)...<.E.....I...&.C.._...h.b...&C...W.m7.n1..J~.3.....8K....Q.r... .$!2K..X.F........h.jJ.H..P#0..........\....).@..".1......C.v.N

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7048)
Category:	downloaded
Size (bytes):	7112
Entropy (8bit):	5.318188958516741
Encrypted:	false
SSDEEP:	192:P49M5bM/yLD1sV5iDg5dFGQYYq63b8RJ4YdqVx01YyIZW:Q9uBsPKg5dFGQjwJ4YMx02M
MD5:	259BC5517C21ABA0D160FF9C454CBFF4
SHA1:	3C780B44B4C623276C3345E85DECAC0E58891674
SHA-256:	9DD9683F01DA1CF42156079FE919F4893B83BF4C30E375DE1FF5A1B6A13C0F79
SHA-512:	5C7E658B45C4F6EA63F35881C40C63D64732919C3938BF13ED1F5A13BEE83A6704159C0848985685B8631CDD717515B8D2DFD2763EAA635D4FE8563FFB4E651A
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/af8d419008ac4515.runtime.js
Preview:	(()=>{"use strict";var e,t,r,n,o,i={},s={};function l(e){var t=s[e];if(void 0!==t)return t.exports;var r=s[e]={exports:{}};return i[e](r,r.exports,l),r.exports}l.m=i,e=[],l.O=(t,r,n,o)=>{if(!r){var i=1/0;for(f=0;f<e.length;f++){for(var[r,n,o]=e[f],s=!0,a=0;a<r.length;a++)if((!1&o\|\|i>=o)&&Object.keys(l.O).every((e=>l.O[e](r[a]))))r.splice(a--,1);else if(s=!1,o<i)i=o;if(s){e.splice(f--,1);var c=n();if(void 0!==c)t=c}}return t}else{o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[r,n,o]}},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,l.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var o=Object.create(null);l.r(o);var i={};t=t\|\|[null,r({}),r([]),r(r)];for(var s=2&n&&e;"object"==typeof s&&!~t.indexOf(s);s=r(s))Object.getOwnPropertyNames(s).forEach((t=>i[t]=()=>e[t]));return i.default=()=>e,l.d(o,i),o},l.d=(e,t)=>{for(var r in t)if(l.o(t,r)&&!l.o(e,r))Ob

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	177595
Entropy (8bit):	5.584252234055507
Encrypted:	false
SSDEEP:	3072:QJ/006VNEYoM6i4fxWghbsqlKI5Z6xqZ6in6Z6UqZ6zqDTvEb:QJM9uZFlKIyOnYvqXcb
MD5:	F254D98D25CC2724127BB13F73F67ECA
SHA1:	621DE8CA7AD206C29F1062CE9EC8175A0C390C49
SHA-256:	43DF5241D7929EB406204917F677F2B94FBD3FD74B87BE0CB453D08240FC4F55
SHA-512:	0E6C9C6323A253270ED93B4E016A2699BB75902C34AE0E6BE0BF6D835D1748875C4FDE19FDBEE656A61A36A254ABCCDB023D15E900810DA2BA8F09EBA9CB10D8
Malicious:	false
Reputation:	low
URL:	https://short.io/8235685ff385744a4e98baf37fa1220d2a52f68a-d2c6e11abf704479efde.js
Preview:	"use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[208],{8880:function(L,M,j){j.d(M,{P:function(){return I}});var u=j(6540);const I=L=>{const M=(0,u.useRef)(),{0:j,1:I}=(0,u.useState)(!1);return(0,u.useEffect)((()=>{if(void 0!==window.IntersectionObserver){const j=new window.IntersectionObserver((L=>{L.forEach(((L,M)=>{L.isIntersecting&&I(!0)}))}),L);return j.observe(M.current),()=>{M.current&&j.unobserve(M.current)}}I(!0)}),[M.current]),[M,j]}},5712:function(L,M,j){var u=j(4310),I=j(3714),A=j(6540),S=j(2389);M.A=L=>{let{faqList:M}=L;const{t:j}=(0,S.Bd)(["common"]);return A.createElement("div",{className:"faq"},A.createElement("div",{className:"faq__header"},A.createElement("h2",{className:"heading-2"},j("faq")),A.createElement(I.A,{href:"https://help.short.io/",outlined:!0,target:"_blank"},j("visit-help-center"))),M.map(((L,M)=>A.createElement("details",{className:"issue",key:"issue-"+M},A.createElement("summary",null,A.createElement("div",{className:"issue_

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63832)
Category:	downloaded
Size (bytes):	591216
Entropy (8bit):	5.726682267577848
Encrypted:	false
SSDEEP:	3072:aw9530myWGBTCBm/5/Ee30C30oiL82638J7Jc5/F592qyLyDusEBfaJlXwTLgq53:fLylBuwFiL826sx6jryLyDhJGTLgy
MD5:	D60962C96179FCA039C1FDFB61840E2E
SHA1:	FC9993E59AEDA8D8950E97A7FF87A9F6005FA73D
SHA-256:	89C8D0181A3C7A4166517AC987FC21BE236135F7AA82B02CAE088B4B4F142631
SHA-512:	9813C6020659F2B9CB8CEA89B897945C585AB8BF5D22E427C6B1428A1C184118A31C81F6A449FFBD273F7DA48B6507EE250936813415EADB2722074ABE03028C
Malicious:	false
Reputation:	low
URL:	https://short.io/styles.0f0d0189161b3d582858.css
Preview:	.notFoundWrapper{align-items:center;box-sizing:border-box;display:flex;flex-direction:column;height:calc(100vh - 6.875vw);justify-content:space-between;min-height:600px;padding-bottom:3%}@media screen and (max-width:1025px) and (max-aspect-ratio:1/1){.notFoundWrapper{height:100vh;padding-bottom:13%}}.notFoundWrapper__illustration{margin-top:2%;max-width:600px;width:70vh}@media screen and (max-width:1025px) and (max-aspect-ratio:1/1){.notFoundWrapper__illustration{margin-top:12%;max-width:auto;width:60vh}}@media screen and (max-width:500px) and (max-aspect-ratio:1/1){.notFoundWrapper__illustration{margin-top:25%;width:45vh}}.notFoundWrapper__heading{font-size:2.58333em}.notFoundWrapper__text{color:rgba(var(--text-main),.7);line-height:1.7em;margin-bottom:3%;text-align:center;width:30%}@media screen and (max-width:1025px) and (max-aspect-ratio:1/1){.notFoundWrapper__text{width:50%}}@media screen and (max-width:500px) and (max-aspect-ratio:1/1){.notFoundWrapper__text{width:70%}}.notFoundW

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7296)
Category:	downloaded
Size (bytes):	7359
Entropy (8bit):	5.6066895264281476
Encrypted:	false
SSDEEP:	96:+iwKRQZ2WWBK7351QcpzOpoNf9CU6K09e7xJzBbWK09e7xJDk3/p2p:nCWAD96XU6K0o7xLbWK0o7xVk3s
MD5:	3C0F2193830453BA8E90A81DBBB30915
SHA1:	5FB6D98AA70A8D1EAC2C82B515493BE760BDC1B5
SHA-256:	F2B88C7DA696AC177EF9165CB65F1C172BE3D65AB1DC462EBF4DF165EB076173
SHA-512:	7D631A4DE84342F464B0DA49A6E35242339EE16D7F2ECFC3F8C026A7ECC441861B141A0B520529DED5C0C01D15D0FF6D0469AAE507CDB73A3E9566E50E320738
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b3a01de3e1e9ec62.ltr.css
Preview:	.vix9iA{box-sizing:border-box;cursor:pointer;height:28px;position:relative}.light{--Usv7DA:rgba(57,76,96,.15);--eTLUaw:#0d1216;--Xaxk4Q:rgba(28,39,48,.5)}.dark{--Usv7DA:hsla(0,0%,100%,.4);--eTLUaw:#fff;--Xaxk4Q:hsla(0,0%,100%,.7)}.u6jFfQ{align-items:center;display:flex;height:6px;justify-content:center;width:100%}.V0Ppog{background-clip:content-box;height:4px;overflow:hidden;position:relative;width:100%}.V0Ppog._8b8dVg{border-end-start-radius:2px;border-start-start-radius:2px}.V0Ppog.nMKb2A{border-end-end-radius:2px;border-start-end-radius:2px}.V0Ppog.QBbv0w:not(._8b8dVg):not(.nMKb2A){transform:scaleY(1.5)}.V0Ppog.CIzZAA{transition-property:transform}.V0Ppog.CIzZAA:not(._8b8dVg):not(.nMKb2A){transition-duration:.2s}.ejMelA{background-color:var(--Usv7DA)}._gaU1Q{background-color:var(--eTLUaw)}.r2ugFQ{background-color:var(--Xaxk4Q)}.FsepDA,.MgUg1g,.nh_lvw{box-sizing:border-box;height:100%;position:absolute;transform-origin:left top;transition-duration:0ms;transition-property:transform;wi

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	5.40625
Encrypted:	false
SSDEEP:	3:Il5ZraKZ7BN2vFDS3tkWyG6U:I3ZeKh2vxSft
MD5:	72CCA37A082E434E692310C2A122F6C1
SHA1:	91C67556A5CBE7C0E2E6AD7FF0DA8D714183079E
SHA-256:	B1E7A8B15DF18465B40078A9D70CCB73FE29C362AB3580C41D6F740897849763
SHA-512:	979DD12D1C41179C9A33C6FCE9B9AE5DC9280E2F4B9575B64F6CBEE638A61D14567A60FA9449D7A6ECA8741FCA502CB776C51CCDB5099081821DCD069EC40446
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/200_190_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9pbmkway9NQUdFQkVpbmkway8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAHRtDJvT4iVHw-xk1cPTFzL_AKPah711V_ojCRfXlk8W&exp=1714728782&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAHGrLooAC_luHub6PE2uoo57xdsg8PXRO3LxkbO0hXKD
Preview:	RIFF8...WEBPVP8L+.../.@/..0.[.`..d..:...`4...R.iN..".?.t...{.u..

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	177189
Entropy (8bit):	5.985772824534891
Encrypted:	false
SSDEEP:	3072:N/z9rJoL/GIDV/R06VlhxiDuFSKDXDPGY4vhj2fKRj9xyZ5LC:N/z9VwuIDV5ttDXhHShqC
MD5:	5695C59059FCC0F5D747AEF98CD8B6F9
SHA1:	2E70E3FCC9BCAD932AC3C9CFAE609E2B57CBD37B
SHA-256:	E82B0BAC8CC49CE06DD7B060AF44D39271100F1E2B2A49E32A462788D1873CD4
SHA-512:	B8BE5C0995BB16200A5FC25CB3916258973FA73BCFC78B666992259C43E8300655BC5BC61AFB6F5200BE11F77B05E47CC79499C8C47F34C651DE07E0696277C9
Malicious:	false
Reputation:	low
URL:	https://short.io/?utm_source=link_not_found
Preview:	<!DOCTYPE html><html lang=""><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><meta name="generator" content="Gatsby 5.13.4"/><meta name="theme-color" content="#7CECC5"/><meta name="keywords" content="shortener, domain, url, link" data-gatsby-head="true"/><meta name="og:title" content="Short.io . White label URL Shortener. Create your own short branded URLs" data-gatsby-head="true"/><meta name="description" content="Short.io makes short links (vanity urls) on your own domain. Free signup, analytics and API. Chrome, slack, zapier and segment integrations." data-gatsby-head="true"/><link data-identity="gatsby-global-css" href="/styles.0f0d0189161b3d582858.css" rel="stylesheet" type="text/css"/><link rel="canonical" href="https://short.io/" data-baseprotocol="https:" data-basehost="short.io"/><link rel="sitemap" type="application/xml" href="/sitemap-index.xml"/><style

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkTSmrPBQtHixIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	23058
Entropy (8bit):	4.119573243551898
Encrypted:	false
SSDEEP:	384:fxJ2+1t1tioOjAA69AfgE+0NZT1OEgOyOX87NjuNfspU9tMm+w7Qp/PJrOKIf:JA+j11s4948uT9Ww+OKe
MD5:	EF413F85AA86D0D4EB9A7D18298D51D6
SHA1:	55191ECB0F29611376B189100A47D774B547E0D9
SHA-256:	E4B94F06A144347CE221311BC522F3521AF238E05DED5ECB5E2DE188601E4CDA
SHA-512:	CBC9B43ECB23EDA3512616AB7E3444D06C5DFC529E92482F168F3E57D6E8457B4F6B61104139B2A15C81152416B86F0F51B3F06B2D8DD991F9F8DD98CE85A92D
Malicious:	false
Reputation:	low
URL:	https://short.io/static/stats-a6d9e893096b5c669d8cc5160be1482e.svg
Preview:	<svg width="717" height="486" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x=".8" y=".8" width="715.5" height="484.5" rx="15.3" fill="#fff" stroke="#F2F2F2" stroke-width="1.5"/><path d="M.8 16C.8 7.6 7.5.7 16 .7h685c8.4 0 15.3 6.9 15.3 15.3v23.3H.8V16z" fill="#fff" stroke="#F2F2F2" stroke-width="1.5"/><path fill-rule="evenodd" clip-rule="evenodd" d="M35.5 26a5.5 5.5 0 100-11 5.5 5.5 0 000 11z" fill="#F86D6D"/><path fill-rule="evenodd" clip-rule="evenodd" d="M54.5 26a5.5 5.5 0 100-11 5.5 5.5 0 000 11z" fill="#FFE300"/><path fill-rule="evenodd" clip-rule="evenodd" d="M73.5 26a5.5 5.5 0 100-11 5.5 5.5 0 000 11z" fill="#0BB07D"/><path d="M254.8 95.3c4.1 0 6.6-2.5 6.6-5.5 0-3.6-2.1-4.7-6.3-5.2-2.6-.4-3.2-1-3.2-2.2 0-1.2.9-2 2.6-2 1.7 0 2.6.8 2.8 2.3h3.6c-.3-3.4-2.5-5.1-6.4-5.1-3.8 0-6.3 2.2-6.3 5.1 0 3.3 1.8 4.6 6.2 5.2 2.6.4 3.3.9 3.3 2.3 0 1.3-1.1 2.2-2.9 2.2-2.5 0-3.1-1.2-3.3-2.8h-3.7c.2 3.5 2.3 5.7 7 5.7zm13.7 0c1 0 1.6-.2 2-.4v-2.7c-.3.2-.7.3-1.2.3-1 0-1.4-.5-1.4-1.5v-6h2.6v-2.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4106), with no line terminators
Category:	downloaded
Size (bytes):	4106
Entropy (8bit):	5.207561448585658
Encrypted:	false
SSDEEP:	96:rcvrN+rfTjR9TqnwNgP55mktd48HGOCGVV:rrfTm+8HGMVV
MD5:	771301D6E75571F43D758FFA70361E03
SHA1:	5C170120A70AD30F7A312AB0A3258A987D3223DF
SHA-256:	60F3978FD96DB4F213D594E2C6B6AD6811F6EF809988C09A0050C7957B681DBC
SHA-512:	1D2655177E17D9753873DF23590DC0A844324732EF10A40D17180322DE00AAED0850451E7B985A68526721AEA3DF4AAD9EAB58939852EE232AF142DF8A8DBA45
Malicious:	false
Reputation:	low
URL:	https://cdn.iubenda.com/cs/ccpa/stub.js
Preview:	!function(n){var e={};function t(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return n[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}t.m=n,t.c=e,t.d=function(n,e,r){t.o(n,e)\|\|Object.defineProperty(n,e,{configurable:!1,enumerable:!0,get:r})},t.n=function(n){var e=n&&n.__esModule?function(){return n.default}:function(){return n};return t.d(e,"a",e),e},t.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},t.p="",t(t.s=0)}([function(n,e,t){"use strict";var r,i=t(1),o=(r=i)&&r.__esModule?r:{default:r},a=t(2);var c=new o.default;!function n(){if(!window.frames.__uspapiLocator)if(document.body){var e=document.createElement("iframe");e.style.cssText="display:none",e.name="__uspapiLocator",document.body.appendChild(e)}else setTimeout(n,5)}();window.__uspapi=new function(n){if(n.__uspapi)try{if(n.__uspapi("__uspapi"))return n.__uspapi;n.__uspapi()\|\|[]}catch(e){return n.__uspapi}return function(n){try{return{getUSPData:function(n,e){if("function"==typeof e){if

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	16592
Entropy (8bit):	6.01487583544344
Encrypted:	false
SSDEEP:	384:X4K8My/3kgaS5CBp4gTTYKnSVNC6HHU4CAOxSLvQZ6OyXivrvIY4:ooS3O6o40nS3C6HHU4CLxSLky4zf4
MD5:	E81C2512783B9E63B6B8F41F952688B1
SHA1:	C32E4E21BCC14D9CAEE23AFEC09B071D3D27275F
SHA-256:	22FD60518472C232A645CEB4A3A5AE6088A3BDA6D8E690EFA05968A24AADFA38
SHA-512:	99E40C50F94F2D15FED83D0DB70868CF52A485AA0E99B37C9EE7A9E8FE495AFDEEB5CA1E70BC5C87AFD137CB3BB653D46E571A454203C150B1DC580E04FC4A9D
Malicious:	false
Reputation:	low
URL:	https://short.io/static/universal-music-group-4923aecff27e9e6bc93fcea741271061.svg
Preview:	<svg width="220" height="120" viewBox="0 0 220 120" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="10" y="14" width="203" height="90">.<rect x="10.3516" y="14" width="202.216" height="89.7687" fill="url(#pattern0)"/>.</mask>.<g mask="url(#mask0)">.<rect x="-0.0429688" y="-1.1189" width="217.335" height="119.062" fill="#2E2E2E"/>.</g>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0" transform="translate(0 -0.000584803) scale(0.00222222 0.00500585)"/>.</pattern>.<image id="image0" width="450" height="200" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAcIAAADICAYAAAB79OGXAAAgAElEQVR4Ae2dB/Q9RXmG39gbNiyoiGhEFMSeqGiMYCGo2BK7ImrshCixlwioRI1dUewl9l4wdrH3LvYW7FhQpNhNzkN2cJj/zOzs3rb3d985554td+qzu/NN+eYbyc4ETMAETMAETMAETMAETMAETMAETMAETMAETMAETMAETMAEZiZwNkmXlnQNSTeWdGdJB0s6XNJzJL1e0vslHSPpx5K+L+mzkt4p6b8kPVn

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1404
Entropy (8bit):	4.114328576097192
Encrypted:	false
SSDEEP:	24:t414ffo3Q0QIvvdznG0UezpigqybgrKrPO20hLMXlr9NkOf/qd0mdz9w/zAI:CH3Q0dvRG0zvBMOr10mx9m8vUAb
MD5:	ABA10B640F15BB01B8E5F0B804EEFC7F
SHA1:	65D1EDB21B0F31D4CCB9703EB05132A0E42D093D
SHA-256:	6A21FCEDE3E9D5593CF90C894BC059A94BBAE8D5D22ED0AC5511A1327F276881
SHA-512:	FDC916824C065944D02B7956BE310F01B9A56562BBB1510C345EDC925EA6CE478D235B5348AD140028CFA4F483BF1E947533CB83176A9F44DC13353A938329DF
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFDB5E" d="M34.956 17.916c0-.503-.12-.975-.321-1.404-1.341-4.326-7.619-4.01-16.549-4.221-1.493-.035-.639-1.798-.115-5.668.341-2.517-1.282-6.382-4.01-6.382-4.498 0-.171 3.548-4.148 12.322-2.125 4.688-6.875 2.062-6.875 6.771v10.719c0 1.833.18 3.595 2.758 3.885C8.195 34.219 7.633 36 11.238 36h18.044a3.337 3.337 0 0 0 3.333-3.334c0-.762-.267-1.456-.698-2.018 1.02-.571 1.72-1.649 1.72-2.899 0-.76-.266-1.454-.696-2.015 1.023-.57 1.725-1.649 1.725-2.901 0-.909-.368-1.733-.961-2.336a3.311 3.311 0 0 0 1.251-2.581z"/><path fill="#EE9547" d="M23.02 21.249h8.604c1.17 0 2.268-.626 2.866-1.633a.876.876 0 0 0-1.506-.892 1.588 1.588 0 0 1-1.361.775h-8.81c-.873 0-1.583-.71-1.583-1.583s.71-1.583 1.583-1.583H28.7a.875.875 0 0 0 0-1.75h-5.888a3.337 3.337 0 0 0-3.333 3.333c0 1.025.475 1.932 1.205 2.544a3.32 3.32 0 0 0-.998 2.373c0 1.028.478 1.938 1.212 2.549a3.318 3.318 0 0 0 .419 5.08 3.305 3.305 0 0 0-.852 2.204 3.337 3.337 0 0 0 3.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 712x189, components 3
Category:	dropped
Size (bytes):	11394
Entropy (8bit):	7.905207832080022
Encrypted:	false
SSDEEP:	192:fcxYdKfSpe1iPB344f5TMoSSM2AAhuHFfpAYAyWZhdkPOBrwPSX5/6R:fZc68iJ44hIbTvQAFfRYdkPOBkKlK
MD5:	688FD50D14EA400D5FEECDF43FDA31E6
SHA1:	252BCCED7A60703A6F8DB135D439675D88B4FC18
SHA-256:	721A3D6386E48EFB6BDC7B944CE5620029A1915B291F58BA0E306F570762D4EC
SHA-512:	6E508567EE5DA780573543ADFE103038558C00B0A1C208BF3B54565D56F333387F3CB0EE2F187701A2858BC91427D0102D6F31BDB7CF3D9F96D68963B2A8B7DD
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}..........."..........6....................................................................E.L..........................................................................b.F.N..'..m.k......!.......................A............}K...f.b.X.......j.s.wZF.....>c....C.~..}.}3].....zkD...c>\|L....U^......2.(...J..*q.4.....Bk..],.K...&..5.oDV.L[VC..C...J.~1W{...~........N.#..?~<.O.UE.jQtN.......J...#.~#Rh..:...@c.`.5....xf.v.......L.F.0..K..T...4.....~(..Z...(..F..8.1..........NSt]......;.........i..z-B.....:n...L..C...Bv....i........:........S..C.7....XC...?pJ.tp..;....5.q......W.UL..Ep).\.~......3..SG<...y>.3.-.'.......5$:....~...U.Xcsz.........9.......7.;>........\..r;.N.=7..^'.......[..M.u-......+....\._..sLx...5..............d..:..;[.=O...E^.W;.a.h\...+]..p..bO....C....u..i.\.....S.f....G...m.A...

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4511)
Category:	downloaded
Size (bytes):	4576
Entropy (8bit):	5.43224805936369
Encrypted:	false
SSDEEP:	96:EPw+EIqsACCtlZM8DuPrVc0VX6/cuA6aS0OpcQLz4:EMIpAZraDrHtoleSF5z4
MD5:	3A690C07527258ADDBBFDC3FC3B93CFE
SHA1:	952BC4696EEAAEB04879421B25963DCAADA53793
SHA-256:	99261BE9F68C8DB3F996F12223A115A881B99EE77F4212385A6D80A1D18910F9
SHA-512:	68A3BD7F9E3EF6FD3ECACAD4C5BACC2F2707598415A94AEEC2942B2A5CEC015DD390A04EFF772A7EFE05A90BF32A826A2A75A0B7E9BAFCB69D8E74A78876FCF7
Malicious:	false
Reputation:	low
URL:	https://short.io/webpack-runtime-b7cae2b65a67c6a710e2.js
Preview:	!function(){"use strict";var e,t,n,r,o,a={},c={};function f(e){var t=c[e];if(void 0!==t)return t.exports;var n=c[e]={exports:{}};return a[e].call(n.exports,n,n.exports,f),n.exports}f.m=a,f.amdO={},e=[],f.O=function(t,n,r,o){if(!n){var a=1/0;for(s=0;s<e.length;s++){n=e[s][0],r=e[s][1],o=e[s][2];for(var c=!0,i=0;i<n.length;i++)(!1&o\|\|a>=o)&&Object.keys(f.O).every((function(e){return f.O[e](n[i])}))?n.splice(i--,1):(c=!1,o<a&&(a=o));if(c){e.splice(s--,1);var u=r();void 0!==u&&(t=u)}}return t}o=o\|\|0;for(var s=e.length;s>0&&e[s-1][2]>o;s--)e[s]=e[s-1];e[s]=[n,r,o]},f.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return f.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},f.t=function(e,r){if(1&r&&(e=this(e)),8&r)return e;if("object"==typeof e&&e){if(4&r&&e.__esModule)return e;if(16&r&&"function"==typeof e.then)return e}var o=Object.create(null);f.r(o);var a={};t=t\|\|[null,n({}),n([]),n(n)]

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 705897
Category:	downloaded
Size (bytes):	166299
Entropy (8bit):	7.99719957204128
Encrypted:	true
SSDEEP:	3072:0C644QTQb2yL3KI7lOrBy8sJwssBSG+2axG5octgBkzFPnjm82bWkrArFBDbgWjh:0mm26f74DsJdsBSh24cKqnjm8urQDbV3
MD5:	D625DB79DB383FDAEF04243566C4AFCE
SHA1:	602DD72D8ACE3CAF67935FADFA7DBB2F8124AC80
SHA-256:	7F3046C46346778BB29417C58A123A51E6B192997660E5AA4315B84D5ECBC5C6
SHA-512:	50B47A9E4605FDEDDF18D54BA7B01EDB8797EEF02F480475CABF8665908D7669440708CAD92DC6BB4E34924EC613BD630668D9BFBE2780CA17233024F248E2CE
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendors~app~tooltips-modern.7e0e68e9.js
Preview:	............s.G./....../......6(H..)K6..D.n..N.(.e.(.P E............S.e[^..v..^...\|x......B..<=..>..k.U.Y...<..df.N..k........G..,Qrs. z.....$..G....(....z.C.E.,x}.n..K..W.x...kq...Ro\M.u/%N~$G.......39WZ.....3..#.j..+xd^r...\|..:Ka..8..c~.....g.Z..v....lf.Xe...c..).%.!...8.Y.>N...XdI..(...8.cf...S....z..ror.D....'J.$[..Yf!...A.>..y..j.<..G>\|d.-V....z....l<.G.K..,.`G...Ex..sg..h?N..v.{....g....$zyI..~.22x.M..w.&+....S.E.+..y.Y.../..B..[of..j...gT<.Y...7..K......{\..sH.W.tr2W...b...*.OG..9=?.b.......H4....B..$.......t.<.....kx}......3......R.]{...V....c..F;D..I..T...).d5.6=L4v..e.~...<..c.5N-..)>4_z.....e7sv...I...9x.d5.,zL..C...hSu.f...%..9.t.x.,X.,.PQOXE.Z(.6[..&W$....v5.?N.8.G........K..Ef............1.X........j.)..O6;,....\...^;..?...S.%.OM.z............d.<./CI.f.DG...9)...0...1=.&\|........=.T.%qn..1-)-...q.....w..uy....L......".e...v.fFJj..[i..n%......e..WsxG.-.l.0...... ..w!T.D..'..!...N.d..[N[)yW.>Yt..:....\|...>.......&.Y_=

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x53, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2244
Entropy (8bit):	7.909417771472215
Encrypted:	false
SSDEEP:	48:JTX6iC0XQW7fD3e/PbSwADWpq7WAbLbhCbGLCcEg+r5Vt81g:FXoUQqD3GPuwYWzAv1UYCxVtYg
MD5:	F8BEA5E2063286EABD3945C12E310F62
SHA1:	74A9E4B2833C8B420F114A6EAF35007B91B7F4B3
SHA-256:	B7E222AAC91CD463B27EDB0A5AB6FDEF9F6CA6CF6A157514026EBDE66EA3769E
SHA-512:	E9BF00D7AE9ED7F4DE8EEE81693FF056CC4E145D14155A54CE5AAB48B39BA3A935BB348E3C51EFCBD8365410DE9C10D5F44D21FBD34A8F2D3E3F53C70C2C62CC
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/200_53_75_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAB6daLSOMIMldyWCy4W8HA8OQDYBB1CM9WO_lTXa_UQd&exp=1714727913&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAABhv6lWY6En1hWe0SjUShCcYXN4KBGo_Fd_AjJojQYM2
Preview:	RIFF....WEBPVP8 .....&.....5.>I".D..!.[l.(....i..=g...;.........{...>.~....9.U......c.+.O....>..>...?....w.?...........R........Z...N.s.z ]..g.....;.....H..........\|$........n...9...o.....\|.~..b.......1..)L.0.Kw..[..........\|'$.....6=._L...>5>~A-z1..j.y....TT}2V.4w.,.4...2BC....b.$I,.9..&...h.Y.ElBfI_5'.....C..M....'.Q.....?.._..<;.....n..u.n..bkC..D..}NC..S`d..?t...o.W.:)..4...Y.Z.j%....o..L. z..[%...p.}.&.Mf.sQv?.a..<W. Q..._.j.A?...W..gB'#.^~.?..r._A.....z8\Z.1.8.4.%.G.x..--.......-.....'].O......k..b.3".)G......p.X.J..6..X(..0.R.........3/:.... .....M..X..E.\.0..x.....".jy.j....!qQ......u.&.m.....;..f/ .......$..{v.#.GGb..6.jc..@..c..M-o/."...!...d...(.c..].>7*.F...x.X.......G..yo.3u..&...n.y..}.#-..u.~.1..Q.`>.{..<.,...m.\|.n+.......C+.....,....\|.,o...o...9g....{)..H....k....x.iA.S7B...Xqv.g.c.Dx.\.9....Rf....k.j5..S...z.4.....%....Og.k..AW.L..H.)..]h4c...}..S.Q...8&.R..M.d0e..`.<.Q..,.`i.<...... 1..-.e.....r;d.........I.{...i.e...0.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	17027
Entropy (8bit):	4.084728111729181
Encrypted:	false
SSDEEP:	384:NHuiJzlY0c6+3oqXMf4M1w7o59r5KXVfw1h9:xuiNlY0QY1f4M1w7kafw1T
MD5:	ABFDF59AD570A2A5A76593BB9B90A997
SHA1:	CB241AD710FCF2E7726F3946ADEF32B5E61F2399
SHA-256:	BF8BF9B89F4A714D6ECFA64E1850246CB2A12A6FB7DC0328CED8F63252F88BF8
SHA-512:	63940E3E0CE32B087C5C4ED8F558359E976749A160ED3D27748F3439C7A852BEC9E6FB9347F740545D4F86D6A0182DF08545FA22969075348D13B313D9B970D5
Malicious:	false
Reputation:	low
Preview:	<svg width="260" height="120" viewBox="0 0 260 120" fill="none" xmlns="http://www.w3.org/2000/svg">.<mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="15" y="31" width="50" height="62">.<path d="M15 31H64.1183V92.7462H15V31Z" fill="#2E2E2E"/>.</mask>.<g mask="url(#mask0)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M59.5285 72.0783C56.932 73.2136 54.8181 59.3761 58.0093 60.2178C63.3042 63.1941 62.3844 69.8169 59.5285 72.0783ZM56.7679 80.9032C53.7147 85.0732 49.5815 85.2356 48.0419 84.0742C46.4315 82.5791 47.6608 77.937 49.8682 75.3919V75.3911C52.3941 72.5836 55.0944 70.7507 56.9757 72.183C58.2419 73.4249 58.9847 78.1025 56.7679 80.9032ZM46.844 75.7501C46.8646 79.3258 43.6878 82.24 39.7485 82.2589C35.8093 82.2776 32.5988 79.3942 32.578 75.8183C32.578 75.7956 32.578 75.7729 32.578 75.7501C32.5574 72.1743 35.734 69.2601 39.6735 69.2413C43.6128 69.2225 46.8232 72.1059 46.844 75.6819C46.844 75.7047 46.844 75.7272 46.844 75.7501ZM39.7426 90.821C36.1995 90.9714 32.7255 87.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65311)
Category:	downloaded
Size (bytes):	419791
Entropy (8bit):	5.414224804517785
Encrypted:	false
SSDEEP:	12288:WkmwnouJA7UMCK3imf9Wdp5ZFyTvcGrYzqZh+TscGLruDmg2/ho1b:WsnouJAr73FVWdp5ZFyTvcGrYzqZh+T1
MD5:	FB1D64BBA87E75A7BFC4FA3E0E8F6790
SHA1:	500FD0D3F556EE2FDCBE1DA016519D28B6B94EDC
SHA-256:	04EE288FEC158463F7B85F01AF6359EBD765619ADC3100B735DAA67074D6027A
SHA-512:	6E802D35DD6822A769F170F4E2A56BC5BEA6FE05FB5D950B8E34C41639BACAEE5D03B589723845FAD9BA9E1FA7030634F74FAA4E118DA4B9CC1844DF78C3813F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b6298cf502cc13d0.vendor.js
Preview:	/! For license information please see b6298cf502cc13d0.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{710665:(e,t,n)=>{!function(){var e="undefined"!=typeof window?window:n.g,r={};for(var i in function(e,t,n){var r;function a(e){var t=0;return function(){return t<e.length?{done:!1,value:e[t++]}:{done:!0}}}var o="function"==typeof Object.defineProperties?Object.defineProperty:function(e,t,n){return e==Array.prototype\|\|e==Object.prototype\|\|(e[t]=n.value),e};var s=function(n){n=["object"==typeof globalThis&&globalThis,n,"object"==typeof e&&e,"object"==typeof self&&self,"object"==typeof t&&t];for(var r=0;r<n.length;++r){var i=n[r];if(i&&i.Math==Math)return i}throw Error("Cannot find global object")}(this);function u(e,t){if(t)e:{var n=s;e=e.split(".");for(var r=0;r<e.length-1;r++){var i=e[r];if(!(i in n))break e;n=n[i]}(t=t(r=n[e=e[e.length-1]]))!=r&&null!=t&&o(n,e,{configurable:!0,writable:!0,value:t})}}function c(e){return(e={next:e}

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8284
Entropy (8bit):	5.9681841621215295
Encrypted:	false
SSDEEP:	192:kevkK8c4TOKTENAgbGDXnanVTOZTDNzjcmgYf14zL3TsNfgYjL2ix7HmTPNf:vkDp6KAF8XanVyZvVyYmH3A/m4zm7V
MD5:	51CAE38233BB30689C1E9A394482AFD2
SHA1:	5156E138FCC4B89E712093CC4D8741A9FB424990
SHA-256:	E0801CE616DA831A7D87C0BDC2C2786C01DB05E77B95E57E00FA60B8EBA84420
SHA-512:	6CC46C95637AE05E2BFE14E6B705E60AAAA65FA7A9C3194A9DFC21B106E2453D47CEF80694E43D9DC0AC56D47FC1AAB78B1B640012754BE0144741CCC3B86068
Malicious:	false
Reputation:	low
Preview:	{"data":{"medium_05":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,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

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	8284
Entropy (8bit):	5.9681841621215295
Encrypted:	false
SSDEEP:	192:kevkK8c4TOKTENAgbGDXnanVTOZTDNzjcmgYf14zL3TsNfgYjL2ix7HmTPNf:vkDp6KAF8XanVyZvVyYmH3A/m4zm7V
MD5:	51CAE38233BB30689C1E9A394482AFD2
SHA1:	5156E138FCC4B89E712093CC4D8741A9FB424990
SHA-256:	E0801CE616DA831A7D87C0BDC2C2786C01DB05E77B95E57E00FA60B8EBA84420
SHA-512:	6CC46C95637AE05E2BFE14E6B705E60AAAA65FA7A9C3194A9DFC21B106E2453D47CEF80694E43D9DC0AC56D47FC1AAB78B1B640012754BE0144741CCC3B86068
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/sq/d/2562819187.json
Preview:	{"data":{"medium_05":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,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

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1714711456187&gtmcb=1280289369
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4561
Entropy (8bit):	5.992061922573055
Encrypted:	false
SSDEEP:	96:RASs5VN+fq/YiWTVQNnJgN+bsJSPAh/+NVP/jhMGT37Nnv:RArN+SZWT+NJgsbbAhmPdMGTrNv
MD5:	994223FBE1736D1226AD4C882E2CA486
SHA1:	55C458A0DB6EC12D58CD9AE6CF87AAC013A123AC
SHA-256:	CAB946382FD1864E2D702CD2AB8FD37F738740EA46D11859A42CC12F39908C67
SHA-512:	C12610A5E84962D9A387D4206A5F8704B63E1D69A3CDB6802FBA918DFD2B00688D7648974DC4D736F0D7A891E5A6012CED0712E0971A28499DDFF077BE2DF54B
Malicious:	false
Reputation:	low
Preview:	{"data":{"review":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC30lEQVR42o2UXUgUURTHN40eoqKnoPeIIAj6eKu3ngqK6DF66CVRQbGQgkBMAk0zE0x8KCNjpSCjKB8SLKIgs7DC1tx1vzR39tt1Z2d2d2Z2Zv6dO96B2VW3Dvw4c+/c+7/nnJlzXa4Kg8u1xVXFANQQVdeUmVB3dLvU13IQqnyYNjYSzcQlgo23OYSri6K9vYZ52d3bWnj7NGEYumQCOm0kZ1me8BJDxP6qoiwN7puM2BJKywENekmjcYljcGFbPKfr2vUNBWmylvtzpmmyiJiQjo3N5AcwrxBnnAE5RbcTs3xTCZuqrQWYK6QMIeeFoSsTNNy5Ln0anOXH64auQxZXkJVESJJkkZdlFPIyRDFLXsFSZt78Hn4JTVdYNjcTicSOMlF6uMWD0JOxOHy/pjEX8GLB50MwEEAoFILX74fH40EsFltbCN2uaZo4WZY6PYzbgoIgQNM0a6AoCoqqCpV8yudBgSJ/ODyMTCbDEzKYoEp0V9ZwxC5TPB6HlJNRLKpQ5BzmPn3BamQZv0e74P84hs7uHmRWVqzFBhnfN1RZwwH+whCzOYT/vEMiPY3Fn/N4cLUD6aVFfBsfxI/Pr3Dnbh9UVXF+dWYLxB6nYIedcjqZwmzgCYTV9wjNzOFF132I0QgmZsbwwT+F/r57lKjhFGTqHmK3U/AExc9qYcSjCdMffIYkCYqLUUwOPEYk6MeI5zVGp96gp/N25d/ECi4Rx8rqSOVg/xTErKj39rah9Vo9WhqacaW+EW1tN9DU2ozLDXVwu912/WzBIhEh9lW23RH

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1460
Entropy (8bit):	7.855589557149132
Encrypted:	false
SSDEEP:	24:sLLrL2FzN+5BOMn5HV28GOOwehYQUmlguRYqZu5PrGMxgFth048:vnmBvjGOHehYjmzRYqZqCMxW/048
MD5:	4BDDED76DF54BE0F2D025DF0BA3BA0DC
SHA1:	6960CCA6D9D2A03AF1A0A592034608EF0D16FE5E
SHA-256:	C6ADA4A4DF72852DF29E377C109110D4E067F866D32E6595261383802A807AA4
SHA-512:	B85EA2DA0D07481C5ACB0935BC02A9825CDD8630879D4A024064F3C95A6EB5689318D6A518D4653B00F31093EEAE48725D82007A33E7E2C7BF977290BAFDBD50
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/395_96_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAGHbvX3xneW7SjcGPwRyf6_pp2Citdqk7T-79AamUlok&exp=1714727649&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAKAHhCl6skExOp6e0a73StuXf5NL8aE0ulbOhjloKTh5
Preview:	RIFF....WEBPVP8L..../........$Euw.L....Z.l.Fr....../.~..m.{...+.F......g..0....o............s..0.C.....u....C7..\.P...g....M.N.>...P.a...H.$aJ..F....d?.8A._.?.R.V..&2H..i$c...la..{...n....2..\|D...$.m......$...].m.....W..nW....}...7.ro.........\|~H..._..O..[.&.v..6h.v.\|.........Vho...l.n.~).}}.!.g.....H.........1.a.+W.BVE...M(63.Xk.{..,p5E.F...p.6...t..+.Rr.?..U..Q...]O..W..7X...ng.....>.`{...Ng..'.....%{utQb.&....Ox.1...F..I...=r......#......P..sX.jj. 75K}.....m>q. xR...nA.m25.C.lG.R.C$.....}e.a$..u...E"d....(.nnXR....O....E....1DR.....:R.3.d.A$..........9....e..2!...w...C$...\|..n.0.......O.#..4m..]b.8..QL.....v@.....2..C$y.&..H]M.@z....]).....Z...G!.........KH.fmB7.....y....).!...A....'.5.\|Y.r...A..K...wcH...4/.....\..G..,.b.q.. .[<.jN.+0.3. ..9..a.]Vh.v...:r..418....c9.Y.Mg4......n.9...`..F.&`<6."."..L...7.6...&.%d.-^bY./ ....S.....#...i.8 .2..ER1!.G.I..t....C.h.?.z....D....lZ......2I..\|....C$...5a..g..q......*T..x&...o..v..I.....M.^..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=437237257
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 912 x 684, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	236198
Entropy (8bit):	7.992506458973602
Encrypted:	true
SSDEEP:	3072:6cFVtIV7/UbJAwSGuXjga2Pvu6QFlT4wEPjAWkljNj4Gd1Zw2K779vdU/rp18qUc:6cFVt1JZSGQjxchQRWjAdJVPZkhsPU+p
MD5:	BF335FB11417EFEC74606BEFD718A6D2
SHA1:	7C73F1799870FE8987F8D26C042DA81F665B4B46
SHA-256:	62DA973101A9B664A82B254A428A2A7E49FDE8BAB4D84B8A38F6A48DD23481B0
SHA-512:	C823E891ED00D4533833E648B71BF9BD084875F1E8B3599A3C74208510291FAE69ED2DA81CDA68DE2B7736BFDF893208F756DC67B5043D5FAEBD57ED55CE50B8
Malicious:	false
Reputation:	low
URL:	https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png
Preview:	.PNG........IHDR...............RF....pHYs...%...%.IR$.....sRGB.........gAMA......a....;IDATx...`.....]1.d[..b.....4i.....1m..S../7m.m..I9..C..I..2H..V.0.33+.e.Q.}.......hw.}.9..@..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5520
Entropy (8bit):	6.042428565262267
Encrypted:	false
SSDEEP:	96:PKVqn9Zce1grS1o/tNdTJPJFYNnEgPhd8ZE7HpoK8KWbXleb/1Od+TvONni:PKVg9Zce1ge1oFNdTJPnYNEgP0ykb1ez
MD5:	DC8DA8469EA1D2F70D8BE3B24A997C05
SHA1:	9D7860B753F52C51935505ACA245BC34A28CAB38
SHA-256:	EEE2EFDDE1A05AEA5CE4EE826AE0D8995891A1D77A12E7920322E9168FA92C3A
SHA-512:	23A0483233914A6149FA0E03EB9D11438E650D1F308B624A41376D387A64622862097E8DEEAAB71391161D367911DBCE83B9D87CA83243E6A6992C4CCD7F607A
Malicious:	false
Reputation:	low
Preview:	{"data":{"support_worker":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,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

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	231367
Entropy (8bit):	5.54313817896336
Encrypted:	false
SSDEEP:	3072:EPFn0/VPLu0h2OeH+y8Hkth1FytS50Bc2dO5shZ6yjRAO5GbBwlY28Hh:GF6rgO0lGm0Z6yjRV5czB
MD5:	6F67E8221F07DFB288EB4CF9D8D9B512
SHA1:	B9340FD4C8793CE0FCC9410771A2DE2FF023E171
SHA-256:	5E2C0EB44790E3826C67836F3CE4C1D0764343CB4C9F37A249AC8D4B63005A5D
SHA-512:	7F9EFB7780DC87EB19139159C6B50639A6F2BCD48705C307A1471989BB54511C7C71E447B72333A623F4B5508D1E561ACC15F16CCD6789104282522FD400A8F5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-784219015&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-784219015","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	4.998202692196443
Encrypted:	false
SSDEEP:	6:YGKosrWuHUVS1q8/fLHVO3DY1sFz21cXN3BzOHw:YGKYIUo/zYzZz21Y3pOHw
MD5:	FDE4FBFD11F6612E9A52C5C8B1B10D4F
SHA1:	B60AA591E0EFDE57EE79B5A4EED55BE3EB8B72F6
SHA-256:	FAA87C20D1913A699261761940F0ACC837E6C36AC946696F2002FC67BD2F318E
SHA-512:	546E12DF3EAB502F8401887CFDA7B3D0A30615921A2A815B51A11D703738A8A4F72734A0B1BB744CCDBD02E1E4B96E0712CC313B3DD74D95125692448890053A
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/features/page-data.json
Preview:	{"componentChunkName":"component---src-pages-features-tsx","path":"/features","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/features"}},"staticQueryHashes":["1805888702","3151116981","3501022147","4110422116"],"slicesMap":{}}

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	260
Entropy (8bit):	5.03921729096162
Encrypted:	false
SSDEEP:	6:YGKosrWE2sVSH2/fLHVO3DYH1fFz0wItDp6o3pz9w:YGKYan/zYzwz720o3l9w
MD5:	715C482ABA6D0FA6B9F48D94D5BDE4B8
SHA1:	FF278D2007693515363DDACCFF97BCC0AF7A9500
SHA-256:	A1C74C9326B24EF58C79CDEDD50C9BFEDA3E0DF03B2EC3AF04335A2F85AB1ACA
SHA-512:	96B2F7D9867A9A98B18913D87FE012A4718632206B9DDF07E1ADEDE2F44D316E38D7EBFE288DA2C9F13C5E09DCB5E62D2628E6581869AA9F22AEFE91D14DFAC3
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/index/page-data.json
Preview:	{"componentChunkName":"component---src-pages-index-tsx","path":"/","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/"}},"staticQueryHashes":["1242162299","1467288770","2048126111","2385355646","2562819187"],"slicesMap":{}}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14814
Entropy (8bit):	3.745233244863634
Encrypted:	false
SSDEEP:	384:I+nXl/fnziQh5iR1E8d7M6B8/KeuctRTDw+4Abg+wL63cd0ZBQR39cSA9:ntOUFucDfw+n1Dcd0DQB9Y9
MD5:	F460A00BFCA1A5F0ADBA0870CB4985FD
SHA1:	7E1F44403F5CC06D79B26902B41DBFEC35B3B837
SHA-256:	B97C2B9F086E1231263740D946556017F57B84E420B9F7907D9ECCF7A23EB0F1
SHA-512:	266DB133B12FCA8C26C6ECB03EFB2771A4ADC36259B25A2F05F8A681338DB722696E988B625596C32399DB20CDA5D8A9AD2273ECEAB7CA3B212F1A77CFF5B509
Malicious:	false
Reputation:	low
URL:	https://short.io/static/stats-15e710f22b373350ce9729f5fb4b2383.svg
Preview:	<svg width="34" height="34" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M3.2 19.6H3c-.6.4-.8.3-1 .3H2v-.2-.2c.2-.1.3-.2.3-.4l.5-.4H3l.6-.7c.7-.7 1.2-1.2 1.9-1.3l.1-.2.3-.3.5-.5 2.8-2.3.7-.4.5-.5c.2 0 .3-.2.3-.3l.2-.2.6-.4v-.1-.3l.2-.2.1-.2.4-.3h.2l.4-.4.7.3.3.2h.1l.3.3.3.3h.1l.4.3h.1l1 .4.5.3h.1a5 5 0 001.7.9c.5.2.8.3 1 .7h.2c.5-.4.5-.5.5-.6h.1l.1-.1 1.2-1.1a9 9 0 012.2-2.6c.5-.6 1.1-1.1 1.8-1.6.4-.5.8-1 1-1.5l.9-.7.4-.3.2-.2V5l.1-.1.1-.1.2-.3h-.1v-.1l-1.3.2-.6.1a1 1 0 01-.3 0l-.2-1.3h2l.5-.1v-.1h.4l1.8-.2-.1.8c-.4.3-.2.8-.2 1v1.3l-.1 1v.1H30v.1h-.6v-.1h-.1l.1-1.3V5c-.2.5-.6.8-1 1v.2l-.4.5-.4.7-.3.2c-.4.5-.8.9-1.3 1.2l.1-.2-.6 1-.2.2v.2c-.5.3-.9.7-1.2 1.1l-1.3 1.2-.4.7-.1.2-.7.6-.8.9-.7.7c-.2 0-.3-.2-.5-.3-.4-.2-.9-.4-1.2-.8l-.4-.1-.1-.1V14h-.1c-.5-.2-.9-.3-1-.5l-.5-.1-.1-.2a26.6 26.6 0 01-1.2-.7l-.8-.2-.2-.1-.3-.2-.2-.2h-.3v-.1l-.1.1-.2.1h-.1c-.6.3-1 .7-1.4 1l-.9.6-.4.4a.1.1 0 01-.2.2h-.1l-.1.2a16.9 16.9 0 01-2.2 2l-.1.1c-.6.6-1 1-1.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (472)
Category:	downloaded
Size (bytes):	531
Entropy (8bit):	4.910076603867888
Encrypted:	false
SSDEEP:	12:m1l1fX1sHcXd+1NOH4CEQ4MtieUQo45u74VirV4cCuUjo4CAf4h:yrdmcXd6NOH4lQ42ieUQo4c74ViR4Z0H
MD5:	C853C150ABA81C8AA188623B263F83AB
SHA1:	B4355BC47DF8BB29832A7D162AE4843FDF36AA7D
SHA-256:	D366A095654B610C7908AF82ED0627A55DC12A4AB308DD6F2E9F5F2E49332201
SHA-512:	B47B3DDF5FDF9F4E4F6A4A5BB159ECCC4520762BCBB46738D2C581374822D755EE6C102A833DA9A0A713C0C6E9B627BC9A1E2B00EB5A38CBCF34E1BBEA7DFFCE
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/fcd7f69ec08e4999.en.js
Preview:	window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};.window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"4799":{"js":["ccfc93f09f159cf4.strings.js"],"css":[]},"6037":{"js":["6c0ea36590d49674.strings.js"],"css":[]},"7049":{"js":["d1e0e8b7a7dcaf4c.strings.js"],"css":[]},"8146":{"js":["6f50888fcddc9770.strings.js"],"css":[]},"8248":{"js":["cc24037a755de754.strings.js"],"css":[]},"8881":{"js":["ab6a3e2e8cac7ce6.strings.js"],"css":[]}});

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28488)
Category:	downloaded
Size (bytes):	28551
Entropy (8bit):	5.543325838712491
Encrypted:	false
SSDEEP:	384:1WXCm/ZB2IocyNScw56VQmQn5LQNru35sNnpUCYl4S:Zi65Qn5EY35sNnp9Y1
MD5:	BAF5E9094966312C29D3B86FF83C625B
SHA1:	4511125508C8977EE26A611EC056E58C81A82802
SHA-256:	25C684CE5E0A2ED8670DA07C12D732836F21E855C9DEA9919B231A92E5032C1A
SHA-512:	D6524C91663E3624188384D2A87B0613016B517E6EC23010C06E37473B9703371816DAF9FC32F7594C6843CFA89071E5F3E7DA36BD3BBE60188427822A350CF2
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/2a50bb2d56bddf16.ltr.css
Preview:	.QpwWmA{height:100%;left:0;overflow:hidden;position:absolute;top:0;width:100%}.E2PFKw{animation-fill-mode:forwards;animation-name:_5Wn9Ig;opacity:0}@keyframes _5Wn9Ig{to{opacity:1}}.J3ejgA{overflow-x:auto}.KCCYFA{display:block}@media print{.KCCYFA{position:absolute}}.GOCM1Q{height:100%;left:0;position:absolute;top:0;width:100%}.RlPnoQ{cursor:auto}._0r0u9w{display:block}.W7fxeA,._1chiqA,.bMISeQ{fill:#0d1216;stroke:hsla(0,0%,100%,.3);stroke-width:2px;paint-order:stroke}.Rt1H_w{background-color:hsla(0,0%,71%,.22);height:100%;left:0;top:0;width:100%}.Rt1H_w,._5sVuA{position:absolute}._5sVuA{left:50%;top:50%;transform:translate(-50%,-50%)}.S3wQqg{height:100%;opacity:0;transition:opacity .15s ease-in-out;width:100%}._8YzbFQ{opacity:1}.W9j_bQ iframe{pointer-events:none}.S3wQqg iframe{border:none;color-scheme:none}.iJd_7g{display:block;left:0;top:0}.hVT_uA,.iJd_7g{height:100%;position:absolute;width:100%}.hVT_uA{opacity:1;transition:opacity .15s ease-in-out}.puUQCw{opacity:0;pointer-events:non

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55289)
Category:	downloaded
Size (bytes):	55418
Entropy (8bit):	5.2011745666689
Encrypted:	false
SSDEEP:	768:7Snb/BBuuGki0usgH8bdwB005NLqrbcSb4sA7CctFzBmBv4L7HelSWVoz8WlqdLZ:70q8berM2bW6X49yWx1ZSDh/33s
MD5:	16E5D529039D25735AE0BA1D610125E8
SHA1:	D7CAA746424A018583EC1E097F74A484C4FB1811
SHA-256:	C6DE703F8EE214808496DCD92795AC8971782935ED75ABDD5624C814E69DAAEA
SHA-512:	56AC6CDABC05070E1440C8CA4A60119B3555B2743BA8652A2A0282701ECC8E150AC343020D620D3F5CD6406F04966CDE54FD797530149AD0B2711E44F89165D0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/static/lib/sentry/7.16.0.min.js
Preview:	/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function s(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function a(t){return"undefined"!=typeof Event&&h(t,Event)}function f(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function h(t,n){try{return t instanceof n}catch(t){return!1}}function l(t){return t&&t.Math==Math?t:void 0}const d="object"==typeof globalThis&&l(globalThis)\|\|"object"==typeof window&&l(window)\|\|"object"==typeof self&&l(self)\|\|"object"==typeof global&&l(global)\|\|function(){return this}()\|\|{};function p(t,n,e){const r

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2899)
Category:	downloaded
Size (bytes):	220405
Entropy (8bit):	5.5308327784789295
Encrypted:	false
SSDEEP:	6144:xQJzxw5hw+pwyKfrb5Hcimaaz2mICFsg6FKx:pw+SyKfBHpHaCmICFssx
MD5:	03D041388C1BB1051E8024F36D08CF28
SHA1:	9428FF05C3531564037BDEC766571E6AC633968D
SHA-256:	3E4243E21762A7F6E27C382F265CDE6DCAA4F47F8ADC44C013526CA450BD5111
SHA-512:	B13078FCAAD8174BE1FD806165C74E0187AD99FA62F5D9DAD8804E09E7D340152C3BC0EAA3F26697C3DF6CF67C1F3D0B0A667508DF349658233403DA6E179758
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x6052400, 0x0, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&_eu=AEA&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.sp=1&sst.em_event=1&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_17147120255620&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&epn.percent_scrolled=90&_et=56&tfd=24611&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	CSV text
Category:	downloaded
Size (bytes):	35018
Entropy (8bit):	5.107570047039756
Encrypted:	false
SSDEEP:	768:WgA8M9JWanzZFRFvbW+1+0p/8Oq/lU+I47M0an2B8eQLb80+S9tUg7M5NOJ1/iV6:m
MD5:	46D87B5A7661E0529B44ACA65FBDEF86
SHA1:	C1F040A022004E69949382AA79DEFE45AC4BCA01
SHA-256:	587E53033E66207407F9108A4F3AEE7827CC50A0DE5A64EC769C75FD47F90A90
SHA-512:	CF7F3C41C903E332FB58FE9354D229FD42A1CF5F63E18B740B578E80344433ECA53C5681FEA714CAD88983586246B732D5432C33D517878B04C5C7C518CCAE6E
Malicious:	false
Reputation:	low
URL:	https://font-public.canva.com/_fb/s/31ed695fc889d00593852e4078080fe8.css
Preview:	@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 400; font-style: normal; src: url(https://font-public.canva.com/_fb/0/05.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) format("woff"), url(https://font-public.canva.com/_fb/0/05.ttf) format("truetype")}..@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 700; font-style: normal; src: url(https://font-public.canva.com/_fb/0/02.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/02.woff) format("woff"), url(https://font-public.canva.com/_fb/0/02.ttf) format("truetype")}..@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 400; font-style: italic; src: url(https://font-public.canva.com/_fb/0/04.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/04.woff) format("woff"), url(https://font-public.canva.com/_fb/0/04.ttf) format("truetype")}..@font-face {unicode-range: U+0-fff

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 220, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	32744
Entropy (8bit):	7.977910089903143
Encrypted:	false
SSDEEP:	768:fhzzoAMPfg4DnyNXhPCvW9/iSMQ4VYN2O0BtThcnwrF2mS8Q1:f9oATvPbiQ4VrOYFLG
MD5:	CD92BB46373721621FC50FA0C7350104
SHA1:	D3190EDB6F7B052BC3F235C5CAFA1F1B73F70BD8
SHA-256:	180B3C9B647CB5BC3E1F796C35C5796D829E21F981F7D3D85CD9FC77B03D57DD
SHA-512:	5A1C32C62444D3053C7E1DC4CC6C313C511720448CC7D150D2C23A41BB22F4998794C0CBA5BAC95C11CFECCC1556DD7DCB173F6B2770AE095DEDA3983139A4E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Z.....IDATx....o.t..pw.=...!4..!...< ...7.;..ri....clC.@0....F)...:..x`\d;M+V.M.j.....M.4I.;......"U..&.\|?......Z.W...........................................................C..#l.i....k....pw!..P;t.#.=;....=.......N.....$..uf...\.V@..B.Q.......-.?9...R.n.Kw1..........)..X7._.D....!.......\=x....z..jD.:..;.#.....#.....9;y]...Z.H,...lu0n'^. ...K..g.rJ..=.[..N.]\W..C.....S...2Eh............~..C_:3........[..\......M.......e..l....>I..I.^...+7...$I..J.\.,..M..2...%......_.M.S.\|....\|b.'t{...........H%......x...H...R...jZ..h.&...0=.Z........W..x.;\|...VK.S2B.L.L...k..kS.7.<....DKmr.H..\r.....(.Y.i........-.......c;...../....M< .paS{J..h....i..G...a..;CK.......MI..x.q....*...<Gk.~...Gh]...q...a..Gi.8.\J......aK.`..!....n..^....p 78h..2.!..<.....wqK9.....:Z.D.../."...'Y....bn...;.h....@%.Ll.k%..V.,...a.=B..S.zx.i...q........k.j\.Lp...e.u....A...S..k..yVz..C......t!.3..B...UM4y..u;.J............3...{TW..y4.x...^..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	90652
Entropy (8bit):	7.978790020572037
Encrypted:	false
SSDEEP:	1536:nZtH2kFrCkvhmPJq92PQWr693ag6FDmJWJMaWrTOyHw5brhYEJCJAUDrb3kZ2o:nZt4qEG2PQBOFDmsJMLrTOJn4AUD27
MD5:	9B72C414280F49BB2893CF0A56B7EBFE
SHA1:	C73C175245FABC96727FBC1F26CE0140F1E5579C
SHA-256:	B27CA35D1E4C9F0D1889998DA9C9E5793752997B7679B1C9E2661A00C648D090
SHA-512:	16B33A161E85F6C57E162353143761DCD30C7777123413759FD78CA7740FFB5214279CFDF6FD8F8B92F9463B2EEC9D87CA3D456D6D9D25F92AE71693FCFC22ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............WG.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx...`\...}#.....m..q75!`.)...l...$lz.l.MH.}.\|.i[....dSH.!.MB1.$..Nw.m:....w..9..4.e[.G......Wf4...;..sD.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B..T$..Y...e]...b..TgT.T...o....}........Wm.}9+

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6438)
Category:	downloaded
Size (bytes):	65071
Entropy (8bit):	5.491152019574686
Encrypted:	false
SSDEEP:	1536:lUsjznBXORB7JUgZqVjd+OKbE3dUri5o4DicCHyohojV9YKyPF2mblSq1e:lUSz9+B7JUgm+OKbE3dUreRCHyu5TlSp
MD5:	F473C0A476995E2F4BB9625923B67153
SHA1:	5F8F627003041A9AC2F100F3C17ED96B5C902A67
SHA-256:	1225E3279BEADA197BC46A1C02B780D5F6CB22F55EEFE23ADEF32EB20BB505E5
SHA-512:	9CBD6924E5DA318581116CA14A7E0561D0D383D230715696D5990033221248918E6F44D51244D773EA8C8875F6F4315A66A97B082AA52E2EF4EBC7BD98D25A77
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/hjfept.e74599b4a81b369e.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{../**/ 476834:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._e4773d6932616a85f2eac86f437df8f7 = self._e4773d6932616a85f2eac86f437df8f7 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var R;var z;var B;var Q;var H;var aa,da,fa,ea,la,na,ma,oa,pa,qa,ra,ta,wa,ya,Aa,Ba,Ea,Fa,Ga,Ia,r,A,C,Ja,I,J,Ka,Pa,Na,La,D,Ma,F,G,Qa,n,Ra,Ta,Ua,Wa,Va,Xa,Ya,Za,bb,cb,db,gb,ib,hb,kb,ob,mb,lb,pb,qb,sb,tb,ub,wb,xb,yb,zb,Ab,Bb,Cb,Db,Fb,Ib,Hb,Gb,Jb,Kb,Nb,Ob,Lb,Rb,Qb,Pb,Ub,Xb,Zb,$b,cc,dc,ac,fc,gc,hc,ic,kc,lc,Mb,nc,qc,uc,$a,vc,xc,wc,yc,Ac,Ec,Fc,Gc,Hc,Ic,Jc,Kc,Lc,Mc,Oc,Nc,Pc,Sc,Rc,Uc,Tc,Zc,$c,cd,ed,gd,rd,fd,sd,ad,bd,ud,td,xd,Ad,Bd,Cd,Gd,Hd,Ld,Sd,ab,Ud,ca,ba;.aa=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==type

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2078)
Category:	downloaded
Size (bytes):	10216
Entropy (8bit):	5.3189789171461666
Encrypted:	false
SSDEEP:	192:gjK8+blMBMKzC6Ts1P2MAwor1ndjcij01dUiHXe08Yw11C87FBHK2ldJAZrIP:gjX+5iMKzC6w1uMNohndr03UiHX5Nw1P
MD5:	7787BFC3EDDB6D46A30A73E52DA8B146
SHA1:	33E081EBEDC01915A3E46C5D58019D0C71770F4A
SHA-256:	833800AEB3E17F91CFC8AD7DFD4F450B4FD78BDFC538FE56FD000B8BDD0571F8
SHA-512:	A718F2C9C952A913E78D649F382B90F42ED24ED8636DDAD1E17D295B381D9C5D2F64273EF2765C188A1D47C1BDBDE70D886A1C1B7CB0CA0F6E4DDB83359A2719
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/7108335d226a91c9.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[4843],{../***/ 80307:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(604778);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var N=__c.N;var G=__c.G;var Mn,Tna,Vna,Wna,Xna,Yna,Nn,Zna,Pn,eoa,ioa,joa,koa,loa;Mn=function(a){return new Promise((b,c)=>{const d=()=>{a.removeEventListener("success",e);a.removeEventListener("error",f)},e=()=>{d();b(a.result)},f=()=>{d();c(a.error)};a.addEventListener("success",e);a.addEventListener("error",f)})};Tna=function(a,b){const c=a.gm(a.cursor.request);a.cursor.continue(b);return c};.Vna=function(a){return new Promise((b,c)=>{a.$L.addEventListener("complete",()=>b());a.$L.addEventListener("error",d=>{d=d.target;c((null===d\|\|void 0===d?void 0:d.error)\|\|a.$L.error\|\|Error("Unknown error"))});a.$L.addEventListener("a

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	15299
Entropy (8bit):	5.025071869342823
Encrypted:	false
SSDEEP:	192:cJW6yv1RhXrh7GbTuApVKeEVOZYmdrEapSeMBp5E:cJW7v1RB9GbaAzKeEVwYmdrWlBY
MD5:	D75CE760A9E21E8DC112FA302E58128C
SHA1:	9408A2FA23AEA8DDA3B41C629D090A56884E9684
SHA-256:	8C7DAB1B4F206788BD9F3F33037E538261CDC7BDA83DDD57644D3A92C9BD4F46
SHA-512:	4C180DF58F1205CA13E79957743AEC328C0B76560E97D2F6665FCE0D167B1CBE8062CF03B3DE7DE88E792566BB51FF43252B874A697B8ADFA0869D4FA504D1A4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC '-//W3C//DTD SVG 1.0//EN'. 'http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd'>.<svg height="73" stroke="#000" stroke-linecap="square" stroke-miterlimit="10" viewBox="0 0 143.6 73.2" width="144" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink".><defs. ><clipPath id="a". ><path d="M5 0V73.2H143.6V0Z". /></clipPath. ><clipPath clip-path="url(#a)" id="b". ><path d="M5 145.2H581v-576H5Zm0 0". /></clipPath. ><clipPath clip-path="url(#b)" id="c". ><path d="M5 68.2H138.6V5H5Zm0 0". /></clipPath. ><clipPath clip-path="url(#c)" id="d". ><path d="M5 68.2H138.6V5H5Zm0 0". /></clipPath. ><clipPath clip-path="url(#d)" id="e". ><path d="M5 5H138.6V68.2H5ZM5 5". /></clipPath. ><clipPath clip-path="url(#e)" id="f". ><path d="M-6482.2 80.2H6624.2V-2.2H-6482.2Zm0 0". /></clipPath. ><clipPath clip-path="url(#f)" id="g". ><path d="M26.2 37h91.2V

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7789)
Category:	downloaded
Size (bytes):	8978
Entropy (8bit):	5.357168803657841
Encrypted:	false
SSDEEP:	192:abvcZueH54wHePVCogCkelHJyA7ZAfhKwXxgfIGW8yb532:abvcuPseqel4AFgfrb532
MD5:	7AC17E8C594CBFAE64927E7DD92E4F98
SHA1:	25EA3ED4AF0A3E992C4580069DEC67D2802DD73F
SHA-256:	D74A16158F53A763C89676AA86A40F0BADFB728932F192C90424F283FC2DF388
SHA-512:	364EEC654CE319FE9BC2C5F2EDC0BB1FF849925A7E55364B170CD240A122FDC36A18FCD7A29508C043D2F2A36EE0B4C00F8C26E9836A91A6EDFD82377AEE48D2
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-1940192.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1940192,"r":0.41023612351190475,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"google_optimize":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["settings.billing_v2","survey.embeddable_widget","feedback.widgetV2","survey.type_button","survey.screenshots

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65516), with no line terminators
Category:	downloaded
Size (bytes):	341716
Entropy (8bit):	5.274060737478757
Encrypted:	false
SSDEEP:	6144:RmJbuqvzUDGj8oSD0m6+wU76sHZvi1T7qVABl4843+aifbLzLvk57zNIyOMi4Kxv:YTWk+wUHzNIyZ4
MD5:	58DEFA94779F8271897F828C4E0A0EA8
SHA1:	73F53992DEDEC9ABBCE5A95D4F9435B127487AFA
SHA-256:	53FFAA97A9FB8018EDF7143D4C41ECFA15555F2036CEA056787B046FC63D765E
SHA-512:	00CED3C5F9479227E1D5286D3EC053FC0F8A4790DB39754584694BFFC14EB9A137339DF3AE0508A1D821EF2EAB990594151D640E5C9187253A6CAF3F87CB8D15
Malicious:	false
Reputation:	low
URL:	https://cdn.iubenda.com/cookie_solution/iubenda_cs/1.60.0/core-en.js
Preview:	!function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function t(t){for(var n=1;n<arguments.length;n++){var i=null!=arguments[n]?arguments[n]:{};n%2?e(Object(i),!0).forEach((function(e){r(t,e,i[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(i)):e(Object(i)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(i,e))}))}return t}function n(e){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumera

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 1136, version 1.0
Category:	downloaded
Size (bytes):	1136
Entropy (8bit):	6.9205301634912555
Encrypted:	false
SSDEEP:	24:V6x4rfIXZe5PuRlil3RV+cccUUUiQ8H/WTSKo//vSUw8PtIp/U:VaUIZW2KhAcclNirWml//K+tr
MD5:	B46630E470F4040EBA7033CF2435EDCE
SHA1:	BA26D2E1DC5BBC01A80446AC65BFFB991953764A
SHA-256:	3E32AEA52247A81C38B4735E84A28BA27B0CBC33F007A1D14E81E64BA766EADD
SHA-512:	EFF809CC87517F9048F1C7A16561EF6F956ED0FE50B3382AFAF111B6F159E769DD88AF0DC0D8A03B748D407C5C554789B6148A137AC700F776A260FD153C0AE7
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/b46630e470f4040eba7033cf2435edce.woff
Preview:	wOFFOTTO...p.......,........................CFF ..............&.FFTM...(...........GDEF.............'..OS/2.......G...`X.b.cmap.......7...B....head...0...3...6...hhea...d.......$...ohmtx... .........H.Hmaxp..............P.name.............r.post........... ...3vhea...D..."...$...$vmtx...h............x.c`d``.b.D&.x~...../.".7W.I..%..b...z....L Q..J.V.x.c`d``V`8.......z...P...5..!.....P.....x.c`fX.8.......i...C..f\|.`....e`.d..F.$...........p.......q.P....q...x...1n.0.E..'..".U.:..9...1Cv......(..z...B.%W....!..>.....<....'S6(.Q...Zy...+..\|)/..Ey...4y..3.<.f.8.Yy.W4.95..KX\|+.X.&.7x..pD$M.,..;F?...[....c..s..;...N1R.h.PA..\|..s..\.d.~BC.q.vcl.u....Nv.lJ'uso.....i/K..^....!..q."u%".....Ai...x.c```f.`..F.......\|... ... .........J.F6...\|@.....}....x.c`f.....F@......(U....x.E.!O.@.G...\.rl....,$$H._...m2.,. d......s.L".T v.`f..o.[;...S.G...Qt...n.........N.I...(x..\p...U.V;.....%......1...A....[:...{......X.T,...5.."qY(..u.Z.(.kU...c..T.Qn.2F..'&>.U(Ff+7i.O.<<[....g.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	305429
Entropy (8bit):	5.258492124477492
Encrypted:	false
SSDEEP:	3072:+2EosjYNqAvPSIoPayIYzfq5212GY2y0mbaE2mlDs9xtWhOlB6H:+1jYNqAvPSIoPayIYzfq52cpll4fU4Bk
MD5:	B122BED3DB75D81007F932F15164B88E
SHA1:	7468CFB94A3FC12126B886818C634A20E38C89DF
SHA-256:	D025362FF06EE8FA3A16C4C81B707BABCADA80516372405A1947796F2D2E249C
SHA-512:	9613CD78F49CB35D9586D442B55F2E46CA8A14078859AEA3E5FCD80ED8B9C1666576A0E9C1E3B4628D091124901765BA0A04F3477A97E55B76A50C49FF4C8CAC
Malicious:	false
Reputation:	low
URL:	https://short.io/ea88be26-ca08e4c3b26e1cdbc62c.js
Preview:	(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[342],{9891:function(module,exports,__webpack_require__){var factory;"undefined"!=typeof navigator&&(factory=function(){"use strict";var svgNS="http://www.w3.org/2000/svg",locationHref="",_useWebWorker=!1,initialDefaultFrame=-999999,setWebWorker=function(t){_useWebWorker=!!t},getWebWorker=function(){return _useWebWorker},setLocationHref=function(t){locationHref=t},getLocationHref=function(){return locationHref};function createTag(t){return document.createElement(t)}function extendPrototype(t,e){var i,r,s=t.length;for(i=0;i<s;i+=1)for(var a in r=t[i].prototype)Object.prototype.hasOwnProperty.call(r,a)&&(e.prototype[a]=r[a])}function getDescriptor(t,e){return Object.getOwnPropertyDescriptor(t,e)}function createProxyFunction(t){function e(){}return e.prototype=t,e}var audioControllerFactory=function(){function t(t){this.audios=[],this.audioFactory=t,this._volume=1,this._isMuted=!1}return t.prototype={addAudio:function(t){this

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39476), with no line terminators
Category:	downloaded
Size (bytes):	39476
Entropy (8bit):	4.1978745186156985
Encrypted:	false
SSDEEP:	768:FhyXNNEkA1Jh2HSGqTyXNNEkA1Jh2HSGZI:FhQzEkAfhqKTQzEkAfhq5I
MD5:	C967D9DB9BA1C0649932E2B2E6B4D63C
SHA1:	9D34D136D3F3DC5341CE5D1B53617F94D61E25D1
SHA-256:	647EEB9C6E320DA02099D7967180FA632BBE74F205587267652256680E28582D
SHA-512:	60F9627DBAB5872A49C60F9D5ADEBEBD144A593CB6AC428033830904B684C2BDE4E79B711C9FF32A9B4DBA874E9DD0D97E438F805E40DA23EF78014B6D87CC56
Malicious:	false
Reputation:	low
URL:	https://short.io/d4bba0e56524b98c7438ba84a7dae7c0b050da0f-d32dd0c39334c86598f9.js
Preview:	"use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[274],{5093:function(a){a.exports=JSON.parse('{"v":"5.5.7","meta":{"g":"LottieFiles AE 0.1.20","a":"","k":"","d":"","tc":""},"fr":60,"ip":325,"op":564,"w":618,"h":354,"nm":"circle","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 1","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[432,5463.5,0],"ix":2},"a":{"a":0,"k":[0,0,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[0,0],[47,-197],[0,0],[-15.5,160],[0,0]],"o":[[0,0],[-24.508,102.726],[0,0],[6.854,-70.756],[0,0]],"v":[[88,-5412.5],[-357,-5260.5],[-185,-5155.5],[107.5,-5301.5],[24,-5372.5]],"c":false},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"tm","s":{"a":1,"k":[{"i":{"x":[0.3],"y":[1]},"o":{"x":[0.3],"y":[0]},"t":350,"s":[0]},{"t":396,"s":[100]}],"ix":1},"e":{"a":0,"k":0,"ix":2},"o

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47932, version 1.0
Category:	downloaded
Size (bytes):	47932
Entropy (8bit):	7.995726287231678
Encrypted:	true
SSDEEP:	768:STvNjV/AdZ9AuiP3VEuR098IRewD4pOVfT4i2d2RDi4+N1C8ofGbB:cVjV4dZ9pifSQ68qewD5gQdiBNc/0B
MD5:	967958BA9A1B4BF0E2A213CD32317645
SHA1:	E0A9E46B7434B151F48403B3D405DD8650484E4F
SHA-256:	2BEFB1064603F4A32F732164F373EAB18A3F05CFEB9F58F1F83ACB0C66468B80
SHA-512:	6172989ADA2EEE7F4026B02246A50B6C9CCB834114D28F713FF576AAC28653571380776761470275EB161E1BB78E30259EACFB280A0E0CC712FCCD1E6BD1063D
Malicious:	false
Reputation:	low
URL:	https://short.io/static/Graphik-Semibold-Web-483a378d3eceb3b9ca5c6b0eb2e273f0.woff2
Preview:	wOF2.......<......n................................T....`....b..s.....$..L..f..6.$..H. ..4.....N[.Br..v..A.m....kZ.Wt...d.Wzn.R..S3.............O2f.I.n....Q..FO..!3......&Y.Y9T...q..Q+^.6..f.0,).$=...=.FrYe..FV..\|Pqc.....Z.0X..G....x....9....y.G.,j..}+.L.y.F...\|;.....}h$.i;Q.`...&X.BKXQ.O..8..y.o....y....W...m.......ey.[w........Y..`wXX.o.%.......$....D^.,]l.-......Q...a5......;.]{....!."Jd.[.8..>_.....S......{v$wT.<?.?..-X..`l.1..H.\|).P......D..tYXXXH[..~LB?.....k.ff/..fS....f..(..?.......,X1.Y.m,..F..lH. ......ub...W..?.L.)>U5i.....I(.......$...$.B.Z(m...{.O\l..&.E.qp'..b.}Sg)I2....{3.~..N.B..8q.M..........g......!..K4..,..>.;.V.oWJ{..D".H$.YY....+.>.i...\|s.7.]=`I.......<.7...!d............$L..a...3.8....N..n..Mh;.\|.b__.V.ci..C.r<..d!...M..x..B.hX.j.....@.....).Bz...X.+...P.N...]\|..Tf..-Q.SK`.k..../.}...0.1...H... .$r.o......6......_po6........Z....W.<..B../.M....m6........_.i.c.#cgX...G..u..`d...k...A..,..\g.+.n.c.....B.?.}...#,n?.a...!3.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	4.8809222521861715
Encrypted:	false
SSDEEP:	3:YGKoVhLET7rWwNmdxPVSgExAwvHfeALqQtHGCVbI1K6w01qgExghEKzLHS1HQVw:YGKosrWEm3VSkM/fLHVO3DYuFzLy2w
MD5:	EA78F43951AAA4923ABA747A6EE15442
SHA1:	067C64DEE623F8B646596E023F9D1A9E158AAEF4
SHA-256:	6144FA9EEA7FD76FE6777F24DBB653B240D01870CC5CA3F8EF5F2695632BDA47
SHA-512:	CB7D2F43D0F5C934845BC19B2935E72D4362102D1E7C03FC6B83675BF2E38DE42DC9F9D0BBD3981C97F0A502BA0A0E5E9F52682E12FE381ADE634F714E4F216B
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/integrations/page-data.json
Preview:	{"componentChunkName":"component---src-pages-integrations-tsx","path":"/integrations","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/integrations"}},"staticQueryHashes":["2355750797","3934953401"],"slicesMap":{}}

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 395 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1710
Entropy (8bit):	7.698642047734144
Encrypted:	false
SSDEEP:	48:QSwbgTvaLTR2jOqOX6hGCEZbK8FRo/OE9/Zk9pxJRjq:IgTvaEi5qhGCEsQETqxJA
MD5:	E93A8074ECC79FF3CFD923F3F1762220
SHA1:	65ECA4FC9B6BBDD6C83FFD2EDEEC21FC1C719B03
SHA-256:	1D6457DA256A0B87C7B4C7E9034EA6646DCA5A4B9EA2AD22F3A4989C891EDCB1
SHA-512:	818C7B656BB16247DCD388B93580F2C05C7873C3FE976358184B3E9923CB7800AB5CEFEF09883F992298C7E529A0408EC11E0E1863C5535E6A6128897C1D8009
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`.......L....sRGB.........PLTE...z.....r\......................................................................................p....C7..g...TE.dQ./'.......)...-tRNS................;...."!.....:X[Z<..YW......v.1....IDATx...r.8..[."......>s.$....6v...6.S..T..?.'B....,..(<._..o~.3-?n........_/N.03qz..f...K2#'..}./...3...x.(...i....Wb......s....V....a..v._..2,.._................WQ...`..a..a..a..a..a..a..a..9j.z....9...D.9l.C...6m.`...&@b..#.H+`.T.CD...=.L.R,,...&.......#tk...g......\#..=..qM.g....WZy.Y....T.m4W.!E.All..)2..PD....~cHm..K.0l._!...:3hl.M......U.^n.....L..._........=.T-v.0H.4.D..B.v.t....,.o[&N5..{_n..%&.Bu.;.=.#.o..&.5T.....l..M-.g..)4...r..h...e.c.p..)U...1R.a<.<..A$a...Y.....rO.O...v..Z{U.f.s..........{~-LE..,. ..]...T...Y....k.!.......5....E..H..j.*}....0.r].D.3...E]...........<.g.C..).]...(..../..!@...}.03..G."..m( 55....Q..f.}....Sf..a7!.pg.PE.2$7z.....d...K....Y.d

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 198 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4291
Entropy (8bit):	7.940007481960924
Encrypted:	false
SSDEEP:	96:W4iJKTvLeP7NfZsQTJ9VGimtEE2k/fzU/jrLc8/M1N:4K4NH19Ihj6fRM1N
MD5:	92197FF390EC1900BCD2644626979C57
SHA1:	C608B3367DD445727628CFF78FF3214107091CDC
SHA-256:	413B94F8E1BABB68DA5EDDFB0730666A0B0B962352229C1FE2E0F39458387600
SHA-512:	477E8AF31032DAA7607447FFE9D9CC34C68FA031C3440283FD66539DA63AF4F932855479043D751B368BFD20933EB26A710C7DA9E709FF09E90A6A38119FE79A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......0.....JP.Y....sRGB........}IDATx..Ok.A..H.I.H$..=.....7.T..X.=(..A....A.6;....!R......D.%.#.w....B6......n2...!...}.\.2N[.ik.X.V.m...JRpk:.V....g..QEJ..`....5.[n...$[....F......uN..W6.0Xw'...b(.B2Z..Q...."........N.P.P....w...%..fq...ah@..R+.2...(-...#X.6.T)....?b..5..h.P.j..m.~t@....96....(e.....(J/......b(...(......H...u.\.K.n............s'..x.1.?.....;...l..>...k.`...!cY....._..fg......X.s...o6....-F,.X.Js.B.w.s.8.....6.`.%.C.E..U./.d85..Ky........Mf.?Ms.5.s.[IU..n6?.....F5....C,.....1....:y.x..4....x.s....k.5O....43.........?_b.X..c....H.Z....w.s{.z...c..a.{......=I..E.h..[u.{R.....e.'..X8X...4H......3.L...3..(K...Fd.. .$.1..(0..e.....h,...n...=D."`...4.IL.RVRT.....$..I..~..{...f..G..Tw.{.v.s.e.i=...1.:i..].......N...`-l.E..........rx..]......0.....:...U..S}zd..Rj...;...y.H.Um.....dm..9;kq.......b.3.......Y\;.=.Y.~.i.t.(.Y....f._....k.....uDJ...G).G18......-..;..._H...x....qh.Pdu..x..Q.7.....y+.X..

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12997)
Category:	downloaded
Size (bytes):	53145
Entropy (8bit):	5.762112487610654
Encrypted:	false
SSDEEP:	768:l6yNUCnEvD3BU4Y8yJ0m7Ai+Yj39pEAff2+Y512eFpTutsMm2kBZHJuuw4gnMjhG:lwCEdNkymwQsUQutzmeu5O+ab
MD5:	5DAEE1D1763F31E8B8D83AC6E1F06024
SHA1:	9D5DD3B3371C1BD9645689F82A299EC9F0478606
SHA-256:	9589F505715F5F10151BB80D027120136B60ABC5773725DEFFCDAAACFAF66193
SHA-512:	0E9C74AAE482417D0E00E70547F4E78D965ABD6DEE1C3676F8800215C10148F26AF19F924184950461299A75A9235B5EB5D2DA067FC9F776A4444D94925D087C
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/ce299b70190d23a5.js+cc24037a755de754.strings.js+4a15dab279524914.js+6f50888fcddc9770.strings.js+0a7fa6587a575f97.js
Preview:	;// __FILE_CONTENT_FOR__:ce299b70190d23a5.js.(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1697],{../***/ 960537:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(95160);__web_req__(80307);__web_req__(670595);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var csb,dsb,esb,JV,bsb;csb=function({label:a,description:b,error:c,control:d}){return bsb(__c.dm,{spacing:"1u",children:[a,d,b,c]})};.dsb={baseUnit:"8px",space050:"4px",space2:"16px",colorTypographyCritical:"var(--05tvjQ)",colorTypographyInfo:"var(--2sYJaA)",colorTypographyPositive:"var(---VkLcA)",colorTypographySecondary:"var(--FTyzZQ)",colorTypographyWarn:"var(--uYOVog)",textSmall:"_5RSqIg",description:"Fs7OfA _5RSqIg",list:"AChqEA",listItem:"lqHyqQ",marginTop:"eKnFWA",neutral:"_10_OSg",positive:"RpYbJQ",info:"xVxGmw",warn:"KBgfJw",critica

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (549)
Category:	downloaded
Size (bytes):	509653
Entropy (8bit):	5.693596462671332
Encrypted:	false
SSDEEP:	6144:MhMufPBEGHg5H3du4ZVB87yfw1kk/S9x+XPFnMmKbcr1IFOYIuD9GTDRmr36:WadusmQAcxIFnMmQEFRP
MD5:	92662220BCBC55157BBF5975EF85B30C
SHA1:	A0D90D4F446B6C2E4BF8FD7BF51EE66FDA4D8E15
SHA-256:	AC43D64797AC47D26EB29AC01FD178F6C0C8A6892EA1E14EBB529020AE80E488
SHA-512:	F9809BEDDBC16C6FFF90F85A1DEBCFA2C2866C6A9F6E8780AA4644D1ED5C1573FBB06418F8F63BFBBB190225CD4DCE8567C9053D2017A7745528B745FFCB67F5
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/WQcDpAcHn0sjM6ZiVkU8JwNH/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(U,p,D,b,c,v,w,R,X,E,Z,l,O,r,N,V,y,Q,d,x,a,h,M,n,B,S,T,f,J,q){if((U\|(q=[33,"flat",13],24))==U)if(D)try{J=!!D.$goog_Thenable}catch(L){J=p}else J=p;if((U-9>>4\|\|(J=I[3](15,p,b,D)),U&77)==U){for(f=(X=["cannot access the buffer of decoders over immutable data.",(n=[],0),255],X)[1];f<v.length;f++)n[f]=v[f].B();for(T=(w=new Dt,X[1]);T<v.length;T++){if((a=(h=Array.from((x=v[T],n[T])),h[X[1]]=k[5](48,b,3,x,i2).length,h[c]),19===a)\|\|31===a\|\|30===a\|\|32===a)if(g[35](72,X[1],w,.h),30===a?(w.Y=3,G[q[2]](45,w),m[25](39,c,w)):32===a?(w.Y=2,m[25](71,c,w)):w.Y=3,G[q[2]](81,w),m[25](73,c,w),Z=w.Y,l=k[27](53,c,w),0!==l){for

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 491319
Category:	downloaded
Size (bytes):	133363
Entropy (8bit):	7.997739177142802
Encrypted:	true
SSDEEP:	3072:zr/L3w2SnvLIGaXrDdth4Kr08Hbw+DSOU0cygyvBKmTJslFkDF:L3A0GaHyKr1w+DkugkBKWJ5F
MD5:	804DC4A6C2F2D47D50B70085982C73C2
SHA1:	F6DE6CC4A4A64C355F842A1E3A74782D22ABC8DC
SHA-256:	CD6CF7218C491DB118FD13B06FABA4BB67F32658128C7CA9250E7485233D6877
SHA-512:	D5E85A5B3DFF298DD64BEC3283E84F58B986126075DC24AD925D53950663D05B543E002FF1A102227A126DC43699B1820281E8FA3E1A1BD4B8D6D20647B4D11A
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/app-modern.b556ed0e.js
Preview:	............r.I. .+d.5....p!x...(..*....RU.u.$. R.2.../.a6.c.c..c.ok........2_........,U....\J`fd.G.....g\|-..h.{...Ir.N..,..pp~4...Q..t.LO>e........y6n....>.Ekw...58.Y...].......^.......,...0]K.qcw{.....I..kQ..fI..dipx.7..c.<L.x.....b/M...^..l6..{Q<.b.y:I...c....%..7.......j6........<..[..r.z.`..R~....[[...$..8......n..[.p..a.Ey..p2Y.mN..._.!\|.....p....K..\|..!~..mz02O...(...,..{....?/E...mX.I.:@F.lN@.a..%...l.7.6..4.&.9`..<..n.mw..>.....V...n..Nk.g!..loo..,..[...;..l..p.&..a...G.@..,R.3m..B..E8...gYx...0.E..$...Y....\|6.~s=....1.Q4..;..q.'..<?..N.<.O'.7`.6.>N&.Oo......7c<M...t.....q4..GS...............,.Oy>Oc.. .........Qp..\...Y.D.O./.^.<.m.......I.i.>.O.#.1...u2O.8n..r...\ .4......p0..L...q..P..p8L...0.Y..L.....<..I.H.H./....C>.....n.a.\....,Og..\.V..S...}?..<...[........w....[.....}........Wgm.X-1c..y.....N......4.....>lp.1J..B..[..7@..QY0..Y>.......>..w.....t-..b_..H.'...8.^^..<.....F.R.c.....1.._J.....p.H.@\gz$...8..V.....u.s.F.....5.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 385, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49185
Entropy (8bit):	7.984804323327324
Encrypted:	false
SSDEEP:	1536:pYwmPEuWCIoR2IPDqtRjrxu/SQK+SHPym8:ywiWCJRZgRBuKQKTyl
MD5:	960E5DAA255BDF37FA6BA9699DF4F2A9
SHA1:	B357EF29045093273916BE98AD59DDFA0FD06766
SHA-256:	4A5665A54A1B8D2BBC2F89A5E986D51508B2FFF9663ABAC87C319D0A7BCA275B
SHA-512:	478FC694C44830665E0FF9FA24C5250420B5FB89A6981A3B6A6127FBB2F3C90F534069218EDB5AC1EE6D346196AAD47C74C01F5ED539461B7A2C9A9EFAF1BA1E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y.$....IDATx...Ih.u...4.H...}.."....A.@...... .. ....K..YP...r.uADi..-..J.&!.....d..x.&K..........yg..d.y..............................................................................G..l.....]-u\|....@]d...Sw.:..e.u......o.U....k_...\|s.km/x..a\|......{O..osr:'.K....tA......\o.g.qg........u......u..?.`..s..o...5im..:..u..tsz4=..L...+.....-Y.M}ik.O.333{....M{.=..f{<..<..:....;.~.z .Q....+.N............s.7..+......../.3.)i}..M....%5H/NW.6mH....}.:..:..tw.%..J..U5..O..9.Hw..'=..K......\......d...V....j4..~......:=.^L...k....<...{.;..d..i..f.D.h..Y...?.&.5.zn../...<.z..Y_K.....B..nK..s[.3uS..H..`...Yc].5=..L[R_..]5..k .Y..Z....4..ok.`..`.e...v.~...q{.~...Ywd.$...4.Z&S.v^.#..#.kM_...3.I..y..X....D....{......^.F...-..9Z...=Me.7.4...K3....}...u{].h....o...=.>...#u#.M=.?.p...^?..I.........5l......x.....[..;g.[E..aB....(F.....-.q...1"n.`.E.5FQ4.Aq..E@k@......R.A@..B[..}....:o..w....&"..{.?.....f.?...L.YC.q...c.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1084)
Category:	downloaded
Size (bytes):	84582
Entropy (8bit):	5.296028975175643
Encrypted:	false
SSDEEP:	1536:M5l/H5c7Eyc7RrmuuwCSDRK4Nx9XaZBwijq3MlokGGLQoPkG5wPH3a0k5Qid9j/n:Ql/HWIyc7FmuuwCSDR5x9XoBwiu8lokR
MD5:	AA6B3A4D996D8C6C6FD8EF1FF6F9428F
SHA1:	AC15ABAE213B0B2D94FB4E53499C68B2B816B9FF
SHA-256:	D679733FC6ABB78B5E7BBF072533400505BCC3CA9AF34777B35E76702FA9647E
SHA-512:	92E3EB7C8361C5D96F20A5015E98D6439367FBBB93C133F607BF5F1C76783D234058118BB1EB5784FEB82E38BFD9C036F1CA45A647FFE27FF18BEC644E336FD5
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/a76430df1ee91ba0.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[257],{../***/ 834767:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(708358);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var Pt;var Js;var Bs;var zs;var As;var kv;var Ft;var Et;var Xu;var Wu;var wt;var ju;var da=__c.da;var Ys;var lu;var K=__c.K;var Au;var su;var Cu;var wu;var pu;var rs;var Nt;var Lt;var Ht;var w=__c.w;var Us;var Ts;var Vs;var Ws;var pa=__c.pa;var Gs;var z=__c.z;var os;var t=__c.t;.var jua,ss,kua,lua,Ds,Es,Qs,Ss,sua,tua,uua,Zs,$s,Aua,bt,dt,et,ft,gt,ht,Gua,Eua,Fua,Hua,jt,kt,lt,Lua,mt,nt,ot,pt,qt,rt,st,tt,ut,vt,Mua,zt,At,Ct,Dt,Oua,Jt,Pua,Qua,Rua,Sua,Tua,Uua,Tt,Ut,Xua,Yua,Xt,Yt,$t,$ua,bu,ava,cu,du,cva,fu,dva,gu,eva,fva,iu,gva;jua=function(a){if(null==a\|\|"symbol"===typeof a)return String(a);try{return JSON.stringify(a)}catch(b){re

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (375)
Category:	downloaded
Size (bytes):	438
Entropy (8bit):	5.244202224420395
Encrypted:	false
SSDEEP:	6:0cGV0/KvK7Tx7rQRhq5DEsEHKIT63OVgJTJxqfQEs0STJjsK7TzSnTJxQmvDSMqt:03K/wKBOuIQ3OChbgjKDSXQmFqPV
MD5:	45CC8E9A449B686B4300684398C187B6
SHA1:	3137CB907121BF6E357835EEC1AAB644DD0453B4
SHA-256:	C54AA63B549343F1C4B927600558E0DC0680B161D9CC837D66D45650F319B8DB
SHA-512:	B3C034E8EB0D3ABCDD7B4C177C36F22EFD5374B19A5EC280F81E33928AB0904B35FEAE3C5B06FD299DA1CBE5E222E49DA897D918EB677C09104D864A0D2CBEC7
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/2475682c8d5b76fa.ltr.css
Preview:	.DF_utQ{cursor:auto;outline:none;position:absolute}.DF_utQ:hover{cursor:unset}.UYkI3g{will-change:transform}.Lj8ZqQ{display:none}._lzXBg{overflow:hidden}.LpqEwQ{position:absolute}._0xkaeQ{pointer-events:auto}.eYn1AQ{overflow:hidden;pointer-events:none;position:absolute}.JpiJcw{pointer-events:auto}._3zDNwA{display:block;height:100%;left:0;position:absolute;top:0;width:100%}./# sourceMappingURL=sourcemaps/2475682c8d5b76fa.ltr.css.map/

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8702)
Category:	downloaded
Size (bytes):	8765
Entropy (8bit):	5.723939099591113
Encrypted:	false
SSDEEP:	192:GIJRrvMGclMr9lT/gRHDnKuRwSdqH5GiDixfWRplSiT5Ac/Zv:GIJRrvNclan/AHjm5v2xfQ3Zr/B
MD5:	3D013C0E99AFCAC2BABBE2E9902EED3C
SHA1:	3EB87F8C68201D88B2B870DF719D70E3562BACB4
SHA-256:	FB43CA3B46BF9177FF42029EBDB9672FBA883A7409BF703425EC75FEA2682BB1
SHA-512:	C475F34F2AFD019AC4916B512DDC8708BD874B1AA93D5DE7D47F42BB7953B8A88C7F9A19EBD273A1D870837D9A67EE8737A247F9967BA9B64F5C3BE81F82EC69
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/6d89f736629eee73.ltr.css
Preview:	.DcyBDA{display:flex;height:100%;place-items:center;width:100%}.light{---2C5tw:rgba(64,87,109,.07)}.dark{---2C5tw:hsla(0,0%,100%,.15)}.OnooSw{direction:ltr;display:inline-flex}.OnooSw .c_8JMw{margin:0 2px}.OnooSw .c_8JMw:first-child{margin-left:0}.OnooSw .c_8JMw:last-child{margin-right:0}.c_8JMw{border-radius:4px;box-sizing:border-box;display:inline-block}.c_8JMw.pYax_Q{height:16px;line-height:16px;padding:0 4px}.c_8JMw.fO2LDQ{height:24px;line-height:24px;padding:0 8px}.c_8JMw.v3ioMw{padding:0;text-align:center}.c_8JMw.pYax_Q.v3ioMw{width:16px}.c_8JMw.fO2LDQ.v3ioMw{width:24px}.c_8JMw{background-color:var(---2C5tw);color:var(--pUV7hA)}._AUJKQ{left:0;position:fixed;top:0}._1gRP3Q{position:absolute}[x-placement^=top] ._1gRP3Q{top:100%;transform:rotate(180deg)}[x-placement^=right] ._1gRP3Q{right:100%;transform:rotate(-90deg)}[x-placement^=bottom] ._1gRP3Q{bottom:100%}[x-placement^=left] ._1gRP3Q{left:100%;transform:rotate(90deg)}.QeqCOA{height:100vh;left:0;position:fixed;top:0;width:100vw}

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 528465
Category:	downloaded
Size (bytes):	145097
Entropy (8bit):	7.998179684064704
Encrypted:	true
SSDEEP:	3072:tpx1WjczZt8xAaPJ+nk1clGrwEf6MsTK7aZm0b24:PZt8xA8ikCEwI74Zzb24
MD5:	03A12749FA7D8338F2E28B68039DC719
SHA1:	5F989DD8AC9642099E91A0D4788B75DE1232F501
SHA-256:	F230AF7555B7D0C95C6AB385A3CF32246020E67091D98A16BF7E2D1BBBE07E0B
SHA-512:	B62533DBB7E7B13C5FCBF87CC6ACC2E62B83E3B223ADEEC7B1F6D3134A8836848E8CA89C59ADE34044B8296FFC18030E5EADEF1ACF34B6C256609025001CFD60
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/frame-modern.26b8f221.js
Preview:	............{.. .W(....].......m.+8.......h.$MK..{..B...{gv...7s....x..`Yv.....U8KX...}..l4k-......}.y>p=....Ym5..M...0..^.M.0.M;;..:6.c..I../.....8.tG^"....76...I.....m.1i..s7..$.*........{.k%rB+`.V..\|V9..0...n.3...._.....+.Y...Q......pVI.^.............u.....Q.%.9n...]x....m5.e.....w.K.......?..q....Q..=x.......o...9..0....47.[l.......{.......Vo.l..@54....N..).b..........sU.F}}...p$.A....^.f[[.mj../...;...g..k.0......:...F.\|.......:5p_.....h..Z.^KcskS>.j6j[5..U...Do..F.m.e'.w..R........3.j4`.-.....l..M.lj..54..X......js.....R.Q...5....j.ww.^.a.............D.^!.Ks..!......./......B=x}....#..uO[.:.....D.j.l...5.a..b..Yo..8.Q.#....Y...t....m..A>.]......a....[.v......)......6.M1.q.vp.....nScG..9..l....)..^knm.....H.I.V.....g....i6.v..>...n7.....).0..C...D6wd.LOvc....w..... .v6.l.t....&..!vrr.g..Yg...q...a.u...!..5\;<K.d...N}...?..h..x.p..<..`X....p..\!:.v.!.,K...'...].%.a./.......o%N.{=n.mg.......X}.m...q.{.$M.....@.....aW'1..I...

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (815)
Category:	dropped
Size (bytes):	1661
Entropy (8bit):	5.445709911963647
Encrypted:	false
SSDEEP:	48:ja8+uqSYowcqSaF2G9AwcqSaTCa7qSYowcqSaF2G9AwcqSa6dR5:+8+uxYisSst7xYisSsk5
MD5:	E4D31E3C5147263AB500DE9E4BCE6C03
SHA1:	AC2C99392E31760F7F8854F7785D512ABEC50498
SHA-256:	B3D5189DEFE55BC77C98F05FE7243B444D77F5116E008E8A34968BF423EAB63C
SHA-512:	3490E59B70C0CB8DC9CE58A86C78F9C81639CCBACE808E7F8BD16C2C1C138A734564B078042B263108BCD16E3F04AD759A941F8461A3DF50F1F637877520EFEA
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=1668577346;gtm=45j91e4510h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1668577346;gtm=45j91e4510h2v872399471z8812729902z98483

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	212
Entropy (8bit):	4.709620622546413
Encrypted:	false
SSDEEP:	3:YGKoVhLET7rWwTo0VS9ZJ3AvHfeALqQtHGCVbI1K6w01q9ZDHhEKzeVw:YGKosrW4VSPJM/fLHVO3DYPDBFzKw
MD5:	B5433FA0AE004CA5811DB7D89B69B182
SHA1:	CC5BB0763AEF2BEEFEC4D6187F853605AD1A09B5
SHA-256:	B02EFA1996F69B33C0308289A3596F2EE43D2E57D231D44EA5BD357BCA2F9B77
SHA-512:	8093B67B8533821FED3B05A100604985EDDA24A66BE5CB085F4966EA5FDA609F92B08FF24F7EF76413FC8B8A9D4278090547116E90C6CB779BE9E3BC37B6F568
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-pages-pricing-tsx","path":"/pricing","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/pricing"}},"staticQueryHashes":[],"slicesMap":{}}

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	1568
Entropy (8bit):	5.681277505687486
Encrypted:	false
SSDEEP:	48:AOA4m0AyD7yk0wgChPTyp7sGxWsCuXOhG6Vyw:vcwgC1Gp7scyV
MD5:	6935F4035741F668384D54A06DE5899D
SHA1:	0BF45F025069C77C685D131164BD10E6AD5B3626
SHA-256:	AC375B4881C06399274D38B5FC59823D060592EAA7800EDF4AECD43026839D06
SHA-512:	C8E43643BD0A566FCCD1E7A8746E2BF0B4F4AF21D15E6285A8EDEC701CE2A09423F69713630C1C009868F6C8180D976EDC3EDBF70B8769B9B7380CD8B296035F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/7a73108cf0c439a8.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[3007],{../***/ 604778:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {(function(a){function b(c){return null!=c?{state:"invalid",error:c}:{state:"invalid",error:!0}}a.valid=function(){return{state:"valid"}};a.invalid=b;a.all=c=>d=>{for(const e of c){const f=e(d);if("invalid"===f.state)return f}return __c.Kn.valid()};a.FNa=c=>d=>{for(const e of c){const f=e(d);if("valid"===f.state)return f}return __c.Kn.invalid()};a.i6=function(c){return d=>{d=c(d);return"invalid"===d.state?b((void 0)(d.error)):d}};a.Dnb=c=>c.reduce((d,e)=>{"invalid"===e.state&&d.push(e.error);return d},.[])})(__c.Kn\|\|(__c.Kn={}));__c.Ln=a=>b=>a.test(b)?__c.Kn.valid():__c.Kn.invalid();__c.Rna=__c.Ln(/^[^@\s:]+@[^@^.]+\.[^@]+$/);__c.Sna=__c.Ln(/^

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	536
Entropy (8bit):	5.563179974259964
Encrypted:	false
SSDEEP:	12:UBGYxUUI/+rMsh6LIc16Te9AVRTwi/+xU/sNU:hYSUIGQsckEmeAVZyS0NU
MD5:	6B99F4DE7F39E142A89BA9E5108810B3
SHA1:	7917DEA070D5824689C0E86D8BEB35BA8043F458
SHA-256:	251E1DE1E2A8274C20E9318E359291B4EB9BD2427A5D7A07D3880D061C5C4FC1
SHA-512:	BD37ACAF4DB9474CE2D93E440E6FDC9FED25D2C088AC38F5EA647926681BECB9E7AA3D5C1C5BF1D8A49EFB5CAB811F8988401807F04F5D0938E3766DD77295D5
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/c9da08c886dcc2fd.ltr.css+40f0ce866d9a0621.ltr.css
Preview:	/* __FILE_CONTENT_FOR__:c9da08c886dcc2fd.ltr.css /..RVlJPQ{width:304px}.kAIPdw{display:flex}.yskuIg{flex-shrink:1}.dbjzGA{flex-shrink:0}.ySxiDg{align-items:center;display:flex;font-size:2.4rem;height:24px;white-space:nowrap;width:24px}./ __FILE_CONTENT_FOR__:40f0ce866d9a0621.ltr.css /..NiPPrQ{grid-gap:16px;display:grid;overflow:hidden}.Amj8Dw{grid-row-gap:16px;display:grid}./# sourceMappingURL=https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/c9da08c886dcc2fd.ltr.css.map+2_sourcemaps/40f0ce866d9a0621.ltr.css.map */

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2098), with no line terminators
Category:	downloaded
Size (bytes):	2098
Entropy (8bit):	5.792434732999359
Encrypted:	false
SSDEEP:	48:YyLVkckEzhggPbQSt4dXQnl8FTdXQnLkDqrmlYnbuO:YyRkckyhgkn4ZW8FTZNqdnb3
MD5:	BE0475B7379FE37288F1793D68373BC1
SHA1:	49AC32D4FAD6EC1BAE7B8828E6112B3992959594
SHA-256:	B5FA6129876DE4913DACAF910A1E7873B21777657BE4E949C74C50A2E5375FE5
SHA-512:	BB96795A241E293020BFEA6F1C4A5C7A443B5FC34DA77387945B03AEB399C9E2E689362FEB549367C980A594B680493775EAAF417C788D97EE8171F3CAE476C7
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/784219015?random=1714711513345&cv=11&fst=1714711513345&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j733924421","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j733924421\u0026tag_eid=95328104","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sjq0FvQ!2sZlv43A!3sAAptDV4nCwc-"],"userBiddingSignals":[["718029999"],null,1714711516317184],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=138174409564\u0026cr_id=689957907523\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DA

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	368
Entropy (8bit):	4.546742488437108
Encrypted:	false
SSDEEP:	6:tI9mc4sl3WfR9F37qCdzU4jQT1m9etUNq1RQv7HD6DVJOp0zjyA0mI4YLJ5TDh:t41WffF37vdz3QT49etN127gtvb0mE/x
MD5:	0483F2B648DCC986D01385062052AE1C
SHA1:	61BD815F1497863265A76D92623042835E5E7FE2
SHA-256:	09A743EE0C32CA57C9BE64B13B29C396310D1DD309CB4D7D3BE722E47DB95F27
SHA-512:	359F9BCC2441DC48FFBE69353BB7D4143A2037B0263BD5F0CFB06B14D5F15D9A6E574930E88A84081C61698BF3E2F5333BF9081865183AA7F9202AAC078C10FF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#DD2E44" d="M35.885 11.833c0-5.45-4.418-9.868-9.867-9.868-3.308 0-6.227 1.633-8.018 4.129-1.791-2.496-4.71-4.129-8.017-4.129-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1.751 22.587 11.216 31.568 18 34.034c6.783-2.466 16.249-11.447 17.617-19.959.17-.721.268-1.469.268-2.242z"/></svg>

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4933
Entropy (8bit):	5.98771914065213
Encrypted:	false
SSDEEP:	96:i+mMqW3YYaIu1sias/rpu16AtT7NnUgYqpUy66CHpuTErtLq/lKBdfLhPa0TGRIw:i+LqsJizFvAtT7NUgYu661ErtmdKBdfo
MD5:	5268F210799316EFFD05443BC8F9AB73
SHA1:	0D2B46360AA82A767720E1A2448C866BD7D7630F
SHA-256:	61F5935C5E09CBB8CD9422D04B3241E75EFC81506C7C4B782CCFC6A9EF86E22E
SHA-512:	7D87E006386EE6E8824680C960433BFAD6BD09E88BFC4784934E68D31EEE56356BB2CFF9CE0A1B54C3ECA481B228EAFC37FF34A45D5ECF28D1B182F39B2C40D6
Malicious:	false
Reputation:	low
Preview:	{"data":{"integrations":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,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

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	4.751769690370205
Encrypted:	false
SSDEEP:	24:hYhB2ct0ZVSVkdORiokr0AwVCR1fyRwvO:wZ0r4ksRHqqcR16RF
MD5:	2E31B35F1B0F0CFACB6A77D14DD544C6
SHA1:	A2791EE3BCB008468C551383985A1E54FBD996FA
SHA-256:	55FB442AC1860270DA6E9C4B7D6D4C63560DE5A84F7434DCC451A0EA13A02A7E
SHA-512:	F94626EF434DF727A5E8CEBB24E3A8A1536A52E213D00F0C244A013092044018317E19290B82C2E465CFE89F36F85B02081FB7B16F478C049CBC365F10F69287
Malicious:	false
Reputation:	low
URL:	https://app.short.io/xhr.html
Preview:	<!DOCTYPE html>.<html>. <script type="text/javascript" nonce="bd70fb4c3b048b1b11f7f90caab4dc0d">. /* eslint-disable /. function parseJwt(token) {. var base64Url = token.split(".")[1];. var base64 = base64Url.replace("-", "+").replace("_", "/");. return JSON.parse(window.atob(base64));. }.. function isShortcmUserLoggedIn() {. var jwt = localStorage.getItem("shortcm_jwt");. if (jwt === null) {. return false;. }. var parsedJWT = parseJwt(jwt);. var exp = new Date(parsedJWT.exp 1000);. return exp > new Date();. }. window.parent.postMessage({ type: "login-status", value: isShortcmUserLoggedIn() }, "https://short.io");. </script>. <body></body>.</html>.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	292816
Entropy (8bit):	5.5727754897993655
Encrypted:	false
SSDEEP:	3072:yXa4lgnFn0/VPLu0h2zNeH9v8H+th1FytS5s4ONgZUyjRAO5Gb5A+lYoHlxGg8+v:P4AF6rgzNylGMxZUyjRV5cdlxZV2JO
MD5:	9F6FE4E9821FE427513EB2604BD66CE6
SHA1:	EF58026AA39336A9CF63184A81BD49282AABE3C8
SHA-256:	CF6DBAF738CB4B5ED39206F0608A84ED664F2C689F152ACD7BBF2E93BFC762AF
SHA-512:	1E91BD7D99E810D88AEBFF8C55F007CBE230F7E8AF61E6FB4D06EA09D3B4B0A93286435ACD644343117053FF0219447E3551D04E908B6FE483735CA36503D860
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-EPWEMH6717&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":13,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	5.582175862179143
Encrypted:	false
SSDEEP:	6:eevW9uATiIsZmJOAZwMSMDsSauQcSK2mvXnMQrnrECidWRQw:NWMgj9hwMTD8fc522XnMQrnr0W2w
MD5:	6D032FD0B636AE5FEEFA69CC8BE7AAE9
SHA1:	5B089610BB91A6951239E5EB93702CCF24AE8080
SHA-256:	53945CB60E9E6E3E2883784B0BA62F011115E313AF52ADF6C5CA7810E19917EA
SHA-512:	1085A07439055E3B8E7C5CADEEB7BB5A0AF3C7A96B31D206CCBA01A5B03957FFF2B553178C89877A01D9276C448DF7F2BD7EEF1C84B67D0E5F3B2B402E00530A
Malicious:	false
Reputation:	low
URL:	https://cs.iubenda.com/cookie-solution/confs/js/52677371.js
Preview:	_iub.csRC = { consApiKey: 'bR5awyZby3G2gb3CCP0yJKexITOaCfMf', consentDatabasePublicKey: 'Ku65SUHtCLafB7WjFy1WWalLmUXRt5AE' }._iub.csEnabled = true;._iub.csPurposes = [4,5,2,1];._iub.cpUpd = 1714637749;._iub.csT = 0.5;._iub.googleConsentModeV2 = true;._iub.totalNumberOfProviders = 5;.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1700)
Category:	downloaded
Size (bytes):	5288
Entropy (8bit):	5.52211659337232
Encrypted:	false
SSDEEP:	96:wriG+cQKvR8W9QdM+/UC4cn3GqA9eXvmknxNDDYZbKfX0AXKmaJSB9WQGt230me4:4iUQKvR8WKdMqTA6v7nxNDDY58XBdaJM
MD5:	C33C519CB32E60D465CE86AB4946058A
SHA1:	D7C77E4D0DB327BFAC36EAA0DEFE66C8FC985E13
SHA-256:	9206C5519CC05FA98C41F7F0695DCF026D48BB1815F574FC24BB3A207B44AC48
SHA-512:	39706F2FAEA4AB77F2E54F5D46B521DF780293E7AA4DD490DCB7AF65A854AAFAA37ADE6563B110CDB020CE1B3EF6DB292897329758758CE285D0C2A4977B2CD6
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/84e6389ec6a6ae32.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6847],{../***/ 143286:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(80307);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var t0b=function(a,b){s0b(a,b,()=>{const c=a.Z1.get(b.context.spanId)\|\|[];for(const d of c)t0b(a,d)})},s0b=function(a,b,c){var d,e=null!==(d=b.attrs.get("parent_relative_start_ms"))&&void 0!==d?d:b.duration;e="number"===typeof e?` - ${Math.round(e)}ms`:"";d=null!=b.parentSpanId;var f=null!=b.attrs.get("user_operation_id");e=`${d?`${"event"===b.nx?"[ChildEvent]":"[ChildSpan]"}: `:"[OpenTelemetryClient]: "}${f?"User Operation - ":""}${b.name}${e}`;d&&!a.Dia.has(b.parentSpanId)?console.group(e):console.groupCollapsed(e);.console.groupCollapsed("Attributes");d=Object.assign({},{name:b.name,$yb:`${b.duration}ms`},Object.fromEntr

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16788, version 1.0
Category:	downloaded
Size (bytes):	16788
Entropy (8bit):	7.989129522879219
Encrypted:	false
SSDEEP:	384:mWyf9Sx0vMIPYIEgIXrW7TJVwgWto1oIB5er+uoZd8y2pfZdAtxGhe:Hyf9Sx0v5APgIuVwgYIWc8ZDAtxGhe
MD5:	FD24AF413CB9CFDC66D2FF712BDFD614
SHA1:	978C3D524CC6A8114D11F78B6292B58C69CB8632
SHA-256:	16AB274F0EDE84BE01A0361263FAEB3FF18D2D95D155D6B9D654EF37F87DB1F5
SHA-512:	7689F9323DED4EC22E850CBDD2631D18B08953E74C1E89FF0C6B66F56CF01A2DFFF68B4BD04D25928DDB792D1D33DE557B6B775E15A3616C7B118180D514678F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbERySjQ.woff2
Preview:	wOF2......A...........A1................................`..\.h..m..... ..6..F..6.$.... .. ..@.........0..8.+.....6.`..Q...'$.CLj....m..p..D.....h..Lx......&...3....E...v,....uK.-.XU]..y.......Y....)D...{:../.d....._}wdnn.T=o...pG..s....IN^.....L .,u...R.4u.........Ql...../....g..ph....X.....'.....(...x.cSx.E\|........-..z.."7..b.5..[...l0`D..66.xD.....3>C>\|..>.d.2:..9.&....k.. $.........>p.}O..DA..........@.V...J....V.\....+...........C2l.w...n.-........3....]..?.....8......jYj..L..6..+.m..Se.<.D..j9..e;eS.mg...X+I.[.3D.X....\..>.]...P.Q.}.e...X............Z....../..i.H..Q..L.s.d....j... EP.....sZ... .=.9.:.6.......u. .&%..v)R...DQv.hp..JS.[.`..9/.i)3.q..n...46.(.4.l/.y~Qz.R..bx..H.r~........ ]...........4rw.9.&,.H..V.B..M.../..=...*.1403.n...E..A.~...`.F".P....8.D....C.a.z..C....$.#^...$.G.............bF...Z8.^.....&x-..........:.`.f......a.)..Q...b1..... ..........(...........P.sG....%QrGg...7.....N.,&..5...\|4949j.F}.b...W....No...,<q.[.c.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/WQcDpAcHn0sjM6ZiVkU8JwNH/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4414
Entropy (8bit):	5.9195472440471955
Encrypted:	false
SSDEEP:	96:v6LQztmnE2hqFJmd7l0TlPInbSqVpWV9gr9Fb3+:bs4oCTlGbSqVpWXw9p
MD5:	A0C86DA7FC37EA50E848C4733761D53E
SHA1:	7B53A4FE8198AA654C02282134DCC19E0C07CC9A
SHA-256:	EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A
SHA-512:	6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/static/images/favicon-1.ico
Preview:	...... .... .(.......(... ...@..... ......................................................@...........#h..!g\."h..!i..#k..$l..$n..$o..%q..%r..'s[.#t..........@...................................................UU..........,]).+_..)b..j..)l..'l..%l..$k..#m..$q..&u..(y..(z..&t..&u..%v)..........U......................................@@..........3Y..1[..4b..1]..0\..0^../`..,c..+f..)i..&l..%o..%q..&s..&t..)\|..'v..(v..........@...............................33......8X .7V..;]..7V..8W..7W..7X..8Z..=_..?b..?e..<g..5g..-i..m..(q..&s..&t..'u.....(x..(x .....3f......................@@......CN..?R..@W..=R..=R..>S..?S..GZ..<S...?...5...6...@..!T..?f..;i..0j..-o..)s..'u..'w..}..(y..'z......@...............UU......PP .HL..IO..EN..DO..CN..GQ..GQ...!..HR................ly...B...O..Dh..7g..3l...q..)v..(w..)\|..)z..(x ......U..................SG..UK..PG..NI..LI..NN..FF..76..................................\|....>..He..=e..8i..3o..-t..*w..+...){..............@......\A..cG..ZB..XC..VD..VG..QC..OA...

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	260
Entropy (8bit):	5.03921729096162
Encrypted:	false
SSDEEP:	6:YGKosrWE2sVSH2/fLHVO3DYH1fFz0wItDp6o3pz9w:YGKYan/zYzwz720o3l9w
MD5:	715C482ABA6D0FA6B9F48D94D5BDE4B8
SHA1:	FF278D2007693515363DDACCFF97BCC0AF7A9500
SHA-256:	A1C74C9326B24EF58C79CDEDD50C9BFEDA3E0DF03B2EC3AF04335A2F85AB1ACA
SHA-512:	96B2F7D9867A9A98B18913D87FE012A4718632206B9DDF07E1ADEDE2F44D316E38D7EBFE288DA2C9F13C5E09DCB5E62D2628E6581869AA9F22AEFE91D14DFAC3
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/index/page-data.json?utm_source=link_not_found
Preview:	{"componentChunkName":"component---src-pages-index-tsx","path":"/","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/"}},"staticQueryHashes":["1242162299","1467288770","2048126111","2385355646","2562819187"],"slicesMap":{}}

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	15299
Entropy (8bit):	5.025071869342823
Encrypted:	false
SSDEEP:	192:cJW6yv1RhXrh7GbTuApVKeEVOZYmdrEapSeMBp5E:cJW7v1RB9GbaAzKeEVwYmdrWlBY
MD5:	D75CE760A9E21E8DC112FA302E58128C
SHA1:	9408A2FA23AEA8DDA3B41C629D090A56884E9684
SHA-256:	8C7DAB1B4F206788BD9F3F33037E538261CDC7BDA83DDD57644D3A92C9BD4F46
SHA-512:	4C180DF58F1205CA13E79957743AEC328C0B76560E97D2F6665FCE0D167B1CBE8062CF03B3DE7DE88E792566BB51FF43252B874A697B8ADFA0869D4FA504D1A4
Malicious:	false
Reputation:	low
URL:	https://media-private.canva.com/0EaXY/MAGEBD0EaXY/1/p.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJWF6QO3UH4PAAJ6Q%2F20240503%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240503T013957Z&X-Amz-Expires=25634&X-Amz-Signature=8330df290c95a272f32bfef9462c8809d9e2bebdfd3e24ad40f5cce4a3583c06&X-Amz-SignedHeaders=host%3Bx-amz-expected-bucket-owner&response-expires=Fri%2C%2003%20May%202024%2008%3A47%3A11%20GMT
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC '-//W3C//DTD SVG 1.0//EN'. 'http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd'>.<svg height="73" stroke="#000" stroke-linecap="square" stroke-miterlimit="10" viewBox="0 0 143.6 73.2" width="144" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink".><defs. ><clipPath id="a". ><path d="M5 0V73.2H143.6V0Z". /></clipPath. ><clipPath clip-path="url(#a)" id="b". ><path d="M5 145.2H581v-576H5Zm0 0". /></clipPath. ><clipPath clip-path="url(#b)" id="c". ><path d="M5 68.2H138.6V5H5Zm0 0". /></clipPath. ><clipPath clip-path="url(#c)" id="d". ><path d="M5 68.2H138.6V5H5Zm0 0". /></clipPath. ><clipPath clip-path="url(#d)" id="e". ><path d="M5 5H138.6V68.2H5ZM5 5". /></clipPath. ><clipPath clip-path="url(#e)" id="f". ><path d="M-6482.2 80.2H6624.2V-2.2H-6482.2Zm0 0". /></clipPath. ><clipPath clip-path="url(#f)" id="g". ><path d="M26.2 37h91.2V

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2725
Entropy (8bit):	4.001613792451738
Encrypted:	false
SSDEEP:	48:/a93XK82dedc1J2ghyVSuW2oyhTn2oXU/JS1QwppLYA8n9V7KRSpHW3SdjUjuq:onvcH2wyVSutoqnHWSK4tLYVHH8CEuq
MD5:	749002F5A04F784CC1802D77D2FED423
SHA1:	A82F9B14C9946185D475C946B2EA4B1D724732F7
SHA-256:	E26E8402DEA748478ED971DD8F9626BBC25CEC4776D92A0B768D71A109F82C87
SHA-512:	883CD33B1406E297B068E93CA509E38A54197BC426766AEF6F79D66BCDA96C172E144D302AF174D2D1FEB58091F9FA13139D80B65B9068D58D0A47F83999E9EB
Malicious:	false
Reputation:	low
Preview:	<svg width="60" height="60" viewBox="0 0 60 60" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.808 31.921c0 .963.252 1.612.895 1.612 1.102 0 2.189-2.995 2.189-4.692 0-.762-.202-1.387-.729-1.387-1.211 0-2.355 2.797-2.355 4.467zm22.347-5.011c0 .55.139 1.172.521 1.629.172-.501.415-1.502.415-2.184 0-.408-.09-.701-.388-.701-.3 0-.548.574-.548 1.255zm4.603 5.011c0 .868.252 1.612.891 1.612 1.12 0 2.19-2.995 2.19-4.692 0-.77-.19-1.387-.717-1.387-1.221 0-2.364 2.853-2.364 4.467z" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M60 30c0 16.569-13.431 30-30 30C13.431 60 0 46.569 0 30 0 13.431 13.431 0 30 0c16.569 0 30 13.431 30 30zm-6.515 1.462c.035-.106.106-.16.186-.16.178 0 .329.217.329.569 0 1.333-1.38 2.956-2.968 2.956-1.016 0-1.567-.726-1.783-1.724-.655 1.108-1.51 1.736-2.568 1.736-.972 0-2.097-.66-2.097-3.024 0-.818.174-1.638.468-2.388-.694.492-1.42.507-1.9.445-1.228 2.547-3.258 4.95-4.4 4.95-.928 0-1.524-1.751-1.799-3.92-.88 2.323-2.198 3.91-3.495 3.91-1.17 0-1.7

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5776)
Category:	downloaded
Size (bytes):	5839
Entropy (8bit):	5.698825194617736
Encrypted:	false
SSDEEP:	48:OUhoDOPJ5pfjxyQWRmFFABgTLaqgezUzGn9gJ9c9c+62JJ0H7t0VCWhhDcZwcfk9:pF1kQhFFAWPpzzkWOMKOHWet8PKF
MD5:	24D44DA55BA6F725EF9E67A954D74EA8
SHA1:	E94B228D01E7B252D6605FA78BDAA3EAE7D4472B
SHA-256:	D6ECD766FE52AB70FC3D1AE0A251D14D1E5E20E7A427A3A6A03FF7769F94D51D
SHA-512:	771F448AB7CCE3BA8121E112DA55A274953C38886FC3AA87DE85BECE14C8E6D120DDCC355083EA69F0CAF4DE3B43DB41E4F720C8ADAED608D8F4B45774EA37F4
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/fdd78af6781822ca.ltr.css
Preview:	.USE2Rg{border-radius:9999px;display:inline-flex;font-size:1.1rem;height:16px;line-height:16px;position:relative;vertical-align:middle;white-space:nowrap}.USE2Rg.USE2Rg{padding:0 6px}.vCLpaw{border-radius:9999px;box-sizing:border-box;height:20px;justify-content:center;line-height:20px;min-width:20px}.vCLpaw.vCLpaw{padding:0 3px}@media (-webkit-device-pixel-ratio:2),(resolution:2dppx){.USE2Rg{line-height:15px}.vCLpaw{line-height:19px}:root .USE2Rg,_::-webkit-full-page-media,_:future{line-height:16px}:root .vCLpaw,_::-webkit-full-page-media,_:future{line-height:20px}}.wz1lJg{align-items:center;display:flex;margin:0 -1px}.wz1lJg.LxsoTQ{padding-right:2px}.ZQcUXA{border:0;cursor:pointer;margin:0;transition:background-color .15s ease-in-out}.xjABfw{outline:none}@media (-moz-touch-enabled:1),(pointer:coarse){.ZQcUXA:after{border-radius:9999px;content:"";height:40px;left:calc(50% - 20px);position:absolute;top:calc(50% - 20px);width:40px}}._3_6cwQ{background-color:var(--S_zKBQ);color:var(--QErh

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 38848, version 1.655
Category:	downloaded
Size (bytes):	38848
Entropy (8bit):	7.993669247804477
Encrypted:	true
SSDEEP:	768:SGQkx5jYojomEnKWP2gtvC7smgmSNW82sdRzCGZMc0wbsNm4NY8vikf:3L5LHNY2gU7ZS2gdCCMcQG8KE
MD5:	CFF149EE1E9D2BE50AC77BCD86769D05
SHA1:	A1B8A95DDFE811A098D0298E83DD711E90943732
SHA-256:	C84DE7E52D68BD3B651219E7085236BABC85A0C7C79F21A14F0CDDDBD0FB4B4C
SHA-512:	D27E713343F51A75E909B4A01D3F2FFB95EE82E13A1B21A9D3034D3858579E4C3FEBAE76E1AF706B820E51583254281E256B825F1742167E1E072DC59CDF1AE4
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2
Preview:	wOF2..............%(...L..............................j...?HVAR.^?MVARZ.`?STAT$'(..N/....D.\|0....6.$..\|..... ..>. [..q..W.....sgtY.....C.m..X=e...`...~9...?-....h[U.t.-.\..Q.zkm..,..k..RP4...%Z#_1q...H...A.P.T.s#..Q...;......[...H\|..C....i....AW....V....r..'.....`...$r.C$C$..8&.....]:v\x&N..q..........}..+.Q.$OJ............./.Wdb.a..........}.<....}//..B...BHB.!.K.+.).kT#.J).".Xa,e.JqQDtW..o...R..v.W...........;]..w...........7C0.N.^Q.m.......bAn..c8b...VD..(...Q"Z..y..1...o..O_......L.._.f.&........LC.Z................N....=.Y..]...h.).\|....&.1B.....6..].R..3.t)....i........#...`.B.8..D.E\V.(5*...O2..7..93.:.l6.$.B....>._...9..FE.........V.........1...0Al.5g=.....:/...L..3.b......7....... ......j...u...F)......e.g.Xf"C..e...3=..#...y...w...I.@.O.>.J.$........{S.V...e8B.. ."J9..DD."27k"VD..(...}...LHT...a.6-...r..m~.........~.?...NI...!..'F(b.....xb...(."~u...Q..&:.....9#Gm.D....D.&....R\|.D..N...:...".......II'.w_#..X...&:..WQ...\|...oj...RzP....T\|

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	72248
Entropy (8bit):	5.322603203191602
Encrypted:	false
SSDEEP:	768:2orWhV7fYcHgxFyvhlZcWDHw1tXzCCeX9Urk6fTHPB2hxJ8FBvdrre42e2UChuNU:bog2v7Z5CeuJH0hxJmvNaZsibsUUJf2
MD5:	72AD13412BFCC5346D32317634B8699A
SHA1:	F6C43A901860C0801CF717764AF95224F6C5C6B2
SHA-256:	5D7C7E944AB0409AAEBE2D822EFE1D0AE975CB95D69EB29B93DA59A84CC9D47A
SHA-512:	2A3DED6BEBE62407DC7CE2076B0FE838C3057B12B8A16BA0DB825CCFC18194CCC8E6F89BE1B54C1BD797309BE52D9880047ED77987AEF598282890C94CB870BD
Malicious:	false
Reputation:	low
URL:	https://short.io/108-639038011f01d16f61d8.js
Preview:	/! For license information please see 108-639038011f01d16f61d8.js.LICENSE.txt /."use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[108],{1108:function(e,t,n){n.r(t),n.d(t,{renderImageToString:function(){return p},swapPlaceholderImage:function(){return f}});var r=n(2532),o=n(6540),a=n(5848);n(2729);let l;const i=new WeakMap,u=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection,s=["image","loading","isLoading","isLoaded","imgClassName","imgStyle","objectPosition","backgroundColor","objectFit"];function c(e,t){e.style.opacity="1",t&&(t.style.opacity="0")}function d(e,t,n,r,o,a){const l=e.querySelector("[data-main-image]"),i=e.querySelector("[data-placeholder-image]"),u=n.has(t);function s(e){this.removeEventListener("load",s);const t=e.currentTarget,n=new Image;n.src=t.currentSrc,n.decode?n.decode().then((()=>{c(this,i),null==o\|\|o({wasCached:u})})).catch((e=>{c(this,i),null==a\|\|a(e)})):(c(this,i),null==o\|\|o({wasCached:u}))}return l.addEve

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1237)
Category:	dropped
Size (bytes):	2523
Entropy (8bit):	5.501055671994916
Encrypted:	false
SSDEEP:	48:ja8+u3vYsG9AwcqSaTCa73vYsG9AwcqSa6uRZwcqSaqnQLRmaKcztSVlG9/CCdR5:+8+u/Y2st7/Y2sDRXsqni8pwt9F5
MD5:	84E44E413C70A5691967DB6C56D02374
SHA1:	1274B0D5D2DF2C7522D040C6B970F75ABB5692FE
SHA-256:	AD602CF53C1459E3B9FCBCA45CD51611A69C6A2D9CB6A7F44069C77882DE1550
SHA-512:	5A21E0DCB26B4C9677EDFFBC5ACD08FC218F419C4468ECBAA245C0D6A02B88746BEAC101B80B19C88F4FB6F57C43054DB81E6CBBCFA139591ED7DCE13FD5F7D4
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;ord=804583618;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=804583618;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44016, version 1.0
Category:	downloaded
Size (bytes):	44016
Entropy (8bit):	7.995076773162081
Encrypted:	true
SSDEEP:	768:wrlvjtMVVkHsuUmg9PSCFwGdH0rEEmMwIcEs22YZRWI7AnDNbK1td/3YQbCXi:UtjtMQszmgvBHgEExg0ADNI3Mi
MD5:	9C8711499627177440D1BB4E49946533
SHA1:	7F3C664780A67A495D4865E3D56AAC3C113EE778
SHA-256:	D6DB44A1174D1106A574B61FF74135C0303B968AADE398ACD950CF46FF77DE9E
SHA-512:	76E8343C6B5B6EB6B2AB6FB458C182AF3141176DF81FADABC6FB02F65D133D8AFEF5EBA011FCF66709B24B79B6052738077C0969FA063784A8FB83D7C5C50458
Malicious:	false
Reputation:	low
URL:	https://short.io/static/Graphik-Regular-Web-d3151eef921a9fea9980627ea3af95b4.woff2
Preview:	wOF2..............I......................................6.`..`....H..s.....@..E..f...<.6.$..H. ........x[.#...n..........?a27.q.U.l.....K5L.b..VU.&H......5.B...S.?.....j.uk;.rw.H.N.N....fW.+....Yy...L.t.....e.P.%.8..X#L.R.l].n ..0.NW# .....f..(.<L...(>.H...R.d?........OSV$8d.R..,~.9.J..%w2%....@.....C....lO.....\|.}........{.Q..)OPd....(N.#U...=}.).n............y........5..."._CXs..2:.....K.....&...5.m..-wO...M{.....?...U...=.?&.y......\@.....v>.J}......^J#..R_.!..P.PZ@J t1""E.c.T[.....X:..........+(...uU.{.%.l.,.2......8.U.....h.?E..CJ.G....pD.d=...........X.(...l..n..-n.`.T.Q@AT....7.........W.......a.}..X.,...K%C+.....3.&.l[..3L...jsK....6w.."emC....n....VeKs..F.g....J.8...?r...D.@....@.$..I.[{...ok@$Q..N.g.n..^h...\|.PH"...........a.t......p`...`4.]-".].......4....#..@..........-.`.".#...V..s.D..OH..W..Ut.;g.\|L.n....../%L.@..........@...^..\|d..:rA#N........R.2..t.{....Aa.$.L<....%Z~.x.q..U*.J...?".......=v......<yR....Jq.....>...Om..Q....

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4793)
Category:	downloaded
Size (bytes):	143061
Entropy (8bit):	5.729352507456083
Encrypted:	false
SSDEEP:	3072:lTcqcOHrKv4KzkuXpd1IwlriBkrQcFUJDhkm8Cl:lTjcOLKv4Kzb5jplOBkrQcFUJfvl
MD5:	67A8C56E6C3CAD69E56699C9D86991A4
SHA1:	E8D71A85A9BF165C3D1C4B155EB74704BEFCF452
SHA-256:	2900F02B40AE6F6C87AD2F37C3877995263B9193F84964FE0FD63B54E4EB6506
SHA-512:	5F74D9EE3A285E3EC0FCDF9F29E0112DFBC40B056BE32D8C879E98DAB491B836B28BCA0C223DF8844D600DFCC8623C090B299803BB7BE74437648CF88B99C74E
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/873aa379081c784a.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var $k;var Uk;var Ck;var tk;var Ta;var Tf;var Sf;var Ff;var Ef;var oc;var Lb;var Cd;var Id;var Kd;var xd;var Dd;var Ad;var D;var yd;var O;var Qa;var cb;var F;var vd;var wd;var zd;var N;var A;var ad;var K;var M;var Ed;var Sa;var Ra;var Q;var G;var J;var da;var nd;var Jc;var Hc;var zc;var rc;var nb;var w;var eb;var Ma;var z;var t;.var aaa,ja,ka,ma,ua,caa,faa,eaa,daa,gaa,haa,iaa,Ga,Ja,Ka,Na,Pa,Ua,ab,Za,Va,Wa,Xa,Ya,$a,bb,jaa,pb,xb,oaa,saa,raa,taa,paa,xaa,yaa,zaa,Ob,Qb,Aaa,Ub,Baa,Caa,Daa,Eaa,Faa,Gaa,Haa,Vb,Iaa,Jaa,Maa,Laa,Naa,Yb,Paa,Qaa,Raa,ac,dc,Taa,Vaa,Zaa,Uaa,nc,Saa,bc,$aa,tc,aba,u

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 220, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	32744
Entropy (8bit):	7.977910089903143
Encrypted:	false
SSDEEP:	768:fhzzoAMPfg4DnyNXhPCvW9/iSMQ4VYN2O0BtThcnwrF2mS8Q1:f9oATvPbiQ4VrOYFLG
MD5:	CD92BB46373721621FC50FA0C7350104
SHA1:	D3190EDB6F7B052BC3F235C5CAFA1F1B73F70BD8
SHA-256:	180B3C9B647CB5BC3E1F796C35C5796D829E21F981F7D3D85CD9FC77B03D57DD
SHA-512:	5A1C32C62444D3053C7E1DC4CC6C313C511720448CC7D150D2C23A41BB22F4998794C0CBA5BAC95C11CFECCC1556DD7DCB173F6B2770AE095DEDA3983139A4E1
Malicious:	false
Reputation:	low
URL:	https://short.io/static/small-planet-e3789c1103edc526be0f3eb2b4c28d03.png
Preview:	.PNG........IHDR..............Z.....IDATx....o.t..pw.=...!4..!...< ...7.;..ri....clC.@0....F)...:..x`\d;M+V.M.j.....M.4I.;......"U..&.\|?......Z.W...........................................................C..#l.i....k....pw!..P;t.#.=;....=.......N.....$..uf...\.V@..B.Q.......-.?9...R.n.Kw1..........)..X7._.D....!.......\=x....z..jD.:..;.#.....#.....9;y]...Z.H,...lu0n'^. ...K..g.rJ..=.[..N.]\W..C.....S...2Eh............~..C_:3........[..\......M.......e..l....>I..I.^...+7...$I..J.\.,..M..2...%......_.M.S.\|....\|b.'t{...........H%......x...H...R...jZ..h.&...0=.Z........W..x.;\|...VK.S2B.L.L...k..kS.7.<....DKmr.H..\r.....(.Y.i........-.......c;...../....M< .paS{J..h....i..G...a..;CK.......MI..x.q....*...<Gk.~...Gh]...q...a..Gi.8.\J......aK.`..!....n..^....p 78h..2.!..<.....wqK9.....:Z.D.../."...'Y....bn...;.h....@%.Ll.k%..V.,...a.=B..S.zx.i...q........k.j\.Lp...e.u....A...S..k..yVz..C......t!.3..B...UM4y..u;.J............3...{TW..y4.x...^..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	209528
Entropy (8bit):	5.281185548909212
Encrypted:	false
SSDEEP:	3072:uJGss5j1Ll6BO2IheWwFC5dONBFwDZXIF0TFZ0Am:5j1Ll6U2/WsC5duPwD9ayzm
MD5:	84C7118E873BF57F4460BF7E0B13F3B3
SHA1:	22811E60AA89033269C7BA60ACA0D87E937C8EFD
SHA-256:	F15178327B6FF318AEA1DFBE8EC6D052A1951475D0DA7074EDEDAA0866222497
SHA-512:	743E01621C8C6C44BE84F3A0E60AC546460F87C643360D9B0589E64B09D82743486C0ADE2124D63D0233044CA89E0178D3E85BA5D8F606D78892F4CC42C08205
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/e113aa3e935a6b0d.vendor.js
Preview:	/! For license information please see e113aa3e935a6b0d.vendor.js.LICENSE.txt /."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{68743:(e,t,n)=>{n.d(t,{Q:()=>a});var r=n(38672);function a(e){var t=e.children,n=e.render,a=t\|\|n;return"function"!=typeof a?null:(0,r.S)(a)}a.displayName="Observer"},433581:(e,t,n)=>{n.d(t,{FY:()=>o.F,Pi:()=>u.P,Qj:()=>s.Q,fv:()=>c.f,jd:()=>l.O});n(809991);var r,a=n(321645),i=n(356158),o=(n(38672),n(391367)),l=n(992449),u=n(350666),s=n(68743),c=n(764947);n(433579),n(548495);(0,i.z0)(a.m);r=l.O.finalizeAllImmediately},350666:(e,t,n)=>{n.d(t,{P:()=>d});var r,a,i=n(667294),o=n(391367),l=n(38672),u="function"==typeof Symbol&&Symbol.for,s=null!==(a=null===(r=Object.getOwnPropertyDescriptor((function(){}),"name"))\|\|void 0===r?void 0:r.configurable)&&void 0!==a&&a,c=u?Symbol.for("react.forward_ref"):"function"==typeof i.forwardRef&&(0,i.forwardRef)((function(e){return null})).$$typeof,f=u?Symbol.for("react.memo"):"function"==

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4933
Entropy (8bit):	5.98771914065213
Encrypted:	false
SSDEEP:	96:i+mMqW3YYaIu1sias/rpu16AtT7NnUgYqpUy66CHpuTErtLq/lKBdfLhPa0TGRIw:i+LqsJizFvAtT7NUgYu661ErtmdKBdfo
MD5:	5268F210799316EFFD05443BC8F9AB73
SHA1:	0D2B46360AA82A767720E1A2448C866BD7D7630F
SHA-256:	61F5935C5E09CBB8CD9422D04B3241E75EFC81506C7C4B782CCFC6A9EF86E22E
SHA-512:	7D87E006386EE6E8824680C960433BFAD6BD09E88BFC4784934E68D31EEE56356BB2CFF9CE0A1B54C3ECA481B228EAFC37FF34A45D5ECF28D1B182F39B2C40D6
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/sq/d/2385355646.json
Preview:	{"data":{"integrations":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,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

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20031
Entropy (8bit):	3.782071232286128
Encrypted:	false
SSDEEP:	384:POifhojv+ifhojv1ZfipLojvLdIU9RNtpdBU9RNtpdstUlRmtp+7ErS:GEPZfbdIU7Ntp/U7NtputUDmtpIErS
MD5:	578ECD265D2B2061C76B5BFE073302E0
SHA1:	EB6AB776AB98F13611CDD58606857C4CAB33294D
SHA-256:	A32B7BF5FA7F556F965818D5D63B7ED4903FAE1DAC078D737C875BD801BBBCE2
SHA-512:	8770756C83504F3CD515E1A64F218BFCA7F524437E6B079C839096D8D0BB30611A2CB655B2F94991A5F91E573F0DC84BAA6CB52DA4A4D52EC9CE097316FB848C
Malicious:	false
Reputation:	low
URL:	https://short.io/static/chat-8b5b6f04fb69dbe0a772f7d695503bbb.svg
Preview:	<svg width="158" height="101" fill="none" xmlns="http://www.w3.org/2000/svg">. <mask id="a" maskUnits="userSpaceOnUse" x="0" y="3.5" width="128" height="97" fill="#000">. <path fill="#fff" d="M0 3.5h128v97H0z"/>. <path d="M29.4 14.4l-.6.4-.7.3h.1c-1 .5-1.5.5-2.4 1l-1.3.8-2 1c-.6.7-1.5 1.3-2.3 1.8-.2 0-.3.2-.4.4l-1.1.7-2.3 1.5c-.6.5-.9.4-1.6 1l-1.6 1.4-1 .8a37.2 37.2 0 00-6 6l-1 1.1-.9 1.3-.7 1.6-.8 1.8-.7 1.2-.2.6-.2.6-.4 1.3-.2 1.3v.5c-.1.1-.1.3 0 .4v.7l.2.8.2 1.4c0 .5.2 1 .3 1.4l1 1.9 1.6 2.4 1.2 1.4 1.2 1.2 1.3 1 .9 1a11.6 11.6 0 003.5 2.7l.9.6c.3.3.8.4 1.2.6l1.5 1 2.8 1 2.6 1c.3.3 1 .5 1.6.7l1.5.5 2.8.9 2 .8 3.2 1.1c1 .1 1.8.3 2.7.6l.7.2 1.6-.2-2.6-1.5-4-1.6-1-.4-.7-.4-2.3-.8-3-1-2.8-1c-.6-.2-1.2-.5-1.7-.9a12 12 0 01-1.7-1.2L15.6 58l-1.5-1-2-1.2a17.8 17.8 0 01-3-2.7s.2 0 0-.2l-.6-1-.9-1a14 14 0 01-1.1-1.3l-.9-1.2a6 6 0 01-.6-.8l-.4-1.1-.4-1.4-.2-.7v-.8c-.1-.7 0-1.3.1-2 .2-.4.3-.9.3-1.4v.2-.1c.1-.6.4-1.2.6-1.7l.4-.7 1-1.7 1.1-1.7.2-.4.5-.7.5-.7 1.4-1.5 1.2-1.2 1.3-1.2.4-.6-.2

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 385, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49185
Entropy (8bit):	7.984804323327324
Encrypted:	false
SSDEEP:	1536:pYwmPEuWCIoR2IPDqtRjrxu/SQK+SHPym8:ywiWCJRZgRBuKQKTyl
MD5:	960E5DAA255BDF37FA6BA9699DF4F2A9
SHA1:	B357EF29045093273916BE98AD59DDFA0FD06766
SHA-256:	4A5665A54A1B8D2BBC2F89A5E986D51508B2FFF9663ABAC87C319D0A7BCA275B
SHA-512:	478FC694C44830665E0FF9FA24C5250420B5FB89A6981A3B6A6127FBB2F3C90F534069218EDB5AC1EE6D346196AAD47C74C01F5ED539461B7A2C9A9EFAF1BA1E
Malicious:	false
Reputation:	low
URL:	https://short.io/static/medium-03-459ab7b8d6ddab3db59a811ce69ca557.png
Preview:	.PNG........IHDR..............Y.$....IDATx...Ih.u...4.H...}.."....A.@...... .. ....K..YP...r.uADi..-..J.&!.....d..x.&K..........yg..d.y..............................................................................G..l.....]-u\|....@]d...Sw.:..e.u......o.U....k_...\|s.km/x..a\|......{O..osr:'.K....tA......\o.g.qg........u......u..?.`..s..o...5im..:..u..tsz4=..L...+.....-Y.M}ik.O.333{....M{.=..f{<..<..:....;.~.z .Q....+.N............s.7..+......../.3.)i}..M....%5H/NW.6mH....}.:..:..tw.%..J..U5..O..9.Hw..'=..K......\......d...V....j4..~......:=.^L...k....<...{.;..d..i..f.D.h..Y...?.&.5.zn../...<.z..Y_K.....B..nK..s[.3uS..H..`...Yc].5=..L[R_..]5..k .Y..Z....4..ok.`..`.e...v.~...q{.~...Ywd.$...4.Z&S.v^.#..#.kM_...3.I..y..X....D....{......^.F...-..9Z...=Me.7.4...K3....}...u{].h....o...=.>...#u#.M=.?.p...^?..I.........5l......x.....[..;g.[E..aB....(F.....-.q...1"n.`.E.5FQ4.Aq..E@k@......R.A@..B[..}....:o..w....&"..{.?.....f.?...L.YC.q...c.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1079)
Category:	downloaded
Size (bytes):	3024
Entropy (8bit):	5.733300221391159
Encrypted:	false
SSDEEP:	48:AOA4g0cyD7yv3J2exFT6UbeNGNK5U0nzIaphkPXezPGiPVzbFoGf3kjWPUMbrEcY:5uBzbeYYU0zIKkott3FoGf3vlkc8R
MD5:	30FB53F7BDDA23F3F1F1742D72649FF8
SHA1:	8787FB1CACEE102FC19E3BEFC296DDE8FE0F0D28
SHA-256:	CB8C730760D195533540903964228041D97E7FC1A3BD9A31FBE9BFC530DB0645
SHA-512:	91F0FA25361B533F8E12EA5F3F7A0D22C40EF50101B44001C7AF7E429EF41F262A7AFC14B9E806DFEC2F3A72E1F8DD25FD63A225DEE4EEA33954814F2C3446F9
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/df1c6555d629a225.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5036],{../***/ 122771:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(708358);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var G=__c.G;var Sz=function(a){return({size:b})=>JDa("img",{"aria-label":a.zq,className:KDa("ygGKTQ",LDa[b]),src:a.svg})};__webpack_require__(167824);__webpack_require__(66209);var JDa=__webpack_require__(785893).jsx;var MDa=__webpack_require__,NDa=MDa(294184),KDa=MDa.n_x(NDa)();__webpack_require__(667294);var ODa=__c.J(()=>[1,2,3]);__c.Tz=G(()=>({status:__c.Ra(1,ODa)}));__c.PDa=G(()=>({name:__c.N(1),properties:(0,__c.Id)(2)}));__c.QDa=G(()=>({}));__c.RDa=new Set("2764-FE0F 1F44D 1F44F 1F602 1F62E 1F914".split(" "));__c.Uz=Array.from(__c.RDa.values());__c.SDa=a=>{const b=document.createElement("a");b.href=a;return"data:"==

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	748812
Entropy (8bit):	6.131346893582355
Encrypted:	false
SSDEEP:	12288:qqCI0UnIHGSGOcxkNUu5DEBlVrlKGxFNnhEfpuMzePea406Z1T:yIZnIHGSakNeqXH
MD5:	A5D191372D8C62BD542E9ED0C7B9B99D
SHA1:	68D0E3C6B04AE5CED6C5F9F5ABA13E04CF1FD38C
SHA-256:	20D0AAAF210B20033D00C912A16BB3CD6E1D2C2F20F3E56B0881A5497FD889EF
SHA-512:	F9FDAFE6A47268E35738BD28E9A9175219199AB739C9EB5E89BAB95ED1BA7EC4343678BC44B379E3F427F3AF6134DB198532DC451A36D2E3E10D8D6E4C8036B0
Malicious:	false
Reputation:	low
URL:	https://short.io/app-03b578d60f542c677ed5.js
Preview:	/! For license information please see app-03b578d60f542c677ed5.js.LICENSE.txt /.(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[524],{262:function(e,t,n){var i={"./de/404.json":1829,"./de/about-us.json":6151,"./de/common.json":6854,"./de/enterprise.json":5440,"./de/features-list.json":4664,"./de/features.json":1812,"./de/integrations.json":8016,"./de/main-page.json":2386,"./de/partials.json":1237,"./de/pricing.json":2119,"./en/404.json":669,"./en/about-us.json":7535,"./en/common.json":3726,"./en/enterprise.json":8648,"./en/features-list.json":8180,"./en/features.json":8364,"./en/integrations.json":8168,"./en/main-page.json":922,"./en/partials.json":7501,"./en/pricing.json":4911,"./es/404.json":7598,"./es/about-us.json":9954,"./es/common.json":5431,"./es/enterprise.json":9393,"./es/features-list.json":9195,"./es/features.json":3501,"./es/integrations.json":9453,"./es/main-page.json":1513,"./es/partials.json":4236,"./es/pricing.json":7240,"./fr/404.json":5094,"./fr/abo

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533), with no line terminators
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	4.933115570682282
Encrypted:	false
SSDEEP:	12:X5eNcBWFXMOYEBAP5egtIzVWRwHjXJqIK+qIKzg0fUsq5eK:pemBkXWegazdDZq3+q3c08sceK
MD5:	FEB698008C36A09DFE88AB06A1C3E3B9
SHA1:	A871FBCBBE298AE7078D06627708B2C106A0FAF3
SHA-256:	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
SHA-512:	F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/style
Preview:	#credential_picker_container{border:none;height:330px;position:fixed;right:20px;top:20px;width:391px;z-index:9999}#credential_picker_container iframe{border:none;width:391px;height:330px}#g_a11y_announcement{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}.L5Fo6c-sM5MNb{border:0;display:block;left:0;position:relative;top:0}.L5Fo6c-bF1uUb{-webkit-border-radius:4px;border-radius:4px;bottom:0;cursor:pointer;left:0;position:absolute;right:0;top:0}.L5Fo6c-bF1uUb:focus{border:none;outline:none}sentinel{}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47196, version 1.0
Category:	downloaded
Size (bytes):	47196
Entropy (8bit):	7.995000574205742
Encrypted:	true
SSDEEP:	768:Y3e2t74HN891Bl9HUSe+g1+ek21rkTBvcHwHLMFFwj/EG34hdsYW5VUjxuh0SHji:Yu2l4HN89zPe+gu21QWHeLMvwjsGQsl+
MD5:	727ADBFFEB6B37513FEBDF0B57010D78
SHA1:	C564A168DB1CD9E3AB3FED2204ACCD42EC4C6BFE
SHA-256:	A122DF7BA1067B60020CB6522A65E072ABDEF724FEF20FB86CCCEBF0E905369A
SHA-512:	4EBB8E1909262330BC6FE99E49FDE8A21D82BE4BE455565B03DEE8BC49B7E83D17458CDA0AC47AD86A42EAECF6CC396D3A201C2FE99C26DEC9314F607F4DC7F7
Malicious:	false
Reputation:	low
URL:	https://short.io/static/Graphik-Medium-Web-2a840b356254e218b9b3a2c600652730.woff2
Preview:	wOF2.......\......a(....................................`....H..s........%..f..6.$..H. ........l[?;..2.~r4..Vn...U.]..5.1.q...D.YZ..6......cK....../H&2....I..&.T..7..3g......Fj/.0.....2...7G..#...B.3.C....:B.e...,..JYNW..P...,.%.:..gAu..).uI(ZU.CS.`.V.`r.9'.=\|U.6.{.........5..8{..P5C...[zH..).Zk2...<<sx..B.pT7U?brU..:L...[.7..'..C....7%....#...Z.[...cz;Z...fb .l\..l.a.......Z..Ml..T.6W...^.6.n.G..X./;].B..M..k..\|.]........2.G...!.=Y..cs..............'H...p..%.Z....S...oj.........BK.%[...;N..p..{.......e..=G.....n.^..B....$......}..b.."B...&vJ.G@.,-B(.-.+X....>..4[.T.AAy...k.~ ..Y..,../.T......+...\k..s........R+.....t..m.zf....lW.\|PbS..T.&..a.6K....u.f.kj.........t!..Z..@..<.q.......xL.4i...]T.5IM..u.....g?L...l-2.&...gs6...h@...f+.q;H.Z!.p.!..w.......Uu.t.0..X.B".F".......2.......'.XbN%m..Jc.....g5 =.&...Sr.?.....U...r.EDn.T.&...D.}.....[.m}#.8..;.B..........\|d..{..l....B.:.UZ.........ciZ.......mMW#a'W...o...\.#.;.\..1....0..nK....;l.QD....

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20031
Entropy (8bit):	3.782071232286128
Encrypted:	false
SSDEEP:	384:POifhojv+ifhojv1ZfipLojvLdIU9RNtpdBU9RNtpdstUlRmtp+7ErS:GEPZfbdIU7Ntp/U7NtputUDmtpIErS
MD5:	578ECD265D2B2061C76B5BFE073302E0
SHA1:	EB6AB776AB98F13611CDD58606857C4CAB33294D
SHA-256:	A32B7BF5FA7F556F965818D5D63B7ED4903FAE1DAC078D737C875BD801BBBCE2
SHA-512:	8770756C83504F3CD515E1A64F218BFCA7F524437E6B079C839096D8D0BB30611A2CB655B2F94991A5F91E573F0DC84BAA6CB52DA4A4D52EC9CE097316FB848C
Malicious:	false
Reputation:	low
Preview:	<svg width="158" height="101" fill="none" xmlns="http://www.w3.org/2000/svg">. <mask id="a" maskUnits="userSpaceOnUse" x="0" y="3.5" width="128" height="97" fill="#000">. <path fill="#fff" d="M0 3.5h128v97H0z"/>. <path d="M29.4 14.4l-.6.4-.7.3h.1c-1 .5-1.5.5-2.4 1l-1.3.8-2 1c-.6.7-1.5 1.3-2.3 1.8-.2 0-.3.2-.4.4l-1.1.7-2.3 1.5c-.6.5-.9.4-1.6 1l-1.6 1.4-1 .8a37.2 37.2 0 00-6 6l-1 1.1-.9 1.3-.7 1.6-.8 1.8-.7 1.2-.2.6-.2.6-.4 1.3-.2 1.3v.5c-.1.1-.1.3 0 .4v.7l.2.8.2 1.4c0 .5.2 1 .3 1.4l1 1.9 1.6 2.4 1.2 1.4 1.2 1.2 1.3 1 .9 1a11.6 11.6 0 003.5 2.7l.9.6c.3.3.8.4 1.2.6l1.5 1 2.8 1 2.6 1c.3.3 1 .5 1.6.7l1.5.5 2.8.9 2 .8 3.2 1.1c1 .1 1.8.3 2.7.6l.7.2 1.6-.2-2.6-1.5-4-1.6-1-.4-.7-.4-2.3-.8-3-1-2.8-1c-.6-.2-1.2-.5-1.7-.9a12 12 0 01-1.7-1.2L15.6 58l-1.5-1-2-1.2a17.8 17.8 0 01-3-2.7s.2 0 0-.2l-.6-1-.9-1a14 14 0 01-1.1-1.3l-.9-1.2a6 6 0 01-.6-.8l-.4-1.1-.4-1.4-.2-.7v-.8c-.1-.7 0-1.3.1-2 .2-.4.3-.9.3-1.4v.2-.1c.1-.6.4-1.2.6-1.7l.4-.7 1-1.7 1.1-1.7.2-.4.5-.7.5-.7 1.4-1.5 1.2-1.2 1.3-1.2.4-.6-.2

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 385, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	61401
Entropy (8bit):	7.976260796828647
Encrypted:	false
SSDEEP:	1536:8TkWXuh8VNQw+HCU3nL0EkUP+R3yaXCHbKnyYrfxzkeuvGA9TAFLvV:E8etHU3jkUP+RCayricG/FJ
MD5:	702C30AB29241670C96E416B76840094
SHA1:	2B3D1AFA4639999F66091D4EDE193ED81026009D
SHA-256:	758B9571913AC1297FA7CE24C320349ABB2E2A571083E67368661101F6732A1A
SHA-512:	862112417E5119E64DCD0D6D870823C29577F4CF03F8F83F60F4F40DF1DCC08EEEF6E14199BAFD506E487C3A49B16BE2DBE5BF01991C4C36BDEE20EA8D43B771
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y.$...IDATx..Kh.e..O...m4.q.FtQ..R.WjADQ.J...V.)...7.Q....QZ.RD.P-.L.......HjK.%.DS..ir.....o.0$&..M.<....?..Y\|..Lj""""""""""""""""""""""""""""""""""""""""""""""""""""""""""+.,..p.ED.. /.a;vD...y.m.I..\.,V.O..j\...\|N..AD."a.....F.I..Q.1....?...U.........>..k*..-$...Au{&.:..\|"M..=...j.....1<..8..b>.5;.A..#.. N....&..M..1..\..p...Q.?.`..iL...1.f.e.oV.f..{.0.+..e.......p...{q=>...m.W............:....x...q.R.....`.8.N...a...\|...Y.?...#....]. N...h....p#.p.vb-.. "...pvby.?.n..B\|..x.y#..,.4.<.;kA.!0N....).c<..c...c..........{.A~E.&w....6....M.o.""K..R.,.....%v.K.....(.w...Q).@"..8.E.L...[Ep..q.........b.......c..._.Mx-^U.Z..l.""..........5.1a.4.'q.....".=.'.. ...B....)..G..B.......X...V..a.....uS..\|)......7.x3'..~<y....7.>.cQ..... .......6...Mb^4....`....?.^...x...J\k#....?t..o..C....I...1~...c.x.gq2O.5...h..K.#.6..Z:...od....x..o...O.y...p5...@D.I...V.m.}Q.\h..\|..N..k....p.Rx.\.d...yA.SdZ.s.`.\...p...r/N0.'...q......X.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7138)
Category:	downloaded
Size (bytes):	7201
Entropy (8bit):	5.5142226325045876
Encrypted:	false
SSDEEP:	96:Lv5CWoGk5zRzC+Kdn7YZpCePxaap/h+Uu/5324MXCGWodARPa3lfeGLhXSFkgUnK:5YZU8HQUu52V+035LhXSFIOT8d3fVzu
MD5:	8A60E615F4CF50CE557DB237AA444DEF
SHA1:	A8D4D05207188CB9AAA6E61B04D4E3D8526ABA76
SHA-256:	5E6CED3D68A28731A1FE4B1E815F04BC6663438295563847D5F967EF66F51827
SHA-512:	42012E9E808AEDD0D95EAB3F534C4FD2B0D0B07694FE18BEE6CD0F88FBFAAC7693E595EADA7D3168203DB11A7FD4D6A980F358A817298CE27E47930727CD9F67
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/451da5240d983e12.ltr.css
Preview:	.theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QYA_-A:rgba(53,71,90,.2);--ctGD3w:rgba(64,87,109,.07);--_T63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--hjVsrw:rgba(53,71,90,.2);--on21aw:rgba(57,76,96,.15);--FNUQ4g:rgba(53,71,90,.2);--6Rd7UQ:rgba(13,18,22,0);--nfu_og:#0d1216;--ux3doQ:rgba(36,49,61,.4);--sz5W9A:rgba(13,18,22,0);--8ZR-UA:rgba(64,87,109,.07);--H8nEqw:rgba(57,76,96,.15);--zuehrg:rgba(13,18,22,0);--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--KneJqA:rgba(57,76,96,.15);--VDCUNg:rgba(64,87,109,.07);--E05YAQ:rgba(57,76,96,.15);--sanlCw:rgba(13,18,22,0);--c9kaQQ:#0d1216;--GV6ruQ:rgba(36,49,61,.4);--S_zKBQ:rgba(17,23,29,.6);--fPN_wg:rgba(13,18,22,.7);--voBvjA:rgba(13,18,22,.86);--VGxehA:rgba(17,23,29,.6);--QErhlg:#fff;--6kDNlA:hsla(0,0%,100%,.7);--pyoCYg:rgba(57,76,96,.15);--sXgitQ:r

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	282
Entropy (8bit):	4.974369723886391
Encrypted:	false
SSDEEP:	6:YGKosrWoQcWhVSepWqM/fLHVO3DYepWAFze8J2lDiUW5LdmnY9w:YGKYVo/zYzZzeq2lDcWCw
MD5:	92D8BEDBC398C9E411D39BD51391B3C3
SHA1:	D234E59D61F809D2BE6BA397EEB30D1E202F9097
SHA-256:	79C9735C720C2B7FC3E3D6D053EF118CF55AD5E2D6C70436552B4292FA9EAE94
SHA-512:	EC1D1356BC6276DF64396A57427DD28CA31A4F7A63CBFCE9DAA7E17E319B3B54FFFD43C3F301F9B5580FFF74F0CF0CBB561BC75E2BA4FAC40D6992F3239FDC17
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/enterprise/page-data.json
Preview:	{"componentChunkName":"component---src-pages-enterprise-tsx","path":"/enterprise","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/enterprise"}},"staticQueryHashes":["1016289332","2696839970","646092132","686358898","846081873"],"slicesMap":{}}

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 912 x 684, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	236198
Entropy (8bit):	7.992506458973602
Encrypted:	true
SSDEEP:	3072:6cFVtIV7/UbJAwSGuXjga2Pvu6QFlT4wEPjAWkljNj4Gd1Zw2K779vdU/rp18qUc:6cFVt1JZSGQjxchQRWjAdJVPZkhsPU+p
MD5:	BF335FB11417EFEC74606BEFD718A6D2
SHA1:	7C73F1799870FE8987F8D26C042DA81F665B4B46
SHA-256:	62DA973101A9B664A82B254A428A2A7E49FDE8BAB4D84B8A38F6A48DD23481B0
SHA-512:	C823E891ED00D4533833E648B71BF9BD084875F1E8B3599A3C74208510291FAE69ED2DA81CDA68DE2B7736BFDF893208F756DC67B5043D5FAEBD57ED55CE50B8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............RF....pHYs...%...%.IR$.....sRGB.........gAMA......a....;IDATx...`.....]1.d[..b.....4i.....1m..S../7m.m..I9..C..I..2H..V.0.33+.e.Q.}.......hw.}.9..@..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16216, version 1.0
Category:	downloaded
Size (bytes):	16216
Entropy (8bit):	7.987705252722774
Encrypted:	false
SSDEEP:	384:gpQN81t9u4Lsbt95d5Rta4ttn3uEKw2Ej4v1+g95DZuWp:gbt9vsbt97t1vXycwjZD
MD5:	4C5BC71B3CF6F2584725C0BB3E25D391
SHA1:	F051F482061DC48D09C328C45459DD04DB5B5547
SHA-256:	ACA5DEC430A7470FF1D8A16F9E7BB3CA30F2FF58F3BD60432CF1DDDFA30C9D71
SHA-512:	E280E96E0EF736D1255DF532BFECCE67E670004CC971BB4518DC906F6D76F88508CE139190814782374E31DF15732731D676962AE2A6863CDCCA53DB4E676158
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2
Preview:	wOF2......?X..........>.................................`..\.h..m.....P..`..F..6.$.... .....@....:.U.b.8.`..1J............z-.....Q.....X.!....;. .6.a.X........wo6k....4M........2.rt...l.5.....G...O....3.i....t..~....t...4Wz.!...2....D..mv.%=x.J%Dm.V.g(.,B.$..l.J..<..b..R.2.kY....s.{.m.{~........L....CZ:...t..NQ.........os.K.!... %.....-.....Q.Z...nw...-X4. r....b....?V.7..~....i..........u..S.......E.....5..J...@..&...Lv.....n[x.u......R..M.<..`.....p.....h..;..Q...o.,cm@...V..Zw...........T"....h.C.3.tQK\J...N.VJ @..."...UnV....=.$....6.....P..Y......A....g.8......9.....7.......5NHE.Q.....J........\|..5..".u.8....y...8j.%....%..(......<d.>[....`.A4JN... ...W.0...]...w._.Dh.....4..z...Qy$...K.n.W..X.[.].`.=.......o.G.d.....3...U...2.P..C..*..6..4...'m........;.R_....+..H.L.... ....L...W.. ....D1M"..". ... .x.75..c..;..d..'.$.d...5.H.O.....#..]...$.$.+...i~...#s.t...._........:.c.mD.?...E......1......'.........@.m...9...^..x......

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	5.062478907960149
Encrypted:	false
SSDEEP:	3:USKuHRwIXWS+0/Ypf7WFWlDxRjALSLy:LtvWX5M0lDxE
MD5:	4C6B62A6E985998B29D60F7139602AEC
SHA1:	C2B5CB64663A2B00906EB8F554070F2669D6CFB3
SHA-256:	9611E69188E2CDA0CD190C945DA2F6C3D5505337D8C07784641CD2CAF946FB95
SHA-512:	BF811D69988321A2D08120140F24FDEB8CB9234D1BCD01F834869CEB62B3BB520B1AD7FF65213331DF479C7BCA02D874918A3BFB5B27A6CB9364B6E7D0F2E18F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/dc22c2df3a9e4bfe.ltr.css
Preview:	.vSEELQ{word-break:break-all}./# sourceMappingURL=sourcemaps/dc22c2df3a9e4bfe.ltr.css.map/

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4715
Entropy (8bit):	5.229431212698995
Encrypted:	false
SSDEEP:	96:4AfRBoQgiaY2CQFQwjn5WXiusMq/x+s9vRYHo1vI8BQpQAO1Qovlh0:4URbjaYJQB4zSx+AYHN8BQpQlQ+h0
MD5:	8BB696F2B509A66C99C533DA199D7401
SHA1:	9F71ACFAC51D7F1385D18D0B018C35742A8F81DE
SHA-256:	2879CFA984C50F5CB58F719F48D39A8E19477928111A1ACA030FFC2705963302
SHA-512:	52C4689E265DA87710E0FAA59189B9922AC6D48E8836DFFBEDE8E9956225B8827A679A900E4C3D4B28929AC096CC298F6BE66A9D2A4D64E245C736AAC7401A77
Malicious:	false
Reputation:	low
Preview:	[{"id":"65fc94c9bd0d7f0530e3bf03","created":"2024-03-21T20:12:57.828Z","labels":[],"publishedAt":"2024-03-21T20:18:59.233Z","title":"Public QR code generator & UTM builder","types":["new"],"url":"https://feedback.short.io/changelog/public-qr-code-generator-utm-builder","plaintextDetails":"Now you can generate QR codes without signing in to your account! Our fast shortener Short.gy also provides QR codes and UTM builder now, without registration."},{"id":"65a71296b57551994f5355c5","created":"2024-01-16T23:34:46.722Z","labels":[],"publishedAt":"2024-01-16T23:40:42.318Z","title":"Link Router","types":["new"],"url":"https://feedback.short.io/changelog/link-router","plaintextDetails":"Now you can add subpath to link slug, and it will be passed to Original URL during redirect. In order to do this - add / * to your link slug, and $1 to your Original URL. For example, in this case, visitors of shorttest.site/test/abc will be redirected to example.com/abc"},{"id":"65788bfe1dfbfecf2d386d57","cre

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27553
Entropy (8bit):	7.976695425050186
Encrypted:	false
SSDEEP:	768:gk7mEcGd0oN86FEg1U7/D8ftBVi7dT6ObuY7BxXWr:gJjGj/q8iWr
MD5:	2388DCEC93F17BB091F8371FD9C16081
SHA1:	CE3337B8CB0F37184C913AE264B867167907C7A4
SHA-256:	47864CDDB8042F8133D43D19ACBBA2EA91A3905921E731512C8489C40E176574
SHA-512:	72BE7B46AFF5ED5567737433935859A84BC30DAAA79CDBCEAF4BA9F4E059F3E181765655852E7C48181FC096DE079C099B5CDFB87981BCDFFB536CB280B67D84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...h...h.....z.a.....pHYs.................sRGB.........gAMA......a...k6IDATx...`.....YI.m0....;&GH...A.$N!..!G.]...s.s.~.~.].$.@r..J @......Nu.m.`c[r..;..}.7+..ve....F;;;3.w....^%r..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q:DdVL..8..C...}.....Y}...wT../...8N....ed..7Ss."er.R......e..=..M...G}(I.".....(.v..Vzq....6....y.....#..j8U.K<q.+..}.\|r.....r}N.>}wSn_...........K..8e..h.Cd...x.M.d...t.k(K.D.........x.^......P..!.$I.n.z.......C......8.%If36...9!.o..?....}..'..Wi8....B...>#(..LQ.*........_..b.@..UTS.D7.7....8....d....'.....P...U$.R3.9n.;!......L.Q. ..Q..T.FT<.v<.m...N.....`[D7Q.z..X..wL..b.......x.e..&,.!...?.YJr+..a.=M....m...x.4.....{9....Qv..)U...w9............o1.3.......~+.N...Q.. ....z?,...B.....n...8.J9.O.........%C)[..~....8%...^.,......X...B,......y...f..ux..&..._M.0..0X..K.0d;.}i.O\.D..q....y33<....<.Z%...L..N\.h.I.a-O......wx.....9

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.855373136447423
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQK5kG53zydwSWaee:PLKdXNQK6G53edHL
MD5:	06C551E035840CB6E91E2AADF353E4A2
SHA1:	E3ED74B70B4E7CB4EF9A2B1F63925D3DD9102D01
SHA-256:	ACE3139D24DA2A5C914E6318B96AB1016E9899574D5A170704963B4B85811D35
SHA-512:	927706DBF00462B6CB4D9457FFA8DCA98E46F725762C7A5412F1F86749BFFCC415F6907F789057EC3FB24CE6CC8BCA95EDFBDD998A89B9E77281C4E42FBB2204
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/WQcDpAcHn0sjM6ZiVkU8JwNH/recaptcha__en.js');

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10562
Entropy (8bit):	3.8469793578588125
Encrypted:	false
SSDEEP:	192:0Qf72Gpi/QmqomjQSo72Gpi/QmqomjQSHj/2GCi/QzqomjQSNZo:0Co/QmLu/Qo/QmLu/zx/QzLu/A
MD5:	878359938BFCA8AC11BAA364B3FBF1F0
SHA1:	FBDC89662562B88F05A8F25EE5613134963DAFC6
SHA-256:	233A839A682B4BE10DDF98BD02EFB731C2354AAC5AC5100BD7D5FF42A3230F95
SHA-512:	C7F50734D3746D7050D01A567988ECE37DCA69E073FF9B1D51660153C2B6DBE7F907EE4AC887F5FBACB17A713D04B65C2F13BE1E7EF3C86BAD6692DE8D2AEFB0
Malicious:	false
Reputation:	low
Preview:	<svg width="90" height="101" fill="none" xmlns="http://www.w3.org/2000/svg">. <mask id="a" maskUnits="userSpaceOnUse" x="0" y="0" width="90" height="101" fill="#000">. <path fill="#fff" d="M0 0h90v101H0z"/>. <path d="M4.4 50.9l.8.2c.2 0 .4 0 .6.2 1 .2 1.3.5 2.2.7l1.2.1 1.8.4c.8 0 1.6 0 2.4.2h.5l1 .2 2.2.6c.6.1.7.3 1.4.5l1.7.4c.4 0 .7.2 1 .4 1 .4 2.2.7 3.2 1.2l3.2 1.2 2 1.2c1 .3 1.8.7 2.6 1.2l1.6 1.3 1.4 1c.3.4.6.6 1 .8.4.2.9.5 1.2 1l.7.8a8.7 8.7 0 011.8 1.9l.6.9.7 1.1a27 27 0 001.3 2.3c.2.3.2.7.3 1a12.7 12.7 0 001 3.3l.1.8.4 1 .2 1.4.7 2.3c.2.7.4 1.5.4 2.2l.2 1.4a19.8 19.8 0 01.4 5.4l-.1 2.9a6 6 0 010 2.2v.7l.6 1.3c.3-1 .6-1.3.8-2.4.3-1.2.5-2.4.5-3.6v-1l.2-.8-.1-2c-.1-1.8-.3-3.5-.7-5.2-.2-.6-.2-1.1-.2-1.7V78l-.6-2.1a16.4 16.4 0 00-.6-2.5l-.3-1c-.6-1.1-1-2.3-1.3-3.5 0 0 .2.1.1-.1a16 16 0 00-1-2.4c-.5-.8-1.1-1.6-1.9-2.4l-1.5-1.6-1-1-2.8-2.2c-.3-.4-.7-.7-1.2-.9l.2.2-.1-.1-1.4-1-.6-.4a34 34 0 00-3.3-1.9l-.4-.1-3-1.3-3-1.1-.6-.1.3.1H23l-2-.7-1-.2-1.7-.4c-.7-.2-1-.1-1.9-.4-.4-.3-1-.5-

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	13394
Entropy (8bit):	7.974413307682823
Encrypted:	false
SSDEEP:	384:Ili3yYeCB+pLR13d/ILB21SzrERhcg/FsNGsi:/QCgLDN118rEPcg/KM
MD5:	49687A61B12EADB64D47C3CB7EC7B363
SHA1:	E0274D655D1A026CE2FDBFE14778A2049E4905EC
SHA-256:	604102D537F469BEEE216F6DFD4112148714722DE99B228E8BF3A1133F24B3A5
SHA-512:	E54FC299E2151F29E08483BB19E7D3309427C64549529BE6A1FA910A2B523A9440FF4D6BFBE66787F8C5F0F81196E1C60498F710AD8EAA77380F1B09056CF39D
Malicious:	false
Reputation:	low
URL:	https://short.io/icons/icon-144x144.png?v=e684309adfdf6efa515a707d11a3e1f1
Preview:	.PNG........IHDR.............h$u.....pHYs............... .IDATx..}.W.i...7.omT....AP@P. .bEz.U....tBB...5.$$..{.;O.du..$....yvQ$.2s.=..n7.P..+....VS......k.Y....b3\|.n6.x.Q.2.+.jE/.uoN.(+K4.6g.%.....>.O.RWVVp8\ww7...++...z....[....LLL454O.:}..i.s....5._8.A[K...o'......I...x.....7.i]..1..l.Q.6.?..s.).VS............m..t.....a!.=-k.!..4u}..M..9"..,looo}}}zzzhh.........'''?}...[.......z.z.......h.hkik].R>l.]...f.u.?}..>..+u..u..d/L.o}......]ob.+../..E.......F.X?av.._.#l0)d..!..%B.L...D"...P(............---.....<???%%%"<.....7.===....L.tut5.5T....ijh.....&)N.k..k.]Q...X;x..<...w...Vc....i.........i..2....!.ww......r.".@".K%2.L..I.R.P..rY,..F...!.....+++sss......mmmH$...0......F.F......gN.QWSW.......Pu...<...e..v.M.....q..t..u}bjgm.Ee.8B..DE&.Je2.L.....g..;2._.Cd2.D".....gww...www.........prt...WSUSSU;.y^..f..9n.,.P.......T.t..q[....U..V.....$..#.\|<...pVVV...++...B........fme}.......`.T.A...<.x.!Wx..<...e....FXA#..Q..-/c.*^.0.............D.2

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7845)
Category:	downloaded
Size (bytes):	26517
Entropy (8bit):	5.603900879443484
Encrypted:	false
SSDEEP:	384:YhcP7n/l0aoqt62Kq6MWT5cV2FLTOBFu8H1ZeN3Upwpb8Bze:n/lm6Tfqpb8BS
MD5:	7637F2777E69F0AFEEF43EE55BAAE993
SHA1:	E7EB8A7197DF43FDF2630A0AE53620CAEEAD549D
SHA-256:	C1ABB16EA3EEA33EC86122962420A089EA8750A67C8A54D27735CF0731507482
SHA-512:	E0C43414EBAF8FF49FC7C9F5FB0751E933B5610705410B6FD07EB965BF2CB0F40CF50C327E2FD5EDA0EBD9F77B0AAB6DFB02EC218373AF4CAD22369056E7F326
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/8b0efce4dcfa662a.ltr.css+edb83b7fb0f55858.ltr.css+7579b1ef84cb4721.ltr.css+600ca02efe4b30d9.ltr.css+31f53896cc2c323b.ltr.css+c462f102b34f80f4.ltr.css
Preview:	/* __FILE_CONTENT_FOR__:8b0efce4dcfa662a.ltr.css */..light{--e0RFhg:hsla(0,0%,100%,.5)}.dark{--e0RFhg:hsla(0,0%,100%,.4)}.zk9iKQ{height:100%;left:0;pointer-events:none;position:fixed;top:0;width:100%}.AEurtw,.WgUfqg{pointer-events:auto}.AEurtw{position:absolute}.Vef6sw{background-color:var(--TlUudQ);box-sizing:border-box;color:var(--pUV7hA);display:flex;flex-grow:1;height:100%;overflow:hidden}.LGK0Aw{overflow:visible}._1EwbGQ{transition:transform .25s cubic-bezier(0,0,.2,1)}.QSKRKA{transition:transform .2s cubic-bezier(.4,0,1,1)}.DS1ecQ.C_oBTg{border-radius:0 0 var(--luBooQ,12px) var(--luBooQ,12px)}.djQE1Q .Vef6sw.C_oBTg,.djQE1Q .Vef6sw.C_oBTg:before,.djQE1Q.Vef6sw.C_oBTg,.djQE1Q.Vef6sw.C_oBTg:before{border-radius:var(--luBooQ,12px) var(--luBooQ,12px) 0 0}.Vef6sw:before{background-color:inherit;content:" ";height:100vh;left:0;pointer-events:none;position:absolute;top:0;width:100%;z-index:-1}.Vef6sw.jIrsCQ:before{top:30px}.Vef6sw._8AVeyQ:before{box-shadow:var(--4ClGCw)}.DS1ecQ,.djQE1Q{h

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	260
Entropy (8bit):	5.03921729096162
Encrypted:	false
SSDEEP:	6:YGKosrWE2sVSH2/fLHVO3DYH1fFz0wItDp6o3pz9w:YGKYan/zYzwz720o3l9w
MD5:	715C482ABA6D0FA6B9F48D94D5BDE4B8
SHA1:	FF278D2007693515363DDACCFF97BCC0AF7A9500
SHA-256:	A1C74C9326B24EF58C79CDEDD50C9BFEDA3E0DF03B2EC3AF04335A2F85AB1ACA
SHA-512:	96B2F7D9867A9A98B18913D87FE012A4718632206B9DDF07E1ADEDE2F44D316E38D7EBFE288DA2C9F13C5E09DCB5E62D2628E6581869AA9F22AEFE91D14DFAC3
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-pages-index-tsx","path":"/","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/"}},"staticQueryHashes":["1242162299","1467288770","2048126111","2385355646","2562819187"],"slicesMap":{}}

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	986
Entropy (8bit):	5.059103413717432
Encrypted:	false
SSDEEP:	24:YzZhJ3Fsxf7cpsPeps5ypsxjIpstsAhupsfopsRZYpsz+AXopsf:YvLsxDcpTp9pGUpsseupBpxpS+4opW
MD5:	EA252DC56DA2391566446E63BBA026BD
SHA1:	7A07BDD9F7875BC3D09F3E5B2482B8BE860E21A8
SHA-256:	FD75E9CB079C51D18D9368951CDFF69B498FDAE16F5251B92B7D0B023937CCE3
SHA-512:	11601226DB8CF07D4D1BC1E69A4FF575C019478E8FE68880DDE8F6ED56B5CD7F7FF993963B3029908C80BFE53D75ED8A2D6E6D9404BAA71F20AA36CD3ADFDB17
Malicious:	false
Reputation:	low
URL:	https://short.io/manifest.webmanifest
Preview:	{"name":"gatsby-starter-default","short_name":"starter","start_url":"/","background_color":"#7CECC5","theme_color":"#7CECC5","display":"minimal-ui","icons":[{"src":"icons/icon-48x48.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"48x48","type":"image/png"},{"src":"icons/icon-72x72.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"72x72","type":"image/png"},{"src":"icons/icon-96x96.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"96x96","type":"image/png"},{"src":"icons/icon-144x144.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"144x144","type":"image/png"},{"src":"icons/icon-192x192.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"192x192","type":"image/png"},{"src":"icons/icon-256x256.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"256x256","type":"image/png"},{"src":"icons/icon-384x384.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"384x384","type":"image/png"},{"src":"icons/icon-512x512.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"512x512","type":"image/png"}]}

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10562
Entropy (8bit):	3.8469793578588125
Encrypted:	false
SSDEEP:	192:0Qf72Gpi/QmqomjQSo72Gpi/QmqomjQSHj/2GCi/QzqomjQSNZo:0Co/QmLu/Qo/QmLu/zx/QzLu/A
MD5:	878359938BFCA8AC11BAA364B3FBF1F0
SHA1:	FBDC89662562B88F05A8F25EE5613134963DAFC6
SHA-256:	233A839A682B4BE10DDF98BD02EFB731C2354AAC5AC5100BD7D5FF42A3230F95
SHA-512:	C7F50734D3746D7050D01A567988ECE37DCA69E073FF9B1D51660153C2B6DBE7F907EE4AC887F5FBACB17A713D04B65C2F13BE1E7EF3C86BAD6692DE8D2AEFB0
Malicious:	false
Reputation:	low
URL:	https://short.io/static/star-d38c032d63bee9674f56de0a6cb578e7.svg
Preview:	<svg width="90" height="101" fill="none" xmlns="http://www.w3.org/2000/svg">. <mask id="a" maskUnits="userSpaceOnUse" x="0" y="0" width="90" height="101" fill="#000">. <path fill="#fff" d="M0 0h90v101H0z"/>. <path d="M4.4 50.9l.8.2c.2 0 .4 0 .6.2 1 .2 1.3.5 2.2.7l1.2.1 1.8.4c.8 0 1.6 0 2.4.2h.5l1 .2 2.2.6c.6.1.7.3 1.4.5l1.7.4c.4 0 .7.2 1 .4 1 .4 2.2.7 3.2 1.2l3.2 1.2 2 1.2c1 .3 1.8.7 2.6 1.2l1.6 1.3 1.4 1c.3.4.6.6 1 .8.4.2.9.5 1.2 1l.7.8a8.7 8.7 0 011.8 1.9l.6.9.7 1.1a27 27 0 001.3 2.3c.2.3.2.7.3 1a12.7 12.7 0 001 3.3l.1.8.4 1 .2 1.4.7 2.3c.2.7.4 1.5.4 2.2l.2 1.4a19.8 19.8 0 01.4 5.4l-.1 2.9a6 6 0 010 2.2v.7l.6 1.3c.3-1 .6-1.3.8-2.4.3-1.2.5-2.4.5-3.6v-1l.2-.8-.1-2c-.1-1.8-.3-3.5-.7-5.2-.2-.6-.2-1.1-.2-1.7V78l-.6-2.1a16.4 16.4 0 00-.6-2.5l-.3-1c-.6-1.1-1-2.3-1.3-3.5 0 0 .2.1.1-.1a16 16 0 00-1-2.4c-.5-.8-1.1-1.6-1.9-2.4l-1.5-1.6-1-1-2.8-2.2c-.3-.4-.7-.7-1.2-.9l.2.2-.1-.1-1.4-1-.6-.4a34 34 0 00-3.3-1.9l-.4-.1-3-1.3-3-1.1-.6-.1.3.1H23l-2-.7-1-.2-1.7-.4c-.7-.2-1-.1-1.9-.4-.4-.3-1-.5-

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 67559
Category:	downloaded
Size (bytes):	21502
Entropy (8bit):	7.989511589368222
Encrypted:	false
SSDEEP:	384:GM7pI1brzTu6i0yLKIAgLM6FKS85jfJCaYp9W+BCXoHVLhgUtsF8Lqp7w3tD:GMKPvm0qAglifJCaYp9WohHV9gUtsF8B
MD5:	418911F0E28E7F33A5AC1FC4F3C723DE
SHA1:	E2995B7FA3BF1AD2169B668BBE681018CB7FA7D7
SHA-256:	202635EB355C9B1B5A463FC5A69A87F6AC72AD0B5867E1A53CD8D9D7742D5119
SHA-512:	CBB5F40CE231ED3C9CA52610BD9EFF528ED070FA73E518443FF35990197CDB2A87166649B1B0658F7649E69204354663D8263F25A63EF3FBD14E5E8C2BDA1960
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/vendors~app-modern.115fb6b0.js
Preview:	............z.F.8.$.G...E.l.Ax2..d......P...M.c.`.P.C.<.........U.W..-g.....&.......u.{..Wa.n...[~..'...W.()x6I....O..nGc..\.sw4z...2f.....}..`..\|..A.M.S.{l.J&E.&-.B&KX.mn....[t..f.xvpPt..=..Y..r.?..f.$.<y.&7a...O.<...g)@xW.?.B.{........O....2K..X/y...$...[...]....?..J..BZX.7W.......^.z.R..0t.f.3..iV.jd,.n.h.. .&... ..K.....]:kE.."h.&..Y.d..^.].l.&l..l.l...&p'..wgq.fn.?::..Z.....k.".x^\|.D..s^f......$L&<....q.J.......i.p=9..lT....\W._.&.f...m.....u2t.A.<...F.w=..Hs.Wz.+J...6....A.(\.J~m4.....OW.`...+KMb.f....63l...._A.u..p5t..&..SO62..W../Ws9r..7.\|...w.u..?_...4.Z..U..c.0.u:...y....:.....U9.*....xX>M.<..klA......r[.h....4,.n...\.4D.E..'fI]S...$..+.4v.Vk...k...i.2~k.Z..a.Z.......s^./..#h.......F..i...{.M.9Lc..H..%.<....EE..~'D.>.(u.~eQ._kN..5..........-.q._i...E.x."[o.../A...2.b6...6..y.$,&skOiz.H..W..!O".{.f.../........h=KW..E+N.i..r..4.lWh....O/o........-lD..Y..%Qa.D!6r...9m..j=....(...xw.e.4+OT..KE;.L..-...aC...z.<.&.=..y....#...8

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6952
Category:	downloaded
Size (bytes):	2707
Entropy (8bit):	7.922389197853605
Encrypted:	false
SSDEEP:	48:X4WZKBVm0+OKRRKC0ncJUbGWha6AvjW6wzbswXY31e/gDK/L26Xy:JKBVrkb9mbS6gq6wzbxo3nDALdy
MD5:	D37CDDEB09731C8266DA504F6505A75B
SHA1:	9898610D4C00E216AD150D1368035CAD06444BB4
SHA-256:	A3CA3BD9D1FAF2DF72C3D2ACADDF8275D4F72F1EE9306FE09FDA9F8C9A030012
SHA-512:	89E7BA2BEE72EF7E43B26E48E10397B76487CF4514B4B84E364647D26220385ED377EC9CBE5FFF92938791A444105AC9D60296DB0881CB0913D6217CB45243AD
Malicious:	false
Reputation:	low
URL:	https://widget.intercom.io/widget/rmf95u7h
Preview:	...........Y.r.6.....#...z..:t.q..q..2...Z.DB...`A...../...63.$6yq_.....1.G..".......V.'..[..b.{..T..J.\.l8..kNy.....Z ...\|8...Rq...8.9<RL....$.\|.r..S5.r~MJ&?...j.$.2..a,..r..`ne<.@...,RryPx.X..Z....h..H..>`..T.B..(Q4..3......._i5H.-..e.U.N^..?9.g.....W'...........L.z...;.j....,._.g.U.m.$......D-C...2.T.E.....F.?...8...C.......,.D..y...l6Dy..y.[Fd.,.............<aK..22D.}.........<gdX.8..?....Q.ts.0#Q...<......4....i.H8.....6bR.."f..3..5g31.!ks....&S.'S.`.g..h..v.L....[cIg.K.(.\|.)...2.5j$..s..m%.`.X.....BD..3xd,..ba.Qmt.}+/#.A..h....j6-...o..YfiR.D...i..H....I.co..?..F7..EQv.n.....r.6M.S.pB.r.r....y.I+...2/.8d..l..>.S...mG.....u.bs.O..V._h......V.'D.....l.)Y..u.o./n....6..S.S.V.D....p#..s..+..l._..k..y`.....c....".~C.b..Qo....}...f?....\.jF.....U~.....t;6Az...k.U...z..K.M%w6.k..b...m..2'5h_x.W..7..&.Oe.?.u....f...o?......1.YU.q.i...^I...8......Q..... \|..q.t.4..1...i..}.....tRc...B.xR...<.l....l6+......-A..{.hf.r.pq.L.....Lu\|..b.!.o.I..

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	226550
Entropy (8bit):	5.378858055186738
Encrypted:	false
SSDEEP:	3072:5hwvwaK82wlbixov2mtFkqRFUV5xbScYy:5hwvwaLlmxy2+k9VvmcYy
MD5:	F2597E47A3A66162D7C40CBC0869FC34
SHA1:	F0D14E0D2A3EBA36DB099C3E3ED4EBC5B0AE8777
SHA-256:	1D85A9A8A0C664F61A19377E5846769CCE64D963E29001F56403926E63033F31
SHA-512:	9C3F3239B85D1B77A4FC66CA16378424AF5DCD84D15396F95A9AFF3CCAC21718230BA23E44FB56A1EA0E66791587E89B9328046FA6B1249DB0AC06683CE00280
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.842bcec28f9fd12bb79e.js
Preview:	/! For license information please see modules.842bcec28f9fd12bb79e.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (19977)
Category:	downloaded
Size (bytes):	20428
Entropy (8bit):	5.192420850051355
Encrypted:	false
SSDEEP:	384:jjBurCVOt2wXIAWnUGHKZJkKzAEMUQ9LIuaHKvfp2a8LL9nrhIh4XahCroIWJ621:j5VznUGHGKL3j4p0XVGMR
MD5:	E15D6D2A479F0E747E43E148C1E6C151
SHA1:	4F594308EDDAC103899CDD3FED800C45D1E7D2AA
SHA-256:	2D5FDC667EA485A94F2B473EFDB200BE3D17628496655A0FEC3052F8B968138A
SHA-512:	0BA5047E09C0A4D925A6F03EA7D527180E3EDACA661683630710D48CE6D7B99518AA900FAC093D96D914496E4E9D7015929C8F8E700463445DB879C74FBFCAED
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/e1307de400adca1e.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"eq4PgA\":\"Didn.t get the code? Resend code\",\"iGADsg\":\"Skip to search\",\"PFOUew\":\"Continue\",\"FvYu7Q\":\"This password is common and easy to guess.\",\"08inLQ\":\"Page {0}\",\"nGBlYg\":\"Change email\",\"m0Q+yA\":\"You.re invited to edit a design created by {0}, start designing now\",\"/JYvRA\":\"Set password\",\"iTruLw\":\"Strong\",\"Gm1Hxg\":\"Too weak\",\"f3MnZw\":\"Sign up with single sign-on (SSO)\",\"tkkB/A\":\"Names and surnames are easily guessed.\",\"XS/GBQ\":\"Untitled\",\"GQHbPg\":\"Reset your password\",\"LE4MeQ\":\"Esc\",\"q4OW6A\":\"Your birthday can.t be in the future\",\"eKXiSQ\":\"Password\",\"/fLNHg\":\"When you set up two factor authentication we gave you some backup codes. You can use one of them here to regain access to your account.\",\"yAXvfg\":\"Create your own design with Canva\",\"5Tv5LQ\":\"The password reset code is not valid. Please request a new code.\",\"BXjIaA\":\"Perform .. reaction\",\"egIl

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17650)
Category:	downloaded
Size (bytes):	18243
Entropy (8bit):	5.630806886597814
Encrypted:	false
SSDEEP:	384:eub+vAaXctPiCMWvM+or8nAuxEIlH0teaeQ+MFmuvxeK:jbkaqfWnox/IlUsaeu1UK
MD5:	042AFC8F6DD96D8A86ACA2F6239682FA
SHA1:	C2321F6CCC366638B53BE030076F7AE3807F9D53
SHA-256:	B4A70F412876A248D91E26768C8B2C444C555A8E399A554739A91ABEC3A9C0AE
SHA-512:	9DE173EA032DFBAB502E63113BD0A9103DD477962F157B2612377ACFD5F592265CCC01AE5354E9107A746E9B9EBC9DECA858D7692AFDB4922138761B8D17163A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/tKcPQSh2okjZHiZ2jIssRExVWo45mlVHOakavsOpwK4.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var N=function(e){return e},R=function(e,U){if(U=(e=null,w.trustedTypes),!U\|\|!U.createPolicy)return e;try{e=U.createPolicy("bg",{createHTML:N,createScript:N,createScriptURL:N})}catch(b){w.console&&w.console.error(b.message)}return e},w=this\|\|self;(0,eval)(function(e,U){return(U=R())&&1===e.eval(U.createScript("1"))?function(b){return U.createScript(b)}:function(b){return""+b}}(w)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var eW=function(e,U){return(U=P(e),U)&128&&(U=U&127\|P(e)<<7),U},P=function(e){return e.g?UE(e,e.F):m(true,e,8)},bK=function(e,U,w,N,S){for(S=U=(e=e.replace(/\\r\\n/g,"\\n"),w=[],0);S<e.length;S++)N=e.charCodeAt(S),128>N?w[U++]=N:(2048>N?w[U++]=N>>6\|192:(55296==(N&64512)&&S+1<e.length&&56320==(e.charCodeAt(S+1)&64512)?(N=65536+((N&1023)<<10)+(e.charCodeAt(++S)&1023),w[U++]=N>>18\|240,w[U++]=N>>12&63\|128):

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2312
Entropy (8bit):	4.096788340259145
Encrypted:	false
SSDEEP:	48:CQuFoaPLZMYWubqPhmsql6p2z9G7O2QBcgHyB/tWav:2lPlbqPYsql0xgGtWA
MD5:	9ABC2241BF1479263A0A039F3D1E5B5C
SHA1:	A55CBCE3521486D4C9638602552F1DA877FB5411
SHA-256:	0145274162A30A4AA4B234015B7FE608367D10F4A8042D30BA995A5ECF1FDCF7
SHA-512:	0A5B51EEC0171CDDB3B5D9E7F7727D4509F33C63312136CD96A1E29BBC2FA35EFF341AEF41096809D482A16780CC376CAC488C3895E501A10C6FA66F6D8AEBD9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#EF9645" d="M32.302 24.347c-.695-1.01-.307-2.47-.48-4.082-.178-2.63-1.308-5.178-3.5-7.216l-7.466-6.942s-1.471-1.369-2.841.103c-1.368 1.471.104 2.84.104 2.84l3.154 2.934 2.734 2.542s-.685.736-3.711-2.078l-10.22-9.506s-1.473-1.368-2.842.104c-1.368 1.471.103 2.84.103 2.84l9.664 8.989c-.021-.02-.731.692-.744.68L5.917 5.938s-1.472-1.369-2.841.103c-1.369 1.472.103 2.84.103 2.84L13.52 18.5c.012.012-.654.764-.634.783l-8.92-8.298s-1.472-1.369-2.841.103c-1.369 1.472.103 2.841.103 2.841l9.484 8.82c.087.081-.5.908-.391 1.009l-6.834-6.356s-1.472-1.369-2.841.104c-1.369 1.472.103 2.841.103 2.841L11.896 30.71c1.861 1.731 3.772 2.607 6.076 2.928.469.065 1.069.065 1.315.096.777.098 1.459.374 2.372.934 1.175.72 2.938 1.02 3.951-.063l3.454-3.695 3.189-3.412c1.012-1.082.831-2.016.049-3.151z"/><path d="M1.956 35.026a.999.999 0 0 1-.707-1.707L4.8 29.77a.999.999 0 1 1 1.414 1.414l-3.551 3.55a.996.996 0 0 1-.707.292zm6.746.922a.999.999 0 0

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1236)
Category:	downloaded
Size (bytes):	2524
Entropy (8bit):	5.502159785373677
Encrypted:	false
SSDEEP:	48:ja8+u3LYsG9AwcqSaTCa73LYsG9AwcqSa6unZwcqSaqnQLRmaKcztSVlG9/CCdR5:+8+ubY2st7bY2sDnXsqni8pwt9F5
MD5:	6EF0E532DFAC46F0AD9A56CE2735C462
SHA1:	02B129DA667867FAADB3177F16451AA1CA7A26C5
SHA-256:	56FB4CD37BE4DD76C822C506495C7D829C3C0DDD1D71168746D5C9C099242AC3
SHA-512:	BDC1F0438914C389420B8037B2234C6F4FF033EC33979C0BCFC03FDF75AE2B486809B914C8516E7A4DF1A85B77F89AA42508985DEC3CDE8C93A274F4836D99D0
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556267&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_doctype_id=TAGAkMpLE1g&ep.custom_product_variant=web-2&_et=54&tfd=19474&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (549)
Category:	downloaded
Size (bytes):	509653
Entropy (8bit):	5.693596462671332
Encrypted:	false
SSDEEP:	6144:MhMufPBEGHg5H3du4ZVB87yfw1kk/S9x+XPFnMmKbcr1IFOYIuD9GTDRmr36:WadusmQAcxIFnMmQEFRP
MD5:	92662220BCBC55157BBF5975EF85B30C
SHA1:	A0D90D4F446B6C2E4BF8FD7BF51EE66FDA4D8E15
SHA-256:	AC43D64797AC47D26EB29AC01FD178F6C0C8A6892EA1E14EBB529020AE80E488
SHA-512:	F9809BEDDBC16C6FFF90F85A1DEBCFA2C2866C6A9F6E8780AA4644D1ED5C1573FBB06418F8F63BFBBB190225CD4DCE8567C9053D2017A7745528B745FFCB67F5
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/WQcDpAcHn0sjM6ZiVkU8JwNH/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(U,p,D,b,c,v,w,R,X,E,Z,l,O,r,N,V,y,Q,d,x,a,h,M,n,B,S,T,f,J,q){if((U\|(q=[33,"flat",13],24))==U)if(D)try{J=!!D.$goog_Thenable}catch(L){J=p}else J=p;if((U-9>>4\|\|(J=I[3](15,p,b,D)),U&77)==U){for(f=(X=["cannot access the buffer of decoders over immutable data.",(n=[],0),255],X)[1];f<v.length;f++)n[f]=v[f].B();for(T=(w=new Dt,X[1]);T<v.length;T++){if((a=(h=Array.from((x=v[T],n[T])),h[X[1]]=k[5](48,b,3,x,i2).length,h[c]),19===a)\|\|31===a\|\|30===a\|\|32===a)if(g[35](72,X[1],w,.h),30===a?(w.Y=3,G[q[2]](45,w),m[25](39,c,w)):32===a?(w.Y=2,m[25](71,c,w)):w.Y=3,G[q[2]](81,w),m[25](73,c,w),Z=w.Y,l=k[27](53,c,w),0!==l){for

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	202355
Entropy (8bit):	5.359622570895321
Encrypted:	false
SSDEEP:	3072:F0RgD/8cNq/IMq/ok/8wi+MGOPHG7y+nvXo:FygD/8cNq/IMq/ok/8wi+MGOPHGVo
MD5:	CB30580076578D4C2BA1CAD34F925B4F
SHA1:	A8C7DDCD64A08646267541C05D9F3BEF496CB9A2
SHA-256:	77DB170B7C277918634017EDB1D74ADD15F28FBA647B987E433BF7B5EED8FC29
SHA-512:	9093BD6DCCD70DB3968693025BE1714FCD503F853CE5A09596A7A1E5C283BF5CCCA4217558D7566C37CB4AFF5E5581985B6AD4FE6C65A2604EE16DA397745332
Malicious:	false
Reputation:	low
URL:	https://short.io/component---src-pages-index-tsx-ca1b83f425a6d364586f.js
Preview:	"use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[245],{7087:function(e,a,t){t.r(a),t.d(a,{Head:function(){return ae},default:function(){return te}});var i=t(4084),r=t(6540);var s=()=>r.createElement(i.A,null),n=t(5712),o=t(2389);var h=()=>{const{t:e}=(0,o.Bd)(["main-page"]),a=[{question:e("faq-list.buy-domain.question"),answer:e("faq-list.buy-domain.answer",{returnObjects:!0}),link:"https://help.short.io/en/articles/4065810-how-to-buy-a-domain-on-short-io"},{question:e("faq-list.main-page-redirect.question"),answer:e("faq-list.main-page-redirect.answer",{returnObjects:!0}),link:"https://help.short.io/en/articles/4065814-how-%D1%81an-i-forward-my-short-domain-to-another-website"},{question:e("faq-list.a-b-test.question"),answer:e("faq-list.a-b-test.answer",{returnObjects:!0}),link:"https://help.short.io/en/articles/4065855-how-to-run-an-a-b-test"},{question:e("faq-list.application.question"),answer:e("faq-list.application.answer",{returnObjects:!0}),link:"ht

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5578
Category:	downloaded
Size (bytes):	1926
Entropy (8bit):	7.909096378466677
Encrypted:	false
SSDEEP:	48:XuJAg7KeI9yYnhcxy2H2qjGa4hxjLK/SZAgJEcgmW1X9q:EAg7KeQfnqJ2SG/nKKZgxmQq
MD5:	C8D15D2B5331FE0E09A3F74E8AA0779B
SHA1:	4BE85EE0C0E54662D1D6C6664E59488B1CC3F307
SHA-256:	1D37812BCEE2778DE26ACC29FC11210BB8AFABB357A6324A174DE5B1FE237861
SHA-512:	CEA62344BA94C8AA64A81BC3BAB2F3BEA78283A353CA9F85F6219FF5FC9EF956012250B157CEB066B7378E75022E2FFC359AA82FA12D99C03DDED8B4438EF7CA
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/launcher-discovery-modern.0d71e4ad.js
Preview:	...........Xms.6..+...!S..^,[...M;.\2.......I.I..@K...~..U.c;...6....].>...b..i(....l..w[..Ye8.....-M%.!Kn>..."_.\|.h.Y......\|.....x~.[.Q$..p.Em$........-.z..4........~.'..9....\.k1..y6J.q~9._......6.juq5....W..dj.!K.4.K.C...ez./..N.......\|..G.F..'.i..~v......o..M2....\|.G..p..t./.}..\0.gL#.....gy.9!.a.D..n.z.-....A.....>^....m$k.Jg....N...[.......@.n).+..0&.,.J.c....'a..&.}.......+.#...#...z.gb..iJ..^.8.......!6...uFR......F%~.@.8...G4.......a(....D.4.NDb\|....L.NfT..c.....\|<h...K...b.IItn,s....o.Od...(.....H.:......J...!.......t.......(.!z....tm8....).q.=.."2..:&.@.r".I...l.@... &."..\|S..4........TW.f.m.WZR( .+X..F...=.....BaV.?. ..?.....8...O...,x...cU.%....i8..;.#.c/.C.,.. ..o..?.v..{.....c..@.....kB.S.i...Yt0.^.4..t..\.$c)Ie.;%.C......g.zFRu..Edy.hdx......W.&..u.....L.,m.,.L.%.w.+:z......\.4.}E..Z..'..v.]....!.....G...,.....7......o..A...\H.^...d\|...X.p.1.K....%m.U.Bw9z\.g..9...p..1.3.F.D*-.h...:HA.}O#...m.J.4..}b.,..eS.JF..:o..}.].D.!.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	74892
Entropy (8bit):	3.739915743629482
Encrypted:	false
SSDEEP:	768:pUVaxpuqvf/tXPsIe+SG2fjFHmikqWJt9mCzPQk/U/EfFrYIoxlWn2bmh3EVxroG:+ijW7+bCGmUZBYIn2/rS6Ec
MD5:	344F54AACE4756A45FCF5B4920E65B83
SHA1:	047B5F10A7C1506E47DF037BE79DC721A46C9DD9
SHA-256:	7E245B52E01B3DB61353E09601B32B695B9843FB1D06B25437C43AE557005405
SHA-512:	E4523C31B61A16423B783849DDA20893741C98D3049FC8508ECF4657A27AE03C2CA0D9D6B8FFB22375AF3B69D29B1B197CB41BF2F441BDA18135A50CDDD61D2D
Malicious:	false
Reputation:	low
URL:	https://short.io/static/03-d26b079ea5970bce38a0e708d0cff905.svg
Preview:	<svg width="90" height="75" viewBox="0 0 90 75" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M51.3916 39.0876L51.4831 39.2543C51.4831 39.3543 51.5496 39.3626 51.6245 39.321C51.8241 39.4793 51.9988 39.2793 52.1818 39.3876C52.3648 39.496 52.2567 39.671 52.4064 39.621C52.5561 39.571 52.7058 39.696 52.8389 39.7377C52.8593 39.8518 52.914 39.9569 52.9958 40.0389C53.0776 40.1209 53.1825 40.1757 53.2964 40.1961C53.2964 40.1961 53.2964 40.3128 53.3547 40.3794C53.4345 40.3654 53.5161 40.3654 53.5959 40.3794C53.7706 40.4545 53.9453 40.3795 54.1116 40.4295C54.278 40.4795 54.2946 40.2711 54.436 40.3294C54.5434 40.3831 54.6585 40.4196 54.7771 40.4378C54.8188 40.4454 54.8619 40.4389 54.8996 40.4193C54.9372 40.3996 54.9673 40.3681 54.985 40.3294C55.1847 40.2544 55.4509 40.2294 55.6755 40.1628C55.9243 40.0935 56.1843 40.0737 56.4407 40.1044C56.6237 40.0211 56.6736 39.8044 56.8982 39.746C57.1228 39.6877 57.3973 39.921 57.6469 39.746C57.7716 39.571 57.8465 39.3876 57.9796 39.3126C58.1176 39.2

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	127802
Entropy (8bit):	7.994215602670648
Encrypted:	true
SSDEEP:	3072:kRywbLcPNZhLEP2ws8lWRvcZc+w8HSiWUiVEvIYTenPYtgP:AywMzpgs8luvc7yUenfP
MD5:	C2E4793B6254B393B767C35EB35804E0
SHA1:	54C0395FB19D642E6FCE9EF0A5C0C1986FDA1D75
SHA-256:	014643806270730F7B0CB3FC325A4A598E7CE30399598530AD02E77F5780FFAD
SHA-512:	1EBC5B96D98C7CB4FBBACCDFD15CA4409C9A9A818A8C96D617D551DFF62FB01433892D2C1D5E509F366194772076E892DFB61FBF6589084BD153C871B15C1950
Malicious:	false
Reputation:	low
URL:	https://short.io/static/hero-da68e1f98d49eea0edcc5cc53fba8dd1.avif
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D............K..'.................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe................pixi............av1C........colrnclx...........ispe................pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................ymdat.........P2.....PSpP....RR..br.."Y... Ue......+G........a...8M.\|.G{.... 8..N5......I.K...z...a.......%....k..70...a..>)..3.gT.M....UL.)@St.k2;a......\...._..D..._..G../.."i...}.^"....I.P\|Z............b.p....$.$...... .9.i-A .VK..S.J.a....}B...7..HB...<......l........N....C.....I^....I...Y)l.......K.....={>....q-%.\cp........WZ....F^..De6s.V...`....N....LB.,T....9.M.....~..-.'.t!.../Q.6i....H..o.....O..R.[...O.).9w.>...p............j.q..v..m.'..Tj..Lf...f<*M..@a]...1.Ns.....{J...'.....]...\. ...br6..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2725
Entropy (8bit):	4.001613792451738
Encrypted:	false
SSDEEP:	48:/a93XK82dedc1J2ghyVSuW2oyhTn2oXU/JS1QwppLYA8n9V7KRSpHW3SdjUjuq:onvcH2wyVSutoqnHWSK4tLYVHH8CEuq
MD5:	749002F5A04F784CC1802D77D2FED423
SHA1:	A82F9B14C9946185D475C946B2EA4B1D724732F7
SHA-256:	E26E8402DEA748478ED971DD8F9626BBC25CEC4776D92A0B768D71A109F82C87
SHA-512:	883CD33B1406E297B068E93CA509E38A54197BC426766AEF6F79D66BCDA96C172E144D302AF174D2D1FEB58091F9FA13139D80B65B9068D58D0A47F83999E9EB
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/749002f5a04f784cc1802d77d2fed423.svg
Preview:	<svg width="60" height="60" viewBox="0 0 60 60" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.808 31.921c0 .963.252 1.612.895 1.612 1.102 0 2.189-2.995 2.189-4.692 0-.762-.202-1.387-.729-1.387-1.211 0-2.355 2.797-2.355 4.467zm22.347-5.011c0 .55.139 1.172.521 1.629.172-.501.415-1.502.415-2.184 0-.408-.09-.701-.388-.701-.3 0-.548.574-.548 1.255zm4.603 5.011c0 .868.252 1.612.891 1.612 1.12 0 2.19-2.995 2.19-4.692 0-.77-.19-1.387-.717-1.387-1.221 0-2.364 2.853-2.364 4.467z" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M60 30c0 16.569-13.431 30-30 30C13.431 60 0 46.569 0 30 0 13.431 13.431 0 30 0c16.569 0 30 13.431 30 30zm-6.515 1.462c.035-.106.106-.16.186-.16.178 0 .329.217.329.569 0 1.333-1.38 2.956-2.968 2.956-1.016 0-1.567-.726-1.783-1.724-.655 1.108-1.51 1.736-2.568 1.736-.972 0-2.097-.66-2.097-3.024 0-.818.174-1.638.468-2.388-.694.492-1.42.507-1.9.445-1.228 2.547-3.258 4.95-4.4 4.95-.928 0-1.524-1.751-1.799-3.92-.88 2.323-2.198 3.91-3.495 3.91-1.17 0-1.7

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	16592
Entropy (8bit):	6.01487583544344
Encrypted:	false
SSDEEP:	384:X4K8My/3kgaS5CBp4gTTYKnSVNC6HHU4CAOxSLvQZ6OyXivrvIY4:ooS3O6o40nS3C6HHU4CLxSLky4zf4
MD5:	E81C2512783B9E63B6B8F41F952688B1
SHA1:	C32E4E21BCC14D9CAEE23AFEC09B071D3D27275F
SHA-256:	22FD60518472C232A645CEB4A3A5AE6088A3BDA6D8E690EFA05968A24AADFA38
SHA-512:	99E40C50F94F2D15FED83D0DB70868CF52A485AA0E99B37C9EE7A9E8FE495AFDEEB5CA1E70BC5C87AFD137CB3BB653D46E571A454203C150B1DC580E04FC4A9D
Malicious:	false
Reputation:	low
Preview:	<svg width="220" height="120" viewBox="0 0 220 120" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="10" y="14" width="203" height="90">.<rect x="10.3516" y="14" width="202.216" height="89.7687" fill="url(#pattern0)"/>.</mask>.<g mask="url(#mask0)">.<rect x="-0.0429688" y="-1.1189" width="217.335" height="119.062" fill="#2E2E2E"/>.</g>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0" transform="translate(0 -0.000584803) scale(0.00222222 0.00500585)"/>.</pattern>.<image id="image0" width="450" height="200" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAcIAAADICAYAAAB79OGXAAAgAElEQVR4Ae2dB/Q9RXmG39gbNiyoiGhEFMSeqGiMYCGo2BK7ImrshCixlwioRI1dUewl9l4wdrH3LvYW7FhQpNhNzkN2cJj/zOzs3rb3d985554td+qzu/NN+eYbyc4ETMAETMAETMAETMAETMAETMAETMAETMAETMAETMAETMAEZiZwNkmXlnQNSTeWdGdJB0s6XNJzJL1e0vslHSPpx5K+L+mzkt4p6b8kPVn

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1616)
Category:	downloaded
Size (bytes):	1679
Entropy (8bit):	5.640828602624504
Encrypted:	false
SSDEEP:	24:KPZa4VTWruoImsf7HRSaiLEBBBbW6bU1AmyuzAZqZmtZzVUS13tQ:uZcXuPdBbW6qNyaYwmtrv19Q
MD5:	9B9EE6EFAB9C6D693F859D2D72D70F79
SHA1:	21C9088C4D8A43FCDE87BEF89ED7D8D716C9EAA1
SHA-256:	9FDACDF3C04634C419346BCD5DFA7023B730A7390A188B7A9EF6D3BBD84240AF
SHA-512:	4901DFE76A98C94740D0080069F27FF3A30F19AD252B57DC413DC5672093B52AB094FD6404E667DE37B29D5DC831518C705127D82020D066E4A5FF24DE4B6E01
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/3c8e57c2a7031e58.ltr.css
Preview:	.light{--cT3jbA:0.07;--HtChog:0.025}.dark{--cT3jbA:0.15;--HtChog:0.10}@keyframes HrpoWA{0%{opacity:var(--cT3jbA)}25%{opacity:var(--HtChog)}50%{opacity:var(--cT3jbA)}to{opacity:var(--cT3jbA)}}.n7vSfw{background:var(--pUV7hA);opacity:var(--cT3jbA)}.S_ZkxQ{animation:HrpoWA 1.4s infinite}.abYU1Q{border-radius:9999px}.abYU1Q,.ccpanQ{padding-top:100%;width:100%}.UG13Dw,.ccpanQ{border-radius:var(--fKgqJA,4px)}.UG13Dw{height:100%;width:100%}._4RR_JA{border-radius:0}._2PfzsQ,.uYOLFg{border-radius:var(--SatqyQ,10px)}.uYOLFg{height:1rem}.KNA9cA{border-radius:var(--SatqyQ,10px);height:1.4rem}.Uc1_7g{cursor:inherit;display:inline-block}.z2dDaQ{color:var(--fSfh3A)}.h7eUeg{height:0;position:relative;width:100%}._3FYLtg{display:grid;grid-template:minmax(0,1fr) /minmax(0,1fr);height:100%;left:0;position:absolute;top:0;width:100%}._3FYLtg>*{grid-area:1/1}._1aH35Q{left:0;position:fixed;top:0}._8VoL_g [disabled]{pointer-events:none}.iv61qQ{height:100vh;left:0;position:fixed;top:0;width:100vw}.cLQw1w{posit

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1389)
Category:	downloaded
Size (bytes):	126714
Entropy (8bit):	5.713308033156151
Encrypted:	false
SSDEEP:	3072:14WJRd3yl6+aliNBaBMItnAJgWe5LFq6QlJW1v:rJ3O6+aliNIRAJghFHQm1v
MD5:	08522E5B8C77D258F808DF184B535E38
SHA1:	3007FC0B4360EBA131A2385A9009D32360422FB4
SHA-256:	9D917AC97B416A4588F7431A49D3F3CB61994D4F543D33559973D01846E22690
SHA-512:	C39671BC573C53FD910EBA3B53766980800782CCEF39C369E664338D0A56C3A04A7D7E8D1E1AFE699D5C556B941DCBFF66B2FC1699F9AE7F25CFE3B8B3C48824
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b9914c5d2e1d14a5.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6037],{../***/ 515896:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(360045);__web_req__(206405);__web_req__(939945);__web_req__(670595);__web_req__(120006);__web_req__(621106);__web_req__(237221);__web_req__(391214);__web_req__(913728);__web_req__(68864);__web_req__(801993);__web_req__(79194);__web_req__(775089);__web_req__(501565);__web_req__(700706);__web_req__(209271);__web_req__(588845);__web_req__(228043);__web_req__(178040);__web_req__(799001);__web_req__(823125);__web_req__(378949);__web_req__(708358);__web_req__(122771);__web_req__(283682);__web_req__(835479);__web_req__(876427);__web_req__(95160);__web_req__(854037);__web_req__(323445);__web_req__(553802);__web_req__(80307);__web_req__(30897);__web_req__(986055);__web_req__(106168);__web_req__(211312);self._45f7853dc7660378a038952b53c0953

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	266
Entropy (8bit):	4.998202692196443
Encrypted:	false
SSDEEP:	6:YGKosrWuHUVS1q8/fLHVO3DY1sFz21cXN3BzOHw:YGKYIUo/zYzZz21Y3pOHw
MD5:	FDE4FBFD11F6612E9A52C5C8B1B10D4F
SHA1:	B60AA591E0EFDE57EE79B5A4EED55BE3EB8B72F6
SHA-256:	FAA87C20D1913A699261761940F0ACC837E6C36AC946696F2002FC67BD2F318E
SHA-512:	546E12DF3EAB502F8401887CFDA7B3D0A30615921A2A815B51A11D703738A8A4F72734A0B1BB744CCDBD02E1E4B96E0712CC313B3DD74D95125692448890053A
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-pages-features-tsx","path":"/features","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/features"}},"staticQueryHashes":["1805888702","3151116981","3501022147","4110422116"],"slicesMap":{}}

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1438x560, components 3
Category:	downloaded
Size (bytes):	14135
Entropy (8bit):	7.460816425587732
Encrypted:	false
SSDEEP:	192:yrYaVEYBiSpH9oyuXpc7tvVnvRmIgtIQ/Y3bg9X0YUYIaAREh3YF:yrxqYBAtGTZmE9cwYIaAqIF
MD5:	A9570A9E9B0EE86F996A34717EAAA80F
SHA1:	E76C3E57D109C7B7542763872AEC84B4CA749D45
SHA-256:	84879B89770C6DE248C88819697C37AACD209A075F6932B339C63DFE5FD6AB6B
SHA-512:	7121D17A4891676F79CFA8339D8EF7E4BEA3FEB90A74BCF0F85782BE8AB909121E624D75F7ECF0EEA3B2060C77CBE7F2E5CB8FE3EA318420610F2D3C48A8870F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/87e22a62965f141aa08e93699b0b3527.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......0...."..........5..................................................................:=........................................................................DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E..m....la.....la.....la.....la.....la.....la.....la.....la.....la.....la.....{\|.;pn....._..m.q..x[i...la.....la.....la.....la.....la.....la.....la.....la.....la.....la.....l...............1..3..{...i................7...\|..s...:./..x~.?... ...............................[E.DQ.E.DQ.E.DQ.E.DQ.E...WW...j......y.F.g.Q.E.DQ.E.DQ.E.DQ.E.DQ.NW...Tqz@...u._...*+\"..(."..(."..(."..(."..(."..(."..(....\|.m.9?Vk.+L.(."..(.".)1DQ.E.DQ.E.DQ.E.DQ.....4...<...-...7.....>+lb..(."..(."..(."..<.........._.#.........u...trz....(."..(."..(."..(."..(."..(."..(r~..........=m..G...

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 59492, version 1.0
Category:	downloaded
Size (bytes):	59492
Entropy (8bit):	7.996079280183303
Encrypted:	true
SSDEEP:	1536:r8Z4IyOdRwEiq79LGJFv2u0cFyEdqlD4wkYk7ColI:r+v1iqBLGJdvJFyEQlJG7nlI
MD5:	2C97DD77A19D382F7CE1CB267E0E3894
SHA1:	B1F58D631B368C7FFAE1AE6108938E935F559060
SHA-256:	0FFC6D3E1DAEFA8AFFFE88C4B55F4857BC1E66A0DF450D172EDBD276EF9B1DA5
SHA-512:	E51A3E6B65FED6E7B8EA08FA74D588F3F13374500470BE9164A8735A49EF0C8C06173DE37DA97CB50F03E8A28238CF92E2DA45A75250733EACDB2DA342113D0F
Malicious:	false
Reputation:	low
URL:	https://font-public.canva.com/YAFdJt8dAY0/0/OpenSans-Regular3933337718930570939.58b2543abe9187bb7f592b6bcdbf20d7.woff2
Preview:	wOF2.......d.......x..............................B..\|....`?STAT^..v..\|..............j..6.$..N. ..V..j...[......"..?...mS.J..~..ns.......p.3.:......s Y.........!c.\!.....Uu:.7....8..'....R.....w...9...a..cb.B.v8...=.u.[.;zS2;..)...:..~.c..c..dJM.S.s..+......5..kl.c..1Y...fl..z"...a...8%....'yqD..I.......S..E.5~.\..d...h)..n>..>.q@..C...5E..........1./..r.!S.+\..N.8.&~.X.dQa}.yi....".(.....h..._v....y.O#..]..;........r.+....g.kJ..iN...Y.y.;.bx..e...nq..c..o].:..G>9.....'.a ...e..M..h1.(_...z.rZ.2.F....V.%....CI..Z...... ..R.UD....J.E=I.EE.)M,..*.W.S...x..C....,...6e...9+P..cFMWV.N.1@11..DEEBPD.....3f..................`.D4)F...FK0}y......(.......t...{3..Be.03.d..N8......B.....xe.......K]...e...?...J3~...r@..L..i..p.NS..l....9...P.#.0......P...E..n......tsQw.....n..v......u....8..M...R.?.s.r..G.........u....+.#L...0k.-.=.e.)...a^g..4H.$...qBdll..?....n....=...L{..)...~...P.O..M&4......SH..8.y~@.c.R...2].......Tu.H.1....c4 .-......D........F..g?.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1072)
Category:	downloaded
Size (bytes):	54977
Entropy (8bit):	5.515271877691332
Encrypted:	false
SSDEEP:	768:WCbRwf7VA4kMOalkyWhTbrvOtmGAWwNKajtESsnMIGA1m/7rw0Omo7w0ulqbdRo0:DN0F2brv8xvHToZV6FL73yWaJUkQG9mp
MD5:	82636835D4B7117FF4353AD4A78BC94F
SHA1:	7DDF499BDDAE4495F2CD4CB5F5F2415B4DDC2F87
SHA-256:	F920E3B09DA32DB9AFD347452BB32276C6D997BB94C1F816C30734EDF3E4B932
SHA-512:	D5B1B9AE45B48588C38FC03822DC2ACE898C17CB7CD95A312B028CC45C1F75D3FCF3673C17673A9062EA33D547DECAA7760732F9E9EE9CC12E0C6AC37443F650
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/513226526f0cbf1e.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[7756],{../***/ 46127:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(834767);__web_req__(708358);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var Eu=__c.Eu;var Yx;var Fu=__c.Fu;var Nu=__c.Nu;var Gx;var Ex;var Cx;var vu=__c.vu;var su=__c.su;var Lu=__c.Lu;var Mu=__c.Mu;var Ks=__c.Ks;var Ou=__c.Ou;var Ju=__c.Ju;var Hu=__c.Hu;var Ys=__c.Ys;var Du=__c.Du;var qu=__c.qu;var Hs=__c.Hs;var at=__c.at;var Ws=__c.Ws;var tu=__c.tu;var pu=__c.pu;var Is=__c.Is;var Js=__c.Js;var zs=__c.zs;var Bs=__c.Bs;var eu=__c.eu;var Gu=__c.Gu;var Vs=__c.Vs;var Xs=__c.Xs;var xt=__c.xt;var Pt=__c.Pt;var ju=__c.ju;var Ow;var w=__c.w;var da=__c.da;var pa=__c.pa;.var Lt=__c.Lt;var os=__c.os;var Qt=__c.Qt;var Gs=__c.Gs;var z=__c.z;var t=__c.t;var Kv,oxa,Nv,Ov,Qv,Rv,Sv,Tv,qxa,rx

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	140361
Entropy (8bit):	5.267680981483387
Encrypted:	false
SSDEEP:	1536:9vmQrtCZzj9fokBQNanMuMDTDr5yVldYnt5LG8LFqE7sNQul:9lYnkHnt5LGuXul
MD5:	2D61531107BBF14428824C6250A347D1
SHA1:	9BCB4AB825FEFD2841200DC9596293A463B0E6F9
SHA-256:	2F5604CD25ADDCA297F54EA9F4C457E195CE7C5F97357F4A19E0DA60B143DD67
SHA-512:	C09E53FEA5E729A47FEEE424282A8DADCE751EC2732CCB8FE04A57E1FFA62D5952EB08B8172AE9D1BAB809BA1AEC6C54BF4FD6F23FC35E556DEAD72371D613D2
Malicious:	false
Reputation:	low
URL:	https://short.io/framework-d8026fe3df59b77201cc.js
Preview:	/! For license information please see framework-d8026fe3df59b77201cc.js.LICENSE.txt /.(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);function l(){}function a(){}a.resetWarningCache=l,e.exports=function(){function e(e,n,t,l,a,o){if(o!==r){var u=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function n(){return e}e.isRequired=e;var t={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:n,element:e,elementType:e,instanceOf:n,node:e,objectOf:n,oneOf:n,oneOfType:n,shape:n,exact:n,checkPropTypes:a,resetWarningCache:l};return t.PropTypes=t,t}},5556:function(e,n,t){e.exports=t(2694)()},6925:function(e){"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},2551:function(e,n,t){"use strict";var r=t(65

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	842
Entropy (8bit):	4.957424326112546
Encrypted:	false
SSDEEP:	24:tzBXuJlRGZ6vzSiMEjeK7IhdHxsGJcGmBe:ju843M/JhdH9J3mBe
MD5:	3A05DBF1CDD156FCD1677A0B444CC36F
SHA1:	4DBD36F62A617F47B69FB2D5F83BF0FE36ECE44A
SHA-256:	4C122BDEABCF8A8C613B81B5B881469574DAA61B870651D9F06D0F81B4405271
SHA-512:	CE05D3A04F285E246AC43798C384674FB5D292CEA0911CACFD6A7E10772C77B6997D5ED50BF298DDBB6096A02D06BC1E01324C1A35623E07834C8AFC63D536E6
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32 16c0 8.837-7.163 16-16 16S0 24.837 0 16 7.163 0 16 0s16 7.163 16 16Z" fill="url(#_1562409365__a)"/><path d="M12.235 12.235c0 1.56-.903 2.824-2.017 2.824-1.114 0-2.017-1.264-2.017-2.824 0-1.56.903-2.823 2.017-2.823 1.114 0 2.017 1.264 2.017 2.823ZM23.53 12.047c0 1.456-.843 2.635-1.883 2.635s-1.882-1.18-1.882-2.635c0-1.455.843-2.635 1.882-2.635 1.04 0 1.882 1.18 1.882 2.635ZM19.765 22.588c0 2.6-1.687 4.706-3.765 4.706-2.08 0-3.765-2.105-3.765-4.706 0-2.598 1.685-4.706 3.765-4.706 2.078 0 3.765 2.108 3.765 4.706Z" fill="#664500"/><defs><linearGradient id="_1562409365__a" x1="16" y1="32" x2="16" y2="0" gradientUnits="userSpaceOnUse"><stop stop-color="#FFCC4D"/><stop offset="1" stop-color="#FFDF8E"/></linearGradient></defs></svg>

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28507)
Category:	downloaded
Size (bytes):	28651
Entropy (8bit):	5.209880760136025
Encrypted:	false
SSDEEP:	384:crGpqrJ94LTvsqjdkeK7XG5UmXeslGpBmmFUSFGc8Zic7n+qZ0EPb:crBJ94LT8eCWX/8pB4c8ZbjZ0Ez
MD5:	6FE525C1F77EA90E7D2CE3587EE3994F
SHA1:	D0E44B6BCA29FE4B2A563F8AE6C58D8D7AABC675
SHA-256:	6C91188529ACA8FF259C263F10D47AFE48149C7D09ABAD71600F4AEB890DED8E
SHA-512:	2FF189DDE0B4DF001CFE6C70E67348313EB6A8BD84E2A9B98B629D825DD1C01E411B4F768135F12C4CC13FE2334E3404B3869124CE975C5FE858D6C265133564
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/9c9f5e37fb9eefe6.vendor.js
Preview:	/! For license information please see 9c9f5e37fb9eefe6.vendor.js.LICENSE.txt /."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[3044],{167824:e=>{e.exports=e=>!(!e\|\|e.length<3)&&(255===e[0]&&216===e[1]&&255===e[2])},66209:e=>{e.exports=function(e){return!(!e\|\|e.length<8)&&(137===e[0]&&80===e[1]&&78===e[2]&&71===e[3]&&13===e[4]&&10===e[5]&&26===e[6]&&10===e[7])}},127661:(e,t,r)=>{r.d(t,{K5:()=>d,Om:()=>V,YN:()=>_,kq:()=>j,p4:()=>f,zO:()=>w});var n=r(168949),o=function(){};function i(e,t){void 0===t&&(t="Illegal state"),e\|\|function(e){throw new Error("[mobx-utils] "+e)}(t)}var s=function(e){return e&&e!==Object.prototype&&Object.getOwnPropertyNames(e).concat(s(Object.getPrototypeOf(e))\|\|[])},u=function(e){return function(e){var t=s(e);return t.filter((function(e,r){return t.indexOf(e)===r}))}(e).filter((function(e){return"constructor"!==e&&!~e.indexOf("__")}))},a="pending",c="fulfilled",l="rejected";function p(e){switch(this.state){case a:return e.pendi

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4561
Entropy (8bit):	5.992061922573055
Encrypted:	false
SSDEEP:	96:RASs5VN+fq/YiWTVQNnJgN+bsJSPAh/+NVP/jhMGT37Nnv:RArN+SZWT+NJgsbbAhmPdMGTrNv
MD5:	994223FBE1736D1226AD4C882E2CA486
SHA1:	55C458A0DB6EC12D58CD9AE6CF87AAC013A123AC
SHA-256:	CAB946382FD1864E2D702CD2AB8FD37F738740EA46D11859A42CC12F39908C67
SHA-512:	C12610A5E84962D9A387D4206A5F8704B63E1D69A3CDB6802FBA918DFD2B00688D7648974DC4D736F0D7A891E5A6012CED0712E0971A28499DDFF077BE2DF54B
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/sq/d/1467288770.json
Preview:	{"data":{"review":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,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

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2312
Entropy (8bit):	4.096788340259145
Encrypted:	false
SSDEEP:	48:CQuFoaPLZMYWubqPhmsql6p2z9G7O2QBcgHyB/tWav:2lPlbqPYsql0xgGtWA
MD5:	9ABC2241BF1479263A0A039F3D1E5B5C
SHA1:	A55CBCE3521486D4C9638602552F1DA877FB5411
SHA-256:	0145274162A30A4AA4B234015B7FE608367D10F4A8042D30BA995A5ECF1FDCF7
SHA-512:	0A5B51EEC0171CDDB3B5D9E7F7727D4509F33C63312136CD96A1E29BBC2FA35EFF341AEF41096809D482A16780CC376CAC488C3895E501A10C6FA66F6D8AEBD9
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#EF9645" d="M32.302 24.347c-.695-1.01-.307-2.47-.48-4.082-.178-2.63-1.308-5.178-3.5-7.216l-7.466-6.942s-1.471-1.369-2.841.103c-1.368 1.471.104 2.84.104 2.84l3.154 2.934 2.734 2.542s-.685.736-3.711-2.078l-10.22-9.506s-1.473-1.368-2.842.104c-1.368 1.471.103 2.84.103 2.84l9.664 8.989c-.021-.02-.731.692-.744.68L5.917 5.938s-1.472-1.369-2.841.103c-1.369 1.472.103 2.84.103 2.84L13.52 18.5c.012.012-.654.764-.634.783l-8.92-8.298s-1.472-1.369-2.841.103c-1.369 1.472.103 2.841.103 2.841l9.484 8.82c.087.081-.5.908-.391 1.009l-6.834-6.356s-1.472-1.369-2.841.104c-1.369 1.472.103 2.841.103 2.841L11.896 30.71c1.861 1.731 3.772 2.607 6.076 2.928.469.065 1.069.065 1.315.096.777.098 1.459.374 2.372.934 1.175.72 2.938 1.02 3.951-.063l3.454-3.695 3.189-3.412c1.012-1.082.831-2.016.049-3.151z"/><path d="M1.956 35.026a.999.999 0 0 1-.707-1.707L4.8 29.77a.999.999 0 1 1 1.414 1.414l-3.551 3.55a.996.996 0 0 1-.707.292zm6.746.922a.999.999 0 0

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6683)
Category:	downloaded
Size (bytes):	6746
Entropy (8bit):	5.643577919863703
Encrypted:	false
SSDEEP:	192:eUG8YT+I0FFQOAMBzKJr8ZaiefShAVyy0R:3G8YT+I+C+Bz2xzVyn
MD5:	44B8622DB953615B93180B39E5CFA6BF
SHA1:	0361823DE831CC6A77831EE4A428A602F4CECCFB
SHA-256:	852BD3FAE1CF5AB0660B35FED6CDA023198ACF9DB0F094E4682ECECF919FBDD9
SHA-512:	18F0F0D825D6FFEB7E88ABBAF75D9C370E5DF1DAB866C256DAB229EA1DA750D761AFC3BA78EA483FE0B6C67E8276727E06325257F6B89687FC3BCB0F17B0BB0E
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/84db60d234c256f8.ltr.css
Preview:	._1I5x5g{-webkit-tap-highlight-color:transparent;cursor:pointer;display:flex}.bV4U1g{align-items:center;padding:4px 0}.XsQNVg{cursor:not-allowed}.SPXzig{-webkit-appearance:none;-moz-appearance:none;appearance:none;margin:0;opacity:0;width:0}.ZJon7Q{align-self:flex-start}.ZJon7Q,.tdZD9A{display:inline-flex}.tdZD9A{align-items:center;background:var(--bDblYw);border-radius:4px;box-shadow:inset 0 0 0 1px var(--6TS0wQ);flex:0 0;justify-content:center;margin:4px;transition:box-shadow .1s ease-in-out}.tdZD9A:before{content:"\00200B";width:0}.tdZD9A{height:16px;width:16px}.tdZD9A.nv35GQ{height:24px;width:24px}.VqRjiQ.tdZD9A{color:var(--_mHLrA)}.s905NQ.tdZD9A{color:inherit}.AqfZZQ,.IbvMRg{color:var(--4Yobmg);opacity:0}.tdZD9A.EPEuzg,.tdZD9A.te6xBw{box-shadow:inset 0 0 0 8px}.tdZD9A.nv35GQ.EPEuzg,.tdZD9A.nv35GQ.te6xBw{box-shadow:inset 0 0 0 16px}.tdZD9A.EPEuzg .IbvMRg,.tdZD9A.te6xBw .AqfZZQ{opacity:1}.tdZD9A.XsQNVg,.tdZD9A.nv35GQ.XsQNVg{background:var(--6899sQ);box-shadow:inset 0 0 0 1px var(--6

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 209946
Category:	downloaded
Size (bytes):	53869
Entropy (8bit):	7.994860801906176
Encrypted:	true
SSDEEP:	1536:etJaNsQx0ogWDLcdVo7HX9+rsCFYj3qXzCpe0V07:eviH5D5HX8oyYzv07
MD5:	995B80BF99EBEF9683EE5DF2050392D3
SHA1:	263EC1D6BD14E4573F3B77115C1A55281C731FA0
SHA-256:	D0CAA028DD620E54097E1FE00D3BA98386C74D90314EDC66693769B8CB6A2896
SHA-512:	A4003239FDB382458EFA33AA8C70C41EFAC352D3695C5E08BD1C8C3769DB4F2BDEFE14D94736B722FE4D0C88C92EB99639436388AB7497915C041B0668E25F18
Malicious:	false
Reputation:	low
URL:	https://js.intercomcdn.com/app~tooltips-modern.3bf1c58b.js
Preview:	...........b.F.(.+.6...&.7).V...3~m...DS...4.Jb(..o._v.............@..]]].2V..Eq.Nc.~....{7w#.O....b..o\?..4X\}....<<..`Z.U4...?.....f..v..:g1.....r.1..........0X-.c..d..yzk..p..O..n.d.<v.e2......lx....."x..O...y.....'..4.6..,...f.Pw...vx...[.E..n.4..y.o]..<.....Qky_...uj..F.P.V...... 4Lf@..4:...FK.^.\.s}.x...ti;.._...m{y.:]..4..h.....(.d#t.....\|~:....Uk.P;..q...k.4...2.....Q.=;vo...h.Q..f.x....d.,......4'?M....uk0.....E...gF....;.....4.7.s.s6.Y...iC....+\|..`qX....+\|......]r.Oc.......-..~\|,..[..,........M.yp......;.\|k...5.I4.Yd.....#..hO<.;`.@B.@.X.X.1..q..`.l.....@.......1..&..[9....LW.f....P..4...k$.;..S...SQ.n...@.WbL.5H.k.....W......1@.)l.o..}o.S.......+/>.._.\|.......M8.(.g..C..,q...q.\|......h.o.Af.&s.+$Z.e.H./....ad......`Q..x4..6r............p...j@.S.h.....w'.....[C\.E.Ow.\....;..M7^.Z.0.S.]5..}.....p.j.u.,.p....p5...nY.77.j..3....s.w<~..1^...%..m.....g......j/.`.....u....nC......)...9.p...M.e.m......g.5.9..3.@..u

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	13394
Entropy (8bit):	7.974413307682823
Encrypted:	false
SSDEEP:	384:Ili3yYeCB+pLR13d/ILB21SzrERhcg/FsNGsi:/QCgLDN118rEPcg/KM
MD5:	49687A61B12EADB64D47C3CB7EC7B363
SHA1:	E0274D655D1A026CE2FDBFE14778A2049E4905EC
SHA-256:	604102D537F469BEEE216F6DFD4112148714722DE99B228E8BF3A1133F24B3A5
SHA-512:	E54FC299E2151F29E08483BB19E7D3309427C64549529BE6A1FA910A2B523A9440FF4D6BFBE66787F8C5F0F81196E1C60498F710AD8EAA77380F1B09056CF39D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............h$u.....pHYs............... .IDATx..}.W.i...7.omT....AP@P. .bEz.U....tBB...5.$$..{.;O.du..$....yvQ$.2s.=..n7.P..+....VS......k.Y....b3\|.n6.x.Q.2.+.jE/.uoN.(+K4.6g.%.....>.O.RWVVp8\ww7...++...z....[....LLL454O.:}..i.s....5._8.A[K...o'......I...x.....7.i]..1..l.Q.6.?..s.).VS............m..t.....a!.=-k.!..4u}..M..9"..,looo}}}zzzhh.........'''?}...[.......z.z.......h.hkik].R>l.]...f.u.?}..>..+u..u..d/L.o}......]ob.+../..E.......F.X?av.._.#l0)d..!..%B.L...D"...P(............---.....<???%%%"<.....7.===....L.tut5.5T....ijh.....&)N.k..k.]Q...X;x..<...w...Vc....i.........i..2....!.ww......r.".@".K%2.L..I.R.P..rY,..F...!.....+++sss......mmmH$...0......F.F......gN.QWSW.......Pu...<...e..v.M.....q..t..u}bjgm.Ee.8B..DE&.Je2.L.....g..;2._.Cd2.D".....gww...www.........prt...WSUSSU;.y^..f..9n.,.P.......T.t..q[....U..V.....$..#.\|<...pVVV...++...B........fme}.......`.T.A...<.x.!Wx..<...e....FXA#..Q..-/c.*^.0.............D.2

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	212
Entropy (8bit):	4.709620622546413
Encrypted:	false
SSDEEP:	3:YGKoVhLET7rWwTo0VS9ZJ3AvHfeALqQtHGCVbI1K6w01q9ZDHhEKzeVw:YGKosrW4VSPJM/fLHVO3DYPDBFzKw
MD5:	B5433FA0AE004CA5811DB7D89B69B182
SHA1:	CC5BB0763AEF2BEEFEC4D6187F853605AD1A09B5
SHA-256:	B02EFA1996F69B33C0308289A3596F2EE43D2E57D231D44EA5BD357BCA2F9B77
SHA-512:	8093B67B8533821FED3B05A100604985EDDA24A66BE5CB085F4966EA5FDA609F92B08FF24F7EF76413FC8B8A9D4278090547116E90C6CB779BE9E3BC37B6F568
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/pricing/page-data.json
Preview:	{"componentChunkName":"component---src-pages-pricing-tsx","path":"/pricing","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/pricing"}},"staticQueryHashes":[],"slicesMap":{}}

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7885), with no line terminators
Category:	downloaded
Size (bytes):	7885
Entropy (8bit):	5.750702986201983
Encrypted:	false
SSDEEP:	192:z+T5cY23eR9ner7sXKHC7qwoG8tixO4vXsJoiglsqxe+66Fbf+G:zcaYKener7sXKHC7qwoG8tixO4vXsJHO
MD5:	F1520DB424F7FEB9C229440506E671E9
SHA1:	F8D66FDBF37E3119E50287B3C41465F53FE2399B
SHA-256:	4A3D6AD4A2B7885478A7684702BFBAF3A2A5E338F3EAF0F812DBF30C67BE6291
SHA-512:	063E58D340D4AF2DFE6C946EC28E15C57CCF06578B8C573E660CE7B47675224E656BF8D1654F26F7D4E34A7BAD89406B9A6AFA99B09DF18BC91F703752232851
Malicious:	false
Reputation:	low
URL:	https://www.canva.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(234))/1(-parseInt(U(294))/2)+-parseInt(U(318))/3(-parseInt(U(219))/4)+parseInt(U(303))/5+-parseInt(U(269))/6+-parseInt(U(237))/7+parseInt(U(302))/8(-parseInt(U(223))/9)+-parseInt(U(287))/10(-parseInt(U(309))/11),e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,695320),g=this\|\|self,h=g[V(247)],i={},i[V(285)]='o',i[V(252)]='s',i[V(267)]='u',i[V(229)]='z',i[V(228)]='n',i[V(260)]='I',j=i,g[V(297)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,null===D\|\|void 0===D)return F;for(H=m(D),C[a0(286)][a0(232)]&&(H=H[a0(273)](C[a0(286)][a0(232)](D))),H=C[a0(277)][a0(240)]&&C[a0(268)]?C[a0(277)][a0(240)](new C[(a0(268))](H)):function(N,a1,O){for(a1=a0,N[a1(292)](),O=0;O<N[a1(230)];N[O]===N[O+1]?N[a1(245)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(299)][a0(295)](I),J=0;J<H[a0(230)];K=H[J],L=l(C,D,K),I(L)?(M='s'===L&&!C[a0(272)](D[K]),a0(274)===E+K?G(

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65478)
Category:	downloaded
Size (bytes):	369091
Entropy (8bit):	5.7228993075989525
Encrypted:	false
SSDEEP:	6144:KJ9PBctt7I9LpSQGsIH1g5zNAO1uL422AorsfHY97UrzJFwrewFaXIVl5kr3QFsz:g9pVJuL422AYs/Y97UrzJFwrewFaXIVA
MD5:	67E0CCDB5A576EED975F975A6CB3D595
SHA1:	0B357540CC2A9F195C39455AE6642467C43166F8
SHA-256:	953FB10CACC876E649DA15DFF8BBA4B4DFDA68CC46352F7289AFC1A7053C2523
SHA-512:	FC69AC33CDA0570712FBDE2E4960C82FA626AEBB16F55C0606F5C59751B746946A747A4175E022D01FB8F584BA806D32533DDE8CA58CCD28D7E2A636EEF4C5E5
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/1b96dc175117e75c.vendor.js+9a5bc247025fb8e8.js+96fce9fe2ad37a14.js+5b978aa1138d2dd3.js+cf288a3082e4672a.js+94def58aeb89e59c.js+c21b21bfb9577647.js+d7eb0d9b71092908.js+ab6a3e2e8cac7ce6.strings.js+570865c4d06b4285.js+f6632b2cc8e6c080.js+ccfc93f09f159cf4.strings.js+9ef9aea75d0fa20b.js+e31595af787f9905.js+d4aef339bff5f630.js+74ab07a470990b34.js
Preview:	;// __FILE_CONTENT_FOR__:1b96dc175117e75c.vendor.js."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{664751:(t,e,i)=>{i.d(e,{Z:()=>h});var s=i(94368),n=i(412730),r=i(657070),o=i(945522),a=i(920335),l=i(843264);const h={bn:s.Z,A:n.G,qr:n.r,it:r.Z,qt:o.Z,xt:o.Z.ep,D:a.Z,zo:l.Z}},94368:(t,e,i)=>{i.d(e,{Z:()=>s});const s={pn:function(t){const e=(t+"=".repeat((4-t.length%4)%4)).replace(/\-/g,"+").replace(/_/g,"/"),i=atob(e),s=new Uint8Array(i.length);for(let n=0;n<i.length;++n)s[n]=i.charCodeAt(n);return s}}},412730:(t,e,i)=>{i.d(e,{G:()=>s,r:()=>n});const s={CustomEvent:"ce",Pr:"p",Sl:"pc",oc:"ca",Ra:"i",qs:"ie",T:"cci",W:"ccic",_:"ccc",L:"ccd",Wh:"ss",bh:"se",Je:"si",Re:"sc",He:"sbc",Pe:"sfe",ro:"iec",vl:"lr",yl:"uae",U:"ci",F:"cc",Al:"lcaa",$l:"lcar",En:"inc",An:"add",Un:"rem",Sn:"set",Cl:"sgu"},n={Fr:"feed_displayed",ac:"content_cards_displayed"}},657070:(t,e,i)=>{i.d(e,{Z:()=>s});const s={nt:()=>{const t=t=>{const e=(Math.random().toString(16)+"0

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1525
Entropy (8bit):	4.359418865415674
Encrypted:	false
SSDEEP:	24:t41Ri5D1JURsYbz3QHcchcNq2tkJzvEL16squq3qcEgtNibpq5S+2OV/LvBe8rTd:CsTJnoLdk1Eg7llEuN8M5SjKBeM31dy+
MD5:	8777E8ED572C4159D71B08CCA2972B15
SHA1:	2A57B1E6F2667BA1364CF459161FB868B53C37B8
SHA-256:	E1795BC184F97F29790C807FC91C70846D221904576727698728271D7071F268
SHA-512:	43276A2282A1B088AF417B61942B880253F9D1FCDFFF802F2EBD5BE935D4A708C2AA90842247147D5274CDE52D2B06B5659A607593925822539D6985AE84CFD0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036a.914.914 0 0 1-.312-.464.799.799 0 0 1 .59-1.021c4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173 1.205-.286.358-.828.401-1.211.097-.11-.084-2.523-1.923-6.182-1.098a.91.91 0 0 1-.764-.184z"/><ellipse fill="#65471B" cx="13.119" cy="11.174" rx="2.125" ry="2.656"/><ellipse fill="#65471B" cx="24.375" cy="12.236" rx="2.125" ry="2.656"/><path fill="#F19020" d="M17.276 35.149s1.265-.411 1.429-1.352c.173-.972-.624-1.167-.624-1.167s1.041-.208 1.172-1.376c.123-1.101-.861-1.363-.861-1.363s.97-.4 1.016-1.539c.038-.959-.995-1.428-.995-1.428s5.038-1.221 5.556-1.341c.516-.12 1.32-.615 1.069-1.694-.249-1.08-1.204-1.118-1.697-1.003-.494.115-6.744 1.566-8.9 2.068l-1.439.334c-.54.127-.785-.11-.404-.512.508-.536.833-1.129.946-2.113.119-1.035-.232-2.313-.433-2.809-.374-.921-1.005-1.649-1.734-1.899-1.137-.39-1.945.321-1.542 1.561.604 1.854.208 3.375-.83

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	322691
Entropy (8bit):	5.600434809873504
Encrypted:	false
SSDEEP:	3072:low4lgjiFn0/VPLu0h2zNeHL+v8Hcth1FytS5s4ONgZUyjRAO5GbH+lYbyJxBg8x:H4fF6rgzNKmlGMxZUyjRV5c+Jx6VAzd
MD5:	C691BCC032006949F40163027DE1C9B3
SHA1:	D61BB339DF06DAD2D8690759BE36D103866E4658
SHA-256:	20F2D0AAE22B9FD5AD5CD2E3A0BDA9B490BB4F34F38B993B61B75A45FC28A4A4
SHA-512:	A6D1A27DA95AF219D2DEE200652E306B4384643F65D1447EE4D8A418B9516DEAF562BCA1138EF857196875D53D52811CFFD9D33396B2627F760005F5D7A1D342
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-JVCX6B1JPE&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"7",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":28,"vtp_rules":["list","short\\.io","short\\.cm","shortio\\.cn"],"tag_id":115},{"function":"__ogt_ga_datatos","priority":28,"vtp_instanceDestinationId":"G-JVCX6B1JPE","tag_id":138},{"function":"__ogt_ip_mark","priority":18,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":113},{"function":"__ogt_referral_exclusion","priority":18,"vtp_includeConditions":["list","l1x\\.eu"],"tag_id":116},{"function":"__ogt_ga_send","priority":18,"vtp_value":true,"tag_id":117},{"func

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4628)
Category:	downloaded
Size (bytes):	362791
Entropy (8bit):	5.656969018133038
Encrypted:	false
SSDEEP:	6144:zQBszJ6B20yHeQAoxhR64l2cawmE9JPtSaxVxOVxgxSxHxXxcWA3dlffrDbvNbqF:zQBszJ6BryHeQAoxhR64l27wmE7tSEXC
MD5:	495D8D3C3D03583CF67F0AFD0056651F
SHA1:	4E133C240B27E743EE84F7BE3F7FE8FCC9659DC3
SHA-256:	DA02411CD0D53D5384E5F0C1C9436AA7DC1B94AF500802C58E0FED904EB0952C
SHA-512:	E1E6173BF7073EAEF275EAFD2020305E65D303B0E6E123D1397D2B15C95132BC61073E7478D3F9B00609FC5C24346A45EB74D1C5897BA538E0C4B0D15DAA97D3
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/6647f35392aa70f6.js+417c62e513c0b3c2.js+ba8cda51a99f46d3.vendor.js+8e82ba8db0d6b18d.js+98c70a64f41e40c7.js+cc32cfc96d47808d.js+7693127bffb8514f.js+c5b6907854a89666.js+880d457741e39ad1.js+1c5ac52ad7165cc8.js+a17fdee60a10aa7a.js+45289403e160a2f4.js+34a4828ac8521b19.js+3bedbe9da81e71e9.js+8d8161777ba9d7c7.js+05b9dec1d6ad0ee7.js+289d46569ebc6b34.js+8d89a659626a2d7c.vendor.js+87dc93060d688e5f.vendor.js+53c5f62f8542e2d5.vendor.js+c60c10a90fbee0d2.vendor.js+465acf2d61fe3aef.js+da63b553e5f04517.js+05933124bc87daac.js+fa1d7006fea5d810.js+707974868651152d.js+0c2b0b465710b0c0.js+cfc0eaca77e313af.js+fc899ef176474fda.js
Preview:	;// __FILE_CONTENT_FOR__:6647f35392aa70f6.js.(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6857],{../***/ 237221:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(391214);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var an;var dn,Hma;__c.Ym=function(a){if(null==a\|\|"object"!==typeof a)throw new TypeError(`expected an object, found: ${a}`);return a};__c.Zm=function(){let a,b;return{promise:new Promise((c,d)=>{a=c;b=d}),resolve:a,reject:b}};__c.$m=function(a){return new Promise(b=>setTimeout(b,a))};__c.Bma=function(a){return a.every(b=>"object"!==typeof b)};.an=__c.an=function(a){const b={};for(const d of Object.keys(a)){var c=a[d];null==c\|\|"function"===typeof c\|\|"symbol"===typeof c\|\|Number.isNaN(c)\|\|"number"===typeof c&&!Number.isFinite(c)\|\|(Array.isArray(c)?(c=__c.Bma(c)?c:c.map(an),c=c.filt

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12931)
Category:	downloaded
Size (bytes):	12994
Entropy (8bit):	5.2627492332538415
Encrypted:	false
SSDEEP:	384:bHW9XSLkd3XPsGphyjl5Y7dad1P4gv16fM:bHW4LkdPsGMl+Ud1Ptv16E
MD5:	075935378B033387587ECD288BE67FDD
SHA1:	088CA089A174EEF1A59018DA8FD3E49B8B17B08C
SHA-256:	4F37E226951401D162077BA5A99464F7DC6F49893F9861C8226D0E4D6B3E351C
SHA-512:	DA40140957AD71CE8B81920E9AF52AD93E7DA673219A8F93738109EE04DB92F19E8CE7B2FAE886FCDA005AFE854A922065B768A1430E558CF9CD453B5AA293B6
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/bc6d536e475100e2.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[9731],{797806:(t,n,r)=>{r.d(n,{E1:()=>o,Tl:()=>u,Zy:()=>a});var e,i=!("undefined"==typeof window\|\|!window.document\|\|!window.document.createElement);function o(){if(e)return e;if(!i\|\|!window.document.body)return"indeterminate";var t=window.document.createElement("div");return t.appendChild(document.createTextNode("ABCD")),t.dir="rtl",t.style.fontSize="14px",t.style.width="4px",t.style.height="1px",t.style.position="absolute",t.style.top="-1000px",t.style.overflow="scroll",document.body.appendChild(t),e="reverse",t.scrollLeft>0?e="default":(t.scrollLeft=2,t.scrollLeft<2&&(e="negative")),document.body.removeChild(t),e}function u(t,n){var r=t.scrollLeft;if("rtl"!==n)return r;var e=o();if("indeterminate"===e)return Number.NaN;switch(e){case"negative":return t.scrollWidth-t.clientWidth+r;case"reverse":return t.scrollWidth-t.clientWidth-r}return r}function a(t,n,r){if("rtl"===r){var e=o();if("indeterminate"!==e)

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (781)
Category:	downloaded
Size (bytes):	4626
Entropy (8bit):	4.650240114785099
Encrypted:	false
SSDEEP:	96:5Jr0YWaIecI7KrUyQzbrcUrWST0derl/BlY3kSw0JnS7kHCIz5OFe:5JwYWabcI7KrUySbgUlTUe1BW3k/0J2y
MD5:	6286F5A1C818D847D18AB7F0DDE3C347
SHA1:	D3C1C0D5060A01102E93FB0F78DE02C5FBD1A4C4
SHA-256:	46F54A2377F1DE724CA0F5C049BE418CF705CEBF142A71CD8F4B581885AFB25C
SHA-512:	2B797B4B1F1FAE04F812E959F508690ACAF212798330C58EE66D3A9E931F77ADBEB7E7DB336615DB7E8051A0B7E3D48A898BD56CC3761CCFF9ED11EC8AB56E56
Malicious:	false
Reputation:	low
URL:	https://link.childedocushare.site/WOo1se&design=DAGEBBzq9KM&accessRole=viewer&linkSource=document
Preview:	<!DOCTYPE html>.<html>..<head>. <title>Link is not found</title>. <link rel="preconnect" href="https://d2te5kruq0pvbl.cloudfront.net">. <meta name="viewport" content="width=device-width, initial-scale=1"/>. . <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"> . . <link rel="preconnect" href="https://fonts.gstatic.com">. <link href="https://fonts.googleapis.com/css2?family=Hind:wght@400;500&display=swap" rel="stylesheet">. <style type="text/css">. html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseli

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	4.8809222521861715
Encrypted:	false
SSDEEP:	3:YGKoVhLET7rWwNmdxPVSgExAwvHfeALqQtHGCVbI1K6w01qgExghEKzLHS1HQVw:YGKosrWEm3VSkM/fLHVO3DYuFzLy2w
MD5:	EA78F43951AAA4923ABA747A6EE15442
SHA1:	067C64DEE623F8B646596E023F9D1A9E158AAEF4
SHA-256:	6144FA9EEA7FD76FE6777F24DBB653B240D01870CC5CA3F8EF5F2695632BDA47
SHA-512:	CB7D2F43D0F5C934845BC19B2935E72D4362102D1E7C03FC6B83675BF2E38DE42DC9F9D0BBD3981C97F0A502BA0A0E5E9F52682E12FE381ADE634F714E4F216B
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-pages-integrations-tsx","path":"/integrations","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/integrations"}},"staticQueryHashes":["2355750797","3934953401"],"slicesMap":{}}

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.703465189601648
Encrypted:	false
SSDEEP:	3:YSAjKv8Lt/1fsji:YSAjKvax1fsO
MD5:	7010D999C47B8EF993CB6476F7899933
SHA1:	7F2186A85C4F8488DA60CB435B52123581087413
SHA-256:	E832DFBE4A196C6A9125C9320B42620D7910E1A659C2B943B0B1A04363D00E81
SHA-512:	589A321BBB511D361599239B6B1FAB18383AF5E5163DD36E1AFB0F086A9FDC123171CDB42AE4749C18A14ED9BF289D65B2EC51A2C5C7AB9A9451E1C0082EDA5E
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/app-data.json
Preview:	{"webpackCompilationHash":"da858138a4fb30cdea93"}.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.54178832719941
Encrypted:	false
SSDEEP:	3:YAv+e9BAJ6YSm7XJHIzRNg+wjNXWRwFH1j66qVVJMdMQUWKLb+AHfgq+WRHYn:YAme2J6YBDJHIlNgDXWqH1jwVJMyb/4l
MD5:	F447C440ABF2B8AF203938329FE494F8
SHA1:	3E071AE6400D84FB2EBE38EAEE60E1161D9F4556
SHA-256:	11BBA994684E05187E8CB291F03254CE7810FB3EABBC900299F078F2E584550F
SHA-512:	BC05CEC72D8512A1CE483156BDCD963199EBFFD224D991AABAD638D3FA075CD7C96E20B20B85C7224925B8263143772174B3BC824EA258C0B196C83E03007C9F
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 565948, version 0.0
Category:	downloaded
Size (bytes):	565948
Entropy (8bit):	7.999137145225714
Encrypted:	true
SSDEEP:	12288:w3F3pqX8bQs0uFdSTEuRJXD2CmfFtbZIY8cugJTdjQrebEYsMMiyk0TuC5cC7TBp:QF3pTbH0ad8RRJzct1XVugJJjmqMt3u6
MD5:	D431517EA5861856469F91022D4DB590
SHA1:	F82C03260E104DA7AE3D673AF469C4BCDDF2B088
SHA-256:	E386678E1854D6F1E3A8919213D87DBA2A2ECABF101D649127608B54647802D1
SHA-512:	AFDC852A4C4E5F06B4599DA78F6C22B1C9C0ECB75C606B0BDA8320EE46DA7E59421B4A5425289CD52F471A31553092FAADE3DCB701840F45CDFCDB98E9BBBAED
Malicious:	false
Reputation:	low
URL:	https://font-public.canva.com/YAFcfhdOoGk/0/calibri.b242995fdba37a55d447fe541d829654.036b3d3daa452ce192466bbba1b30205.woff2
Preview:	wOF2..............j....G..............................`..b...V...r.`..D..<..+.....x..t.6.$...(...,.. ?meta....V. ..k..q./.@....(i.....31....B.U..........v........}87.2.....<d......................................................[..f......~.....~...G..~......~...'..~.....~...g..~......~._....~._...~._.W..~._....~...7..~.....~...w..~................?.............?.............?..O.........?..............._./..........._...............o..........................?.............?.............._...........................?...........................................................&...........................L..3=..g.M.:.&..Z...:o.P.....(.S.....WyU....]...!.rIyI%~*.......:.U.+...{U..I.9..9m.x-m..8..vy6..>..^.}U...^>[...`rX^..k].. ..p.i......[...L..gU....(.=.<g.B...p...:..<..g.....:k.j...>.U)}_\4..;.. .O....=."6dY..l.)..bD6....X@..l\|>..a.e;..m.1..L~l....-..K...q...q..p...e.....l.......Gn.NC......`-.....T1...+..#F..{...Tg..{E..C..].T....5PQ./...A

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46045)
Category:	downloaded
Size (bytes):	331673
Entropy (8bit):	5.541513032755745
Encrypted:	false
SSDEEP:	3072:Ax5DHOW2RFn0/VPLu5h2Mir8Htth1FytS5cxhZ6yjRAO5GbSdwlYisUqWTp:Ax5DHH2RF6sg+lGlZ6yjRV5cCUqW1
MD5:	90DC8FD59CEE97265C8B846F0EA7EC13
SHA1:	75C1DDAAA8DFDCAD34B1E15CB6460FFBD5849C1F
SHA-256:	C08208F035FBF902C3401AA125087B96C54A768F385A31E4271CA22E279F1A8D
SHA-512:	C21F234B0C36B0CD952838CDA2CE2D25CFFE9DB66AE9F73648B0E4DA411EEEAF996D544493132C195EF15B18639CF77BCF87D0183A5AAD51A6E334902C0AF0A9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TZPTKRR&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"267",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"label"},{"function":"__r"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_content"},{"function":"__c","vtp_value":"844585682227065"},{"function":"__cvt_12729902_717"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"product_variant"},{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"country_code"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"u

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8637)
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	5.634940892294206
Encrypted:	false
SSDEEP:	96:aWfeFz1eXyNeC8jXTqvKlq14bOYVH1doctYnWwELc0mcDJoab4OGzyQVMv4nuZ:e2+8jmvtGdoNnWf5oaed+
MD5:	773E2012DF644BA3358FF592B1188A99
SHA1:	FD294C29C6CFC4DF0A27E94F227DD41C34644A53
SHA-256:	44894AFE9CD925D8DF1FD3C667CF2D615C64045C22BA1F774DA6FC46171FFBDF
SHA-512:	8F2F95950CFA7671757FBD24511C729E9D132927DEC10061F057F9249BFC5ADF2E16BFA970CEF55E66487E2BBF16E33EFF64C90504B0DBB3805E1847957C9783
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b3ad105788169a6a.ltr.css
Preview:	._pFsfA{clip:rect(1px,1px,1px,1px);border:0;font-size:0;height:1px;left:0;margin:-1px;overflow:hidden;padding:0;position:absolute;top:0;white-space:nowrap;width:1px}.dkWypw{align-items:center;box-sizing:border-box;display:inline-flex}.dkWypw:before{content:"\00200B";line-height:1;width:0}.dkWypw>svg{display:block;height:100%;width:100%}.R3BUpw{height:12px;width:12px}.uRWxVA{height:16px;width:16px}.NA_Img{height:24px;width:24px}.JRkz2A{height:32px;width:32px}@keyframes _vsOSw{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}._6ti9_A{animation:_vsOSw .5s linear infinite}[dir=rtl] .lmfTqA{transform:scaleX(-1)}.RMcv3A{color:var(--pUV7hA)}.M1IlTw{color:var(--FTyzZQ)}.EpS93g{color:var(--fSfh3A)}._7_8FQQ{color:var(---VkLcA)}.Tb7P_g{color:var(--05tvjQ)}.R5PmNg{display:block}.E_qVWQ{display:grid;height:100%}.UKsLwg{--d81tuA:0px;--_evPSA:var(--d81tuA);--_f2RZA:var(--_evPSA);--uN5Olw:var(--_f2RZA);---XJdPg:var(--_evPSA);--cmJCGw:var(---XJdPg);--m4p2Fg:var(--cmJCGw);--nukydw:var(--m4p2Fg);--y

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1734)
Category:	downloaded
Size (bytes):	10248
Entropy (8bit):	5.650702869713219
Encrypted:	false
SSDEEP:	192:9wPBjPvyWKCXPjWbMSBgNnx7Uqwh16xpK4dFZ/um0IGh7A3nyEIl5ND4YJv/l97P:92BjPvyWKUjWbMSBgXi6G4dFrCZN97w4
MD5:	CC20BAD8712A37361E0EC087520B5C2D
SHA1:	751B2CFC28DE27B54BBFF4B213F7D204DE916A74
SHA-256:	C2310CD51117EA21DD6B7ADA192DD8577DA3A670879FAFCD4BE400728A699C6E
SHA-512:	E586756F6495FE09C9AF09ED2FCB802D623F804EAF5842346D25332416001BD732072AC3B7EE376C2B23C02BE0ADF9548C0083ECD6D365090AB89B2818F9C31C
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/9794b708e04ecac0.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[7595],{../***/ 391214:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var Oia,Pia,Xia,Uia,Nia,jl;Oia=function(a,b){switch(b){case "en-psaccent":b="en";break;case "ar":case "ar-AE":case "ar-EG":case "ar-SA":case "fa-IR":case "he-IL":case "pa-PK":case "ur-PK":case "ckb-IQ":case "ug-CN":b=`${b}-u-nu-latn`}try{__c.ld.resolveLocale(b)}catch(c){b=__c.ld.defaultLocale}return new __c.ld(a,b,Nia,{ignoreTag:!0})};.__c.bl=function(a,b){var c=__c.tb(),d=Oia,e={};for(let f=0;f<b.length;++f)e[f]=b[f];if(b=__c.Pd.get(a))return e=b.format(e),__c.vb?"\u2062"+e+__c.sb(a):e;b=(b=__c.ub[c])&&b[a];null==b&&(b=void 0);if(null==b)throw Error(`Could not find string for ${c} ${a}`);c=d(b,c);__c.Pd.set(a,c);e=c.format(e);return __c.vb?"

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	368
Entropy (8bit):	4.546742488437108
Encrypted:	false
SSDEEP:	6:tI9mc4sl3WfR9F37qCdzU4jQT1m9etUNq1RQv7HD6DVJOp0zjyA0mI4YLJ5TDh:t41WffF37vdz3QT49etN127gtvb0mE/x
MD5:	0483F2B648DCC986D01385062052AE1C
SHA1:	61BD815F1497863265A76D92623042835E5E7FE2
SHA-256:	09A743EE0C32CA57C9BE64B13B29C396310D1DD309CB4D7D3BE722E47DB95F27
SHA-512:	359F9BCC2441DC48FFBE69353BB7D4143A2037B0263BD5F0CFB06B14D5F15D9A6E574930E88A84081C61698BF3E2F5333BF9081865183AA7F9202AAC078C10FF
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/0483f2b648dcc986d01385062052ae1c.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#DD2E44" d="M35.885 11.833c0-5.45-4.418-9.868-9.867-9.868-3.308 0-6.227 1.633-8.018 4.129-1.791-2.496-4.71-4.129-8.017-4.129-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1.751 22.587 11.216 31.568 18 34.034c6.783-2.466 16.249-11.447 17.617-19.959.17-.721.268-1.469.268-2.242z"/></svg>

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5778)
Category:	downloaded
Size (bytes):	5841
Entropy (8bit):	5.657922299855556
Encrypted:	false
SSDEEP:	96:ymR5Bt9D95GepDHkrOXWtwBFo05jRLAZhfg0z4NFGqVDU:/R5BjDzloAdAZhfb4N8yQ
MD5:	C54FC6F87D01E616CBCA0AA7126476CB
SHA1:	E232F3C6B29F5538B8C40A18E28E9C7ED7BA4F6E
SHA-256:	C322CE63430F332D3E0760BAC406B325ED93DF97694A85E33C2782561AE4077C
SHA-512:	5547B420923281256B4FFF2228A1E161512C36C2F875EC841CB79CF466CC790E91C79CF7F8560E7B43A923A96678D18549F4C618EAF9DB8D753C00672DB154BD
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/9dc21140fdbdfcf9.ltr.css
Preview:	._9Mb__A{border:0;box-sizing:border-box;list-style:none;margin:0;padding:0}.TsqTMg{justify-content:normal}.VpI6pA{justify-content:center}._NLu4Q{justify-content:start}.WkHsXQ{justify-content:flex-start}.KWHRmg{justify-content:end}._6Wu_wQ{justify-content:flex-end}._9Jwa9A{justify-content:space-between}.SdPLvg{align-items:stretch}.PbKupw{align-items:center}.IQbIXQ{align-items:start}.Pv4hww{align-items:flex-start}.l14TtA{align-items:end}.pjmL_Q{align-items:flex-end}.KYVkRQ{align-self:stretch}.W6llkg{align-self:center}._8a9K5A{align-self:start}.Q91wWg{align-self:flex-start}.JN1M0g{align-self:end}.mZB6gA{align-self:flex-end}.light{--YkBpzA:#f6f7f8}.dark{--YkBpzA:hsla(0,0%,100%,.15)}._6hNByg{background-image:linear-gradient(45deg,var(--YkBpzA) 25%,transparent 25%),linear-gradient(-45deg,var(--YkBpzA) 25%,transparent 25%),linear-gradient(45deg,transparent 75%,var(--YkBpzA) 75%),linear-gradient(-45deg,transparent 75%,var(--YkBpzA) 75%);background-position:0 0,0 8px,8px -8px,-8px 0;background-

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3304)
Category:	downloaded
Size (bytes):	269757
Entropy (8bit):	5.5525994567092685
Encrypted:	false
SSDEEP:	3072:4y2WFn0/VPLu0h2neH8y8H7th1FytS50Bc2dO5s0Z6yjRAO5GbiwlYRXvhdLw/p:h2WF6rgnDlGmFZ6yjRV5cSvhiR
MD5:	07627BC05FDBEB76250A59BA50C2B99F
SHA1:	3694B0F773CEA19ECE476F3745AF4AE6BC017EB5
SHA-256:	479D49B8823D44C995E747CB3D3D1C20EB3A9959C865954E7A1E8E6268165C7F
SHA-512:	7C6DEA2584E63026E1FBEAA1B2E2D39F57D7264C4C4B77D639E09E341553218A129629DF8EC5FDD9FAD4A2A350B9BD12A40E85AD5FD84FA2A7E2DE0B8ABA7573
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KRWKR2
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"113",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",1],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_map":["list",["map","key",".\\.short\\.io","value","G-JVCX6B1JPE"],["map","key",".\\.short\\.cm","value","G-JVCX6B1JPE"],["map","key","short\\.io","value","G-JVCX6B1JPE"],["map","key","short\\.cm","value","G-JVCX6B1JPE"],["map","key","shortio\\.cn","value","G-JVCX6B1JPE"]]},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	dropped
Size (bytes):	127802
Entropy (8bit):	7.994215602670648
Encrypted:	true
SSDEEP:	3072:kRywbLcPNZhLEP2ws8lWRvcZc+w8HSiWUiVEvIYTenPYtgP:AywMzpgs8luvc7yUenfP
MD5:	C2E4793B6254B393B767C35EB35804E0
SHA1:	54C0395FB19D642E6FCE9EF0A5C0C1986FDA1D75
SHA-256:	014643806270730F7B0CB3FC325A4A598E7CE30399598530AD02E77F5780FFAD
SHA-512:	1EBC5B96D98C7CB4FBBACCDFD15CA4409C9A9A818A8C96D617D551DFF62FB01433892D2C1D5E509F366194772076E892DFB61FBF6589084BD153C871B15C1950
Malicious:	false
Reputation:	low
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D............K..'.................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe................pixi............av1C........colrnclx...........ispe................pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................ymdat.........P2.....PSpP....RR..br.."Y... Ue......+G........a...8M.\|.G{.... 8..N5......I.K...z...a.......%....k..70...a..>)..3.gT.M....UL.)@St.k2;a......\...._..D..._..G../.."i...}.^"....I.P\|Z............b.p....$.$...... .9.i-A .VK..S.J.a....}B...7..HB...<......l........N....C.....I^....I...Y)l.......K.....={>....q-%.\cp........WZ....F^..De6s.V...`....N....LB.,T....9.M.....~..-.'.t!.../Q.6i....H..o.....O..R.[...O.).9w.>...p............j.q..v..m.'..Tj..Lf...f<*M..@a]...1.Ns.....{J...'.....]...\. ...br6..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1525
Entropy (8bit):	4.359418865415674
Encrypted:	false
SSDEEP:	24:t41Ri5D1JURsYbz3QHcchcNq2tkJzvEL16squq3qcEgtNibpq5S+2OV/LvBe8rTd:CsTJnoLdk1Eg7llEuN8M5SjKBeM31dy+
MD5:	8777E8ED572C4159D71B08CCA2972B15
SHA1:	2A57B1E6F2667BA1364CF459161FB868B53C37B8
SHA-256:	E1795BC184F97F29790C807FC91C70846D221904576727698728271D7071F268
SHA-512:	43276A2282A1B088AF417B61942B880253F9D1FCDFFF802F2EBD5BE935D4A708C2AA90842247147D5274CDE52D2B06B5659A607593925822539D6985AE84CFD0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/8777e8ed572c4159d71b08cca2972b15.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036a.914.914 0 0 1-.312-.464.799.799 0 0 1 .59-1.021c4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173 1.205-.286.358-.828.401-1.211.097-.11-.084-2.523-1.923-6.182-1.098a.91.91 0 0 1-.764-.184z"/><ellipse fill="#65471B" cx="13.119" cy="11.174" rx="2.125" ry="2.656"/><ellipse fill="#65471B" cx="24.375" cy="12.236" rx="2.125" ry="2.656"/><path fill="#F19020" d="M17.276 35.149s1.265-.411 1.429-1.352c.173-.972-.624-1.167-.624-1.167s1.041-.208 1.172-1.376c.123-1.101-.861-1.363-.861-1.363s.97-.4 1.016-1.539c.038-.959-.995-1.428-.995-1.428s5.038-1.221 5.556-1.341c.516-.12 1.32-.615 1.069-1.694-.249-1.08-1.204-1.118-1.697-1.003-.494.115-6.744 1.566-8.9 2.068l-1.439.334c-.54.127-.785-.11-.404-.512.508-.536.833-1.129.946-2.113.119-1.035-.232-2.313-.433-2.809-.374-.921-1.005-1.649-1.734-1.899-1.137-.39-1.945.321-1.542 1.561.604 1.854.208 3.375-.83

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 905 x 931, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	125207
Entropy (8bit):	7.993599992340711
Encrypted:	true
SSDEEP:	3072:kbI+P4IVyBIEnsJAY5UmjdsTGrgp9XJF9g2xl:kxDyC3Ns5zZrg2xl
MD5:	FE5F48C014F3880DBE58B02F00ACACA5
SHA1:	2EAEEE15D875D05895534A916025866619A3A291
SHA-256:	99E338BC876526D8DCC19FF069B9923B11D5B3EDC10BAE0DE0E621466CA1E8E0
SHA-512:	6E49AF3E4212D68E532823B023595080E3E18341580FFBC97B7E6479F6676B65D22E3B2DA7D31AAB80D3BF77007883C40E36D909686148C021433CC8AD73C050
Malicious:	false
Reputation:	low
URL:	https://short.io/static/support-background-5c8af4d33bb148d57a2ab16ae8132caa.png
Preview:	.PNG........IHDR.............!.7....PLTE....................................................................................................................................................................................................................................................................................................................................................................................878878...888767868..X..`777.._999..^..a868.._.._..^..`868555878..`.....].....f..{....\..^..............^..c..a....._878....r.............i....\|...........#D....tRNS..............................x.........}.o..zh....q.... ../@`mv..P=N.X^-k\.L.$8.`.(GY...eS5.2..:tsUIEc*fB....... . .Y..`..@.@0p..p.Q..@0..w.o.qT.~.....IDATx...K.. .EQ/.V@BH....6.U..R....=.(.'......{y....2.~9Q.v9....`......&SO..3..b7...=x....$7...{..=T."......LU......(.h...\...4P.l...'.T .:.6%..H.R[..0.Y.....2U.r.j!z.$v.@....CR3.i...0....zHc.Of.@...Y..m.\u.(.l..\.o....k.4...is.3....d..i.\.l

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4715
Entropy (8bit):	5.229431212698995
Encrypted:	false
SSDEEP:	96:4AfRBoQgiaY2CQFQwjn5WXiusMq/x+s9vRYHo1vI8BQpQAO1Qovlh0:4URbjaYJQB4zSx+AYHN8BQpQlQ+h0
MD5:	8BB696F2B509A66C99C533DA199D7401
SHA1:	9F71ACFAC51D7F1385D18D0B018C35742A8F81DE
SHA-256:	2879CFA984C50F5CB58F719F48D39A8E19477928111A1ACA030FFC2705963302
SHA-512:	52C4689E265DA87710E0FAA59189B9922AC6D48E8836DFFBEDE8E9956225B8827A679A900E4C3D4B28929AC096CC298F6BE66A9D2A4D64E245C736AAC7401A77
Malicious:	false
Reputation:	low
URL:	https://profile.short.io/changelog
Preview:	[{"id":"65fc94c9bd0d7f0530e3bf03","created":"2024-03-21T20:12:57.828Z","labels":[],"publishedAt":"2024-03-21T20:18:59.233Z","title":"Public QR code generator & UTM builder","types":["new"],"url":"https://feedback.short.io/changelog/public-qr-code-generator-utm-builder","plaintextDetails":"Now you can generate QR codes without signing in to your account! Our fast shortener Short.gy also provides QR codes and UTM builder now, without registration."},{"id":"65a71296b57551994f5355c5","created":"2024-01-16T23:34:46.722Z","labels":[],"publishedAt":"2024-01-16T23:40:42.318Z","title":"Link Router","types":["new"],"url":"https://feedback.short.io/changelog/link-router","plaintextDetails":"Now you can add subpath to link slug, and it will be passed to Original URL during redirect. In order to do this - add / * to your link slug, and $1 to your Original URL. For example, in this case, visitors of shorttest.site/test/abc will be redirected to example.com/abc"},{"id":"65788bfe1dfbfecf2d386d57","cre

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1438x560, components 3
Category:	dropped
Size (bytes):	14135
Entropy (8bit):	7.460816425587732
Encrypted:	false
SSDEEP:	192:yrYaVEYBiSpH9oyuXpc7tvVnvRmIgtIQ/Y3bg9X0YUYIaAREh3YF:yrxqYBAtGTZmE9cwYIaAqIF
MD5:	A9570A9E9B0EE86F996A34717EAAA80F
SHA1:	E76C3E57D109C7B7542763872AEC84B4CA749D45
SHA-256:	84879B89770C6DE248C88819697C37AACD209A075F6932B339C63DFE5FD6AB6B
SHA-512:	7121D17A4891676F79CFA8339D8EF7E4BEA3FEB90A74BCF0F85782BE8AB909121E624D75F7ECF0EEA3B2060C77CBE7F2E5CB8FE3EA318420610F2D3C48A8870F
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......0...."..........5..................................................................:=........................................................................DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E.DQ.E..m....la.....la.....la.....la.....la.....la.....la.....la.....la.....la.....{\|.;pn....._..m.q..x[i...la.....la.....la.....la.....la.....la.....la.....la.....la.....la.....l...............1..3..{...i................7...\|..s...:./..x~.?... ...............................[E.DQ.E.DQ.E.DQ.E.DQ.E...WW...j......y.F.g.Q.E.DQ.E.DQ.E.DQ.E.DQ.NW...Tqz@...u._...*+\"..(."..(."..(."..(."..(."..(."..(....\|.m.9?Vk.+L.(."..(.".)1DQ.E.DQ.E.DQ.E.DQ.....4...<...-...7.....>+lb..(."..(."..(."..<.........._.#.........u...trz....(."..(."..(."..(."..(."..(."..(r~..........=m..G...

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1196
Entropy (8bit):	7.745951715532103
Encrypted:	false
SSDEEP:	24:CnMGHi1wkWdyEkVXYftOhhfw7gSVSHCMwUJPLUYI6w1KPFpuiv1F:hDwACYhhegSsHCMLR+6w1Yt
MD5:	E46823BF878290900A5CF2B576FCFF78
SHA1:	E7504CD20F9F078622C83C4E4E1E993396CC5004
SHA-256:	647D32FC5C97FFDE4B272143B2D9FBFF7BDB9D73FC380CD09632C0C3C1AE2AD2
SHA-512:	AEF7BFF8FC90F8DC5DE6618751F23821AE8D761AE6BFCBE89627C3C51F73F2CD0935539FC40C4961C665C0D026C45F5473694C8FB4841F8275E8D1B1E47D3F46
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/200_101_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS8wRWFYWS9NQUdFQkQwRWFYWS8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAO6e1PFmX2Er29AZfuvpz3512Xs_nbEFc3SEhvnaFaBu&exp=1714726031&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAPervKft4ICsWkqyBLRADT82t2PjahptjPl0muanri_Z
Preview:	RIFF....WEBPVP8L..../......m.I.~.W{.....n...6.$..G...6...Hu.z...o_.A$IN....l .sxCH.' (.....@. 6....(....g.....P...}..qr..DD`.u@...$/:.R@..lG.t.!.X. A.@w.t...o7C.=.JG.Q.t.......e.#..Q....2..CG..L.t.......>..P.jK".S).\........~.U.Y.5..-..9.....}..........m.01..;."b.......mW....i.p....'....O.lI.M.>.m..k.m..y.....[8\.9....O......=......b}haq.aymaq...?.....s.B1.m.td.'$...q.........#....E@r.j...M...%...XO..`g..\|..M....F%3.7..w..K....$.\. .+.@F.^....?.Km.....O...Om.._.T...4..QBH...y.s.. w...e@q%Gk}./..=..........Z..Z...J.._.=.\J_....E..Wx....=.\.J..P...?.}...".vpv.......H.....r..\....t.}Q....A..Lj...+.^2....i../...%..+.I...1.h..wd..xF.q.Dy...i]..I.5s...t...?n..H....a.$?:.'w.p..$...x.W}..$........v.H....K#.$.$.b..U...]./.g.....@...y/'..I.'p#.8...t..w(^....j...$[v..."3.F.....2..@.P....;..?.@..y..........T]....R....;...D!kY..F...5..Y.=}..w.).io.$.m\|..Fd.h..k.h.#.....{.&.....\|F.A@..\|8.w......?...............q.k......pyT..p\...z"f...$.-..s......C.\q..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 720, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	47006
Entropy (8bit):	7.985461589934402
Encrypted:	false
SSDEEP:	768:ht5Lsk+GkCp6t8myTFpRY+NnG5tRMPfljJ5YuM8T9+wu548ynXGu7xcq/tUyO:ht5Dk38ms5ZgRMPfljJWC9+wu548yW0o
MD5:	613DA46BE1ECA5FE2197C392B67BDE41
SHA1:	1AC95EA938EFB80BAD30BC9A60B2E7A78050BFA5
SHA-256:	FE559527EC4E6204426C6B3E56688939FFB4B22DFAEA9EC1E481E71A870387AB
SHA-512:	528E65B5B85726A5EADD8057B2FF5E819CBFAFDEC661D967693C1F44C8920150B6D1A408C3FDB9EB51B801EC013182648D33A095B52A404FF49465A041F30B9F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE....._.._.._.._.._.._.._.._.._.._..].._.._.._..X.._..^.._.._.._.._.._..^.._..^..^..^.._.._.._.._.._.._.._..^..^.._..^.._.._..^.._.._.._..^.._.._.._.._.._.._.._.._.._.._..^.._.._Km?....:tRNS.....................O..o.?.._j..-\|[J...1."yV.'D.e:.t6....E...bIDATx............................................f.N.SE.(..O.....J..G4..1.y...H...}o:7....%.J~.rS...R.T.....=n.u.R..j.q.1..QOSc...nf.wW...qcT..\|!i.0.e...m..5V.d..F..l...&..Q.\|....X.&iz..J5.nw 3..\|;.......+..6].........]..m$.H.D....7C...0...1..C.-...3g.........K13.......v.lP5....4.n..!.....j...1s\%h.y....]....f......J..Q..r.1..Hh.2w......D...)...B...v4.t.J...c....0@(....=..!....L$./....p4.V....Z1G.5.%@`. ..]"..r.@..M~.&..Xl.j"....TNF.Q.s..d..v...1)E.H...2G)..l.......h\..r.... "I..........Z27mb.Z.N..dmT'.19V.]_.....m.Ap.6..%.<.\>...y.....T~.e.,/3....."..,p.....3E.M[..8q..Q..^i...a.a.iOK%-.!\H......'..&Y.y."]....q.....B..........]...lx...o.)..+.^...?%}....\|JE.. E.....R..

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2751), with no line terminators
Category:	downloaded
Size (bytes):	2751
Entropy (8bit):	5.87207092789643
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08X/S4LVo3hRMxaxSG9a7KW6:wsbSUtJfxrqLWWWdV6j1z/3oxJ
MD5:	E4654E3824253E1D29698AB36DFEF40B
SHA1:	BCFB11E3D283FEC4F3F774D767383198DB9FB53C
SHA-256:	01A5A9D45C6D12AB20AB81A3DFD985F2DDE69483FE58659ADC48BA11C65352A2
SHA-512:	5A4E98E856DA72CD675CAED6174172491BC38DC5BE1D765280A62D9BA7803886BBFC908BFF6351385147A2F65295A7616B8FE4F5F2ECC3A31B09B6129DA960E1
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/784219015/?random=1714711513345&cv=11&fst=1714711513345&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	260
Entropy (8bit):	5.03921729096162
Encrypted:	false
SSDEEP:	6:YGKosrWE2sVSH2/fLHVO3DYH1fFz0wItDp6o3pz9w:YGKYan/zYzwz720o3l9w
MD5:	715C482ABA6D0FA6B9F48D94D5BDE4B8
SHA1:	FF278D2007693515363DDACCFF97BCC0AF7A9500
SHA-256:	A1C74C9326B24EF58C79CDEDD50C9BFEDA3E0DF03B2EC3AF04335A2F85AB1ACA
SHA-512:	96B2F7D9867A9A98B18913D87FE012A4718632206B9DDF07E1ADEDE2F44D316E38D7EBFE288DA2C9F13C5E09DCB5E62D2628E6581869AA9F22AEFE91D14DFAC3
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-pages-index-tsx","path":"/","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/"}},"staticQueryHashes":["1242162299","1467288770","2048126111","2385355646","2562819187"],"slicesMap":{}}

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	4.902273486376956
Encrypted:	false
SSDEEP:	6:8VCTYLAr5LVQ2eBg+Au57lfk3Fw8KEMrEL/Z:8GeXAu5R8VBC4Z
MD5:	823314F0820505213FB53A70DC7CC636
SHA1:	63537C02AC34510513FA57FF80973A1AAB49C1FA
SHA-256:	36BAC228598E2C10DB69D8875787777E991E494AABDF585594D50E0417657DDF
SHA-512:	8B381758D155DDF7DBEF9945CE410DA197A38A18ACC2933E890091E8CFED61401B0EC29486A5FEE71D5DDB04B7B15E104C31E9A7A7885B8D0702EDDA24E4EDF4
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/5b2d464c2f59a733.ltr.css
Preview:	._682gpw{-webkit-touch-callout:none;-webkit-user-drag:none;-webkit-tap-highlight-color:transparent;-webkit-user-select:none;-moz-user-select:none;user-select:none}./# sourceMappingURL=sourcemaps/5b2d464c2f59a733.ltr.css.map/

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 385, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	61401
Entropy (8bit):	7.976260796828647
Encrypted:	false
SSDEEP:	1536:8TkWXuh8VNQw+HCU3nL0EkUP+R3yaXCHbKnyYrfxzkeuvGA9TAFLvV:E8etHU3jkUP+RCayricG/FJ
MD5:	702C30AB29241670C96E416B76840094
SHA1:	2B3D1AFA4639999F66091D4EDE193ED81026009D
SHA-256:	758B9571913AC1297FA7CE24C320349ABB2E2A571083E67368661101F6732A1A
SHA-512:	862112417E5119E64DCD0D6D870823C29577F4CF03F8F83F60F4F40DF1DCC08EEEF6E14199BAFD506E487C3A49B16BE2DBE5BF01991C4C36BDEE20EA8D43B771
Malicious:	false
Reputation:	low
URL:	https://short.io/static/medium-02-b924d3f3e6b83880002b74f126d8be45.png
Preview:	.PNG........IHDR..............Y.$...IDATx..Kh.e..O...m4.q.FtQ..R.WjADQ.J...V.)...7.Q....QZ.RD.P-.L.......HjK.%.DS..ir.....o.0$&..M.<....?..Y\|..Lj""""""""""""""""""""""""""""""""""""""""""""""""""""""""""+.,..p.ED.. /.a;vD...y.m.I..\.,V.O..j\...\|N..AD."a.....F.I..Q.1....?...U.........>..k*..-$...Au{&.:..\|"M..=...j.....1<..8..b>.5;.A..#.. N....&..M..1..\..p...Q.?.`..iL...1.f.e.oV.f..{.0.+..e.......p...{q=>...m.W............:....x...q.R.....`.8.N...a...\|...Y.?...#....]. N...h....p#.p.vb-.. "...pvby.?.n..B\|..x.y#..,.4.<.;kA.!0N....).c<..c...c..........{.A~E.&w....6....M.o.""K..R.,.....%v.K.....(.w...Q).@"..8.E.L...[Ep..q.........b.......c..._.Mx-^U.Z..l.""..........5.1a.4.'q.....".=.'.. ...B....)..G..B.......X...V..a.....uS..\|)......7.x3'..~<y....7.>.cQ..... .......6...Mb^4....`....?.^...x...J\k#....?t..o..C....I...1~...c.x.gq2O.5...h..K.#.6..Z:...od....x..o...O.y...p5...@D.I...V.m.}Q.\h..\|..N..k....p.Rx.\.d...yA.SdZ.s.`.\...p...r/N0.'...q......X.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	17027
Entropy (8bit):	4.084728111729181
Encrypted:	false
SSDEEP:	384:NHuiJzlY0c6+3oqXMf4M1w7o59r5KXVfw1h9:xuiNlY0QY1f4M1w7kafw1T
MD5:	ABFDF59AD570A2A5A76593BB9B90A997
SHA1:	CB241AD710FCF2E7726F3946ADEF32B5E61F2399
SHA-256:	BF8BF9B89F4A714D6ECFA64E1850246CB2A12A6FB7DC0328CED8F63252F88BF8
SHA-512:	63940E3E0CE32B087C5C4ED8F558359E976749A160ED3D27748F3439C7A852BEC9E6FB9347F740545D4F86D6A0182DF08545FA22969075348D13B313D9B970D5
Malicious:	false
Reputation:	low
URL:	https://short.io/static/raspberry-pi-941b09e756b134ff119b7a893a3d900c.svg
Preview:	<svg width="260" height="120" viewBox="0 0 260 120" fill="none" xmlns="http://www.w3.org/2000/svg">.<mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="15" y="31" width="50" height="62">.<path d="M15 31H64.1183V92.7462H15V31Z" fill="#2E2E2E"/>.</mask>.<g mask="url(#mask0)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M59.5285 72.0783C56.932 73.2136 54.8181 59.3761 58.0093 60.2178C63.3042 63.1941 62.3844 69.8169 59.5285 72.0783ZM56.7679 80.9032C53.7147 85.0732 49.5815 85.2356 48.0419 84.0742C46.4315 82.5791 47.6608 77.937 49.8682 75.3919V75.3911C52.3941 72.5836 55.0944 70.7507 56.9757 72.183C58.2419 73.4249 58.9847 78.1025 56.7679 80.9032ZM46.844 75.7501C46.8646 79.3258 43.6878 82.24 39.7485 82.2589C35.8093 82.2776 32.5988 79.3942 32.578 75.8183C32.578 75.7956 32.578 75.7729 32.578 75.7501C32.5574 72.1743 35.734 69.2601 39.6735 69.2413C43.6128 69.2225 46.8232 72.1059 46.844 75.6819C46.844 75.7047 46.844 75.7272 46.844 75.7501ZM39.7426 90.821C36.1995 90.9714 32.7255 87.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2770
Entropy (8bit):	4.773533285429319
Encrypted:	false
SSDEEP:	48:vHHPvxmiKDA63s6/azqV6jRblmTTMociwACxlxljp:3vxBKDA63//9VSzmTdcigrt
MD5:	0B8C32BD74FBE7B22DD7487F9D663115
SHA1:	47D3E68358AB40C9826E61B92E22128738AD99E4
SHA-256:	86F3464B435F45EF498BC2A621CAD3DE242CFAE23932B1F8A02244309A68173B
SHA-512:	C811698EE28764A2D7FA9C0AD271F3C71361EC3569B5DA4360DB09FBDE25B833A810644DDD6676654C6D650DEE790AAA4A69059D7373824F5FBC18991AA16975
Malicious:	false
Reputation:	low
URL:	https://cdn.metadata.io/site-insights.js
Preview:	(function () {. var accountId;. var visitorIdKey = "Metadata_visitor_id";. var sessionIdKey = "Metadata_session_id";. var baseUrl = "https://api-gw.metadata.io";. var blacklistIds = [1721];.. function getCookieValue(key) {. var cookie = document.cookie.split("; ").find(function (cookie) {. return cookie.indexOf(key) === 0;. });.. if (cookie) {. return cookie.split("=")[1];. }.. return null;. }.. function setCookieValue(key, value, expires) {. document.cookie = key + "=" + value + "; expires=" + expires + "; path=/";. }.. function createId() {. return Date.now().toString(36) + Math.random().toString(36).substring(2);. }.. function createCookieExpiration(minutes) {. return new Date(new Date().getTime() + 1000 * 60 * minutes).toGMTString();. }.. var visitorId = (function () {. var storedVisitorId = getCookieValue(visitorIdKey);.. if (storedVisitorId) {. return storedVisitorId;. }.. var visitorId = createId();. var expires

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14814
Entropy (8bit):	3.745233244863634
Encrypted:	false
SSDEEP:	384:I+nXl/fnziQh5iR1E8d7M6B8/KeuctRTDw+4Abg+wL63cd0ZBQR39cSA9:ntOUFucDfw+n1Dcd0DQB9Y9
MD5:	F460A00BFCA1A5F0ADBA0870CB4985FD
SHA1:	7E1F44403F5CC06D79B26902B41DBFEC35B3B837
SHA-256:	B97C2B9F086E1231263740D946556017F57B84E420B9F7907D9ECCF7A23EB0F1
SHA-512:	266DB133B12FCA8C26C6ECB03EFB2771A4ADC36259B25A2F05F8A681338DB722696E988B625596C32399DB20CDA5D8A9AD2273ECEAB7CA3B212F1A77CFF5B509
Malicious:	false
Reputation:	low
Preview:	<svg width="34" height="34" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M3.2 19.6H3c-.6.4-.8.3-1 .3H2v-.2-.2c.2-.1.3-.2.3-.4l.5-.4H3l.6-.7c.7-.7 1.2-1.2 1.9-1.3l.1-.2.3-.3.5-.5 2.8-2.3.7-.4.5-.5c.2 0 .3-.2.3-.3l.2-.2.6-.4v-.1-.3l.2-.2.1-.2.4-.3h.2l.4-.4.7.3.3.2h.1l.3.3.3.3h.1l.4.3h.1l1 .4.5.3h.1a5 5 0 001.7.9c.5.2.8.3 1 .7h.2c.5-.4.5-.5.5-.6h.1l.1-.1 1.2-1.1a9 9 0 012.2-2.6c.5-.6 1.1-1.1 1.8-1.6.4-.5.8-1 1-1.5l.9-.7.4-.3.2-.2V5l.1-.1.1-.1.2-.3h-.1v-.1l-1.3.2-.6.1a1 1 0 01-.3 0l-.2-1.3h2l.5-.1v-.1h.4l1.8-.2-.1.8c-.4.3-.2.8-.2 1v1.3l-.1 1v.1H30v.1h-.6v-.1h-.1l.1-1.3V5c-.2.5-.6.8-1 1v.2l-.4.5-.4.7-.3.2c-.4.5-.8.9-1.3 1.2l.1-.2-.6 1-.2.2v.2c-.5.3-.9.7-1.2 1.1l-1.3 1.2-.4.7-.1.2-.7.6-.8.9-.7.7c-.2 0-.3-.2-.5-.3-.4-.2-.9-.4-1.2-.8l-.4-.1-.1-.1V14h-.1c-.5-.2-.9-.3-1-.5l-.5-.1-.1-.2a26.6 26.6 0 01-1.2-.7l-.8-.2-.2-.1-.3-.2-.2-.2h-.3v-.1l-.1.1-.2.1h-.1c-.6.3-1 .7-1.4 1l-.9.6-.4.4a.1.1 0 01-.2.2h-.1l-.1.2a16.9 16.9 0 01-2.2 2l-.1.1c-.6.6-1 1-1.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	23058
Entropy (8bit):	4.119573243551898
Encrypted:	false
SSDEEP:	384:fxJ2+1t1tioOjAA69AfgE+0NZT1OEgOyOX87NjuNfspU9tMm+w7Qp/PJrOKIf:JA+j11s4948uT9Ww+OKe
MD5:	EF413F85AA86D0D4EB9A7D18298D51D6
SHA1:	55191ECB0F29611376B189100A47D774B547E0D9
SHA-256:	E4B94F06A144347CE221311BC522F3521AF238E05DED5ECB5E2DE188601E4CDA
SHA-512:	CBC9B43ECB23EDA3512616AB7E3444D06C5DFC529E92482F168F3E57D6E8457B4F6B61104139B2A15C81152416B86F0F51B3F06B2D8DD991F9F8DD98CE85A92D
Malicious:	false
Reputation:	low
Preview:	<svg width="717" height="486" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x=".8" y=".8" width="715.5" height="484.5" rx="15.3" fill="#fff" stroke="#F2F2F2" stroke-width="1.5"/><path d="M.8 16C.8 7.6 7.5.7 16 .7h685c8.4 0 15.3 6.9 15.3 15.3v23.3H.8V16z" fill="#fff" stroke="#F2F2F2" stroke-width="1.5"/><path fill-rule="evenodd" clip-rule="evenodd" d="M35.5 26a5.5 5.5 0 100-11 5.5 5.5 0 000 11z" fill="#F86D6D"/><path fill-rule="evenodd" clip-rule="evenodd" d="M54.5 26a5.5 5.5 0 100-11 5.5 5.5 0 000 11z" fill="#FFE300"/><path fill-rule="evenodd" clip-rule="evenodd" d="M73.5 26a5.5 5.5 0 100-11 5.5 5.5 0 000 11z" fill="#0BB07D"/><path d="M254.8 95.3c4.1 0 6.6-2.5 6.6-5.5 0-3.6-2.1-4.7-6.3-5.2-2.6-.4-3.2-1-3.2-2.2 0-1.2.9-2 2.6-2 1.7 0 2.6.8 2.8 2.3h3.6c-.3-3.4-2.5-5.1-6.4-5.1-3.8 0-6.3 2.2-6.3 5.1 0 3.3 1.8 4.6 6.2 5.2 2.6.4 3.3.9 3.3 2.3 0 1.3-1.1 2.2-2.9 2.2-2.5 0-3.1-1.2-3.3-2.8h-3.7c.2 3.5 2.3 5.7 7 5.7zm13.7 0c1 0 1.6-.2 2-.4v-2.7c-.3.2-.7.3-1.2.3-1 0-1.4-.5-1.4-1.5v-6h2.6v-2.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (551)
Category:	downloaded
Size (bytes):	5535
Entropy (8bit):	5.414815953672051
Encrypted:	false
SSDEEP:	96:YMq+Yqy8OC/D26YmtAuJP9fp8330suYdY0XBCfdrJcg/pTXsSSFTMWQObo6hMZxv:YM8qlOC/D26YKFgkwpUpHRTXagWe7R
MD5:	02C893C09A20692A2F51B14CFFFFD7E4
SHA1:	F2C4E55A5693A27091831ABEE2B825BDC9FD4DCE
SHA-256:	7F85C92B7E6DDD2D9EA9DECED4F3FCF4CDBA3AF32742AF3A1B041E73C250405C
SHA-512:	0A97139D859A337169827A6BF54EEA1B2A0017DE26850C28E2CBD0FC90C2F70AD8EDF26BE982E969695A2EFABAF80043B0F349D98D96D1F3DCD9BD5D0FB29CCA
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/8dd0898976a6bb84.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5110],{../***/ 13778:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(476834);self._e4773d6932616a85f2eac86f437df8f7 = self._e4773d6932616a85f2eac86f437df8f7 \|\| {};(function(__c) {var N=__c.N;var Q=__c.Q;var H=__c.H;.var Vf=function(a){if(null!=a){if("string"===typeof a)return new __c.Dc({value:a});if("number"===typeof a)return Number.isInteger(a)?new __c.ue({value:a}):new __c.ve({value:a});if("boolean"===typeof a)return new __c.te({value:a});if(Array.isArray(a)){const c=[];a.forEach(d=>{d=Vf(d);void 0!==d&&c.push(d)});return new __c.zc({values:c})}var b=[];Object.entries(a).forEach(([c,d])=>{(d=Vf(d))&&b.push(new __c.M({name:c,value:d}))});return new __c.Bc({values:b})}},Wf=function(a){const b=[];a.tags&&(a.tags.forEach((d,.e)=>{b.push(new __c.Cc({name:e,value:d}))}),b.sort());const c=[];a.extra&&(a.extra.forEach((d,e)

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 191 x 103, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3753
Entropy (8bit):	7.90952005751444
Encrypted:	false
SSDEEP:	96:1RNDO4vpvLCiAhZZZRmmmmAREpDWOMnigyxO4aaXWLtIcMeRCrl:o4vYBmmmmiqTMigyF5mL6Pjh
MD5:	40E615A3028D11697AA1F5C13898C76A
SHA1:	E1BEE51EFF5595A898B918EE95C5CE3E81C8B144
SHA-256:	93D28CB7B7DDB0F35F2171937C785219F5F047E23F0F96903AD6CC73D046AB43
SHA-512:	9315FBDC3E564BBBA632448D200AD97B23D3F0684561D213897F5CCAC0DE55C2F2F5D4CEC5575865B3610FA6FB64045EB59ABFC9AD6AB8B391C0EC4204F55791
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......g.....Q..D....sRGB........cIDATx...].......;..Y]..qC!.W0..&.Jmbv.Y.....vKU.?q>.j.D....5..\|.....!Y.......7....{................~=......w~$~.....%...N...Fq....~..so0g?...;.;.~..@.....O.Q.....Y.......O.......z.`xox._....y...0.}..O......up.....Vv.......R...`...../.DR..>.}.].../....=.=....u..n(.....\.......NA..._._. .Q..9Q...i.ci.\........_.7@}\|.y#x..p..q..m.r.ui.yru.....;..i.^...eI...F-g.I.r...lk.q....-...4..oxp.......9........CW.Oeo..Y.Bu`.XvY._.(..0r....p..s.2.S.......v..w.;.[.;>.....~.0....g7n..:/.\....8{B..`..........(QKJY.Xd.F..;....u9.\|.x.o..`......u.....G.....R.Sy..%.[./..dw.Wp......z96.!...d!45{T.1.CS.2.h]!..j...\|..2...=5..{.(v..t(...)..8./.M..]ex....AI5.(.B.Y.>..7J.dH.IF./H..Q....$...(..d..)..?5>...&....H.w..u.kYZv]..E.....%s..Ny+3 zA..."Xo....IY...XpN).d..5.,VP.Li.b.........u..`.gn{&...V<...71P.....I.....WVnd.........83....-..#f....R.n9&.dS}q,...IOl{>....8......].0.......o...\.......@.....W...1(.f1.F....

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	470
Entropy (8bit):	4.428280927846403
Encrypted:	false
SSDEEP:	12:t41WffQa0L0Nn7Ke+FuMXc7w0mHm1dNB2d4b:t414fzy0tsFjc7awdadg
MD5:	E5C5A4D109AEB5234E4405032DFD4800
SHA1:	4208CA1C20A9914F396350866B5DB5BB3A851B77
SHA-256:	0E19C6400D8E588E305CC6B80195926FEB73BD09F05732AAC6CCE1483A509A75
SHA-512:	D238FFD9149EE1EF975BA39C7B7AA70CD255B10A2B68E4C1DC8BA29484E18C1925B86A8DD11969B648EA6322E474EDE5CC5792A76456D83E04B8C1DE82B810AD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFAC33" d="M27.287 34.627c-.404 0-.806-.124-1.152-.371L18 28.422l-8.135 5.834a1.97 1.97 0 0 1-2.312-.008 1.971 1.971 0 0 1-.721-2.194l3.034-9.792-8.062-5.681a1.98 1.98 0 0 1-.708-2.203 1.978 1.978 0 0 1 1.866-1.363L12.947 13l3.179-9.549a1.976 1.976 0 0 1 3.749 0L23 13l10.036.015a1.975 1.975 0 0 1 1.159 3.566l-8.062 5.681 3.034 9.792a1.97 1.97 0 0 1-.72 2.194 1.957 1.957 0 0 1-1.16.379z"/></svg>

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1231)
Category:	downloaded
Size (bytes):	1232
Entropy (8bit):	5.294346099565599
Encrypted:	false
SSDEEP:	24:6y8gphDY63slEuH0yFZBn3Q3DRWix56FT8GtsRY9+yn4StjdQkMZR2mREGPXswiM:6yjphWloWDItnrUT8G2LybjOkMNBPXsc
MD5:	7A3C3B48AF2EE4FBE8F8BD6F41F5DD3B
SHA1:	EFEB3828DB7B3B8C9FDDB8B77466AEC7A9C12BE2
SHA-256:	5A1C60085EF00CF98F2D6FDBBAAB208A6F9F729085AB9FEDB4FF677214DBC91D
SHA-512:	AA7A6CFF1A0DE50C9B547C4D76E79AB7F0256D52C6FE74915C1A5CCF10BDF6012370018D34987CE698791DF3FB2E3759C8C956A6E46AACE7F73F5A9574CCB721
Malicious:	false
Reputation:	low
URL:	https://cdn.iubenda.com/cs/iubenda_cs.js
Preview:	!function(e){"use strict";let n=0;const t=["bg","ca","cs","da","de","el","en","en-GB","es","fr","it","nl","pl","pt","pt-BR","ro","ru","sv"];function o(){let e;e="https://cdn.iubenda.com/cookie_solution/iubenda_cs/1.60.0/core-"+_iub.csConfiguration.lang+".js";let t=document.querySelector('script[src="'+e+'"]');if(!t){t=document.createElement("script");const i=document.querySelector("script");t.src=e,t.setAttribute("charset","UTF-8"),t.addEventListener("error",(function(){++n,n<5&&(t.parentNode.removeChild(t),setTimeout(o,10))})),i.parentNode.insertBefore(t,i)}}function i(e){var n;return-1!==t.indexOf(e)\|\|!!(null===(n=_iub.csConfiguration.i18n)\|\|void 0===n?void 0:n[e])}_iub.invTcfC=Date.now()-31104e6;_iub.csConfigLegacy=!1,_iub.GVL2=_iub.GVL2\|\|224,_iub.GVL3=_iub.GVL3\|\|50,_iub.vendorsCountGVL3=_iub.vendorsCountGVL3\|\|851;_iub.cc='US',function(){const e=_iub.csConfiguration;if(!e.lang){const n=function(e){const n=e.match(/^(.+?)-(.+)$/);return n?{language:n[1],region:n[2]}:{language:e}}(doc

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 59248, version 1.0
Category:	downloaded
Size (bytes):	59248
Entropy (8bit):	7.99606212707551
Encrypted:	true
SSDEEP:	1536:Gb0zBGZs0NTc/GsTXhhpogab4QWluV750xBzrEE3x+ThwZmaoyH:Gb0zBSyGslEb4QW4UfDh+KoaoI
MD5:	C75A81F90FC0AE864E9C7597315702DE
SHA1:	4564BFBDD96C0CE4374B7478B4DE4626CF1227FA
SHA-256:	FD47C643F1A42D97D107EF361AF9CE86F0653D97FB6A8B382C3DFEE558E3111B
SHA-512:	771F865112264659B440D5E9E148B5F45141DFBFC9852333D70FA6630B6D14906D4A7A63D562463188EA9863D12D42D386D6DC6C16D8C1288AC56E3ED44B0D21
Malicious:	false
Reputation:	low
URL:	https://font-public.canva.com/YAFdJt8dAY0/0/OpenSans-Light11079511804754366555.edc5ef6407f2e2e0713337f40bb724fd.woff2
Preview:	wOF2.......p.......H..............................B..Z....`?STATZ..v..\|........x..[..j..6.$..N. ..b..j...[..D..v.. .(.@XnY7....@O;...<R.......Aw@.O........(Y.\..%3.\N..@)x..B...F.dv..{.J.;.. ..Bu.U!...(..`......6......\....a:.C.!.B).B......q...~'..L....U.Zc..d..e=C\|......6...C\|'..NE...Hw.C..yy.a.......MC..........\|.B\|\|.R.9.J...R.~n.:.p#!......n.S4oj.QZ..zA.ZR..&Yd.).1#g.G....J.....(..S.....fVJ..\.<..;.f2.......Y..z.......V.w..->......9.5..)....S...BMV.....H%..O.......J..".......~l.....c.Dn.(a.0`..Q-.S0(........6p."ba...H.&..m$..u...Ye.C..K ...r0Lw....l...X..../o..dQ3...!$.3......u...S...Id...x.4....u.w^.X..i.,`..6..g+..U...ihw`QZ....!..9.9.$.;H...N.([.tq.!Q......z.fw..>...6..TDEE)..T.b4... ..A)..=u.(..0V)s..E....-..n.....w...}".i..^...zm.}`l....)S4)..y.Y/.H.,.E...[6....\l.m....l...i..`.j.V.^...V.....$C.:.....T..AZ..c....'.\h.......[d...!..x....}..e.'...X.R..m........;....fX.aa4c.....?......./>.o....1.b'.W.`...'...T....-.E...HB...mS.6.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1566), with no line terminators
Category:	downloaded
Size (bytes):	1566
Entropy (8bit):	5.935331584175604
Encrypted:	false
SSDEEP:	48:VKEzEKonjfcvtTARXx/gFup1JuXLrwUnG:fBqMSNwuLobsuG
MD5:	8494EDD1A714AC18886E0F1C4456126E
SHA1:	EC897E83C9C158691DB416454A2DDB7C58B3FBE0
SHA-256:	7EF10D0163DB5F16A6400877FC2FCEA31DC0A87018DB78462CFAA41B4385D141
SHA-512:	94EBBC10E8693FD6A1E614529B537A5CF2FCE893FBABD98D8518B757856BC1A83C73FDB44AAE46FDD60C7A38AFADB775334BB2563E7D14EA88A41F5DC8B6DA56
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/api.js?render=6LdO8JcUAAAAAJWQi_B27yDFuShbD2Cvq4AqcOCQ
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LdO8JcUAAAAAJWQi_B27yDFuShbD2Cvq4AqcOCQ');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A89JPrWYXvEpNQ/xE+PjjlGJiBu/L2GfQcplC/QkDJOS1fBoX5Q4/HLfT1dXpD1td7C2peXE3bSCJiYdwoFcNgQAAACSeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeB

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19261), with no line terminators
Category:	downloaded
Size (bytes):	19261
Entropy (8bit):	5.258945303143264
Encrypted:	false
SSDEEP:	384:64GPSjrMqRthMt2rWN1h2e9AIxV7KQtdS2EGo:M2dRDm17KQfEGo
MD5:	3BE93FD15D2F7DEE2FC0C8981C6FA5C6
SHA1:	8CD88C36FAD3E96641DBC4D781F5DDBE5123312F
SHA-256:	17106BF803D42BCF2F2BDF778ECE084D3F91C68E7EA41DAE7BFF61FEFA573DEE
SHA-512:	148291151C600F6D26A00A3DEA1919432FF94288D90C06F2C74990D7B8C418708973FBE2D06D875CBB687F00FB4373668AFBCFF5AB7911581B46A39A3906FE46
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var i=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),i[t]=e>>>((3&t)<<3)&255;return i}}},508:function(e,t,n){"use strict";var i=n(944),r=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|i)();if(

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	4.974369723886391
Encrypted:	false
SSDEEP:	6:YGKosrWoQcWhVSepWqM/fLHVO3DYepWAFze8J2lDiUW5LdmnY9w:YGKYVo/zYzZzeq2lDcWCw
MD5:	92D8BEDBC398C9E411D39BD51391B3C3
SHA1:	D234E59D61F809D2BE6BA397EEB30D1E202F9097
SHA-256:	79C9735C720C2B7FC3E3D6D053EF118CF55AD5E2D6C70436552B4292FA9EAE94
SHA-512:	EC1D1356BC6276DF64396A57427DD28CA31A4F7A63CBFCE9DAA7E17E319B3B54FFFD43C3F301F9B5580FFF74F0CF0CBB561BC75E2BA4FAC40D6992F3239FDC17
Malicious:	false
Reputation:	low
Preview:	{"componentChunkName":"component---src-pages-enterprise-tsx","path":"/enterprise","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/enterprise"}},"staticQueryHashes":["1016289332","2696839970","646092132","686358898","846081873"],"slicesMap":{}}

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37274)
Category:	downloaded
Size (bytes):	37338
Entropy (8bit):	5.232145112747577
Encrypted:	false
SSDEEP:	768:PSWec0/7G/HKl5Dbw5hV9gyqrbfMPd4ISLSf4s0tUO8rS3hm:PSW9/OQ5lHKbUF4/ViSA
MD5:	6DC2772C47A72282FD040221B96E9919
SHA1:	D84096539A7676C8F77C1707A2F81A211DF6BA72
SHA-256:	B47DEFF32E4859AA3A9DFA72B1AF420392DF2E7F1FA32B6591F63508287EE979
SHA-512:	0038A2E93FDC016B57A3B09B2B7A8FE4B6CD74D70D0EEA83846D3DB4495E675F8AB894178DAE211955E16E9272A7A7543B2F47354F866A9CDB14FD4D18BF4131
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b8de9bd12fba5246.runtime.js
Preview:	(()=>{"use strict";var e,r,t,f,s,n={},c={};function i(e){var r=c[e];if(void 0!==r)return r.exports;var t=c[e]={id:e,loaded:!1,exports:{}};return n[e].call(t.exports,t,t.exports,i),t.loaded=!0,t.exports}i.m=n,i.amdD=function(){throw new Error("define cannot be used indirect")},i.amdO={},e=[],i.O=(r,t,f,s)=>{if(!t){var n=1/0;for(u=0;u<e.length;u++){for(var[t,f,s]=e[u],c=!0,d=0;d<t.length;d++)if((!1&s\|\|n>=s)&&Object.keys(i.O).every((e=>i.O[e](t[d]))))t.splice(d--,1);else if(c=!1,s<n)n=s;if(c){e.splice(u--,1);var a=f();if(void 0!==a)r=a}}return r}else{s=s\|\|0;for(var u=e.length;u>0&&e[u-1][2]>s;u--)e[u]=e[u-1];e[u]=[t,f,s]}},i.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return i.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,i.t=function(e,f){if(1&f)e=this(e);if(8&f)return e;if("object"==typeof e&&e){if(4&f&&e.__esModule)return e;if(16&f&&"function"==typeof e.then)return e}var s=Object.create(null);i.r(s);var n={};r=r\|\|[null,t({}),t([]),t(t)];for(var c=

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27553
Entropy (8bit):	7.976695425050186
Encrypted:	false
SSDEEP:	768:gk7mEcGd0oN86FEg1U7/D8ftBVi7dT6ObuY7BxXWr:gJjGj/q8iWr
MD5:	2388DCEC93F17BB091F8371FD9C16081
SHA1:	CE3337B8CB0F37184C913AE264B867167907C7A4
SHA-256:	47864CDDB8042F8133D43D19ACBBA2EA91A3905921E731512C8489C40E176574
SHA-512:	72BE7B46AFF5ED5567737433935859A84BC30DAAA79CDBCEAF4BA9F4E059F3E181765655852E7C48181FC096DE079C099B5CDFB87981BCDFFB536CB280B67D84
Malicious:	false
Reputation:	low
URL:	https://short.io/static/avocado-509e0714a39e8881beb85352538ea3b5.png
Preview:	.PNG........IHDR...h...h.....z.a.....pHYs.................sRGB.........gAMA......a...k6IDATx...`.....YI.m0....;&GH...A.$N!..!G.]...s.s.~.~.].$.@r..J @......Nu.m.`c[r..;..}.7+..ve....F;;;3.w....^%r..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q..q:DdVL..8..C...}.....Y}...wT../...8N....ed..7Ss."er.R......e..=..M...G}(I.".....(.v..Vzq....6....y.....#..j8U.K<q.+..}.\|r.....r}N.>}wSn_...........K..8e..h.Cd...x.M.d...t.k(K.D.........x.^......P..!.$I.n.z.......C......8.%If36...9!.o..?....}..'..Wi8....B...>#(..LQ.*........_..b.@..UTS.D7.7....8....d....'.....P...U$.R3.9n.;!......L.Q. ..Q..T.FT<.v<.m...N.....`[D7Q.z..X..wL..b.......x.e..&,.!...?.YJr+..a.=M....m...x.4.....{9....Qv..)U...w9............o1.3.......~+.N...Q.. ....z?,...B.....n...8.J9.O.........%C)[..~....8%...^.,......X...B,......y...f..ux..&..._M.0..0X..K.0d;.}i.O\.D..q....y33<....<.Z%...L..N\.h.I.a-O......wx.....9

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 905 x 931, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	125207
Entropy (8bit):	7.993599992340711
Encrypted:	true
SSDEEP:	3072:kbI+P4IVyBIEnsJAY5UmjdsTGrgp9XJF9g2xl:kxDyC3Ns5zZrg2xl
MD5:	FE5F48C014F3880DBE58B02F00ACACA5
SHA1:	2EAEEE15D875D05895534A916025866619A3A291
SHA-256:	99E338BC876526D8DCC19FF069B9923B11D5B3EDC10BAE0DE0E621466CA1E8E0
SHA-512:	6E49AF3E4212D68E532823B023595080E3E18341580FFBC97B7E6479F6676B65D22E3B2DA7D31AAB80D3BF77007883C40E36D909686148C021433CC8AD73C050
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.7....PLTE....................................................................................................................................................................................................................................................................................................................................................................................878878...888767868..X..`777.._999..^..a868.._.._..^..`868555878..`.....].....f..{....\..^..............^..c..a....._878....r.............i....\|...........#D....tRNS..............................x.........}.o..zh....q.... ../@`mv..P=N.X^-k\.L.$8.`.(GY...eS5.2..:tsUIEc*fB....... . .Y..`..@.@0p..p.Q..@0..w.o.qT.~.....IDATx...K.. .EQ/.V@BH....6.U..R....=.(.'......{y....2.~9Q.v9....`......&SO..3..b7...=x....$7...{..=T."......LU......(.h...\...4P.l...'.T .:.6%..H.R[..0.Y.....2U.r.j!z.$v.@....CR3.i...0....zHc.Of.@...Y..m.\u.(.l..\.o....k.4...is.3....d..i.\.l

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	74892
Entropy (8bit):	3.739915743629482
Encrypted:	false
SSDEEP:	768:pUVaxpuqvf/tXPsIe+SG2fjFHmikqWJt9mCzPQk/U/EfFrYIoxlWn2bmh3EVxroG:+ijW7+bCGmUZBYIn2/rS6Ec
MD5:	344F54AACE4756A45FCF5B4920E65B83
SHA1:	047B5F10A7C1506E47DF037BE79DC721A46C9DD9
SHA-256:	7E245B52E01B3DB61353E09601B32B695B9843FB1D06B25437C43AE557005405
SHA-512:	E4523C31B61A16423B783849DDA20893741C98D3049FC8508ECF4657A27AE03C2CA0D9D6B8FFB22375AF3B69D29B1B197CB41BF2F441BDA18135A50CDDD61D2D
Malicious:	false
Reputation:	low
Preview:	<svg width="90" height="75" viewBox="0 0 90 75" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M51.3916 39.0876L51.4831 39.2543C51.4831 39.3543 51.5496 39.3626 51.6245 39.321C51.8241 39.4793 51.9988 39.2793 52.1818 39.3876C52.3648 39.496 52.2567 39.671 52.4064 39.621C52.5561 39.571 52.7058 39.696 52.8389 39.7377C52.8593 39.8518 52.914 39.9569 52.9958 40.0389C53.0776 40.1209 53.1825 40.1757 53.2964 40.1961C53.2964 40.1961 53.2964 40.3128 53.3547 40.3794C53.4345 40.3654 53.5161 40.3654 53.5959 40.3794C53.7706 40.4545 53.9453 40.3795 54.1116 40.4295C54.278 40.4795 54.2946 40.2711 54.436 40.3294C54.5434 40.3831 54.6585 40.4196 54.7771 40.4378C54.8188 40.4454 54.8619 40.4389 54.8996 40.4193C54.9372 40.3996 54.9673 40.3681 54.985 40.3294C55.1847 40.2544 55.4509 40.2294 55.6755 40.1628C55.9243 40.0935 56.1843 40.0737 56.4407 40.1044C56.6237 40.0211 56.6736 39.8044 56.8982 39.746C57.1228 39.6877 57.3973 39.921 57.6469 39.746C57.7716 39.571 57.8465 39.3876 57.9796 39.3126C58.1176 39.2

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	470
Entropy (8bit):	4.428280927846403
Encrypted:	false
SSDEEP:	12:t41WffQa0L0Nn7Ke+FuMXc7w0mHm1dNB2d4b:t414fzy0tsFjc7awdadg
MD5:	E5C5A4D109AEB5234E4405032DFD4800
SHA1:	4208CA1C20A9914F396350866B5DB5BB3A851B77
SHA-256:	0E19C6400D8E588E305CC6B80195926FEB73BD09F05732AAC6CCE1483A509A75
SHA-512:	D238FFD9149EE1EF975BA39C7B7AA70CD255B10A2B68E4C1DC8BA29484E18C1925B86A8DD11969B648EA6322E474EDE5CC5792A76456D83E04B8C1DE82B810AD
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/e5c5a4d109aeb5234e4405032dfd4800.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFAC33" d="M27.287 34.627c-.404 0-.806-.124-1.152-.371L18 28.422l-8.135 5.834a1.97 1.97 0 0 1-2.312-.008 1.971 1.971 0 0 1-.721-2.194l3.034-9.792-8.062-5.681a1.98 1.98 0 0 1-.708-2.203 1.978 1.978 0 0 1 1.866-1.363L12.947 13l3.179-9.549a1.976 1.976 0 0 1 3.749 0L23 13l10.036.015a1.975 1.975 0 0 1 1.159 3.566l-8.062 5.681 3.034 9.792a1.97 1.97 0 0 1-.72 2.194 1.957 1.957 0 0 1-1.16.379z"/></svg>

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 199 x 190, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	153
Entropy (8bit):	5.466649292659473
Encrypted:	false
SSDEEP:	3:yionv//thPlyBiZCCDWEp0tm3S44AqTUkMNXz2xgdddddddcLr+v2qlbp:6v/lhPRgCDaISAC9vxgdddddddcLavhp
MD5:	2F232CE9F338B7DA620606E8F7473A6B
SHA1:	6E910C4F2CFC75204D557145EA280A45FE87708D
SHA-256:	CD889EB6311D95210E05A8ABA5CABA519E8452E03C8A8911B99CB847F9ECC308
SHA-512:	E17FF75A0051A46D598E25EC9C779DCAB90AB0DF6155124267D1705139A119329FAEB5872C8C05D078B9A139798ECFA585573426ACC9607CDD4B6463CD976E0F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............F.\....PLTE%.`'.b&.a.J.~....tRNS.....#(...<IDATx...1.....0i4..?...../.nzBQ.EQ.EQ.EQ.EQ.EQ.EQ.EQ.EQ.E.,.kN9..J......IEND.B`.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	50
Entropy (8bit):	4.703465189601648
Encrypted:	false
SSDEEP:	3:YSAjKv8Lt/1fsji:YSAjKvax1fsO
MD5:	7010D999C47B8EF993CB6476F7899933
SHA1:	7F2186A85C4F8488DA60CB435B52123581087413
SHA-256:	E832DFBE4A196C6A9125C9320B42620D7910E1A659C2B943B0B1A04363D00E81
SHA-512:	589A321BBB511D361599239B6B1FAB18383AF5E5163DD36E1AFB0F086A9FDC123171CDB42AE4749C18A14ED9BF289D65B2EC51A2C5C7AB9A9451E1C0082EDA5E
Malicious:	false
Reputation:	low
Preview:	{"webpackCompilationHash":"da858138a4fb30cdea93"}.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5520
Entropy (8bit):	6.042428565262267
Encrypted:	false
SSDEEP:	96:PKVqn9Zce1grS1o/tNdTJPJFYNnEgPhd8ZE7HpoK8KWbXleb/1Od+TvONni:PKVg9Zce1ge1oFNdTJPnYNEgP0ykb1ez
MD5:	DC8DA8469EA1D2F70D8BE3B24A997C05
SHA1:	9D7860B753F52C51935505ACA245BC34A28CAB38
SHA-256:	EEE2EFDDE1A05AEA5CE4EE826AE0D8995891A1D77A12E7920322E9168FA92C3A
SHA-512:	23A0483233914A6149FA0E03EB9D11438E650D1F308B624A41376D387A64622862097E8DEEAAB71391161D367911DBCE83B9D87CA83243E6A6992C4CCD7F607A
Malicious:	false
Reputation:	low
URL:	https://short.io/page-data/sq/d/2048126111.json
Preview:	{"data":{"support_worker":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,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

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9157
Entropy (8bit):	5.998919923419676
Encrypted:	false
SSDEEP:	192:A/Jv4Wi1Tk3Q4WTlNUgJghCO2w6T6NBgaAjOCa7TDNTgbk3/tBNXnBlf8sT2+wLN:MJue/WpwCO76GNG8fsk31BNXnBlfZqjJ
MD5:	F07FAB8DD745B1734872E85E1992EC6E
SHA1:	9670BFD17B2C63E586895A4B4CE0108EC4A39781
SHA-256:	D6A98FBA694586D0CE69EA7B7B22F5ECCC47F214D2759F06AD826B02AD3E0383
SHA-512:	4D4061FEC8B4623F88E2FAAD85D87CF23C7D2D8F67DD4A606A05C469F575446145366C8D4469FA7053E8CCE482EE221F3105F6F55825483EE2DDCF9C93A089C5
Malicious:	false
Reputation:	low
Preview:	{"data":{"medium_01":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC8ElEQVR42p2Uy08TURTGsaBb3RhN1LjVmKhLo25M/ANcujIkrIyJEHUDIYAao5JIfMQYDMaADwQjIIl1gViKkZCmqE21YCvTlhFa6PAofU07987nudMZHF6i3uSXe2fm3DPfd+bcKSnZYADYRDhss6Pkf4dI8i/3N1JlcYBoIB4Rl8W1GeP4q8RWEM3biDcoDo2DL5jrGGPstP3Ff0pm1EfX9f209psJOKGvWAvcFHfEvm95MperzHy4k/gmdtMGJuYCy0HJTusFljduy7LMNE0T6zCxY1VdbTZFXbpMKcaOvM4xEO+DL9KGucku40kkHNGdTqdmqr69SmU25N+TCvS1qPHgCxHBOHTODXGIZxV0j73EcLAT0pcGcHXKuC+FJT4RjRo1JSe7l6ksRN/XIB8Ck/tZThrkuposFo1z5Cmxb3oIgXAHYiN3oX52Y7G7BSwWFS6YWZoqM2FpUWFwoC7z/Z2Wk9yMlOrj3j7EpxPQGLnK55GR/FAiXkw+vQ+5tRmZ9iZkA58MM6btt0sKLZk8HetGPoac7GPxcBCuATeGPgwi8fAq5hsrsRAYw2J/DyaqyxHu7UF2SgbLpHRT4TRNe20fpV58DDeKTxkFGP0xNylj0dWLue7H6K+7DulWPeTqM3CercLEzYsoyD+sVhLj2PIvzPmrYj5u1cWIys4kkPa4MPfsHpLej1AazyPx5A6kmnLM+0bstk+U2AspCmudCnNGJpfBmOcrhi5dINvnoDRfQaLjAdRZBTNdrZBqK3TqBxG6CKj7VvbgdquhOecF

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1865
Entropy (8bit):	4.5836861143934104
Encrypted:	false
SSDEEP:	24:t8BQuQeRMDZCgVaMjCLSR9gVa/DtCLSX3GcCTEtRupMxaF7zDNKVoStCG/zoWSiN:Yhc7Vf0HVzG3GBMDURxbWlPjJH9J3mBe
MD5:	3E78EF31F2928A74C6D7BA19B91D0570
SHA1:	FA840BD4404B1B843A72164F2491AF6C4718A214
SHA-256:	847435388F6B42D6C869D02DF3EC08D61333A19AC4B90EBBFF3BC0B87B60A202
SHA-512:	0B1951AD9492468748B18217003BF7EBAD56FA14CB434C37D6DF2440C43D73AF5AA9068EC517596E9D63B150F3ED28C20F44FFCD6814DF70D2C9228C91994DDE
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg
Preview:	<svg width="33" height="32" viewBox="0 0 33 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32.29 16c0 8.837-7.164 16-16 16-8.837 0-16-7.163-16-16 0-8.836 7.163-16 16-16 8.836 0 16 7.164 16 16Z" fill="url(#_3900663394__a)"/><path d="M26.131 15.809c-.055-.127-1.41-3.103-4.195-3.103-2.783 0-4.138 2.976-4.195 3.103a.47.47 0 0 0 .136.556c.165.134.4.138.575.013.011-.009 1.188-.849 3.484-.849 2.284 0 3.458.83 3.485.848a.469.469 0 0 0 .574-.01.471.471 0 0 0 .136-.558ZM14.836 15.809c-.056-.127-1.41-3.103-4.195-3.103-2.783 0-4.138 2.976-4.194 3.103a.47.47 0 0 0 .71.569c.011-.009 1.187-.849 3.484-.849 2.284 0 3.458.83 3.485.848a.468.468 0 0 0 .574-.01.47.47 0 0 0 .136-.558ZM28.524 14.118a.943.943 0 0 1-.874-.592c-1.673-4.183-5.856-5.064-5.898-5.074a.94.94 0 1 1 .369-1.844c.212.041 5.229 1.099 7.278 6.219a.942.942 0 0 1-.875 1.291ZM4.053 14.118a.941.941 0 0 1-.873-1.291c2.048-5.12 7.065-6.178 7.277-6.22a.94.94 0 0 1 .373 1.845c-.174.036-4.242.923-5.902 5.074a.944.944 0 0 1-.875.592ZM

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1247)
Category:	downloaded
Size (bytes):	976785
Entropy (8bit):	5.683613097995779
Encrypted:	false
SSDEEP:	24576:QtWkwFq0pRL6HD+xvVNhVfKj0cwt5m6gT2jdl4pdPPMF5DX5PpLTbcFNQ9kytzjF:OWLFq0pRL6HD+xvVNhVfKj0cwt5m6gTK
MD5:	8F08D2B9676FFCAC04B7572BFC0BF901
SHA1:	17399DE15CC96611ABAC7D7205983041F8803E84
SHA-256:	7D4A23C368FF7F60DF5032807E6FBEF6D947A5122DF90CA9292DEAF157317FF8
SHA-512:	F61D7DD476A04851162E33C38CBDA491055D26C6A4C3D85B8F4EA68B16982300BA5BB6D5545C85DC5C49FAFAD319E8095DF23E83888A4BEC81D0909DD963F666
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/95474928a9a5af52.js+dc07c5a1154ad7a0.js+5076922314c2ed51.js+f93dccbffe488059.js+0237a18c22b25e38.js+40cb2db19562ec27.js+dae762eb4978b801.js+17450c9d444078d8.vendor.js+285485d1434d4bdd.js+efe0e692df3b9c60.js+a90e3dd08aac95a4.js+50b53a1734a4b30f.js+0dc631ee4e9245c1.js+f393d4cc8de0a0a8.js+6c0ea36590d49674.strings.js
Preview:	;// __FILE_CONTENT_FOR__:95474928a9a5af52.js.(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9003],{../***/ 913728:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(237221);__web_req__(939945);__web_req__(700706);__web_req__(801993);__web_req__(46127);__web_req__(708358);__web_req__(835479);__web_req__(211312);__web_req__(391214);__web_req__(670595);__web_req__(122771);__web_req__(360045);__web_req__(68864);__web_req__(206405);__web_req__(839286);__web_req__(95160);__web_req__(975048);__web_req__(79194);__web_req__(651823);__web_req__(854037);__web_req__(283682);__web_req__(604778);__web_req__(62837);__web_req__(834767);__web_req__(378949);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var nD=__c.nD;var Jz=__c.Jz;var Iz=__c.Iz;var gl=__c.gl;var hn=__c.hn;var Gm=__c.Gm;var Ly=__c.Ly;var VA=__c.V

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1864)
Category:	downloaded
Size (bytes):	1927
Entropy (8bit):	5.529869007891887
Encrypted:	false
SSDEEP:	24:cVd5lSniakqYCqcKdetya2/gTihgio8jyxIPJ9nH7yrbbcJLTc8+SCB8HmfsZ:Lv9sUegR8jyEJ9H7yDf78Hm6
MD5:	456F346FB478005F5A5B222E51FC54D7
SHA1:	822DA31B7BB04E11AEEE0F78ADD8AA287AE30C66
SHA-256:	6F4E829B5B100266173DA2334EBD3620665DBC25390758825603AF5DD5AAD5F6
SHA-512:	4CCCE597222B915C2CF4783B7DA8993AD9042518A84415C0D596D65A097CA2E48CF3C8CF36D5796B59AA97189F46B6C66A99028B26CFE3F993EEDBAC92CB9DDD
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/006564064b6c66ac.ltr.css
Preview:	._0yZ6Qg{text-rendering:geometricPrecision}.aF9o6Q{height:100%;pointer-events:auto}.XfBqww{-webkit-user-select:text;-moz-user-select:text;user-select:text}._3tQhmA{overflow:hidden;position:relative;scrollbar-color:rgba(17,23,29,.6) transparent;scrollbar-width:thin;z-index:0}._3tQhmA::-webkit-scrollbar-track{border-radius:4px}._3tQhmA::-webkit-scrollbar-thumb{background-color:rgba(17,23,29,.6);border-radius:4px;visibility:hidden}._3tQhmA:hover::-webkit-scrollbar-thumb{visibility:visible}.XN8TNg{direction:rtl}.aXZ4AQ{height:100%;overflow-y:auto}.aXZ4AQ._4UOq2w{overflow-y:scroll}.Ytfqyg{overflow-x:auto;overscroll-behavior-x:none;width:100%}.Ytfqyg._4UOq2w{overflow-x:scroll}._7LfHaw{height:100%;width:100%}.VV6kWg{display:flex;position:relative}.VV6kWg.mY6Hig{flex-direction:column;height:100%;min-height:0}.VV6kWg.djzRdA{flex-direction:row;min-width:0;width:100%}.x7J7bg{align-items:stretch;display:flex}._7TOhdw{pointer-events:none;z-index:1}._7TOhdw,.c3bmdQ{bottom:0;left:0;overflow:hidden;po

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2854
Entropy (8bit):	7.868869114942063
Encrypted:	false
SSDEEP:	48:lw01g9qe/QgjxiX2hBw2aF1JD/A3KiaLQbv8KdRrjOHNjK2RFW0AIa:a01g9qe/vUCCZ/A6XLTKfJJIa
MD5:	DE5967B87BC9343B663C36F08B07065F
SHA1:	EE1B7454C4B0898D1F7777953935A114DE744D2A
SHA-256:	813FBB696F78DB519B012552CE08BB491FC7346E04F856B02E034185717EDEB2
SHA-512:	747E6DCC68AF28BE3DBDB71B80CA66314419908FB2B2D15D29459120E023760E3854E30E3CF2B62597C221A4A41CFAC77AB4AB907A8767918407329991CE1BEF
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/191_103_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9ZNHF6QS9NQUdFQkVZNHF6QS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAPzzLTNqWZXC4ApwNoIboqnc3sHGuUnKwnPPgAAqhb-R&exp=1714727114&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAEjx9Y7Qv0dKUIQPTqG4yvdZEScjaUd-e9V-GcQPK5Kd
Preview:	RIFF....WEBPVP8L..../.......$...g...........R..........x.(.x..+.b..<..[....H.UM..._ C.......6.<3{=.?.B...O.D.&. ........~.r.I.k.(!f.#.........m.9g..o.........&.~....T.b.S.$I..x..sv..o[....%.....Gn.H..YN]..h.m.X..mk...!`..9.Ns:#mB+.P..;.A%W..._b.F.$Q5w.......$9.$......O.....+..z.$I.$EjYL......z.tO.m.$I.:.}D..j...GWh....;..6.$I..kg...9..5.....8.....`..n.......0...........(...0.....<....`:..<.n...)J.....tnG...6.k....;1.F...p....a.....c?.N.w.F7k.gy..(..tU.d..?...}.......r4#.... ...^.pJ.4....{.!...e..K}.....`..za....O.......r..;.0D.{..s......._.C..S.-g.E.>T}.D.B\|.....^.......cM..[@z.. R.q./...l....-...:.q.7.w.`..&.1..&/.............>...(#..c....w..g.W..3.9.:3...e..my....M...qswui.q...k<./.U/.X...Q.....a................M.5.^...<.5BV.......pu..}>.\_.Y....)..v_.9....E..m...}_V.....L?.3.><Ogm....[..j....14...)m.9...f@Z.K..}{...:...#...e.w.N{../..:.......rb...s..a.vXH.rP....P.u.y..>[.H...........8.E..0..E...C...r..).3..6..q..8j..J5...P(....

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	842
Entropy (8bit):	4.957424326112546
Encrypted:	false
SSDEEP:	24:tzBXuJlRGZ6vzSiMEjeK7IhdHxsGJcGmBe:ju843M/JhdH9J3mBe
MD5:	3A05DBF1CDD156FCD1677A0B444CC36F
SHA1:	4DBD36F62A617F47B69FB2D5F83BF0FE36ECE44A
SHA-256:	4C122BDEABCF8A8C613B81B5B881469574DAA61B870651D9F06D0F81B4405271
SHA-512:	CE05D3A04F285E246AC43798C384674FB5D292CEA0911CACFD6A7E10772C77B6997D5ED50BF298DDBB6096A02D06BC1E01324C1A35623E07834C8AFC63D536E6
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32 16c0 8.837-7.163 16-16 16S0 24.837 0 16 7.163 0 16 0s16 7.163 16 16Z" fill="url(#_1562409365__a)"/><path d="M12.235 12.235c0 1.56-.903 2.824-2.017 2.824-1.114 0-2.017-1.264-2.017-2.824 0-1.56.903-2.823 2.017-2.823 1.114 0 2.017 1.264 2.017 2.823ZM23.53 12.047c0 1.456-.843 2.635-1.883 2.635s-1.882-1.18-1.882-2.635c0-1.455.843-2.635 1.882-2.635 1.04 0 1.882 1.18 1.882 2.635ZM19.765 22.588c0 2.6-1.687 4.706-3.765 4.706-2.08 0-3.765-2.105-3.765-4.706 0-2.598 1.685-4.706 3.765-4.706 2.078 0 3.765 2.108 3.765 4.706Z" fill="#664500"/><defs><linearGradient id="_1562409365__a" x1="16" y1="32" x2="16" y2="0" gradientUnits="userSpaceOnUse"><stop stop-color="#FFCC4D"/><stop offset="1" stop-color="#FFDF8E"/></linearGradient></defs></svg>

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10774)
Category:	downloaded
Size (bytes):	10837
Entropy (8bit):	5.33630761588339
Encrypted:	false
SSDEEP:	192:emBNh6pzZB9GyJ12UmBWgGVnWssK3RqBLM7Sw4v5nHpYHC60vgV1RUuI1pNBxc:xNh6pFjGyJ12UQGVnBd3ABfv5HH6ugJZ
MD5:	34E1C8F1D5FDC60E02201C32EFB25E58
SHA1:	F986690F28303BB9B00FC4C59B8576885C812289
SHA-256:	66491D47F51B0E9C879C3224EF5B95A67595E838416616BC737A75D847C4B6AE
SHA-512:	9EDCA9ECB864940B1F701012F67ACC0EC0E66CD4B04AF99CC396188CF0DCFC990B9AF2348A0E0B11BF79D50189935D906FB0EC7995C60879D7041263C1D21D07
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/3ca27320fba118d7.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{353610:(t,e,n)=>{n.d(e,{I:()=>i});var r=n(712343);class i{constructor(){i.prototype.__init.call(this)}static __initStatic(){this.id="Dedupe"}__init(){this.name=i.id}setupOnce(t,e){const n=t=>{const n=e().getIntegration(i);if(n){try{if(function(t,e){if(!e)return!1;if(function(t,e){const n=t.message,r=e.message;if(!n&&!r)return!1;if(n&&!r\|\|!n&&r)return!1;if(n!==r)return!1;if(!c(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;if(function(t,e){const n=u(e),r=u(t);if(!n\|\|!r)return!1;if(n.type!==r.type\|\|n.value!==r.value)return!1;if(!c(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;return!1}(t,n._previousEvent))return("undefined"==typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__)&&r.kg.warn("Event dropped due to being a duplicate of previously captured event."),null}catch(s){return n._previousEvent=t}return n._previousEvent=t}return t};n.id=this.name,t(n)}}function o(t,e){let n=s(t),r=s(e);

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13608)
Category:	downloaded
Size (bytes):	13671
Entropy (8bit):	5.6172415170380665
Encrypted:	false
SSDEEP:	192:0zzlOCYxjfxaHxaqK1ApReFM8M5eJ57qamEFP8sE9m4KJOaDB4Z:kfidaRaqOHqdQ7qamEF8sEs4KJOaQ
MD5:	4D3FD2AD77BB5A04E10E0907D4CC0016
SHA1:	A44DB57587860702D1C50DAC68DD0A11F13D3015
SHA-256:	3A1AC2D3B88B01AB2EA484B1B445B8C63D7049CC195CF8E9C7ABD0039A8A6B1A
SHA-512:	4D8B8F8D52356EBE7CAE68B8A4426D05B18BEF70B3B2B4C57C18142D4C4C33D5E1C35038134B1B9F7116FC807E92BD6F218A8D0E51E6D72BA27F70FB68F3206E
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/368a11563437cc62.ltr.css
Preview:	.light{--4ClGCw:0px 0px 0px 1px rgba(64,87,109,.04),0px 6px 20px -4px rgba(64,87,109,.3);--SGjjzA:0px 0px 0px 1px rgba(64,87,109,.04),0px 12px 40px -8px rgba(64,87,109,.3);--7FRQGw:0px 0px 0px 1px rgba(64,87,109,.04),0px 2px 4px -1px rgba(64,87,109,.3);--1IVhPQ:0 0 0 1px rgba(64,87,109,.07),0 2px 8px rgba(57,76,96,.15);--v_jISQ:0 0 0 1px rgba(64,87,109,.07),0 2px 12px rgba(53,71,90,.2);--MPmRHA:0 0 0 1px rgba(64,87,109,.07),0 2px 18px rgba(43,59,74,.3)}.dark{--4ClGCw:0px 0px 0px 1px #3b3c3d,0px 6px 20px -4px rgba(0,0,0,.45);--SGjjzA:0px 0px 0px 1px #3b3c3d,0px 12px 40px -8px rgba(0,0,0,.45);--7FRQGw:0px 0px 0px 1px #3b3c3d,0px 2px 4px -1px rgba(0,0,0,.45);--1IVhPQ:0 0 0 1px #464747,0 2px 8px rgba(13,18,22,.15);--v_jISQ:0 0 0 1px #464747,0 2px 12px rgba(13,18,22,.2);--MPmRHA:0 0 0 1px #464747,0 2px 18px rgba(13,18,22,.25)}.cc24 .dark,.cc24 .light,.cc24.dark,.cc24.light{--1IVhPQ:var(--4ClGCw);--v_jISQ:var(--4ClGCw);--MPmRHA:var(--SGjjzA)}.Ut_ecQ{box-shadow:var(--1IVhPQ)}.TfRV3Q{box-shado

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 720, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	90652
Entropy (8bit):	7.978790020572037
Encrypted:	false
SSDEEP:	1536:nZtH2kFrCkvhmPJq92PQWr693ag6FDmJWJMaWrTOyHw5brhYEJCJAUDrb3kZ2o:nZt4qEG2PQBOFDmsJMLrTOJn4AUD27
MD5:	9B72C414280F49BB2893CF0A56B7EBFE
SHA1:	C73C175245FABC96727FBC1F26CE0140F1E5579C
SHA-256:	B27CA35D1E4C9F0D1889998DA9C9E5793752997B7679B1C9E2661A00C648D090
SHA-512:	16B33A161E85F6C57E162353143761DCD30C7777123413759FD78CA7740FFB5214279CFDF6FD8F8B92F9463B2EEC9D87CA3D456D6D9D25F92AE71693FCFC22ED
Malicious:	false
Reputation:	low
URL:	https://short.io/static/omelette-a8254318025275264ddf581532bf02ce.png
Preview:	.PNG........IHDR..............WG.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx...`\...}#.....m..q75!`.)...l...$lz.l.MH.}.\|.i[....dSH.!.MB1.$..Nw.m:....w..9..4.e[.G......Wf4...;..sD.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B..T$..Y...e]...b..TgT.T...o....}........Wm.}9+

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (467)
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	5.283960623572777
Encrypted:	false
SSDEEP:	12:4ZciRTMhmVeR5ezPOBSlRQAbCMwxT2hxJ:4eyAmV85cmBS3QuaT2jJ
MD5:	AA90505C913820B45EF99F33F6E35A57
SHA1:	7E8FB00683D080C02A6316550FCAD2E7879AB468
SHA-256:	FF52C0311EE1AEEDB6A3697B33FA5CE34BB7D0E327DA80ED685509A9FBD5CF3A
SHA-512:	220F6A8983EE9A6EC42D1FE556B41B0DCBFC58F009616169220809AE11442134AF7DDD88187C835CEF9BF31A8BE68AAE885473D6A749A3A6E26D63A9F90D8F87
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/fa3fb504fdf0aaea.ltr.css
Preview:	._2E9Y8A{color:inherit;font-size:inherit;margin:-4px;max-width:unset;vertical-align:baseline}._8vlbIg ._2E9Y8A{margin:-8px}.WoE5Nw{display:flex}.xMm41w{grid-row-gap:16px;box-sizing:border-box;display:grid;grid-template-areas:"header" "content" "footer";grid-template-columns:minmax(0,1fr);grid-template-rows:auto 1fr auto;height:100%;padding:0}.Tuu4Ew{grid-area:header}._0bPs_Q{grid-area:content}.oc_U2A{grid-area:footer}@media (min-width:600px){.xMm41w{height:auto}}./# sourceMappingURL=sourcemaps/fa3fb504fdf0aaea.ltr.css.map/

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4414
Entropy (8bit):	5.9195472440471955
Encrypted:	false
SSDEEP:	96:v6LQztmnE2hqFJmd7l0TlPInbSqVpWV9gr9Fb3+:bs4oCTlGbSqVpWXw9p
MD5:	A0C86DA7FC37EA50E848C4733761D53E
SHA1:	7B53A4FE8198AA654C02282134DCC19E0C07CC9A
SHA-256:	EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A
SHA-512:	6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339
Malicious:	false
Reputation:	low
Preview:	...... .... .(.......(... ...@..... ......................................................@...........#h..!g\."h..!i..#k..$l..$n..$o..%q..%r..'s[.#t..........@...................................................UU..........,]).+_..)b..j..)l..'l..%l..$k..#m..$q..&u..(y..(z..&t..&u..%v)..........U......................................@@..........3Y..1[..4b..1]..0\..0^../`..,c..+f..)i..&l..%o..%q..&s..&t..)\|..'v..(v..........@...............................33......8X .7V..;]..7V..8W..7W..7X..8Z..=_..?b..?e..<g..5g..-i..m..(q..&s..&t..'u.....(x..(x .....3f......................@@......CN..?R..@W..=R..=R..>S..?S..GZ..<S...?...5...6...@..!T..?f..;i..0j..-o..)s..'u..'w..}..(y..'z......@...............UU......PP .HL..IO..EN..DO..CN..GQ..GQ...!..HR................ly...B...O..Dh..7g..3l...q..)v..(w..)\|..)z..(x ......U..................SG..UK..PG..NI..LI..NN..FF..76..................................\|....>..He..=e..8i..3o..-t..*w..+...){..............@......\A..cG..ZB..XC..VD..VG..QC..OA...

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3386
Entropy (8bit):	7.936681503648603
Encrypted:	false
SSDEEP:	96:Ci8CLbZt1jtbK5qLpTxMwha5DgFT8qRnbltfzPwTVp:CiVbNj5K5YxHgpgFTNbltD8Vp
MD5:	5093922DD2750302081EDA2FADB64ED7
SHA1:	F58DBFD142575E5120D97FE812AC1799DA5ADD2B
SHA-256:	864363ACB7879AB519413EB0EC6F8AF7449FDE214B630E5BA224CC60E7E93B50
SHA-512:	899C85407C94D0FAACD9BB65A0362B758E0A1B09D9E358D9E7C5EB4B96882DFE0903C6050E943D56F04F2298F1DE2AD28AD2EF8F3AA34377D9B3455271D02FBC
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/200_48_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAFJXAnYIQQ0xHcsErDaJWXvVvtPZT7fcxtbi8yxPG4l-&exp=1714727649&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAJsWmwRuJ3REECkw2TqnylaoozkHUBm97ga09yUfD0Mu
Preview:	RIFF2...WEBPVP8L%.../.....P.....7~.D....Kp.tU.v..7C..fy....3..LFU.T....XEL-^U1.....JA.6....%..F..m.Z.5y2P.OJ.).F..s...a.3.).;......A............L.3bfZ...sf..d...Z..N..O.@...{...x...9.0k.6.....{.......y.....2.L.......0......V.!dH.J..B..f...^....\|... ..k....../8f....{`Z..3.S..U...."..0uw`..{.....\|.A....E......0.m.m.m.m.m.<.F....s......;.$I....P.;f.A."........".8......+..yAB.R.-9..7+...N&wY....t....T.Sle.o3..Z...{.F.e...do.E..j..r3R..cm..+..(.i..t..n./.\..q.........y...0.z.q!.B.C.}.._0.3....q'>.~..n1.=&~..?.v.k.~.......Z\x..u...J.......u..W.."oR......j..6.;;N.}..(....@..4..&\|DR.:+'.ur.~yB..tV....L.4.&.8C...{C..2.F.\.p8...d.m%d.1.@.(... .R....c..g..D.F_-..... -....8..T......... l...........PE....h....1....z...0^ ..M.....$oq......=w.I..54.&.......NQ...E..(......'..c.AaRLr..#.+............f..#x!8..W.....>.*..$...v0.9......wP"o.j....l&...#...l.].u2.e...\|."..6...Q8......9mK...6..vA....x..D...........N..k..pb...>......!.....t...i....Cy

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3962)
Category:	downloaded
Size (bytes):	12549
Entropy (8bit):	5.6344381165571855
Encrypted:	false
SSDEEP:	192:LnFfXunIM8wV97/nqP06QBLe3LiMdDGYV/XByjkJe8qnLnI9AHD6Xgrdywxb:p/p07/qlQhe7GYu8kwAHD6g
MD5:	724C38F23A4A83E871CC517ACC1F9C27
SHA1:	5B51526E3E037F21FDAEF24808920EE022B43A45
SHA-256:	B9BF8B4A20A6FCBA325E429534143391C0ADC8D909B52304F9979762BED78C85
SHA-512:	C8464B66518C3985AEDA7763A94AD4BE1DDB1397E5C15410ACC9556D51B2F2C436F517954E2EEAC043C7FF8224D5DFF9A44C9364C185B6504F67EDFAF5B123F4
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/118052af16110a6a.ltr.css+bbb36937bb9b2d18.ltr.css+f78d925eed25c026.ltr.css+0b904b0a14653f4e.ltr.css+77072c60218aa8fb.ltr.css+c58cd64d3a3f686a.ltr.css+44120d0e86f58fdd.ltr.css+0361d809f049c847.ltr.css+70f83d7290d33057.ltr.css
Preview:	/* __FILE_CONTENT_FOR__:118052af16110a6a.ltr.css /..E_yBwg{overflow:hidden;position:relative}./ __FILE_CONTENT_FOR__:bbb36937bb9b2d18.ltr.css */..pvMVEg{display:inline-block;max-width:100%}.RsZ59Q{display:block}._618DsA{padding:8px 0}._618DsA.CeoDuA{max-height:220px;overflow:auto;position:relative}._22JLgA{border:1px solid var(--7hnsIg);border-radius:var(--fKgqJA,4px);padding:0 12px}._27TLPA{flex:1;padding-right:8px}.VjuBng{color:var(--fzXPDA)}._22JLgA._22JLgA._22JLgA{background-color:var(--bDblYw)}._22JLgA.JtrZ3g:hover{border-color:var(--hmBz5w)}._22JLgA._22JLgA:active,._22JLgA.bPreJg{border-color:var(--3j0O2w)}._22JLgA.aVwKtQ{border-color:var(--CgOmqg)}._22JLgA._22JLgA[aria-disabled=true]{background-color:var(--QjoAaQ);border-color:var(--6qQCNQ)}.nMpDaQ,.nMpDaQ.Tp_Zgg.Tp_Zgg{background-color:var(--H8nEqw)}.nMpDaQ.Tp_Zgg.Tp_Zgg:hover{background-color:var(--8ZR-UA)}._0ps_ow{align-items:center;display:grid;min-height:16px}._5XRpNA,._FX8aQ{background:var(--TlUudQ);padding:12px;position

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 720, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	47006
Entropy (8bit):	7.985461589934402
Encrypted:	false
SSDEEP:	768:ht5Lsk+GkCp6t8myTFpRY+NnG5tRMPfljJ5YuM8T9+wu548ynXGu7xcq/tUyO:ht5Dk38ms5ZgRMPfljJWC9+wu548yW0o
MD5:	613DA46BE1ECA5FE2197C392B67BDE41
SHA1:	1AC95EA938EFB80BAD30BC9A60B2E7A78050BFA5
SHA-256:	FE559527EC4E6204426C6B3E56688939FFB4B22DFAEA9EC1E481E71A870387AB
SHA-512:	528E65B5B85726A5EADD8057B2FF5E819CBFAFDEC661D967693C1F44C8920150B6D1A408C3FDB9EB51B801EC013182648D33A095B52A404FF49465A041F30B9F
Malicious:	false
Reputation:	low
URL:	https://short.io/static/pumpkin-308a8ade7af387bedeca727644710baf.png
Preview:	.PNG........IHDR.....................PLTE....._.._.._.._.._.._.._.._.._.._..].._.._.._..X.._..^.._.._.._.._.._..^.._..^..^..^.._.._.._.._.._.._.._..^..^.._..^.._.._..^.._.._.._..^.._.._.._.._.._.._.._.._.._.._..^.._.._Km?....:tRNS.....................O..o.?.._j..-\|[J...1."yV.'D.e:.t6....E...bIDATx............................................f.N.SE.(..O.....J..G4..1.y...H...}o:7....%.J~.rS...R.T.....=n.u.R..j.q.1..QOSc...nf.wW...qcT..\|!i.0.e...m..5V.d..F..l...&..Q.\|....X.&iz..J5.nw 3..\|;.......+..6].........]..m$.H.D....7C...0...1..C.-...3g.........K13.......v.lP5....4.n..!.....j...1s\%h.y....]....f......J..Q..r.1..Hh.2w......D...)...B...v4.t.J...c....0@(....=..!....L$./....p4.V....Z1G.5.%@`. ..]"..r.@..M~.&..Xl.j"....TNF.Q.s..d..v...1)E.H...2G)..l.......h\..r.... "I..........Z27mb.Z.N..dmT'.19V.]_.....m.Ap.6..%.<.\>...y.....T~.e.,/3....."..,p.....3E.M[..8q..Q..^i...a.a.iOK%-.!\H......'..&Y.y."]....q.....B..........]...lx...o.)..+.^...?%}....\|JE.. E.....R..

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1865
Entropy (8bit):	4.5836861143934104
Encrypted:	false
SSDEEP:	24:t8BQuQeRMDZCgVaMjCLSR9gVa/DtCLSX3GcCTEtRupMxaF7zDNKVoStCG/zoWSiN:Yhc7Vf0HVzG3GBMDURxbWlPjJH9J3mBe
MD5:	3E78EF31F2928A74C6D7BA19B91D0570
SHA1:	FA840BD4404B1B843A72164F2491AF6C4718A214
SHA-256:	847435388F6B42D6C869D02DF3EC08D61333A19AC4B90EBBFF3BC0B87B60A202
SHA-512:	0B1951AD9492468748B18217003BF7EBAD56FA14CB434C37D6DF2440C43D73AF5AA9068EC517596E9D63B150F3ED28C20F44FFCD6814DF70D2C9228C91994DDE
Malicious:	false
Reputation:	low
Preview:	<svg width="33" height="32" viewBox="0 0 33 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32.29 16c0 8.837-7.164 16-16 16-8.837 0-16-7.163-16-16 0-8.836 7.163-16 16-16 8.836 0 16 7.164 16 16Z" fill="url(#_3900663394__a)"/><path d="M26.131 15.809c-.055-.127-1.41-3.103-4.195-3.103-2.783 0-4.138 2.976-4.195 3.103a.47.47 0 0 0 .136.556c.165.134.4.138.575.013.011-.009 1.188-.849 3.484-.849 2.284 0 3.458.83 3.485.848a.469.469 0 0 0 .574-.01.471.471 0 0 0 .136-.558ZM14.836 15.809c-.056-.127-1.41-3.103-4.195-3.103-2.783 0-4.138 2.976-4.194 3.103a.47.47 0 0 0 .71.569c.011-.009 1.187-.849 3.484-.849 2.284 0 3.458.83 3.485.848a.468.468 0 0 0 .574-.01.47.47 0 0 0 .136-.558ZM28.524 14.118a.943.943 0 0 1-.874-.592c-1.673-4.183-5.856-5.064-5.898-5.074a.94.94 0 1 1 .369-1.844c.212.041 5.229 1.099 7.278 6.219a.942.942 0 0 1-.875 1.291ZM4.053 14.118a.941.941 0 0 1-.873-1.291c2.048-5.12 7.065-6.178 7.277-6.22a.94.94 0 0 1 .373 1.845c-.174.036-4.242.923-5.902 5.074a.944.944 0 0 1-.875.592ZM

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (812)
Category:	downloaded
Size (bytes):	1655
Entropy (8bit):	5.441005064180655
Encrypted:	false
SSDEEP:	48:ja8+uvYowcqSaF2G9AwcqSaTCa7vYowcqSaF2G9AwcqSa6dR5:+8+uvYisSst7vYisSsk5
MD5:	B6A4CCA90C2039437A8C379D481907B3
SHA1:	E983401FED358A4ECF11A5DCB157080259327C86
SHA-256:	0C75EDF6C192DCAEB4CFAA5C18E0AFCA303E6F1522051BFA81FE902F54EAEDC4
SHA-512:	912D683F9EF7266F116173FBA86D3C1B80880403466A50EAD714568B0A25A168857D6DA9C819A7E78AE3A6D243B27EF7CC2E33416FEBAEE96B2DDCE24CD9B18B
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556235&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=19399&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198z

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (319)
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.439423170296592
Encrypted:	false
SSDEEP:	6:1WR69mWE2cMAU1NEd4QHCN7Sgoq4ROSNJRYQDPC33w9DMPjiI:1WRqE/gt7SjOSNlDPC3g9YWI
MD5:	0EECBA4C5EADF6A40CDC31DBAB617AF9
SHA1:	6F716C76C6F64979124AAE9C3114DE6F374C7626
SHA-256:	0AA923A81790C6F42A4C0AF6D018FA86D8BE69D98EE9C21FEDB280443279365A
SHA-512:	E8A64EE7E57CE610AA76E43B24E6DC5C95B41A11C838B6AD8EBE23862F5B817103DA5D553055046D1CB1ED06F6076FF98DAAC9CFDF9EEBC6E86D5D47609B6484
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/9e2d4720ffac5af4.ltr.css
Preview:	.ygGKTQ{box-sizing:border-box;display:inline-block;vertical-align:text-bottom}.ygGKTQ._61VRqQ{height:12px;width:12px}.ygGKTQ.abulbg{height:16px;width:16px}.ygGKTQ.AAwCeg{height:18px;width:18px}.ygGKTQ.dR8M7g{height:24px;width:24px}.ygGKTQ._1aCkfA{height:32px;width:32px}.ygGKTQ>svg{display:block;height:100%;width:100%}./# sourceMappingURL=sourcemaps/9e2d4720ffac5af4.ltr.css.map/

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x53, components 3
Category:	dropped
Size (bytes):	3246
Entropy (8bit):	7.835655415493606
Encrypted:	false
SSDEEP:	96:emzFEQ+Sz9KKqV8rt1i8PxBulk1KI0TyAkiialRp:DEQ+/8t1VPPfoiaPp
MD5:	30DEA3D45EA30CCEE21FD33C00FA3D55
SHA1:	E46FD64F803E2B0F6D137FE024C38DEF777794BE
SHA-256:	C84346D7B08B7B91938DBFD8B3BDFF940D2C11DEC2CA2E80E72DF140BDB34E88
SHA-512:	57C7F7B59E19AD545F1DF6D8237010F0FA465BDEA3A337CC6C5BC3915D063CCC60F30A6E7CC49FA9AA9C7555F2586209109E46E2A063507B99E8A4756A2A6081
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......5...."....."........................................................!1..AQ".26Bars..#bt....35CRS........................................................!1AQ.."Baq2r..S...#%3Rbc...............?..DE..h......,........J"+.$l.Oh..Eo...S.....X_..?........S....'.O~c......._P...-s.L/2.Y.9E.\Um..APdx........`Y.+A.....e..c.-.'.$"...m....J.aTSOM'.h.z.`=.....;.."..T...C."".DN.$...b....U....T.a...}..tEr+C.{<...Q.........6i8."""."...22.....H..dz.""."""""""""""....R,...V'...<.....s..?.~...._.......o.#z....TI.^X..j:..;....\|...Z.P..W6B.`..GbX....M..V...r...f>..)......Y.....Q..._..A.+..z.g...\|......gk.!..WG...;uQ.5......c...`......a.t...@s...V~*.........-...S.}.....F.i..0'....m....&....{.:.~.].W.R.O....u.R....i".`;.U.M.V.wqq.S..I...E`...=.1...W8.,.j..O..Sv.3..}X...h..].#.c......N.b.l.."..{...bX..[..(.-.M4Q.$....

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	7.783450114815965
Encrypted:	false
SSDEEP:	24:F/6j2VI+r5Pj0TIUL9uTCV4fr5Mg6n/SX7eD8no+Cbh9qyMU2FMSOQr5Mtpe7L7:F/6jT+9IIxy4frXAN8nUF9q82FMyK/I
MD5:	2CEBFD4A17CB4DDF6EF80FCDFC3F6110
SHA1:	4397D6539702DEA952FB0906529ADD7540E9877D
SHA-256:	01D34BF766F8C207A7C7B6B237494692D0635C7C2C4D74DEE018CA7B962D180D
SHA-512:	BA7123662EFB093A81B67B1CEC69310783900C84BBEFFEC95F2A9694279CAE8A513136DE43D3164ACECE65397F75EAB4D937D9844625388FCFE6CE1BC4EA43FB
Malicious:	false
Reputation:	low
URL:	https://short.io/favicon-32x32.png?v=e684309adfdf6efa515a707d11a3e1f1
Preview:	.PNG........IHDR... ... ............pHYs................xIDATx....O.g...s....w.).Z(.-..C>2P.(c...i..hX.B.jp..N......VaN...A..(Ph+.w.r...^..O.\.....=...3,-.~.@o..WN......x...H.$......C.0.K.+1.B.H.M.{N..m..0..69.../.......m.a(.P6`...Q....-...W....$.. S.K=......m6.B..e.X.u..mQ;N4.~.:$F..2..........G.4C..s.t..;.C......:^.S..........Z.%.....o.9.:1.d.....siq...T(.21..nK.n.<..#aV.W.^.ZSSSUUU]]..x".H.2.(..%b...5....=.?a}.....:x. ...#bD...q......Y.z....F.0(.n...,S/$}Q....[1.K....MY...2.@._...ZW.J4.......YYYY0.Q..HU.........\|.......>\|..!..p....I.....I...WbJ..0....V.w&.Z..0.I.u..E.,.#....7.N7.....\|._$....D,a._...2dP9. .......l........o^.......;v,.W~.2S"...BT.f39z....nj..7...Br..B.........b......s.....Q-(....B.D......h...VVT..-.U..{.0.b........p...U*..erv.A;Tv..A.<.m.].A....h:.....v..Xsq..7.._>\Z.1. ..I.H.5)r.b.....V.M.....q...#.?.F...x.[M..:...hDKKKB...N.Q.z..z...q......6...x`d....\|..G&..!.....%..5&...Z...U.8...rp..i..9.q.sp...a....V.9..

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 101, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2053
Entropy (8bit):	7.534084831325264
Encrypted:	false
SSDEEP:	48:INRiE6NwAxrJXCJisV+fHr7uyAi1Kzif+l9:INR1qbx1XCJYO7KKz66
MD5:	FAACCDD69EF060245DE3E858B1C9D65F
SHA1:	228B4A3A88D574EB957AF85D6E6260ECD55786E7
SHA-256:	A13EAD17C900F1549B6BC43900CC3C98931588686E289778BAA7A96E63C8895F
SHA-512:	A86A6BA3EED5F4112E84B45BFD23DE25F69252B9380901C6421DEF10317C3F28DEB371BB58BC7C28767B6CD590AEA495B6497EEFF58B18A2E523B54742B699CB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......e.....?.\.....PLTE...U$$m.._c(3f)1b*f%-a&,_)/d$0a(.b(.c'-a'.b&-a&-a'-b'-a&-a&-a'-b...................................................................................................................................................................................................................................................................................................................................................~..\|..{..x}.w\|.w{.uy.ty.rw.qu.ot.mr.lp.kp.jo.hm.gk.ch.bg.ag.af.`e._d.^c.]b.\b.[`.Z_.Y^.W].V[.UZ.TY.SY.RX.QW.QV.PU.OU.NT~MS~LR}KQ\|KP\|IO{HNzGMyFLyELxEKxDJwAGu@Gt@Ft>Ds=Cr;Bq:Ap9?o8>n7>n6=m5<l5;l4:k39k29j18i07i/6h/5h.5g-4f,3f+2e1d0d)0c(/c'.b'.b7.G.....tRNS........"(+,R................................................................................................................................................................................................................9......9IDATx....WTu..../.Y....(.6h8.&.....B.fj..acF.V

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 712x189, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8394
Entropy (8bit):	7.978012138447484
Encrypted:	false
SSDEEP:	192:u4DsNfZ0dEtO1i4i0KjW8bDrFWSAA/cN6KV5QCp7Bqgu:INfZ0dE4ivtjW8MTAdKV5ZBqgu
MD5:	5DBC04ED777E1DEE4A3CBCECA6C01C57
SHA1:	8BF2F99CA7861196C5B96978FF0BBE21CE59AF5E
SHA-256:	83AAF8CE3A7522E6A31454658E9F62D8A37F4FF8DD1FDED4E81818697057F5E9
SHA-512:	903AB5B63470F0266DDEC67F728EC133DDC1A726E6E36B93DCF6636CB2C6A133354D0C48E79007D3D1BED6DB4A6C166A2B364C2CD4F6860FD6467256EC23A216
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/712_189_92_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAPYxeOmPyW1bzVYb40NMA0bprSvrwK8HvGIql4lomZuh&exp=1714727913&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAGIqZFKlSkxdgQR7mXGP2n_ohxCdpEqOs_fVMzH2HDwU
Preview:	RIFF. ..WEBPVP8 . ...........>I$.E".!...(.....J.6..3...o...j......X................w..........o.?..{#.....G.../._./.........I.......w...~......9.%......d_........W....._.:...]._...h.?...Q.?`..\|.............#.W.+...........=X>..?........k...........}O....{g.N.....- ..B.t.....E..p._N.p_W.h.............Y.}:...T..c......X,.....(.i..:..#.F.?..OI.'.p.wN`OA.S..fz......{..;A..v]..o.o..Y..]9...Y].U..n...qF..+x..uDFz...?..k.#......Z.......zbZ...Ei....,...y.K.$.,....s..._..h.9sn....../....<UQ.C......3.....'@.0....~I..f._.U..Q...m+...'.......FM.Q.N.....9..Y.........nM ....&....E...#K.7#c.'...L.5..H,\|.Q..zi......\|6...(..\|..s.?..>P....._P ].3.T...M..C.<.....$I.+l...O......<E.aZG..f.M..Z...L..............\.S>.T2..0..C<.e..[...p.B...N.._1..$.e...@a]3.).a..;..),=pB..!.z...Z38...T..Z..B4..].r.hXY~[.l...'.<..."2.,..L..%Jo....\|4..IFU.vF..c\..Y.\|.....$.%..>..;.Y.!.4~..~F..\|.!m6..[x.....\.l..]...l.Si.i0).%QaMx.+....i....z...x.s.....m......=.~C..g..p.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1404
Entropy (8bit):	4.114328576097192
Encrypted:	false
SSDEEP:	24:t414ffo3Q0QIvvdznG0UezpigqybgrKrPO20hLMXlr9NkOf/qd0mdz9w/zAI:CH3Q0dvRG0zvBMOr10mx9m8vUAb
MD5:	ABA10B640F15BB01B8E5F0B804EEFC7F
SHA1:	65D1EDB21B0F31D4CCB9703EB05132A0E42D093D
SHA-256:	6A21FCEDE3E9D5593CF90C894BC059A94BBAE8D5D22ED0AC5511A1327F276881
SHA-512:	FDC916824C065944D02B7956BE310F01B9A56562BBB1510C345EDC925EA6CE478D235B5348AD140028CFA4F483BF1E947533CB83176A9F44DC13353A938329DF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFDB5E" d="M34.956 17.916c0-.503-.12-.975-.321-1.404-1.341-4.326-7.619-4.01-16.549-4.221-1.493-.035-.639-1.798-.115-5.668.341-2.517-1.282-6.382-4.01-6.382-4.498 0-.171 3.548-4.148 12.322-2.125 4.688-6.875 2.062-6.875 6.771v10.719c0 1.833.18 3.595 2.758 3.885C8.195 34.219 7.633 36 11.238 36h18.044a3.337 3.337 0 0 0 3.333-3.334c0-.762-.267-1.456-.698-2.018 1.02-.571 1.72-1.649 1.72-2.899 0-.76-.266-1.454-.696-2.015 1.023-.57 1.725-1.649 1.725-2.901 0-.909-.368-1.733-.961-2.336a3.311 3.311 0 0 0 1.251-2.581z"/><path fill="#EE9547" d="M23.02 21.249h8.604c1.17 0 2.268-.626 2.866-1.633a.876.876 0 0 0-1.506-.892 1.588 1.588 0 0 1-1.361.775h-8.81c-.873 0-1.583-.71-1.583-1.583s.71-1.583 1.583-1.583H28.7a.875.875 0 0 0 0-1.75h-5.888a3.337 3.337 0 0 0-3.333 3.333c0 1.025.475 1.932 1.205 2.544a3.32 3.32 0 0 0-.998 2.373c0 1.028.478 1.938 1.212 2.549a3.318 3.318 0 0 0 .419 5.08 3.305 3.305 0 0 0-.852 2.204 3.337 3.337 0 0 0 3.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1478
Entropy (8bit):	7.783450114815965
Encrypted:	false
SSDEEP:	24:F/6j2VI+r5Pj0TIUL9uTCV4fr5Mg6n/SX7eD8no+Cbh9qyMU2FMSOQr5Mtpe7L7:F/6jT+9IIxy4frXAN8nUF9q82FMyK/I
MD5:	2CEBFD4A17CB4DDF6EF80FCDFC3F6110
SHA1:	4397D6539702DEA952FB0906529ADD7540E9877D
SHA-256:	01D34BF766F8C207A7C7B6B237494692D0635C7C2C4D74DEE018CA7B962D180D
SHA-512:	BA7123662EFB093A81B67B1CEC69310783900C84BBEFFEC95F2A9694279CAE8A513136DE43D3164ACECE65397F75EAB4D937D9844625388FCFE6CE1BC4EA43FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ............pHYs................xIDATx....O.g...s....w.).Z(.-..C>2P.(c...i..hX.B.jp..N......VaN...A..(Ph+.w.r...^..O.\.....=...3,-.~.@o..WN......x...H.$......C.0.K.+1.B.H.M.{N..m..0..69.../.......m.a(.P6`...Q....-...W....$.. S.K=......m6.B..e.X.u..mQ;N4.~.:$F..2..........G.4C..s.t..;.C......:^.S..........Z.%.....o.9.:1.d.....siq...T(.21..nK.n.<..#aV.W.^.ZSSSUUU]]..x".H.2.(..%b...5....=.?a}.....:x. ...#bD...q......Y.z....F.0(.n...,S/$}Q....[1.K....MY...2.@._...ZW.J4.......YYYY0.Q..HU.........\|.......>\|..!..p....I.....I...WbJ..0....V.w&.Z..0.I.u..E.,.#....7.N7.....\|._$....D,a._...2dP9. .......l........o^.......;v,.W~.2S"...BT.f39z....nj..7...Br..B.........b......s.....Q-(....B.D......h...VVT..-.U..{.0.b........p...U*..erv.A;Tv..A.<.m.].A....h:.....v..Xsq..7.._>\Z.1. ..I.H.5)r.b.....V.M.....q...#.?.F...x.[M..:...hDKKKB...N.Q.z..z...q......6...x`d....\|..G&..!.....%..5&...Z...U.8...rp..i..9.q.sp...a....V.9..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 3, 2024 06:43:50.660356045 CEST	49675	443	192.168.2.5	23.1.237.91
May 3, 2024 06:43:50.660361052 CEST	49674	443	192.168.2.5	23.1.237.91
May 3, 2024 06:43:50.769718885 CEST	49673	443	192.168.2.5	23.1.237.91
May 3, 2024 06:43:59.995057106 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:43:59.995090961 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:43:59.995157957 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:43:59.995326996 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:43:59.995358944 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:43:59.995409012 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:43:59.995579004 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:43:59.995592117 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:43:59.995738029 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:43:59.995749950 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.181438923 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.181873083 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.181890011 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.182600975 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.182797909 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.182857990 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.182998896 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.183013916 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.184082031 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.184145927 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.184397936 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.184458971 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.185246944 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.185252905 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.185333014 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.185395002 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.239938974 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.342602015 CEST	49675	443	192.168.2.5	23.1.237.91
May 3, 2024 06:44:00.379529953 CEST	49674	443	192.168.2.5	23.1.237.91
May 3, 2024 06:44:00.379668951 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.379682064 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.443670034 CEST	49673	443	192.168.2.5	23.1.237.91
May 3, 2024 06:44:00.490421057 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.491364002 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.491430044 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.491453886 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.491473913 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.491483927 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.491518974 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.491523027 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.491657019 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.491693974 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.491698980 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.491992950 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492024899 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492037058 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.492041111 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492084026 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.492199898 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492248058 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492286921 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.492290974 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492746115 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492789984 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.492794037 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492940903 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492968082 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.492988110 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.492991924 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.493030071 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.493232012 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.493680000 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.493721962 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.493726015 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.493988037 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494014025 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494028091 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.494033098 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494070053 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.494072914 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494466066 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494510889 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.494515896 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494662046 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494690895 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494699955 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.494705915 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.494745970 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.495003939 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.495199919 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.495242119 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.495245934 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.495363951 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.495387077 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.495404005 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.495409012 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.495448112 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.496085882 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.496256113 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.496282101 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.496295929 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.496299028 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.496341944 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.496345043 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.497093916 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.497144938 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.497153044 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.579576969 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.579724073 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.579730988 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.579772949 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.579829931 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.579835892 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.579876900 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.580152035 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.580157995 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.580197096 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.580319881 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.580362082 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.580364943 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.580410004 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.580456018 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.593756914 CEST	49709	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.593767881 CEST	443	49709	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.613708019 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.613727093 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.613790035 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.613964081 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.613981962 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.614032030 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.614154100 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.614167929 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.614214897 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.614514112 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.614550114 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.614603043 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.614639044 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.614664078 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.614711046 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.614825010 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.614846945 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.614892006 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.615039110 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.615057945 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.615104914 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.616882086 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.616893053 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.617131948 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.617142916 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.617391109 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.617403984 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.617605925 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.617616892 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.620363951 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.620383024 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.620563030 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.620575905 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.620757103 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.620768070 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.688435078 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:00.688453913 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:00.688513994 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:00.689045906 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:00.689057112 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:00.800246000 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.800859928 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.800873995 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.801915884 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.801980972 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.803237915 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.803916931 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.804004908 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.806329012 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.806492090 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.806500912 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.806648016 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.806785107 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.806813955 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.807043076 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.807058096 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.807317972 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.807334900 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.807671070 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.807678938 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.807946920 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.807954073 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.807960033 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.807998896 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.808007956 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.808068037 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.808083057 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.808211088 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.808223963 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.808233976 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.808258057 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.808536053 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.808585882 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.808846951 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.808876038 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.808911085 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.808936119 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.809231043 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.809237957 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.809359074 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.809405088 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.809412003 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.809452057 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.810154915 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.810209036 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.810755968 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.810811996 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.811733007 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.811789989 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.812258005 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.812263012 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.812323093 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.812328100 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.812581062 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.812588930 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.813683987 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.813740015 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.814676046 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.814743042 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.815079927 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.815093994 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.815197945 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.815203905 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:00.873975992 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:00.876401901 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:00.876411915 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:00.877274036 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:00.877329111 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:00.879520893 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:00.879578114 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:00.879868984 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:00.879874945 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:00.925029993 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.925045967 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.925050020 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.925051928 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.979861975 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.979880095 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.979882002 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:00.980067968 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.039423943 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.039480925 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.039520025 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.039534092 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.039674044 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.039715052 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.039722919 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.040033102 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.040061951 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.040066957 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.040072918 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.040107965 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.040112972 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.040122986 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.040169001 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.041584969 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041641951 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041670084 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041678905 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.041692972 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041722059 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041723967 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.041733027 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041766882 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041786909 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.041790962 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041800022 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041824102 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.041836977 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041860104 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041870117 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.041877985 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041899920 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041904926 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.041912079 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041944981 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041946888 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.041954994 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.041994095 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042001963 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042007923 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042037010 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042051077 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042053938 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042076111 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042135954 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042165995 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042176962 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042187929 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042217016 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042220116 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042226076 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042268038 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042277098 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042282104 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042321920 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042325974 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042356968 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042382956 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042391062 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042395115 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042428017 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042428970 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042435884 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042484045 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042488098 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042521000 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042547941 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042562008 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042566061 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.042598009 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.042879105 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.043021917 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.043056965 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.043061972 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.043262959 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.043298006 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.043303013 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.043854952 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.043909073 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.043950081 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.043958902 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044002056 CEST	49721	443	192.168.2.5	142.251.40.196
May 3, 2024 06:44:01.044014931 CEST	443	49721	142.251.40.196	192.168.2.5
May 3, 2024 06:44:01.044064045 CEST	49721	443	192.168.2.5	142.251.40.196
May 3, 2024 06:44:01.044080019 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044116020 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.044239998 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044301987 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044347048 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.044356108 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044464111 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044509888 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.044514894 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044689894 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044728041 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.044733047 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044785976 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044796944 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044820070 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.044826031 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.044843912 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.044850111 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045073032 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045113087 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.045116901 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045269012 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045310020 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.045312881 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045698881 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045739889 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.045743942 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045810938 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045840025 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045846939 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.045851946 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.045885086 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.045913935 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046160936 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046222925 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046261072 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.046267986 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046279907 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046314001 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.046325922 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046463013 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046499014 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.046504974 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046545982 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046582937 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.046588898 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046593904 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.046632051 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.046636105 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.047019958 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.047051907 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.047055960 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.047105074 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.047141075 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.047158003 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.047162056 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.047188997 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.047194004 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.047980070 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.048021078 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.048027039 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.048218966 CEST	49721	443	192.168.2.5	142.251.40.196
May 3, 2024 06:44:01.048229933 CEST	443	49721	142.251.40.196	192.168.2.5
May 3, 2024 06:44:01.049015999 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.049061060 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.049066067 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.050431967 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.050474882 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.050479889 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052547932 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052592039 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.052599907 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052742004 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052776098 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052778006 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.052788973 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052803993 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052812099 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052830935 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.052835941 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052843094 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052862883 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.052866936 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052872896 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052875042 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052885056 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.052887917 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052889109 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052901983 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.052903891 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052906990 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052931070 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052946091 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.052951097 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052977085 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052987099 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.052989006 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.052994013 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053000927 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053010941 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053010941 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053040028 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053040981 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053051949 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053054094 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053055048 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053057909 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053076982 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053114891 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053148031 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053149939 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053158045 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053179979 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053190947 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053198099 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053216934 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053349018 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053378105 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053388119 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053394079 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053432941 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053507090 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053819895 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053848028 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053855896 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053864002 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.053900003 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.053998947 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054045916 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054086924 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.054094076 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054179907 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054225922 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.054233074 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054341078 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054378986 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.054385900 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054625034 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054657936 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054672003 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.054678917 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.054712057 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.054961920 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.055311918 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.055358887 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.055366039 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.055819035 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.056097031 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.056142092 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.056154013 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.056242943 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.056293964 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.056299925 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.056598902 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.056629896 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.056636095 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.056641102 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.056683064 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.056688070 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057080984 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057116985 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057126045 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057130098 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057162046 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057167053 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057174921 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057213068 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057216883 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057245970 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057271004 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057293892 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057295084 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057302952 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057333946 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057353020 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057375908 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057385921 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057389975 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057416916 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057426929 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057430983 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057468891 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057477951 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057482004 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057517052 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057522058 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057526112 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057559967 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057564020 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057569027 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057595968 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057600975 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057635069 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057662964 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057674885 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057679892 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057702065 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057710886 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057714939 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057753086 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057754993 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057761908 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057801962 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057810068 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057815075 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057846069 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057854891 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057859898 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057877064 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057895899 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.057899952 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.057924032 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.083139896 CEST	49714	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.083146095 CEST	443	49714	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.086430073 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.086481094 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.086553097 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.089119911 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.089135885 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.090066910 CEST	49719	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.090082884 CEST	443	49719	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.099786043 CEST	49716	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.099809885 CEST	443	49716	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.105495930 CEST	49717	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.105516911 CEST	443	49717	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.120256901 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.120521069 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.120556116 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.120570898 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.120981932 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121018887 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.121026039 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121273041 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121309042 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.121316910 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121445894 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121479988 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.121485949 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121581078 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121623993 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.121629953 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121884108 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.121917009 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.121922970 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.122051001 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.122083902 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.122090101 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.122237921 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.122273922 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.125273943 CEST	49713	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.125283003 CEST	443	49713	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.135448933 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.135605097 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.135631084 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.135647058 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.135657072 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.142246962 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.142280102 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.142287970 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.142292976 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.142307043 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.142333031 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.142919064 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.142966986 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.142975092 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.143021107 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.143599033 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.143635988 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.143650055 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.143659115 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.143671036 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.143682957 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.143704891 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.143709898 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.143718958 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.144326925 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.144366026 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.144373894 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.144404888 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.144629002 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.144670010 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.145334005 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.145365953 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.145375967 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.145380974 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.145406008 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.146440029 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.146473885 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.146482944 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.146488905 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.146523952 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.147367954 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.147423029 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.147432089 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.147483110 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.147686005 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.147726059 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.147851944 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.147890091 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.149171114 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.149216890 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.149331093 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.149338007 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.149374962 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.149544001 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.149569035 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.149575949 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.149581909 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.149597883 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.149622917 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.149638891 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.149821997 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.149876118 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.150187969 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.150240898 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.150368929 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.150410891 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.150531054 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.150576115 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.150649071 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.150693893 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.151294947 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.151324034 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.151346922 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.151351929 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.151380062 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.151681900 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.151729107 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.151732922 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.151779890 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.151953936 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.151998997 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.152048111 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.152093887 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.152693987 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.152740002 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.152848959 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.152892113 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.153871059 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.153942108 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.156830072 CEST	49720	443	192.168.2.5	104.16.80.73
May 3, 2024 06:44:01.156846046 CEST	443	49720	104.16.80.73	192.168.2.5
May 3, 2024 06:44:01.183845043 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.183902025 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.224874973 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.224936008 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.225415945 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.225466013 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.225647926 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.225687981 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.225979090 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.226021051 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.226123095 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.226175070 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.226515055 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.226579905 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.230923891 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.230977058 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.231018066 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.231167078 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.231503963 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.231573105 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.232055902 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.232119083 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.232255936 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.232306004 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.232438087 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.232485056 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.233407974 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.233464003 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.234575033 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.234626055 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.235095978 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.235145092 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.235486031 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.235536098 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.235945940 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.235991955 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.236901045 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.236943960 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.237071037 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.237121105 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.237591982 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.237643003 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.237818003 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.237875938 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.238313913 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.238369942 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.239063025 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.239110947 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.241695881 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.241751909 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.241974115 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.242021084 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.242276907 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.242321968 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.242330074 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.242391109 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.242403984 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.242444992 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.242930889 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.242981911 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.243130922 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.243175030 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.243702888 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.243722916 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.243757963 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.243766069 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.243798971 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.243887901 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.243928909 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.244152069 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.244194031 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.244299889 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.244359016 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.245374918 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.245419979 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.245718002 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.245770931 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.246371031 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.246387005 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.246437073 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.246444941 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.246917009 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.246965885 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.247160912 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.247210979 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.247745991 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.247762918 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.247797966 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.247807026 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.247848034 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.247908115 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.247962952 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.248071909 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.248111963 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.248284101 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.248331070 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.248460054 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.248498917 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.248691082 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.248739004 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.249315023 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.249346018 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.249363899 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.249372005 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.249408960 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.249409914 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.249450922 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.249702930 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.249717951 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.249767065 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.249774933 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.250622988 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.250638962 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.250686884 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.250694990 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.250720024 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.251738071 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.251753092 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.251799107 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.251806974 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.252459049 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.252481937 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.252516985 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.252527952 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.252557039 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.272882938 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.272901058 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.272968054 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.272978067 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.276997089 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.277735949 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.277755022 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.278068066 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.278919935 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.278985023 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.279175997 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.309190035 CEST	443	49721	142.251.40.196	192.168.2.5
May 3, 2024 06:44:01.311445951 CEST	49721	443	192.168.2.5	142.251.40.196
May 3, 2024 06:44:01.311455011 CEST	443	49721	142.251.40.196	192.168.2.5
May 3, 2024 06:44:01.312300920 CEST	443	49721	142.251.40.196	192.168.2.5
May 3, 2024 06:44:01.312364101 CEST	49721	443	192.168.2.5	142.251.40.196
May 3, 2024 06:44:01.314178944 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.314197063 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.314233065 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.314244032 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.314277887 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.316150904 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.316164017 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.316211939 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.316220999 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.316257000 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.316950083 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.316967010 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.317001104 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.317012072 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.317044020 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.319211006 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.319263935 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.319267035 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.319286108 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.319292068 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.319314957 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.319338083 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.321912050 CEST	49721	443	192.168.2.5	142.251.40.196
May 3, 2024 06:44:01.321970940 CEST	443	49721	142.251.40.196	192.168.2.5
May 3, 2024 06:44:01.324109077 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.392386913 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:01.392421961 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:01.392479897 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:01.393330097 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:01.393342972 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:01.416157007 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.421103954 CEST	49721	443	192.168.2.5	142.251.40.196
May 3, 2024 06:44:01.421113014 CEST	443	49721	142.251.40.196	192.168.2.5
May 3, 2024 06:44:01.431245089 CEST	49715	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.431257010 CEST	443	49715	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.473783970 CEST	49718	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.473814011 CEST	443	49718	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.517625093 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.517776012 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.517813921 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.517834902 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.517925978 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.517965078 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.517971992 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518049955 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518085003 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.518090963 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518269062 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518313885 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.518325090 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518503904 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518539906 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.518546104 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518677950 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518713951 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.518719912 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518788099 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.518822908 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.518829107 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.519196033 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.519237041 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.519243002 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.519335985 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.519370079 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.519376040 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.519541025 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.519582987 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.519587994 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.520127058 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.520163059 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.520169973 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.520250082 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.520284891 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.520289898 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.520384073 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.520420074 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.520426989 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521194935 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521225929 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521234989 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.521245956 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521282911 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.521291971 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521543026 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521579027 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.521585941 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521727085 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521756887 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521759987 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.521769047 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521800995 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.521838903 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.521975994 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.522011995 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.522021055 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.522109985 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.522144079 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.522150993 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.523036957 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.523089886 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.523096085 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.538259983 CEST	49721	443	192.168.2.5	142.251.40.196
May 3, 2024 06:44:01.577541113 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:01.582876921 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:01.582892895 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:01.583758116 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:01.583834887 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:01.605811119 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.605895042 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.605912924 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.605952978 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.605957985 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.605966091 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.606010914 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.606848001 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.606950998 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.607064009 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.607070923 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.607120991 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.607270956 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.607323885 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.607675076 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.607734919 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.608527899 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.608580112 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.608946085 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.608997107 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.609705925 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.609761953 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.609888077 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.609935999 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.610106945 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.610156059 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.610296011 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.610347986 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.610542059 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.610595942 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.610681057 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.610730886 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.611150026 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.611226082 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.611383915 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.611432076 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.652271986 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.652363062 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.652496099 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.652563095 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.693692923 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.693758011 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.693969965 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.694016933 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.694185972 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.694233894 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.694245100 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.694262028 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.694282055 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.694314003 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.695537090 CEST	49722	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:01.695550919 CEST	443	49722	104.16.102.112	192.168.2.5
May 3, 2024 06:44:01.738841057 CEST	443	49703	23.1.237.91	192.168.2.5
May 3, 2024 06:44:01.738928080 CEST	49703	443	192.168.2.5	23.1.237.91
May 3, 2024 06:44:04.196294069 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:04.196440935 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:04.198164940 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:04.198180914 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:04.281855106 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.281902075 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.281955957 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.282916069 CEST	49725	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.282963991 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.283020973 CEST	49725	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.283653021 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.283682108 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.283734083 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.284225941 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.284261942 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.284307957 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.285614967 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.285624027 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.285670996 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.288480997 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.288499117 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.288563967 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.293664932 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:04.297808886 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.297821999 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.298316002 CEST	49725	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.298335075 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.298938036 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.298953056 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.299424887 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.299439907 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.299638987 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.299647093 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.300051928 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.300069094 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.300455093 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.344129086 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.399820089 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.399899960 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.399952888 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.400378942 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:04.400441885 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:04.400511026 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:04.481379032 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.481415033 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.481472015 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.481956959 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.483242989 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.483275890 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.483351946 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.483848095 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.483880043 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.483932972 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.484152079 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.485178947 CEST	49723	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:04.485189915 CEST	443	49723	34.120.195.249	192.168.2.5
May 3, 2024 06:44:04.486321926 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.486341000 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.486936092 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.487289906 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.487416983 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.487428904 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.487694025 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.487761974 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.487776041 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.487833977 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.487843990 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.488181114 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.488198042 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.488586903 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.488595009 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.489099979 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.489106894 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.489444017 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.489451885 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.489512920 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.489567995 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.490163088 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.490216970 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.490309954 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.490365028 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.491300106 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.491368055 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.491667032 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.491691113 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.492317915 CEST	49725	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.492327929 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.492594957 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.492611885 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.492671013 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.493794918 CEST	49725	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.493848085 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.494858027 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.494920969 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.495951891 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.496006012 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.497087955 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.497155905 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.498697042 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.498755932 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.499187946 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.499599934 CEST	49725	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.499762058 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.499769926 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.500057936 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.500065088 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.500158072 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.500169039 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.500206947 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.500216007 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.540118933 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.540144920 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.630072117 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.630085945 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.673208952 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.673289061 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.673532963 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.683604002 CEST	49710	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.683620930 CEST	443	49710	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.685904026 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.685918093 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.686372042 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.686382055 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.686661005 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.686671972 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.687055111 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.687114000 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.687271118 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.687324047 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.687551975 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.687623978 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.692857981 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.693017960 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.705300093 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.705391884 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.705877066 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.705931902 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.707019091 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.707084894 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.713896036 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.713913918 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.713973999 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.715728998 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.715740919 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.716011047 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.716025114 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.716175079 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.716187954 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.716438055 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.716454029 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720554113 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720669031 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720704079 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720714092 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.720722914 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720769882 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720769882 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.720783949 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720822096 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.720837116 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720936060 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.720968008 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.720973969 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.721239090 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.721286058 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.721291065 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.721298933 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.721333981 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.721339941 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.721360922 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.721432924 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.722923994 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723123074 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723238945 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723277092 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723287106 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.723303080 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723340034 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.723376036 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723436117 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723476887 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723481894 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.723500967 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723515034 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.723558903 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.723737001 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723841906 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723885059 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.723901033 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723934889 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.723988056 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.724035025 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.724036932 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.724078894 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.736296892 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.736403942 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.736445904 CEST	49725	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.833297014 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.880053997 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.880289078 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.885207891 CEST	49728	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.885231972 CEST	443	49728	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.885699987 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.885745049 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.885808945 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.886653900 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.886667967 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.887273073 CEST	49729	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.887293100 CEST	443	49729	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.887722015 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.887739897 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.887797117 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.888370991 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.888382912 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.888881922 CEST	49726	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.888895988 CEST	443	49726	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.889204025 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.889219999 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.889271975 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.889651060 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.889662981 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.889961958 CEST	49725	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.889969110 CEST	443	49725	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.890311956 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.890332937 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.890381098 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.890872002 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.890881062 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.892129898 CEST	49727	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.892138004 CEST	443	49727	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.892333984 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.892350912 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.892402887 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.892940044 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.892950058 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.898515940 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.899673939 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.899686098 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.900043964 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.901061058 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.901127100 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.901680946 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.902318001 CEST	49724	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.902332067 CEST	443	49724	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.903335094 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.903357029 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.903410912 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.906790972 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.906802893 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.908765078 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.908898115 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.908956051 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.908967972 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909039021 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909068108 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909080029 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.909085035 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909123898 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.909126997 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909364939 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909400940 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.909404993 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909480095 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909526110 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.909531116 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909624100 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909658909 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.909666061 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909938097 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.909980059 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.909985065 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910120010 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910161018 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.910165071 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910389900 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910430908 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.910435915 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910794020 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910837889 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.910841942 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910911083 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910950899 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.910953045 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.910960913 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.911005020 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.911007881 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.911694050 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.911736965 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.911742926 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.911747932 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.911792994 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.911796093 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.912179947 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.912220955 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.912224054 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.912297010 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.912328959 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.912338972 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.912348032 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.912386894 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.912435055 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.912969112 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.912995100 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.913009882 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.913013935 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.913053036 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.913057089 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.913167953 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.913211107 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.913213968 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.913917065 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.913964033 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.913968086 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.914010048 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.915134907 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915277958 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915312052 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915324926 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.915334940 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915378094 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.915390015 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915520906 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915563107 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.915570021 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915623903 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915755987 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.915761948 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915844917 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915884972 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.915891886 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.915971041 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916016102 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.916022062 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916109085 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916162968 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.916171074 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916524887 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916579962 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916589022 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.916595936 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916640043 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.916646957 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916786909 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.916845083 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.916852951 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.917434931 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.917479038 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.917490005 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.917496920 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.917546034 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.917557001 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.917661905 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.917716980 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.917718887 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.917730093 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.917771101 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.918246031 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.918390036 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.918453932 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.918461084 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.918735981 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.918833971 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.918838024 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.918848038 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.918885946 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.918908119 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.919045925 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.919101000 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.919123888 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.919131994 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.919183016 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.919600964 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.919745922 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.919812918 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.919820070 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.920461893 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.920520067 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.920526981 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937371969 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937460899 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937498093 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937505960 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.937522888 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937561035 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.937566042 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937669992 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937705994 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.937711000 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937786102 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.937819004 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.937824965 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.938059092 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.938097000 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.938107967 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.938219070 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.938251972 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.938258886 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.938374043 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.938410044 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.938416004 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.938946962 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.938981056 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.938987017 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.939026117 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.939062119 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.939065933 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.939273119 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.939306021 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.939307928 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.939316034 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.939342976 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.939347029 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.939379930 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.939414978 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.944119930 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.958389997 CEST	49730	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.958408117 CEST	443	49730	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.989229918 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.996357918 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.996424913 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.996723890 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.996773958 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.997272015 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.997345924 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.997556925 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.997605085 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.997807026 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.997862101 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.998128891 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.998179913 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.998594046 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.998648882 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.999517918 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.999567032 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.999752998 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.999803066 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:04.999912977 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:04.999959946 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.000366926 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.000417948 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.000571012 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.000618935 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.001995087 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.002290010 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.002346992 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.002453089 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.002670050 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.002763033 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.003102064 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.003201962 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.003326893 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.003473997 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.003478050 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.003662109 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.003719091 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.003726959 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.003747940 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.003752947 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.003798008 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.004183054 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.004189968 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.004286051 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.004328012 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.004340887 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.004483938 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.004650116 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.004657030 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.004771948 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.005389929 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.005490065 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.005554914 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.005665064 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.005887985 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.006045103 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.006424904 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.006717920 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.006736040 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.006864071 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.007380009 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.007496119 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.007520914 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.007611990 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.007762909 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.007903099 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.008032084 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.008161068 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.008523941 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.008609056 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.008770943 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.008882046 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.009243011 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.009346962 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.009541035 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.009697914 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.067867994 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.069025993 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.069062948 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.069369078 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.070014000 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.070014000 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.070030928 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.071616888 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.071630001 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.071902990 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.071924925 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.072113991 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.072459936 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.072494030 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.072503090 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.072782993 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.072788954 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.072796106 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.072812080 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.072876930 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.073303938 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.073370934 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.073659897 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.073848009 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.073852062 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.073899984 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.074032068 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.074035883 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.074040890 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.074394941 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.074460983 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.076693058 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.077681065 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.078362942 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.078385115 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.079473972 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.079838037 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.080404997 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.080472946 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.080642939 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.080650091 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.085530043 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.085731983 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.085772038 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.085778952 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.085803986 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.085874081 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.086169004 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.086173058 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.086324930 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.086329937 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.086333990 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.086409092 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.086643934 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.086776018 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.087105036 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.087223053 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.087704897 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.087795019 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.087821007 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.087824106 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.087851048 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.087898970 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.088119984 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.088387012 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.088393927 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.088485956 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.088588953 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.088593960 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.088733912 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.088767052 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.088871002 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.089030981 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.089040995 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.089148045 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.089169979 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.089174986 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.089204073 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.089462042 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.089484930 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.090354919 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.090913057 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.094305038 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.094419003 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.094450951 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.094455957 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.094482899 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.094877005 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.095101118 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.095107079 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.095169067 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.095221996 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.095283031 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.096548080 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.096566916 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.096678972 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.096848965 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.097127914 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.097301006 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.097656965 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.097779989 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.097788095 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.097790003 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.097846985 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.097870111 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.098284006 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.098412037 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.098633051 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.098788977 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.098798037 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.099091053 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.099473000 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.099584103 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.099657059 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.099819899 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.100641966 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.100802898 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.101002932 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.101186991 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.101196051 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.101213932 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.101293087 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.101293087 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.101300001 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.101819038 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.101994991 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.102000952 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.102010965 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.102056980 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.102056980 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.102067947 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.102369070 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.102459908 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.102467060 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.102557898 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.103070974 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.103089094 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.103185892 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.103185892 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.103190899 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.103559971 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.103720903 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.103759050 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.103765965 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.103801012 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.103835106 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.104850054 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.104862928 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.104944944 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.104952097 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.104994059 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.105144978 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.105324030 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.105499029 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.105504036 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.105514050 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.105638981 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.106339931 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.106515884 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.106550932 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.106559992 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.106597900 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.106693983 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.106720924 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.106726885 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.106772900 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.107229948 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.107245922 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.107340097 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.107345104 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.107443094 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.107577085 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.107578993 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.107589006 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.107697964 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.107944012 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.108095884 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.109131098 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.109143019 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.109358072 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.109366894 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.110023022 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.110055923 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.110152960 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.110152960 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.110162020 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.110248089 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.111236095 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.111252069 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.111399889 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.111404896 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.111675978 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.111696005 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.111777067 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.111778021 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.111784935 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.111835957 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.112402916 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.112416029 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.112559080 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.112566948 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.112904072 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.112921953 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.113015890 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.113023043 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.113140106 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.114465952 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.114485979 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.114567041 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.114573002 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.115003109 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.115016937 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.115103006 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.115103006 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.115111113 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.115155935 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.115202904 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.115231991 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.115247965 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.115256071 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.115403891 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.116117954 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.116194963 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.116210938 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.116440058 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.116450071 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.116520882 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.116657972 CEST	49732	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.116667032 CEST	443	49732	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.117068052 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.117083073 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.117197990 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.117207050 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.117324114 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.117965937 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.117983103 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.118138075 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.118145943 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.118262053 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.118877888 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.118891954 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.119010925 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.119019985 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.119268894 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.123570919 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.123625040 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.123656988 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.123689890 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.123706102 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.123815060 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.123821974 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.123927116 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.123987913 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.124113083 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.124119043 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.124124050 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.124146938 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.124172926 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.124211073 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.128664970 CEST	49733	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.128678083 CEST	443	49733	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.186691999 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.186708927 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.187020063 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.187033892 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.187088966 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.188812017 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.188827038 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.188996077 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.189006090 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.189069033 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.190815926 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.190830946 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.190967083 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.190978050 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.191046953 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.192440987 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.192455053 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.192569971 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.192583084 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.192718983 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.194823027 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.194839001 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.194938898 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.194950104 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.195267916 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.198210955 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.198225975 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.198379040 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.198388100 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.198467016 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.202497959 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.202512980 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.202696085 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.202706099 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.202821970 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.205786943 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.205802917 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.205874920 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.205882072 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.205950975 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.206484079 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.206506014 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.206604004 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.206612110 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.206674099 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.207353115 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.207366943 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.207513094 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.207520962 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.207634926 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.208046913 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.208061934 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.208384037 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.208394051 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.208628893 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.208961010 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.208977938 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.209064007 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.209064007 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.209072113 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.209183931 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.209959984 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.209975004 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.210062981 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.210069895 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.210182905 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.211061954 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.211076975 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.211230993 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.211240053 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.211312056 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.212167025 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.212181091 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.212255001 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.212255955 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.212266922 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.212316036 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.212330103 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.212383986 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.212409973 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.212420940 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.213013887 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.213030100 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.213124037 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.213124037 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.213130951 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.213143110 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.213311911 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.213845968 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.213860035 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.213958979 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.213968992 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.214061022 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.214881897 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.214896917 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.215015888 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.215025902 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.215132952 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.215738058 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.215753078 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.216058969 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.216068029 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.216326952 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.216965914 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.216979980 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.217083931 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.217093945 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.217617989 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.218297958 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.218312979 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.218499899 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.218508959 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.218740940 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.219955921 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.219980001 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.220223904 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.220232964 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.220467091 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.221684933 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.221698999 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.221812010 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.221820116 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.223386049 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.223402977 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.223495960 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.223506927 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.224636078 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.225159883 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.225173950 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.225326061 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.225332975 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.225591898 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.226450920 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.226465940 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.226557016 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.226564884 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.227772951 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.228055954 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.228071928 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.228184938 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.228193045 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.228260994 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.276118994 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.276177883 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.276751995 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.276767969 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.276902914 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.276916981 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.277832031 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.278788090 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.278801918 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.278914928 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.278939009 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.279051065 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.280112028 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.280350924 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.280364037 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.280385971 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.280416965 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.280424118 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.280481100 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.280481100 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.281780005 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.281794071 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.281990051 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.282002926 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.282075882 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.283402920 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.283428907 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.283518076 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.283525944 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.283648968 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.284663916 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.284677982 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.284732103 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.284739017 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.284771919 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.284791946 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.285948038 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.285965919 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.286048889 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.286048889 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.286056042 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.286267042 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.287834883 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.287849903 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.287921906 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.287930965 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.288178921 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.289279938 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.289294958 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.289406061 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.289413929 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.289532900 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.291106939 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.291126013 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.291230917 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.291230917 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.291241884 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.291338921 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.292118073 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.292196989 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.292851925 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.292867899 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.293019056 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.293037891 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.293044090 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.293073893 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.293112040 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.293169975 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.293752909 CEST	49731	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.293780088 CEST	443	49731	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.295708895 CEST	49740	443	192.168.2.5	23.51.58.94
May 3, 2024 06:44:05.295728922 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:05.295818090 CEST	49740	443	192.168.2.5	23.51.58.94
May 3, 2024 06:44:05.298475981 CEST	49740	443	192.168.2.5	23.51.58.94
May 3, 2024 06:44:05.298490047 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:05.312891960 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.312952995 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.313011885 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.313031912 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.313169003 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.314027071 CEST	49734	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.314038992 CEST	443	49734	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.314474106 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.314486980 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.314588070 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.315210104 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.315221071 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.317054033 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.317220926 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.317265034 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.317298889 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.317308903 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.317368031 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.317387104 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.317394972 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.317416906 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.317425013 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.317488909 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.318186045 CEST	49737	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.318193913 CEST	443	49737	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.318681002 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.318739891 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.318759918 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.318767071 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.318830967 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.318831921 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.318835974 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.318948984 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.319094896 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.319123030 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.319125891 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.319135904 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.319222927 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.319248915 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.319256067 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.319266081 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.319338083 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.319732904 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.319746017 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.321407080 CEST	49735	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.321413040 CEST	443	49735	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.321470022 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.321594000 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.321721077 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.321774006 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.321794033 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.321803093 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.321831942 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.321851015 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.321875095 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.322033882 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.322067022 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.322092056 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.322092056 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.322103024 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.322155952 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.322185040 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.322279930 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.322537899 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.322546959 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.323405981 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.323534012 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.323870897 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.324788094 CEST	49736	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.324799061 CEST	443	49736	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.325203896 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.325211048 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.325331926 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.325579882 CEST	49738	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.325592041 CEST	443	49738	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.325958014 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.325968027 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.326215029 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.326503992 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.326514959 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.326864958 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.326879978 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.330984116 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.331223011 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.331301928 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.332228899 CEST	49739	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.332240105 CEST	443	49739	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.332550049 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.332557917 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.332911968 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.333300114 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.333316088 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.485833883 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:05.486059904 CEST	49740	443	192.168.2.5	23.51.58.94
May 3, 2024 06:44:05.489550114 CEST	49740	443	192.168.2.5	23.51.58.94
May 3, 2024 06:44:05.489556074 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:05.489942074 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:05.496700048 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.497139931 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.497147083 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.497427940 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.498934984 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.498985052 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.500565052 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.502588987 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.502917051 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.502928972 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.503215075 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.503355980 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.503686905 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.503739119 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.503930092 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.503931046 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.503937006 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.504812956 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.504884958 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.505359888 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.505359888 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.505371094 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.505409956 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.506814003 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.507170916 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.507178068 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.508034945 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.508119106 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.508476019 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.508526087 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.508593082 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.509923935 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.510160923 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.510168076 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.511015892 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.511336088 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.511653900 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.511709929 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.511853933 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.512898922 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.513187885 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.513195038 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.514230013 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.514363050 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.514882088 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.514945030 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.515157938 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.515165091 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.536963940 CEST	49740	443	192.168.2.5	23.51.58.94
May 3, 2024 06:44:05.544118881 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.544131994 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.552119970 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.552124023 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.580115080 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:05.580910921 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.580915928 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.580944061 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.580950975 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.629096985 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.629102945 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.629103899 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.629108906 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.659514904 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:05.682666063 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.682666063 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.714725018 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:05.714817047 CEST	49740	443	192.168.2.5	23.51.58.94
May 3, 2024 06:44:05.735470057 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.735531092 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.735755920 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.735786915 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.735819101 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.735829115 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.735855103 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.736023903 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736087084 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736143112 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736283064 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736309052 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.736314058 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736393929 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736432076 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.736437082 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736633062 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736660004 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.736665010 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.736972094 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.737071037 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.737164974 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.737262011 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.737288952 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.737291098 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.737299919 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.737338066 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.737871885 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.737951040 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.737977982 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.737989902 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.737993956 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.738020897 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.738034964 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.738837957 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.738874912 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.738894939 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.738930941 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.738956928 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.738996029 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.739003897 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.739016056 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.739080906 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.739144087 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.739209890 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.739209890 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.741005898 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.741048098 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.741079092 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.741107941 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.741118908 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.741261959 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.741364956 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.741391897 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.741394043 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.741457939 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.741472006 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.741472006 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.742212057 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.742538929 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.742713928 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.742784023 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.742793083 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.744682074 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.749979973 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.749994993 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750052929 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750056028 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750089884 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750123978 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.750125885 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750125885 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.750130892 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750139952 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750206947 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750235081 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750236988 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.750243902 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750255108 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750279903 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.750284910 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750313044 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.750375986 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750405073 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.750410080 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750710964 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750739098 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.750741005 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750751019 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750792027 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:05.750814915 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:05.756606102 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:06.587558031 CEST	49740	443	192.168.2.5	23.51.58.94
May 3, 2024 06:44:06.587577105 CEST	443	49740	23.51.58.94	192.168.2.5
May 3, 2024 06:44:07.405678034 CEST	49745	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.405704021 CEST	443	49745	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.406191111 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.406228065 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.406287909 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.406757116 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.406771898 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.413599968 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.413628101 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.413676023 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.414127111 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.414139986 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.414813995 CEST	49744	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.414838076 CEST	443	49744	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.417279959 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.417314053 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.417362928 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.419390917 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.419404984 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.421638012 CEST	49746	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.421659946 CEST	443	49746	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.425816059 CEST	49743	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.425821066 CEST	443	49743	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.426791906 CEST	49742	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.426800013 CEST	443	49742	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.428224087 CEST	49741	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.428230047 CEST	443	49741	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.434926987 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.434957981 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.435043097 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.436290026 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.436301947 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.438355923 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.438390970 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.438446045 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.439006090 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.439021111 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.440468073 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.440484047 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.440547943 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.440824986 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.440838099 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.444433928 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.444463968 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.444519997 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.445014954 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.445029020 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.589351892 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.596056938 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.602682114 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.621521950 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.622853041 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.623403072 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.627624989 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.639997005 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.640024900 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.640201092 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.640219927 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.640387058 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.640686035 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.640899897 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.640918016 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.641041040 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.641051054 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.641246080 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.641710043 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.641720057 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.641941071 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.642007113 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.642641068 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.642697096 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.667699099 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.667777061 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.668314934 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.668342113 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.668790102 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.668800116 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.669225931 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.669281006 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.669893026 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.669955969 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.669970989 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.670034885 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.670991898 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.671083927 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.671992064 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.672055006 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.675762892 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.675826073 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.678828955 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.678884983 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.679513931 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.679574966 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.680278063 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.680289030 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.681052923 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.681404114 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.681572914 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.681624889 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.681675911 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.681684017 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.712910891 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.713100910 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.713114977 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.713272095 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.713282108 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.713570118 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.713577986 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.724123001 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.756115913 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828088045 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828152895 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828181028 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828202009 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.828227043 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828258991 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828274965 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.828284025 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828320026 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.828398943 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828561068 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828607082 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.828613043 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828623056 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.828627110 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.828646898 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828690052 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.828696012 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828747034 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828790903 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.828792095 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.828839064 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.837364912 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.837627888 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.837652922 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.837682009 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.837699890 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.837737083 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.837743044 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.837779999 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.857789993 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.857830048 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.857837915 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.857846022 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.857887983 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.857964993 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858146906 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858282089 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.858283043 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858294010 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858340979 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.858346939 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858515024 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858560085 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.858563900 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858644009 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858680010 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.858685017 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.858969927 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859028101 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.859040976 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859075069 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859111071 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.859119892 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859278917 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859306097 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859321117 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.859329939 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859395981 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.859507084 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859548092 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.859553099 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859648943 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859683037 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859688997 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.859694004 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859734058 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.859755993 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.859899998 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860075951 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860117912 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.860125065 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860229015 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860284090 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.860289097 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860301018 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860353947 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.860414982 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860456944 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.860462904 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860611916 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860652924 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.860657930 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860759974 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.860804081 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.860856056 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861049891 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861090899 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.861105919 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861233950 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861274004 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.861282110 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861380100 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861623049 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861666918 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.861673117 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861752987 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861792088 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.861798048 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.861999989 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862040043 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.862046003 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862090111 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862126112 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.862133026 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862281084 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862338066 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.862343073 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862353086 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862413883 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.862420082 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862504959 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862591028 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.862598896 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862814903 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862946987 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862977028 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.862986088 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.862993002 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863029957 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.863157988 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863210917 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863253117 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.863270998 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863317013 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.863325119 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863487005 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863524914 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.863533020 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863610983 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863648891 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.863658905 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863765955 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863806009 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.863811970 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863900900 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.863950014 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.863962889 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864044905 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864090919 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.864097118 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864156008 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864224911 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.864233017 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864326954 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864363909 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.864371061 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864485025 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864523888 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.864531040 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864639044 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864681959 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.864689112 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864784002 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.864840984 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.864846945 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865015984 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865075111 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.865082026 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865197897 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865252972 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.865259886 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865446091 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865504980 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.865514040 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865519047 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865565062 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.865571022 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865689039 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865729094 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.865735054 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865941048 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865961075 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.865982056 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.865989923 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866024971 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.866050959 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866189957 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866250992 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.866257906 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866554022 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866605043 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.866611958 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866656065 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866684914 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866691113 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.866697073 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866731882 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.866802931 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.866957903 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867000103 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.867006063 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867228031 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867271900 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.867278099 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867419958 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867472887 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867475033 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.867485046 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867516041 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.867522001 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867532969 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.867569923 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.872909069 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.872981071 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.873029947 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.946608067 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:07.946636915 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:07.946697950 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:07.947180033 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.947244883 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.947257996 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.947309971 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.948317051 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.948323965 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.948379993 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.948865891 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.948873997 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.948925972 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.949841022 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.949851036 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.949899912 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.950314045 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.950320959 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.950367928 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.950568914 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.950671911 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.950900078 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.950947046 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:07.950970888 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.951000929 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:07.998034000 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:07.998054028 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.001677990 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.004483938 CEST	49748	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.004496098 CEST	443	49748	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.024638891 CEST	49747	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.024656057 CEST	443	49747	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.034265995 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.034296036 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.034353971 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.041307926 CEST	49749	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.041325092 CEST	443	49749	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.042536974 CEST	49752	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.042546988 CEST	443	49752	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.044809103 CEST	49753	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.044816017 CEST	443	49753	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.045905113 CEST	49751	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.045923948 CEST	443	49751	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.047197104 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.047211885 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.068232059 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.068259954 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.068339109 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.069236040 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.069250107 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.071949005 CEST	49750	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.071958065 CEST	443	49750	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.230031013 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.247775078 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.247786045 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.248182058 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.251432896 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.251504898 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.252043009 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.256604910 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.256634951 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.256710052 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.257471085 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.257482052 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.257801056 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.259358883 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.277235985 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.277335882 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.297893047 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.297919989 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.297992945 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.298218966 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.298235893 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.298412085 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.298945904 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.298958063 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.300116062 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.321279049 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.321347952 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:08.344122887 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.346899033 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:08.346915960 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.347106934 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.349663973 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:08.392138958 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.470489025 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470587969 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470618963 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470670938 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.470690012 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470729113 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470731974 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.470741034 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470781088 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.470788002 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470835924 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470874071 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.470880032 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.470944881 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.471024990 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.476874113 CEST	49755	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.476885080 CEST	443	49755	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.478755951 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.479043007 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.479059935 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.479593992 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.480180979 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.480214119 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.480231047 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.480241060 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.480865002 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.480920076 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.481098890 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.481167078 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.481337070 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.481344938 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.481890917 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.481947899 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.482480049 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.482489109 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.497791052 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.497867107 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.497925043 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.497937918 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.498270988 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.498347998 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.498356104 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.498545885 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.498641014 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.498650074 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.498915911 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.498992920 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499002934 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.499010086 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499066114 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499181986 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.499195099 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499299049 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499330997 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499356031 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.499362946 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499397039 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.499639988 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499766111 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499856949 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499872923 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.499881029 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.499938011 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.499944925 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500008106 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.500021935 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500117064 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500164986 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.500173092 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500658989 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500705004 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.500716925 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500819921 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500864983 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500962019 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.500971079 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.500977039 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.501028061 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.501036882 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.501184940 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.501202106 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.501661062 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.501698971 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.501708031 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.501879930 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.501960039 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.501966000 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.502249002 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.502301931 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.502309084 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.502804041 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.502933025 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.502939939 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.503249884 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.503314018 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.503320932 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.503839970 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.503906965 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.503915071 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.503994942 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.586545944 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.586631060 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.587759018 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.587825060 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.587945938 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.587990046 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.588386059 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.588449955 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.588912964 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.588977098 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.589160919 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.589200974 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.589510918 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.589566946 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.589667082 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.589745998 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.590240955 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.590302944 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.590321064 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.590385914 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.590536118 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.590580940 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.591157913 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.591242075 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.591300011 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.591362953 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.592428923 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.592531919 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.592571974 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.592632055 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.593122959 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.593188047 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.593297005 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.593343019 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.593347073 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.593488932 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.593645096 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.593661070 CEST	443	49756	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.593672037 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.593765020 CEST	49756	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.631555080 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.642534971 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.666074991 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.666136980 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:08.666266918 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:08.666284084 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.666296005 CEST	49754	443	192.168.2.5	69.192.108.161
May 3, 2024 06:44:08.666302919 CEST	443	49754	69.192.108.161	192.168.2.5
May 3, 2024 06:44:08.687484980 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.687568903 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.688169003 CEST	49757	443	192.168.2.5	34.120.195.249
May 3, 2024 06:44:08.688184023 CEST	443	49757	34.120.195.249	192.168.2.5
May 3, 2024 06:44:08.705302954 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.705349922 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:08.705451965 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.705967903 CEST	49758	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:08.705975056 CEST	443	49758	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.019999027 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.020032883 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.020154953 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.020481110 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.020493984 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.205111027 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.231096029 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.231107950 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.231967926 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.232033968 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.269431114 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.269489050 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.270081997 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.270092964 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.383033991 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.408157110 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.408206940 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.408339024 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.410666943 CEST	49761	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.410681009 CEST	443	49761	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.412256956 CEST	49762	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.412296057 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.412369013 CEST	49762	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.412610054 CEST	49762	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.412622929 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.518517017 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.518548012 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.518625021 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.519021988 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.519035101 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.519855976 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.519877911 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.519958019 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.520236015 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.520250082 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.521471024 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.521502972 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.521640062 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.522093058 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.522105932 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.522753000 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.522783041 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.522847891 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.523407936 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.523422003 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.526910067 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.526936054 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.527002096 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.527364016 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.527374983 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.528028011 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.528048992 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.528111935 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.528362036 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.528374910 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.529038906 CEST	49769	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.529048920 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.529325008 CEST	49769	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.529721975 CEST	49770	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.529745102 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.529835939 CEST	49770	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.530602932 CEST	49769	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.530610085 CEST	49770	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.530613899 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.530626059 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.592664003 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.702377081 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.703421116 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.704304934 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.704933882 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.707880974 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.709664106 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.712140083 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.712842941 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.732644081 CEST	49762	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.732664108 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.732775927 CEST	49770	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.732799053 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.732985973 CEST	49769	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.732990980 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.733002901 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.733114004 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.733186960 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.733196020 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.733254910 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.733263016 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.733311892 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.733428001 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.733439922 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.733577967 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.733587027 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.733850956 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.733863115 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.733964920 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.733973026 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.734158039 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.734159946 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.734216928 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.734359026 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.734365940 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.734420061 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.734420061 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.734427929 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.734440088 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.734503031 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.735301971 CEST	49771	443	192.168.2.5	104.16.103.112
May 3, 2024 06:44:09.735326052 CEST	443	49771	104.16.103.112	192.168.2.5
May 3, 2024 06:44:09.735439062 CEST	49771	443	192.168.2.5	104.16.103.112
May 3, 2024 06:44:09.736850023 CEST	49762	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.736917019 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.737869978 CEST	49770	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.737934113 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.738581896 CEST	49769	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.738642931 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.741480112 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.741539001 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.743326902 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.743391037 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.744596004 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.744649887 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.745678902 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.745764017 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.747082949 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.747206926 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.748187065 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.748236895 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.754465103 CEST	49771	443	192.168.2.5	104.16.103.112
May 3, 2024 06:44:09.754478931 CEST	443	49771	104.16.103.112	192.168.2.5
May 3, 2024 06:44:09.754991055 CEST	49762	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.755311012 CEST	49770	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.755347967 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.771769047 CEST	49769	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.771811962 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.772223949 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.772233963 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.772442102 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.772569895 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.772578001 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.772878885 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.772886038 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.773011923 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.773066044 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.773077965 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.796118975 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.820113897 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.820120096 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.934767962 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.936805964 CEST	443	49771	104.16.103.112	192.168.2.5
May 3, 2024 06:44:09.936845064 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.939186096 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.939357042 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.939430952 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.939431906 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.939475060 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.940287113 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.940339088 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.940401077 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.940419912 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.940452099 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.941126108 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.941205978 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.941266060 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.941292048 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.941308022 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.941345930 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.942894936 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.943057060 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.943089008 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.943104029 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.943137884 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.943403959 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.943464041 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.943504095 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.943511963 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.943546057 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.944211006 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.944343090 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.946572065 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.957155943 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.957216024 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.957266092 CEST	49762	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.962290049 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.962378025 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.962430954 CEST	49770	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.963762999 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.963855982 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.965298891 CEST	49769	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.991331100 CEST	49762	443	192.168.2.5	35.190.80.1
May 3, 2024 06:44:09.991353989 CEST	443	49762	35.190.80.1	192.168.2.5
May 3, 2024 06:44:09.995659113 CEST	49771	443	192.168.2.5	104.16.103.112
May 3, 2024 06:44:09.995668888 CEST	443	49771	104.16.103.112	192.168.2.5
May 3, 2024 06:44:09.996196985 CEST	49769	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.996208906 CEST	443	49769	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.996887922 CEST	49770	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:09.996908903 CEST	443	49770	104.16.102.112	192.168.2.5
May 3, 2024 06:44:09.996958971 CEST	443	49771	104.16.103.112	192.168.2.5
May 3, 2024 06:44:09.996967077 CEST	443	49771	104.16.103.112	192.168.2.5
May 3, 2024 06:44:09.997023106 CEST	49771	443	192.168.2.5	104.16.103.112
May 3, 2024 06:44:10.008994102 CEST	49771	443	192.168.2.5	104.16.103.112
May 3, 2024 06:44:10.009084940 CEST	443	49771	104.16.103.112	192.168.2.5
May 3, 2024 06:44:10.009478092 CEST	49771	443	192.168.2.5	104.16.103.112
May 3, 2024 06:44:10.009485006 CEST	443	49771	104.16.103.112	192.168.2.5
May 3, 2024 06:44:10.061245918 CEST	49772	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.061261892 CEST	443	49772	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.061319113 CEST	49772	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.062500000 CEST	49768	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.062525034 CEST	443	49768	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.062978029 CEST	49773	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.063010931 CEST	443	49773	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.063071012 CEST	49773	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.063388109 CEST	49767	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.063396931 CEST	443	49767	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.064275026 CEST	49766	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.064282894 CEST	443	49766	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.064902067 CEST	49763	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.064922094 CEST	443	49763	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.065433979 CEST	49765	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.065444946 CEST	443	49765	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.065498114 CEST	49771	443	192.168.2.5	104.16.103.112
May 3, 2024 06:44:10.066059113 CEST	49764	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.066075087 CEST	443	49764	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.067039013 CEST	49774	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.067053080 CEST	443	49774	104.16.102.112	192.168.2.5
May 3, 2024 06:44:10.067104101 CEST	49774	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.072549105 CEST	49775	443	192.168.2.5	104.16.102.112
May 3, 2024 06:44:10.072561026 CEST	443	49775	104.16.102.112	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 3, 2024 06:43:59.737992048 CEST	192.168.2.5	1.1.1.1	0xd6db	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:43:59.738147020 CEST	192.168.2.5	1.1.1.1	0x971	Standard query (0)	www.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:00.523478031 CEST	192.168.2.5	1.1.1.1	0xae81	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:00.524003983 CEST	192.168.2.5	1.1.1.1	0xbc24	Standard query (0)	static.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:00.599044085 CEST	192.168.2.5	1.1.1.1	0x6e35	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:00.599376917 CEST	192.168.2.5	1.1.1.1	0x4b6b	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
May 3, 2024 06:44:00.945274115 CEST	192.168.2.5	1.1.1.1	0x4669	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:00.945667982 CEST	192.168.2.5	1.1.1.1	0xef4	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 3, 2024 06:44:01.241816998 CEST	192.168.2.5	1.1.1.1	0x57af	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:01.242121935 CEST	192.168.2.5	1.1.1.1	0x121f	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
May 3, 2024 06:44:04.295291901 CEST	192.168.2.5	1.1.1.1	0xe2e9	Standard query (0)	chunk-composing.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:04.295909882 CEST	192.168.2.5	1.1.1.1	0xbd60	Standard query (0)	chunk-composing.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:08.141510963 CEST	192.168.2.5	1.1.1.1	0x93f7	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:08.142101049 CEST	192.168.2.5	1.1.1.1	0xbf63	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
May 3, 2024 06:44:08.168140888 CEST	192.168.2.5	1.1.1.1	0x7b2d	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:08.168389082 CEST	192.168.2.5	1.1.1.1	0xf1a5	Standard query (0)	www.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:08.915010929 CEST	192.168.2.5	1.1.1.1	0x4955	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:08.916237116 CEST	192.168.2.5	1.1.1.1	0x82b3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 3, 2024 06:44:09.507576942 CEST	192.168.2.5	1.1.1.1	0xe1a4	Standard query (0)	font-public.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:09.508618116 CEST	192.168.2.5	1.1.1.1	0x6d17	Standard query (0)	font-public.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:10.015986919 CEST	192.168.2.5	1.1.1.1	0xbe2	Standard query (0)	media.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.016330957 CEST	192.168.2.5	1.1.1.1	0x6dcb	Standard query (0)	media.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:10.081469059 CEST	192.168.2.5	1.1.1.1	0xad04	Standard query (0)	media-private.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.081756115 CEST	192.168.2.5	1.1.1.1	0x293f	Standard query (0)	media-private.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:10.142611980 CEST	192.168.2.5	1.1.1.1	0xb129	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.142793894 CEST	192.168.2.5	1.1.1.1	0x9871	Standard query (0)	static.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:11.809396982 CEST	192.168.2.5	1.1.1.1	0x39f0	Standard query (0)	telemetry.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:11.809689999 CEST	192.168.2.5	1.1.1.1	0x413f	Standard query (0)	telemetry.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:12.955224037 CEST	192.168.2.5	1.1.1.1	0x4fe	Standard query (0)	media.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:12.955306053 CEST	192.168.2.5	1.1.1.1	0x21f9	Standard query (0)	media.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:12.964380980 CEST	192.168.2.5	1.1.1.1	0xdf08	Standard query (0)	media-private.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:12.964687109 CEST	192.168.2.5	1.1.1.1	0x25b0	Standard query (0)	media-private.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:17.847237110 CEST	192.168.2.5	1.1.1.1	0xe662	Standard query (0)	cdn.metadata.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:17.847902060 CEST	192.168.2.5	1.1.1.1	0xd6e2	Standard query (0)	cdn.metadata.io	65	IN (0x0001)	false
May 3, 2024 06:44:18.004734039 CEST	192.168.2.5	1.1.1.1	0x89e5	Standard query (0)	collector-22324.us.tvsquared.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:18.004966021 CEST	192.168.2.5	1.1.1.1	0x259d	Standard query (0)	collector-22324.us.tvsquared.com	65	IN (0x0001)	false
May 3, 2024 06:44:19.274924994 CEST	192.168.2.5	1.1.1.1	0xb038	Standard query (0)	ct.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.275661945 CEST	192.168.2.5	1.1.1.1	0x3859	Standard query (0)	ct.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:19.753966093 CEST	192.168.2.5	1.1.1.1	0x837b	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.754472017 CEST	192.168.2.5	1.1.1.1	0xb488	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
May 3, 2024 06:44:19.755907059 CEST	192.168.2.5	1.1.1.1	0xc67d	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.756428003 CEST	192.168.2.5	1.1.1.1	0x3d2f	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
May 3, 2024 06:44:19.899903059 CEST	192.168.2.5	1.1.1.1	0xdc22	Standard query (0)	collector-22324.us.tvsquared.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.900449038 CEST	192.168.2.5	1.1.1.1	0x47b2	Standard query (0)	collector-22324.us.tvsquared.com	65	IN (0x0001)	false
May 3, 2024 06:44:20.039475918 CEST	192.168.2.5	1.1.1.1	0x3dd1	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.040121078 CEST	192.168.2.5	1.1.1.1	0x2f82	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
May 3, 2024 06:44:20.040622950 CEST	192.168.2.5	1.1.1.1	0x9228	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.040999889 CEST	192.168.2.5	1.1.1.1	0xe32d	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 3, 2024 06:44:20.145541906 CEST	192.168.2.5	1.1.1.1	0xf82	Standard query (0)	ct.canva.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.145756006 CEST	192.168.2.5	1.1.1.1	0xf33b	Standard query (0)	ct.canva.com	65	IN (0x0001)	false
May 3, 2024 06:44:20.711802006 CEST	192.168.2.5	1.1.1.1	0x7bd1	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.712393999 CEST	192.168.2.5	1.1.1.1	0x1001	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
May 3, 2024 06:44:20.739917040 CEST	192.168.2.5	1.1.1.1	0xfd8f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.740156889 CEST	192.168.2.5	1.1.1.1	0x8f7e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 3, 2024 06:44:20.761440992 CEST	192.168.2.5	1.1.1.1	0x455a	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.761657000 CEST	192.168.2.5	1.1.1.1	0xd5e9	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 3, 2024 06:44:20.862488031 CEST	192.168.2.5	1.1.1.1	0xe85	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.862945080 CEST	192.168.2.5	1.1.1.1	0x30b7	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 3, 2024 06:44:20.868379116 CEST	192.168.2.5	1.1.1.1	0xa770	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.868539095 CEST	192.168.2.5	1.1.1.1	0x734	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 3, 2024 06:44:20.884279013 CEST	192.168.2.5	1.1.1.1	0x87a9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.884826899 CEST	192.168.2.5	1.1.1.1	0xee80	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 3, 2024 06:44:24.344494104 CEST	192.168.2.5	1.1.1.1	0x7d1c	Standard query (0)	sdk.iad-01.braze.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.344937086 CEST	192.168.2.5	1.1.1.1	0xcaa5	Standard query (0)	sdk.iad-01.braze.com	65	IN (0x0001)	false
May 3, 2024 06:44:24.437530041 CEST	192.168.2.5	1.1.1.1	0xab6e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.437829018 CEST	192.168.2.5	1.1.1.1	0xdc5b	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 3, 2024 06:44:24.746175051 CEST	192.168.2.5	1.1.1.1	0x2494	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.746332884 CEST	192.168.2.5	1.1.1.1	0x5e5e	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
May 3, 2024 06:44:24.748724937 CEST	192.168.2.5	1.1.1.1	0x37b8	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.749160051 CEST	192.168.2.5	1.1.1.1	0x700f	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 3, 2024 06:44:24.927830935 CEST	192.168.2.5	1.1.1.1	0x358c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.927993059 CEST	192.168.2.5	1.1.1.1	0x9fff	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 3, 2024 06:44:35.452685118 CEST	192.168.2.5	1.1.1.1	0x1efe	Standard query (0)	link.childedocushare.site	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:35.452852011 CEST	192.168.2.5	1.1.1.1	0xa74e	Standard query (0)	link.childedocushare.site	65	IN (0x0001)	false
May 3, 2024 06:44:37.695600033 CEST	192.168.2.5	1.1.1.1	0x9625	Standard query (0)	d2te5kruq0pvbl.cloudfront.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:37.696137905 CEST	192.168.2.5	1.1.1.1	0x55f8	Standard query (0)	d2te5kruq0pvbl.cloudfront.net	65	IN (0x0001)	false
May 3, 2024 06:44:38.844543934 CEST	192.168.2.5	1.1.1.1	0xbcac	Standard query (0)	d2te5kruq0pvbl.cloudfront.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:38.845062017 CEST	192.168.2.5	1.1.1.1	0x93cf	Standard query (0)	d2te5kruq0pvbl.cloudfront.net	65	IN (0x0001)	false
May 3, 2024 06:44:47.451271057 CEST	192.168.2.5	1.1.1.1	0xb29	Standard query (0)	short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.451634884 CEST	192.168.2.5	1.1.1.1	0x7b88	Standard query (0)	short.io	65	IN (0x0001)	false
May 3, 2024 06:44:47.745075941 CEST	192.168.2.5	1.1.1.1	0xafa	Standard query (0)	short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.745075941 CEST	192.168.2.5	1.1.1.1	0xbd26	Standard query (0)	short.io	65	IN (0x0001)	false
May 3, 2024 06:44:48.459233999 CEST	192.168.2.5	1.1.1.1	0x7ac6	Standard query (0)	app.short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:48.459377050 CEST	192.168.2.5	1.1.1.1	0x1832	Standard query (0)	app.short.io	65	IN (0x0001)	false
May 3, 2024 06:44:50.126140118 CEST	192.168.2.5	1.1.1.1	0xcde4	Standard query (0)	app.short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:51.348572016 CEST	192.168.2.5	1.1.1.1	0xd7ba	Standard query (0)	sentry-relay.short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:51.348773003 CEST	192.168.2.5	1.1.1.1	0x2626	Standard query (0)	sentry-relay.short.io	65	IN (0x0001)	false
May 3, 2024 06:44:51.973876953 CEST	192.168.2.5	1.1.1.1	0xb238	Standard query (0)	short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:51.974292994 CEST	192.168.2.5	1.1.1.1	0xf6f2	Standard query (0)	short.io	65	IN (0x0001)	false
May 3, 2024 06:44:52.110615969 CEST	192.168.2.5	1.1.1.1	0x1ff9	Standard query (0)	sentry-relay.short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:52.111296892 CEST	192.168.2.5	1.1.1.1	0x6080	Standard query (0)	sentry-relay.short.io	65	IN (0x0001)	false
May 3, 2024 06:44:55.577413082 CEST	192.168.2.5	1.1.1.1	0x1223	Standard query (0)	publickeyservice.aws.privacysandboxservices.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:55.577833891 CEST	192.168.2.5	1.1.1.1	0x2add	Standard query (0)	publickeyservice.aws.privacysandboxservices.com	65	IN (0x0001)	false
May 3, 2024 06:44:56.749579906 CEST	192.168.2.5	1.1.1.1	0x164d	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:56.749732018 CEST	192.168.2.5	1.1.1.1	0x7138	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
May 3, 2024 06:44:57.185523987 CEST	192.168.2.5	1.1.1.1	0x9285	Standard query (0)	widget.intercom.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.185702085 CEST	192.168.2.5	1.1.1.1	0x3e23	Standard query (0)	widget.intercom.io	65	IN (0x0001)	false
May 3, 2024 06:44:57.207828045 CEST	192.168.2.5	1.1.1.1	0x44b0	Standard query (0)	profile.short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.208065033 CEST	192.168.2.5	1.1.1.1	0x3325	Standard query (0)	profile.short.io	65	IN (0x0001)	false
May 3, 2024 06:45:00.189980984 CEST	192.168.2.5	1.1.1.1	0xf8a5	Standard query (0)	js.intercomcdn.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.190574884 CEST	192.168.2.5	1.1.1.1	0x3e9f	Standard query (0)	js.intercomcdn.com	65	IN (0x0001)	false
May 3, 2024 06:45:00.308664083 CEST	192.168.2.5	1.1.1.1	0x29e2	Standard query (0)	cdn.iubenda.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.308933973 CEST	192.168.2.5	1.1.1.1	0xceb0	Standard query (0)	cdn.iubenda.com	65	IN (0x0001)	false
May 3, 2024 06:45:00.670737028 CEST	192.168.2.5	1.1.1.1	0x3983	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.671432018 CEST	192.168.2.5	1.1.1.1	0x2f47	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
May 3, 2024 06:45:01.905575991 CEST	192.168.2.5	1.1.1.1	0x8b50	Standard query (0)	profile.short.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.905774117 CEST	192.168.2.5	1.1.1.1	0x3791	Standard query (0)	profile.short.io	65	IN (0x0001)	false
May 3, 2024 06:45:01.906536102 CEST	192.168.2.5	1.1.1.1	0xc35c	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.906739950 CEST	192.168.2.5	1.1.1.1	0x6c11	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
May 3, 2024 06:45:05.149173021 CEST	192.168.2.5	1.1.1.1	0x9a46	Standard query (0)	nexus-websocket-a.intercom.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.149590969 CEST	192.168.2.5	1.1.1.1	0x49aa	Standard query (0)	nexus-websocket-a.intercom.io	65	IN (0x0001)	false
May 3, 2024 06:45:05.219958067 CEST	192.168.2.5	1.1.1.1	0xa688	Standard query (0)	cs.iubenda.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.220383883 CEST	192.168.2.5	1.1.1.1	0x48f0	Standard query (0)	cs.iubenda.com	65	IN (0x0001)	false
May 3, 2024 06:45:05.745461941 CEST	192.168.2.5	1.1.1.1	0xa2b0	Standard query (0)	api-iam.intercom.io	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.745846987 CEST	192.168.2.5	1.1.1.1	0x2a68	Standard query (0)	api-iam.intercom.io	65	IN (0x0001)	false
May 3, 2024 06:45:05.903743982 CEST	192.168.2.5	1.1.1.1	0x75a	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.904174089 CEST	192.168.2.5	1.1.1.1	0x6588	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 3, 2024 06:45:05.905438900 CEST	192.168.2.5	1.1.1.1	0x21a2	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.905670881 CEST	192.168.2.5	1.1.1.1	0xae36	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 3, 2024 06:45:05.987431049 CEST	192.168.2.5	1.1.1.1	0xbdf3	Standard query (0)	hits-i.iubenda.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.987585068 CEST	192.168.2.5	1.1.1.1	0x7a6e	Standard query (0)	hits-i.iubenda.com	65	IN (0x0001)	false
May 3, 2024 06:45:06.926040888 CEST	192.168.2.5	1.1.1.1	0x23f2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:06.928777933 CEST	192.168.2.5	1.1.1.1	0x3c87	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 3, 2024 06:45:08.829391003 CEST	192.168.2.5	1.1.1.1	0x6c5a	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:08.829535007 CEST	192.168.2.5	1.1.1.1	0x8f77	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 3, 2024 06:45:10.686539888 CEST	192.168.2.5	1.1.1.1	0xefb9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:10.687212944 CEST	192.168.2.5	1.1.1.1	0xc36d	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 3, 2024 06:45:10.701054096 CEST	192.168.2.5	1.1.1.1	0xedb4	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:10.701673985 CEST	192.168.2.5	1.1.1.1	0xa2d	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
May 3, 2024 06:45:14.592184067 CEST	192.168.2.5	1.1.1.1	0x20df	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 3, 2024 06:45:14.592184067 CEST	192.168.2.5	1.1.1.1	0x88cb	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:14.592417955 CEST	192.168.2.5	1.1.1.1	0x536c	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:14.592670918 CEST	192.168.2.5	1.1.1.1	0xb2cd	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
May 3, 2024 06:45:15.470202923 CEST	192.168.2.5	1.1.1.1	0x388e	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:15.470695972 CEST	192.168.2.5	1.1.1.1	0x3135	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 3, 2024 06:43:59.826491117 CEST	1.1.1.1	192.168.2.5	0x971	No error (0)	www.canva.com			65	IN (0x0001)	false
May 3, 2024 06:43:59.826678038 CEST	1.1.1.1	192.168.2.5	0xd6db	No error (0)	www.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:43:59.826678038 CEST	1.1.1.1	192.168.2.5	0xd6db	No error (0)	www.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:00.612596035 CEST	1.1.1.1	192.168.2.5	0xbc24	No error (0)	static.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:00.612922907 CEST	1.1.1.1	192.168.2.5	0xae81	No error (0)	static.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:00.612922907 CEST	1.1.1.1	192.168.2.5	0xae81	No error (0)	static.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:00.686917067 CEST	1.1.1.1	192.168.2.5	0x4b6b	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
May 3, 2024 06:44:00.687001944 CEST	1.1.1.1	192.168.2.5	0x6e35	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:00.687001944 CEST	1.1.1.1	192.168.2.5	0x6e35	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:01.036164999 CEST	1.1.1.1	192.168.2.5	0x4669	No error (0)	www.google.com		142.251.40.196	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:01.036569118 CEST	1.1.1.1	192.168.2.5	0xef4	No error (0)	www.google.com			65	IN (0x0001)	false
May 3, 2024 06:44:01.329916954 CEST	1.1.1.1	192.168.2.5	0x57af	No error (0)	o13855.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:04.385385990 CEST	1.1.1.1	192.168.2.5	0xe2e9	No error (0)	chunk-composing.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:04.385385990 CEST	1.1.1.1	192.168.2.5	0xe2e9	No error (0)	chunk-composing.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:04.386204004 CEST	1.1.1.1	192.168.2.5	0xbd60	No error (0)	chunk-composing.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:08.230761051 CEST	1.1.1.1	192.168.2.5	0x93f7	No error (0)	o13855.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:08.256644964 CEST	1.1.1.1	192.168.2.5	0x7b2d	No error (0)	www.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:08.256644964 CEST	1.1.1.1	192.168.2.5	0x7b2d	No error (0)	www.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:08.256707907 CEST	1.1.1.1	192.168.2.5	0xf1a5	No error (0)	www.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:09.003221035 CEST	1.1.1.1	192.168.2.5	0x4955	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:09.595813990 CEST	1.1.1.1	192.168.2.5	0xe1a4	No error (0)	font-public.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:09.595813990 CEST	1.1.1.1	192.168.2.5	0xe1a4	No error (0)	font-public.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:09.597450972 CEST	1.1.1.1	192.168.2.5	0x6d17	No error (0)	font-public.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:10.109198093 CEST	1.1.1.1	192.168.2.5	0x6dcb	No error (0)	media.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:10.109580040 CEST	1.1.1.1	192.168.2.5	0xbe2	No error (0)	media.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.109580040 CEST	1.1.1.1	192.168.2.5	0xbe2	No error (0)	media.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.170008898 CEST	1.1.1.1	192.168.2.5	0xad04	No error (0)	media-private.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.170008898 CEST	1.1.1.1	192.168.2.5	0xad04	No error (0)	media-private.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.170157909 CEST	1.1.1.1	192.168.2.5	0x293f	No error (0)	media-private.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:10.233289957 CEST	1.1.1.1	192.168.2.5	0xb129	No error (0)	static.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.233289957 CEST	1.1.1.1	192.168.2.5	0xb129	No error (0)	static.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:10.233705997 CEST	1.1.1.1	192.168.2.5	0x9871	No error (0)	static.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:11.899475098 CEST	1.1.1.1	192.168.2.5	0x39f0	No error (0)	telemetry.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:11.899475098 CEST	1.1.1.1	192.168.2.5	0x39f0	No error (0)	telemetry.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:11.899492979 CEST	1.1.1.1	192.168.2.5	0x413f	No error (0)	telemetry.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:13.044039965 CEST	1.1.1.1	192.168.2.5	0x21f9	No error (0)	media.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:13.044133902 CEST	1.1.1.1	192.168.2.5	0x4fe	No error (0)	media.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:13.044133902 CEST	1.1.1.1	192.168.2.5	0x4fe	No error (0)	media.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:13.053288937 CEST	1.1.1.1	192.168.2.5	0x25b0	No error (0)	media-private.canva.com			65	IN (0x0001)	false
May 3, 2024 06:44:13.054083109 CEST	1.1.1.1	192.168.2.5	0xdf08	No error (0)	media-private.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:13.054083109 CEST	1.1.1.1	192.168.2.5	0xdf08	No error (0)	media-private.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:17.253926992 CEST	1.1.1.1	192.168.2.5	0xb4e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:17.253926992 CEST	1.1.1.1	192.168.2.5	0xb4e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:17.936647892 CEST	1.1.1.1	192.168.2.5	0xd6e2	No error (0)	cdn.metadata.io	d1w725hft9421a.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:17.953401089 CEST	1.1.1.1	192.168.2.5	0xe662	No error (0)	cdn.metadata.io	d1w725hft9421a.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:17.953401089 CEST	1.1.1.1	192.168.2.5	0xe662	No error (0)	d1w725hft9421a.cloudfront.net		13.35.93.63	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:17.953401089 CEST	1.1.1.1	192.168.2.5	0xe662	No error (0)	d1w725hft9421a.cloudfront.net		13.35.93.29	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:17.953401089 CEST	1.1.1.1	192.168.2.5	0xe662	No error (0)	d1w725hft9421a.cloudfront.net		13.35.93.71	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:17.953401089 CEST	1.1.1.1	192.168.2.5	0xe662	No error (0)	d1w725hft9421a.cloudfront.net		13.35.93.28	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:18.093589067 CEST	1.1.1.1	192.168.2.5	0x89e5	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:18.093589067 CEST	1.1.1.1	192.168.2.5	0x89e5	No error (0)	collectoru.us.tvsquared.com		18.219.60.11	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:18.093589067 CEST	1.1.1.1	192.168.2.5	0x89e5	No error (0)	collectoru.us.tvsquared.com		3.132.84.91	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:18.096735954 CEST	1.1.1.1	192.168.2.5	0x259d	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:18.182185888 CEST	1.1.1.1	192.168.2.5	0xe7c3	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:18.182185888 CEST	1.1.1.1	192.168.2.5	0xe7c3	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.363861084 CEST	1.1.1.1	192.168.2.5	0xb038	No error (0)	ct.canva.com		216.239.32.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.363861084 CEST	1.1.1.1	192.168.2.5	0xb038	No error (0)	ct.canva.com		216.239.34.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.363861084 CEST	1.1.1.1	192.168.2.5	0xb038	No error (0)	ct.canva.com		216.239.38.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.363861084 CEST	1.1.1.1	192.168.2.5	0xb038	No error (0)	ct.canva.com		216.239.36.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.844407082 CEST	1.1.1.1	192.168.2.5	0x837b	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:19.844407082 CEST	1.1.1.1	192.168.2.5	0x837b	No error (0)	spdc-global.pbp.gysm.yahoodns.net		50.17.194.92	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.844407082 CEST	1.1.1.1	192.168.2.5	0x837b	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.88.71.74	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.845195055 CEST	1.1.1.1	192.168.2.5	0xb488	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:19.845725060 CEST	1.1.1.1	192.168.2.5	0xc67d	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.845725060 CEST	1.1.1.1	192.168.2.5	0xc67d	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.992163897 CEST	1.1.1.1	192.168.2.5	0xdc22	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:19.992163897 CEST	1.1.1.1	192.168.2.5	0xdc22	No error (0)	collectoru.us.tvsquared.com		18.219.60.11	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.992163897 CEST	1.1.1.1	192.168.2.5	0xdc22	No error (0)	collectoru.us.tvsquared.com		3.132.84.91	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:19.992315054 CEST	1.1.1.1	192.168.2.5	0x47b2	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:20.128345013 CEST	1.1.1.1	192.168.2.5	0x3dd1	No error (0)	sb.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.128345013 CEST	1.1.1.1	192.168.2.5	0x3dd1	No error (0)	sb.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.128345013 CEST	1.1.1.1	192.168.2.5	0x3dd1	No error (0)	sb.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.128345013 CEST	1.1.1.1	192.168.2.5	0x3dd1	No error (0)	sb.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.129127979 CEST	1.1.1.1	192.168.2.5	0x9228	No error (0)	ad.doubleclick.net		142.251.35.166	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.129162073 CEST	1.1.1.1	192.168.2.5	0xe32d	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 3, 2024 06:44:20.233752012 CEST	1.1.1.1	192.168.2.5	0xf82	No error (0)	ct.canva.com		216.239.34.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.233752012 CEST	1.1.1.1	192.168.2.5	0xf82	No error (0)	ct.canva.com		216.239.38.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.233752012 CEST	1.1.1.1	192.168.2.5	0xf82	No error (0)	ct.canva.com		216.239.32.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.233752012 CEST	1.1.1.1	192.168.2.5	0xf82	No error (0)	ct.canva.com		216.239.36.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.800200939 CEST	1.1.1.1	192.168.2.5	0x7bd1	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.800200939 CEST	1.1.1.1	192.168.2.5	0x7bd1	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.828001976 CEST	1.1.1.1	192.168.2.5	0xfd8f	No error (0)	googleads.g.doubleclick.net		142.250.65.226	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.828079939 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 3, 2024 06:44:20.849801064 CEST	1.1.1.1	192.168.2.5	0xd5e9	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 3, 2024 06:44:20.849814892 CEST	1.1.1.1	192.168.2.5	0x455a	No error (0)	adservice.google.com		142.250.176.194	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.950673103 CEST	1.1.1.1	192.168.2.5	0xe85	No error (0)	ad.doubleclick.net		142.251.40.230	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.951216936 CEST	1.1.1.1	192.168.2.5	0x30b7	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 3, 2024 06:44:20.956593990 CEST	1.1.1.1	192.168.2.5	0xa770	No error (0)	ad.doubleclick.net		142.251.40.230	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.956829071 CEST	1.1.1.1	192.168.2.5	0x734	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 3, 2024 06:44:20.972855091 CEST	1.1.1.1	192.168.2.5	0x87a9	No error (0)	ad.doubleclick.net		142.250.65.198	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:20.973140955 CEST	1.1.1.1	192.168.2.5	0xee80	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 3, 2024 06:44:24.432822943 CEST	1.1.1.1	192.168.2.5	0x7d1c	No error (0)	sdk.iad-01.braze.com	sdk.iad-01.braze.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:24.434106112 CEST	1.1.1.1	192.168.2.5	0xcaa5	No error (0)	sdk.iad-01.braze.com	sdk.iad-01.braze.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:24.525842905 CEST	1.1.1.1	192.168.2.5	0xdc5b	No error (0)	www.google.com			65	IN (0x0001)	false
May 3, 2024 06:44:24.526109934 CEST	1.1.1.1	192.168.2.5	0xab6e	No error (0)	www.google.com		142.250.80.36	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.835402012 CEST	1.1.1.1	192.168.2.5	0x2494	No error (0)	sb.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.835402012 CEST	1.1.1.1	192.168.2.5	0x2494	No error (0)	sb.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.835402012 CEST	1.1.1.1	192.168.2.5	0x2494	No error (0)	sb.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.835402012 CEST	1.1.1.1	192.168.2.5	0x2494	No error (0)	sb.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:24.836802006 CEST	1.1.1.1	192.168.2.5	0x700f	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 3, 2024 06:44:24.836960077 CEST	1.1.1.1	192.168.2.5	0x37b8	No error (0)	adservice.google.com		142.251.32.98	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:25.015902996 CEST	1.1.1.1	192.168.2.5	0x358c	No error (0)	www.google.com		142.250.80.36	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:25.016035080 CEST	1.1.1.1	192.168.2.5	0x9fff	No error (0)	www.google.com			65	IN (0x0001)	false
May 3, 2024 06:44:35.584702015 CEST	1.1.1.1	192.168.2.5	0xa74e	No error (0)	link.childedocushare.site	cname.short.io		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:35.714931965 CEST	1.1.1.1	192.168.2.5	0x1efe	No error (0)	link.childedocushare.site	cname.short.io		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:35.714931965 CEST	1.1.1.1	192.168.2.5	0x1efe	No error (0)	cname.short.io		52.2.56.64	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:35.714931965 CEST	1.1.1.1	192.168.2.5	0x1efe	No error (0)	cname.short.io		52.21.33.16	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:37.819421053 CEST	1.1.1.1	192.168.2.5	0x9625	No error (0)	d2te5kruq0pvbl.cloudfront.net		18.164.96.43	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:37.819421053 CEST	1.1.1.1	192.168.2.5	0x9625	No error (0)	d2te5kruq0pvbl.cloudfront.net		18.164.96.95	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:37.819421053 CEST	1.1.1.1	192.168.2.5	0x9625	No error (0)	d2te5kruq0pvbl.cloudfront.net		18.164.96.117	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:37.819421053 CEST	1.1.1.1	192.168.2.5	0x9625	No error (0)	d2te5kruq0pvbl.cloudfront.net		18.164.96.64	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:38.948637009 CEST	1.1.1.1	192.168.2.5	0xbcac	No error (0)	d2te5kruq0pvbl.cloudfront.net		18.164.96.95	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:38.948637009 CEST	1.1.1.1	192.168.2.5	0xbcac	No error (0)	d2te5kruq0pvbl.cloudfront.net		18.164.96.64	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:38.948637009 CEST	1.1.1.1	192.168.2.5	0xbcac	No error (0)	d2te5kruq0pvbl.cloudfront.net		18.164.96.117	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:38.948637009 CEST	1.1.1.1	192.168.2.5	0xbcac	No error (0)	d2te5kruq0pvbl.cloudfront.net		18.164.96.43	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.548826933 CEST	1.1.1.1	192.168.2.5	0xb29	No error (0)	short.io		18.164.96.43	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.548826933 CEST	1.1.1.1	192.168.2.5	0xb29	No error (0)	short.io		18.164.96.68	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.548826933 CEST	1.1.1.1	192.168.2.5	0xb29	No error (0)	short.io		18.164.96.92	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.548826933 CEST	1.1.1.1	192.168.2.5	0xb29	No error (0)	short.io		18.164.96.117	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.846024036 CEST	1.1.1.1	192.168.2.5	0xafa	No error (0)	short.io		18.164.96.43	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.846024036 CEST	1.1.1.1	192.168.2.5	0xafa	No error (0)	short.io		18.164.96.68	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.846024036 CEST	1.1.1.1	192.168.2.5	0xafa	No error (0)	short.io		18.164.96.92	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:47.846024036 CEST	1.1.1.1	192.168.2.5	0xafa	No error (0)	short.io		18.164.96.117	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:48.559009075 CEST	1.1.1.1	192.168.2.5	0x7ac6	No error (0)	app.short.io		108.139.29.30	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:48.559009075 CEST	1.1.1.1	192.168.2.5	0x7ac6	No error (0)	app.short.io		108.139.29.88	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:48.559009075 CEST	1.1.1.1	192.168.2.5	0x7ac6	No error (0)	app.short.io		108.139.29.101	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:48.559009075 CEST	1.1.1.1	192.168.2.5	0x7ac6	No error (0)	app.short.io		108.139.29.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:50.225263119 CEST	1.1.1.1	192.168.2.5	0xcde4	No error (0)	app.short.io		108.139.29.30	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:50.225263119 CEST	1.1.1.1	192.168.2.5	0xcde4	No error (0)	app.short.io		108.139.29.88	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:50.225263119 CEST	1.1.1.1	192.168.2.5	0xcde4	No error (0)	app.short.io		108.139.29.101	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:50.225263119 CEST	1.1.1.1	192.168.2.5	0xcde4	No error (0)	app.short.io		108.139.29.112	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:51.451749086 CEST	1.1.1.1	192.168.2.5	0xd7ba	No error (0)	sentry-relay.short.io		3.94.39.175	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:51.451749086 CEST	1.1.1.1	192.168.2.5	0xd7ba	No error (0)	sentry-relay.short.io		3.215.55.25	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:51.451749086 CEST	1.1.1.1	192.168.2.5	0xd7ba	No error (0)	sentry-relay.short.io		52.54.198.139	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:52.072577000 CEST	1.1.1.1	192.168.2.5	0xb238	No error (0)	short.io		18.164.96.43	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:52.072577000 CEST	1.1.1.1	192.168.2.5	0xb238	No error (0)	short.io		18.164.96.68	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:52.072577000 CEST	1.1.1.1	192.168.2.5	0xb238	No error (0)	short.io		18.164.96.92	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:52.072577000 CEST	1.1.1.1	192.168.2.5	0xb238	No error (0)	short.io		18.164.96.117	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:52.208961010 CEST	1.1.1.1	192.168.2.5	0x1ff9	No error (0)	sentry-relay.short.io		3.94.39.175	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:52.208961010 CEST	1.1.1.1	192.168.2.5	0x1ff9	No error (0)	sentry-relay.short.io		3.215.55.25	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:52.208961010 CEST	1.1.1.1	192.168.2.5	0x1ff9	No error (0)	sentry-relay.short.io		52.54.198.139	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:55.665821075 CEST	1.1.1.1	192.168.2.5	0x1223	No error (0)	publickeyservice.aws.privacysandboxservices.com	publickeyservice.msmt-1.aws.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:55.665821075 CEST	1.1.1.1	192.168.2.5	0x1223	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		13.35.93.76	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:55.665821075 CEST	1.1.1.1	192.168.2.5	0x1223	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		13.35.93.50	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:55.665821075 CEST	1.1.1.1	192.168.2.5	0x1223	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		13.35.93.58	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:55.665821075 CEST	1.1.1.1	192.168.2.5	0x1223	No error (0)	publickeyservice.msmt-1.aws.privacysandboxservices.com		13.35.93.99	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:55.677512884 CEST	1.1.1.1	192.168.2.5	0x2add	No error (0)	publickeyservice.aws.privacysandboxservices.com	publickeyservice.msmt-1.aws.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:44:56.837282896 CEST	1.1.1.1	192.168.2.5	0x164d	No error (0)	recaptcha.net		142.251.40.131	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.274252892 CEST	1.1.1.1	192.168.2.5	0x9285	No error (0)	widget.intercom.io		13.226.34.3	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.274252892 CEST	1.1.1.1	192.168.2.5	0x9285	No error (0)	widget.intercom.io		13.226.34.119	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.274252892 CEST	1.1.1.1	192.168.2.5	0x9285	No error (0)	widget.intercom.io		13.226.34.10	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.274252892 CEST	1.1.1.1	192.168.2.5	0x9285	No error (0)	widget.intercom.io		13.226.34.20	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.305854082 CEST	1.1.1.1	192.168.2.5	0x44b0	No error (0)	profile.short.io		3.94.39.175	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.305854082 CEST	1.1.1.1	192.168.2.5	0x44b0	No error (0)	profile.short.io		3.215.55.25	A (IP address)	IN (0x0001)	false
May 3, 2024 06:44:57.305854082 CEST	1.1.1.1	192.168.2.5	0x44b0	No error (0)	profile.short.io		52.54.198.139	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.278870106 CEST	1.1.1.1	192.168.2.5	0xf8a5	No error (0)	js.intercomcdn.com		108.139.47.46	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.278870106 CEST	1.1.1.1	192.168.2.5	0xf8a5	No error (0)	js.intercomcdn.com		108.139.47.108	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.278870106 CEST	1.1.1.1	192.168.2.5	0xf8a5	No error (0)	js.intercomcdn.com		108.139.47.114	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.278870106 CEST	1.1.1.1	192.168.2.5	0xf8a5	No error (0)	js.intercomcdn.com		108.139.47.21	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.397370100 CEST	1.1.1.1	192.168.2.5	0xceb0	No error (0)	cdn.iubenda.com	cdn-iubenda.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:00.399209023 CEST	1.1.1.1	192.168.2.5	0x29e2	No error (0)	cdn.iubenda.com	cdn-iubenda.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:00.399209023 CEST	1.1.1.1	192.168.2.5	0x29e2	No error (0)	cdn-iubenda.b-cdn.net		138.199.40.58	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.758810997 CEST	1.1.1.1	192.168.2.5	0x3983	No error (0)	recaptcha.net		142.251.40.227	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.974920988 CEST	1.1.1.1	192.168.2.5	0x6474	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:00.974920988 CEST	1.1.1.1	192.168.2.5	0x6474	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.995548010 CEST	1.1.1.1	192.168.2.5	0xc35c	No error (0)	api-iam.intercom.io		52.22.196.150	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.995548010 CEST	1.1.1.1	192.168.2.5	0xc35c	No error (0)	api-iam.intercom.io		174.129.185.134	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.995548010 CEST	1.1.1.1	192.168.2.5	0xc35c	No error (0)	api-iam.intercom.io		44.206.102.229	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.995548010 CEST	1.1.1.1	192.168.2.5	0xc35c	No error (0)	api-iam.intercom.io		107.21.223.82	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.995548010 CEST	1.1.1.1	192.168.2.5	0xc35c	No error (0)	api-iam.intercom.io		34.197.130.216	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.995548010 CEST	1.1.1.1	192.168.2.5	0xc35c	No error (0)	api-iam.intercom.io		52.21.135.208	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.995548010 CEST	1.1.1.1	192.168.2.5	0xc35c	No error (0)	api-iam.intercom.io		34.207.27.1	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:01.995548010 CEST	1.1.1.1	192.168.2.5	0xc35c	No error (0)	api-iam.intercom.io		35.171.136.30	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:02.002655983 CEST	1.1.1.1	192.168.2.5	0x8b50	No error (0)	profile.short.io		3.94.39.175	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:02.002655983 CEST	1.1.1.1	192.168.2.5	0x8b50	No error (0)	profile.short.io		3.215.55.25	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:02.002655983 CEST	1.1.1.1	192.168.2.5	0x8b50	No error (0)	profile.short.io		52.54.198.139	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.238477945 CEST	1.1.1.1	192.168.2.5	0x9a46	No error (0)	nexus-websocket-a.intercom.io		35.174.127.31	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.238477945 CEST	1.1.1.1	192.168.2.5	0x9a46	No error (0)	nexus-websocket-a.intercom.io		34.237.73.95	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.309369087 CEST	1.1.1.1	192.168.2.5	0x48f0	No error (0)	cs.iubenda.com	cs-iubenda.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:05.310477018 CEST	1.1.1.1	192.168.2.5	0xa688	No error (0)	cs.iubenda.com	cs-iubenda.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:05.310477018 CEST	1.1.1.1	192.168.2.5	0xa688	No error (0)	cs-iubenda.b-cdn.net		138.199.40.58	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.833442926 CEST	1.1.1.1	192.168.2.5	0xa2b0	No error (0)	api-iam.intercom.io		54.235.206.80	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.833442926 CEST	1.1.1.1	192.168.2.5	0xa2b0	No error (0)	api-iam.intercom.io		34.197.130.216	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.833442926 CEST	1.1.1.1	192.168.2.5	0xa2b0	No error (0)	api-iam.intercom.io		54.237.174.27	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.833442926 CEST	1.1.1.1	192.168.2.5	0xa2b0	No error (0)	api-iam.intercom.io		52.21.135.208	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.833442926 CEST	1.1.1.1	192.168.2.5	0xa2b0	No error (0)	api-iam.intercom.io		52.22.196.150	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.833442926 CEST	1.1.1.1	192.168.2.5	0xa2b0	No error (0)	api-iam.intercom.io		44.206.102.229	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.833442926 CEST	1.1.1.1	192.168.2.5	0xa2b0	No error (0)	api-iam.intercom.io		35.171.136.30	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.833442926 CEST	1.1.1.1	192.168.2.5	0xa2b0	No error (0)	api-iam.intercom.io		34.207.27.1	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.992283106 CEST	1.1.1.1	192.168.2.5	0x75a	No error (0)	analytics.google.com		142.250.80.78	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.993168116 CEST	1.1.1.1	192.168.2.5	0x6588	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:05.993202925 CEST	1.1.1.1	192.168.2.5	0x21a2	No error (0)	stats.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:05.993202925 CEST	1.1.1.1	192.168.2.5	0x21a2	No error (0)	stats.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:06.076266050 CEST	1.1.1.1	192.168.2.5	0x7a6e	No error (0)	hits-i.iubenda.com	hits-iubenda.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:06.078107119 CEST	1.1.1.1	192.168.2.5	0xbdf3	No error (0)	hits-i.iubenda.com	hits-iubenda.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:06.078107119 CEST	1.1.1.1	192.168.2.5	0xbdf3	No error (0)	hits-iubenda.b-cdn.net		138.199.40.58	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:07.013748884 CEST	1.1.1.1	192.168.2.5	0x23f2	No error (0)	www.google.com		142.251.40.196	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:07.016566038 CEST	1.1.1.1	192.168.2.5	0x3c87	No error (0)	www.google.com			65	IN (0x0001)	false
May 3, 2024 06:45:08.917278051 CEST	1.1.1.1	192.168.2.5	0x6c5a	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:10.774821043 CEST	1.1.1.1	192.168.2.5	0xefb9	No error (0)	www.google.com		142.251.41.4	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:10.775449991 CEST	1.1.1.1	192.168.2.5	0xc36d	No error (0)	www.google.com			65	IN (0x0001)	false
May 3, 2024 06:45:10.789442062 CEST	1.1.1.1	192.168.2.5	0xedb4	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:10.789442062 CEST	1.1.1.1	192.168.2.5	0xedb4	No error (0)	static-cdn.hotjar.com		108.138.106.126	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:10.789442062 CEST	1.1.1.1	192.168.2.5	0xedb4	No error (0)	static-cdn.hotjar.com		108.138.106.49	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:10.789442062 CEST	1.1.1.1	192.168.2.5	0xedb4	No error (0)	static-cdn.hotjar.com		108.138.106.124	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:10.789442062 CEST	1.1.1.1	192.168.2.5	0xedb4	No error (0)	static-cdn.hotjar.com		108.138.106.101	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:10.789572954 CEST	1.1.1.1	192.168.2.5	0xa2d	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
May 3, 2024 06:45:14.681052923 CEST	1.1.1.1	192.168.2.5	0x20df	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 3, 2024 06:45:14.681304932 CEST	1.1.1.1	192.168.2.5	0x88cb	No error (0)	googleads.g.doubleclick.net		142.251.40.162	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:14.682188034 CEST	1.1.1.1	192.168.2.5	0x536c	No error (0)	script.hotjar.com		18.164.96.46	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:14.682188034 CEST	1.1.1.1	192.168.2.5	0x536c	No error (0)	script.hotjar.com		18.164.96.90	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:14.682188034 CEST	1.1.1.1	192.168.2.5	0x536c	No error (0)	script.hotjar.com		18.164.96.77	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:14.682188034 CEST	1.1.1.1	192.168.2.5	0x536c	No error (0)	script.hotjar.com		18.164.96.87	A (IP address)	IN (0x0001)	false
May 3, 2024 06:45:15.558644056 CEST	1.1.1.1	192.168.2.5	0x388e	No error (0)	td.doubleclick.net		142.250.80.2	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49909	18.164.96.43	80	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 3, 2024 06:44:47.654546976 CEST	449	OUT	GET /?utm_source=link_not_found HTTP/1.1 Host: short.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 3, 2024 06:44:47.742712021 CEST	759	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 03 May 2024 04:44:47 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://short.io/?utm_source=link_not_found X-Cache: Redirect from cloudfront Via: 1.1 9750f5ee94b45ad0faba87b3fac2aad6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Wk2zSjqDFIV9OcNVhxaKrYU1bi2HXeEIKuYJjnbjRdttFfVB3VGXMg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>
May 3, 2024 06:45:32.755563021 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	785	OUT	GET /design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:00 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:00 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd97e63f924243-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; Path=/; Max-Age=31536000; Expires=Sat, 03 May 2025 04:44:00 GMT; Secure; HttpOnly; SameSite=NONE Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com; Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-KvS8YAMKIwz4429QM7Ryhw'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=87dd97e63f924243&app=design_viewer&policyHash=385db2f4 Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: deny X-Request-ID: 87dd97e63f924243 x-robots-tag: noindex, nofollow X-XSS-Protection: 1; mode=block
2024-05-03 04:44:00 UTC	1402	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 31 47 31 55 77 43 76 42 6c 74 61 58 5a 57 75 6e 4d 63 31 45 53 78 4e 30 78 4c 6c 79 50 4c 6f 44 25 32 42 65 65 74 55 51 34 5a 25 32 42 6f 59 33 47 6d 6a 38 45 61 53 6e 51 57 79 25 32 46 7a 25 32 46 7a 33 49 6e 61 69 41 6d 6f 56 51 42 6a 34 6a 6d 73 4a 7a 43 4d 43 57 39 48 4c 58 36 71 75 59 55 73 30 33 31 43 43 34 36 6e 6a 33 78 39 30 56 66 50 79 44 45 56 44 6a 66 4c 30 42 59 4b 37 43 49 7a 59 6d 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k1G1UwCvBltaXZWunMc1ESxN0xLlyPLoD%2BeetUQ4Z%2BoY3Gmj8EaSnQWy%2Fz%2Fz3InaiAmoVQBj4jmsJzCMCW9HLX6quYUs031CC46nj3x90VfPyDEVDjfL0BYK7CIzYmE%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 31 50 52 4f 50 4f 53 41 4c 5f 53 41 4c 45 53 5f 30 34 5f 33 30 2e 70 64 66 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 Data Ascii: 7ff2<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>1PROPOSAL_SALES_04_30.pdf</title><meta name="app-name" content="design_viewer" /><meta name="viewport" content="width=device-width, initial-scale
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 30 30 62 66 2c 75 2b 30 30 63 30 2d 30 30 64 36 2c 75 2b 30 30 64 38 2d 30 30 66 36 2c 75 2b 30 30 66 38 2d 30 31 34 38 2c 75 2b 30 31 34 61 2d 30 31 37 65 2c 75 2b 30 31 39 32 2c 75 2b 30 31 62 35 2d 30 31 62 36 2c 75 2b 30 31 66 63 2d 30 31 66 64 2c 75 2b 30 32 31 38 2d 30 32 31 62 2c 75 2b 30 32 33 37 2c 75 2b 30 32 63 36 2d 30 32 63 37 2c 75 2b 30 32 63 39 2c 75 2b 30 32 64 38 2d 30 32 64 64 2c 75 2b 31 65 38 30 2d 31 65 38 35 2c 75 2b 31 65 39 65 2c 75 2b 31 65 66 32 2d 31 65 66 33 2c 75 2b 32 30 33 30 2c 75 2b 32 30 33 39 2d 32 30 33 61 2c 75 2b 32 30 61 63 2c 75 2b 32 30 62 61 2c 75 2b 32 31 31 33 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e Data Ascii: 00bf,u+00c0-00d6,u+00d8-00f6,u+00f8-0148,u+014a-017e,u+0192,u+01b5-01b6,u+01fc-01fd,u+0218-021b,u+0237,u+02c6-02c7,u+02c9,u+02d8-02dd,u+1e80-1e85,u+1e9e,u+1ef2-1ef3,u+2030,u+2039-203a,u+20ac,u+20ba,u+2113}@font-face{font-display:swap;font-family:Canva San
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 41 44 69 69 36 54 2f 63 41 57 74 58 6f 37 43 62 4b 33 71 50 35 4c 62 4e 64 4e 63 4e 44 75 71 44 68 47 30 39 74 45 6c 65 5a 31 2b 4b 75 4a 51 58 6a 61 34 68 47 56 58 68 62 70 4a 79 70 36 64 55 4f 79 39 48 4e 55 2b 47 61 70 7a 62 46 50 31 4e 47 4c 39 42 4d 51 3d 3d 22 20 6e 6f 6e 63 65 3d 22 4b 76 53 38 59 41 4d 4b 49 77 7a 34 34 32 39 51 4d 37 52 79 68 77 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 62 36 32 39 38 63 66 35 30 32 63 63 31 33 64 30 2e 76 65 6e 64 6f 72 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 Data Ascii: " crossorigin="anonymous" integrity="sha512-ADii6T/cAWtXo7CbK3qP5LbNdNcNDuqDhG09tEleZ1+KuJQXja4hGVXhbpJyp6dUOy9HNU+GapzbFP1NGL9BMQ==" nonce="KvS8YAMKIwz4429QM7Ryhw"><link href="https://static.canva.com/web/b6298cf502cc13d0.vendor.js" rel="preload" as="scr
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 31 30 32 34 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 64 65 73 69 67 6e 2f 44 41 47 45 42 42 7a 71 39 4b 4d 2f 6a 76 6a 45 30 31 71 52 62 61 4f 79 57 68 57 79 44 4f 48 44 65 67 2f 76 69 65 77 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d Data Ascii: property="og:image:height" content="1024" /><meta property="og:url" content="https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta nam
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 69 70 74 20 6e 6f 6e 63 65 3d 22 4b 76 53 38 59 41 4d 4b 49 77 7a 34 34 32 39 51 4d 37 52 79 68 77 22 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 70 6c 61 63 65 28 27 61 64 61 70 74 69 76 65 27 2c 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 27 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 27 29 2e 6d 61 74 63 68 65 73 20 3f 20 27 64 61 72 6b 27 20 3a 20 27 6c 69 67 68 74 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4b 76 53 38 59 41 4d 4b 49 77 7a 34 34 32 39 51 4d 37 52 79 68 77 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f Data Ascii: ipt nonce="KvS8YAMKIwz4429QM7Ryhw">document.documentElement.classList.replace('adaptive', window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light');</script><div id="root"></div><script nonce="KvS8YAMKIwz4429QM7Ryhw">(function() {windo
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 34 2d 63 37 62 33 2d 34 32 36 32 2d 61 33 36 63 2d 34 38 34 66 35 33 61 35 38 37 62 61 22 7d 2c 22 45 22 3a 7b 22 58 4c 49 4e 4f 22 3a 22 48 22 2c 22 50 49 4f 54 49 22 3a 22 42 22 2c 22 50 49 4e 43 4f 22 3a 22 42 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 46 41 54 48 50 22 3a 22 42 22 2c 22 45 48 50 4c 49 22 3a 22 42 22 2c 22 45 41 57 46 47 22 3a 22 41 22 2c 22 44 57 43 54 41 22 3a 22 43 22 2c 22 44 45 50 4c 4f 22 3a 22 42 22 2c 22 43 54 50 4e 4c 22 3a 22 42 22 2c 22 41 48 54 45 41 22 3a 22 41 22 2c 22 41 48 48 54 31 22 3a 22 41 22 2c 22 41 48 31 4c 4f 22 3a 22 41 22 7d 2c 22 49 22 3a 22 77 65 62 22 2c 22 50 22 3a 5b 2d 35 38 33 36 39 2c 37 38 35 35 37 35 5d 2c 22 51 22 3a 5b 2d 33 33 35 34 37 39 34 38 2c 31 36 38 31 30 33 5d 2c 22 52 22 3a 66 61 6c 73 65 Data Ascii: 4-c7b3-4262-a36c-484f53a587ba"},"E":{"XLINO":"H","PIOTI":"B","PINCO":"B","OCPS":"B","FATHP":"B","EHPLI":"B","EAWFG":"A","DWCTA":"C","DEPLO":"B","CTPNL":"B","AHTEA":"A","AHHT1":"A","AH1LO":"A"},"I":"web","P":[-58369,785575],"Q":[-33547948,168103],"R":false
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 31 39 31 2e 34 36 37 2c 22 43 22 3a 39 37 2e 36 2c 22 61 22 3a 7b 22 41 22 3a 74 72 75 65 2c 22 42 22 3a 7b 22 41 22 3a 7b 22 41 22 3a 22 4d 41 47 45 42 44 30 45 61 58 59 22 2c 22 42 22 3a 31 7d 2c 22 42 22 3a 7b 22 44 22 3a 31 39 31 2e 34 36 37 2c 22 43 22 3a 39 37 2e 36 7d 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 4b 22 2c 22 41 22 3a 31 38 30 2e 32 30 33 30 30 30 30 30 30 30 30 30 30 33 2c 22 42 22 3a 39 36 2e 30 33 31 39 39 39 39 39 39 39 39 39 39 38 2c 22 44 22 3a 35 36 34 2e 33 39 39 2c 22 43 22 3a 31 35 36 2e 33 35 35 39 32 30 30 30 38 39 37 37 32 35 2c 22 61 22 3a 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 22 20 5c 5c 6e 5c 5c 6e 41 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 62 65 65 6e 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 4f 6e 65 20 Data Ascii: 191.467,"C":97.6,"a":{"A":true,"B":{"A":{"A":"MAGEBD0EaXY","B":1},"B":{"D":191.467,"C":97.6}}}},{"A?":"K","A":180.20300000000003,"B":96.03199999999998,"D":564.399,"C":156.35592000897725,"a":{"A":[{"A?":"A","A":" \\n\\nA document has been sent through One
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 22 41 22 2c 22 41 22 3a 7b 22 74 65 78 74 2d 61 6c 69 67 6e 22 3a 7b 22 42 22 3a 22 73 74 61 72 74 22 7d 2c 22 6c 65 61 64 69 6e 67 22 3a 7b 22 42 22 3a 22 31 34 30 30 2e 30 22 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 42 22 3a 22 38 30 2e 30 22 7d 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 7b 22 42 22 3a 22 59 41 46 64 4a 74 38 64 41 59 30 2c 31 22 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 22 42 22 3a 22 39 2e 36 30 30 30 30 30 33 38 31 34 36 39 37 32 37 22 7d 2c 22 66 6f 6e 74 2d 73 74 79 6c 65 22 3a 7b 22 42 22 3a 22 6e 6f 72 6d 61 6c 22 7d 2c 22 63 6f 6c 6f 72 22 3a 7b 22 42 22 3a 22 23 66 66 66 66 66 66 22 7d 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 7b 22 42 22 3a 22 6c 69 67 68 74 22 7d 2c 22 64 69 72 65 63 74 69 6f 6e 22 3a 7b 22 42 22 Data Ascii: "A","A":{"text-align":{"B":"start"},"leading":{"B":"1400.0"},"tracking":{"B":"80.0"},"font-family":{"B":"YAFdJt8dAY0,1"},"font-size":{"B":"9.600000381469727"},"font-style":{"B":"normal"},"color":{"B":"#ffffff"},"font-weight":{"B":"light"},"direction":{"B"
2024-05-03 04:44:00 UTC	1369	IN	Data Raw: 35 38 34 31 2c 22 47 22 3a 7b 22 68 65 69 67 68 74 22 3a 34 34 37 2c 22 77 69 64 74 68 22 3a 34 34 37 2c 22 76 65 72 73 69 6f 6e 22 3a 35 2c 22 69 6d 61 67 65 73 22 3a 5b 7b 22 62 75 63 6b 65 74 22 3a 22 64 6f 63 75 6d 65 6e 74 2d 65 78 70 6f 72 74 2e 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 6b 65 79 22 3a 22 7a 71 39 4b 4d 2f 44 41 47 45 42 42 7a 71 39 4b 4d 2f 35 2f 74 68 75 6d 62 6e 61 69 6c 2f 30 30 30 31 2e 70 6e 67 22 2c 22 70 61 67 65 22 3a 31 2c 22 70 61 67 65 48 61 73 68 22 3a 31 39 38 36 30 32 33 34 31 34 2c 22 68 65 69 67 68 74 22 3a 34 34 37 2c 22 77 69 64 74 68 22 3a 34 34 37 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 75 6d 65 6e 74 2d 65 78 70 6f 72 74 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 71 39 4b 4d 2f 44 41 47 45 42 42 7a 71 39 4b Data Ascii: 5841,"G":{"height":447,"width":447,"version":5,"images":[{"bucket":"document-export.canva.com","key":"zq9KM/DAGEBBzq9KM/5/thumbnail/0001.png","page":1,"pageHash":1986023414,"height":447,"width":447,"url":"https://document-export.canva.com/zq9KM/DAGEBBzq9K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	582	OUT	GET /web/451da5240d983e12.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:01 UTC	1348	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:00 GMT Content-Type: text/css Content-Length: 7201 Connection: close CF-Ray: 87dd97ea1e6f18d0-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 2601204 Cache-Control: public, max-age=31556926 ETag: "8a60e615f4cf50ce557db237aa444def" Expires: Sat, 03 May 2025 10:32:46 GMT Last-Modified: Wed, 03 Apr 2024 02:04:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 04 Apr 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: BQxWbv7M45Hh7EZWmaTnmLaL/8XyJMSskVyRqsZ+Eydu/TNi4gDb3bB8kN1U1KnthJPhmBeTGEM= x-amz-replication-status: PENDING x-amz-request-id: V17MWF73A6QD8K2K x-amz-server-side-encryption: AES256 x-amz-version-id: 24uZrHOgVZbRC46.aBg4IEgjG86AYS_j X-Content-Type-Options: nosniff
2024-05-03 04:44:01 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 46 66 69 44 6a 4a 52 57 77 53 71 42 48 58 6d 4e 6e 4c 51 48 34 61 6d 36 53 41 4f 44 59 71 42 49 6a 37 33 33 4f 68 78 48 45 56 6f 2d 31 37 31 34 37 31 31 34 34 30 2d 31 2e 30 2e 31 2e 31 2d 32 4b 69 64 66 52 31 69 4d 31 48 49 35 42 74 5a 4e 6d 5f 51 4f 79 53 56 6c 34 33 30 43 68 49 52 55 4b 4f 44 6e 6d 47 4c 45 72 65 32 64 39 73 41 33 54 55 56 4a 56 37 4a 47 38 55 35 52 45 79 55 71 59 66 59 4b 38 77 33 74 38 37 66 41 58 4f 47 4e 68 4a 64 47 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=FfiDjJRWwSqBHXmNnLQH4am6SAODYqBIj733OhxHEVo-1714711440-1.0.1.1-2KidfR1iM1HI5BtZNm_QOySVl430ChIRUKODnmGLEre2d9sA3TUVJV7JG8U5REyUqYfYK8w3t87fAXOGNhJdGA; path=/; expires=Fri, 03-May-24 05:14:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:01 UTC	611	IN	Data Raw: 2e 74 68 65 6d 65 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 76 61 72 28 2d 2d 54 57 46 34 72 77 29 7d 2e 6c 69 67 68 74 7b 2d 2d 54 57 46 34 72 77 3a 6c 69 67 68 74 3b 2d 2d 74 4e 31 4d 4d 41 3a 23 30 30 63 34 63 63 3b 2d 2d 5f 6d 48 4c 72 41 3a 23 38 62 33 64 66 66 3b 2d 2d 73 30 64 4f 59 41 3a 23 37 37 33 31 64 38 3b 2d 2d 74 2d 69 38 68 77 3a 23 36 31 32 64 61 65 3b 2d 2d 36 38 39 39 73 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 34 59 6f 62 6d 67 3a 23 66 66 66 3b 2d 2d 39 51 52 5f 68 67 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 51 59 Data Ascii: .theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QY
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 3b 2d 2d 66 67 41 4c 55 77 3a 23 30 64 31 32 31 36 3b 2d 2d 6e 34 4c 31 73 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 6e 65 4a 71 41 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 56 44 43 55 4e 67 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 45 30 35 59 41 51 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 73 61 6e 6c 43 77 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 63 39 6b 61 51 51 3a 23 30 64 31 32 31 36 3b 2d 2d 47 56 36 72 75 51 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 53 5f 7a 4b 42 51 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d 66 50 4e 5f 77 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 2e 37 29 3b 2d Data Ascii: ;--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--KneJqA:rgba(57,76,96,.15);--VDCUNg:rgba(64,87,109,.07);--E05YAQ:rgba(57,76,96,.15);--sanlCw:rgba(13,18,22,0);--c9kaQQ:#0d1216;--GV6ruQ:rgba(36,49,61,.4);--S_zKBQ:rgba(17,23,29,.6);--fPN_wg:rgba(13,18,22,.7);-
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 45 67 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 2e 37 29 3b 2d 2d 66 46 55 41 65 41 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 30 29 3b 2d 2d 71 4b 33 6e 38 77 3a 23 66 36 66 37 66 38 3b 2d 2d 6a 69 70 57 78 51 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 2e 37 29 3b 2d 2d 4f 72 47 68 4a 67 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 30 29 3b 2d 2d 62 44 62 6c 59 77 3a 23 66 66 66 3b 2d 2d 59 6c 42 4a 5a 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 59 35 68 69 65 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 54 6c 55 75 64 51 3a 23 66 66 66 3b 2d 2d 6d 4d 65 5f 55 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 34 53 76 70 39 51 3a 68 73 6c 61 28 30 Data Ascii: Eg:rgba(235,236,240,.7);--fFUAeA:rgba(235,236,240,0);--qK3n8w:#f6f7f8;--jipWxQ:rgba(246,247,248,.7);--OrGhJg:rgba(246,247,248,0);--bDblYw:#fff;--YlBJZQ:hsla(0,0%,100%,.7);--Y5hieQ:hsla(0,0%,100%,0);--TlUudQ:#fff;--mMe_UA:hsla(0,0%,100%,.7);--4Svp9Q:hsla(0
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 66 3b 2d 2d 73 30 64 4f 59 41 3a 23 37 37 33 31 64 38 3b 2d 2d 74 2d 69 38 68 77 3a 23 36 31 32 64 61 65 3b 2d 2d 36 38 39 39 73 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 34 59 6f 62 6d 67 3a 23 66 66 66 3b 2d 2d 39 51 52 5f 68 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 51 59 41 5f 2d 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 29 3b 2d 2d 63 74 47 44 33 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 66 66 66 3b 2d 2d 6f 58 6a 65 6b 77 3a 68 73 6c 61 28 30 2c 30 25 2c Data Ascii: f;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:hsla(0,0%,100%,.07);--4Yobmg:#fff;--9QR_hg:hsla(0,0%,100%,.4);--K12xjw:hsla(0,0%,100%,.07);--B2THfg:hsla(0,0%,100%,.15);--QYA_-A:hsla(0,0%,100%,.2);--ctGD3w:hsla(0,0%,100%,.07);--_T63JA:#fff;--oXjekw:hsla(0,0%,
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 2d 37 4a 73 6a 33 41 3a 23 66 66 66 3b 2d 2d 52 64 32 35 6c 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 44 50 36 71 71 51 3a 23 31 61 36 32 66 66 3b 2d 2d 57 4a 39 78 78 51 3a 23 33 64 38 62 66 66 3b 2d 2d 6b 4a 46 69 7a 51 3a 23 31 38 35 35 64 38 3b 2d 2d 59 4f 79 31 6b 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 61 78 63 6b 56 67 3a 23 31 64 33 62 37 63 3b 2d 2d 54 6a 5a 34 67 67 3a 23 66 66 66 3b 2d 2d 79 70 41 76 62 51 3a 23 66 66 66 3b 2d 2d 79 75 44 57 31 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 78 51 4f 6d 41 77 3a 23 61 64 35 61 30 30 3b 2d 2d 53 50 4b 6f 42 51 3a 23 64 31 37 36 30 30 3b 2d 2d 66 4e 4e 46 66 51 3a 23 39 34 34 66 30 35 3b 2d 2d 7a 62 62 65 38 77 3a 68 Data Ascii: -7Jsj3A:#fff;--Rd25lA:hsla(0,0%,100%,.4);--DP6qqQ:#1a62ff;--WJ9xxQ:#3d8bff;--kJFizQ:#1855d8;--YOy1kQ:hsla(0,0%,100%,.07);--axckVg:#1d3b7c;--TjZ4gg:#fff;--ypAvbQ:#fff;--yuDW1w:hsla(0,0%,100%,.4);--xQOmAw:#ad5a00;--SPKoBQ:#d17600;--fNNFfQ:#944f05;--zbbe8w:h
2024-05-03 04:44:01 UTC	1114	IN	Data Raw: 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 42 32 54 48 66 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 51 59 41 5f 2d 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 63 74 47 44 33 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 66 66 66 3b 2d 2d 6f 58 6a 65 6b 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 68 6a 56 73 72 77 3a 23 34 61 32 65 37 66 3b 2d 2d 6f 6e 32 31 61 77 3a 23 34 61 32 65 37 66 3b 2d 2d 46 4e 55 51 34 67 3a 23 36 31 32 64 61 65 3b 2d 2d 36 52 64 37 55 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 6e 66 75 5f 6f 67 3a 23 66 66 66 3b 2d 2d 75 78 33 64 6f 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c Data Ascii: %,100%,0);--B2THfg:hsla(0,0%,100%,.07);--QYA_-A:hsla(0,0%,100%,.15);--ctGD3w:hsla(0,0%,100%,0);--_T63JA:#fff;--oXjekw:hsla(0,0%,100%,.4);--hjVsrw:#4a2e7f;--on21aw:#4a2e7f;--FNUQ4g:#612dae;--6Rd7UQ:hsla(0,0%,100%,.15);--nfu_og:#fff;--ux3doQ:hsla(0,0%,100%,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	571	OUT	GET /web/e1307de400adca1e.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:01 UTC	1356	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:00 GMT Content-Type: text/javascript Content-Length: 20428 Connection: close CF-Ray: 87dd97ea292119f7-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 92702 Cache-Control: public, max-age=31556926 ETag: "e15d6d2a479f0e747e43e148c1e6c151" Expires: Sat, 03 May 2025 10:32:46 GMT Last-Modified: Thu, 02 May 2024 02:44:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 03 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: gduhT9xSLqwgJinVvLbWiVq8NZYo9no8/Bwa/C7D/YUuwd6pdEvvmsrjnr3Ja8o0T+5QH7Sp8IY= x-amz-replication-status: COMPLETED x-amz-request-id: K38JA5HQEZ4RQFG8 x-amz-server-side-encryption: AES256 x-amz-version-id: qeGKiTeS2kDtt953hgVA_PMX4F.KKBfz X-Content-Type-Options: nosniff
2024-05-03 04:44:01 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 70 49 67 69 51 6d 53 42 48 46 56 76 36 37 79 61 4c 33 73 35 34 6f 62 30 30 34 6f 75 58 37 46 33 69 77 31 74 32 79 68 44 2e 6b 73 2d 31 37 31 34 37 31 31 34 34 30 2d 31 2e 30 2e 31 2e 31 2d 78 5a 4a 62 69 63 6c 79 44 30 6c 49 63 77 70 44 38 52 4f 32 73 48 2e 76 39 6c 72 59 55 4f 56 43 64 62 6d 6e 62 46 32 32 53 34 67 56 45 41 46 4b 49 31 4f 45 38 46 6f 6d 4b 7a 41 73 62 4c 31 76 6f 34 4a 4a 5f 77 64 5f 33 36 37 75 4c 38 38 38 41 4f 57 33 58 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=pIgiQmSBHFVv67yaL3s54ob004ouX7F3iw1t2yhD.ks-1714711440-1.0.1.1-xZJbiclyD0lIcwpD8RO2sH.v9lrYUOVCdbmnbF22S4gVEAFKI1OE8FomKzAsbL1vo4JJ_wd_367uL888AOW3Xw; path=/; expires=Fri, 03-May-24 05:14:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:01 UTC	603	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 65 71 34 50 67 41 5c 22 3a 5c 22 44 69 64 6e e2 80 99 74 20 67 65 74 20 74 68 65 20 63 6f 64 65 3f 20 52 65 73 65 6e 64 20 63 6f 64 65 5c 22 2c 5c 22 69 47 41 44 73 67 5c 22 3a 5c 22 53 6b 69 70 20 74 6f 20 73 65 61 72 63 68 5c 22 2c 5c 22 50 46 4f 55 65 77 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 5c 22 2c 5c 22 46 76 59 75 37 51 5c 22 3a 5c 22 54 68 69 73 20 70 61 73 73 77 6f 72 64 20 69 73 20 63 6f 6d 6d 6f 6e 20 61 6e 64 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 2e 5c 22 2c 5c 22 30 38 69 6e 4c 51 5c 22 3a 5c 22 50 61 67 65 20 7b 30 7d 5c 22 2c 5c 22 6e 47 42 6c 59 67 5c 22 3a 5c 22 43 68 61 6e 67 65 20 65 6d 61 69 Data Ascii: (function() { const messages = JSON.parse("{\"eq4PgA\":\"Didnt get the code? Resend code\",\"iGADsg\":\"Skip to search\",\"PFOUew\":\"Continue\",\"FvYu7Q\":\"This password is common and easy to guess.\",\"08inLQ\":\"Page {0}\",\"nGBlYg\":\"Change emai
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 4f 57 36 41 5c 22 3a 5c 22 59 6f 75 72 20 62 69 72 74 68 64 61 79 20 63 61 6e e2 80 99 74 20 62 65 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 5c 22 2c 5c 22 65 4b 58 69 53 51 5c 22 3a 5c 22 50 61 73 73 77 6f 72 64 5c 22 2c 5c 22 2f 66 4c 4e 48 67 5c 22 3a 5c 22 57 68 65 6e 20 79 6f 75 20 73 65 74 20 75 70 20 74 77 6f 20 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 77 65 20 67 61 76 65 20 79 6f 75 20 73 6f 6d 65 20 62 61 63 6b 75 70 20 63 6f 64 65 73 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 6f 6e 65 20 6f 66 20 74 68 65 6d 20 68 65 72 65 20 74 6f 20 72 65 67 61 69 6e 20 61 63 63 65 73 73 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 5c 22 2c 5c 22 79 41 58 76 66 67 5c 22 3a 5c 22 43 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 64 Data Ascii: OW6A\":\"Your birthday cant be in the future\",\"eKXiSQ\":\"Password\",\"/fLNHg\":\"When you set up two factor authentication we gave you some backup codes. You can use one of them here to regain access to your account.\",\"yAXvfg\":\"Create your own d
2024-05-03 04:44:01 UTC	935	IN	Data Raw: 6c 75 72 61 6c 2c 20 6f 6e 65 20 7b 23 20 64 61 79 7d 20 6f 74 68 65 72 20 7b 23 20 64 61 79 73 7d 7d 2e 5c 22 2c 5c 22 36 72 77 32 70 41 5c 22 3a 5c 22 54 68 61 6e 6b 73 20 66 6f 72 20 77 61 74 63 68 69 6e 67 21 5c 22 2c 5c 22 39 5a 58 4f 6f 67 5c 22 3a 5c 22 47 6f 20 74 6f 20 70 61 67 65 5c 22 2c 5c 22 53 73 65 30 69 41 5c 22 3a 5c 22 53 6f 72 72 79 2c 20 77 65 20 68 61 64 20 74 72 6f 75 62 6c 65 20 73 65 6e 64 69 6e 67 20 79 6f 75 72 20 63 6f 64 65 2e 20 50 6c 65 61 73 65 20 63 6f 6d 65 20 62 61 63 6b 20 6c 61 74 65 72 20 74 6f 20 74 72 79 20 74 68 69 73 20 61 67 61 69 6e 2e 5c 22 2c 5c 22 36 31 35 68 6a 41 5c 22 3a 5c 22 43 68 6f 6f 73 65 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 69 67 6e 75 70 20 6d 65 74 68 6f 64 5c 22 2c 5c 22 6a 54 76 38 61 67 5c Data Ascii: lural, one {# day} other {# days}}.\",\"6rw2pA\":\"Thanks for watching!\",\"9ZXOog\":\"Go to page\",\"Sse0iA\":\"Sorry, we had trouble sending your code. Please come back later to try this again.\",\"615hjA\":\"Choose a different signup method\",\"jTv8ag\
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 2f 61 3e 20 61 6e 64 20 74 68 65 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 33 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 45 78 70 6f 72 74 20 4e 6f 74 69 63 65 3c 2f 61 3e 2e 5c 22 2c 5c 22 78 57 7a 74 37 41 5c 22 3a 5c 22 53 68 6f 77 20 63 61 70 74 69 6f 6e 73 5c 22 2c 5c 22 44 49 6d 7a 4f 51 5c 22 3a 5c 22 4d 6f 62 69 6c 65 2f 45 6d 61 69 6c 20 28 70 65 72 73 6f 6e 61 6c 20 6f 72 20 77 6f 72 6b 29 5c 22 2c 5c 22 54 49 76 6d 4c 67 5c 22 3a 5c 22 46 61 69 6c 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 63 61 70 74 69 6f 6e 73 5c 22 2c 5c 22 6a 6d 6d 37 53 41 5c 22 3a 5c 22 53 68 61 72 65 5c 22 2c 5c 22 35 4f 64 Data Ascii: /a> and the <a href=\\\"{3}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Personal Data Export Notice</a>.\",\"xWzt7A\":\"Show captions\",\"DImzOQ\":\"Mobile/Email (personal or work)\",\"TIvmLg\":\"Failed to generate captions\",\"jmm7SA\":\"Share\",\"5Od
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 64 20 e2 80 9c 7b 30 7d e2 80 9d 5c 22 2c 5c 22 64 75 32 6b 76 51 5c 22 3a 5c 22 41 20 77 6f 72 64 20 62 79 20 69 74 73 65 6c 66 20 69 73 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 2e 5c 22 2c 5c 22 33 4c 6a 62 39 41 5c 22 3a 5c 22 50 61 67 65 20 7b 30 2c 20 6e 75 6d 62 65 72 7d 20 6f 66 20 7b 31 2c 20 6e 75 6d 62 65 72 7d 2e 5c 22 2c 5c 22 43 46 77 68 47 77 5c 22 3a 5c 22 57 65 6c 63 6f 6d 65 20 74 6f 20 74 68 65 20 74 65 61 6d 21 5c 22 2c 5c 22 7a 73 58 51 53 67 5c 22 3a 5c 22 53 65 6e 64 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 65 6d 61 69 6c 5c 22 2c 5c 22 4b 56 30 33 4a 77 5c 22 3a 5c 22 53 6b 69 70 20 6e 61 76 69 67 61 74 69 6f 6e 5c 22 2c 5c 22 64 6d 79 39 56 41 5c 22 3a 5c 22 7b 30 7d 78 5c 22 2c 5c 22 33 36 33 42 52 67 5c 22 3a 5c 22 49 e2 80 99 Data Ascii: d {0}\",\"du2kvQ\":\"A word by itself is easy to guess.\",\"3Ljb9A\":\"Page {0, number} of {1, number}.\",\"CFwhGw\":\"Welcome to the team!\",\"zsXQSg\":\"Send confirmation email\",\"KV03Jw\":\"Skip navigation\",\"dmy9VA\":\"{0}x\",\"363BRg\":\"I
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 75 6d 62 65 72 7d 20 2f 20 7b 31 2c 20 6e 75 6d 62 65 72 7d 5c 22 2c 5c 22 4b 4f 62 4e 7a 67 5c 22 3a 5c 22 54 6f 67 67 6c 65 20 66 75 6c 6c 73 63 72 65 65 6e 5c 22 2c 5c 22 65 75 41 49 6f 41 5c 22 3a 5c 22 49 20 77 61 6e 74 20 74 6f 20 72 65 73 65 74 20 6d 79 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 70 6b 35 55 47 41 5c 22 3a 5c 22 50 72 65 66 65 72 20 6f 6e 65 20 6f 66 20 74 68 65 73 65 3f 5c 22 2c 5c 22 56 55 67 4a 2b 67 5c 22 3a 5c 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 2e 5c 22 2c 5c 22 56 53 4a 77 55 77 5c 22 3a 5c 22 28 6f 70 65 6e 73 20 69 6e 20 61 20 6e 65 77 20 74 61 62 20 6f 72 20 77 69 6e 64 6f 77 29 5c 22 2c 5c 22 34 43 6e 67 74 67 5c 22 3a 5c 22 3c 62 3e 53 75 63 63 65 73 73 21 3c 2f 62 3e 20 54 68 Data Ascii: umber} / {1, number}\",\"KObNzg\":\"Toggle fullscreen\",\"euAIoA\":\"I want to reset my password\",\"pk5UGA\":\"Prefer one of these?\",\"VUgJ+g\":\"Please enter a valid email.\",\"VSJwUw\":\"(opens in a new tab or window)\",\"4Cngtg\":\"<b>Success!</b> Th
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 5c 22 6b 43 44 49 42 51 5c 22 3a 5c 22 4a 75 6c 5c 22 2c 5c 22 48 49 50 4d 52 41 5c 22 3a 5c 22 43 6f 70 79 20 6f 66 20 7b 30 7d 5c 22 2c 5c 22 44 4f 71 42 67 67 5c 22 3a 5c 22 4f 75 72 20 75 70 64 61 74 65 64 20 73 65 63 75 72 69 74 79 20 70 72 6f 63 65 64 75 72 65 73 20 72 65 71 75 69 72 65 20 79 6f 75 20 74 6f 20 63 68 61 6e 67 65 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 20 57 65 e2 80 99 76 65 20 65 6d 61 69 6c 65 64 20 79 6f 75 20 61 20 6c 69 6e 6b 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 5c 22 2c 5c 22 6f 45 73 77 46 67 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 65 6d 61 69 6c 20 61 6e 64 20 77 65 e2 80 99 6c 6c 20 73 65 6e 64 20 79 6f 75 20 61 20 63 6f 64 65 20 74 6f 20 6c 6f 67 20 69 6e 20 6f 72 20 Data Ascii: \"kCDIBQ\":\"Jul\",\"HIPMRA\":\"Copy of {0}\",\"DOqBgg\":\"Our updated security procedures require you to change your password. Weve emailed you a link to reset your password.\",\"oEswFg\":\"Continue with email and well send you a code to log in or
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 64 65 5c 22 2c 5c 22 70 64 72 45 65 77 5c 22 3a 5c 22 45 64 69 74 20 74 68 65 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 20 6e 6f 77 5c 22 2c 5c 22 49 6a 52 4f 30 51 5c 22 3a 5c 22 53 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 47 6f 6f 67 6c 65 20 64 69 64 6e e2 80 99 74 20 77 6f 72 6b 20 74 68 61 74 20 74 69 6d 65 2c 20 74 72 79 20 61 6e 6f 74 68 65 72 20 77 61 79 3f 5c 22 2c 5c 22 5a 39 2f 71 62 51 5c 22 3a 5c 22 53 6b 69 70 20 74 6f 20 65 6e 64 20 6f 66 20 6c 69 73 74 5c 22 2c 5c 22 55 52 6e 76 46 77 5c 22 3a 5c 22 43 6f 70 79 5c 22 2c 5c 22 51 43 4c 54 53 77 5c 22 3a 5c 22 54 68 65 72 65 20 77 61 73 20 61 6e 20 69 73 73 75 65 20 6f 6e 20 6f 75 72 20 65 6e 64 2e 5c 22 2c 5c 22 6a 5a 76 48 4b 67 5c 22 3a 5c 22 45 6e 74 65 72 20 63 6f 64 65 5c 22 2c 5c 22 Data Ascii: de\",\"pdrEew\":\"Edit the presentation now\",\"IjRO0Q\":\"Signing in with Google didnt work that time, try another way?\",\"Z9/qbQ\":\"Skip to end of list\",\"URnvFw\":\"Copy\",\"QCLTSw\":\"There was an issue on our end.\",\"jZvHKg\":\"Enter code\",\"
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 3a 5c 22 43 6f 6e 74 69 6e 75 65 5c 22 2c 5c 22 32 66 54 41 77 51 5c 22 3a 5c 22 4c 6f 67 20 69 6e 74 6f 20 79 6f 75 72 20 65 78 69 73 74 69 6e 67 20 61 63 63 6f 75 6e 74 5c 22 2c 5c 22 31 48 41 71 30 77 5c 22 3a 5c 22 50 65 72 66 6f 72 6d 20 f0 9f a4 94 20 72 65 61 63 74 69 6f 6e 5c 22 2c 5c 22 4c 61 62 63 6c 77 5c 22 3a 5c 22 45 6e 74 65 72 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 6a 37 33 39 44 41 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 5c 22 2c 5c 22 79 53 56 55 53 67 5c 22 3a 5c 22 50 6c 65 61 73 65 20 61 67 72 65 65 20 74 6f 20 43 61 6e 76 61 e2 80 99 73 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 30 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 54 65 Data Ascii: :\"Continue\",\"2fTAwQ\":\"Log into your existing account\",\"1HAq0w\":\"Perform reaction\",\"Labclw\":\"Enter password\",\"j739DA\":\"Continue\",\"ySVUSg\":\"Please agree to Canvas <a href=\\\"{0}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	566	OUT	GET /web/fcd7f69ec08e4999.en.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:01 UTC	1353	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:01 GMT Content-Type: text/javascript Content-Length: 531 Connection: close CF-Ray: 87dd97ea2d9678e8-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 8489 Cache-Control: public, max-age=31556926 ETag: "c853c150aba81c8aa188623b263f83ab" Expires: Sat, 03 May 2025 10:32:46 GMT Last-Modified: Fri, 03 May 2024 02:16:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: YkJwr3IHK1AZdaEj+ZTIQA+x8lz4a6BTECO4ESmCQHyKObGU1iXaEt8vO5/3AFB8qPkqL7AvaQk= x-amz-replication-status: COMPLETED x-amz-request-id: 9TE0598R919CGKQW x-amz-server-side-encryption: AES256 x-amz-version-id: FtzRIqTTbv3_7AvjwOPlpydcX8znNxLM X-Content-Type-Options: nosniff
2024-05-03 04:44:01 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 6b 45 2e 6c 65 4c 79 53 46 41 45 74 6a 66 55 51 53 66 49 51 5a 55 57 54 51 43 69 45 5a 47 39 55 62 62 7a 4f 79 69 65 2e 69 6c 38 2d 31 37 31 34 37 31 31 34 34 31 2d 31 2e 30 2e 31 2e 31 2d 54 34 63 2e 32 45 39 45 33 4f 33 4c 58 59 75 46 4c 65 6a 75 77 48 6c 4f 50 50 56 7a 7a 33 54 44 69 6f 77 63 77 6e 7a 78 37 67 39 6c 61 70 66 61 6a 58 46 4e 38 62 6c 63 64 42 5f 43 62 2e 37 67 6b 38 59 75 44 6d 75 66 4d 53 77 63 4e 68 72 79 59 6e 44 4d 5a 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 30 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=kE.leLySFAEtjfUQSfIQZUWTQCiEZG9UbbzOyie.il8-1714711441-1.0.1.1-T4c.2E9E3O3LXYuFLejuwHlOPPVzz3TDiowcwnzx7g9lapfajXFN8blcdB_Cb.7gk8YuDmufMSwcNhryYnDMZw; path=/; expires=Fri, 03-May-24 05:14:01 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:01 UTC	531	IN	Data Raw: 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 7c 7c 20 7b 7d 3b 0a 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 7c 7c 20 7b 7d 2c 20 7b 22 31 35 38 22 3a 7b 22 6a 73 22 3a 5b 22 39 66 34 35 32 39 35 65 32 38 38 66 37 62 33 33 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 34 37 39 39 22 3a 7b 22 6a 73 22 3a 5b 22 63 63 66 63 39 33 66 30 39 66 31 35 39 63 66 34 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 Data Ascii: window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"4799":{"js":["ccfc93f09f159cf4.strings.js"],"css":[]},"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49713	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	571	OUT	GET /web/b8de9bd12fba5246.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:01 UTC	1355	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:01 GMT Content-Type: text/javascript Content-Length: 37338 Connection: close CF-Ray: 87dd97ea2d7e1a48-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 8489 Cache-Control: public, max-age=31556926 ETag: "6dc2772c47a72282fd040221b96e9919" Expires: Sat, 03 May 2025 10:32:46 GMT Last-Modified: Fri, 03 May 2024 02:16:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: ALBau4Fe1gRdrBBmkZTbQypW98t2x6EdloGUaGmCK8vRupRE7hC3q1mXWn1dSlH/MRsHz5JSUI0= x-amz-replication-status: COMPLETED x-amz-request-id: 9E1CF38AZNRFCZPA x-amz-server-side-encryption: AES256 x-amz-version-id: jjjRyRI45Rg9kHtk3pf4JYBTgCtypSvX X-Content-Type-Options: nosniff
2024-05-03 04:44:01 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 64 31 51 52 42 66 67 76 48 45 31 76 52 74 72 41 6f 4e 6c 63 66 4d 43 47 37 6a 2e 52 34 72 35 52 6c 49 72 48 56 6b 71 69 5f 72 38 2d 31 37 31 34 37 31 31 34 34 31 2d 31 2e 30 2e 31 2e 31 2d 41 68 56 6a 66 68 31 39 6d 54 4a 62 69 73 31 45 70 6d 4a 6c 4d 64 78 47 63 59 61 56 4e 53 76 41 34 39 71 56 6e 62 4d 31 5f 49 75 59 65 4a 74 31 74 55 74 71 2e 30 62 76 61 67 52 6b 41 44 6e 47 32 6f 73 61 36 35 70 4d 52 71 6e 79 72 46 57 51 35 4d 37 56 4f 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 30 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=d1QRBfgvHE1vRtrAoNlcfMCG7j.R4r5RlIrHVkqi_r8-1714711441-1.0.1.1-AhVjfh19mTJbis1EpmJlMdxGcYaVNSvA49qVnbM1_IuYeJt1tUtq.0bvagRkADnG2osa65pMRqnyrFWQ5M7VOg; path=/; expires=Fri, 03-May-24 05:14:01 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:01 UTC	606	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 66 2c 73 2c 6e 3d 7b 7d 2c 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 72 3d 63 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 63 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6e 2c 69 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 66 69 6e 65 20 63 61 6e 6e 6f Data Ascii: (()=>{"use strict";var e,r,t,f,s,n={},c={};function i(e){var r=c[e];if(void 0!==r)return r.exports;var t=c[e]={id:e,loaded:!1,exports:{}};return n[e].call(t.exports,t,t.exports,i),t.loaded=!0,t.exports}i.m=n,i.amdD=function(){throw new Error("define canno
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 65 5b 75 2d 31 5d 3b 65 5b 75 5d 3d 5b 74 2c 66 2c 73 5d 7d 7d 2c 69 2e 6e 3d 65 3d 3e 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 65 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 65 3b 72 65 74 75 72 6e 20 69 2e 64 28 72 2c 7b 61 3a 72 7d 29 2c 72 7d 2c 74 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 65 3d 3e 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3a 65 3d 3e 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 2c 69 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 69 66 28 31 26 66 29 65 3d 74 68 69 73 28 65 29 3b 69 66 28 38 26 66 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7b 69 66 28 34 26 66 26 26 65 2e 5f 5f 65 73 4d 6f Data Ascii: e[u-1];e[u]=[t,f,s]}},i.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return i.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,i.t=function(e,f){if(1&f)e=this(e);if(8&f)return e;if("object"==typeof e&&e){if(4&f&&e.__esMo
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 75 72 6e 22 64 38 32 65 64 61 33 37 36 62 34 34 61 32 34 39 2e 6a 73 22 3b 69 66 28 38 33 36 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 37 34 35 30 63 39 64 34 34 34 30 37 38 64 38 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 34 30 34 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 32 65 64 65 66 38 61 31 34 31 66 36 35 33 36 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 31 37 36 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 64 36 30 38 36 64 62 34 33 38 61 35 61 35 66 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 34 38 34 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 31 30 38 33 33 35 64 32 32 36 61 39 31 63 39 2e 6a 73 22 3b 69 66 28 37 37 34 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 65 33 30 37 61 30 66 62 63 33 38 61 34 32 39 2e 6a 73 22 3b 69 66 28 39 30 37 38 3d 3d Data Ascii: urn"d82eda376b44a249.js";if(8363===e)return"17450c9d444078d8.vendor.js";if(4043===e)return"02edef8a141f6536.vendor.js";if(1761===e)return"cd6086db438a5a5f.vendor.js";if(4843===e)return"7108335d226a91c9.js";if(7749===e)return"7e307a0fbc38a429.js";if(9078==
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 73 22 3b 69 66 28 38 36 33 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 64 38 39 61 36 35 39 36 32 36 61 32 64 37 63 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 36 33 39 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 35 62 39 64 65 63 31 64 36 61 64 30 65 65 37 2e 6a 73 22 3b 69 66 28 39 30 30 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 35 34 37 34 39 32 38 61 39 61 35 61 66 35 32 2e 6a 73 22 3b 69 66 28 39 35 30 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 30 37 36 39 32 32 33 31 34 63 32 65 64 35 31 2e 6a 73 22 3b 69 66 28 38 33 35 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 38 35 34 38 35 64 31 34 33 34 64 34 62 64 64 2e 6a 73 22 3b 69 66 28 31 37 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 33 39 33 64 34 63 63 38 64 65 30 61 30 61 38 2e 6a 73 22 3b 69 66 28 32 34 35 Data Ascii: s";if(8638===e)return"8d89a659626a2d7c.vendor.js";if(6399===e)return"05b9dec1d6ad0ee7.js";if(9003===e)return"95474928a9a5af52.js";if(9505===e)return"5076922314c2ed51.js";if(8354===e)return"285485d1434d4bdd.js";if(175===e)return"f393d4cc8de0a0a8.js";if(245
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 66 28 31 33 38 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 61 37 31 32 62 61 62 62 31 65 35 35 34 61 61 2e 6a 73 22 3b 69 66 28 36 31 39 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 39 36 33 31 38 31 64 31 35 35 65 33 38 65 38 2e 6a 73 22 3b 69 66 28 34 31 36 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 30 38 32 66 63 61 32 38 37 61 30 39 63 62 64 2e 6a 73 22 3b 69 66 28 31 36 31 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 66 36 31 30 35 62 33 34 38 39 64 34 64 62 32 2e 6a 73 22 3b 69 66 28 32 35 35 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 62 36 32 66 31 38 30 64 39 66 32 34 36 38 63 2e 6a 73 22 3b 69 66 28 37 39 39 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 31 37 32 32 30 65 33 65 62 38 38 30 34 39 66 2e 6a 73 22 3b 69 66 28 31 36 37 3d 3d 3d 65 29 72 65 74 75 72 Data Ascii: f(1384===e)return"1a712babb1e554aa.js";if(6191===e)return"8963181d155e38e8.js";if(4162===e)return"a082fca287a09cbd.js";if(1613===e)return"2f6105b3489d4db2.js";if(2559===e)return"1b62f180d9f2468c.js";if(7995===e)return"917220e3eb88049f.js";if(167===e)retur
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 3b 69 66 28 32 33 39 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 61 35 62 63 32 34 37 30 32 35 66 62 38 65 38 2e 6a 73 22 3b 69 66 28 33 34 31 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 62 37 30 31 35 64 36 33 63 66 34 33 33 30 65 2e 6a 73 22 3b 69 66 28 37 38 39 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 62 34 62 31 32 30 38 34 34 36 63 37 33 34 66 2e 6a 73 22 3b 69 66 28 36 35 36 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 65 66 63 39 30 64 31 62 62 64 33 37 36 64 38 2e 6a 73 22 3b 69 66 28 33 38 38 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 61 38 37 33 63 38 35 64 66 66 33 33 39 33 35 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 35 31 33 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 62 39 36 64 63 31 37 35 31 31 37 65 37 35 63 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b Data Ascii: ;if(2395===e)return"9a5bc247025fb8e8.js";if(3416===e)return"5b7015d63cf4330e.js";if(7898===e)return"fb4b1208446c734f.js";if(6564===e)return"1efc90d1bbd376d8.js";if(3884===e)return"8a873c85dff33935.vendor.js";if(5136===e)return"1b96dc175117e75c.vendor.js";
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 62 2e 6a 73 22 3b 69 66 28 31 38 32 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 33 66 63 62 36 35 30 61 35 32 33 34 31 32 37 2e 6a 73 22 3b 69 66 28 38 36 31 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 35 39 61 64 64 33 33 38 30 36 64 34 34 31 64 2e 6a 73 22 3b 69 66 28 31 33 39 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 31 33 37 38 62 64 31 30 35 36 33 33 61 32 38 2e 6a 73 22 3b 69 66 28 32 38 34 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 35 37 36 31 39 61 33 35 62 38 38 38 31 33 38 2e 6a 73 22 3b 69 66 28 33 30 39 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 34 38 34 65 63 32 63 35 38 31 66 64 34 38 64 2e 6a 73 22 3b 69 66 28 31 31 39 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 36 33 33 36 39 37 34 61 66 39 62 62 64 36 30 2e 6a 73 22 3b 69 66 28 36 35 35 34 3d 3d Data Ascii: b.js";if(1824===e)return"53fcb650a5234127.js";if(8613===e)return"259add33806d441d.js";if(1396===e)return"e1378bd105633a28.js";if(2848===e)return"457619a35b888138.js";if(3093===e)return"b484ec2c581fd48d.js";if(1198===e)return"b6336974af9bbd60.js";if(6554==
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 34 3a 31 2c 39 37 33 31 3a 31 2c 38 36 33 38 3a 31 2c 37 37 38 33 3a 31 2c 31 38 30 3a 31 2c 33 38 38 34 3a 31 2c 35 31 33 36 3a 31 2c 39 32 39 3a 31 7d 5b 65 5d 29 72 65 74 75 72 6e 22 65 66 34 36 64 62 33 37 35 31 64 38 65 39 39 39 2e 76 65 6e 64 6f 72 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 38 35 32 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 64 38 39 66 37 33 36 36 32 39 65 65 65 37 33 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 37 31 32 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 62 32 64 34 36 34 63 32 66 35 39 61 37 33 33 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 36 38 35 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 63 38 65 35 37 63 32 61 37 30 33 31 65 35 38 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 33 30 30 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 64 64 37 38 61 Data Ascii: 4:1,9731:1,8638:1,7783:1,180:1,3884:1,5136:1,929:1}[e])return"ef46db3751d8e999.vendor.ltr.css";if(8527===e)return"6d89f736629eee73.ltr.css";if(7122===e)return"5b2d464c2f59a733.ltr.css";if(6852===e)return"3c8e57c2a7031e58.ltr.css";if(3007===e)return"fdd78a
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 22 63 61 31 30 33 38 35 61 62 37 66 33 36 35 37 63 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 33 32 39 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 36 36 65 30 33 39 65 39 39 33 31 64 64 38 36 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 36 33 33 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 33 31 64 39 38 66 35 33 63 64 66 34 34 31 36 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 34 39 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 38 36 37 38 66 35 64 32 61 34 39 36 38 39 36 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 39 30 32 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 65 64 36 31 61 34 39 66 64 66 63 35 31 33 62 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 31 36 31 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 62 32 32 34 31 64 38 38 35 39 31 39 63 30 37 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 Data Ascii: "ca10385ab7f3657c.ltr.css";if(3294===e)return"f66e039e9931dd86.ltr.css";if(6331===e)return"a31d98f53cdf4416.ltr.css";if(5499===e)return"f8678f5d2a496896.ltr.css";if(9025===e)return"aed61a49fdfc513b.ltr.css";if(1613===e)return"5b2241d885919c07.ltr.css";if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	570	OUT	GET /web/b6298cf502cc13d0.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:01 UTC	1359	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:01 GMT Content-Type: text/javascript Content-Length: 419791 Connection: close CF-Ray: 87dd97ea1adcc434-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 2078843 Cache-Control: public, max-age=31556926 ETag: "fb1d64bba87e75a7bfc4fa3e0e8f6790" Expires: Sat, 03 May 2025 10:32:46 GMT Last-Modified: Tue, 09 Apr 2024 03:09:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 10 Apr 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: lkD1xz0IxaRLqKkL7LfLmWz1m1ElYiWNXlJOVFwM1Kggvkg9pN4UXk/qE1pcehL9DWPut7bI9dY= x-amz-replication-status: COMPLETED x-amz-request-id: 9RDD9SJKTJ8Q4GNC x-amz-server-side-encryption: AES256 x-amz-version-id: _xpjkT1eqs9hG9y3WLQIGSdde1RE7C0J X-Content-Type-Options: nosniff
2024-05-03 04:44:01 UTC	781	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 7a 4b 71 58 6c 42 77 30 58 78 6a 51 6c 58 77 56 48 6f 6c 57 43 53 5a 64 64 31 70 77 61 48 2e 67 62 64 79 77 77 34 49 43 78 68 34 2d 31 37 31 34 37 31 31 34 34 31 2d 31 2e 30 2e 31 2e 31 2d 4f 50 46 43 68 74 7a 72 41 69 48 4c 6c 73 48 6a 48 52 77 6b 51 56 56 52 69 35 6c 56 75 67 47 33 4c 56 6c 4a 57 6a 49 56 7a 59 63 38 52 39 67 37 7a 48 4b 46 43 68 33 45 5f 76 68 50 41 5f 4a 44 32 58 68 4b 75 6d 32 39 49 78 31 5a 61 44 63 6d 38 77 45 48 4d 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 30 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=zKqXlBw0XxjQlXwVHolWCSZdd1pwaH.gbdyww4ICxh4-1714711441-1.0.1.1-OPFChtzrAiHLlsHjHRwkQVVRi5lVugG3LVlJWjIVzYc8R9g7zHKFCh3E_vhPA_JD2XhKum29Ix1ZaDcm8wEHMQ; path=/; expires=Fri, 03-May-24 05:14:01 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:01 UTC	598	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 36 32 39 38 63 66 35 30 32 63 63 31 33 64 30 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 37 31 30 36 36 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 6e 2e 67 2c 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 66 75 6e 63 74 69 6f Data Ascii: /! For license information please see b6298cf502cc13d0.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{710665:(e,t,n)=>{!function(){var e="undefined"!=typeof window?window:n.g,r={};for(var i in functio
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 65 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 5d 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 72 29 7b 76 61 72 20 69 3d 6e 5b 72 5d 3b 69 66 28 69 26 26 69 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 74 68 69 73 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 74 29 65 3a 7b 76 61 72 20 6e 3d 73 3b 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 72 5d Data Ascii: e,"object"==typeof self&&self,"object"==typeof t&&t];for(var r=0;r<n.length;++r){var i=n[r];if(i&&i.Math==Math)return i}throw Error("Cannot find global object")}(this);function u(e,t){if(t)e:{var n=s;e=e.split(".");for(var r=0;r<e.length-1;r++){var i=e[r]
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 65 7d 29 29 3b 76 61 72 20 66 2c 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2c 6e 65 77 20 74 7d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 70 3b 65 3a 7b 76 61 72 Data Ascii: ritable:!0,value:function(){return c(a(this))}})}return e}));var f,d="function"==typeof Object.create?Object.create:function(e){function t(){}return t.prototype=e,new t};if("function"==typeof Object.setPrototypeOf)f=Object.setPrototypeOf;else{var p;e:{var
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 69 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 69 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 65 2e 67 2e 6f 3d 21 31 2c 69 3b 76 61 72 20 61 3d 69 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 6f 29 7b 72 65 74 75 72 6e 20 65 2e 67 2e 6c 3d 6e 75 6c 6c 2c 77 28 65 2e 67 2c 6f 29 2c 4d 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 67 2e 6c 3d 6e 75 6c 6c 2c 72 2e 63 61 6c 6c 28 65 2e 67 2c 61 29 2c 4d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 66 6f 72 28 3b 65 2e 67 2e 67 3b 29 74 72 79 7b 76 61 72 20 74 3d 65 2e 68 28 65 2e 67 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 65 2e 67 2e 6f 3d 21 31 2c 7b 76 61 6c 75 65 3a 74 2e 76 61 6c 75 65 2c 64 6f Data Ascii: ypeError("Iterator result "+i+" is not an object");if(!i.done)return e.g.o=!1,i;var a=i.value}catch(o){return e.g.l=null,w(e.g,o),M(e)}return e.g.l=null,r.call(e.g,a),M(e)}function M(e){for(;e.g.g;)try{var t=e.h(e.g);if(t)return e.g.o=!1,{value:t.value,do
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 72 65 3a 2d 31 2c 76 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 6e 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 6e 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 Data Ascii: re:-1,v:void 0}}function O(e,t,n){if(null==e)throw new TypeError("The 'this' value for String.prototype."+n+" must not be null or undefined");if(t instanceof RegExp)throw new TypeError("First argument to String.prototype."+n+" must not be a regular expres
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 65 28 74 68 69 73 2e 44 29 2c 72 65 6a 65 63 74 3a 65 28 74 68 69 73 2e 6c 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6c 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 74 68 69 73 2e 49 28 65 29 3b 65 6c 73 65 7b 65 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 65 29 7b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 65 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 22 66 75 6e 63 74 69 6f 6e 22 3a 6e 3d 21 30 3b 62 72 65 61 Data Ascii: urn{resolve:e(this.D),reject:e(this.l)}},t.prototype.D=function(e){if(e===this)this.l(new TypeError("A Promise cannot resolve to itself"));else if(e instanceof t)this.I(e);else{e:switch(typeof e){case"object":var n=null!=e;break e;case"function":n=!0;brea
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 6a 28 29 3b 74 72 79 7b 65 2e 63 61 6c 6c 28 74 2c 6e 2e 72 65 73 6f 6c 76 65 2c 6e 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 72 29 7b 6e 2e 72 65 6a 65 63 74 28 72 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 28 65 28 74 29 29 7d 63 61 74 63 68 28 6e 29 7b 61 28 6e 29 7d 7d 3a 74 7d 76 61 72 20 69 2c 61 2c 6f 3d 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 3d 65 2c 61 3d 74 7d 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 7a 63 28 72 28 65 2c 69 29 2c 72 Data Ascii: t){var n=this.j();try{e.call(t,n.resolve,n.reject)}catch(r){n.reject(r)}},t.prototype.then=function(e,n){function r(e,t){return"function"==typeof e?function(t){try{i(e(t))}catch(n){a(n)}}:t}var i,a,o=new t((function(e,t){i=e,a=t}));return this.zc(r(e,i),r
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 7b 69 66 28 21 65 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 72 3d 6e 65 77 20 65 28 5b 5b 74 2c 32 5d 2c 5b 6e 2c 33 5d 5d 29 3b 72 65 74 75 72 6e 20 32 3d 3d 72 2e 67 65 74 28 74 29 26 26 33 3d 3d 72 2e 67 65 74 28 6e 29 26 26 28 72 2e 64 65 6c 65 74 65 28 74 29 2c 72 2e 73 65 74 28 6e 2c 34 29 2c 21 72 2e 68 61 73 28 74 29 26 26 34 3d 3d 72 2e 67 65 74 28 6e 29 29 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 73 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 61 28 22 66 72 65 65 7a Data Ascii: {if(!e\|\|!Object.seal)return!1;try{var t=Object.seal({}),n=Object.seal({}),r=new e([[t,2],[n,3]]);return 2==r.get(t)&&3==r.get(n)&&(r.delete(t),r.set(n,4),!r.has(t)&&4==r.get(n))}catch(i){return!1}}())return e;var s="$jscomp_hidden_"+Math.random();a("freez
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6e 3d 6e 65 77 20 65 28 6c 28 5b 5b 74 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6e 2e 67 65 74 28 74 29 7c 7c 31 21 3d 6e 2e 73 69 7a 65 7c 7c 6e 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6e 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6e 7c 7c 32 21 3d 6e 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 6e 2e 65 6e 74 72 69 65 73 28 29 2c 69 3d 72 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 21 69 2e 64 Data Ascii: unction"!=typeof e\|\|!e.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var t=Object.seal({x:4}),n=new e(l([[t,"s"]]));if("s"!=n.get(t)\|\|1!=n.size\|\|n.get({x:4})\|\|n.set({x:4},"t")!=n\|\|2!=n.size)return!1;var r=n.entries(),i=r.next();return!i.d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49715	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	570	OUT	GET /web/e113aa3e935a6b0d.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:01 UTC	1354	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:01 GMT Content-Type: text/javascript Content-Length: 209528 Connection: close CF-Ray: 87dd97ea2b004339-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 8688 Cache-Control: public, max-age=31556926 ETag: "84c7118e873bf57f4460bf7e0b13f3b3" Expires: Sat, 03 May 2025 10:32:47 GMT Last-Modified: Fri, 03 May 2024 02:16:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: i2MQJoQxxTmMh2gJuFF7pcf0J4iOf6ZXdkOmJdSz5pd1MKD58OxYNDyBTNXglBr4z3j2D4n9d8s= x-amz-replication-status: PENDING x-amz-request-id: GEB6MS93KYGQHYV2 x-amz-server-side-encryption: AES256 x-amz-version-id: Qt2jIOty1ghGpxRSvn.tlD1cqvTHQkIq X-Content-Type-Options: nosniff
2024-05-03 04:44:01 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 70 33 38 30 43 35 72 58 51 65 34 64 4c 4b 4c 56 36 55 62 6a 55 39 31 68 4a 61 4d 64 30 70 37 4c 37 62 59 47 53 6e 32 46 58 65 6f 2d 31 37 31 34 37 31 31 34 34 31 2d 31 2e 30 2e 31 2e 31 2d 67 71 4e 56 47 4c 64 65 45 74 35 38 58 34 70 57 61 49 42 51 54 69 6f 78 50 70 55 35 31 64 48 4a 41 4b 6b 74 65 56 4d 68 71 33 33 54 47 53 36 57 78 65 49 6a 64 37 33 4f 49 69 5a 7a 6f 61 70 76 32 54 5f 55 34 71 53 35 32 4e 34 71 51 76 63 37 62 4a 36 5a 5f 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 30 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=p380C5rXQe4dLKLV6UbjU91hJaMd0p7L7bYGSn2FXeo-1714711441-1.0.1.1-gqNVGLdeEt58X4pWaIBQTioxPpU51dHJAKkteVMhq33TGS6WxeIjd73OIiZzoapv2T_U4qS52N4qQvc7bJ6Z_A; path=/; expires=Fri, 03-May-24 05:14:01 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:01 UTC	605	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 65 31 31 33 61 61 33 65 39 33 35 61 36 62 30 64 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 36 38 37 34 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 51 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 6e 28 33 38 36 37 32 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 65 2e 72 65 Data Ascii: /! For license information please see e113aa3e935a6b0d.vendor.js.LICENSE.txt /"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{68743:(e,t,n)=>{n.d(t,{Q:()=>a});var r=n(38672);function a(e){var t=e.children,n=e.re
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 3d 3e 7b 6e 2e 64 28 74 2c 7b 50 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 72 2c 61 2c 69 3d 6e 28 36 36 37 32 39 34 29 2c 6f 3d 6e 28 33 39 31 33 36 37 29 2c 6c 3d 6e 28 33 38 36 37 32 29 2c 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 2c 73 3d 6e 75 6c 6c 21 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 22 6e 61 6d 65 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 63 3d 75 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f Data Ascii: =>{n.d(t,{P:()=>d});var r,a,i=n(667294),o=n(391367),l=n(38672),u="function"==typeof Symbol&&Symbol.for,s=null!==(a=null===(r=Object.getOwnPropertyDescriptor((function(){}),"name"))\|\|void 0===r?void 0:r.configurable)&&void 0!==a&&a,c=u?Symbol.for("react.fo
2024-05-03 04:44:01 UTC	935	IN	Data Raw: 2c 72 65 6e 64 65 72 3a 21 30 2c 63 6f 6d 70 61 72 65 3a 21 30 2c 74 79 70 65 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 7d 7d 2c 33 39 31 33 36 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 44 3a 28 29 3d 3e 61 2c 46 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 2c 35 34 38 34 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 31 36 38 39 34 39 29 2c 61 3d 6e 28 36 36 37 32 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 74 3d 28 30 2c 61 2e 75 73 65 53 74 61 74 65 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: ,render:!0,compare:!0,type:!0,displayName:!0}},391367:(e,t,n)=>{n.d(t,{D:()=>a,F:()=>i});var r=!1;function a(e){r=e}function i(){return r}},548495:(e,t,n)=>{n.d(t,{A:()=>i});var r=n(168949),a=n(667294);function i(e){var t=(0,a.useState)((function(){return
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 43 68 61 6e 67 65 3a 6e 75 6c 6c 2c 73 74 61 74 65 56 65 72 73 69 6f 6e 3a 53 79 6d 62 6f 6c 28 29 2c 6e 61 6d 65 3a 74 2c 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 2e 4f 2e 75 6e 72 65 67 69 73 74 65 72 28 72 29 2c 72 2e 6f 6e 53 74 6f 72 65 43 68 61 6e 67 65 3d 65 2c 72 2e 72 65 61 63 74 69 6f 6e 7c 7c 28 73 28 72 29 2c 72 2e 73 74 61 74 65 56 65 72 73 69 6f 6e 3d 53 79 6d 62 6f 6c 28 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 2e 6f 6e 53 74 6f 72 65 43 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 72 2e 72 65 61 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 2e 64 69 73 70 6f 73 65 28 29 2c 72 2e 72 65 61 63 74 69 6f 6e 3d 6e 75 6c 6c 7d 7d 2c 67 65 74 Data Ascii: Change:null,stateVersion:Symbol(),name:t,subscribe:function(e){return l.O.unregister(r),r.onStoreChange=e,r.reaction\|\|(s(r),r.stateVersion=Symbol()),function(){var e;r.onStoreChange=null,null===(e=r.reaction)\|\|void 0===e\|\|e.dispose(),r.reaction=null}},get
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 28 29 7b 74 2e 73 77 65 65 70 28 30 29 7d 7d 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 67 69 73 74 65 72 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 73 2e 73 65 74 28 6e 2c 7b 76 61 6c 75 65 3a 74 2c 72 65 67 69 73 74 65 72 65 64 41 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 29 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 53 77 65 65 70 28 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 75 6e Data Ascii: (){t.sweep(0)}})}return Object.defineProperty(e.prototype,"register",{enumerable:!1,configurable:!0,writable:!0,value:function(e,t,n){this.registrations.set(n,{value:t,registeredAt:Date.now()}),this.scheduleSweep()}}),Object.defineProperty(e.prototype,"un
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 66 28 6c 28 65 2c 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 21 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 69 66 28 21 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 5b 61 5d 29 7c 7c 21 6c 28 65 5b 6e 5b 61 5d 5d 2c 74 5b 6e 5b 61 5d 5d 29 29 72 65 74 75 72 6e 21 31 3b Data Ascii: f(l(e,t))return!0;if("object"!=typeof e\|\|null===e\|\|"object"!=typeof t\|\|null===t)return!1;var n=Object.keys(e),r=Object.keys(t);if(n.length!==r.length)return!1;for(var a=0;a<n.length;a++)if(!Object.hasOwnProperty.call(t,n[a])\|\|!l(e[n[a]],t[n[a]]))return!1;
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 6d 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 74 3d 65 5b 68 5d 29 3f 74 3a 65 5b 68 5d 3d 7b 72 65 61 63 74 69 6f 6e 3a 6e 75 6c 6c 2c 6d 6f 75 6e 74 65 64 3a 21 31 2c 72 65 61 63 74 69 6f 6e 49 6e 76 61 6c 69 64 61 74 65 64 42 65 66 6f 72 65 4d 6f 75 6e 74 3a 21 31 2c 66 6f 72 63 65 55 70 64 61 74 65 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 67 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 2c 73 74 61 74 65 3a 76 6f 69 64 20 30 2c 70 72 6f 70 73 3a 76 6f 69 64 20 30 2c 63 6f 6e 74 65 78 74 3a 76 6f 69 64 20 30 2c 70 72 6f 70 73 41 74 6f 6d 3a 28 30 2c 72 2e 63 70 29 28 22 70 72 6f 70 73 22 29 2c 73 74 61 74 65 41 74 6f 6d 3a 28 30 2c 72 2e 63 70 29 28 22 73 74 61 74 65 22 29 2c 63 6f 6e 74 65 78 74 41 74 6f 6d 3a 28 30 2c 72 2e 63 70 Data Ascii: m(e){var t;return null!=(t=e[h])?t:e[h]={reaction:null,mounted:!1,reactionInvalidatedBeforeMount:!1,forceUpdate:null,name:g(e.constructor),state:void 0,props:void 0,context:void 0,propsAtom:(0,r.cp)("props"),stateAtom:(0,r.cp)("state"),contextAtom:(0,r.cp
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 6f 72 74 43 68 61 6e 67 65 64 28 29 2c 72 2e 69 73 55 70 64 61 74 69 6e 67 3d 21 31 29 7d 7d 7d 76 61 72 20 77 3d 5f 28 22 70 72 6f 70 73 22 29 2c 6b 3d 5f 28 22 73 74 61 74 65 22 29 2c 53 3d 5f 28 22 63 6f 6e 74 65 78 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 69 66 28 74 26 26 22 63 6c 61 73 73 22 21 3d 3d 74 2e 6b 69 6e 64 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 40 6f 62 73 65 72 76 65 72 20 64 65 63 6f 72 61 74 6f 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 63 6c 61 73 73 65 73 20 6f 6e 6c 79 22 29 3b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 69 73 4d 6f 62 78 49 6e 6a 65 63 74 6f 72 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 4d 6f 62 78 20 6f 62 73 65 72 76 65 72 3a 20 59 6f 75 20 61 72 65 20 74 72 Data Ascii: ortChanged(),r.isUpdating=!1)}}}var w=_("props"),k=_("state"),S=_("context");function x(e,t){if(t&&"class"!==t.kind)throw new Error("The @observer decorator can be used on classes only");return!0===e.isMobxInjector&&console.warn("Mobx observer: You are tr
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 31 2c 76 61 6c 75 65 3a 28 30 2c 69 2e 46 59 29 28 29 3f 72 3a 79 2e 63 61 6c 6c 28 74 68 69 73 2c 72 29 7d 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 28 29 7d 2c 64 28 74 2c 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 6d 28 74 68 69 73 29 3b 74 2e 6d 6f 75 6e 74 65 64 3d 21 30 2c 69 2e 6a 64 2e 75 6e 72 65 67 69 73 74 65 72 28 74 68 69 73 29 2c 74 2e 66 6f 72 63 65 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6f 72 63 65 55 70 64 61 74 65 28 29 7d 2c 74 2e 72 65 61 63 74 69 6f 6e 26 26 21 74 2e 72 65 61 63 74 69 6f 6e 49 6e 76 61 6c 69 64 61 74 65 64 42 65 Data Ascii: onfigurable:!1,writable:!1,value:(0,i.FY)()?r:y.call(this,r)}),this.render()},d(t,"componentDidMount",(function(){var e=this,t=m(this);t.mounted=!0,i.jd.unregister(this),t.forceUpdate=function(){return e.forceUpdate()},t.reaction&&!t.reactionInvalidatedBe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49719	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	795	OUT	GET /static/lib/sentry/7.16.0.min.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:01 UTC	1355	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87dd97ea2db04400-EWR CF-Cache-Status: HIT Age: 4358640 Cache-Control: public, max-age=31556926 ETag: W/"ba9c619e1ba6a9272c44084a93375283" Expires: Sat, 03 May 2025 10:32:46 GMT Last-Modified: Wed, 01 Nov 2023 23:04:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-id-2: w0+Z5O5Px+ZE6oHyOfteJbcAd8aLVAIKZRaFcKAkgBG4PfZgU5TPU1rul1RP9J3x+aDjeJ29M0w= x-amz-meta-vary: Origin x-amz-replication-status: COMPLETED x-amz-request-id: KYRGWCA4J46TP2TD x-amz-server-side-encryption: AES256 x-amz-version-id: kFCDbB.azfiZLQfhBYb8Gboqeqt3J2PO X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2FbOnhn0se0FNX2ds2s8%2FDQBYaxzjI%2FdTp86JXd82V807hf%2BE4TrEIip21MfIEZAGnJn4t1LLAZfwDhO907PIMLF10ztVolkKneygNQA510QQBMMlizXbgYTAK%2FKqaKZhIo%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:01 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 31 63 66 31 0d 0a 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 31 36 2e 30 20 28 35 33 38 36 63 65 37 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e Data Ascii: 1cf1/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 72 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 66 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 66 26 26 66 2e 6c 65 6e 67 74 68 29 66 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 72 2e 70 75 73 68 28 60 5b 24 7b 74 5b 30 5d 7d 3d 22 24 7b 74 5b 31 5d 7d 22 5d 60 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 65 2e 69 64 26 26 72 2e 70 75 73 68 28 60 23 24 7b 65 2e 69 64 7d 60 29 2c 69 Data Ascii: ,s,c,u,a;if(!e\|\|!e.tagName)return"";r.push(e.tagName.toLowerCase());const f=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(f&&f.length)f.forEach((t=>{r.push(`[${t[0]}="${t[1]}"]`)}));else if(e.id&&r.push(`#${e.id}`),i
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 6f 2c 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 72 7d 29 7d 28 74 29 3a 77 28 74 29 7d 63 6f 6e 73 74 20 53 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b Data Ascii: o,protocol:e,publicKey:r})}(t):w(t)}const S=["debug","info","warn","error","log","assert","trace"];function $(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function x(t,n){if(!Array.isArray(t))return"";const e=[];for(let n=0;
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 52 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 24 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 69 66 28 21 28 72 2e 6c 65 6e 67 74 68 3e 6e 29 29 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 72 3a 24 28 72 2c 6e 29 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 74 2c 6e 65 77 20 Data Ascii: onst e=Object.keys(R(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return $(e[0],n);for(let t=e.length;t>0;t--){const r=e.slice(0,t).join(", ");if(!(r.length>n))return t===e.length?r:$(r,n)}return""}function N(t){return A(t,new
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 5c 73 2b 5c 7d 24 2f 2e 74 65 73 74 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 6f 6e 73 74 20 46 3d 7b 7d 2c 42 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 69 66 28 21 42 5b 74 5d 29 73 77 69 74 63 68 28 42 5b 74 5d 3d 21 30 2c 74 29 7b 63 61 73 65 22 63 6f 6e 73 6f 6c 65 22 3a 21 Data Ascii: urn new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function H(t){return t&&/^function fetch\s+\{\s+\[native code\]\s+\}$/.test(t.toString())}const F={},B={};function X(t){if(!B[t])switch(B[t]=!0,t){case"console":!
2024-05-03 04:44:01 UTC	572	IN	Data Raw: 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 79 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 6b 28 74 2c 22 6f 70 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2c 72 3d 6e 5b 31 5d 2c 69 3d 65 2e 5f 5f 73 65 6e 74 72 79 5f 78 68 Data Ascii: try_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,r)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in y))return;const t=XMLHttpRequest.prototype;k(t,"open",(function(t){return function(...n){const e=this,r=n[1],i=e.__sentry_xh
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3f 6b 28 65 2c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 72 65 74 75 72 6e 20 73 28 29 2c 74 2e 61 70 70 6c 79 28 65 2c 6e 29 7d 7d 29 29 3a 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 73 29 2c 74 2e 61 70 70 6c 79 28 65 2c 6e 29 7d 7d 29 29 2c 6b 28 74 2c 22 73 65 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 Data Ascii: 7ffa&&"function"==typeof e.onreadystatechange?k(e,"onreadystatechange",(function(t){return function(...n){return s(),t.apply(e,n)}})):e.addEventListener("readystatechange",s),t.apply(e,n)}})),k(t,"send",(function(t){return function(...n){return this.__s
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 6e 29 7d 7d 79 2e 6f 6e 70 6f 70 73 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 79 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 72 3d 47 3b 69 66 28 47 3d 65 2c 57 28 22 68 69 73 74 6f 72 79 22 2c 7b 66 72 6f 6d 3a 72 2c 74 6f 3a 65 7d 29 2c 74 29 74 72 79 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 6b 28 79 2e 68 69 73 74 6f 72 79 2c 22 70 75 73 68 53 74 61 74 65 22 2c 6e 29 2c 6b 28 79 2e 68 69 73 74 6f 72 79 2c 22 72 65 70 6c 61 63 65 53 74 61 74 65 22 2c 6e 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 65 72 72 6f 72 22 3a 5a 3d 79 2e 6f 6e 65 72 72 6f 72 2c 79 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f Data Ascii: t.apply(this,n)}}y.onpopstate=function(...n){const e=y.location.href,r=G;if(G=e,W("history",{from:r,to:e}),t)try{return t.apply(this,n)}catch(t){}},k(y.history,"pushState",n),k(y.history,"replaceState",n)}();break;case"error":Z=y.onerror,y.onerror=functio
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 6d 65 3a 72 2c 67 6c 6f 62 61 6c 3a 6e 7d 29 2c 51 3d 65 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 56 29 2c 56 3d 79 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 56 3d 76 6f 69 64 20 30 7d 29 2c 31 65 33 29 7d 7d 6c 65 74 20 5a 3d 6e 75 6c 6c 3b 6c 65 74 20 74 74 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 6e 74 28 29 7b 63 6f 6e 73 74 20 74 3d 64 2c 6e 3d 74 2e 63 72 79 70 74 6f 7c 7c 74 2e 6d 73 43 72 79 70 74 6f 3b 69 66 28 6e 26 26 6e 2e 72 61 6e 64 6f 6d 55 55 49 44 29 72 65 74 75 72 6e 20 6e 2e 72 61 6e 64 6f 6d 55 55 49 44 28 29 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 22 29 3b 63 6f 6e 73 74 20 65 3d 6e 26 26 6e 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 3f 28 29 3d 3e 6e 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e Data Ascii: me:r,global:n}),Q=e),clearTimeout(V),V=y.setTimeout((()=>{V=void 0}),1e3)}}let Z=null;let tt=null;function nt(){const t=d,n=t.crypto\|\|t.msCrypto;if(n&&n.randomUUID)return n.randomUUID().replace(/-/g,"");const e=n&&n.getRandomValues?()=>n.getRandomValues(n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	104.16.80.73	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:00 UTC	614	OUT	GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:01 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:01 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19261 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.4.0" Last-Modified: Tue, 23 Apr 2024 12:12:17 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 87dd97ea8dc54361-EWR
2024-05-03 04:44:01 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 6e 7c 7c 30 2c 72 3d 74 3b 72 65 74 75 72 6e 5b 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 72 5b 65 5b 69 2b 2b 5d 5d 2c 22 2d 22 2c 72 5b 65 5b 69 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var i=n\|\|0,r=t;return[r[e[i++]],r[e[i++]],r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i++]],r[e[i++]],"-",r[e[i+
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 72 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|r(a)}},168:function(e,t,n){"use strict";var i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arg
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d Data Ascii: .getAttribute("src");if(g&&"function"==typeof URLSearchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6d 29 26 26 6d 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6c 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 6c 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 6c 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 6c 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 6c 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 6c 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 6c 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 6c 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 6c 29 3b 72 65 74 75 72 6e 20 6c 2e 66 69 72 73 74 50 61 69 6e 74 3d 5f 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 6c 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 5f 28 Data Ascii: &&Array.isArray(m)&&m.length>0&&(l.timingsV2={},l.versions.timings=2,l.dt=m[0].deliveryType,delete l.timings,t(m[0],l.timingsV2))}1===l.versions.timings&&t(c,l.timings),t(u,l.memory)}else O(l);return l.firstPaint=_("first-paint"),l.firstContentfulPaint=_(
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 50 29 3a 50 28 29 2c 77 3d 7b 69 64 3a 64 2c 75 72 6c 3a 65 28 29 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 74 72 69 67 67 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 41 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 41 29 7d 29 29 3b 76 61 72 20 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 64 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 78 3d Data Ascii: P):P(),w={id:d,url:e(),ts:(new Date).getTime(),triggered:!0}};"complete"===window.document.readyState?A():window.addEventListener("load",(function(){window.setTimeout(A)}));var R=function(){return L&&0===v.filter((function(e){return e.id===d})).length},x=
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 2e 75 72 6c 2c 45 2e 6c 63 70 2e 72 6c 64 3d 63 2e 72 65 73 6f 75 72 63 65 4c 6f 61 64 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 72 6c 74 3d 63 2e 72 65 73 6f 75 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 Data Ascii: .url,E.lcp.rld=c.resourceLoadDelay,E.lcp.rlt=c.resourceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(r=c.lcpResourceEntry)\|\|void 0===r?void 0:r.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?voi
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 67 65 6e 74 29 74 72 79 7b 76 61 72 20 63 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 63 26 26 63 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 65 22 29 3e 2d 31 26 26 70 61 72 73 65 49 6e 74 28 63 5b 31 5d 29 3c 38 31 26 26 28 61 3d 21 31 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 61 26 26 69 29 7b 74 2e 73 74 3d 31 3b 76 61 72 20 75 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2c 73 3d 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e Data Ascii: gent)try{var c=navigator.userAgent.match(/Chrome\/([0-9]+)/);c&&c[0].toLowerCase().indexOf("chrome")>-1&&parseInt(c[1])<81&&(a=!1)}catch(e){}if(navigator&&"function"==typeof navigator.sendBeacon&&a&&i){t.st=1;var u=JSON.stringify(t),s=navigator.sendBeacon
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 22 3b 74 72 79 7b 66 6f 72 28 3b 65 26 26 39 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 29 7b 76 61 72 20 69 3d 65 2c 72 3d 69 2e 69 64 3f 22 23 22 2b 69 2e 69 64 3a 75 28 69 29 2b 28 69 2e 63 6c 61 73 73 4c 69 73 74 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 3f 22 2e 22 2b 69 2e 63 6c 61 73 73 4c 69 73 74 2e 76 61 6c 75 Data Ascii: e.nodeType?t.toLowerCase():t.toUpperCase().replace(/^#/,"")},s=function(e,t){var n="";try{for(;e&&9!==e.nodeType;){var i=e,r=i.id?"#"+i.id:u(i)+(i.classList&&i.classList.value&&i.classList.value.trim()&&i.classList.value.trim().length?"."+i.classList.valu
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 64 73 2d 69 6d 70 72 6f 76 65 6d 65 6e 74 22 3a 22 67 6f 6f 64 22 7d 28 74 2e 76 61 6c 75 65 2c 6e 29 2c 65 28 74 29 29 7d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 7d 29 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 70 61 67 65 68 69 64 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 65 28 74 29 7d 3b 61 64 64 45 76 65 6e 74 4c Data Ascii: ds-improvement":"good"}(t.value,n),e(t))}},y=function(e){requestAnimationFrame((function(){return requestAnimationFrame((function(){return e()}))}))},h=function(e){var t=function(t){"pagehide"!==t.type&&"hidden"!==document.visibilityState\|\|e(t)};addEventL
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 69 2e 74 69 6d 65 53 74 61 6d 70 2c 6e 28 21 30 29 7d 29 29 7d 29 29 29 7d 29 29 7d 2c 52 3d 5b 2e 31 2c 2e 32 35 5d 2c 78 3d 7b 70 61 73 73 69 76 65 3a 21 30 2c 63 61 70 74 75 72 65 3a 21 30 7d 2c 46 3d 6e 65 77 20 44 61 74 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 7c 7c 28 74 3d 72 2c 6e 3d 65 2c 69 3d 6e 65 77 20 44 61 74 65 2c 4d 28 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 2c 4f 28 29 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 3e 3d 30 26 26 6e 3c 69 2d 46 29 7b 76 61 72 20 65 3d 7b 65 6e 74 72 79 54 79 70 65 3a 22 66 69 72 73 74 2d 69 6e Data Ascii: ortAllChanges),y((function(){r.value=performance.now()-i.timeStamp,n(!0)}))})))}))},R=[.1,.25],x={passive:!0,capture:!0},F=new Date,I=function(e,r){t\|\|(t=r,n=e,i=new Date,M(removeEventListener),O())},O=function(){if(n>=0&&n<i-F){var e={entryType:"first-in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:01 UTC	563	OUT	GET /web/873aa379081c784a.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:01 UTC	1356	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:01 GMT Content-Type: text/javascript Content-Length: 143061 Connection: close CF-Ray: 87dd97ed1fa58cc6-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 8490 Cache-Control: public, max-age=31556926 ETag: "67a8c56e6c3cad69e56699c9d86991a4" Expires: Sat, 03 May 2025 10:32:47 GMT Last-Modified: Fri, 03 May 2024 02:16:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Ipz6t5tuIcsNe5aFchLr/F29+FX5ou9RCpMRRloN+Y+kypbWkJLk8YIlmhL7ddCvrv7Mhx3pNyo= x-amz-replication-status: COMPLETED x-amz-request-id: 9E1FWHW9S6RXN1EZ x-amz-server-side-encryption: AES256 x-amz-version-id: W.3ikfhjIqGmKKiF6D7LpZbI0PP4xw9T X-Content-Type-Options: nosniff
2024-05-03 04:44:01 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 65 39 74 74 6e 35 35 64 70 30 4a 41 5a 67 63 39 6e 57 65 64 6b 6c 43 73 38 59 6f 79 38 61 78 56 7a 50 71 57 56 39 47 74 4a 5f 73 2d 31 37 31 34 37 31 31 34 34 31 2d 31 2e 30 2e 31 2e 31 2d 74 51 35 35 5f 38 35 59 44 52 48 2e 31 2e 64 69 4a 79 74 46 33 43 62 4c 62 4b 58 4a 65 78 44 62 41 45 65 35 30 76 45 71 34 52 38 6c 36 79 44 79 47 4d 55 58 49 6f 6f 74 6d 51 6c 48 6c 6e 33 57 62 30 5f 49 5a 63 4e 76 52 64 74 65 44 64 33 6b 68 53 47 73 32 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 30 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=e9ttn55dp0JAZgc9nWedklCs8Yoy8axVzPqWV9GtJ_s-1714711441-1.0.1.1-tQ55_85YDRH.1.diJytF3CbLbKXJexDbAEe50vEq4R8l6yDyGMUXIootmQlHln3Wb0_IZcNvRdteDd3khSGs2A; path=/; expires=Fri, 03-May-24 05:14:01 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:01 UTC	603	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 31 33 31 31 30 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 34 35 66 37 38 35 33 64 63 37 36 36 30 33 37 38 61 30 33 38 39 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{/***/ 813110:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._45f7853dc7660378a0389
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 41 3b 76 61 72 20 61 64 3b 76 61 72 20 4b 3b 76 61 72 20 4d 3b 76 61 72 20 45 64 3b 76 61 72 20 53 61 3b 76 61 72 20 52 61 3b 76 61 72 20 51 3b 76 61 72 20 47 3b 76 61 72 20 4a 3b 76 61 72 20 64 61 3b 76 61 72 20 6e 64 3b 76 61 72 20 4a 63 3b 76 61 72 20 48 63 3b 76 61 72 20 7a 63 3b 76 61 72 20 72 63 3b 76 61 72 20 6e 62 3b 76 61 72 20 77 3b 76 61 72 20 65 62 3b 76 61 72 20 4d 61 3b 76 61 72 20 7a 3b 76 61 72 20 74 3b 0a 76 61 72 20 61 61 61 2c 6a 61 2c 6b 61 2c 6d 61 2c 75 61 2c 63 61 61 2c 66 61 61 2c 65 61 61 2c 64 61 61 2c 67 61 61 2c 68 61 61 2c 69 61 61 2c 47 61 2c 4a 61 2c 4b 61 2c 4e 61 2c 50 61 2c 55 61 2c 61 62 2c 5a 61 2c 56 61 2c 57 61 2c 58 61 2c 59 61 2c 24 61 2c 62 62 2c 6a 61 61 2c 70 62 2c 78 62 2c 6f 61 61 2c 73 61 61 2c 72 61 61 2c 74 Data Ascii: A;var ad;var K;var M;var Ed;var Sa;var Ra;var Q;var G;var J;var da;var nd;var Jc;var Hc;var zc;var rc;var nb;var w;var eb;var Ma;var z;var t;var aaa,ja,ka,ma,ua,caa,faa,eaa,daa,gaa,haa,iaa,Ga,Ja,Ka,Na,Pa,Ua,ab,Za,Va,Wa,Xa,Ya,$a,bb,jaa,pb,xb,oaa,saa,raa,t
2024-05-03 04:44:01 UTC	935	IN	Data Raw: 2c 28 29 3d 3e 63 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 63 2b 2b 5d 3a 22 7b 7d 22 29 7d 3b 5f 5f 63 2e 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 2e 2e 2e 63 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 69 6e 76 61 6c 69 64 20 73 74 61 74 65 22 3a 5f 5f 63 2e 6e 61 28 62 2c 2e 2e 2e 63 29 29 3b 7d 3b 77 3d 5f 5f 63 2e 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 2e 2e 2e 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 61 72 67 75 6d 65 6e 74 20 69 73 20 6e 75 6c 6c 22 3a 5f 5f 63 2e 6e 61 28 62 2c 2e 2e 2e 63 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 5f 63 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 Data Ascii: ,()=>c<b.length?b[c++]:"{}")};__c.pa=function(a,b,...c){if(!a)throw Error(null==b?"invalid state":__c.na(b,...c));};w=__c.w=function(a,b,...c){if(null==a)throw Error(null==b?"argument is null":__c.na(b,...c));return a};__c.qa=function(a,b){return null!=b
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 65 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 6e 65 77 20 4d 61 70 3b 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 61 29 29 2e 66 6f 72 45 61 63 68 28 28 64 2c 65 29 3d 3e 7b 65 2e 73 74 61 72 74 73 57 69 74 68 28 62 29 26 26 63 2e 73 65 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 72 65 70 6c 61 63 65 28 62 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 29 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 0a 64 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 74 79 70 65 6f 66 20 62 3b 73 77 69 Data Ascii: )});return b};eaa=function(a,b){const c=new Map;(new URLSearchParams(a)).forEach((d,e)=>{e.startsWith(b)&&c.set(decodeURIComponent(e.replace(b,"").replace(/\+/g," ")),decodeURIComponent(d.replace(/\+/g," ")))});return c};daa=function(a,b){b=typeof b;swi
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 3a 6e 75 6c 6c 21 3d 64 3f 64 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 70 64 3a 61 2e 70 64 7d 7d 3b 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 41 6d 3a 33 2c 78 65 3a 62 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 70 64 3a 61 2e 70 64 7d 7d 3b 5f 5f 63 2e 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 41 6d 3a 34 2c 78 65 3a 62 2c 70 64 3a 61 2e 70 64 7d 7d 3b 0a 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 63 2c 64 2c 65 29 3d 3e 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 66 2c 78 65 Data Ascii: efault:null!=d?d:a.defaultValue,defaultValue:a.defaultValue,pd:a.pd}};Ka=function(a,b,c){return{tag:c,Am:3,xe:b,defaultValue:a.defaultValue,pd:a.pd}};__c.La=function(a,b,c){return{tag:c,Am:4,xe:b,pd:a.pd}};Na=function(a,b){return(c,d,e)=>{const {tag:f,xe
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 61 67 5d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 66 2c 7b 6e 61 6d 65 3a 6b 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 63 61 73 65 20 33 3a 63 61 73 65 20 34 3a 63 61 73 65 20 35 3a 67 5b 66 2e 74 61 67 5d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 66 2c 7b 6e 61 6d 65 3a 6b 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 7a 28 66 29 3b 7d 72 65 74 75 72 6e 7b 74 79 70 65 3a 31 2c 66 69 65 6c 64 73 3a 65 2c 4c 33 3a 55 61 28 65 2c 62 2e 6a 33 29 2c 56 56 61 3a 67 2c 42 51 61 3a 68 7d 7d 29 3b 63 6c 61 73 73 20 64 7b 73 74 61 74 69 63 20 70 55 28 65 3d 7b 7d 29 7b 6e 65 77 20 64 28 65 29 7d 73 74 61 74 69 63 20 73 65 72 69 61 6c 69 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 56 47 28 65 2c 5b Data Ascii: ag]=Object.assign({},f,{name:k});break;case 2:case 3:case 4:case 5:g[f.tag]=Object.assign({},f,{name:k});break;default:throw new z(f);}return{type:1,fields:e,L3:Ua(e,b.j3),VVa:g,BQa:h}});class d{static pU(e={}){new d(e)}static serialize(e){return d.VG(e,[
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 5b 24 7b 72 7d 5d 60 29 3b 0a 71 5b 72 5d 3d 6e 28 67 5b 72 5d 2c 66 29 3b 66 2e 70 6f 70 28 29 7d 68 5b 78 5d 3d 71 7d 65 6c 73 65 7b 66 6f 72 28 6e 3d 30 3b 6e 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 74 79 70 65 6f 66 20 67 5b 6e 5d 21 3d 3d 76 2e 70 64 29 74 68 72 6f 77 20 57 61 28 7b 48 6b 3a 6b 2c 50 73 3a 6c 7d 2c 67 5b 6e 5d 2c 76 2e 70 64 2c 5b 2e 2e 2e 66 2c 6d 5d 2c 6e 29 3b 68 5b 78 5d 3d 67 7d 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 69 66 28 6e 75 6c 6c 3d 3d 67 29 7b 68 5b 78 5d 3d 6e 65 77 20 4d 61 70 3b 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 67 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 4d 61 70 20 66 6f 72 20 6b 65 79 20 24 Data Ascii: [${r}]`);q[r]=n(g[r],f);f.pop()}h[x]=q}else{for(n=0;n<g.length;++n)if(typeof g[n]!==v.pd)throw Wa({Hk:k,Ps:l},g[n],v.pd,[...f,m],n);h[x]=g}break;case 5:if(null==g){h[x]=new Map;break}else if("object"!==typeof g)throw new TypeError(`Expected Map for key $
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 2e 76 61 6c 75 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 67 2e 76 61 6c 75 65 29 7d 20 66 6f 72 20 6b 65 79 20 22 24 7b 6b 7d 22 2c 20 66 6f 75 6e 64 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6c 29 7d 20 24 7b 59 61 28 66 29 7d 60 29 3b 68 5b 72 5d 3d 71 2e 4f 37 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 69 66 28 6e 75 6c 6c 21 3d 0a 67 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 26 26 6c 3d 3d 3d 67 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 62 72 65 61 6b 3b 66 2e 70 75 73 68 28 72 29 3b 76 61 72 20 6d 3d 67 2e 6f 62 6a 3f 67 2e 6f 62 6a 2e 56 47 28 6c 2c 66 29 3a 6c 3b 66 2e 70 6f 70 28 29 3b 69 66 28 74 79 70 65 6f 66 20 Data Ascii: .value)throw new TypeError(`Expected value ${JSON.stringify(g.value)} for key "${k}", found: ${JSON.stringify(l)} ${Ya(f)}`);h[r]=q.O7;break;case 2:if(null!=g.defaultValue&&l===g.defaultValue)break;f.push(r);var m=g.obj?g.obj.VG(l,f):l;f.pop();if(typeof
2024-05-03 04:44:01 UTC	1369	IN	Data Raw: 68 7d 3b 72 65 74 75 72 6e 20 64 7d 3b 0a 63 62 3d 5f 5f 63 2e 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 6f 6e 73 74 20 64 3d 5f 5f 63 2e 46 61 28 28 29 3d 3e 7b 76 61 72 20 67 3d 61 28 29 3b 63 6f 6e 73 74 20 68 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 67 29 5b 30 5d 3b 6c 65 74 20 6b 3b 63 6f 6e 73 74 20 6c 3d 6e 65 77 20 4d 61 70 2c 6d 3d 6e 65 77 20 4d 61 70 2c 6e 3d 6e 65 77 20 4d 61 70 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 67 5b 68 5d 2e 6c 65 6e 67 74 68 3b 70 2b 3d 32 29 7b 76 61 72 20 71 3d 67 5b 68 5d 5b 70 5d 3b 63 6f 6e 73 74 20 76 3d 67 5b 68 5d 5b 70 2b 31 5d 2c 78 3d 76 2e 69 6e 69 74 28 29 2e 66 69 65 6c 64 73 5b 68 5d 3b 69 66 28 21 78 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 Data Ascii: h};return d};cb=__c.cb=function(a,b){var c={};const d=__c.Fa(()=>{var g=a();const h=Object.keys(g)[0];let k;const l=new Map,m=new Map,n=new Map;for(var p=0;p<g[h].length;p+=2){var q=g[h][p];const v=g[h][p+1],x=v.init().fields[h];if(!x)throw new TypeError

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	34.120.195.249	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	740	OUT	POST /api/1767683/envelope/?sentry_key=944d224d45b943ba9f96396432dfd868&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 465 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:04 UTC	465	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 33 3a 35 39 2e 39 35 34 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 31 63 61 31 65 34 30 32 63 64 37 31 34 65 34 32 38 34 30 39 36 31 36 37 38 39 38 33 34 38 64 33 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 33 3a 35 39 2e 39 35 32 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 33 3a 35 39 2e 39 35 33 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-05-03T04:43:59.954Z","sdk":{"name":"sentry.javascript.browser","version":"7.16.0"}}{"type":"session"}{"sid":"1ca1e402cd714e4284096167898348d3","init":true,"started":"2024-05-03T04:43:59.952Z","timestamp":"2024-05-03T04:43:59.953Z","stat
2024-05-03 04:44:04 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:44:04 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49710	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	1233	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	719	IN	HTTP/1.1 302 Found Date: Fri, 03 May 2024 04:44:04 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js access-control-allow-origin: * cache-control: max-age=300, public Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=463qbWoIiu0wmQlsSatJ7OSYQIomFcs5DigFrqwBxaRejTA09AiuQDWrMXysdmWC9QKTjeVFlw6WmGD41vHOY15PXA8b4v5H4tCc20h8lgYden6%2BbrWhOMYqEQ%2BfZPM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87dd97ff2a2c428b-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49724	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	806	OUT	GET /web/fdd78af6781822ca.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1184	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/css Content-Length: 5839 Connection: close CF-Ray: 87dd980118124304-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 1301051 Cache-Control: public, max-age=31556926 ETag: "24d44da55ba6f725ef9e67a954d74ea8" Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Thu, 18 Apr 2024 03:12:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 19 Apr 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: dXt/mbhvKpRVjd6dUU/SdaP0oDtlnkik4Q/5nVj/H9wc+WD9uF18AY4JtLutAA69p+UBlSo5uj8= x-amz-replication-status: COMPLETED x-amz-request-id: 5GKW9FG6TJGA7B3G x-amz-server-side-encryption: AES256 x-amz-version-id: 2bnzw9iO5wImP66eZo45GXyzC5m4cZvb X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 31 57 63 62 39 4d 53 75 56 71 75 47 76 6e 4b 33 53 63 7a 63 5a 58 4e 66 36 58 54 25 32 42 61 41 58 6d 41 54 6e 65 50 6f 70 48 53 4c 35 42 35 30 4f 42 34 79 74 39 6a 51 66 46 5a 63 4f 52 70 63 56 72 67 6d 41 35 4d 41 79 32 49 4f 77 4b 62 71 74 53 59 72 4e 25 32 46 55 4d 6a 62 79 4f 75 62 35 51 59 70 59 6a 70 49 75 64 72 74 43 35 35 57 74 4c 7a 67 42 66 36 56 36 42 4f 54 53 31 43 31 56 5a 7a 32 76 71 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Wcb9MSuVquGvnK3SczcZXNf6XT%2BaAXmATnePopHSL5B50OB4yt9jQfFZcORpcVrgmA5MAy2IOwKbqtSYrN%2FUMjbyOub5QYpYjpIudrtC55WtLzgBf6V6BOTS1C1VZz2vqo%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:04 UTC	1206	IN	Data Raw: 2e 55 53 45 32 52 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 72 65 6d 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 55 53 45 32 52 67 2e 55 53 45 32 52 67 7b 70 61 64 64 69 6e 67 3a 30 20 36 70 78 7d 2e 76 43 4c 70 61 77 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 Data Ascii: .USE2Rg{border-radius:9999px;display:inline-flex;font-size:1.1rem;height:16px;line-height:16px;position:relative;vertical-align:middle;white-space:nowrap}.USE2Rg.USE2Rg{padding:0 6px}.vCLpaw{border-radius:9999px;box-sizing:border-box;height:20px;justify-c
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 76 61 72 28 2d 2d 36 6b 44 4e 6c 41 29 7d 2e 4c 30 58 6f 6a 51 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 43 4f 58 67 73 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 44 6f 34 4c 63 41 29 7d 2e 4c 30 58 6f 6a 51 2e 5f 31 41 5f 45 56 77 3a 68 6f 76 65 72 3a 6e 6f 74 28 2e 6a 77 48 67 43 51 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 45 75 44 4c 59 41 29 7d 2e 4c 30 58 6f 6a 51 2e 41 5f 75 30 34 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 35 4b 43 37 6c 77 29 7d 2e 4c 30 58 6f 6a 51 2e 6a 77 48 67 43 51 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6c 73 47 4b 57 77 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 7a 69 39 6e 49 77 29 Data Ascii: olor:var(--6kDNlA)}.L0XojQ{background-color:var(--COXgsg);color:var(--Do4LcA)}.L0XojQ._1A_EVw:hover:not(.jwHgCQ){background-color:var(--EuDLYA)}.L0XojQ.A_u04w{background-color:var(--5KC7lw)}.L0XojQ.jwHgCQ{background-color:var(--lsGKWw);color:var(--zi9nIw)
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 2d 34 70 78 20 34 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 7d 2e 6a 39 50 44 43 67 20 2e 53 47 32 70 76 77 7b 2d 2d 6d 61 73 6b 2d 65 6e 64 3a 2d 34 70 78 3b 2d 2d 6d 61 73 6b 2d 74 6f 70 3a 2d 34 70 78 7d 2e 68 64 51 38 59 51 20 2e 53 47 32 70 76 77 7b 2d 2d 6d 61 73 6b 2d 65 6e 64 3a 34 70 78 3b 2d 2d 6d 61 73 6b 2d 74 6f 70 3a 34 70 78 7d 2e 5f 34 51 61 68 67 51 20 2e 53 47 32 70 76 77 7b 2d 2d 6d 61 73 6b 2d 65 6e 64 3a 38 70 78 3b 2d 2d 6d 61 73 6b 2d 74 6f 70 3a 38 70 78 7d 7d 2e 6d 37 76 33 5f 41 2e 5f 32 41 56 5f 78 77 7b 61 6e 69 6d 61 74 69 6f 6e 3a 55 5f 78 5f 4f 51 20 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 7d 2e 6d 37 Data Ascii: sition:-4px 4px;padding:4px}.j9PDCg .SG2pvw{--mask-end:-4px;--mask-top:-4px}.hdQ8YQ .SG2pvw{--mask-end:4px;--mask-top:4px}._4QahgQ .SG2pvw{--mask-end:8px;--mask-top:8px}}.m7v3_A._2AV_xw{animation:U_x_OQ 2s ease-in-out infinite;transform-origin:50% 50%}.m7
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 74 6c 5d 20 2e 5f 32 5a 7a 75 74 41 2e 4a 73 46 6f 77 67 20 2e 5f 34 55 67 42 6f 51 20 73 76 67 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 77 69 64 74 68 3d 27 33 32 27 20 68 65 69 67 68 74 3d 27 33 32 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 64 65 66 73 25 33 45 25 33 43 6d 61 73 6b 20 69 64 3d 27 61 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 25 32 33 66 66 66 27 20 64 3d 27 4d 30 20 30 68 33 32 76 33 32 48 30 7a 27 2f 25 33 45 25 33 43 72 65 63 74 20 78 3d 27 2d 33 30 27 20 79 3d 27 2d 31 30 27 20 77 69 64 74 Data Ascii: tl] ._2ZzutA.JsFowg ._4UgBoQ svg{-webkit-mask-image:url("data:image/svg+xml;charset=utf-8,%3Csvg width='32' height='32' xmlns='http://www.w3.org/2000/svg'%3E%3Cdefs%3E%3Cmask id='a'%3E%3Cpath fill='%23fff' d='M0 0h32v32H0z'/%3E%3Crect x='-30' y='-10' widt
2024-05-03 04:44:04 UTC	526	IN	Data Raw: 78 3d 27 31 30 27 2f 25 33 45 25 33 43 2f 6d 61 73 6b 25 33 45 25 33 43 2f 64 65 66 73 25 33 45 25 33 43 70 61 74 68 20 6d 61 73 6b 3d 27 75 72 6c 28 25 32 33 61 29 27 20 64 3d 27 4d 30 20 30 68 33 32 76 33 32 48 30 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 5f 32 5a 7a 75 74 41 2e 77 32 65 6d 46 77 20 2e 5f 34 55 67 42 6f 51 20 73 76 67 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 77 69 64 74 68 3d 27 33 32 27 20 68 65 69 67 68 74 3d 27 33 32 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 Data Ascii: x='10'/%3E%3C/mask%3E%3C/defs%3E%3Cpath mask='url(%23a)' d='M0 0h32v32H0z'/%3E%3C/svg%3E")}[dir=rtl] ._2ZzutA.w2emFw ._4UgBoQ svg{-webkit-mask-image:url("data:image/svg+xml;charset=utf-8,%3Csvg width='32' height='32' xmlns='http://www.w3.org/2000/svg'%3E%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49725	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	806	OUT	GET /web/9e2d4720ffac5af4.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1183	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/css Content-Length: 382 Connection: close CF-Ray: 87dd98012eb78cab-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 1386030 Cache-Control: public, max-age=31556926 ETag: "0eecba4c5eadf6a40cdc31dbab617af9" Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Wed, 17 Apr 2024 03:39:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 18 Apr 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: bhizh3AuaYxEVgniIATsZgKAuOI3YqQWYX59PitOzSxX2LsYTYL4yGk2Cdft3/RVHFwL6yZ2Tzw= x-amz-replication-status: COMPLETED x-amz-request-id: WTR3F4ZR9FFM08QV x-amz-server-side-encryption: AES256 x-amz-version-id: uSw4t1Ga4EpntkARioJ9AqZTRVVqmsMI X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 72 54 35 4b 55 64 57 36 4f 41 61 38 34 41 79 6d 68 62 5a 33 53 44 52 25 32 42 67 65 6f 49 25 32 46 6f 52 4c 48 4a 36 65 64 37 4d 43 55 62 66 41 53 39 68 51 58 4d 36 6e 47 4c 34 7a 41 4f 57 55 74 69 31 32 78 6d 74 4c 4f 37 77 67 7a 41 6e 50 35 74 6b 74 62 73 69 4d 54 71 67 75 58 58 39 50 70 37 56 38 32 76 25 32 42 34 37 75 76 59 35 36 6a 30 51 43 65 43 25 32 46 33 43 50 32 64 68 68 38 43 7a 77 4e 48 64 61 61 52 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rT5KUdW6OAa84AymhbZ3SDR%2BgeoI%2FoRLHJ6ed7MCUbfAS9hQXM6nGL4zAOWUti12xmtLO7wgzAnP5tktbsiMTqguXX9Pp7V82v%2B47uvY56j0QCeC%2F3CP2dhh8CzwNHdaaRo%3D"}],"group":"cf-nel","max_age":6048
2024-05-03 04:44:04 UTC	382	IN	Data Raw: 2e 79 67 47 4b 54 51 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 7d 2e 79 67 47 4b 54 51 2e 5f 36 31 56 52 71 51 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 77 69 64 74 68 3a 31 32 70 78 7d 2e 79 67 47 4b 54 51 2e 61 62 75 6c 62 67 7b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 79 67 47 4b 54 51 2e 41 41 77 43 65 67 7b 68 65 69 67 68 74 3a 31 38 70 78 3b 77 69 64 74 68 3a 31 38 70 78 7d 2e 79 67 47 4b 54 51 2e 64 52 38 4d 37 67 7b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 7d 2e 79 67 47 4b 54 51 2e 5f 31 61 43 6b 66 41 7b 68 65 69 67 68 74 3a 33 Data Ascii: .ygGKTQ{box-sizing:border-box;display:inline-block;vertical-align:text-bottom}.ygGKTQ._61VRqQ{height:12px;width:12px}.ygGKTQ.abulbg{height:16px;width:16px}.ygGKTQ.AAwCeg{height:18px;width:18px}.ygGKTQ.dR8M7g{height:24px;width:24px}.ygGKTQ._1aCkfA{height:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49727	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	806	OUT	GET /web/368a11563437cc62.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1183	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/css Content-Length: 13671 Connection: close CF-Ray: 87dd98011f0743ff-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 92706 Cache-Control: public, max-age=31556926 ETag: "4d3fd2ad77bb5a04e10e0907d4cc0016" Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Thu, 02 May 2024 02:44:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 03 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: IenIqUrppl/3SUAr22R6gI5m//heJ7gV2T6HduUx2PhTdBgOLpBvW4IS14YCH1i8Tcl4Rl8LXf4= x-amz-replication-status: COMPLETED x-amz-request-id: NJZGHSJMH3Y75G2X x-amz-server-side-encryption: AES256 x-amz-version-id: UyBLtGAdjJYi5pkCU8TkinSIdvxdIziL X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 58 71 6c 33 4f 78 77 36 4a 52 74 50 64 79 53 6c 42 71 59 34 6f 55 46 71 4d 50 36 66 6e 75 58 5a 6b 4c 34 6a 32 74 56 65 6f 32 75 70 62 70 61 51 32 56 75 6d 46 46 65 50 59 62 7a 31 44 6a 52 66 74 57 76 32 57 67 4a 6a 79 57 68 6c 75 6c 63 65 48 47 34 4d 52 6e 61 65 63 4d 66 79 35 52 7a 78 57 48 4a 74 32 30 25 32 46 6e 4c 61 69 33 25 32 42 59 34 70 5a 48 59 42 74 66 4c 6a 36 4e 47 43 7a 58 25 32 42 69 78 4d 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xql3Oxw6JRtPdySlBqY4oUFqMP6fnuXZkL4j2tVeo2upbpaQ2VumFFePYbz1DjRftWv2WgJjyWhlulceHG4MRnaecMfy5RzxWHJt20%2FnLai3%2BY4pZHYBtfLj6NGCzX%2BixMg%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:04 UTC	1205	IN	Data Raw: 2e 6c 69 67 68 74 7b 2d 2d 34 43 6c 47 43 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 34 29 2c 30 70 78 20 36 70 78 20 32 30 70 78 20 2d 34 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 33 29 3b 2d 2d 53 47 6a 6a 7a 41 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 34 29 2c 30 70 78 20 31 32 70 78 20 34 30 70 78 20 2d 38 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 33 29 3b 2d 2d 37 46 52 51 47 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 34 29 2c 30 70 78 20 32 70 78 20 34 70 78 20 2d 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 33 29 3b 2d 2d Data Ascii: .light{--4ClGCw:0px 0px 0px 1px rgba(64,87,109,.04),0px 6px 20px -4px rgba(64,87,109,.3);--SGjjzA:0px 0px 0px 1px rgba(64,87,109,.04),0px 12px 40px -8px rgba(64,87,109,.3);--7FRQGw:0px 0px 0px 1px rgba(64,87,109,.04),0px 2px 4px -1px rgba(64,87,109,.3);--
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 36 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 20 56 61 72 69 61 62 6c 65 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 32 35 20 39 35 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 37 36 32 66 65 33 37 62 39 39 64 34 39 37 30 37 65 37 38 33 64 36 32 38 31 34 31 32 64 31 32 66 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 35 39 30 2d 30 35 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 Data Ascii: mat("woff2");unicode-range:u+06??}@font-face{font-display:swap;font-family:Noto Sans Variable;font-style:normal;font-weight:125 950;src:url(images/762fe37b99d49707e783d6281412d12f.woff2) format("woff2");unicode-range:u+0590-05ff}@font-face{font-display:sw
2024-05-03 04:44:04 UTC	514	IN	Data Raw: 66 65 32 65 2d 66 65 32 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 38 35 62 32 64 36 32 35 64 39 37 64 35 30 35 37 31 37 36 35 39 38 37 62 62 61 63 33 33 38 35 30 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 33 66 30 33 61 66 64 38 30 65 61 66 31 33 65 65 35 38 61 37 64 30 39 34 35 62 37 64 30 39 36 33 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 36 30 2d 30 35 32 Data Ascii: fe2e-fe2f}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:700;src:url(images/85b2d625d97d50571765987bbac33850.woff2) format("woff2"),url(images/3f03afd80eaf13ee58a7d0945b7d0963.woff) format("woff");unicode-range:u+0460-052
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 30 30 2d 30 34 35 66 2c 75 2b 30 34 39 30 2d 30 34 39 31 2c 75 2b 30 34 62 30 2d 30 34 62 31 2c 75 2b 32 31 31 36 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 30 62 34 31 36 31 37 64 33 61 30 35 62 62 62 65 32 33 30 36 35 65 63 37 31 39 65 32 36 66 64 31 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 36 35 30 63 65 66 32 64 38 38 36 65 Data Ascii: ff) format("woff");unicode-range:u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:600;src:url(images/0b41617d3a05bbbe23065ec719e26fd1.woff2) format("woff2"),url(images/650cef2d886e
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 64 35 36 66 63 31 33 66 65 30 64 63 31 33 32 37 64 63 65 65 64 38 31 36 62 30 37 64 62 65 63 33 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 33 31 31 65 63 36 33 31 62 33 62 33 61 37 66 38 38 63 37 32 34 33 35 31 61 66 38 62 63 65 66 34 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 37 30 2d 30 33 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 Data Ascii: font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:400;src:url(images/d56fc13fe0dc1327dceed816b07dbec3.woff2) format("woff2"),url(images/311ec631b3b3a7f88c724351af8bcef4.woff) format("woff");unicode-range:u+0370-03ff}@font-face{font-dis
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 34 62 64 63 66 30 63 65 31 32 39 36 62 34 34 38 34 30 39 63 30 32 34 65 35 37 66 64 63 64 62 39 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 30 30 35 64 61 62 62 31 32 63 64 62 35 63 35 64 65 61 62 64 31 37 38 32 63 33 66 66 31 39 36 64 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 37 66 2c 75 2b 30 31 66 30 2c 75 2b 30 31 66 61 2d 30 31 66 62 2c 75 2b 30 31 66 65 2d 30 31 66 66 2c 75 2b 31 65 30 30 2d 31 65 30 31 2c 75 2b 31 65 33 65 2d 31 65 33 66 7d 40 66 6f Data Ascii: Sans;font-style:normal;font-weight:700;src:url(images/4bdcf0ce1296b448409c024e57fdcdb9.woff2) format("woff2"),url(images/005dabb12cdb5c5deabd1782c3ff196d.woff) format("woff");unicode-range:u+017f,u+01f0,u+01fa-01fb,u+01fe-01ff,u+1e00-1e01,u+1e3e-1e3f}@fo
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 75 2b 30 31 61 30 2d 30 31 61 31 2c 75 2b 30 31 61 66 2d 30 31 62 30 2c 75 2b 30 33 30 30 2d 30 33 30 33 2c 75 2b 30 33 30 36 2c 75 2b 30 33 30 39 2c 75 2b 30 33 31 62 2c 75 2b 30 33 32 33 2c 75 2b 31 65 61 30 2d 31 65 66 39 2c 75 2b 32 30 31 30 2d 32 30 31 31 2c 75 2b 32 30 31 33 2d 32 30 31 34 2c 75 2b 32 30 31 38 2d 32 30 31 39 2c 75 2b 32 30 31 63 2d 32 30 31 64 2c 75 2b 32 30 32 30 2d 32 30 32 31 2c 75 2b 32 30 32 36 2c 75 2b 32 30 33 30 2c 75 2b 32 30 61 62 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 20 56 69 65 74 6e 61 6d 65 73 65 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 Data Ascii: u+01a0-01a1,u+01af-01b0,u+0300-0303,u+0306,u+0309,u+031b,u+0323,u+1ea0-1ef9,u+2010-2011,u+2013-2014,u+2018-2019,u+201c-201d,u+2020-2021,u+2026,u+2030,u+20ab}@font-face{font-display:swap;font-family:Noto Sans Vietnamese;font-style:normal;font-weight:700;sr
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 2d 73 65 74 74 69 6e 67 73 3a 22 6f 70 73 7a 22 20 30 7d 2e 4b 71 37 59 42 67 2c 2e 5f 35 62 5f 36 6b 77 2c 2e 5f 37 6a 58 62 56 51 2c 2e 5f 74 33 44 6c 51 2c 2e 64 5a 5f 63 46 67 2c 2e 6c 6e 43 50 6f 41 2c 2e 77 70 36 5f 79 67 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 66 6f 6e 74 2d 73 6d 6f 6f 74 68 3a 61 6c 77 61 79 73 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 74 65 78 74 2d 73 69 7a 65 2d 61 64 Data Ascii: -settings:"opsz" 0}.Kq7YBg,._5b_6kw,._7jXbVQ,._t3DlQ,.dZ_cFg,.lnCPoA,.wp6_yg{word-wrap:break-word;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-smooth:always;-webkit-text-size-adjust:none;-moz-text-size-adjust:none;text-size-ad
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 61 79 73 63 61 6c 65 3b 66 6f 6e 74 2d 73 6d 6f 6f 74 68 3a 61 6c 77 61 79 73 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 2c 4e 6f 74 6f 20 53 61 6e 73 20 56 61 72 69 61 62 6c 65 2c 4e 6f 74 6f 20 53 61 6e 73 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 76 61 72 69 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 22 6f 70 73 Data Ascii: ayscale;font-smooth:always;-webkit-text-size-adjust:none;-moz-text-size-adjust:none;text-size-adjust:none;font-family:Canva Sans,Noto Sans Variable,Noto Sans,-apple-system,BlinkMacSystemFont,Segoe UI,Helvetica,Arial,sans-serif;font-variation-settings:"ops

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49726	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	806	OUT	GET /web/5b2d464c2f59a733.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1183	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/css Content-Length: 226 Connection: close CF-Ray: 87dd98012b070f7b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4358632 Cache-Control: public, max-age=31556926 ETag: "823314f0820505213fb53a70dc7cc636" Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Tue, 27 Feb 2024 01:41:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Feb 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 1IhMnM1JAemp2b/hqLqwrnQqKxbvSDuDxDa5Yu4+0a+9RYx81IytfKF8BGKUy6bCQnIOoLm3LbM= x-amz-replication-status: COMPLETED x-amz-request-id: 08V64KSS2D7G9GQW x-amz-server-side-encryption: AES256 x-amz-version-id: .dmF2hjXBHckFPSehaVq6fmbWzyMKqDm X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 45 66 73 66 68 65 77 69 76 61 34 4f 32 74 63 55 56 51 52 63 53 72 77 55 6f 71 34 71 4a 76 55 74 46 69 58 54 39 4a 54 38 48 5a 4a 7a 75 6f 66 6b 37 4f 43 4e 66 7a 73 75 72 54 25 32 42 69 47 66 37 30 69 6c 55 44 53 70 44 52 4f 51 58 6e 72 6b 53 37 35 41 36 31 47 74 33 7a 4e 66 25 32 46 73 70 51 4a 77 55 6b 39 67 39 58 34 4f 32 79 4c 31 48 61 48 6b 43 54 7a 52 74 6f 36 35 33 58 70 62 4a 4c 77 30 4d 51 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Efsfhewiva4O2tcUVQRcSrwUoq4qJvUtFiXT9JT8HZJzuofk7OCNfzsurT%2BiGf70ilUDSpDROQXnrkS75A61Gt3zNf%2FspQJwUk9g9X4O2yL1HaHkCTzRto653XpbJLw0MQY%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:04 UTC	226	IN	Data Raw: 2e 5f 36 38 32 67 70 77 7b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 35 62 32 64 34 36 34 63 32 66 35 39 61 37 33 33 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: ._682gpw{-webkit-touch-callout:none;-webkit-user-drag:none;-webkit-tap-highlight-color:transparent;-webkit-user-select:none;-moz-user-select:none;user-select:none}/# sourceMappingURL=sourcemaps/5b2d464c2f59a733.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49728	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	806	OUT	GET /web/2475682c8d5b76fa.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1183	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/css Content-Length: 438 Connection: close CF-Ray: 87dd9801290d236a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353768 Cache-Control: public, max-age=31556926 ETag: "45cc8e9a449b686b4300684398c187b6" Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Tue, 20 Feb 2024 03:44:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 20 Feb 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: r9G42kHVnd8etemk4jdyVb6arDjtzHiUANdWmFjQyvkHOQlOTyX41ng7dq1bBDtaEx9qYjHyM00= x-amz-replication-status: COMPLETED x-amz-request-id: 0WWSCA08A3DG4DNS x-amz-server-side-encryption: AES256 x-amz-version-id: xFgprwCSzej5DgtUpcMZlZ9TcNhNA3Gm X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	362	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 51 4c 30 6a 44 38 76 32 42 39 39 5a 46 45 25 32 42 78 4f 69 4f 66 49 64 30 35 4c 25 32 42 4e 7a 6d 66 71 72 42 25 32 42 42 4e 4f 41 6d 4d 33 5a 4e 70 4c 50 4f 64 6d 44 63 67 6c 64 73 61 66 68 50 6e 53 6f 37 59 66 76 33 72 39 37 33 63 55 47 72 67 58 66 4a 6e 4a 4f 25 32 42 51 4b 4d 48 25 32 42 4e 56 71 39 57 31 56 57 25 32 42 4f 6b 46 25 32 42 36 6c 6d 35 4e 34 6c 45 42 30 6d 76 4f 58 76 63 7a 57 25 32 42 66 64 49 43 63 62 25 32 42 39 6d 38 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QL0jD8v2B99ZFE%2BxOiOfId05L%2BNzmfqrB%2BBNOAmM3ZNpLPOdmDcgldsafhPnSo7Yfv3r973cUGrgXfJnJO%2BQKMH%2BNVq9W1VW%2BOkF%2B6lm5N4lEB0mvOXvczW%2BfdICcb%2B9m8U%3D"}],"group":"cf-nel","max
2024-05-03 04:44:04 UTC	438	IN	Data Raw: 2e 44 46 5f 75 74 51 7b 63 75 72 73 6f 72 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 44 46 5f 75 74 51 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 75 6e 73 65 74 7d 2e 55 59 6b 49 33 67 7b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 4c 6a 38 5a 71 51 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 5f 6c 7a 58 42 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 4c 70 71 45 77 51 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 5f 30 78 6b 61 65 51 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 65 59 6e 31 41 51 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 Data Ascii: .DF_utQ{cursor:auto;outline:none;position:absolute}.DF_utQ:hover{cursor:unset}.UYkI3g{will-change:transform}.Lj8ZqQ{display:none}._lzXBg{overflow:hidden}.LpqEwQ{position:absolute}._0xkaeQ{pointer-events:auto}.eYn1AQ{overflow:hidden;pointer-events:none;pos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49729	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	806	OUT	GET /web/006564064b6c66ac.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1182	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/css Content-Length: 1927 Connection: close CF-Ray: 87dd98012fec80dc-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 1301050 Cache-Control: public, max-age=31556926 ETag: "456f346fb478005f5a5b222e51fc54d7" Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Thu, 18 Apr 2024 03:12:46 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 19 Apr 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: PSg+mz8SiGAB+R8r5kp7Wa2Kt7VjP0MhLDtNilP9p4k/EgDfbVILBw8+yJTnMcUupo0gIZPE+FQ= x-amz-replication-status: PENDING x-amz-request-id: 5GKK0R34WD9SDYRR x-amz-server-side-encryption: AES256 x-amz-version-id: I7DiwwtgGHzOXEChIR2XPzIHCdGbVB5m X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4f 71 55 36 5a 46 42 45 48 6c 67 38 51 4e 73 78 25 32 42 73 59 63 6d 75 7a 35 7a 41 66 34 79 47 75 35 36 74 57 56 76 54 4e 25 32 42 76 30 45 4f 34 58 46 61 37 39 7a 58 51 4e 43 31 59 6f 6e 50 77 70 38 30 74 4e 4c 30 51 4c 76 36 56 76 46 43 6c 44 57 41 33 66 36 5a 75 61 5a 5a 7a 72 63 4b 46 44 42 74 74 7a 6f 61 72 72 30 62 52 37 65 6c 50 48 47 4b 64 65 6b 49 34 75 38 50 66 70 50 7a 4c 77 70 6a 6d 79 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OqU6ZFBEHlg8QNsx%2BsYcmuz5zAf4yGu56tWVvTN%2Bv0EO4XFa79zXQNC1YonPwp80tNL0QLv6VvFClDWA3f6ZuaZZzrcKFDBttzoarr0bR7elPHGKdekI4u8PfpPzLwpjmyI%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:04 UTC	1208	IN	Data Raw: 2e 5f 30 79 5a 36 51 67 7b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 67 65 6f 6d 65 74 72 69 63 50 72 65 63 69 73 69 6f 6e 7d 2e 61 46 39 6f 36 51 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 58 66 42 71 77 77 7b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 7d 2e 5f 33 74 51 68 6d 41 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 73 63 72 6f 6c 6c 62 61 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 73 63 72 6f 6c 6c 62 61 72 2d 77 Data Ascii: ._0yZ6Qg{text-rendering:geometricPrecision}.aF9o6Q{height:100%;pointer-events:auto}.XfBqww{-webkit-user-select:text;-moz-user-select:text;user-select:text}._3tQhmA{overflow:hidden;position:relative;scrollbar-color:rgba(17,23,29,.6) transparent;scrollbar-w
2024-05-03 04:44:04 UTC	719	IN	Data Raw: 79 70 67 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 55 37 56 34 53 41 7b 74 6f 70 3a 2d 31 36 70 78 7d 2e 55 37 56 34 53 41 2c 2e 5f 30 5f 6c 36 72 77 7b 68 65 69 67 68 74 3a 31 36 70 78 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 5f 30 5f 6c 36 72 77 7b 62 6f 74 74 6f 6d 3a 2d 31 36 70 78 7d 2e 6c 5f 6d 76 54 77 7b 6c 65 66 74 3a 2d 31 36 70 78 7d 2e 56 47 64 6b 36 51 2c 2e 6c 5f 6d 76 54 77 7b 62 6f 74 74 6f 6d 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 56 47 64 6b 36 51 7b 72 69 67 68 74 3a 2d 31 36 70 78 7d 2e 5f 34 43 31 76 49 41 3e 2e 59 4c 5f 41 70 51 2c 2e 5f 34 43 31 76 49 41 3e 2e 71 71 43 48 4b 67 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 67 57 65 50 33 67 Data Ascii: ypg{opacity:1}.U7V4SA{top:-16px}.U7V4SA,._0_l6rw{height:16px;left:0;right:0}._0_l6rw{bottom:-16px}.l_mvTw{left:-16px}.VGdk6Q,.l_mvTw{bottom:0;top:0;width:16px}.VGdk6Q{right:-16px}._4C1vIA>.YL_ApQ,._4C1vIA>.qqCHKg{transition:opacity .3s ease-in-out}.gWeP3g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49730	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	948	OUT	GET /chunk-batch/8b0efce4dcfa662a.ltr.css+edb83b7fb0f55858.ltr.css+7579b1ef84cb4721.ltr.css+600ca02efe4b30d9.ltr.css+31f53896cc2c323b.ltr.css+c462f102b34f80f4.ltr.css HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1140	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/css Content-Length: 26517 Connection: close CF-Ray: 87dd98024d8dc41b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8484 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Wed, 27 Mar 2024 02:26:29 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: UWk1Qk6OKOVxSJk7PBGZHOhme+sH3tK1FEM4OLZ0cqJ5OKt83z2oKqbSDfoJW23LY9nlZ953o8s= x-amz-replication-status: COMPLETED x-amz-request-id: VNA28F4FK6TVW48P x-amz-server-side-encryption: AES256 x-amz-version-id: hCHfTYd8ls6Kj0ORPc927EequAqu9yiV X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	364	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 46 61 43 45 79 6d 42 25 32 42 73 48 69 47 31 54 4e 35 62 69 63 4a 51 69 48 36 7a 31 6a 69 67 32 72 55 32 56 68 61 50 4a 50 4a 44 50 70 52 77 57 51 6f 5a 62 6b 46 67 74 50 56 4d 44 37 51 48 6a 49 56 77 50 50 74 5a 5a 55 38 4d 42 4a 44 54 45 45 32 64 61 76 4c 7a 75 5a 4b 67 64 66 4e 49 46 48 48 6c 68 52 6d 47 32 67 54 65 57 45 25 32 46 73 4b 68 4a 62 50 25 32 46 61 4c 59 41 33 72 77 75 47 45 75 30 74 70 71 32 39 69 4a 68 33 45 6c 6d 42 63 4e 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FaCEymB%2BsHiG1TN5bicJQiH6z1jig2rU2VhaPJPJDPpRwWQoZbkFgtPVMD7QHjIVwPPtZZU8MBJDTEE2davLzuZKgdfNIFHHlhRmG2gTeWE%2FsKhJbP%2FaLYA3rwuGEu0tpq29iJh3ElmBcNU%3D"}],"group":"cf-nel","m
2024-05-03 04:44:04 UTC	1234	IN	Data Raw: 2f 2a 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 38 62 30 65 66 63 65 34 64 63 66 61 36 36 32 61 2e 6c 74 72 2e 63 73 73 20 2a 2f 0a 2e 6c 69 67 68 74 7b 2d 2d 65 30 52 46 68 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 7d 2e 64 61 72 6b 7b 2d 2d 65 30 52 46 68 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 7d 2e 7a 6b 39 69 4b 51 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 41 45 75 72 74 77 2c 2e 57 67 55 66 71 67 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 41 45 75 72 74 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 Data Ascii: /* __FILE_CONTENT_FOR__:8b0efce4dcfa662a.ltr.css */.light{--e0RFhg:hsla(0,0%,100%,.5)}.dark{--e0RFhg:hsla(0,0%,100%,.4)}.zk9iKQ{height:100%;left:0;pointer-events:none;position:fixed;top:0;width:100%}.AEurtw,.WgUfqg{pointer-events:auto}.AEurtw{position:ab
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 33 61 77 20 2e 5f 30 56 4e 5a 66 77 2c 2e 4d 32 69 33 61 77 20 2e 5f 30 56 4e 5a 66 77 2e 75 34 72 6e 5f 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 30 52 46 68 67 29 7d 2e 4f 6f 58 73 4f 51 2c 2e 64 37 6d 6c 44 77 7b 62 6f 74 74 6f 6d 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 44 53 31 65 63 51 7b 74 6f 70 3a 2d 31 30 30 25 7d 2e 64 6a 51 45 31 51 7b 74 6f 70 3a 31 30 30 25 7d 2e 4f 6f 58 73 4f 51 7b 6c 65 66 74 3a 2d 31 30 30 25 7d 2e 64 37 6d 6c 44 77 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 62 38 33 77 35 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 6c 75 42 6f 6f 51 2c 31 32 70 78 29 3b 64 69 73 70 6c 61 79 Data Ascii: 3aw ._0VNZfw,.M2i3aw ._0VNZfw.u4rn_g{background-color:var(--e0RFhg)}.OoXsOQ,.d7mlDw{bottom:0;top:0;width:100%}.DS1ecQ{top:-100%}.djQE1Q{top:100%}.OoXsOQ{left:-100%}.d7mlDw{left:100%}.b83w5A{background-color:inherit;border-radius:var(--luBooQ,12px);display
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 65 64 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 6f 70 61 63 69 74 79 7d 2e 5f 32 59 58 46 55 77 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 52 71 37 53 38 67 2c 2e 72 59 34 64 37 77 7b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 4a 61 75 5f 4e 77 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 5f 34 64 77 33 66 51 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 6c 69 67 68 74 7b 2d 2d 53 6a 4b 43 39 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 34 29 7d 2e 64 61 72 6b 7b 2d 2d 53 6a 4b 43 39 51 3a 23 33 62 33 Data Ascii: ed;right:0;top:0;transition:none;will-change:opacity}._2YXFUw{transition:opacity .3s ease-in-out}.Rq7S8g,.rY4d7w{opacity:0;pointer-events:none}.Jau_Nw{opacity:1;pointer-events:auto}._4dw3fQ{opacity:0}.light{--SjKC9Q:rgba(64,87,109,.04)}.dark{--SjKC9Q:#3b3
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 7d 2e 6b 47 42 39 65 67 20 2e 73 73 4a 45 48 51 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 49 6f 64 6e 77 29 7d 2e 59 47 78 45 5a 77 7b 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f 6d 29 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 74 6f 70 29 20 2b 20 76 61 72 28 2d 2d 76 69 65 77 70 6f 72 74 2d 64 69 66 66 65 72 65 6e 63 65 2d 68 65 69 67 68 74 2c 20 30 70 78 29 29 7d 2e 42 33 30 48 4b 67 2c 2e 59 47 78 45 5a 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 42 33 30 48 4b 67 7b 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 Data Ascii: }.kGB9eg .ssJEHQ{background-color:var(--bIodnw)}.YGxEZw{bottom:var(--safe-area-inset-bottom);left:0;right:0;top:calc(var(--safe-area-inset-top) + var(--viewport-difference-height, 0px))}.B30HKg,.YGxEZw{position:absolute}.B30HKg{bottom:calc(var(--safe-area
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 30 25 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 45 41 55 4b 6e 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 7d 2e 73 39 78 36 33 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 68 65 69 67 68 74 3a 36 70 78 3b 77 69 64 74 68 3a 33 32 70 78 7d 2e 63 36 57 37 6c 67 2c 2e 73 39 78 36 33 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 54 6c 55 75 64 51 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 34 43 6c 47 43 77 29 Data Ascii: 0%;height:100vh;position:absolute;width:100%}.EAUKnw{display:flex;flex-shrink:0;justify-content:center;padding-bottom:8px;padding-top:10px}.s9x63g{border-radius:9999px;height:6px;width:32px}.c6W7lg,.s9x63g{background:var(--TlUudQ);box-shadow:var(--4ClGCw)
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 45 6b 51 20 2e 4a 41 37 70 66 41 3a 6e 6f 74 28 2e 5a 61 6b 48 67 41 29 3a 6e 6f 74 28 2e 67 79 59 6c 43 67 29 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 43 41 46 53 77 67 2e 5f 30 59 47 35 6e 67 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 4a 41 37 70 66 41 2e 63 65 59 37 7a 51 2c 2e 43 41 46 53 77 67 2e 5f 30 59 47 35 6e 67 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 4a 41 37 70 66 41 2e 7a 57 37 45 6b 51 2c 2e 43 41 46 53 77 67 2e 5f 30 59 47 35 6e 67 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 7a 57 37 45 6b 51 20 2e 4a 41 37 70 66 41 3a 6e 6f 74 28 2e 5a 61 6b 48 67 41 29 3a 6e 6f 74 28 2e 67 79 59 6c 43 67 29 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 Data Ascii: EkQ .JA7pfA:not(.ZakHgA):not(.gyYlCg){opacity:0;transition:opacity .15s ease-in-out}.CAFSwg._0YG5ng:focus-within .JA7pfA.ceY7zQ,.CAFSwg._0YG5ng:focus-within .JA7pfA.zW7EkQ,.CAFSwg._0YG5ng:focus-within .zW7EkQ .JA7pfA:not(.ZakHgA):not(.gyYlCg),.CAFSwg:hove
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 41 3a 6e 6f 74 28 2e 7a 57 37 45 6b 51 29 3a 6e 6f 74 28 2e 67 79 59 6c 43 67 29 2c 2e 43 41 46 53 77 67 2e 5f 30 59 47 35 6e 67 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 5f 34 35 72 63 55 51 20 2e 4a 41 37 70 66 41 2e 5a 61 6b 48 67 41 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 4a 41 37 70 66 41 2e 5a 61 6b 48 67 41 2e 56 54 68 48 44 41 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 4a 41 37 70 66 41 2e 5a 61 6b 48 67 41 2e 5f 34 35 72 63 55 51 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 56 54 68 48 44 41 20 2e 4a 41 37 70 66 41 2e 5a 61 6b 48 67 41 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 5a 61 6b 48 67 41 2e 56 54 68 48 44 41 20 2e 4a 41 37 70 66 41 3a 6e 6f 74 28 2e 7a 57 37 45 6b 51 29 3a 6e 6f 74 28 2e 67 79 59 6c 43 67 29 2c 2e Data Ascii: A:not(.zW7EkQ):not(.gyYlCg),.CAFSwg._0YG5ng:focus-within ._45rcUQ .JA7pfA.ZakHgA,.CAFSwg:hover .JA7pfA.ZakHgA.VThHDA,.CAFSwg:hover .JA7pfA.ZakHgA._45rcUQ,.CAFSwg:hover .VThHDA .JA7pfA.ZakHgA,.CAFSwg:hover .ZakHgA.VThHDA .JA7pfA:not(.zW7EkQ):not(.gyYlCg),.
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 2e 5f 39 51 51 6c 57 77 20 2e 4a 41 37 70 66 41 2e 5a 61 6b 48 67 41 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 65 70 67 37 75 77 20 2e 4a 41 37 70 66 41 2e 5a 61 6b 48 67 41 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 2e 47 43 4f 6f 67 51 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 6f 38 34 34 51 2e 62 53 4b 46 53 41 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 62 53 4b 46 53 41 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 4c 76 64 52 6b 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 4c 76 64 52 6b 67 3a 61 66 Data Ascii: ._9QQlWw .JA7pfA.ZakHgA,.CAFSwg:hover .epg7uw .JA7pfA.ZakHgA{opacity:1;transform:translateY(0)}.GCOogQ{display:flex;flex-direction:column;height:100%;width:100%}.ao844Q.bSKFSA{height:auto}.bSKFSA{height:100%;width:100%}.LvdRkg{position:relative}.LvdRkg:af
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 31 32 70 78 7d 2e 77 4b 69 69 4c 77 20 2e 5f 39 41 6c 34 4f 51 2c 2e 77 4b 69 69 4c 77 20 2e 76 67 57 75 45 67 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 31 73 20 6c 69 6e 65 61 72 7d 2e 77 58 37 6c 41 51 3a 68 6f 76 65 72 20 2e 5f 39 41 6c 34 4f 51 2c 2e 77 58 37 6c 41 51 3a 68 6f 76 65 72 20 2e 76 67 57 75 45 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 30 35 29 7d 2e 44 71 7a 59 5f 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 44 71 7a 59 5f 67 20 2e 5f 36 6d 62 6e 48 41 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 44 71 7a 59 5f 67 20 2e 47 43 4f 6f 67 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 Data Ascii: radius:12px}.wKiiLw ._9Al4OQ,.wKiiLw .vgWuEg{transition:transform .1s linear}.wX7lAQ:hover ._9Al4OQ,.wX7lAQ:hover .vgWuEg{transform:scale(1.05)}.DqzY_g{box-sizing:border-box;width:100%}.DqzY_g ._6mbnHA{height:auto;width:auto}.DqzY_g .GCOogQ{align-items:ce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49732	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	1399	OUT	GET /chunk-batch/6647f35392aa70f6.js+417c62e513c0b3c2.js+ba8cda51a99f46d3.vendor.js+8e82ba8db0d6b18d.js+98c70a64f41e40c7.js+cc32cfc96d47808d.js+7693127bffb8514f.js+c5b6907854a89666.js+880d457741e39ad1.js+1c5ac52ad7165cc8.js+a17fdee60a10aa7a.js+45289403e160a2f4.js+34a4828ac8521b19.js+3bedbe9da81e71e9.js+8d8161777ba9d7c7.js+05b9dec1d6ad0ee7.js+289d46569ebc6b34.js+8d89a659626a2d7c.vendor.js+87dc93060d688e5f.vendor.js+53c5f62f8542e2d5.vendor.js+c60c10a90fbee0d2.vendor.js+465acf2d61fe3aef.js+da63b553e5f04517.js+05933124bc87daac.js+fa1d7006fea5d810.js+707974868651152d.js+0c2b0b465710b0c0.js+cfc0eaca77e313af.js+fc899ef176474fda.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1148	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/javascript Content-Length: 362791 Connection: close CF-Ray: 87dd9801ca577c6f-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8484 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Fri, 03 May 2024 02:16:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: sLXMeh07S/ciQqLEWgEjXfvgWhJfh9fCr6LPoRFOfdocQCf45qcsTws6m4VbVueLK58ZwaabzX8= x-amz-replication-status: COMPLETED x-amz-request-id: XGCGR8843WBC5DVB x-amz-server-side-encryption: AES256 x-amz-version-id: Y2bNN308mq.lfghYAlALqMJGeuQ1VpKT X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	370	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6a 69 39 45 25 32 42 7a 78 32 66 4b 65 6d 78 41 63 4b 49 52 47 4b 5a 64 50 34 48 4c 65 38 25 32 42 65 4f 6a 33 70 6c 6d 63 38 5a 79 4b 72 4e 38 52 25 32 46 37 73 4d 50 36 50 63 45 47 6e 44 75 53 59 31 25 32 42 6e 67 30 30 4c 61 64 34 6d 75 30 4f 51 38 7a 42 6f 51 4e 25 32 42 65 63 70 75 79 76 25 32 42 4d 4c 79 75 30 4b 5a 30 74 66 65 32 63 54 41 32 52 55 6e 5a 6a 31 43 71 36 33 6f 6d 63 64 34 31 25 32 42 58 55 50 64 34 6c 44 33 36 61 45 6e 34 53 71 72 79 68 55 61 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ji9E%2Bzx2fKemxAcKIRGKZdP4HLe8%2BeOj3plmc8ZyKrN8R%2F7sMP6PcEGnDuSY1%2Bng00Lad4mu0OQ8zBoQN%2Becpuyv%2BMLyu0KZ0tfe2cTA2RUnZj1Cq63omcd41%2BXUPd4lD36aEn4SqryhUac%3D"}],"group":"cf-n
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 36 36 34 37 66 33 35 33 39 32 61 61 37 30 66 36 2e 6a 73 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 35 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 33 37 32 32 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f Data Ascii: ;// __FILE_CONTENT_FOR__:6647f35392aa70f6.js(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6857],{/***/ 237221:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 67 6e 3a 61 2e 70 73 62 2c 62 72 61 6e 64 5f 6b 69 74 5f 69 64 3a 61 2e 62 69 62 2c 64 65 73 69 67 6e 5f 73 65 73 73 69 6f 6e 5f 69 64 3a 61 2e 68 6c 62 2c 6e 61 76 69 67 61 74 69 6f 6e 5f 63 6f 72 72 65 6c 61 74 69 6f 6e 5f 69 64 3a 61 2e 44 75 2c 69 73 5f 64 65 73 69 67 6e 5f 6f 77 6e 65 72 3a 61 2e 62 35 2c 64 65 73 69 67 6e 5f 6f 77 6e 65 72 5f 75 73 65 72 5f 69 64 3a 61 2e 7a 55 2c 61 63 63 65 73 73 5f 72 6f 6c 65 3a 61 2e 66 65 2c 76 69 65 77 5f 6d 6f 64 65 3a 61 2e 73 5f 2c 65 64 69 74 5f 6d 6f 64 65 3a 61 2e 24 6c 62 2c 65 6d 62 65 64 64 65 64 5f 70 61 67 65 5f 73 6f 75 72 63 65 3a 61 2e 68 6d 62 2c 0a 70 6f 73 69 74 69 6f 6e 69 6e 67 3a 61 2e 76 64 2c 69 73 5f 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 5f 73 63 65 6e 65 73 3a 61 2e 54 70 62 2c 73 65 6c Data Ascii: gn:a.psb,brand_kit_id:a.bib,design_session_id:a.hlb,navigation_correlation_id:a.Du,is_design_owner:a.b5,design_owner_user_id:a.zU,access_role:a.fe,view_mode:a.s_,edit_mode:a.$lb,embedded_page_source:a.hmb,positioning:a.vd,is_proportional_scenes:a.Tpb,sel
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 74 2f 72 65 6e 64 65 72 65 72 2f 22 29 2e 70 6f 70 28 29 3b 69 66 28 21 61 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 64 65 73 69 67 6e 2f 22 29 29 72 65 74 75 72 6e 20 61 3b 63 6f 6e 73 74 20 62 3d 61 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 34 3e 62 2e 6c 65 6e 67 74 68 7c 7c 46 6d 61 2e 68 61 73 28 62 5b 33 5d 29 29 72 65 74 75 72 6e 20 61 3b 62 5b 33 5d 3d 22 2a 2a 2a 2a 2a 22 3b 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 2f 22 29 7d 3b 5f 5f 63 2e 43 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 7c 7c 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 7c 7c 21 61 2e 73 74 61 72 74 73 57 69 74 68 28 22 3f 22 29 29 72 65 74 75 72 6e 20 61 3b 61 3d 61 2e 73 6c 69 63 65 28 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2b 31 29 2e 73 70 6c 69 74 28 22 26 Data Ascii: t/renderer/").pop();if(!a.startsWith("/design/"))return a;const b=a.split("/");if(4>b.length\|\|Fma.has(b[3]))return a;b[3]="*****";return b.join("/")};__c.Cma=function(a){if(!a\|\|0===a.length\|\|!a.startsWith("?"))return a;a=a.slice(a.indexOf("?")+1).split("&
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 6d 38 2e 32 34 38 20 34 2e 32 31 32 20 31 31 2e 30 35 20 36 2e 35 37 34 63 2e 36 39 34 2e 34 31 32 2e 39 31 20 31 2e 32 39 2e 34 38 33 20 31 2e 39 36 31 2d 2e 31 32 31 2e 31 39 2d 2e 32 38 37 2e 33 35 2d 2e 34 38 33 2e 34 36 37 6c 2d 31 31 2e 30 35 20 36 2e 35 37 34 63 2d 2e 36 39 34 2e 34 31 33 2d 31 2e 36 30 32 2e 32 30 34 2d 32 2e 30 33 2d 2e 34 36 37 41 31 2e 33 39 20 31 2e 33 39 20 30 20 30 20 31 20 36 20 31 38 2e 35 37 34 56 35 2e 34 32 36 43 36 20 34 2e 36 33 Data Ascii: x="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="m8.248 4.212 11.05 6.574c.694.412.91 1.29.483 1.961-.121.19-.287.35-.483.467l-11.05 6.574c-.694.413-1.602.204-2.03-.467A1.39 1.39 0 0 1 6 18.574V5.426C6 4.63
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 65 5f 63 6f 6e 74 65 78 74 3a 6e 75 6c 6c 3d 3d 61 2e 50 6c 3f 76 6f 69 64 20 30 3a 5f 5f 63 2e 63 6e 28 61 2e 50 6c 29 2c 65 64 69 74 69 6e 67 5f 63 6f 6e 74 65 78 74 3a 6e 75 6c 6c 3d 3d 61 2e 53 72 3f 76 6f 69 64 20 30 3a 5f 5f 63 2e 62 6e 28 61 2e 53 72 29 7d 29 7d 7d 3b 5f 5f 63 2e 6c 6e 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 73 75 70 65 72 28 60 43 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 72 65 71 75 69 72 65 64 20 73 65 72 76 69 63 65 2c 20 5c 60 24 7b 48 6d 61 28 61 29 7d 5c 60 2c 20 69 73 20 6e 75 6c 6c 69 73 68 2e 60 29 7d 7d 3b 5f 5f 63 2e 6d 6e 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 73 75 70 65 72 28 60 43 Data Ascii: e_context:null==a.Pl?void 0:__c.cn(a.Pl),editing_context:null==a.Sr?void 0:__c.bn(a.Sr)})}};__c.ln=class extends Error{constructor(a){super(`Capability for required service, \`${Hma(a)}\`, is nullish.`)}};__c.mn=class extends Error{constructor(a){super(`C
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 69 64 20 30 29 3b 6c 28 68 29 7d 7d 7d 3b 0a 5f 5f 63 2e 70 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 28 30 3c 61 2e 6c 65 6e 67 74 68 29 3b 74 28 61 2e 65 76 65 72 79 28 62 3d 3e 30 3e 62 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 29 3b 72 65 74 75 72 6e 20 5f 5f 63 2e 6f 6e 28 6e 65 77 20 5f 5f 63 2e 4e 6d 61 28 5b 22 22 2c 2e 2e 2e 61 2e 6d 61 70 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 5d 2e 6a 6f 69 6e 28 22 2f 22 29 29 29 7d 3b 5f 5f 63 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 62 29 72 65 74 75 72 6e 20 61 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 66 6f 72 28 63 6f 6e 73 74 20 5b 63 2c 64 5d 6f 66 20 62 29 5f 5f 63 2e 71 6e 28 61 2c 63 2c 64 29 3b 65 6c 73 65 20 66 6f 72 28 63 6f 6e Data Ascii: id 0);l(h)}}};__c.pn=function(a){t(0<a.length);t(a.every(b=>0>b.indexOf("?")));return __c.on(new __c.Nma(["",...a.map(encodeURIComponent)].join("/")))};__c.on=function(a,b){if(!b)return a;if(b instanceof Map)for(const [c,d]of b)__c.qn(a,c,d);else for(con
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 63 65 2e 6e 6f 77 28 29 7d 29 29 3b 62 2e 63 66 61 26 26 28 6e 75 6c 6c 3d 3d 3d 28 6c 3d 62 2e 57 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 65 6e 64 28 29 29 3b 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 30 3a 6e 75 6c 6c 3d 3d 3d 28 6d 3d 65 2e 74 72 61 63 69 6e 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 30 3a 6d 2e 63 66 61 29 26 26 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 74 72 61 63 69 6e 67 2e 57 29 7c 7c 0a 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 6e 64 28 29 29 3b 6e 75 6c 6c 3d 3d 3d 28 70 3d 62 2e 69 33 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 76 6f 69 64 20 30 3a 70 2e 63 61 6c 6c 28 62 29 3b 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 Data Ascii: ce.now()}));b.cfa&&(null===(l=b.W)\|\|void 0===l?void 0:l.end());(null===e\|\|void 0===e?0:null===(m=e.tracing)\|\|void 0===m?0:m.cfa)&&(null===(n=e.tracing.W)\|\|void 0===n?void 0:n.end());null===(p=b.i3a)\|\|void 0===p?void 0:p.call(b);null===e\|\|void 0===e?void
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 6f 6e 3a 4f 28 37 29 7d 29 29 3b 5f 5f 63 2e 76 6e 3d 47 28 28 29 3d 3e 28 7b 65 76 65 6e 74 49 64 3a 4e 28 31 29 2c 75 73 65 72 49 64 3a 4f 28 32 29 2c 41 6a 3a 4f 28 34 29 2c 55 4b 3a 4f 28 31 38 29 2c 57 4e 3a 4e 28 35 29 2c 7a 46 61 3a 4e 28 36 29 2c 74 69 6d 65 7a 6f 6e 65 3a 4f 28 37 29 2c 6c 6f 63 61 6c 65 3a 4f 28 38 29 2c 6c 6f 63 61 74 69 6f 6e 3a 44 28 39 2c 56 6d 61 29 2c 4e 79 3a 4f 28 31 30 29 2c 67 56 3a 28 30 2c 5f 5f 63 2e 49 64 29 28 31 31 29 2c 63 68 61 6e 6e 65 6c 3a 5f 5f 63 2e 52 61 28 31 33 2c 57 6d 61 29 2c 6f 4e 3a 44 28 31 34 2c 5f 5f 63 2e 58 6d 61 29 2c 70 61 67 65 3a 44 28 31 35 2c 5f 5f 63 2e 59 6d 61 29 2c 73 65 73 73 69 6f 6e 49 64 3a 4f 28 31 37 29 7d 29 29 3b 5f 5f 63 2e 77 6e 3d 47 28 28 29 3d 3e 28 7b 62 75 69 6c 64 3a Data Ascii: on:O(7)}));__c.vn=G(()=>({eventId:N(1),userId:O(2),Aj:O(4),UK:O(18),WN:N(5),zFa:N(6),timezone:O(7),locale:O(8),location:D(9,Vma),Ny:O(10),gV:(0,__c.Id)(11),channel:__c.Ra(13,Wma),oN:D(14,__c.Xma),page:D(15,__c.Yma),sessionId:O(17)}));__c.wn=G(()=>({build:
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 28 28 29 3d 3e 28 7b 59 6f 61 3a 5f 5f 63 2e 52 61 28 31 2c 64 6e 61 29 2c 48 47 3a 4e 28 32 29 2c 49 59 3a 5f 5f 63 2e 78 64 28 33 29 2c 65 78 70 69 72 79 3a 5f 5f 63 2e 78 64 28 34 29 2c 72 65 71 75 65 73 74 49 64 3a 4f 28 35 29 7d 29 29 3b 5f 5f 63 2e 47 6e 3d 47 28 28 29 3d 3e 28 7b 41 4a 3a 5f 5f 63 2e 51 28 31 29 2c 70 65 72 66 6f 72 6d 61 6e 63 65 3a 5f 5f 63 2e 51 28 32 29 2c 75 48 3a 5f 5f 63 2e 51 28 33 29 2c 78 5a 3a 5f 5f 63 2e 51 28 34 29 2c 47 43 3a 4f 28 35 29 7d 29 29 3b 5f 5f 63 2e 66 6e 61 3d 47 28 28 29 3d 3e 28 7b 62 6f 64 79 3a 51 61 28 35 2c 5f 5f 63 2e 47 6e 29 7d 29 29 3b 5f 5f 63 2e 67 6e 61 3d 47 28 28 29 3d 3e 28 7b 6e 61 6d 65 3a 4e 28 31 29 2c 70 72 6f 70 65 72 74 69 65 73 3a 28 30 2c 5f 5f 63 2e 49 64 29 28 32 29 7d 29 29 3b Data Ascii: (()=>({Yoa:__c.Ra(1,dna),HG:N(2),IY:__c.xd(3),expiry:__c.xd(4),requestId:O(5)}));__c.Gn=G(()=>({AJ:__c.Q(1),performance:__c.Q(2),uH:__c.Q(3),xZ:__c.Q(4),GC:O(5)}));__c.fna=G(()=>({body:Qa(5,__c.Gn)}));__c.gna=G(()=>({name:N(1),properties:(0,__c.Id)(2)}));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49731	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	1099	OUT	GET /chunk-batch/95474928a9a5af52.js+dc07c5a1154ad7a0.js+5076922314c2ed51.js+f93dccbffe488059.js+0237a18c22b25e38.js+40cb2db19562ec27.js+dae762eb4978b801.js+17450c9d444078d8.vendor.js+285485d1434d4bdd.js+efe0e692df3b9c60.js+a90e3dd08aac95a4.js+50b53a1734a4b30f.js+0dc631ee4e9245c1.js+f393d4cc8de0a0a8.js+6c0ea36590d49674.strings.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:04 UTC	1148	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:04 GMT Content-Type: text/javascript Content-Length: 976785 Connection: close CF-Ray: 87dd98024ddc4358-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8399 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:50 GMT Last-Modified: Fri, 03 May 2024 02:16:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 0za8csAc+KchA/p4nZhh9QVsV35OLvFu1k+Anw4BMcLhuQ6+2eaHCBlUEHYNYz+v2C13L86sj20= x-amz-replication-status: COMPLETED x-amz-request-id: XGCPKCZ448KDB20W x-amz-server-side-encryption: AES256 x-amz-version-id: jlaHE8vI6sz554.zsoZqW6CKvgWAPOZY X-Content-Type-Options: nosniff
2024-05-03 04:44:04 UTC	362	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 77 6f 70 71 71 6c 4a 46 66 4b 50 48 61 75 4c 4c 48 47 62 50 61 43 37 5a 61 31 6c 66 71 58 31 73 42 50 72 67 56 31 51 53 31 68 50 6c 73 78 42 49 66 55 62 45 58 77 6c 58 45 41 68 62 37 4b 25 32 46 4b 4f 42 48 42 4c 73 58 53 6d 79 48 35 56 34 77 46 62 76 37 4b 49 6a 31 4d 30 69 50 4b 25 32 46 34 38 6a 7a 42 30 54 64 6f 70 68 34 4c 69 41 47 73 64 25 32 46 4d 4e 37 53 4f 35 41 49 44 69 69 39 4f 7a 62 35 6b 32 4a 65 67 33 64 70 37 76 51 4d 4e 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7wopqqlJFfKPHauLLHGbPaC7Za1lfqX1sBPrgV1QS1hPlsxBIfUbEXwlXEAhb7K%2FKOBHBLsXSmyH5V4wFbv7KIj1M0iPK%2F48jzB0Tdoph4LiAGsd%2FMN7SO5AIDii9Ozb5k2Jeg3dp7vQMNs%3D"}],"group":"cf-nel","max
2024-05-03 04:44:04 UTC	1228	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 39 35 34 37 34 39 32 38 61 39 61 35 61 66 35 32 2e 6a 73 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 30 33 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 39 31 33 37 32 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f Data Ascii: ;// __FILE_CONTENT_FOR__:95474928a9a5af52.js(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9003],{/***/ 913728:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 76 61 72 20 47 3d 5f 5f 63 2e 47 3b 76 61 72 20 65 61 3d 5f 5f 63 2e 65 61 3b 76 61 72 20 4d 62 3d 5f 5f 63 2e 4d 62 3b 76 61 72 20 56 79 3d 5f 5f 63 2e 56 79 3b 76 61 72 20 76 77 3d 5f 5f 63 2e 76 77 3b 76 61 72 20 61 73 3d 5f 5f 63 2e 61 73 3b 76 61 72 20 62 73 3d 5f 5f 63 2e 62 73 3b 76 61 72 20 74 77 3d 5f 5f 63 2e 74 77 3b 76 61 72 20 75 77 3d 5f 5f 63 2e 75 77 3b 76 61 72 20 24 72 3d 5f 5f 63 2e 24 72 3b 76 61 72 20 59 72 3d 5f 5f 63 2e 59 72 3b 76 61 72 20 5a 72 3d 5f 5f 63 2e 5a 72 3b 0a 76 61 72 20 77 77 3d 5f 5f 63 2e 77 77 3b 76 61 72 20 6c 77 3d 5f 5f 63 2e 6c 77 3b 76 61 72 20 6b 77 3d 5f 5f 63 2e 6b 77 3b 76 61 72 20 6e 77 3d 5f 5f 63 2e 6e 77 3b 76 61 72 20 6d 77 3d 5f 5f 63 2e 6d 77 3b 76 61 72 20 64 43 3d 5f 5f 63 2e 64 43 3b 76 61 72 20 Data Ascii: var G=__c.G;var ea=__c.ea;var Mb=__c.Mb;var Vy=__c.Vy;var vw=__c.vw;var as=__c.as;var bs=__c.bs;var tw=__c.tw;var uw=__c.uw;var $r=__c.$r;var Yr=__c.Yr;var Zr=__c.Zr;var ww=__c.ww;var lw=__c.lw;var kw=__c.kw;var nw=__c.nw;var mw=__c.mw;var dC=__c.dC;var
2024-05-03 04:44:04 UTC	207	IN	Data Raw: 20 6c 78 3d 5f 5f 63 2e 6c 78 3b 76 61 72 20 24 79 3d 5f 5f 63 2e 24 79 3b 76 61 72 20 44 7a 3d 5f 5f 63 2e 44 7a 3b 76 61 72 20 4f 79 3d 5f 5f 63 2e 4f 79 3b 76 61 72 20 6d 79 3d 5f 5f 63 2e 6d 79 3b 76 61 72 20 78 79 3d 5f 5f 63 2e 78 79 3b 76 61 72 20 71 73 3d 5f 5f 63 2e 71 73 3b 76 61 72 20 53 72 3d 5f 5f 63 2e 53 72 3b 76 61 72 20 70 73 3d 5f 5f 63 2e 70 73 3b 76 61 72 20 61 6e 3d 5f 5f 63 2e 61 6e 3b 76 61 72 20 58 62 3d 5f 5f 63 2e 58 62 3b 76 61 72 20 67 65 3d 5f 5f 63 2e 67 65 3b 76 61 72 20 69 62 3d 5f 5f 63 2e 69 62 3b 76 61 72 20 71 62 3d 5f 5f 63 2e 71 62 3b 76 61 72 20 6f 79 3d 5f 5f 63 2e 6f 79 3b Data Ascii: lx=__c.lx;var $y=__c.$y;var Dz=__c.Dz;var Oy=__c.Oy;var my=__c.my;var xy=__c.xy;var qs=__c.qs;var Sr=__c.Sr;var ps=__c.ps;var an=__c.an;var Xb=__c.Xb;var ge=__c.ge;var ib=__c.ib;var qb=__c.qb;var oy=__c.oy;
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 76 61 72 20 6e 79 3d 5f 5f 63 2e 6e 79 3b 76 61 72 20 52 77 3d 5f 5f 63 2e 52 77 3b 76 61 72 20 70 61 3d 5f 5f 63 2e 70 61 3b 76 61 72 20 74 3d 5f 5f 63 2e 74 3b 76 61 72 20 7a 3d 5f 5f 63 2e 7a 3b 0a 76 61 72 20 67 4d 61 2c 68 4d 61 2c 69 4d 61 2c 6a 4d 61 2c 6b 4d 61 2c 6c 4d 61 2c 72 44 2c 73 44 2c 6d 4d 61 2c 6e 4d 61 2c 6f 4d 61 2c 70 4d 61 2c 74 44 2c 71 4d 61 2c 75 44 2c 76 44 2c 77 44 2c 74 4d 61 2c 75 4d 61 2c 76 4d 61 2c 77 4d 61 2c 79 44 2c 7a 44 2c 78 4d 61 2c 41 44 2c 7a 4d 61 2c 43 4d 61 2c 44 4d 61 2c 45 4d 61 2c 46 4d 61 2c 48 4d 61 2c 49 4d 61 2c 4c 4d 61 2c 4d 4d 61 2c 4e 4d 61 2c 46 44 2c 47 44 2c 4f 4d 61 2c 48 44 2c 50 4d 61 2c 51 4d 61 2c 52 4d 61 2c 53 4d 61 2c 54 4d 61 2c 55 4d 61 2c 49 44 2c 56 4d 61 2c 57 4d 61 2c 4a 44 2c 58 4d Data Ascii: var ny=__c.ny;var Rw=__c.Rw;var pa=__c.pa;var t=__c.t;var z=__c.z;var gMa,hMa,iMa,jMa,kMa,lMa,rD,sD,mMa,nMa,oMa,pMa,tD,qMa,uD,vD,wD,tMa,uMa,vMa,wMa,yD,zD,xMa,AD,zMa,CMa,DMa,EMa,FMa,HMa,IMa,LMa,MMa,NMa,FD,GD,OMa,HD,PMa,QMa,RMa,SMa,TMa,UMa,ID,VMa,WMa,JD,XM
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 4f 54 61 2c 51 54 61 2c 73 47 2c 53 54 61 2c 52 54 61 2c 54 54 61 2c 55 54 61 2c 56 54 61 2c 5a 54 61 2c 58 54 61 2c 59 54 61 2c 57 54 61 2c 61 55 61 2c 24 54 61 2c 62 55 61 2c 75 47 2c 66 55 61 2c 68 55 61 2c 69 55 61 2c 67 55 61 2c 64 55 61 2c 6c 55 61 2c 76 47 2c 6a 55 61 2c 6b 55 61 2c 65 55 61 2c 6d 55 61 2c 77 47 2c 6f 55 61 2c 70 55 61 2c 71 55 61 2c 44 55 61 2c 46 55 61 2c 4d 55 61 2c 4b 55 61 2c 4a 55 61 2c 4c 55 61 2c 49 55 61 2c 50 55 61 2c 51 55 61 2c 52 55 61 2c 53 55 61 2c 55 55 61 2c 61 56 61 2c 56 55 61 2c 57 55 61 2c 58 55 61 2c 24 55 61 2c 62 56 61 2c 54 55 61 2c 68 56 61 2c 63 56 61 2c 59 55 61 2c 0a 49 47 2c 4c 47 2c 69 56 61 2c 5a 55 61 2c 65 56 61 2c 6a 56 61 2c 6c 56 61 2c 6e 56 61 2c 4d 47 2c 6f 56 61 2c 70 56 61 2c 71 56 61 2c 42 Data Ascii: OTa,QTa,sG,STa,RTa,TTa,UTa,VTa,ZTa,XTa,YTa,WTa,aUa,$Ta,bUa,uG,fUa,hUa,iUa,gUa,dUa,lUa,vG,jUa,kUa,eUa,mUa,wG,oUa,pUa,qUa,DUa,FUa,MUa,KUa,JUa,LUa,IUa,PUa,QUa,RUa,SUa,UUa,aVa,VUa,WUa,XUa,$Ua,bVa,TUa,hVa,cVa,YUa,IG,LG,iVa,ZUa,eVa,jVa,lVa,nVa,MG,oVa,pVa,qVa,B
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 2c 7a 30 61 2c 41 30 61 2c 42 30 61 2c 6f 4a 2c 43 30 61 2c 75 4a 2c 45 30 61 2c 46 30 61 2c 47 30 61 2c 44 30 61 2c 49 30 61 2c 4f 30 61 2c 53 30 61 2c 55 30 61 2c 54 30 61 2c 65 31 61 2c 48 30 61 2c 62 31 61 2c 41 4a 2c 66 31 61 2c 67 31 61 2c 68 31 61 2c 47 4a 2c 48 4a 2c 6d 31 61 2c 49 4a 2c 6e 31 61 2c 4a 4a 2c 6f 31 61 2c 70 31 61 2c 4b 4a 2c 4c 4a 2c 71 31 61 2c 4d 4a 2c 72 31 61 2c 73 31 61 2c 4e 4a 2c 74 31 61 2c 4f 4a 2c 75 31 61 2c 77 31 61 2c 76 31 61 2c 54 4a 2c 78 31 61 2c 53 4a 2c 79 31 61 2c 55 4a 2c 56 4a 2c 57 4a 2c 58 4a 2c 7a 31 61 2c 41 31 61 2c 42 31 61 2c 43 31 61 2c 5a 4a 2c 46 31 61 2c 59 4a 2c 24 4a 2c 47 31 61 2c 48 31 61 2c 44 31 61 2c 4a 31 61 2c 49 31 61 2c 61 4b 2c 4e 31 61 2c 4d 31 61 2c 4f 31 61 2c 50 31 61 2c 62 4b 2c 63 Data Ascii: ,z0a,A0a,B0a,oJ,C0a,uJ,E0a,F0a,G0a,D0a,I0a,O0a,S0a,U0a,T0a,e1a,H0a,b1a,AJ,f1a,g1a,h1a,GJ,HJ,m1a,IJ,n1a,JJ,o1a,p1a,KJ,LJ,q1a,MJ,r1a,s1a,NJ,t1a,OJ,u1a,w1a,v1a,TJ,x1a,SJ,y1a,UJ,VJ,WJ,XJ,z1a,A1a,B1a,C1a,ZJ,F1a,YJ,$J,G1a,H1a,D1a,J1a,I1a,aK,N1a,M1a,O1a,P1a,bK,c
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 2c 58 51 61 2c 43 38 61 2c 44 38 61 2c 45 38 61 2c 46 38 61 2c 47 38 61 2c 59 51 61 2c 62 52 61 2c 24 51 61 2c 5a 51 61 2c 61 52 61 2c 6b 4e 2c 48 38 61 2c 4b 4d 61 2c 49 38 61 2c 44 44 2c 4a 38 61 2c 43 44 2c 4b 38 61 2c 46 47 2c 45 47 2c 63 47 2c 68 54 61 2c 69 54 61 2c 6a 54 61 2c 6b 54 61 2c 6c 54 61 2c 4c 38 61 2c 4d 38 61 2c 6b 56 61 2c 6d 56 61 2c 46 50 61 2c 44 50 61 2c 79 50 61 2c 41 50 61 2c 4e 38 61 2c 4f 38 61 2c 50 38 61 2c 51 38 61 2c 52 38 61 2c 53 38 61 2c 54 38 61 2c 4b 31 61 2c 67 46 2c 69 46 2c 6a 46 2c 6b 46 2c 65 49 2c 68 49 2c 74 46 2c 66 4c 2c 67 4c 2c 68 4c 2c 6b 4c 2c 6c 4c 2c 6d 4c 2c 6e 4c 2c 6f 4c 2c 70 4c 2c 71 4c 2c 72 4c 2c 43 4c 2c 73 4b 2c 75 4b 2c 74 4b 2c 74 4c 2c 75 4c 2c 76 4c 2c 78 4c 2c 7a 4c 2c 41 4c 2c 6c 33 61 2c Data Ascii: ,XQa,C8a,D8a,E8a,F8a,G8a,YQa,bRa,$Qa,ZQa,aRa,kN,H8a,KMa,I8a,DD,J8a,CD,K8a,FG,EG,cG,hTa,iTa,jTa,kTa,lTa,L8a,M8a,kVa,mVa,FPa,DPa,yPa,APa,N8a,O8a,P8a,Q8a,R8a,S8a,T8a,K1a,gF,iF,jF,kF,eI,hI,tF,fL,gL,hL,kL,lL,mL,nL,oL,pL,qL,rL,CL,sK,uK,tK,tL,uL,vL,xL,zL,AL,l3a,
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 28 66 2c 67 29 3d 3e 7b 65 2e 45 4b 28 29 3b 64 2e 7a 54 28 67 29 3b 65 2e 70 66 28 66 29 7d 2c 69 6e 73 65 72 74 3a 28 66 2c 67 29 3d 3e 7b 64 2e 7a 54 28 67 29 3b 64 2e 69 6e 73 65 72 74 28 66 29 7d 7d 29 3b 65 2e 45 4b 28 29 3b 72 65 74 75 72 6e 20 64 2e 62 75 69 6c 64 28 29 7d 3b 6c 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 63 68 61 72 4c 65 6e 67 74 68 3b 74 28 61 2e 69 73 45 6d 70 74 79 3f 30 3d 3d 3d 62 3a 30 3c 3d 62 26 26 62 3c 63 2c 22 69 6e 64 65 78 20 6f 75 74 20 6f 66 20 62 6f 75 6e 64 73 3a 20 7b 7d 20 5c 75 32 32 30 39 20 5b 7b 7d 2c 20 7b 7d 29 22 2c 62 2c 30 2c 63 29 7d 3b 72 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 63 6f 6e 73 74 20 65 3d 5f 5f 63 2e 77 73 28 61 2c 22 61 6c 6c 22 Data Ascii: (f,g)=>{e.EK();d.zT(g);e.pf(f)},insert:(f,g)=>{d.zT(g);d.insert(f)}});e.EK();return d.build()};lMa=function(a,b){const c=a.charLength;t(a.isEmpty?0===b:0<=b&&b<c,"index out of bounds: {} \u2209 [{}, {})",b,0,c)};rD=function(a,b,c,d){const e=__c.ws(a,"all"
2024-05-03 04:44:04 UTC	1369	IN	Data Raw: 63 29 7b 61 3d 75 44 28 61 2c 62 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 63 28 61 29 7d 66 69 6e 61 6c 6c 79 7b 61 2e 64 65 73 74 72 6f 79 28 29 7d 7d 3b 77 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 76 44 28 61 2c 62 2c 63 3d 3e 63 2e 54 62 28 29 29 7d 3b 0a 74 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 52 77 3b 63 6f 6e 73 74 20 63 3d 7b 7d 2c 64 3d 7b 7d 3b 61 2e 66 6f 72 45 61 63 68 28 28 65 2c 66 29 3d 3e 7b 62 2e 63 7a 28 66 29 26 26 28 64 5b 66 5d 3d 65 2c 63 5b 66 5d 3d 5f 5f 63 2e 74 73 28 62 2e 61 74 74 72 69 62 75 74 65 73 5b 66 5d 2c 65 29 29 7d 29 3b 72 65 74 75 72 6e 7b 61 73 3a 63 2c 73 73 3a 64 7d 7d 3b 75 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 52 77 3b 63 6f 6e 73 74 20 Data Ascii: c){a=uD(a,b);try{return c(a)}finally{a.destroy()}};wD=function(a,b){return vD(a,b,c=>c.Tb())};tMa=function(a){var b=Rw;const c={},d={};a.forEach((e,f)=>{b.cz(f)&&(d[f]=e,c[f]=__c.ts(b.attributes[f],e))});return{as:c,ss:d}};uMa=function(a){var b=Rw;const

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49733	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:04 UTC	1250	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	697	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: max-age=14400, public x-content-type-options: nosniff vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tHutqy3gFLiIBTPPDbLEHEHW8QFTQbCUUnC63w1lokz560esIMG%2B2euxlLLIAPn%2BtNs6vJUxfuIEdztMJMiOmAb%2FrePhbPbUVTUxwU4BVuKb0il2NhybnraftBShmmA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87dd9803bb36c345-EWR
2024-05-03 04:44:05 UTC	672	IN	Data Raw: 31 65 63 64 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 32 33 34 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 39 34 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 31 38 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 31 39 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 55 28 33 30 33 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 36 39 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 33 37 Data Ascii: 1ecdwindow._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(234))/1(-parseInt(U(294))/2)+-parseInt(U(318))/3(-parseInt(U(219))/4)+parseInt(U(303))/5+-parseInt(U(269))/6+-parseInt(U(237
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 29 5d 5b 61 30 28 32 33 32 29 5d 28 44 29 29 29 2c 48 3d 43 5b 61 30 28 32 37 37 29 5d 5b 61 30 28 32 34 30 29 5d 26 26 43 5b 61 30 28 32 36 38 29 5d 3f 43 5b 61 30 28 32 37 37 29 5d 5b 61 30 28 32 34 30 29 5d 28 6e 65 77 20 43 5b 28 61 30 28 32 36 38 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 32 39 32 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 32 33 30 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 31 28 32 34 35 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 30 28 32 39 39 29 5d 5b 61 30 28 32 39 35 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 Data Ascii: )][a0(232)](D))),H=C[a0(277)][a0(240)]&&C[a0(268)]?C[a0(277)][a0(240)](new C[(a0(268))](H)):function(N,a1,O){for(a1=a0,N[a1(292)](),O=0;O<N[a1(230)];N[O]===N[O+1]?N[a1(245)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(299)][a0(295)](I),J=0;J<H
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 3b 38 3e 47 3b 4f 3d 31 26 54 7c 4f 3c 3c 31 2e 36 37 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 32 38 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 54 7c 4f 3c 3c 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 32 38 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 32 35 39 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 4f 3c 3c 31 7c 54 26 31 2e 38 35 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 32 38 30 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 Data Ascii: ;8>G;O=1&T\|O<<1.67,E-1==P?(P=0,N[aa(280)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;O=T\|O<<1,P==E-1?(P=0,N[aa(280)](F(O)),O=0):P++,T=0,G++);for(T=J[aa(259)](0),G=0;16>G;O=O<<1\|T&1.85,P==E-1?(P=0,N[aa(280)](F(O)),O=0):P++,T>>=1,G++);}K--,K==0&&(K=Mat
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 5b 4c 5d 3d 4c 2c 4c 2b 3d 31 29 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 32 33 31 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 32 33 31 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 32 33 Data Ascii: [L]=L,L+=1);for(Q=0,R=Math[ad(231)](2,2),M=1;M!=R;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);switch(Q){case 0:for(Q=0,R=Math[ad(231)](2,8),M=1;M!=R;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[ad(23
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 6f 6e 20 76 28 64 2c 61 34 29 7b 72 65 74 75 72 6e 20 61 34 3d 56 2c 4d 61 74 68 5b 61 34 28 32 32 30 29 5d 28 29 3c 64 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 66 2c 43 2c 61 37 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 29 7b 69 66 28 61 37 3d 56 2c 21 76 28 2e 30 31 29 29 72 65 74 75 72 6e 21 5b 5d 3b 44 3d 5b 61 37 28 32 32 37 29 2b 66 2c 61 37 28 32 36 36 29 2b 4a 53 4f 4e 5b 61 37 28 33 30 34 29 5d 28 43 29 5d 5b 61 37 28 32 39 36 29 5d 28 61 37 28 32 32 31 29 29 3b 74 72 79 7b 69 66 28 45 3d 67 5b 61 37 28 32 35 34 29 5d 2c 46 3d 61 37 28 33 31 39 29 2b 67 5b 61 37 28 32 37 38 29 5d 5b 61 37 28 32 36 35 29 5d 2b 61 37 28 32 38 34 29 2b 31 2b 61 37 28 32 34 36 29 2b 45 2e 72 2b 61 37 28 32 34 39 29 2c 47 3d 6e 65 77 20 67 5b 28 61 37 28 32 36 33 29 29 5d Data Ascii: on v(d,a4){return a4=V,Math[a4(220)]()<d}function z(f,C,a7,D,E,F,G,H,I,J){if(a7=V,!v(.01))return![];D=[a7(227)+f,a7(266)+JSON[a7(304)](C)][a7(296)](a7(221));try{if(E=g[a7(254)],F=a7(319)+g[a7(278)][a7(265)]+a7(284)+1+a7(246)+E.r+a7(249),G=new g[(a7(263))]
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 6a 5b 45 5d 7c 7c 27 3f 27 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 33 2c 43 2c 44 2c 45 2c 46 2c 47 29 7b 61 33 3d 56 3b 74 72 79 7b 72 65 74 75 72 6e 20 43 3d 68 5b 61 33 28 32 37 30 29 5d 28 61 33 28 32 33 36 29 29 2c 43 5b 61 33 28 33 31 33 29 5d 3d 61 33 28 32 35 30 29 2c 43 5b 61 33 28 32 32 34 29 5d 3d 27 2d 31 27 2c 68 5b 61 33 28 32 39 30 29 5d 5b 61 33 28 32 37 36 29 5d 28 43 29 2c 44 3d 43 5b 61 33 28 33 30 31 29 5d 2c 45 3d 7b 7d 2c 45 3d 64 42 7a 78 36 28 44 2c 44 2c 27 27 2c 45 29 2c 45 3d 64 42 7a 78 36 28 44 2c 44 5b 61 33 28 33 31 37 29 5d 7c 7c 44 5b 61 33 28 33 30 36 29 5d 2c 27 6e 2e 27 2c 45 29 2c 45 3d 64 42 7a 78 36 28 44 2c 43 5b 61 33 28 32 37 35 29 5d 2c 27 64 2e 27 2c 45 29 2c 68 5b 61 33 28 32 39 30 29 5d 5b 61 33 28 32 33 38 Data Ascii: j[E]\|\|'?')}function s(a3,C,D,E,F,G){a3=V;try{return C=h[a3(270)](a3(236)),C[a3(313)]=a3(250),C[a3(224)]='-1',h[a3(290)][a3(276)](C),D=C[a3(301)],E={},E=dBzx6(D,D,'',E),E=dBzx6(D,D[a3(317)]\|\|D[a3(306)],'n.',E),E=dBzx6(D,C[a3(275)],'d.',E),h[a3(290)][a3(238
2024-05-03 04:44:05 UTC	376	IN	Data Raw: 69 76 65 20 63 6f 64 65 5d 2c 69 66 72 61 6d 65 2c 37 38 33 32 36 31 35 46 67 6f 45 70 6d 2c 72 65 6d 6f 76 65 43 68 69 6c 64 2c 50 4f 53 54 2c 66 72 6f 6d 2c 6f 6e 74 69 6d 65 6f 75 74 2c 6f 70 65 6e 2c 63 61 74 63 68 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2c 73 70 6c 69 63 65 2c 2f 30 2e 37 35 37 30 34 32 33 30 34 33 31 33 30 30 37 37 3a 31 37 31 34 37 31 30 34 36 36 3a 79 7a 37 61 6d 6c 4c 45 6a 62 6e 45 5f 77 5a 4a 65 68 5f 75 42 38 37 45 73 76 76 53 73 71 41 64 55 6d 75 75 6c 6e 45 39 72 43 6b 2f 2c 64 6f 63 75 6d 65 6e 74 2c 74 69 6d 65 6f 75 74 2c 2f 69 6e 76 69 73 69 62 6c 65 2f 6a 73 64 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 59 75 44 44 46 44 66 54 59 62 41 41 2c 73 74 72 69 6e 67 2c 66 6c 6f 6f 72 2c 5f 5f 43 46 24 63 76 24 70 Data Ascii: ive code],iframe,7832615FgoEpm,removeChild,POST,from,ontimeout,open,catch,application/json,splice,/0.7570423043130077:1714710466:yz7amlLEjbnE_wZJeh_uB87EsvvSsqAdUmuulnE9rCk/,document,timeout,/invisible/jsd,display: none,YuDDFDfTYbAA,string,floor,__CF$cv$p
2024-05-03 04:44:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49734	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/3c8e57c2a7031e58.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1182	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 1679 Connection: close CF-Ray: 87dd9804df24c41b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 92707 Cache-Control: public, max-age=31556926 ETag: "9b9ee6efab9c6d693f859d2d72d70f79" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Thu, 02 May 2024 02:44:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 03 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: c6b2gVdY5+Pg8/D1qtWCHYXw/6vRYnN0mgUxxKbyz/fzXOprWT4/F9xR1ZHkllmKJ6anI6QfW9U= x-amz-replication-status: COMPLETED x-amz-request-id: NJZZ6Q2T8889XWNR x-amz-server-side-encryption: AES256 x-amz-version-id: 5F76OX.EJaUbKv3ILR2DHMmkVS6MfOPS X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 75 63 35 6b 4d 64 55 36 45 62 54 49 67 67 4d 39 71 76 42 35 4e 57 77 50 46 42 31 56 6d 65 74 38 6b 33 34 38 70 53 68 79 66 48 50 51 31 68 70 4b 44 61 35 44 38 48 53 74 71 70 38 4c 7a 55 68 62 32 41 39 38 39 58 68 6f 4d 6e 38 74 71 61 47 67 6d 78 4e 54 6b 41 53 72 36 37 70 6a 51 36 44 76 63 74 55 71 59 4f 47 69 65 55 70 42 55 25 32 42 54 46 6f 4a 39 74 77 31 7a 45 75 30 6a 25 32 42 35 52 38 4e 4b 65 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uc5kMdU6EbTIggM9qvB5NWwPFB1Vmet8k348pShyfHPQ1hpKDa5D8HStqp8LzUhb2A989XhoMn8tqaGgmxNTkASr67pjQ6DvctUqYOGieUpBU%2BTFoJ9tw1zEu0j%2B5R8NKeI%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:05 UTC	1208	IN	Data Raw: 2e 6c 69 67 68 74 7b 2d 2d 63 54 33 6a 62 41 3a 30 2e 30 37 3b 2d 2d 48 74 43 68 6f 67 3a 30 2e 30 32 35 7d 2e 64 61 72 6b 7b 2d 2d 63 54 33 6a 62 41 3a 30 2e 31 35 3b 2d 2d 48 74 43 68 6f 67 3a 30 2e 31 30 7d 40 6b 65 79 66 72 61 6d 65 73 20 48 72 70 6f 57 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 63 54 33 6a 62 41 29 7d 32 35 25 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 48 74 43 68 6f 67 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 63 54 33 6a 62 41 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 63 54 33 6a 62 41 29 7d 7d 2e 6e 37 76 53 66 77 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 70 55 56 37 68 41 29 3b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 63 54 33 6a 62 41 29 7d 2e 53 5f 5a 6b 78 51 7b 61 Data Ascii: .light{--cT3jbA:0.07;--HtChog:0.025}.dark{--cT3jbA:0.15;--HtChog:0.10}@keyframes HrpoWA{0%{opacity:var(--cT3jbA)}25%{opacity:var(--HtChog)}50%{opacity:var(--cT3jbA)}to{opacity:var(--cT3jbA)}}.n7vSfw{background:var(--pUV7hA);opacity:var(--cT3jbA)}.S_ZkxQ{a
2024-05-03 04:44:05 UTC	471	IN	Data Raw: 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 6c 65 66 74 5d 20 2e 63 4c 51 77 31 77 7b 72 69 67 68 74 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 4b 4b 6b 30 78 51 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 38 2c 33 39 2c 34 38 2c 2e 35 29 7d 2e 48 4a 50 76 63 67 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 46 73 37 4f 66 41 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 65 6d 7d 2e 41 43 68 71 45 41 7b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 34 70 78 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 64 69 73 63 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 7d 2e 6c 71 48 79 71 51 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 7d 2e 65 4b 6e 46 57 41 7b 6d 61 72 67 Data Ascii: x-placement^=left] .cLQw1w{right:0;transform:rotate(90deg)}.KKk0xQ{background-color:rgba(28,39,48,.5)}.HJPvcg{height:100%}.Fs7OfA{min-height:1em}.AChqEA{grid-row-gap:4px;display:grid;list-style:disc;padding-left:16px}.lqHyqQ{display:list-item}.eKnFWA{marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49735	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/6d89f736629eee73.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1183	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 8765 Connection: close CF-Ray: 87dd9804dd020f75-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 176548 Cache-Control: public, max-age=31556926 ETag: "3d013c0e99afcac2babbe2e9902eed3c" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Wed, 01 May 2024 03:29:23 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 02 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: nQ2P+7K8bcOTRuutFBNjwGRol/o9gsdRUj4HSwmXB4/g829JJUeSLXSZe8iqxkcXa5WcH9XhS78= x-amz-replication-status: COMPLETED x-amz-request-id: XV2YP1269KSFSFAY x-amz-server-side-encryption: AES256 x-amz-version-id: ouK7o5vBnm5YW6wb7wF0ZeWx4UAk0H32 X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4a 66 41 76 57 4f 6d 52 53 42 44 68 72 54 59 55 73 32 62 70 56 71 5a 42 6a 56 63 66 39 56 53 6a 31 64 38 25 32 46 25 32 42 34 7a 77 52 59 6a 71 77 64 4e 79 65 78 54 67 45 34 6d 53 68 71 49 72 42 6b 64 51 59 39 25 32 42 54 34 63 51 77 75 63 71 44 56 37 68 58 64 46 68 77 67 71 49 59 6f 53 25 32 46 6e 47 61 79 38 75 5a 47 48 39 48 4f 63 50 25 32 46 63 34 44 74 70 56 67 58 41 5a 44 4c 5a 4d 25 32 46 74 49 52 51 78 51 4f 62 6a 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JfAvWOmRSBDhrTYUs2bpVqZBjVcf9VSj1d8%2F%2B4zwRYjqwdNyexTgE4mShqIrBkdQY9%2BT4cQwucqDV7hXdFhwgqIYoS%2FnGay8uZGH9HOcP%2Fc4DtpVgXAZDLZM%2FtIRQxQObjA%3D"}],"group":"cf-nel","max_age":
2024-05-03 04:44:05 UTC	1199	IN	Data Raw: 2e 44 63 79 42 44 41 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6c 61 63 65 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 69 67 68 74 7b 2d 2d 2d 32 43 35 74 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 7d 2e 64 61 72 6b 7b 2d 2d 2d 32 43 35 74 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 7d 2e 4f 6e 6f 6f 53 77 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 2e 4f 6e 6f 6f 53 77 20 2e 63 5f 38 4a 4d 77 7b 6d 61 72 67 69 6e 3a 30 20 32 70 78 7d 2e 4f 6e 6f 6f 53 77 20 2e 63 5f 38 4a 4d 77 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 4f 6e 6f 6f 53 77 20 Data Ascii: .DcyBDA{display:flex;height:100%;place-items:center;width:100%}.light{---2C5tw:rgba(64,87,109,.07)}.dark{---2C5tw:hsla(0,0%,100%,.15)}.OnooSw{direction:ltr;display:inline-flex}.OnooSw .c_8JMw{margin:0 2px}.OnooSw .c_8JMw:first-child{margin-left:0}.OnooSw
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 67 3a 34 70 78 20 38 70 78 7d 2e 75 4c 74 30 75 77 20 5b 64 69 73 61 62 6c 65 64 5d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 75 4c 74 30 75 77 2e 47 70 6f 32 72 51 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 5f 30 57 71 56 34 67 2c 2e 5f 34 47 4d 33 6f 51 7b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 61 6e 79 77 68 65 72 65 7d 2e 55 72 34 6b 4f 51 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 6c 67 7a 67 50 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 7d 2e 65 44 64 5f 66 41 7b 66 69 6c 6c 3a 23 32 35 32 36 32 37 7d 2e 55 31 71 43 5a 77 7b 66 69 6c 6c 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 7d 2e 49 67 66 49 78 77 2c 2e 50 75 4a 54 53 67 7b 6d 61 72 67 69 6e Data Ascii: g:4px 8px}.uLt0uw [disabled]{pointer-events:none}.uLt0uw.Gpo2rQ{height:100%}._0WqV4g,._4GM3oQ{overflow-wrap:anywhere}.Ur4kOQ{pointer-events:none}.lgzgPw{display:block;margin:-1px}.eDd_fA{fill:#252627}.U1qCZw{fill:hsla(0,0%,100%,.15)}.IgfIxw,.PuJTSg{margin
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 64 7a 52 4c 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 50 68 43 49 69 67 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 35 49 4a 2d 43 41 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 46 6f 4c 77 38 67 29 7d 2e 51 6b 64 36 36 41 2e 6b 64 7a 52 4c 77 2e 7a 51 6c 75 73 51 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 35 4e 76 56 6d 41 29 7d 2e 51 6b 64 36 36 41 2e 51 6b 64 36 36 41 2e 6b 64 7a 52 4c 77 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 54 41 76 76 56 67 29 7d 2e 51 6b 64 36 36 41 2e 51 6b 64 36 36 41 2e 6b 64 7a 52 4c 77 2e 5a 69 76 4c 6f 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d Data Ascii: dzRLw{background-color:var(--PhCIig);border-color:var(--5IJ-CA);color:var(--FoLw8g)}.Qkd66A.kdzRLw.zQlusQ:hover{background-color:var(--5NvVmA)}.Qkd66A.Qkd66A.kdzRLw:active{background-color:var(--TAvvVg)}.Qkd66A.Qkd66A.kdzRLw.ZivLog{background-color:var(--
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 49 45 4d 45 39 51 3a 76 61 72 28 2d 2d 53 5f 7a 4b 42 51 29 3b 2d 2d 47 4c 76 49 46 77 3a 76 61 72 28 2d 2d 51 45 72 68 6c 67 29 3b 2d 2d 4b 58 54 4f 77 51 3a 76 61 72 28 2d 2d 66 50 4e 5f 77 67 29 3b 2d 2d 50 4b 33 33 34 67 3a 76 61 72 28 2d 2d 76 6f 42 76 6a 41 29 3b 2d 2d 64 4b 4c 4c 34 41 3a 76 61 72 28 2d 2d 56 47 78 65 68 41 29 3b 2d 2d 44 75 77 78 41 51 3a 76 61 72 28 2d 2d 36 6b 44 4e 6c 41 29 7d 2e 4a 4a 6c 33 4d 41 7b 2d 2d 49 45 4d 45 39 51 3a 76 61 72 28 2d 2d 49 4b 6e 67 64 51 29 3b 2d 2d 47 4c 76 49 46 77 3a 76 61 72 28 2d 2d 36 68 6e 38 4f 51 29 3b 2d 2d 4b 58 54 4f 77 51 3a 76 61 72 28 2d 2d 49 49 48 79 33 51 29 3b 2d 2d 50 4b 33 33 34 67 3a 76 61 72 28 2d 2d 39 78 6f 71 41 67 29 3b 2d 2d 64 4b 4c 4c 34 41 3a 76 61 72 28 2d 2d 72 78 4f 76 Data Ascii: IEME9Q:var(--S_zKBQ);--GLvIFw:var(--QErhlg);--KXTOwQ:var(--fPN_wg);--PK334g:var(--voBvjA);--dKLL4A:var(--VGxehA);--DuwxAQ:var(--6kDNlA)}.JJl3MA{--IEME9Q:var(--IKngdQ);--GLvIFw:var(--6hn8OQ);--KXTOwQ:var(--IIHy3Q);--PK334g:var(--9xoqAg);--dKLL4A:var(--rxOv
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 78 20 2d 20 76 61 72 28 2d 2d 34 6f 63 55 43 67 29 29 7d 2e 49 53 5f 36 65 77 7b 77 69 64 74 68 3a 32 34 70 78 7d 2e 62 70 4e 47 71 41 7b 2d 2d 4c 33 5a 41 49 77 3a 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 75 6e 73 65 74 3b 70 61 64 64 69 6e 67 3a 30 20 63 61 6c 63 28 31 32 70 78 20 2d 20 76 61 72 28 2d 2d 34 6f 63 55 43 67 29 29 7d 2e 4c 32 31 41 43 67 7b 77 69 64 74 68 3a 32 38 70 78 7d 2e 48 79 53 6a 68 41 7b 2d 2d 4c 33 5a 41 49 77 3a 34 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 75 6e 73 65 74 3b 70 61 64 64 69 6e 67 3a 30 20 63 61 6c 63 28 38 70 78 20 2d 20 76 61 72 28 2d 2d 34 6f 63 55 43 67 29 29 7d 2e 70 67 61 41 32 77 7b 77 Data Ascii: x - var(--4ocUCg))}.IS_6ew{width:24px}.bpNGqA{--L3ZAIw:8px;border-radius:4px;height:28px;min-width:unset;padding:0 calc(12px - var(--4ocUCg))}.L21ACg{width:28px}.HySjhA{--L3ZAIw:4px;height:32px;min-width:unset;padding:0 calc(8px - var(--4ocUCg))}.pgaA2w{w
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 6e 74 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 65 59 6d 55 54 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 2e 76 54 70 6a 53 67 7b 63 75 72 73 6f 72 3a 77 61 69 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 5f 31 6f 43 56 48 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 54 70 6a 53 67 3e 2e 54 63 4e 49 68 41 3a 6e 6f 74 28 2e 5f 31 6f 43 56 48 67 29 2c 2e 76 54 70 6a 53 67 3e 2e 5f 33 38 6f 57 76 51 7b 6f 70 61 Data Ascii: nt;width:fit-content}.eYmUTw{display:inline-flex}.vTpjSg{cursor:wait;position:relative}._1oCVHg{align-items:center;display:flex;height:100%;justify-content:center;left:0;position:absolute;top:0;width:100%}.vTpjSg>.TcNIhA:not(._1oCVHg),.vTpjSg>._38oWvQ{opa
2024-05-03 04:44:05 UTC	721	IN	Data Raw: 39 37 46 6f 51 2e 62 70 4e 47 71 41 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 32 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 32 70 78 7d 2e 47 39 37 46 6f 51 2e 48 79 53 6a 68 41 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 34 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 30 70 78 7d 2e 47 39 37 46 6f 51 2e 6c 73 58 70 5f 77 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 38 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 34 38 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 38 70 78 7d 2e 47 39 37 46 6f 51 2e 62 6f 34 56 73 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a Data Ascii: 97FoQ.bpNGqA{max-height:32px;max-width:32px;min-height:32px;min-width:32px}.G97FoQ.HySjhA{max-height:40px;max-width:40px;min-height:40px;min-width:40px}.G97FoQ.lsXp_w{max-height:48px;max-width:48px;min-height:48px;min-width:48px}.G97FoQ.bo4Vsg{max-height:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49736	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/b3ad105788169a6a.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1184	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 8700 Connection: close CF-Ray: 87dd9804dcd1c32f-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 3699613 Cache-Control: public, max-age=31556926 ETag: "773e2012df644ba3358ff592b1188a99" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Tue, 19 Mar 2024 03:04:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 20 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: lrRWwlLnDSF8OIY23vQddUMJ4M6AJ74V5pVs7Y2uu/Hnm7MYQx4y/NOlCZjfVk9VQvq86OTUuNA= x-amz-replication-status: COMPLETED x-amz-request-id: ND0V6JNYF42AGTKF x-amz-server-side-encryption: AES256 x-amz-version-id: zmojrsCwj7ozEvSKnyaA6bP0wUPxp02d X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 66 67 30 71 57 6e 48 36 44 37 30 37 70 4e 44 77 41 6c 53 64 59 78 54 62 50 69 6f 66 79 79 49 39 46 69 48 36 43 65 42 50 4b 57 43 6a 53 4e 63 43 25 32 46 4f 37 6e 72 51 6f 39 57 25 32 46 44 6c 6b 67 79 70 38 36 7a 76 36 38 58 68 56 39 69 77 71 6c 5a 65 6a 63 48 63 36 50 52 47 4c 42 66 32 6d 6b 38 39 65 68 6e 77 6e 45 35 33 25 32 46 4a 61 78 7a 54 38 51 44 4d 42 6d 39 64 51 45 75 63 77 74 75 74 58 45 48 75 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fg0qWnH6D707pNDwAlSdYxTbPiofyyI9FiH6CeBPKWCjSNcC%2FO7nrQo9W%2FDlkgyp86zv68XhV9iwqlZejcHc6PRGLBf2mk89ehnwnE53%2FJaxzT8QDMBm9dQEucwtutXEHuY%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:05 UTC	1204	IN	Data Raw: 2e 5f 70 46 73 66 41 7b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 62 6f 72 64 65 72 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a 31 70 78 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 31 70 78 7d 2e 64 6b 57 79 70 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 2e 64 6b 57 79 70 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: ._pFsfA{clip:rect(1px,1px,1px,1px);border:0;font-size:0;height:1px;left:0;margin:-1px;overflow:hidden;padding:0;position:absolute;top:0;white-space:nowrap;width:1px}.dkWypw{align-items:center;box-sizing:border-box;display:inline-flex}.dkWypw:before{conten
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 41 29 2a 2d 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 76 33 2d 76 75 77 29 2a 2d 31 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 55 4b 73 4c 77 67 7b 2d 2d 70 41 39 6b 30 51 3a 76 61 72 28 2d 2d 64 38 31 74 75 41 29 3b 2d 2d 5f 65 76 50 53 41 3a 76 61 72 28 2d 2d 70 41 39 6b 30 51 29 3b 2d 2d 4a 78 71 42 4b 51 3a 76 61 72 28 2d 2d 5f 66 32 52 5a 41 29 3b 2d 2d 75 4e 35 4f 6c 77 3a 76 61 72 28 2d 2d 4a 78 71 42 4b 51 29 3b 2d 2d 63 65 78 6e 58 41 3a 76 61 72 28 2d 2d 2d 58 4a 64 50 67 29 3b 2d 2d 63 6d 4a 43 47 77 3a 76 61 72 28 2d 2d 63 65 78 6e 58 41 29 3b 2d 2d 53 79 6f 4b 38 41 3a 76 61 72 28 2d 2d 6d 34 70 32 46 67 29 3b 2d 2d 6e 75 6b 79 64 77 3a 76 61 72 28 2d 2d 53 79 6f 4b 38 41 29 3b 2d 2d 41 57 64 55 38 67 Data Ascii: A)-1) calc(var(--v3-vuw)-1)}@media (min-width:600px){.UKsLwg{--pA9k0Q:var(--d81tuA);--_evPSA:var(--pA9k0Q);--JxqBKQ:var(--_f2RZA);--uN5Olw:var(--JxqBKQ);--cexnXA:var(---XJdPg);--cmJCGw:var(--cexnXA);--SyoK8A:var(--m4p2Fg);--nukydw:var(--SyoK8A);--AWdU8g
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 6d 73 3a 76 61 72 28 2d 2d 56 52 66 35 55 51 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 4f 70 77 31 55 51 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 50 74 47 34 49 77 29 2a 2d 31 29 7d 2e 4a 79 42 5f 76 77 3e 2e 79 59 77 5f 46 41 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 50 74 47 34 49 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 4a 79 42 5f 76 77 7b 2d 2d 62 6e 77 66 63 51 3a 76 61 72 28 2d 2d 4f 32 5a 41 4a 41 29 3b 2d 2d 4f 70 77 31 55 51 3a 76 61 72 28 2d 2d 62 6e 77 66 63 51 29 3b 2d 2d 48 47 48 6a 33 51 3a 76 61 72 28 2d 2d 6c 54 41 35 56 41 29 3b 2d 2d 56 52 66 35 55 51 3a 76 61 72 28 2d 2d 48 47 48 6a 33 51 29 3b 2d 2d 34 67 68 Data Ascii: ms:var(--VRf5UQ);justify-content:var(--Opw1UQ);margin-left:calc(var(--PtG4Iw)*-1)}.JyB_vw>.yYw_FA{padding-left:var(--PtG4Iw)}@media (min-width:600px){.JyB_vw{--bnwfcQ:var(--O2ZAJA);--Opw1UQ:var(--bnwfcQ);--HGHj3Q:var(--lTA5VA);--VRf5UQ:var(--HGHj3Q);--4gh
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 50 74 47 34 49 77 29 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 39 39 70 78 29 7b 2e 4a 79 42 5f 76 77 2e 68 54 6e 51 31 67 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 4a 79 42 5f 76 77 2e 68 54 6e 51 31 67 3e 2e 79 59 77 5f 46 41 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 4f 70 77 31 55 51 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 4a 79 42 5f 76 77 2e 68 54 6e 51 31 67 3e 2e 79 59 77 5f 46 41 2b 2e 79 59 77 5f 46 41 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 76 61 72 28 2d 2d 50 74 47 34 49 77 29 7d 7d 2e 4a 30 42 4d 6c 41 7b 6d 61 72 67 69 Data Ascii: var(--PtG4Iw)}}@media (max-width:1199px){.JyB_vw.hTnQ1g{flex-direction:column;margin-left:0}.JyB_vw.hTnQ1g>.yYw_FA{display:flex;justify-content:var(--Opw1UQ);padding-left:0;width:100%}.JyB_vw.hTnQ1g>.yYw_FA+.yYw_FA{padding-top:var(--PtG4Iw)}}.J0BMlA{margi
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 29 3b 2d 2d 59 79 51 49 43 67 3a 76 61 72 28 2d 2d 42 5a 4b 4b 45 41 29 3b 2d 2d 39 71 46 6f 70 41 3a 76 61 72 28 2d 2d 75 4b 37 4b 50 67 29 3b 2d 2d 59 51 6f 71 2d 41 3a 76 61 72 28 2d 2d 39 71 46 6f 70 41 29 3b 2d 2d 34 31 32 65 6d 51 3a 76 61 72 28 2d 2d 44 75 31 48 4a 77 29 3b 2d 2d 36 76 76 57 68 77 3a 76 61 72 28 2d 2d 34 31 32 65 6d 51 29 3b 2d 2d 45 35 39 4f 49 51 3a 76 61 72 28 2d 2d 63 31 32 59 6f 67 29 3b 2d 2d 58 4a 76 49 2d 67 3a 76 61 72 28 2d 2d 45 35 39 4f 49 51 29 3b 2d 2d 39 78 51 58 5a 67 3a 76 61 72 28 2d 2d 43 58 32 75 73 67 29 3b 2d 2d 65 59 47 37 48 51 3a 76 61 72 28 2d 2d 39 78 51 58 5a 67 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 45 79 37 53 37 77 7b 2d 2d 4a 33 47 78 62 77 3a 76 61 Data Ascii: );--YyQICg:var(--BZKKEA);--9qFopA:var(--uK7KPg);--YQoq-A:var(--9qFopA);--412emQ:var(--Du1HJw);--6vvWhw:var(--412emQ);--E59OIQ:var(--c12Yog);--XJvI-g:var(--E59OIQ);--9xQXZg:var(--CX2usg);--eYG7HQ:var(--9xQXZg)}}@media (min-width:1200px){.Ey7S7w{--J3Gxbw:va
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 3a 76 61 72 28 2d 2d 70 57 6d 7a 55 67 29 3b 2d 2d 70 78 48 44 4b 67 3a 76 61 72 28 2d 2d 5a 6a 78 56 36 51 29 3b 2d 2d 6f 31 57 30 7a 51 3a 76 61 72 28 2d 2d 70 78 48 44 4b 67 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 59 54 52 70 44 51 7b 2d 2d 4b 45 42 41 72 51 3a 76 61 72 28 2d 2d 64 70 7a 56 4b 51 29 3b 2d 2d 4b 49 36 4d 79 77 3a 76 61 72 28 2d 2d 4b 45 42 41 72 51 29 3b 2d 2d 68 4b 6d 54 7a 67 3a 76 61 72 28 2d 2d 70 57 6d 7a 55 67 29 3b 2d 2d 78 49 4f 79 47 51 3a 76 61 72 28 2d 2d 68 4b 6d 54 7a 67 29 3b 2d 2d 70 41 32 66 78 51 3a 76 61 72 28 2d 2d 70 78 48 44 4b 67 29 3b 2d 2d 6f 31 57 30 7a 51 3a 76 61 72 28 2d 2d 70 41 32 66 78 51 29 7d 7d 2e 59 54 52 70 44 51 2e 7a 4e 6a 6a 33 77 7b 66 6c 65 78 2d Data Ascii: :var(--pWmzUg);--pxHDKg:var(--ZjxV6Q);--o1W0zQ:var(--pxHDKg)}}@media (min-width:1200px){.YTRpDQ{--KEBArQ:var(--dpzVKQ);--KI6Myw:var(--KEBArQ);--hKmTzg:var(--pWmzUg);--xIOyGQ:var(--hKmTzg);--pA2fxQ:var(--pxHDKg);--o1W0zQ:var(--pA2fxQ)}}.YTRpDQ.zNjj3w{flex-
2024-05-03 04:44:05 UTC	651	IN	Data Raw: 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 78 36 58 43 43 67 7b 2d 2d 55 73 55 63 4b 77 3a 76 61 72 28 2d 2d 74 35 61 51 31 41 29 3b 2d 2d 59 67 71 45 71 41 3a 76 61 72 28 2d 2d 55 73 55 63 4b 77 29 3b 2d 2d 44 66 48 37 53 41 3a 76 61 72 28 2d 2d 52 46 32 50 4f 41 29 3b 2d 2d 4f 78 65 4f 77 41 3a 76 61 72 28 2d 2d 44 66 48 37 53 41 29 7d 7d 2e 6d 79 41 36 51 51 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 7d 2e 6d 79 41 36 51 51 2e 5f 48 76 56 51 41 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 7d 2e 6d 79 41 36 51 51 2e 5f 37 57 56 58 68 41 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 70 78 3b 77 69 Data Ascii: dia (min-width:1200px){.x6XCCg{--UsUcKw:var(--t5aQ1A);--YgqEqA:var(--UsUcKw);--DfH7SA:var(--RF2POA);--OxeOwA:var(--DfH7SA)}}.myA6QQ{display:block;flex-shrink:0}.myA6QQ._HvVQA{display:inline-block;height:auto;min-height:1px}.myA6QQ._7WVXhA{min-width:1px;wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49737	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/9dc21140fdbdfcf9.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1182	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 5841 Connection: close CF-Ray: 87dd9804d8b08cca-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 92707 Cache-Control: public, max-age=31556926 ETag: "c54fc6f87d01e616cbca0aa7126476cb" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Thu, 02 May 2024 02:44:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 03 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: lK6RKUDZ2xyt7f7sMIOji76M1UGndoGn/YX+0iE5ZIasUGWQ5PazAvVkabIczZSl7gDCVNicNyE= x-amz-replication-status: COMPLETED x-amz-request-id: NJZSDJ6PAG6WBRN5 x-amz-server-side-encryption: AES256 x-amz-version-id: zPtMJH85uDwRHpEny1ZFVZXcRTxQcTBg X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	346	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 35 7a 68 57 64 7a 6e 65 68 46 71 43 47 5a 39 59 57 4c 43 4e 70 70 66 32 37 62 71 63 51 37 50 44 39 4b 69 6e 44 41 33 74 55 39 66 6d 56 4c 6b 4e 6c 48 66 31 73 6f 61 6f 76 52 54 38 55 4d 6e 33 48 54 53 41 6f 55 6f 36 38 6b 41 50 44 42 6d 76 37 4b 6d 34 54 59 69 65 30 4c 76 41 44 64 73 4a 53 31 6a 25 32 42 4e 59 45 65 4d 35 6e 77 79 76 55 63 64 69 48 4f 61 46 4b 42 4e 4e 35 71 51 79 70 62 49 43 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5zhWdznehFqCGZ9YWLCNppf27bqcQ7PD9KinDA3tU9fmVLkNlHf1soaovRT8UMn3HTSAoUo68kAPDBmv7Km4TYie0LvADdsJS1j%2BNYEeM5nwyvUcdiHOaFKBNN5qQypbICw%3D"}],"group":"cf-nel","max_age":604800}N
2024-05-03 04:44:05 UTC	1210	IN	Data Raw: 2e 5f 39 4d 62 5f 5f 41 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 54 73 71 54 4d 67 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 72 6d 61 6c 7d 2e 56 70 49 36 70 41 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 5f 4e 4c 75 34 51 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 74 61 72 74 7d 2e 57 6b 48 73 58 51 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 4b 57 48 52 6d 67 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 7d 2e 5f 36 57 75 5f 77 51 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a Data Ascii: ._9Mb__A{border:0;box-sizing:border-box;list-style:none;margin:0;padding:0}.TsqTMg{justify-content:normal}.VpI6pA{justify-content:center}._NLu4Q{justify-content:start}.WkHsXQ{justify-content:flex-start}.KWHRmg{justify-content:end}._6Wu_wQ{justify-content:
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 51 45 72 68 6c 67 29 7d 2e 77 42 6f 35 52 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 79 6f 43 59 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 47 5a 77 51 46 77 29 7d 2e 75 34 61 54 52 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 39 46 4a 52 35 51 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6a 33 6c 66 7a 67 29 7d 2e 49 31 68 33 30 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 71 6b 57 5f 41 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 50 33 62 65 6d 67 29 7d 2e 68 65 78 55 6b 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 44 50 36 71 71 51 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 54 6a 5a 34 67 67 29 Data Ascii: color:var(--QErhlg)}.wBo5Rg{background-color:var(--pyoCYg);color:var(--GZwQFw)}.u4aTRw{background-color:var(--9FJR5Q);color:var(--j3lfzg)}.I1h30A{background-color:var(--cqkW_A);color:var(--P3bemg)}.hexUkw{background-color:var(--DP6qqQ);color:var(--TjZ4gg)
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 20 76 61 72 28 2d 2d 43 67 4f 6d 71 67 29 7d 2e 4b 72 41 30 69 77 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 4f 48 6c 57 62 77 29 7d 2e 52 55 38 38 4b 77 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 7d 2e 78 5a 34 37 45 41 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 37 68 6e 73 49 67 29 7d 2e 55 61 48 4d 30 67 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 43 67 4f 6d 71 67 29 7d 2e 63 47 4f 77 38 67 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 4f 48 6c 57 62 77 29 7d 2e 5f 36 34 30 4c 32 67 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 7d 2e 7a 6a 48 53 5a 51 7b 62 Data Ascii: var(--CgOmqg)}.KrA0iw{border-bottom:1px solid var(--OHlWbw)}.RU88Kw{border-bottom:none}.xZ47EA{border-left:1px solid var(--7hnsIg)}.UaHM0g{border-left:1px solid var(--CgOmqg)}.cGOw8g{border-left:1px solid var(--OHlWbw)}._640L2g{border-left:none}.zjHSZQ{b
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 55 41 29 3b 2d 2d 6b 78 50 59 7a 41 3a 76 61 72 28 2d 2d 68 72 44 46 76 77 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 4a 32 44 75 55 41 29 20 76 61 72 28 2d 2d 6b 78 50 59 7a 41 29 20 76 61 72 28 2d 2d 34 66 4b 6c 64 77 29 20 76 61 72 28 2d 2d 61 5f 42 6e 45 51 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 69 42 72 7a 37 51 7b 2d 2d 48 63 62 42 47 51 3a 76 61 72 28 2d 2d 49 44 52 4d 72 41 29 3b 2d 2d 44 6c 6d 66 4a 51 3a 76 61 72 28 2d 2d 48 63 62 42 47 51 29 3b 2d 2d 64 54 37 49 7a 67 3a 76 61 72 28 2d 2d 57 31 55 4e 49 67 29 3b 2d 2d 72 54 78 72 55 41 3a 76 61 72 28 2d 2d 64 54 37 49 7a 67 29 3b 2d 2d 6c 61 5a 57 6f 41 3a 76 61 72 28 2d 2d 57 4d 31 54 70 51 29 3b 2d 2d 48 64 7a 77 57 67 3a 76 61 72 28 2d 2d 6c Data Ascii: UA);--kxPYzA:var(--hrDFvw);padding:var(--J2DuUA) var(--kxPYzA) var(--4fKldw) var(--a_BnEQ)}@media (min-width:600px){.iBrz7Q{--HcbBGQ:var(--IDRMrA);--DlmfJQ:var(--HcbBGQ);--dT7Izg:var(--W1UNIg);--rTxrUA:var(--dT7Izg);--laZWoA:var(--WM1TpQ);--HdzwWg:var(--l
2024-05-03 04:44:05 UTC	524	IN	Data Raw: 4c 51 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 34 70 78 7d 2e 45 33 45 73 68 77 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 45 33 45 73 68 77 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 2e 5f 38 61 73 6c 56 41 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 5f 38 61 73 6c 56 41 3e 69 6d 67 2c 2e 5f 38 61 73 6c 56 41 3e 73 76 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 64 78 75 68 47 77 7b 66 6c 65 78 3a 31 20 30 7d 2e 5f 35 6a 6b 6a 76 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 Data Ascii: LQ{min-height:44px}.E3Eshw{transform:scaleX(-1) rotate(45deg)}[dir=rtl] .E3Eshw{transform:rotate(45deg)}._8aslVA{display:block}._8aslVA>img,._8aslVA>svg{display:block;height:100%;width:100%}.dxuhGw{flex:1 0}._5jkjvQ{align-items:center;display:flex;justify

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49738	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/dc22c2df3a9e4bfe.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1182	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 92 Connection: close CF-Ray: 87dd9804dd520fa5-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4363282 Cache-Control: public, max-age=31556926 ETag: "4c6b62a6e985998b29d60f7139602aec" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Mon, 26 Feb 2024 06:42:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 26 Feb 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: cZdvoA39HxTfAl8SkCjvJ7Cy3o5g3UexK53oIdjZDe5p7JM5ivDRstq7axbTUqU8s2sHGpiKfkc= x-amz-replication-status: COMPLETED x-amz-request-id: 9NTEJAG5EVAHGCKF x-amz-server-side-encryption: AES256 x-amz-version-id: Z.Gk5Cjdx2xQTOibsRkcpJvB0t4Tg1Rp X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 4e 4a 74 69 6f 32 75 66 35 4c 77 45 49 72 49 76 25 32 42 6a 73 44 75 5a 25 32 46 46 30 38 76 32 6e 33 64 31 6c 69 70 52 44 59 6f 55 4e 62 56 33 79 47 52 78 62 54 57 57 73 61 55 70 43 32 4e 77 76 6b 75 75 75 53 41 57 57 34 61 56 5a 59 33 4c 31 50 45 4e 46 34 64 6f 64 75 66 6e 42 7a 6d 58 5a 44 39 25 32 42 38 6c 79 37 64 58 7a 68 51 61 6e 35 63 38 51 73 33 45 6b 41 39 49 4d 49 51 6d 4c 46 34 52 61 75 4c 38 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kNJtio2uf5LwEIrIv%2BjsDuZ%2FF08v2n3d1lipRDYoUNbV3yGRxbTWWsaUpC2NwvkuuuSAWW4aVZY3L1PENF4dodufnBzmXZD9%2B8ly7dXzhQan5c8Qs3EkA9IMIQmLF4RauL8%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:05 UTC	92	IN	Data Raw: 2e 76 53 45 45 4c 51 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 61 6c 6c 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 64 63 32 32 63 32 64 66 33 61 39 65 34 62 66 65 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: .vSEELQ{word-break:break-all}/# sourceMappingURL=sourcemaps/dc22c2df3a9e4bfe.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49739	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/fa3fb504fdf0aaea.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1181	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 530 Connection: close CF-Ray: 87dd9804eedd0cbc-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 92707 Cache-Control: public, max-age=31556926 ETag: "aa90505c913820b45ef99f33f6e35a57" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Thu, 02 May 2024 02:44:46 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 03 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: OZP5SPtx9mEUqnIKuyeR+fnrpW5Uzgk30NgMih8pufe5AVQyE+E9/gNaMsc8JRVZ/h66a68Vho0= x-amz-replication-status: COMPLETED x-amz-request-id: NJZVDMSABRPH6SNR x-amz-server-side-encryption: AES256 x-amz-version-id: Z1jRPTnzbRt4ri4K4ygrhVxGx4ItnTE5 X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 70 66 45 52 77 39 51 4b 58 25 32 42 32 75 74 72 63 53 34 42 4b 55 66 50 38 54 25 32 46 71 44 47 46 69 6e 76 6d 52 6a 72 41 7a 66 35 6a 4e 4e 62 72 65 41 55 37 79 52 4e 48 35 38 74 6b 4c 62 46 68 39 38 51 41 25 32 46 4b 61 6a 50 6f 43 59 48 78 73 77 6d 7a 55 4d 69 69 4e 73 54 55 48 63 44 48 64 55 7a 7a 67 4d 4b 5a 4b 35 47 34 6f 55 78 4d 45 45 25 32 42 54 59 64 32 4b 68 51 72 69 38 71 53 6a 25 32 46 53 6a 50 62 79 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7pfERw9QKX%2B2utrcS4BKUfP8T%2FqDGFinvmRjrAzf5jNNbreAU7yRNH58tkLbFh98QA%2FKajPoCYHxswmzUMiiNsTUHcDHdUzzgMKZK5G4oUxMEE%2BTYd2KhQri8qSj%2FSjPbyU%3D"}],"group":"cf-nel","max_age":60
2024-05-03 04:44:05 UTC	530	IN	Data Raw: 2e 5f 32 45 39 59 38 41 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 2d 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 75 6e 73 65 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 5f 38 76 6c 62 49 67 20 2e 5f 32 45 39 59 38 41 7b 6d 61 72 67 69 6e 3a 2d 38 70 78 7d 2e 57 6f 45 35 4e 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 78 4d 6d 34 31 77 7b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 31 36 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 22 68 65 61 64 65 72 22 20 22 63 6f 6e 74 65 6e 74 22 20 22 66 6f 6f 74 65 72 22 3b 67 72 Data Ascii: ._2E9Y8A{color:inherit;font-size:inherit;margin:-4px;max-width:unset;vertical-align:baseline}._8vlbIg ._2E9Y8A{margin:-8px}.WoE5Nw{display:flex}.xMm41w{grid-row-gap:16px;box-sizing:border-box;display:grid;grid-template-areas:"header" "content" "footer";gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49741	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/2a50bb2d56bddf16.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1184	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 28551 Connection: close CF-Ray: 87dd98077db6c358-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 858229 Cache-Control: public, max-age=31556926 ETag: "baf5e9094966312c29d3b86ff83c625b" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Tue, 23 Apr 2024 06:14:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 24 Apr 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: qMNr3rotPmyY9Y5SVvxEHAVG+S/A8apojGLYQu8lxFIKVp80CBK0b+4DSg6uVxWJZTZimO2EINY= x-amz-replication-status: COMPLETED x-amz-request-id: SWVG1TVBNGDKKXGG x-amz-server-side-encryption: AES256 x-amz-version-id: cekT0zIN5YFA.Hs4D_PRGYRrZ7hvCHai X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 78 71 59 47 35 6f 78 70 56 66 74 52 25 32 42 76 50 71 39 33 79 30 25 32 46 71 65 7a 39 62 53 49 65 32 54 33 78 65 52 35 55 75 64 25 32 42 5a 25 32 42 79 47 5a 4b 79 6f 4d 74 72 77 34 6f 32 39 49 50 68 37 37 6b 50 55 57 70 49 5a 6b 66 6d 78 71 52 50 44 38 4d 6b 66 73 50 59 32 37 7a 61 4c 63 38 77 43 53 46 72 74 25 32 42 62 46 6a 54 75 4a 47 34 25 32 42 34 62 78 50 6b 48 70 65 25 32 42 55 42 51 57 32 39 57 55 71 52 64 78 74 62 46 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xqYG5oxpVftR%2BvPq93y0%2Fqez9bSIe2T3xeR5Uud%2BZ%2ByGZKyoMtrw4o29IPh77kPUWpIZkfmxqRPD8MkfsPY27zaLc8wCSFrt%2BbFjTuJG4%2B4bxPkHpe%2BUBQW29WUqRdxtbFk%3D"}],"group":"cf-nel","max_age
2024-05-03 04:44:05 UTC	1196	IN	Data Raw: 2e 51 70 77 57 6d 41 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 45 32 50 46 4b 77 7b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 66 6f 72 77 61 72 64 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 5f 35 57 6e 39 49 67 3b 6f 70 61 63 69 74 79 3a 30 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 35 57 6e 39 49 67 7b 74 6f 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 4a 33 65 6a 67 41 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 7d 2e 4b 43 43 59 46 41 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2e 4b 43 43 59 46 41 7b 70 6f 73 69 74 69 6f Data Ascii: .QpwWmA{height:100%;left:0;overflow:hidden;position:absolute;top:0;width:100%}.E2PFKw{animation-fill-mode:forwards;animation-name:_5Wn9Ig;opacity:0}@keyframes _5Wn9Ig{to{opacity:1}}.J3ejgA{overflow-x:auto}.KCCYFA{display:block}@media print{.KCCYFA{positio
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 57 37 58 61 6b 67 7b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 76 78 4e 68 6c 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 76 78 4e 68 6c 67 2c 2e 7a 47 61 5f 34 41 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 6b 74 72 6c 77 7b 73 74 72 6f 6b 65 3a 23 38 64 33 39 66 61 7d 2e 62 46 6e 4a 32 41 7b 6c 65 66 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 6f 70 3a 30 7d 2e 5f 37 4b 61 58 77 77 2c 2e 62 46 6e 4a 32 41 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f Data Ascii: tion:relative}.W7Xakg{-webkit-user-select:none;-moz-user-select:none;user-select:none}.vxNhlg{display:block}.vxNhlg,.zGa_4A{height:100%;position:absolute;width:100%}.bktrlw{stroke:#8d39fa}.bFnJ2A{left:0;overflow:hidden;top:0}._7KaXww,.bFnJ2A{position:abso
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 4f 77 2c 2e 53 68 4b 62 5a 51 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 53 68 4b 62 5a 51 7b 6c 65 66 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 6f 70 3a 30 7d 2e 56 6e 45 46 32 41 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 7d 2e 43 55 75 50 46 77 2c 2e 5f 36 6b 31 34 75 67 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 43 55 75 50 46 77 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 7d 2e 5f 39 59 71 38 6e 51 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: Ow,.ShKbZQ{display:block;position:absolute}.ShKbZQ{left:0;overflow:hidden;pointer-events:none;top:0}.VnEF2A{left:0;position:absolute;top:0}.CUuPFw,._6k14ug{height:100%;width:100%}.CUuPFw{display:grid}._9Yq8nQ{outline:none;overflow:hidden;position:relative
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 5f 37 59 63 61 35 67 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 53 58 65 4e 79 77 7b 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 77 69 64 74 68 3a 30 7d 2e 56 4b 78 57 69 41 2c 2e 63 41 77 48 78 41 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 7d 2e 63 41 77 48 78 41 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 7a 4e 46 7a 38 51 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f Data Ascii: on:relative}._7Yca5g{direction:ltr;overflow:hidden}.SXeNyw{height:0;position:relative;transform-origin:0 0;width:0}.VKxWiA,.cAwHxA{left:0;position:absolute;top:0}.cAwHxA{display:block;overflow:hidden;pointer-events:none}.zNFz8Q{left:0;position:absolute;to
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 3a 6e 6f 74 28 2e 57 76 51 4c 39 77 29 20 2e 49 68 57 4d 44 67 2c 5f 3a 3a 2d 77 65 62 6b 69 74 2d 66 75 6c 6c 2d 70 61 67 65 2d 6d 65 64 69 61 2c 5f 3a 66 75 74 75 72 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 7d 3a 72 6f 6f 74 20 2e 63 67 48 67 62 41 20 2e 4c 37 49 70 63 67 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 5f 3a 3a 2d 77 65 62 6b 69 74 2d 66 75 6c 6c 2d 70 61 67 65 2d 6d 65 64 69 61 2c 5f 3a 66 75 74 75 72 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 7d 2e 72 4c 57 47 6c 77 2c 2e 72 4c 57 47 6c 77 20 2e 4c 37 49 70 63 67 7b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 7d 2e 63 67 48 67 62 41 2c 2e 65 62 4c 68 4d 51 7b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 Data Ascii: :not(.WvQL9w) .IhWMDg,_::-webkit-full-page-media,_:future{white-space:pre-wrap}:root .cgHgbA .L7Ipcg:last-child,_::-webkit-full-page-media,_:future{white-space:pre}.rLWGlw,.rLWGlw .L7Ipcg{overflow-wrap:normal;white-space:pre}.cgHgbA,.ebLhMQ{margin:0;posit
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 63 67 48 67 62 41 2e 6b 56 55 6f 7a 51 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 68 65 61 64 49 6e 64 65 6e 74 29 2a 31 65 6d 29 7d 2e 41 64 42 62 68 51 20 2e 79 4c 34 6d 46 41 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 5f 62 73 44 68 77 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 55 74 61 64 44 77 2c 2e 5f 33 6b 6f 51 45 41 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 68 47 62 63 Data Ascii: cgHgbA.kVUozQ{margin-bottom:calc(var(--headIndent)*1em)}.AdBbhQ .yL4mFA{list-style-type:none;margin:0;padding:0}._bsDhw{display:list-item;padding:0}.UtadDw,._3koQEA:before{box-sizing:border-box;margin:0;padding:0;position:absolute;white-space:nowrap}.hGbc
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 2d 2d 68 65 61 64 49 6e 64 65 6e 74 29 2a 31 65 6d 2a 2d 31 29 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 31 65 6d 7d 2e 68 47 62 63 59 41 20 2e 5f 33 6b 6f 51 45 41 2e 6b 56 55 6f 7a 51 3a 62 65 66 6f 72 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 31 65 6d 3b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 68 65 61 64 49 6e 64 65 6e 74 29 2a 31 65 6d 2a 2d 31 29 7d 2e 48 4d 43 4e 38 67 20 2e 5f 33 6b 6f 51 45 41 2e 58 70 32 34 4e 77 3a 62 65 66 6f 72 65 2c 2e 68 6e 36 4c 76 67 20 2e 5f 33 6b 6f 51 45 41 2e 58 70 32 34 4e 77 3a 62 65 66 6f 72 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 31 65 6d 3b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 68 65 61 64 49 6e 64 65 6e 74 29 2a 31 65 6d 2a 2d 31 29 7d 2e 48 4d 43 4e 38 67 20 2e 5f 33 Data Ascii: --headIndent)1em-1);padding-right:.1em}.hGbcYA ._3koQEA.kVUozQ:before{padding-left:.1em;right:calc(var(--headIndent)1em-1)}.HMCN8g ._3koQEA.Xp24Nw:before,.hn6Lvg ._3koQEA.Xp24Nw:before{padding-bottom:.1em;top:calc(var(--headIndent)1em-1)}.HMCN8g ._3
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 69 73 74 2d 37 2c 76 61 72 28 2d 2d 6e 75 6d 65 72 69 63 4c 69 73 74 4d 61 72 6b 65 72 29 29 20 22 2e 22 7d 2e 5f 32 6a 69 6f 67 67 2e 79 6e 68 6e 4b 77 7b 63 6f 75 6e 74 65 72 2d 69 6e 63 72 65 6d 65 6e 74 3a 6c 69 73 74 2d 37 7d 2e 5f 33 6b 6f 51 45 41 2e 52 67 6f 5a 6b 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 63 6f 75 6e 74 65 72 28 6c 69 73 74 2d 38 2c 76 61 72 28 2d 2d 6e 75 6d 65 72 69 63 4c 69 73 74 4d 61 72 6b 65 72 29 29 20 22 2e 22 7d 2e 5f 32 6a 69 6f 67 67 2e 52 67 6f 5a 6b 77 7b 63 6f 75 6e 74 65 72 2d 69 6e 63 72 65 6d 65 6e 74 3a 6c 69 73 74 2d 38 7d 2e 63 67 48 67 62 41 3a 6e 6f 74 28 2e 5f 62 73 44 68 77 29 2c 2e 65 62 4c 68 4d 51 3a 6e 6f 74 28 2e 5f 62 73 44 68 77 29 7b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 73 74 2d Data Ascii: ist-7,var(--numericListMarker)) "."}._2jiogg.ynhnKw{counter-increment:list-7}._3koQEA.RgoZkw:before{content:counter(list-8,var(--numericListMarker)) "."}._2jiogg.RgoZkw{counter-increment:list-8}.cgHgbA:not(._bsDhw),.ebLhMQ:not(._bsDhw){counter-reset:list-
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 64 74 68 3a 31 30 30 70 78 7d 2e 55 78 4f 69 6f 51 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 77 69 64 74 68 3a 31 70 78 7d 2e 53 44 48 57 6a 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 77 4e 4b 35 32 77 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 7d 2e 71 59 5f 70 41 41 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 50 72 36 4c 45 41 2c 2e 71 59 5f 70 41 41 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 57 76 Data Ascii: dth:100px}.UxOioQ{display:inline-block;height:1px;vertical-align:baseline;width:1px}.SDHWjg{position:absolute}.wNK52w{transform-origin:0 0}.qY_pAA{display:block}.Pr6LEA,.qY_pAA{height:100%;left:0;pointer-events:none;position:absolute;top:0;width:100%}.hWv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49742	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/84db60d234c256f8.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1182	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 6746 Connection: close CF-Ray: 87dd98077c720f59-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 92707 Cache-Control: public, max-age=31556926 ETag: "44b8622db953615b93180b39e5cfa6bf" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Thu, 02 May 2024 02:44:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 03 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: CPXHoq2FtC++k/5Xyz4ofHYWBj2G0EAasD5k5AnVR5oEDBbljDj6ACqAzgqcETOFC0Nsj9olfKw= x-amz-replication-status: COMPLETED x-amz-request-id: NJZVVZRH8DX6KMC6 x-amz-server-side-encryption: AES256 x-amz-version-id: YXKZW0Y4eXfda94OsC7pqo8SGkvNdHju X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 43 62 6c 37 34 50 41 33 68 48 6e 6d 46 6a 6c 37 5a 39 76 39 39 47 5a 69 5a 58 57 4e 68 75 4d 75 55 65 34 39 57 77 4e 48 75 25 32 46 78 4c 7a 25 32 46 32 33 54 38 63 78 46 35 31 56 55 50 45 38 78 37 48 6f 4a 71 77 37 69 64 54 66 6a 57 6e 56 79 45 6f 69 47 5a 48 67 75 35 7a 49 57 74 46 36 31 70 47 6f 75 6f 59 51 70 70 70 4f 44 38 71 6b 4c 51 53 67 4a 70 25 32 42 54 49 48 38 33 44 30 56 5a 44 77 58 35 77 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VCbl74PA3hHnmFjl7Z9v99GZiZXWNhuMuUe49WwNHu%2FxLz%2F23T8cxF51VUPE8x7HoJqw7idTfjWnVyEoiGZHgu5zIWtF61pGouoYQpppOD8qkLQSgJp%2BTIH83D0VZDwX5wk%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:05 UTC	1206	IN	Data Raw: 2e 5f 31 49 35 78 35 67 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 62 56 34 55 31 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 7d 2e 58 73 51 4e 56 67 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 53 50 58 7a 69 67 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 77 69 64 74 68 3a 30 7d 2e 5a 4a 6f 6e 37 51 7b 61 6c 69 67 6e 2d Data Ascii: ._1I5x5g{-webkit-tap-highlight-color:transparent;cursor:pointer;display:flex}.bV4U1g{align-items:center;padding:4px 0}.XsQNVg{cursor:not-allowed}.SPXzig{-webkit-appearance:none;-moz-appearance:none;appearance:none;margin:0;opacity:0;width:0}.ZJon7Q{align-
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 58 73 51 4e 56 67 29 3a 68 6f 76 65 72 20 2e 53 50 58 7a 69 67 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 2b 2e 74 64 5a 44 39 41 3a 6e 6f 74 28 2e 45 50 45 75 7a 67 2c 2e 74 65 36 78 42 77 29 3e 2e 41 71 66 5a 5a 51 2c 2e 5f 31 49 35 78 35 67 2e 6e 61 33 56 70 77 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 3a 68 6f 76 65 72 20 2e 53 50 58 7a 69 67 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 2b 2e 74 64 5a 44 39 41 3a 6e 6f 74 28 2e 45 50 45 75 7a 67 2c 2e 74 65 36 78 42 77 29 3e 2e 49 62 76 4d 52 67 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 58 67 69 74 51 29 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 5f 31 49 35 78 35 67 2e 6e 61 33 56 70 77 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 3a 68 6f 76 65 72 20 2e 53 50 58 7a 69 67 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 2b 2e 74 64 5a Data Ascii: XsQNVg):hover .SPXzig:not(:active)+.tdZD9A:not(.EPEuzg,.te6xBw)>.AqfZZQ,._1I5x5g.na3Vpw:not(.XsQNVg):hover .SPXzig:not(:active)+.tdZD9A:not(.EPEuzg,.te6xBw)>.IbvMRg{color:var(--sXgitQ);opacity:1}._1I5x5g.na3Vpw:not(.XsQNVg):hover .SPXzig:not(:active)+.tdZ
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 2e 74 64 5a 44 39 41 2e 45 50 45 75 7a 67 2c 2e 5f 31 49 35 78 35 67 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 20 2e 53 50 58 7a 69 67 3a 61 63 74 69 76 65 2b 2e 74 64 5a 44 39 41 2e 74 65 36 78 42 77 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 36 70 78 2c 30 20 30 20 30 20 34 70 78 20 76 61 72 28 2d 2d 48 38 6e 45 71 77 29 7d 2e 5f 31 49 35 78 35 67 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 20 2e 53 50 58 7a 69 67 3a 61 63 74 69 76 65 2b 2e 74 64 5a 44 39 41 2e 45 50 45 75 7a 67 3e 2e 41 71 66 5a 5a 51 2c 2e 5f 31 49 35 78 35 67 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 20 2e 53 50 58 7a 69 67 3a 61 63 74 69 76 65 2b 2e 74 64 5a 44 39 41 2e 45 50 45 75 7a 67 3e 2e 49 62 76 4d 52 67 2c 2e 5f 31 49 35 78 35 67 3a 6e 6f 74 28 2e 58 73 Data Ascii: .tdZD9A.EPEuzg,._1I5x5g:not(.XsQNVg) .SPXzig:active+.tdZD9A.te6xBw{box-shadow:inset 0 0 0 16px,0 0 0 4px var(--H8nEqw)}._1I5x5g:not(.XsQNVg) .SPXzig:active+.tdZD9A.EPEuzg>.AqfZZQ,._1I5x5g:not(.XsQNVg) .SPXzig:active+.tdZD9A.EPEuzg>.IbvMRg,._1I5x5g:not(.Xs
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 6c 6f 72 3a 76 61 72 28 2d 2d 51 6a 6f 41 61 51 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 36 71 51 43 4e 51 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 53 66 68 33 41 29 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 68 7a 39 64 6f 77 3a 6e 6f 74 28 2e 78 54 68 5a 4b 67 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 73 5f 4a 47 63 67 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 3a 30 Data Ascii: lor:var(--QjoAaQ);border-color:var(--6qQCNQ);color:var(--fSfh3A);cursor:not-allowed}.hz9dow:not(.xThZKg){background-color:transparent;border-color:transparent}.s_JGcg{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:inherit;border:0
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 61 79 3a 67 72 69 64 7d 2e 59 78 72 4d 67 41 2e 42 6e 7a 33 70 41 7b 67 72 69 64 2d 67 61 70 3a 34 70 78 7d 2e 59 78 72 4d 67 41 2e 5f 32 35 76 4e 57 51 7b 67 72 69 64 2d 67 61 70 3a 38 70 78 7d 2e 59 78 72 4d 67 41 2e 75 61 6e 73 56 77 7b 67 72 69 64 2d 67 61 70 3a 38 70 78 3b 67 72 69 64 2d 61 75 74 6f 2d 63 6f 6c 75 6d 6e 73 3a 2d 77 65 62 6b 69 74 2d 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 67 72 69 64 2d 61 75 74 6f 2d 63 6f 6c 75 6d 6e 73 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 67 72 69 64 2d 61 75 74 6f 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 7d 2e 49 67 59 44 49 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 36 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 36 70 78 7d 2e 6f 47 50 54 6c 77 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 Data Ascii: ay:grid}.YxrMgA.Bnz3pA{grid-gap:4px}.YxrMgA._25vNWQ{grid-gap:8px}.YxrMgA.uansVw{grid-gap:8px;grid-auto-columns:-webkit-max-content;grid-auto-columns:max-content;grid-auto-flow:column}.IgYDIg{margin-left:-16px;margin-right:-16px}.oGPTlw{border:0;border-rad
2024-05-03 04:44:05 UTC	64	IN	Data Raw: 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 38 34 64 62 36 30 64 32 33 34 63 32 35 36 66 38 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: }/# sourceMappingURL=sourcemaps/84db60d234c256f8.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49743	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	806	OUT	GET /web/b3a01de3e1e9ec62.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1184	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/css Content-Length: 7359 Connection: close CF-Ray: 87dd980778cf1819-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4358624 Cache-Control: public, max-age=31556926 ETag: "3c0f2193830453ba8e90a81dbbb30915" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Tue, 12 Mar 2024 01:50:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 13 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: IX60sWwj+QE4GksIZHPNdkYCG4xxBPxi5t+hNJ4C17qRcvcun7hfY84bIF43FL94DrRDTMwp9SI= x-amz-replication-status: COMPLETED x-amz-request-id: TS6BRQ617NMR6BV4 x-amz-server-side-encryption: AES256 x-amz-version-id: raPV6bykbEj9aJ3uv1xdiCGv0TXxKWFI X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 54 5a 6e 32 6c 42 6d 25 32 42 4c 4e 52 35 6d 52 74 52 44 47 45 59 54 35 56 34 33 43 73 6b 54 4e 42 72 46 68 45 61 41 51 76 4f 50 69 71 71 47 53 34 4d 7a 63 4f 68 61 4c 70 52 69 31 65 58 44 50 65 39 38 73 4e 71 65 44 56 64 66 43 36 48 75 51 4d 4a 4c 48 25 32 46 71 64 6d 32 31 51 55 55 42 72 33 4c 6b 52 75 4e 38 37 63 71 4b 74 6f 76 36 58 54 56 4d 41 74 73 30 44 49 56 57 75 72 25 32 46 39 62 6f 68 62 31 45 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TZn2lBm%2BLNR5mRtRDGEYT5V43CskTNBrFhEaAQvOPiqqGS4MzcOhaLpRi1eXDPe98sNqeDVdfC6HuQMJLH%2Fqdm21QUUBr3LkRuN87cqKtov6XTVMAts0DIVWur%2F9bohb1EI%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:05 UTC	1204	IN	Data Raw: 2e 76 69 78 39 69 41 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6c 69 67 68 74 7b 2d 2d 55 73 76 37 44 41 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 65 54 4c 55 61 77 3a 23 30 64 31 32 31 36 3b 2d 2d 58 61 78 6b 34 51 3a 72 67 62 61 28 32 38 2c 33 39 2c 34 38 2c 2e 35 29 7d 2e 64 61 72 6b 7b 2d 2d 55 73 76 37 44 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 65 54 4c 55 61 77 3a 23 66 66 66 3b 2d 2d 58 61 78 6b 34 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 7d 2e 75 36 6a 46 66 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 Data Ascii: .vix9iA{box-sizing:border-box;cursor:pointer;height:28px;position:relative}.light{--Usv7DA:rgba(57,76,96,.15);--eTLUaw:#0d1216;--Xaxk4Q:rgba(28,39,48,.5)}.dark{--Usv7DA:hsla(0,0%,100%,.4);--eTLUaw:#fff;--Xaxk4Q:hsla(0,0%,100%,.7)}.u6jFfQ{align-items:cente
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 51 2e 49 45 6f 51 76 51 7b 62 6f 72 64 65 72 2d 65 6e 64 2d 73 74 61 72 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 73 74 61 72 74 2d 73 74 61 72 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 46 76 51 46 43 41 2e 4c 6b 4b 61 4d 41 2c 2e 6e 50 37 62 61 51 2e 4c 6b 4b 61 4d 41 7b 62 6f 72 64 65 72 2d 65 6e 64 2d 65 6e 64 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 73 74 61 72 74 2d 65 6e 64 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 43 42 45 47 39 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 7d 2e 43 42 45 47 39 67 2e 43 49 7a 5a 41 41 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 7d 2e 65 49 54 58 5f 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 2e 35 29 7d 2e 43 6f 71 33 71 67 Data Ascii: Q.IEoQvQ{border-end-start-radius:3px;border-start-start-radius:3px}.FvQFCA.LkKaMA,.nP7baQ.LkKaMA{border-end-end-radius:3px;border-start-end-radius:3px}.CBEG9g{transform:scaleY(1)}.CBEG9g.CIzZAA{transition-duration:.2s}.eITX_g{transform:scaleY(1.5)}.Coq3qg
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 30 25 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 5f 37 5f 6e 57 39 41 2e 56 35 5a 65 44 51 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 31 36 70 78 20 32 34 70 78 7d 2e 5f 37 5f 6e 57 39 41 2e 61 57 4d 33 48 51 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 38 70 78 7d 2e 5f 37 5f 6e 57 39 41 3e 2e 4a 6c 36 65 73 51 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 6c 65 66 74 29 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 72 69 67 68 74 29 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 74 6f 70 29 7d 2e 5f 38 4b 33 36 74 41 7b 62 61 63 Data Ascii: 0%);justify-content:flex-start}._7_nW9A.V5ZeDQ{padding:16px 16px 24px}._7_nW9A.aWM3HQ{padding:16px 8px}._7_nW9A>.Jl6esQ{padding-left:var(--safe-area-inset-left);padding-right:var(--safe-area-inset-right);padding-top:var(--safe-area-inset-top)}._8K36tA{bac
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 65 69 67 68 74 3d 27 33 33 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 67 20 66 69 6c 74 65 72 3d 27 75 72 6c 28 25 32 33 61 29 27 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 4d 32 33 2e 34 39 36 20 31 32 2e 37 35 34 68 2d 39 2e 37 38 35 6c 33 2e 30 39 36 2d 33 2e 30 39 37 61 31 2e 35 20 31 2e 35 20 30 20 31 20 30 2d 32 2e 31 32 31 2d 32 2e 31 32 6c 2d 34 2e 39 35 20 34 2e 39 34 39 61 32 2e 35 20 32 2e 35 20 30 20 30 20 30 20 30 20 33 2e 35 33 35 6c 34 2e 39 35 20 34 2e 39 35 61 31 2e 35 20 31 2e 35 20 30 20 31 20 30 20 32 2e 31 32 31 2d 32 2e 31 32 31 6c 2d 33 2e 30 39 36 2d 33 2e 30 39 36 68 39 2e 37 38 35 61 31 2e 35 20 31 2e 35 20 30 20 Data Ascii: eight='33' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cg filter='url(%23a)'%3E%3Cpath d='M23.496 12.754h-9.785l3.096-3.097a1.5 1.5 0 1 0-2.121-2.12l-4.95 4.949a2.5 2.5 0 0 0 0 3.535l4.95 4.95a1.5 1.5 0 1 0 2.121-2.121l-3.096-3.096h9.785a1.5 1.5 0
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 68 3d 27 33 34 27 20 68 65 69 67 68 74 3d 27 33 33 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 67 20 66 69 6c 74 65 72 3d 27 75 72 6c 28 25 32 33 61 29 27 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 4d 31 30 2e 35 30 34 20 31 32 2e 37 35 34 68 39 2e 37 38 35 6c 2d 33 2e 30 39 36 2d 33 2e 30 39 37 61 31 2e 35 20 31 2e 35 20 30 20 31 20 31 20 32 2e 31 32 31 2d 32 2e 31 32 6c 34 2e 39 35 20 34 2e 39 34 39 61 32 2e 35 20 32 2e 35 20 30 20 30 20 31 20 30 20 33 2e 35 33 35 6c 2d 34 2e 39 35 20 34 2e 39 35 61 31 2e 35 20 31 2e 35 20 30 20 31 20 31 2d 32 2e 31 32 31 2d 32 2e 31 32 31 6c 33 2e 30 39 36 2d 33 2e 30 39 36 68 2d 39 2e 37 38 35 61 31 2e Data Ascii: h='34' height='33' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cg filter='url(%23a)'%3E%3Cpath d='M10.504 12.754h9.785l-3.096-3.097a1.5 1.5 0 1 1 2.121-2.12l4.95 4.949a2.5 2.5 0 0 1 0 3.535l-4.95 4.95a1.5 1.5 0 1 1-2.121-2.121l3.096-3.096h-9.785a1.
2024-05-03 04:44:05 UTC	679	IN	Data Raw: 63 74 3a 74 65 78 74 7d 2e 78 49 37 58 6a 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 54 6c 55 75 64 51 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 41 4c 55 77 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 36 34 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 36 34 70 78 7d 2e 64 70 73 69 64 41 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 42 46 69 71 6e 77 2c 2e 78 61 78 67 62 41 7b 62 6f 74 74 6f 6d 3a 30 3b 64 69 Data Ascii: ct:text}.xI7Xjw{align-items:center;background-color:var(--TlUudQ);border-radius:50%;color:var(--fgALUw);display:flex;height:64px;justify-content:center;width:64px}.dpsidA{height:100%;overflow:hidden;position:relative;width:100%}.BFiqnw,.xaxgbA{bottom:0;di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49745	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	787	OUT	GET /web/7a73108cf0c439a8.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/javascript Content-Length: 1568 Connection: close CF-Ray: 87dd98078cc61996-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8485 Cache-Control: public, max-age=31556926 ETag: "6935f4035741f668384d54a06de5899d" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Fri, 03 May 2024 02:16:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 6dyX/qCE19j0EyVY/1UalaqvDQHtscaK6qjQ2hper0nZrSrvrg14msPIzHBlpN9GfUgtPs7nfSI= x-amz-replication-status: COMPLETED x-amz-request-id: XGCMWER2VCYNAEJ5 x-amz-server-side-encryption: AES256 x-amz-version-id: ZLSPD3hKcMU04S7o7Ckdz_JNYsJdFQ8K X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 50 34 69 39 39 59 57 67 70 65 71 73 63 32 57 61 75 6c 44 76 79 76 6c 7a 42 54 61 59 42 50 38 75 35 42 44 75 55 47 38 25 32 46 6c 55 56 72 61 6b 54 43 55 65 30 77 72 57 43 70 52 56 43 42 35 35 57 33 47 44 53 47 67 4b 4a 25 32 42 48 6b 4b 69 34 61 31 47 57 74 66 57 7a 46 71 66 59 65 45 67 57 51 78 73 73 4e 71 4c 46 52 73 64 6b 4a 74 77 6b 25 32 46 54 37 72 4f 48 79 51 43 75 73 37 77 73 65 38 37 6e 46 44 75 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P4i99YWgpeqsc2WaulDvyvlzBTaYBP8u5BDuUG8%2FlUVrakTCUe0wrWCpRVCB55W3GDSGgKJ%2BHkKi4a1GWtfWzFqfYeEgWQxssNqLFRsdkJtwk%2FT7rOHyQCus7wse87nFDuQ%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:05 UTC	1200	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 30 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 36 30 34 37 37 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[3007],{/***/ 604778:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._4
2024-05-03 04:44:05 UTC	368	IN	Data Raw: 2d 7a 30 2d 39 5d 28 3f 3a 5b 61 2d 7a 30 2d 39 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 29 3f 7c 5c 5b 28 3f 3a 28 3f 3a 28 32 28 35 5b 30 2d 35 5d 7c 5b 30 2d 34 5d 5b 30 2d 39 5d 29 7c 31 5b 30 2d 39 5d 5b 30 2d 39 5d 7c 5b 31 2d 39 5d 3f 5b 30 2d 39 5d 29 29 5c 2e 29 7b 33 7d 28 3f 3a 28 32 28 35 5b 30 2d 35 5d 7c 5b 30 2d 34 5d 5b 30 2d 39 5d 29 7c 31 5b 30 2d 39 5d 5b 30 2d 39 5d 7c 5b 31 2d 39 5d 3f 5b 30 2d 39 5d 29 7c 5b 61 2d 7a 30 2d 39 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 3a 28 3f 3a 5b 5c 78 30 31 2d 5c 78 30 38 5c 78 30 62 5c 78 30 63 5c 78 30 65 2d 5c 78 31 66 5c 78 32 31 2d 5c 78 35 61 5c 78 35 33 2d 5c 78 37 66 5d 7c 5c 5c 5b 5c 78 30 31 2d 5c 78 30 39 5c 78 30 62 5c 78 30 63 5c 78 30 65 2d 5c 78 37 66 5d 29 2b 29 5c 5d 29 24 2f 69 29 3b 0a 7d 29 2e Data Ascii: -z0-9](?:[a-z0-9-][a-z0-9])?\|\[(?:(?:(2(5[0-5]\|[0-4][0-9])\|1[0-9][0-9]\|[1-9]?[0-9]))\.){3}(?:(2(5[0-5]\|[0-4][0-9])\|1[0-9][0-9]\|[1-9]?[0-9])\|[a-z0-9-][a-z0-9]:(?:[\x01-\x08\x0b\x0c\x0e-\x1f\x21-\x5a\x53-\x7f]\|\\[\x01-\x09\x0b\x0c\x0e-\x7f])+)\])$/i);}).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49744	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	787	OUT	GET /web/7108335d226a91c9.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1187	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/javascript Content-Length: 10216 Connection: close CF-Ray: 87dd98078e2a430a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8485 Cache-Control: public, max-age=31556926 ETag: "7787bfc3eddb6d46a30a73e52da8b146" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Fri, 03 May 2024 02:16:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: dA5j9EFU8Ai+j5EW6gswAmoybKdHZ7tNNN7v46IlLWj5iTN9haZn241hZsmxvJQIpyv9tEBb5fo= x-amz-replication-status: PENDING x-amz-request-id: XGCQ382TQZJ9NWWH x-amz-server-side-encryption: AES256 x-amz-version-id: hSk4liZK_mlTsMdp640f9LG9Tobied4R X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	362	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 64 43 76 65 6d 37 37 4b 7a 64 35 6a 70 51 66 6b 62 42 25 32 46 44 36 36 68 4b 25 32 42 4c 4e 52 74 59 39 55 73 55 6c 63 73 6b 39 65 35 72 61 4b 7a 55 54 6b 32 25 32 42 71 47 25 32 42 45 6a 57 6b 58 25 32 42 25 32 42 77 30 33 63 5a 31 25 32 46 30 69 31 55 64 42 51 66 62 68 45 76 35 42 37 69 56 4c 79 65 73 4c 52 36 33 4f 6c 33 36 6a 55 53 54 43 45 41 4a 4a 56 74 36 25 32 42 55 4f 67 45 78 47 35 66 65 74 41 76 70 63 4d 54 32 39 55 33 25 32 46 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dCvem77Kzd5jpQfkbB%2FD66hK%2BLNRtY9UsUlcsk9e5raKzUTk2%2BqG%2BEjWkX%2B%2Bw03cZ1%2F0i1UdBQfbhEv5B7iVLyesLR63Ol36jUSTCEAJJVt6%2BUOgExG5fetAvpcMT29U3%2Fg%3D"}],"group":"cf-nel","max
2024-05-03 04:44:05 UTC	1189	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 38 34 33 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 30 33 30 37 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 65 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[4843],{/***/ 80307:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_re
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 61 29 7b 63 6f 6e 73 74 20 62 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 63 2c 64 5d 6f 66 20 61 2e 65 6e 74 72 69 65 73 28 29 29 6e 75 6c 6c 21 3d 64 26 26 62 2e 70 75 73 68 28 7b 6b 65 79 3a 63 2c 76 61 6c 75 65 3a 4e 6e 28 64 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 4e 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 62 3f 7b 73 74 72 69 6e 67 56 61 6c 75 65 3a 61 7d 3a 22 6e 75 6d 62 65 72 22 3d 3d 3d 62 3f 4e 75 6d 62 65 72 2e 69 73 49 6e 74 65 67 65 72 28 61 29 3f 7b 69 6e 74 56 61 6c 75 65 3a 61 7d 3a 7b 64 6f 75 62 6c 65 56 61 6c 75 65 3a 61 7d 3a 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 62 3f 7b 62 6f 6f 6c 56 61 6c 75 65 3a 61 7d 3a 61 20 69 6e 73 74 61 Data Ascii: a){const b=[];for(const [c,d]of a.entries())null!=d&&b.push({key:c,value:Nn(d)});return b};Nn=function(a){const b=typeof a;return"string"===b?{stringValue:a}:"number"===b?Number.isInteger(a)?{intValue:a}:{doubleValue:a}:"boolean"===b?{boolValue:a}:a insta
2024-05-03 04:44:05 UTC	526	IN	Data Raw: 2c 70 61 72 65 6e 74 53 70 61 6e 49 64 3a 70 2c 6e 61 6d 65 3a 71 2c 6b 69 6e 64 3a 33 2c 73 74 61 72 74 54 69 6d 65 55 6e 69 78 4e 61 6e 6f 3a 6b 2c 65 6e 64 54 69 6d 65 55 6e 69 78 4e 61 6e 6f 3a 6d 2c 61 74 74 72 69 62 75 74 65 73 3a 6e 2c 64 72 6f 70 70 65 64 41 74 74 72 69 62 75 74 65 73 43 6f 75 6e 74 3a 30 2c 65 76 65 6e 74 73 3a 5b 5d 2c 64 72 6f 70 70 65 64 45 76 65 6e 74 73 43 6f 75 6e 74 3a 30 2c 73 74 61 74 75 73 3a 72 2c 6c 69 6e 6b 73 3a 75 2c 64 72 6f 70 70 65 64 4c 69 6e 6b 73 43 6f 75 6e 74 3a 30 7d 7d 29 7d 29 3b 72 65 74 75 72 6e 7b 72 65 73 6f 75 72 63 65 53 70 61 6e 73 3a 5b 7b 72 65 73 6f 75 72 63 65 3a 63 2c 73 63 6f 70 65 53 70 61 6e 73 3a 64 7d 5d 7d 7d 3b 5f 5f 63 2e 51 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 Data Ascii: ,parentSpanId:p,name:q,kind:3,startTimeUnixNano:k,endTimeUnixNano:m,attributes:n,droppedAttributesCount:0,events:[],droppedEventsCount:0,status:r,links:u,droppedLinksCount:0}})});return{resourceSpans:[{resource:c,scopeSpans:d}]}};__c.Qn=function(a,b){retu
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 62 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 72 65 74 75 72 6e 20 6e 65 77 20 5f 5f 63 2e 53 6e 28 7b 76 61 6c 75 65 3a 64 2c 4a 69 3a 65 7d 29 7d 29 3b 52 6e 28 28 29 3d 3e 7b 6e 75 6c 6c 3d 3d 66 26 26 6e 75 6c 6c 21 3d 65 26 26 67 28 6e 65 77 20 5f 5f 63 2e 53 6e 28 7b 76 61 6c 75 65 3a 64 2c 4a 69 3a 65 7d 29 29 7d 2c 5b 66 2c 65 2c 64 5d 29 3b 65 6f 61 28 7b 6e 61 6d 65 3a 63 2c 55 56 61 3a 66 7d 29 3b 52 6e 28 28 29 3d 3e 7b 6e 75 6c 6c 3d 3d 62 26 26 6e 75 6c 6c 21 3d 66 26 26 67 6f 61 28 28 29 3d 3e 7b 66 2e 76 61 6c 75 65 3d 64 3b 66 2e 4a 69 3d 65 7d 29 7d 2c 5b 66 2c 62 2c 64 2c 65 5d 29 3b 72 65 74 75 72 6e 20 66 7d 3b 0a 69 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 Data Ascii: return b;if(null!=e)return new __c.Sn({value:d,Ji:e})});Rn(()=>{null==f&&null!=e&&g(new __c.Sn({value:d,Ji:e}))},[f,e,d]);eoa({name:c,UVa:f});Rn(()=>{null==b&&null!=f&&goa(()=>{f.value=d;f.Ji=e})},[f,b,d,e]);return f};ioa=function(a){return Array.isArray
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 20 73 6f 61 3d 63 6c 61 73 73 7b 67 65 74 28 61 29 7b 61 3d 74 68 69 73 2e 69 6e 64 65 78 2e 67 65 74 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 6d 28 61 29 7d 67 65 74 41 6c 6c 28 61 2c 62 29 7b 61 3d 74 68 69 73 2e 69 6e 64 65 78 2e 67 65 74 41 6c 6c 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 6d 28 61 29 7d 63 6f 75 6e 74 28 61 29 7b 61 3d 74 68 69 73 2e 69 6e 64 65 78 2e 63 6f 75 6e 74 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 6d 28 61 29 7d 61 73 79 6e 63 20 6f 70 65 6e 43 75 72 73 6f 72 28 61 2c 62 29 7b 61 3d 74 68 69 73 2e 69 6e 64 65 78 2e 6f 70 65 6e 43 75 72 73 6f 72 28 61 2c 62 29 3b 61 3d 61 77 61 69 74 20 74 68 69 73 2e 67 6d 28 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 6e 65 77 20 62 6f 28 61 29 3a Data Ascii: soa=class{get(a){a=this.index.get(a);return this.gm(a)}getAll(a,b){a=this.index.getAll(a,b);return this.gm(a)}count(a){a=this.index.count(a);return this.gm(a)}async openCursor(a,b){a=this.index.openCursor(a,b);a=await this.gm(a);return null!=a?new bo(a):
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 5f 63 2e 63 6f 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 6f 70 65 6e 28 7b 6e 61 6d 65 3a 61 2c 76 65 72 73 69 6f 6e 3a 62 2c 6c 6b 61 3a 63 2c 6d 63 61 3a 64 7d 2c 65 3d 69 6e 64 65 78 65 64 44 42 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 2c 67 29 3d 3e 7b 74 72 79 7b 63 6f 6e 73 74 20 68 3d 65 2e 6f 70 65 6e 28 61 2c 62 29 3b 6c 65 74 20 6b 2c 6c 3d 21 31 3b 63 26 26 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 70 67 72 61 64 65 6e 65 65 64 65 64 22 2c 6d 3d 3e 7b 6c 7c 7c 28 6b 3d 6e 65 77 20 5f 5f 63 2e 63 6f 28 68 2e 72 65 73 75 6c 74 29 2c 63 28 6b 2c 6d 29 29 7d 29 3b 73 77 69 74 63 68 28 64 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 64 2e 78 32 61 26 26 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: _c.co=class{static open({name:a,version:b,lka:c,mca:d},e=indexedDB){return new Promise((f,g)=>{try{const h=e.open(a,b);let k,l=!1;c&&h.addEventListener("upgradeneeded",m=>{l\|\|(k=new __c.co(h.result),c(k,m))});switch(d.type){case 0:d.x2a&&h.addEventListene
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 63 28 29 29 7d 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 64 62 3d 61 7d 7d 3b 5f 5f 63 2e 65 6f 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 61 73 79 6e 63 20 6f 70 65 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 61 77 61 69 74 20 5f 5f 63 2e 63 6f 2e 6f 70 65 6e 28 7b 6e 61 6d 65 3a 61 2c 76 65 72 73 69 6f 6e 3a 31 2c 6c 6b 61 3a 65 3d 3e 7b 65 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 61 2c 7b 6b 65 79 50 61 74 68 3a 22 6b 65 79 22 7d 29 7d 2c 6d 63 61 3a 7b 74 79 70 65 3a 31 2c 56 63 61 3a 21 30 2c 57 63 61 3a 21 30 7d 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 5f 63 2e 65 6f 28 64 2c 61 2c 62 2c 63 29 7d 61 73 79 6e 63 20 70 75 74 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 74 68 69 73 2e 64 62 2e 74 72 61 6e Data Ascii: c())})}constructor(a){this.db=a}};__c.eo=class{static async open(a,b,c){const d=await __c.co.open({name:a,version:1,lka:e=>{e.createObjectStore(a,{keyPath:"key"})},mca:{type:1,Vca:!0,Wca:!0}});return new __c.eo(d,a,b,c)}async put(a,b){const c=this.db.tran
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 63 3b 74 68 69 73 2e 64 65 73 65 72 69 61 6c 69 7a 65 3d 64 7d 7d 3b 76 61 72 20 4f 6e 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 39 29 3b 5f 5f 63 2e 76 6f 61 3d 63 6c 61 73 73 7b 6e 4e 28 29 7b 76 61 72 20 61 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 62 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 4d 61 74 68 2e 61 62 73 28 5f 5f 63 2e 51 6e 28 74 68 69 73 2c 62 29 2d 61 29 3c 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 7c 7c 28 74 68 69 73 2e 69 49 61 3d 61 2c 74 68 69 73 2e 6e 44 61 3d 62 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 62 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 69 49 61 3d 61 3b 74 68 69 73 2e 6e 44 61 3d 62 3b 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 Data Ascii: c;this.deserialize=d}};var On=Math.pow(10,9);__c.voa=class{nN(){var a=Date.now(),b=performance.now();Math.abs(__c.Qn(this,b)-a)<this.threshold\|\|(this.iIa=a,this.nDa=b)}constructor(){var a=Date.now(),b=performance.now();this.iIa=a;this.nDa=b;this.threshold
2024-05-03 04:44:05 UTC	287	IN	Data Raw: 28 61 3d 3e 62 3d 3e 62 2e 6c 65 6e 67 74 68 3c 61 3f 5f 5f 63 2e 4b 6e 2e 69 6e 76 61 6c 69 64 28 29 3a 5f 5f 63 2e 4b 6e 2e 76 61 6c 69 64 28 29 29 3b 5f 5f 63 2e 7a 6f 61 3d 70 6f 28 61 3d 3e 62 3d 3e 62 2e 6c 65 6e 67 74 68 3e 61 3f 5f 5f 63 2e 4b 6e 2e 69 6e 76 61 6c 69 64 28 29 3a 5f 5f 63 2e 4b 6e 2e 76 61 6c 69 64 28 29 29 3b 5f 5f 63 2e 41 6f 61 3d 70 6f 28 61 3d 3e 62 3d 3e 62 3d 3d 3d 61 28 29 3f 5f 5f 63 2e 4b 6e 2e 76 61 6c 69 64 28 29 3a 5f 5f 63 2e 4b 6e 2e 69 6e 76 61 6c 69 64 28 29 29 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 34 35 66 37 38 35 33 64 63 37 36 36 30 33 37 38 61 30 33 38 39 35 32 62 35 33 63 30 39 35 33 65 29 3b 7d 0a 0a 7d 5d 29 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f Data Ascii: (a=>b=>b.length<a?__c.Kn.invalid():__c.Kn.valid());__c.zoa=po(a=>b=>b.length>a?__c.Kn.invalid():__c.Kn.valid());__c.Aoa=po(a=>b=>b===a()?__c.Kn.valid():__c.Kn.invalid());}).call(self, self._45f7853dc7660378a038952b53c0953e);}}])//# sourceMappingURL=so

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49746	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	787	OUT	GET /web/84e6389ec6a6ae32.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:05 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:05 GMT Content-Type: text/javascript Content-Length: 5288 Connection: close CF-Ray: 87dd98078dbec358-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8485 Cache-Control: public, max-age=31556926 ETag: "c33c519cb32e60d465ce86ab4946058a" Expires: Sat, 03 May 2025 10:32:51 GMT Last-Modified: Fri, 03 May 2024 02:16:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: GlzWPWUQ7n8YT8IE88O9rduUItDQr4h3B7NAfbZBJcQuHcJnsGjg3wcWE18DrzCNDN21k5ivTZ0= x-amz-replication-status: COMPLETED x-amz-request-id: XGCW3VWE401X45HN x-amz-server-side-encryption: AES256 x-amz-version-id: 8g._CRGyEe1OL5DDz8cCCe0sG8vynnbV X-Content-Type-Options: nosniff
2024-05-03 04:44:05 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 55 65 36 42 66 44 25 32 42 31 25 32 42 70 4c 35 62 35 54 6b 73 69 34 7a 65 46 51 54 42 71 71 50 74 32 50 6e 39 31 49 54 37 64 6f 67 49 56 4c 57 4b 79 51 38 37 4f 65 59 73 58 7a 69 46 30 30 49 52 32 59 45 61 25 32 42 73 4b 70 73 4c 38 75 51 66 4a 74 25 32 42 64 7a 53 43 74 51 4d 6d 4f 4f 70 53 66 32 47 4f 4d 67 44 65 55 67 49 48 7a 57 46 62 41 64 32 50 38 57 67 50 44 4d 48 53 76 64 5a 71 6e 54 50 53 25 32 42 7a 31 58 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ue6BfD%2B1%2BpL5b5Tksi4zeFQTBqqPt2Pn91IT7dogIVLWKyQ87OeYsXziF00IR2YEa%2BsKpsL8uQfJt%2BdzSCtQMmOOpSf2GOMgDeUgIHzWFbAd2P8WgPDMHSvdZqnTPS%2Bz1XE%3D"}],"group":"cf-nel","max_age":60
2024-05-03 04:44:05 UTC	1196	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 34 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 31 34 33 32 38 36 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6847],{/***/ 143286:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 29 3b 61 2e 44 69 61 2e 61 64 64 28 62 2e 63 6f 6e 74 65 78 74 2e 73 70 61 6e 49 64 29 7d 2c 70 33 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 61 2e 65 77 61 2e 64 77 61 28 61 2e 62 75 66 66 65 72 29 7d 63 61 74 63 68 28 62 29 7b 61 2e 48 2e 52 61 28 62 2c 7b 76 63 3a 60 46 61 69 6c 65 64 20 74 6f 20 65 78 70 6f 72 74 20 74 68 65 20 73 70 61 6e 20 62 75 66 66 65 72 20 66 72 6f 6d 20 24 7b 75 30 62 2e 6e 61 6d 65 7d 60 2c 65 78 74 72 61 3a 6e 65 77 20 4d 61 70 28 5b 5b 22 73 70 61 6e 73 22 2c 61 2e 62 75 66 66 65 72 2e 6d 61 70 28 5f 5f 63 2e 7a 63 29 5d 2c 5b 22 6d 61 78 42 61 74 63 68 53 69 7a 65 22 2c 0a 61 2e 63 6f 6e 66 69 67 2e 6b 36 5d 2c 5b 22 6d 61 78 42 61 74 63 68 69 6e 67 54 69 6d 65 4d 73 22 2c 61 2e 63 6f 6e 66 69 67 2e 6c 36 5d 5d 29 Data Ascii: );a.Dia.add(b.context.spanId)},p3=function(a){try{a.ewa.dwa(a.buffer)}catch(b){a.H.Ra(b,{vc:`Failed to export the span buffer from ${u0b.name}`,extra:new Map([["spans",a.buffer.map(__c.zc)],["maxBatchSize",a.config.k6],["maxBatchingTimeMs",a.config.l6]])
2024-05-03 04:44:05 UTC	1369	IN	Data Raw: 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 68 69 73 2e 42 32 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 61 3b 74 68 69 73 2e 48 3d 62 3b 74 68 69 73 2e 6a 5f 3d 63 3b 74 68 69 73 2e 73 65 6e 64 3d 64 3b 74 68 69 73 2e 42 32 3d 0a 6e 65 77 20 53 65 74 3b 76 61 72 20 65 3b 74 68 69 73 2e 6a 64 61 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 61 2e 6a 64 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 49 6e 66 69 6e 69 74 79 7d 7d 3b 76 61 72 20 79 30 62 3d 28 7b 5a 39 61 3a 61 2c 75 72 6c 3a 62 7d 29 3d 3e 63 3d 3e 7b 63 6f 6e 73 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 29 2c 65 3d 7b 41 63 63 65 70 74 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 22 43 6f 6e 74 65 6e 74 Data Ascii: t Promise.all(this.B2)}constructor(a,b,c,d){this.config=a;this.H=b;this.j_=c;this.send=d;this.B2=new Set;var e;this.jda=null!==(e=a.jda)&&void 0!==e?e:Infinity}};var y0b=({Z9a:a,url:b})=>c=>{const d=JSON.stringify(c),e={Accept:"application/json","Content
2024-05-03 04:44:05 UTC	1354	IN	Data Raw: 4d 61 70 28 5b 5b 22 73 70 61 6e 73 22 2c 74 68 69 73 2e 62 75 66 66 65 72 2e 6d 61 70 28 5f 5f 63 2e 7a 63 29 5d 5d 29 7d 29 7d 7d 61 73 79 6e 63 20 66 6c 75 73 68 28 29 7b 70 33 28 74 68 69 73 29 3b 61 77 61 69 74 20 74 68 69 73 2e 65 77 61 2e 66 6c 75 73 68 28 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 65 77 61 3d 61 3b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 62 3b 74 68 69 73 2e 48 3d 63 3b 74 68 69 73 2e 62 75 66 66 65 72 3d 5b 5d 7d 7d 3b 76 61 72 20 42 30 62 3d 63 6c 61 73 73 7b 45 73 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2e 74 72 61 63 65 49 64 2c 63 3d 74 68 69 73 2e 54 39 2e 67 65 74 28 62 29 3b 6e 75 6c 6c 21 3d 63 3f 28 63 2e 44 7a 2b 3d 31 2c 76 6f 69 64 20 30 3d 3d 3d 61 2e 57 26 26 28 Data Ascii: Map([["spans",this.buffer.map(__c.zc)]])})}}async flush(){p3(this);await this.ewa.flush()}constructor(a,b,c){this.ewa=a;this.config=b;this.H=c;this.buffer=[]}};var B0b=class{Es(a){const b=a.context.traceId,c=this.T9.get(b);null!=c?(c.Dz+=1,void 0===a.W&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49740	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:05 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-03 04:44:05 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=8338 Date: Fri, 03 May 2024 04:44:05 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49752	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:07 UTC	794	OUT	GET /web/9c9f5e37fb9eefe6.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:07 UTC	1187	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:07 GMT Content-Type: text/javascript Content-Length: 28651 Connection: close CF-Ray: 87dd9814bf424240-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8487 Cache-Control: public, max-age=31556926 ETag: "6fe525c1f77ea90e7d2ce3587ee3994f" Expires: Sat, 03 May 2025 10:32:53 GMT Last-Modified: Fri, 03 May 2024 02:16:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: AqTLpWPLZld0k7xBIpDiMxZV2y47HMjBJvoU0rrFZExHwluhCZGhvMACRURuDaOJxtiPgxnCq9Q= x-amz-replication-status: PENDING x-amz-request-id: XGCZJTK3C7ZRT47D x-amz-server-side-encryption: AES256 x-amz-version-id: Q3FLBqz9QYJkswTxGS3GyLpGZRz7xzZL X-Content-Type-Options: nosniff
2024-05-03 04:44:07 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 69 25 32 42 53 49 30 4c 32 36 4b 33 4b 38 37 66 52 4d 37 76 4c 79 77 25 32 46 61 79 6c 44 31 43 63 57 61 55 48 39 68 54 79 52 35 41 37 43 48 39 32 4a 47 4d 6b 51 34 48 66 67 50 55 6d 4f 70 34 7a 67 46 50 78 4d 6e 4a 6a 62 67 51 45 4d 44 49 52 42 41 30 54 58 66 4e 53 4d 51 67 6a 58 33 42 50 6b 38 58 4d 6f 6e 61 25 32 42 72 49 66 64 70 31 51 75 70 56 78 49 65 38 70 46 4d 74 44 62 63 4e 51 50 66 41 54 41 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ii%2BSI0L26K3K87fRM7vLyw%2FaylD1CcWaUH9hTyR5A7CH92JGMkQ4HfgPUmOp4zgFPxMnJjbgQEMDIRBA0TXfNSMQgjX3BPk8XMona%2BrIfdp1QupVxIe8pFMtDbcNQPfATAE%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 39 63 39 66 35 65 33 37 66 62 39 65 65 66 65 36 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 34 34 5d 2c 7b 31 36 37 38 32 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 65 3d 3e 21 28 21 65 7c 7c 65 2e 6c 65 6e 67 74 68 3c 33 29 26 26 28 32 35 35 3d 3d 3d 65 5b 30 5d 26 26 32 31 36 3d 3d 3d 65 5b 31 5d 26 26 32 35 35 3d 3d 3d 65 5b 32 5d 29 7d 2c 36 36 32 30 Data Ascii: /! For license information please see 9c9f5e37fb9eefe6.vendor.js.LICENSE.txt /"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[3044],{167824:e=>{e.exports=e=>!(!e\|\|e.length<3)&&(255===e[0]&&216===e[1]&&255===e[2])},6620
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 73 65 72 76 61 62 6c 65 29 72 65 74 75 72 6e 20 65 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 65 29 29 3b 76 61 72 20 72 3d 65 3b 65 2e 74 68 65 6e 28 28 30 2c 6e 2e 61 44 29 28 22 6f 62 73 65 72 76 61 62 6c 65 46 72 6f 6d 50 72 6f 6d 69 73 65 2d 72 65 73 6f 6c 76 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 76 61 6c 75 65 3d 65 2c 72 2e 73 74 61 74 65 3d 63 7d 29 29 2c 28 30 2c 6e 2e 61 44 29 28 22 6f 62 73 65 72 76 61 62 6c 65 46 72 6f 6d 50 72 6f 6d 69 73 65 2d 72 65 6a 65 63 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 76 61 6c 75 65 3d 65 2c 72 2e 73 74 61 74 65 3d 6c 7d 29 29 29 2c 72 2e 69 73 50 72 6f 6d 69 73 65 42 61 73 65 64 4f 62 73 65 72 76 61 62 6c 65 3d Data Ascii: servable)return e;"function"==typeof e&&(e=new Promise(e));var r=e;e.then((0,n.aD)("observableFromPromise-resolve",(function(e){r.value=e,r.state=c})),(0,n.aD)("observableFromPromise-reject",(function(e){r.value=e,r.state=l}))),r.isPromiseBasedObservable=
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 63 6f 72 61 74 65 28 65 2c 74 2c 72 2c 6e 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 75 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 75 3e 3d 30 3b 75 2d 2d 29 28 6f 3d 65 5b 75 5d 29 26 26 28 73 3d 28 69 3c 33 3f 6f 28 73 29 3a 69 3e 33 3f 6f 28 74 2c 72 2c 73 29 3a 6f 28 74 2c 72 29 29 7c 7c 73 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 73 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 73 29 2c 73 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 72 3b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 31 29 3b 76 61 72 20 6f 3d 28 30 2c 6e 2e 46 6c 29 28 65 29 3b 72 65 74 75 72 6e 28 72 3d 7b 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: corate(e,t,r,n);else for(var u=e.length-1;u>=0;u--)(o=e[u])&&(s=(i<3?o(s):i>3?o(t,r,s):o(t,r))\|\|s);return i>3&&s&&Object.defineProperty(t,r,s),s};function d(e,t){var r;void 0===t&&(t=!1);var o=(0,n.Fl)(e);return(r={subscribe:function(e){return"function"==
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 65 2c 74 68 69 73 2e 64 69 73 70 6f 73 65 28 29 7d 7d 29 2c 68 28 5b 6e 2e 4c 4f 2e 72 65 66 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 75 72 72 65 6e 74 22 2c 76 6f 69 64 20 30 29 2c 68 28 5b 6e 2e 61 44 2e 62 6f 75 6e 64 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6e 65 78 74 22 2c 6e 75 6c 6c 29 2c 68 28 5b 6e 2e 61 44 2e 62 6f 75 6e 64 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6f 6d 70 6c 65 74 65 22 2c 6e 75 6c 6c 29 2c 68 28 5b 6e 2e 61 44 2e 62 6f 75 6e 64 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 72 72 6f 72 22 2c 6e 75 6c 6c 29 7d 28 29 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c Data Ascii: nction(e){this.current=e,this.dispose()}}),h([n.LO.ref],e.prototype,"current",void 0),h([n.aD.bound],e.prototype,"next",null),h([n.aD.bound],e.prototype,"complete",null),h([n.aD.bound],e.prototype,"error",null)}();var y=function(){return y=Object.assign\|\|
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 62 6c 65 20 6f 62 6a 65 63 74 22 29 3b 76 61 72 20 72 3d 75 28 74 68 69 73 29 3b 75 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 73 3b 69 66 28 21 72 2e 69 6e 63 6c 75 64 65 73 28 6f 29 26 26 6f 21 3d 3d 6e 2e 73 6f 26 26 22 5f 5f 6d 6f 62 78 44 69 64 52 75 6e 4c 61 7a 79 49 6e 69 74 69 61 6c 69 7a 65 72 73 22 21 3d 3d 6f 29 7b 69 66 28 69 28 2d 31 3d 3d 3d 67 2e 69 6e 64 65 78 4f 66 28 6f 29 2c 22 54 68 65 20 70 72 6f 70 65 72 74 79 6e 61 6d 65 20 22 2b 6f 2b 22 20 69 73 20 72 65 73 65 72 76 65 64 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 76 69 65 77 4d 6f 64 65 6c 73 22 29 2c 28 30 2c 6e 2e 65 4a 29 28 65 2c 6f 29 29 7b 76 61 72 20 75 3d 28 30 2c 6e 2e 6b 53 29 28 65 2c 6f 29 2c Data Ascii: ble object");var r=u(this);u(e).forEach((function(o){var s;if(!r.includes(o)&&o!==n.so&&"__mobxDidRunLazyInitializers"!==o){if(i(-1===g.indexOf(o),"The propertyname "+o+" is reserved and cannot be used with viewModels"),(0,n.eJ)(e,o)){var u=(0,n.kS)(e,o),
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 73 65 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6c 6f 63 61 6c 56 61 6c 75 65 73 2e 63 6c 65 61 72 28 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 73 65 74 50 72 6f 70 65 72 74 79 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6c 6f 63 61 6c 56 61 6c 75 65 73 2e 64 65 6c 65 74 65 28 65 29 Data Ascii: eProperty(e.prototype,"reset",{enumerable:!1,configurable:!0,writable:!0,value:function(){this.localValues.clear()}}),Object.defineProperty(e.prototype,"resetProperty",{enumerable:!1,configurable:!0,writable:!0,value:function(e){this.localValues.delete(e)
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 72 20 72 3d 7b 7d 2c 6f 3d 76 6f 69 64 20 30 2c 73 3d 21 31 2c 75 3d 76 6f 69 64 20 30 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 28 6f 3d 74 2e 6f 6e 43 6c 65 61 6e 75 70 2c 73 3d 76 6f 69 64 20 30 21 3d 3d 74 2e 6b 65 65 70 41 6c 69 76 65 26 26 74 2e 6b 65 65 70 41 6c 69 76 65 2c 75 3d 74 2e 64 65 62 75 67 4e 61 6d 65 47 65 6e 65 72 61 74 6f 72 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 6f 3d 74 29 3b 76 61 72 20 61 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 3a 22 2b 65 3b 69 66 28 22 6e 75 6d 62 Data Ascii: r r={},o=void 0,s=!1,u=void 0;"object"==typeof t?(o=t.onCleanup,s=void 0!==t.keepAlive&&t.keepAlive,u=t.debugNameGenerator):"function"==typeof t&&(o=t);var a=!1;return function(i){var c=function(e){var t=typeof e;if("string"===t)return"string:"+e;if("numb
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 65 5b 72 5d 3d 74 5b 72 5d 29 7d 2c 45 28 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 45 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 72 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 72 29 7d 29 2c 78 3d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 7b 7d 3a 6f 2c 73 3d 69 2e 6e 61 6d 65 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 22 6f 67 6d 22 2b 28 31 65 33 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3a 73 2c 61 3d 69 Data Ascii: e[r]=t[r])},E(e,t)},function(e,t){function r(){this.constructor=e}E(e,t),e.prototype=null===t?Object.create(t):(r.prototype=t.prototype,new r)}),x=(function(e){function t(t,r,o){var i=void 0===o?{}:o,s=i.name,u=void 0===s?"ogm"+(1e3*Math.random()\|0):s,a=i
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 65 6c 65 74 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 74 22 2c 7b 65 6e Data Ascii: ble:!0,writable:!0,value:function(){throw new Error("not supported")}}),Object.defineProperty(t.prototype,"delete",{enumerable:!1,configurable:!0,writable:!0,value:function(e){throw new Error("not supported")}}),Object.defineProperty(t.prototype,"set",{en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49747	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:07 UTC	794	OUT	GET /web/bc6d536e475100e2.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:07 UTC	1187	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:07 GMT Content-Type: text/javascript Content-Length: 12994 Connection: close CF-Ray: 87dd9814880a7d06-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8487 Cache-Control: public, max-age=31556926 ETag: "075935378b033387587ecd288be67fdd" Expires: Sat, 03 May 2025 10:32:53 GMT Last-Modified: Fri, 03 May 2024 02:16:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: JO/zIHNR3lmKPKWwTk91CvMt5Vt7gsIZPc3OB44cbQTUubrfKTYHJsNMRe43ZW/G0gQkqlEq+7U= x-amz-replication-status: PENDING x-amz-request-id: XGCK5XAJX1EKNWRJ x-amz-server-side-encryption: AES256 x-amz-version-id: tI12LhtQ9XOPQ70cx_cg5wS.lunh3WDl X-Content-Type-Options: nosniff
2024-05-03 04:44:07 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 41 7a 57 4e 6a 25 32 46 61 4a 66 7a 38 6a 73 45 70 61 68 57 34 5a 33 55 72 36 79 35 35 58 45 4f 4d 6f 4c 4a 34 53 25 32 46 79 6b 71 36 38 38 4d 34 6a 39 42 39 4f 67 75 78 50 66 4f 4d 35 45 78 36 74 75 37 6b 79 6f 75 79 6d 41 25 32 42 55 34 48 4e 47 50 38 55 61 25 32 46 58 49 54 75 65 76 36 42 4a 70 69 4c 55 76 5a 67 6b 69 62 41 4c 7a 63 67 43 32 50 67 4f 36 73 76 32 62 49 51 6c 70 4f 65 39 75 53 6e 50 6f 54 42 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AzWNj%2FaJfz8jsEpahW4Z3Ur6y55XEOMoLJ4S%2Fykq688M4j9B9OguxPfOM5Ex6tu7kyouymA%2BU4HNGP8Ua%2FXITuev6BJpiLUvZgkibALzcgC2PgO6sv2bIQlpOe9uSnPoTBY%3D"}],"group":"cf-nel","max_age":6048
2024-05-03 04:44:07 UTC	1199	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 33 31 5d 2c 7b 37 39 37 38 30 36 3a 28 74 2c 6e 2c 72 29 3d 3e 7b 72 2e 64 28 6e 2c 7b 45 31 3a 28 29 3d 3e 6f 2c 54 6c 3a 28 29 3d 3e 75 2c 5a 79 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 65 2c 69 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 Data Ascii: "use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[9731],{797806:(t,n,r)=>{r.d(n,{E1:()=>o,Tl:()=>u,Zy:()=>a});var e,i=!("undefined"==typeof window\|\|!window.document\|\|!window.document.createElement);function o(){if(e)return
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 7b 72 2e 64 28 6e 2c 7b 43 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 65 3d 72 28 36 31 32 34 34 29 2c 69 3d 72 28 34 33 33 33 30 36 29 2c 6f 3d 6e 65 77 20 65 2e 79 28 69 2e 5a 29 7d 2c 31 36 36 30 30 38 3a 28 74 2c 6e 2c 72 29 3d 3e 7b 72 2e 64 28 6e 2c 7b 68 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 65 3d 72 28 33 35 39 38 37 29 2c 69 3d 72 28 31 31 30 39 37 39 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 72 2e 6c 69 66 74 28 6e 65 77 20 75 28 74 2c 6e 29 29 7d 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 74 68 69 73 2e 70 72 65 64 69 63 61 74 65 3d 74 2c 74 68 69 73 2e 74 68 69 73 41 72 67 3d 6e 7d 72 65 74 75 72 6e Data Ascii: {r.d(n,{C:()=>o});var e=r(61244),i=r(433306),o=new e.y(i.Z)},166008:(t,n,r)=>{r.d(n,{h:()=>o});var e=r(35987),i=r(110979);function o(t,n){return function(r){return r.lift(new u(t,n))}}var u=function(){function t(t,n){this.predicate=t,this.thisArg=n}return
2024-05-03 04:44:07 UTC	516	IN	Data Raw: 6e 75 6c 6c 3d 3d 74 3f 6e 75 6c 6c 3a 69 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 3b 72 65 74 75 72 6e 20 74 7d 72 2e 64 28 6e 2c 7b 43 3a 28 29 3d 3e 69 2c 6a 3a 28 29 3d 3e 65 7d 29 7d 2c 37 33 34 31 36 37 3a 28 74 2c 6e 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 74 3f 74 3a 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 29 7b 6c 65 74 20 72 2c 65 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 69 3b 29 65 3d 6e 28 29 2a 69 2d 2d 7c 30 2c 72 3d 74 5b 69 5d 2c Data Ascii: null==t?null:i(t)}function i(t){if("function"!=typeof t)throw new Error;return t}r.d(n,{C:()=>i,j:()=>e})},734167:(t,n,r)=>{function e(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function i(t,n){let r,e,i=t.length;for(;i;)e=n()*i--\|0,r=t[i],
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 36 36 35 3a 28 74 2c 6e 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 63 68 69 6c 64 72 65 6e 2c 65 3d 72 26 26 72 2e 6c 65 6e 67 74 68 3b 69 66 28 65 29 66 6f 72 28 3b 2d 2d 65 3e 3d 30 3b 29 6e 2b 3d 72 5b 65 5d 2e 76 61 6c 75 65 3b 65 6c 73 65 20 6e 3d 31 3b 74 2e 76 61 6c 75 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 41 66 74 65 72 28 65 29 7d 72 2e 64 28 6e 2c 7b 5a 3a 28 29 3d 3e 69 7d 29 7d 2c 31 31 36 35 34 33 3a 28 74 2c 6e 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 29 7d 72 2e 64 28 6e 2c 7b 5a 3a 28 29 3d 3e 65 7d 29 7d 2c 31 36 32 38 33 39 3a 28 74 2c 6e 2c 72 Data Ascii: 665:(t,n,r)=>{function e(t){var n=0,r=t.children,e=r&&r.length;if(e)for(;--e>=0;)n+=r[e].value;else n=1;t.value=n}function i(){return this.eachAfter(e)}r.d(n,{Z:()=>i})},116543:(t,n,r)=>{function e(){return Array.from(this)}r.d(n,{Z:()=>e})},162839:(t,n,r
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 68 69 6c 64 72 65 6e 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 5b 31 5d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 74 29 7b 76 6f 69 64 20 30 21 3d 3d 74 2e 64 61 74 61 2e 76 61 6c 75 65 26 26 28 74 2e 76 61 6c 75 65 3d 74 2e 64 61 74 61 2e 76 61 6c 75 65 29 2c 74 2e 64 61 74 61 3d 74 2e 64 61 74 61 2e 64 61 74 61 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 29 7b 76 61 72 20 6e 3d 30 3b 64 6f 7b 74 2e 68 65 69 67 68 74 3d 6e 7d 77 68 69 6c 65 28 28 74 3d 74 2e 70 61 72 65 6e 74 29 26 26 74 2e 68 65 69 67 68 74 3c 2b 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 74 68 69 73 2e 64 61 74 61 3d 74 2c 74 68 69 73 2e 64 65 70 74 68 3d 74 68 69 73 2e 68 65 69 67 68 74 3d 30 Data Ascii: hildren}function g(t){return Array.isArray(t)?t[1]:null}function Z(t){void 0!==t.data.value&&(t.value=t.data.value),t.data=t.data.data}function w(t){var n=0;do{t.height=n}while((t=t.parent)&&t.height<++n)}function m(t){this.data=t,this.depth=this.height=0
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 7d 29 29 7d 72 2e 64 28 6e 2c 7b 5a 3a 28 29 3d 3e 65 7d 29 7d 2c 31 39 33 38 33 33 3a 28 74 2c 6e 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 41 66 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 2b 74 28 6e 2e 64 61 74 61 29 7c 7c 30 2c 65 3d 6e 2e 63 68 69 6c 64 72 65 6e 2c 69 3d 65 26 26 65 2e 6c 65 6e 67 74 68 3b 2d 2d 69 3e 3d 30 3b 29 72 2b 3d 65 5b 69 5d 2e 76 61 6c 75 65 3b 6e 2e 76 61 6c 75 65 3d 72 7d 29 29 7d 72 2e 64 28 6e 2c 7b 5a 3a 28 29 3d 3e 65 7d 29 7d 2c 34 38 31 65 33 3a 28 74 2c 6e 2c 72 29 3d 3e 7b 72 2e 64 28 6e 2c 7b 5a 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 65 3d 31 36 36 34 35 32 35 2c 69 3d 31 30 31 33 39 30 34 32 32 33 2c 6f Data Ascii: }))}r.d(n,{Z:()=>e})},193833:(t,n,r)=>{function e(t){return this.eachAfter((function(n){for(var r=+t(n.data)\|\|0,e=n.children,i=e&&e.length;--i>=0;)r+=e[i].value;n.value=r}))}r.d(n,{Z:()=>e})},481e3:(t,n,r)=>{r.d(n,{Z:()=>u});const e=1664525,i=1013904223,o
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 74 2e 78 2c 69 3d 74 2e 79 2c 6f 3d 74 2e 72 2c 75 3d 6e 2e 78 2c 61 3d 6e 2e 79 2c 63 3d 6e 2e 72 2c 66 3d 72 2e 78 2c 68 3d 72 2e 79 2c 6c 3d 72 2e 72 2c 73 3d 65 2d 75 2c 64 3d 65 2d 66 2c 70 3d 69 2d 61 2c 76 3d 69 2d 68 2c 79 3d 63 2d 6f 2c 78 3d 6c 2d 6f 2c 67 3d 65 2a 65 2b 69 2a 69 2d 6f 2a 6f 2c 5a 3d 67 2d 75 2a 75 2d 61 2a 61 2b 63 2a 63 2c 77 3d 67 2d 66 2a 66 2d 68 2a 68 2b 6c 2a 6c 2c 6d 3d 64 2a 70 2d 73 2a 76 2c 41 3d 28 70 2a 77 2d 76 2a 5a 29 2f 28 32 2a 6d 29 2d 65 2c 4d 3d 28 76 2a 79 2d 70 2a 78 29 2f 6d 2c 5f 3d 28 64 2a 5a 2d 73 2a 77 29 2f 28 32 2a 6d 29 2d 69 2c 62 3d 28 73 2a 78 2d 64 2a 79 29 2f 6d 2c 42 3d 4d 2a 4d 2b 62 2a 62 2d 31 2c 4c 3d 32 2a 28 6f 2b 41 2a 4d 2b 5f 2a 62 29 2c 43 Data Ascii: (t,n,r){var e=t.x,i=t.y,o=t.r,u=n.x,a=n.y,c=n.r,f=r.x,h=r.y,l=r.r,s=e-u,d=e-f,p=i-a,v=i-h,y=c-o,x=l-o,g=ee+ii-oo,Z=g-uu-aa+cc,w=g-ff-hh+ll,m=dp-sv,A=(pw-vZ)/(2m)-e,M=(vy-px)/m,_=(dZ-sw)/(2m)-i,b=(sx-dy)/m,B=MM+bb-1,L=2(o+AM+_b),C
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 29 2c 69 3d 28 72 28 34 38 31 65 33 29 2c 72 28 36 31 31 35 39 30 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 2c 69 2c 6f 2c 75 2c 61 3d 74 2e 78 2d 6e 2e 78 2c 63 3d 74 2e 79 2d 6e 2e 79 2c 66 3d 61 2a 61 2b 63 2a 63 3b 66 3f 28 69 3d 6e 2e 72 2b 72 2e 72 2c 69 2a 3d 69 2c 75 3d 74 2e 72 2b 72 2e 72 2c 69 3e 28 75 2a 3d 75 29 3f 28 65 3d 28 66 2b 75 2d 69 29 2f 28 32 2a 66 29 2c 6f 3d 4d 61 74 68 2e 73 71 72 74 28 4d 61 74 68 2e 6d 61 78 28 30 2c 75 2f 66 2d 65 2a 65 29 29 2c 72 2e 78 3d 74 2e 78 2d 65 2a 61 2d 6f 2a 63 2c 72 2e 79 3d 74 2e 79 2d 65 2a 63 2b 6f 2a 61 29 3a 28 65 3d 28 66 2b 69 2d 75 29 2f 28 32 2a 66 29 2c 6f 3d 4d 61 74 68 2e 73 71 72 74 28 4d 61 74 68 2e 6d 61 78 28 30 2c 69 2f 66 2d 65 2a 65 29 29 2c Data Ascii: ),i=(r(481e3),r(611590));function o(t,n,r){var e,i,o,u,a=t.x-n.x,c=t.y-n.y,f=aa+cc;f?(i=n.r+r.r,i=i,u=t.r+r.r,i>(u=u)?(e=(f+u-i)/(2f),o=Math.sqrt(Math.max(0,u/f-ee)),r.x=t.x-ea-oc,r.y=t.y-ec+oa):(e=(f+i-u)/(2f),o=Math.sqrt(Math.max(0,i/f-ee)),
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 2c 61 3d 74 2e 63 68 69 6c 64 72 65 6e 2c 63 3d 61 2e 6c 65 6e 67 74 68 2c 66 3d 6e 65 77 20 41 72 72 61 79 28 63 2b 31 29 3b 66 6f 72 28 66 5b 30 5d 3d 75 3d 6f 3d 30 3b 6f 3c 63 3b 2b 2b 6f 29 66 5b 6f 2b 31 5d 3d 75 2b 3d 61 5b 6f 5d 2e 76 61 6c 75 65 3b 21 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 72 2c 65 2c 69 2c 6f 2c 75 2c 63 29 7b 69 66 28 6e 3e 3d 72 2d 31 29 7b 76 61 72 20 68 3d 61 5b 6e 5d 3b 72 65 74 75 72 6e 20 68 2e 78 30 3d 69 2c 68 2e 79 30 3d 6f 2c 68 2e 78 31 3d 75 2c 76 6f 69 64 28 68 2e 79 31 3d 63 29 7d 76 61 72 20 6c 3d 66 5b 6e 5d 2c 73 3d 65 2f 32 2b 6c 2c 64 3d 6e 2b 31 2c 70 3d 72 2d 31 3b 66 6f 72 28 3b 64 3c 70 3b 29 7b 76 61 72 20 76 3d 64 2b 70 3e 3e 3e 31 3b 66 5b 76 5d 3c 73 3f 64 3d 76 2b 31 3a 70 3d 76 7d 73 2d 66 5b 64 2d Data Ascii: ,a=t.children,c=a.length,f=new Array(c+1);for(f[0]=u=o=0;o<c;++o)f[o+1]=u+=a[o].value;!function t(n,r,e,i,o,u,c){if(n>=r-1){var h=a[n];return h.x0=i,h.y0=o,h.x1=u,void(h.y1=c)}var l=f[n],s=e/2+l,d=n+1,p=r-1;for(;d<p;){var v=d+p>>>1;f[v]<s?d=v+1:p=v}s-f[d-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49748	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:07 UTC	1323	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/87dd97e63f924243 HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 15947 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:07 UTC	15947	OUT	Data Raw: 7b 22 77 70 22 3a 22 72 7a 76 24 43 37 64 31 43 35 76 43 70 77 51 64 34 64 54 38 4d 24 37 41 38 74 65 38 42 2b 42 78 78 37 31 64 57 56 38 73 63 41 33 63 32 76 38 6d 73 4a 6f 51 63 35 64 4f 38 70 34 76 47 2d 7a 7a 38 74 68 78 38 71 38 78 41 78 76 64 38 4e 78 64 49 51 4c 24 68 35 7a 5a 6c 79 24 73 63 6b 7a 65 74 52 4f 54 77 47 50 24 49 6b 43 45 65 6e 64 52 56 73 68 42 38 43 76 76 69 42 6d 37 5a 2d 38 53 47 2d 32 46 5a 38 46 24 77 6d 38 37 45 76 38 42 24 37 37 24 6b 70 24 42 38 64 63 38 4d 35 48 38 64 6e 5a 38 67 44 31 74 47 7a 4a 64 74 68 2d 76 38 37 44 5a 38 37 51 6f 4d 38 6f 37 38 64 5a 4e 32 58 76 79 4f 65 41 37 47 37 64 46 49 65 7a 56 43 6b 62 61 46 73 38 2b 24 37 42 6a 36 7a 38 31 48 7a 63 77 32 73 39 4e 47 38 6f 61 46 68 6b 2b 74 24 38 58 68 2b 32 42 Data Ascii: {"wp":"rzv$C7d1C5vCpwQd4dT8M$7A8te8B+Bxx71dWV8scA3c2v8msJoQc5dO8p4vG-zz8thx8q8xAxvd8NxdIQL$h5zZly$sckzetROTwGP$IkCEendRVshB8CvviBm7Z-8SG-2FZ8F$wm87Ev8B$77$kp$B8dc8M5H8dnZ8gD1tGzJdth-v87DZ87QoM8o78dZN2XvyOeA7G7dFIezVCkbaFs8+$7Bj6z81Hzcw2s9NG8oaFhk+t$8Xh+2B
2024-05-03 04:44:07 UTC	892	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; path=/; expires=Sat, 03-May-25 04:44:07 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CNtWayMPsSP%2FvstMmaJudBIhyM2aJuzWNcF1OhBPUC7HhSqJNFkgu9roNCrulcuCMqFQ3NAEMj0v%2FncjT6a%2B1V2QjbkA3EayHf%2Bq66pAs8R%2F6ovyCb0QaMuGyWNfPrU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87dd9814484643f7-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49749	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:07 UTC	787	OUT	GET /web/3f6d75465bef692f.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:07 UTC	1186	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:07 GMT Content-Type: text/javascript Content-Length: 2762 Connection: close CF-Ray: 87dd98149f617287-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8487 Cache-Control: public, max-age=31556926 ETag: "ab33d00f3b8159d9d4ed8237f6be4491" Expires: Sat, 03 May 2025 10:32:53 GMT Last-Modified: Fri, 03 May 2024 02:16:30 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Y3R0YkZrlGWeaCDDr1sEZNHxA6Fh+6lDxh8X6mcifBfqfg7tvUgmLxnGVA/nyIFpJ4cApB62zeE= x-amz-replication-status: PENDING x-amz-request-id: XGCPNVDSX1Y5853H x-amz-server-side-encryption: AES256 x-amz-version-id: D1DnmuuLsML.tgIP2V7OOOOnS4rzlODI X-Content-Type-Options: nosniff
2024-05-03 04:44:07 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 67 68 53 58 78 61 6e 72 65 4a 64 50 74 25 32 46 72 4b 4d 57 4f 25 32 42 30 43 77 74 37 46 56 39 67 73 78 6f 6a 70 69 79 42 48 4b 54 4f 66 6d 7a 55 44 31 64 55 43 72 42 4a 4f 36 47 67 55 39 6e 4c 75 45 76 52 6a 4d 50 52 70 4f 68 41 38 6c 74 70 4f 6f 58 4e 77 76 53 35 34 78 6c 6e 56 6d 30 38 57 25 32 46 70 41 69 77 47 32 38 25 32 42 6a 58 30 55 55 68 5a 25 32 42 38 37 49 34 4f 30 74 77 38 4f 6e 66 25 32 46 37 78 65 66 46 45 38 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ghSXxanreJdPt%2FrKMWO%2B0Cwt7FV9gsxojpiyBHKTOfmzUD1dUCrBJO6GgU9nLuEvRjMPRpOhA8ltpOoXNwvS54xlnVm08W%2FpAiwG28%2BjX0UUhZ%2B87I4O0tw8Onf%2F7xefFE8%3D"}],"group":"cf-nel","max_age":
2024-05-03 04:44:07 UTC	1196	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 38 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 37 30 38 33 35 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1587],{/***/ 708358:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._4
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 2d 2e 31 29 2a 4d 61 74 68 2e 50 49 29 2b 31 29 7d 7d 3b 5f 5f 63 2e 50 72 3d 31 3b 5f 5f 63 2e 51 72 3d 32 3b 5f 5f 63 2e 52 72 3d 33 3b 5f 5f 63 2e 53 72 3d 34 3b 5f 5f 63 2e 5a 74 61 3d 31 3b 5f 5f 63 2e 24 74 61 3d 32 3b 5f 5f 63 2e 54 72 3d 33 3b 5f 5f 63 2e 61 75 61 3d 34 3b 76 61 72 20 62 75 61 3d 21 31 3b 62 75 61 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 28 57 74 61 28 29 2c 62 75 61 3d 21 30 29 3b 76 61 72 20 55 72 3b 55 72 3d 4d 61 74 68 2e 50 49 2f 35 3b 5f 5f 63 2e 56 72 3d 4d 61 74 68 2e 63 6f 73 28 55 72 29 3b 5f 5f 63 2e 57 72 3d 4d 61 74 68 2e 73 69 6e 28 55 72 29 3b 5f 5f 63 2e 63 75 61 3d 4d 61 74 68 2e 63 6f 73 28 55 72 2f 32 29 3b 5f 5f 63 2e 64 75 61 3d 4d 61 74 68 2e 73 69 6e 28 55 Data Ascii: -.1)*Math.PI)+1)}};__c.Pr=1;__c.Qr=2;__c.Rr=3;__c.Sr=4;__c.Zta=1;__c.$ta=2;__c.Tr=3;__c.aua=4;var bua=!1;bua\|\|"undefined"===typeof window\|\|(Wta(),bua=!0);var Ur;Ur=Math.PI/5;__c.Vr=Math.cos(Ur);__c.Wr=Math.sin(Ur);__c.cua=Math.cos(Ur/2);__c.dua=Math.sin(U
2024-05-03 04:44:07 UTC	197	IN	Data Raw: 2e 6c 7a 2c 5b 31 38 5d 3a 5f 5f 63 2e 69 73 2e 6c 7a 2c 5b 31 39 5d 3a 5f 5f 63 2e 69 73 2e 6c 7a 2c 5b 32 30 5d 3a 5f 5f 63 2e 69 73 2e 6c 7a 2c 5b 32 31 5d 3a 5f 5f 63 2e 69 73 2e 6c 7a 2c 5b 32 32 5d 3a 5f 5f 63 2e 69 73 2e 6c 7a 7d 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 34 35 66 37 38 35 33 64 63 37 36 36 30 33 37 38 61 30 33 38 39 35 32 62 35 33 63 30 39 35 33 65 29 3b 7d 0a 0a 7d 5d 29 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 33 66 36 64 37 35 34 36 35 62 65 66 36 39 32 66 2e 6a 73 2e 6d 61 70 Data Ascii: .lz,[18]:__c.is.lz,[19]:__c.is.lz,[20]:__c.is.lz,[21]:__c.is.lz,[22]:__c.is.lz};}).call(self, self._45f7853dc7660378a038952b53c0953e);}}])//# sourceMappingURL=sourcemaps/3f6d75465bef692f.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49750	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:07 UTC	787	OUT	GET /web/a76430df1ee91ba0.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:07 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:07 GMT Content-Type: text/javascript Content-Length: 84582 Connection: close CF-Ray: 87dd9814b83c4310-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8487 Cache-Control: public, max-age=31556926 ETag: "aa6b3a4d996d8c6c6fd8ef1ff6f9428f" Expires: Sat, 03 May 2025 10:32:53 GMT Last-Modified: Fri, 03 May 2024 02:16:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: DP5K4M8o+wRvmQrkccRbL/bjkDjDxERayRPqzjFtM3inP7XR55v/J67pmTnsq2XKqkH0XrsMuDM= x-amz-replication-status: COMPLETED x-amz-request-id: XGCGNA6J88A1QC1M x-amz-server-side-encryption: AES256 x-amz-version-id: QJCeOgJQgPcCycuf2_O5rhRdVG3a7vbk X-Content-Type-Options: nosniff
2024-05-03 04:44:07 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 70 79 50 49 37 4e 4d 44 72 33 6f 6c 79 78 67 64 4e 75 70 33 67 58 4b 4a 64 31 35 57 37 52 4f 48 7a 6d 50 63 51 43 7a 6d 79 77 39 36 51 25 32 46 73 54 48 44 6f 4d 33 37 73 46 70 61 4a 25 32 46 59 5a 68 35 4e 35 72 32 4a 6e 66 48 65 72 49 53 68 59 75 4f 6d 30 73 69 58 50 46 74 5a 70 59 6a 6c 77 52 53 73 6c 65 74 70 4c 69 49 39 6b 69 77 4f 58 25 32 42 65 79 50 61 37 73 7a 42 61 37 34 4a 69 61 46 4a 55 55 41 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pyPI7NMDr3olyxgdNup3gXKJd15W7ROHzmPcQCzmyw96Q%2FsTHDoM37sFpaJ%2FYZh5N5r2JnfHerIShYuOm0siXPFtZpYjlwRSsletpLiI9kiwOX%2BeyPa7szBa74JiaFJUUA4%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 33 34 37 36 37 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 65 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[257],{/***/ 834767:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_re
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 63 6f 6e 73 74 20 63 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 64 20 69 6e 20 61 29 63 5b 64 5d 3d 62 28 61 5b 64 5d 2c 64 29 3b 72 65 74 75 72 6e 20 63 7d 3b 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6f 73 28 61 2e 6e 6f 72 6d 61 6c 69 7a 65 28 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 2c 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 7d 3b 5f 5f 63 2e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 3f 61 2e 64 65 63 6f 64 65 28 62 29 3a 76 6f 69 64 20 30 7d 3b 5f 5f 63 2e 75 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 3f 61 2e 65 6e 63 6f 64 65 28 62 29 3a 76 6f 69 64 20 30 7d 3b 0a 6b 75 61 3d 66 Data Ascii: ===Object.prototype);const c={};for(const d in a)c[d]=b(a[d],d);return c};ss=function(a){os(a.normalize(a.defaultValue),a.defaultValue)};__c.ts=function(a,b){return null!=b?a.decode(b):void 0};__c.us=function(a,b){return null!=b?a.encode(b):void 0};kua=f
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 24 7b 61 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 20 21 3d 20 24 7b 61 2e 73 74 72 69 6e 67 69 66 79 28 63 29 7d 60 29 3b 7d 3b 47 73 3d 5f 5f 63 2e 47 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 46 73 28 61 2c 62 2c 63 29 7d 3b 5f 5f 63 2e 48 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 47 73 28 63 3d 3e 63 2e 65 76 65 72 79 28 64 3d 3e 61 2e 41 46 28 64 29 29 26 26 28 21 62 7c 7c 62 28 63 29 29 2c 28 63 2c 64 29 3d 3e 63 2e 6c 65 6e 67 74 68 3d 3d 3d 64 2e 6c 65 6e 67 74 68 26 26 63 2e 65 76 65 72 79 28 28 65 2c 66 29 3d 3e 66 20 69 6e 20 64 26 26 61 2e 49 6f 28 65 2c 64 5b 66 5d 29 29 26 26 63 2e 72 65 64 75 63 65 28 65 3d 3e 65 2b 31 2c 30 29 3d 3d 3d 64 2e 72 65 64 75 63 65 28 65 3d Data Ascii: ${a.stringify(b)} != ${a.stringify(c)}`);};Gs=__c.Gs=function(a,b,c){return new Fs(a,b,c)};__c.Hs=function(a,b){return Gs(c=>c.every(d=>a.AF(d))&&(!b\|\|b(c)),(c,d)=>c.length===d.length&&c.every((e,f)=>f in d&&a.Io(e,d[f]))&&c.reduce(e=>e+1,0)===d.reduce(e=
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 29 7d 3b 61 2e 65 72 72 6f 72 26 26 28 63 2e 65 72 72 6f 72 3d 64 3d 3e 7b 62 7c 7c 28 62 3d 21 30 2c 61 2e 65 72 72 6f 72 28 64 29 29 7d 29 3b 61 2e 63 6f 6d 70 6c 65 74 65 26 26 28 63 2e 63 6f 6d 70 6c 65 74 65 3d 28 29 3d 3e 7b 62 7c 7c 28 62 3d 21 30 2c 61 2e 63 6f 6d 70 6c 65 74 65 28 29 29 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 75 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 2e 64 6f 6d 61 69 6e 3b 72 65 74 75 72 6e 20 62 7d 3b 56 73 3d 5f 5f 63 2e 56 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 73 3f 6e 65 77 20 76 75 61 28 61 29 3a 6e 65 77 20 77 75 61 28 61 29 7d 3b 57 73 3d 5f Data Ascii: )};a.error&&(c.error=d=>{b\|\|(b=!0,a.error(d))});a.complete&&(c.complete=()=>{b\|\|(b=!0,a.complete())});return c};uua=function(a){const b={};for(const c in a)b[c]=a[c].domain;return b};Vs=__c.Vs=function(a){return a instanceof Fs?new vua(a):new wua(a)};Ws=_
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 2e 6b 4c 3f 6e 65 77 20 69 74 28 61 2e 59 61 2e 6d 61 70 28 63 3d 3e 33 3d 3d 3d 63 2e 74 79 70 65 26 26 63 2e 73 68 69 66 74 3f 67 74 28 63 2e 73 74 61 74 65 2c 62 74 28 63 2e 73 68 69 66 74 2e 64 67 2b 62 2c 63 2e 73 68 69 66 74 2e 72 66 2b 62 29 29 3a 34 3d 3d 3d 63 2e 74 79 70 65 26 26 63 2e 73 68 69 66 74 3f 68 74 28 63 2e 64 65 6c 74 61 2c 62 74 28 63 2e 73 68 69 66 74 2e 64 67 2b 62 2c 63 2e 73 68 69 66 74 2e 72 66 2b 62 29 29 3a 63 29 2c 61 2e 70 72 65 2c 61 2e 70 6f 73 74 2c 61 2e 6b 4c 29 3a 61 7d 3b 6a 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 3d 31 29 7b 63 6f 6e 73 74 20 64 3d 77 28 61 2e 53 65 29 3b 69 66 28 64 2e 74 79 70 65 21 3d 3d 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 63 6f 6e 73 74 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: .kL?new it(a.Ya.map(c=>3===c.type&&c.shift?gt(c.state,bt(c.shift.dg+b,c.shift.rf+b)):4===c.type&&c.shift?ht(c.delta,bt(c.shift.dg+b,c.shift.rf+b)):c),a.pre,a.post,a.kL):a};jt=function(a,b,c=1){const d=w(a.Se);if(d.type!==b)throw Error();const e=d.length;t
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 67 7c 7c 64 21 3d 3d 62 2e 72 66 3f 62 74 28 63 2c 64 29 3a 62 7d 3b 0a 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 6f 74 28 61 2c 62 29 3b 6e 75 6c 6c 21 3d 63 26 26 28 61 2e 6e 53 7c 7c 28 61 2e 6e 53 3d 6e 65 77 20 4d 61 70 29 29 2e 73 65 74 28 62 2c 63 29 7d 3b 74 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 28 61 2e 51 4c 7c 7c 28 61 2e 51 4c 3d 6e 65 77 20 4d 61 70 29 29 2e 73 65 74 28 62 2c 63 29 7d 3b 75 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 28 61 2e 77 4c 7c 7c 28 61 2e 77 4c 3d 6e 65 77 20 4d 61 70 29 29 2e 73 65 74 28 63 2c 62 29 7d 3b 76 74 3d 66 75 6e 63 74 69 6f 6e 28 7b 64 67 3a 61 2c 72 66 3a 62 7d 29 7b 72 65 74 75 72 6e 20 62 74 28 62 2c 61 29 7d 3b 77 74 3d 5f 5f 63 2e 77 74 3d 66 75 6e 63 74 69 6f Data Ascii: g\|\|d!==b.rf?bt(c,d):b};st=function(a,b,c){ot(a,b);null!=c&&(a.nS\|\|(a.nS=new Map)).set(b,c)};tt=function(a,b,c){(a.QL\|\|(a.QL=new Map)).set(b,c)};ut=function(a,b,c){(a.wL\|\|(a.wL=new Map)).set(c,b)};vt=function({dg:a,rf:b}){return bt(b,a)};wt=__c.wt=functio
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 77 28 61 2e 53 65 29 2c 64 3d 63 2e 79 73 3b 74 28 30 3c 62 26 26 62 3c 3d 64 29 3b 69 66 28 62 3c 64 29 7b 63 6f 6e 73 74 20 5b 65 2c 66 5d 3d 63 2e 64 39 28 62 29 3b 61 2e 53 65 3d 66 3b 72 65 74 75 72 6e 20 65 7d 61 2e 53 65 3d 61 2e 59 61 5b 61 2e 69 2b 2b 5d 3b 72 65 74 75 72 6e 20 63 7d 3b 4a 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 73 77 69 74 63 68 28 63 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 62 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 28 31 3d 3d 3d 62 2e 74 79 70 65 29 2c 6e 65 77 20 48 74 28 61 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 61 70 70 6c 79 28 62 2e 73 74 61 74 65 2c 63 2e 64 65 6c 74 61 29 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 5f 5f 63 2e 49 74 28 61 Data Ascii: a,b){const c=w(a.Se),d=c.ys;t(0<b&&b<=d);if(b<d){const [e,f]=c.d9(b);a.Se=f;return e}a.Se=a.Ya[a.i++];return c};Jt=function(a,b,c){switch(c.type){case 0:return b;case 1:return t(1===b.type),new Ht(a.component.apply(b.state,c.delta));case 3:return __c.It(a
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 3d 6b 2e 74 79 70 65 26 26 63 2e 69 6e 73 65 72 74 28 6b 2e 73 74 61 74 65 29 29 3a 28 64 2e 42 75 28 68 2e 6c 65 6e 67 74 68 2c 67 29 2c 32 3d 3d 3d 6b 2e 74 79 70 65 3f 63 2e 64 65 6c 65 74 65 28 68 2e 6c 65 6e 67 74 68 29 3a 28 74 28 68 2e 73 74 61 74 65 3d 3d 3d 6b 2e 73 74 61 74 65 2c 22 6e 6f 6e 2d 72 65 66 6c 65 78 69 76 65 20 63 68 61 6e 67 65 3a 20 7b 7d 20 21 3d 20 7b 7d 22 2c 68 2c 6b 29 2c 63 2e 76 61 28 68 2e 6c 65 6e 67 74 68 29 29 29 7d 7d 29 3b 72 65 74 75 72 6e 20 63 2e 62 75 69 6c 64 28 29 7d 3b 0a 53 75 61 3d 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 61 29 7b 63 6f 6e 73 74 20 62 3d 6e 65 77 20 53 65 74 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 6f 66 20 61 29 66 6f 72 28 63 6f 6e 73 74 20 64 20 69 6e 20 63 29 74 28 21 62 2e 68 61 73 28 64 29 2c Data Ascii: =k.type&&c.insert(k.state)):(d.Bu(h.length,g),2===k.type?c.delete(h.length):(t(h.state===k.state,"non-reflexive change: {} != {}",h,k),c.va(h.length)))}});return c.build()};Sua=function(...a){const b=new Set;for(const c of a)for(const d in c)t(!b.has(d),
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 21 62 26 26 61 2e 66 72 6f 6d 3d 3d 3d 62 2e 66 72 6f 6d 26 26 61 2e 74 6f 3d 3d 3d 62 2e 74 6f 3a 21 62 7d 3b 0a 59 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6c 65 74 20 63 3d 30 2c 64 3d 30 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 61 2e 4f 54 29 73 77 69 74 63 68 28 61 3d 65 2e 6c 65 6e 67 74 68 2c 65 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 62 2e 76 61 26 26 62 2e 76 61 28 61 2c 63 2c 64 29 3b 63 2b 3d 61 3b 64 2b 3d 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 62 2e 69 6e 73 65 72 74 26 26 62 2e 69 6e 73 65 72 74 28 61 2c 63 2c 64 29 3b 64 2b 3d 61 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 7a 28 65 2e 74 79 70 65 29 3b 7d 7d 3b 24 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 6c 65 74 20 7b 66 72 Data Ascii: !b&&a.from===b.from&&a.to===b.to:!b};Yt=function(a,b){let c=0,d=0;for(const e of a.OT)switch(a=e.length,e.type){case 0:b.va&&b.va(a,c,d);c+=a;d+=a;break;case 1:b.insert&&b.insert(a,c,d);d+=a;break;default:throw new z(e.type);}};$t=function(a,b,c){let {fr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49751	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:07 UTC	787	OUT	GET /web/513226526f0cbf1e.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:07 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:07 GMT Content-Type: text/javascript Content-Length: 54977 Connection: close CF-Ray: 87dd9814cce343b3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8487 Cache-Control: public, max-age=31556926 ETag: "82636835d4b7117ff4353ad4a78bc94f" Expires: Sat, 03 May 2025 10:32:53 GMT Last-Modified: Fri, 03 May 2024 02:16:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 5nvCQx6dk3lhOVVYZNCnsdcVHoRQutsTdYpHGDbTNxn9J3Kdi77VVrvGMEJpHqt9/xvbvLRYgPM= x-amz-replication-status: COMPLETED x-amz-request-id: XGCZPD6TPC3YM2K5 x-amz-server-side-encryption: AES256 x-amz-version-id: qAXsD.tA7V0_A6hM8wk7hXfpZhGdtour X-Content-Type-Options: nosniff
2024-05-03 04:44:07 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 54 54 32 48 62 61 52 35 79 4e 70 78 75 65 64 41 73 75 49 67 39 55 31 72 64 69 35 72 25 32 42 77 42 73 44 45 64 25 32 46 62 32 43 33 66 46 36 58 63 56 32 79 45 6b 31 77 61 67 71 75 63 4c 34 4a 37 50 51 59 62 54 77 77 33 46 6f 30 36 71 33 53 6a 6f 71 31 30 64 54 66 63 4b 68 76 25 32 46 4c 37 59 50 35 6c 36 61 4b 6b 54 33 71 57 6b 56 42 43 74 64 58 53 36 4a 30 6e 4e 6c 4e 36 41 53 30 25 32 42 75 49 70 62 30 6a 68 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TT2HbaR5yNpxuedAsuIg9U1rdi5r%2BwBsDEd%2Fb2C3fF6XcV2yEk1wagqucL4J7PQYbTww3Fo06q3Sjoq10dTfcKhv%2FL7YP5l6aKkT3qWkVBCtdXS6J0nNlN6AS0%2BuIpb0jhw%3D"}],"group":"cf-nel","max_age":6048
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 35 36 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 34 36 31 32 37 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 65 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[7756],{/***/ 46127:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_re
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 75 72 6e 20 63 7d 3b 0a 5f 5f 63 2e 4d 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 53 6f 5b 5f 5f 63 2e 77 74 28 61 2c 62 29 5d 2e 69 64 7d 3b 6f 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 28 21 30 29 3b 66 6f 72 28 63 6f 6e 73 74 20 62 20 6f 66 20 61 2e 54 6a 29 73 77 69 74 63 68 28 62 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 62 2e 73 74 61 74 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 5c 6e 22 29 3b 63 61 73 65 20 32 3a 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 21 31 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 7a 28 62 29 3b 7d 72 65 74 75 72 6e 21 31 7d 3b 0a 4e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 28 5b 64 2c 65 5d 29 3d 3e 70 78 61 Data Ascii: urn c};__c.Mv=function(a,b){return a.So[__c.wt(a,b)].id};oxa=function(a){t(!0);for(const b of a.Tj)switch(b.type){case 0:return b.state.startsWith("\n");case 2:break;case 1:return!1;default:throw new z(b);}return!1};Nv=function(a,b){const c=([d,e])=>pxa
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 28 7b 72 3a 63 7d 2c 64 29 3d 3e 62 5b 64 5d 3d 7b 72 3a 63 26 26 7b 61 6f 3a 63 2e 61 6e 2c 73 6f 3a 63 2e 73 6e 2c 61 6e 3a 63 2e 61 6f 2c 73 6e 3a 63 2e 73 6f 7d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 72 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 7b 7d 3b 69 66 28 61 2e 55 5a 2e 73 69 7a 65 29 7b 66 6f 72 28 63 6f 6e 73 74 20 67 20 6f 66 20 61 2e 55 5a 29 66 5b 67 5d 3d 7b 72 3a 76 6f 69 64 20 30 7d 2c 64 65 6c 65 74 65 20 61 2e 67 54 5b 67 5d 2c 64 65 6c 65 74 65 20 61 2e 68 54 5b 67 5d 3b 61 2e 55 5a 2e 63 6c 65 61 72 28 29 7d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 2e 56 5a 29 2e 6c 65 6e 67 74 68 26 26 28 5f 5f 63 2e 52 74 28 61 2e 56 5a 2c 61 2e 4e 39 2c 28 67 2c 68 2c 6b 29 3d 3e 7b 66 5b 67 5d Data Ascii: ({r:c},d)=>b[d]={r:c&&{ao:c.an,so:c.sn,an:c.ao,sn:c.so}});return b};rxa=function(a,b,c,d,e){const f={};if(a.UZ.size){for(const g of a.UZ)f[g]={r:void 0},delete a.gT[g],delete a.hT[g];a.UZ.clear()}Object.keys(a.VZ).length&&(__c.Rt(a.VZ,a.N9,(g,h,k)=>{f[g]
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 2e 74 79 70 65 26 26 64 2e 69 6e 73 65 72 74 28 6b 2e 73 74 61 74 65 29 7d 2c 63 68 61 6e 67 65 3a 28 6b 2c 6c 2c 6d 29 3d 3e 7b 64 2e 63 68 61 6e 67 65 28 6d 29 3b 32 3d 3d 3d 6b 2e 74 79 70 65 3f 28 63 2e 42 75 28 6b 2e 6c 65 6e 67 74 68 2c 65 29 2c 32 21 3d 3d 6c 2e 74 79 70 65 26 26 64 2e 69 6e 73 65 72 74 28 6c 2e 73 74 61 74 65 29 29 3a 32 3d 3d 3d 6c 2e 74 79 70 65 3f 63 2e 42 75 28 6b 2e 6c 65 6e 67 74 68 2c 68 29 3a 28 74 28 6b 2e 73 74 61 74 65 3d 3d 3d 0a 6c 2e 73 74 61 74 65 2c 22 6e 6f 6e 2d 72 65 66 6c 65 78 69 76 65 20 63 68 61 6e 67 65 3a 20 7b 7d 20 21 3d 20 7b 7d 22 2c 6b 2c 6c 29 2c 63 2e 42 75 28 6b 2e 6c 65 6e 67 74 68 2c 66 29 2c 64 2e 76 61 28 6b 2e 6c 65 6e 67 74 68 29 29 7d 7d 29 3b 72 65 74 75 72 6e 20 64 2e 62 75 69 6c 64 28 29 Data Ascii: .type&&d.insert(k.state)},change:(k,l,m)=>{d.change(m);2===k.type?(c.Bu(k.length,e),2!==l.type&&d.insert(l.state)):2===l.type?c.Bu(k.length,h):(t(k.state===l.state,"non-reflexive change: {} != {}",k,l),c.Bu(k.length,f),d.va(k.length))}});return d.build()
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 61 29 29 3b 42 3d 62 77 28 28 55 2c 58 2c 63 61 2c 6c 61 2c 6f 61 29 3d 3e 63 28 55 2c 63 61 2c 6f 61 29 2c 79 2c 0a 65 77 2c 79 2c 65 77 2c 79 29 3b 63 6f 6e 73 74 20 49 3d 62 77 28 28 55 2c 58 2c 63 61 2c 6c 61 29 3d 3e 6e 28 63 77 28 55 29 2c 63 61 2c 2e 2e 2e 6c 61 29 2c 24 76 28 2f 5e 5b 43 63 5d 2f 29 2c 66 77 2c 42 2c 61 77 28 62 77 28 28 55 2c 58 29 3d 3e 58 2c 65 77 2c 42 29 29 29 3b 42 3d 62 77 28 28 55 2c 58 2c 63 61 29 3d 3e 64 28 55 2c 63 61 29 2c 79 2c 65 77 2c 79 29 3b 63 6f 6e 73 74 20 4c 3d 62 77 28 28 55 2c 58 2c 63 61 2c 6c 61 29 3d 3e 70 28 63 77 28 55 29 2c 63 61 2c 2e 2e 2e 6c 61 29 2c 24 76 28 2f 5e 5b 53 73 5d 2f 29 2c 66 77 2c 42 2c 61 77 28 62 77 28 28 55 2c 58 29 3d 3e 58 2c 65 77 2c 42 29 29 29 3b 42 3d 62 77 28 28 55 2c 58 2c Data Ascii: a));B=bw((U,X,ca,la,oa)=>c(U,ca,oa),y,ew,y,ew,y);const I=bw((U,X,ca,la)=>n(cw(U),ca,...la),$v(/^[Cc]/),fw,B,aw(bw((U,X)=>X,ew,B)));B=bw((U,X,ca)=>d(U,ca),y,ew,y);const L=bw((U,X,ca,la)=>p(cw(U),ca,...la),$v(/^[Ss]/),fw,B,aw(bw((U,X)=>X,ew,B)));B=bw((U,X,
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 20 30 21 3d 3d 64 3f 64 3a 61 2e 6f 70 74 69 6f 6e 73 2e 66 69 72 73 74 28 29 7d 2c 73 65 74 28 63 29 7b 62 2e 73 65 74 28 5f 5f 63 2e 4d 76 28 61 2e 6f 70 74 69 6f 6e 73 2c 63 29 29 7d 7d 7d 29 7d 3b 0a 5f 5f 63 2e 6a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 72 65 74 75 72 6e 20 30 3c 62 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c 21 3d 3d 28 64 3d 61 26 26 28 6e 75 6c 6c 3d 3d 3d 28 63 3d 62 2e 66 69 6e 64 28 65 3d 3e 65 2e 69 64 3d 3d 3d 61 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 6c 61 62 65 6c 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 3f 64 3a 62 5b 30 5d 2e 6c 61 62 65 6c 3a 22 22 7d 3b 45 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 Data Ascii: 0!==d?d:a.options.first()},set(c){b.set(__c.Mv(a.options,c))}}})};__c.jw=function(a,b){var c,d;return 0<b.length?null!==(d=a&&(null===(c=b.find(e=>e.id===a))\|\|void 0===c?void 0:c.label))&&void 0!==d?d:b[0].label:""};Exa=function(a){return Object.create(
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 3d 3d 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 74 68 69 73 2e 62 75 69 6c 64 65 72 2e 63 68 61 6e 67 65 28 52 76 28 74 68 69 73 2c 61 29 29 3a 74 68 69 73 2e 62 75 69 6c 64 65 72 2e 63 68 61 6e 67 65 28 61 2c 51 76 28 74 68 69 73 2c 61 2c 62 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 62 75 69 6c 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 75 69 6c 64 65 72 2e 62 75 69 6c 64 28 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 62 75 69 6c 64 65 72 3d 0a 61 3b 74 68 69 73 2e 47 4f 3d 62 7d 7d 3b 5f 5f 63 2e 4b 77 3d 63 6c 61 73 73 7b 65 6e 63 6f 64 65 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 3f 74 68 69 73 2e 47 4f 2e 65 6e 63 6f 64 65 28 61 2c 62 Data Ascii: ==a)return this;"object"===typeof a?this.builder.change(Rv(this,a)):this.builder.change(a,Qv(this,a,b));return this}build(){return this.builder.build()}constructor(a,b){this.builder=a;this.GO=b}};__c.Kw=class{encode(a,b){return null!=b?this.GO.encode(a,b
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 6f 73 74 2b 3d 62 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 74 68 69 73 2e 70 6f 73 74 2b 3d 62 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 7a 28 61 29 3b 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 63 68 61 6e 67 65 28 61 2c 62 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 66 6f 72 28 63 6f 6e 73 74 20 5b 63 2c 0a 64 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 29 29 74 68 69 73 2e 63 68 61 6e 67 65 28 63 2c 64 26 26 64 2e 72 29 3b 65 6c 73 65 20 5f 5f 63 2e 57 75 61 28 74 68 69 73 2e 6f 70 65 6e 5b 61 5d 2c 62 29 3f 64 65 6c 65 74 65 20 74 68 69 73 2e 4b 39 5b 61 5d 3a 74 68 69 73 2e 4b 39 5b 61 5d 3d 7b 72 3a 62 7d Data Ascii: ost+=b;break;case 1:this.post+=b;break;default:throw new z(a);}return this}change(a,b){if(null==a)return this;if("object"===typeof a)for(const [c,d]of Object.entries(a))this.change(c,d&&d.r);else __c.Wua(this.open[a],b)?delete this.K9[a]:this.K9[a]={r:b}
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 62 29 7b 74 28 30 3c 61 29 3b 74 68 69 73 2e 4f 51 3d 62 3b 74 68 69 73 2e 72 65 61 64 65 72 2e 6d 6f 76 65 28 61 29 3b 69 66 28 74 68 69 73 2e 4f 51 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 64 64 61 73 20 6e 6f 74 20 63 6f 6e 73 75 6d 65 64 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 6e 73 65 72 74 28 61 2c 62 29 7b 74 28 30 3c 61 29 3b 74 68 69 73 2e 4f 51 3d 62 3b 22 61 70 70 6c 79 22 3d 3d 3d 74 68 69 73 2e 6d 6f 64 65 3f 28 73 78 61 28 74 68 69 73 2c 74 68 69 73 2e 72 65 61 64 65 72 2e 52 71 2c 74 68 69 73 2e 72 65 61 64 65 72 2e 4a 43 29 2c 74 68 69 73 2e 75 76 2e 6b 63 28 61 29 29 3a 28 74 68 69 73 2e 44 6f 61 3d 21 30 2c 74 68 69 73 2e 72 65 61 64 65 72 2e 6d 6f 76 65 28 61 29 2c 74 68 69 73 2e 44 6f 61 3d 21 31 29 3b 69 66 28 74 68 69 73 2e Data Ascii: b){t(0<a);this.OQ=b;this.reader.move(a);if(this.OQ)throw Error("ddas not consumed");return this}insert(a,b){t(0<a);this.OQ=b;"apply"===this.mode?(sxa(this,this.reader.Rq,this.reader.JC),this.uv.kc(a)):(this.Doa=!0,this.reader.move(a),this.Doa=!1);if(this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49753	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:07 UTC	787	OUT	GET /web/df1c6555d629a225.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000
2024-05-03 04:44:07 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:07 GMT Content-Type: text/javascript Content-Length: 3024 Connection: close CF-Ray: 87dd9814caf641e7-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8487 Cache-Control: public, max-age=31556926 ETag: "30fb53f7bdda23f3f1f1742d72649ff8" Expires: Sat, 03 May 2025 10:32:53 GMT Last-Modified: Fri, 03 May 2024 02:16:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: nDTU5PIuV0Jjwh7aRKm2mWfJ/2BZ4oSvblWxeBlruvj9zK8FuFz8Nfpq3rgGZZVL2YxqqmNEOCk= x-amz-replication-status: COMPLETED x-amz-request-id: XGCS5NFR4SEXZXNE x-amz-server-side-encryption: AES256 x-amz-version-id: E2xPAocvcYYcbN9c1ApLHECoHtSmjmGm X-Content-Type-Options: nosniff
2024-05-03 04:44:07 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 34 6e 32 63 30 35 51 5a 25 32 42 7a 25 32 46 39 32 65 30 4f 75 4a 70 6a 71 78 4e 64 42 77 4b 44 25 32 46 70 76 50 7a 6e 7a 49 67 53 76 4a 53 25 32 42 43 52 36 50 73 45 67 45 44 32 66 45 7a 5a 78 50 77 35 75 37 25 32 46 6e 32 31 31 48 4e 6b 38 6d 49 30 59 76 46 4d 57 71 77 62 44 59 4a 61 25 32 46 4c 65 65 70 74 72 53 62 34 79 55 65 35 38 48 71 35 7a 74 25 32 42 45 75 58 41 68 43 6d 41 65 6a 46 46 42 71 34 53 79 59 66 77 73 6b 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i4n2c05QZ%2Bz%2F92e0OuJpjqxNdBwKD%2FpvPznzIgSvJS%2BCR6PsEgED2fEzZxPw5u7%2Fn211HNk8mI0YvFMWqwbDYJa%2FLeeptrSb4yUe58Hq5zt%2BEuXAhCmAejFFBq4SyYfwsk4%3D"}],"group":"cf-nel","max_age
2024-05-03 04:44:07 UTC	1192	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 33 36 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 31 32 32 37 37 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5036],{/***/ 122771:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-05-03 04:44:07 UTC	1369	IN	Data Raw: 62 3d 21 31 29 3d 3e 7b 63 6f 6e 73 74 20 63 3d 45 72 72 6f 72 28 22 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 69 6d 61 67 65 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 64 2c 65 29 3d 3e 7b 63 6f 6e 73 74 20 66 3d 6e 65 77 20 49 6d 61 67 65 3b 21 62 26 26 5f 5f 63 2e 53 44 61 28 61 29 26 26 28 66 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 3b 66 2e 73 72 63 3d 61 3b 66 2e 63 6f 6d 70 6c 65 74 65 3f 64 28 66 29 3a 28 66 2e 6f 6e 6c 6f 61 64 3d 28 29 3d 3e 7b 66 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 66 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 64 28 66 29 7d 2c 66 2e 6f 6e 65 72 72 6f 72 3d 28 29 3d 3e 7b 66 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 66 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 65 28 Data Ascii: b=!1)=>{const c=Error("failed to load image");return new Promise((d,e)=>{const f=new Image;!b&&__c.SDa(a)&&(f.crossOrigin="anonymous");f.src=a;f.complete?d(f):(f.onload=()=>{f.onload=null;f.onerror=null;d(f)},f.onerror=()=>{f.onload=null;f.onerror=null;e(
2024-05-03 04:44:07 UTC	463	IN	Data Raw: 30 2e 73 76 67 22 7d 29 2c 6c 61 62 65 6c 3a 22 5c 75 32 62 35 30 5c 75 66 65 30 66 22 7d 7d 3b 5f 5f 63 2e 54 44 61 3d 47 28 28 29 3d 3e 28 7b 73 6f 75 72 63 65 3a 5f 5f 63 2e 4f 28 31 29 7d 29 29 3b 76 61 72 20 55 44 61 3d 47 28 28 29 3d 3e 28 7b 7d 29 29 3b 76 61 72 20 56 44 61 3b 56 44 61 3d 63 6c 61 73 73 7b 73 36 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 46 62 2e 65 78 65 63 28 74 68 69 73 2e 4f 2e 73 65 72 76 69 63 65 4e 61 6d 65 2c 74 68 69 73 2e 4f 2e 73 36 2c 5f 5f 63 2e 54 44 61 2e 73 65 72 69 61 6c 69 7a 65 28 61 29 29 2e 74 68 65 6e 28 55 44 61 2e 64 65 73 65 72 69 61 6c 69 7a 65 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 46 62 3d 61 3b 74 68 69 73 2e 4f 3d 62 7d 7d 3b 5f 5f 63 2e 58 7a 3d 7b 7d 3b 5f 5f 63 Data Ascii: 0.svg"}),label:"\u2b50\ufe0f"}};__c.TDa=G(()=>({source:__c.O(1)}));var UDa=G(()=>({}));var VDa;VDa=class{s6(a){return this.Fb.exec(this.O.serviceName,this.O.s6,__c.TDa.serialize(a)).then(UDa.deserialize)}constructor(a,b){this.Fb=a;this.O=b}};__c.Xz={};__c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49755	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:08 UTC	951	OUT	GET /web/9794b708e04ecac0.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:08 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:08 GMT Content-Type: text/javascript Content-Length: 10248 Connection: close CF-Ray: 87dd98188f517295-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8488 Cache-Control: public, max-age=31556926 ETag: "cc20bad8712a37361e0ec087520b5c2d" Expires: Sat, 03 May 2025 10:32:54 GMT Last-Modified: Fri, 03 May 2024 02:16:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: DACDXO8LBVqeA7jkB1JWuDGwNmhFdCYgP1tSgnMkwVVTN8d6MoDVN7Mu8vGOSumYCoSNgDidZbg= x-amz-replication-status: COMPLETED x-amz-request-id: XGCQ8AKFS1TKY4ZV x-amz-server-side-encryption: AES256 x-amz-version-id: GmcX5wSkxV.5jv97FmeP3CwjlABrDeIP X-Content-Type-Options: nosniff
2024-05-03 04:44:08 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 32 47 6b 4f 62 37 48 37 31 72 55 6f 79 49 32 63 37 32 4e 47 62 4d 25 32 42 37 77 6a 48 4a 74 4d 32 4c 4e 42 42 54 35 46 63 77 56 74 78 59 51 73 56 49 49 32 4a 39 30 4d 6d 67 61 58 35 30 31 71 41 77 44 4a 52 25 32 46 38 58 48 44 48 57 59 69 34 34 45 73 6a 6c 4e 57 70 30 32 64 63 6a 6c 64 6b 31 6c 54 70 51 54 53 73 6f 70 57 62 6c 67 7a 42 25 32 46 38 67 46 35 4e 47 5a 4d 64 67 71 38 73 63 4f 56 36 66 51 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=02GkOb7H71rUoyI2c72NGbM%2B7wjHJtM2LNBBT5FcwVtxYQsVII2J90MmgaX501qAwDJR%2F8XHDHWYi44EsjlNWp02dcjldk1lTpQTSsopWblgzB%2F8gF5NGZMdgq8scOV6fQk%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:08 UTC	1199	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 39 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 33 39 31 32 31 34 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[7595],{/***/ 391214:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._4
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 62 3d 3e 7b 22 54 61 62 22 3d 3d 3d 62 2e 6b 65 79 26 26 5f 5f 63 2e 64 6c 2e 57 75 28 22 6b 65 79 62 6f 61 72 64 22 29 7d 2c 21 30 29 3b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 28 29 3d 3e 5f 5f 63 2e 64 6c 2e 57 75 28 22 6d 6f 75 73 65 22 29 2c 21 30 29 3b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 28 29 3d 3e 5f 5f 63 2e 64 6c 2e 57 75 28 22 6d 6f 75 73 65 22 29 2c 21 30 29 7d 3b 5f 5f 63 2e 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 5f 63 2e 51 69 61 28 29 2e 70 72 65 66 65 72 73 52 65 64 75 63 65 64 4d 6f 74 69 6f 6e 7d 3b 5f 5f 63 2e 51 69 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: er("keydown",b=>{"Tab"===b.key&&__c.dl.Wu("keyboard")},!0);a.addEventListener("mousedown",()=>__c.dl.Wu("mouse"),!0);a.addEventListener("touchstart",()=>__c.dl.Wu("mouse"),!0)};__c.el=function(){return __c.Qia().prefersReducedMotion};__c.Qia=function(){re
2024-05-03 04:44:08 UTC	514	IN	Data Raw: 61 48 69 64 64 65 6e 26 26 28 65 5b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 5d 3d 21 30 29 3b 62 2e 61 72 69 61 4c 61 62 65 6c 26 26 28 65 5b 22 61 72 69 61 2d 6c 61 62 65 6c 22 5d 3d 0a 62 2e 61 72 69 61 4c 61 62 65 6c 29 3b 62 2e 61 72 69 61 4c 69 76 65 26 26 28 65 5b 22 61 72 69 61 2d 6c 69 76 65 22 5d 3d 62 2e 61 72 69 61 4c 69 76 65 29 3b 72 65 74 75 72 6e 20 57 69 61 28 6c 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 69 64 3a 63 2c 63 6c 61 73 73 4e 61 6d 65 3a 64 2c 73 74 79 6c 65 3a 6d 2c 65 6c 65 6d 65 6e 74 74 69 6d 69 6e 67 3a 61 7d 2c 65 29 2c 6e 29 7d 3b 55 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 78 78 6c 61 72 67 65 22 3a 72 65 74 75 72 6e 22 45 78 74 72 61 45 78 74 72 61 4c 61 Data Ascii: aHidden&&(e["aria-hidden"]=!0);b.ariaLabel&&(e["aria-label"]=b.ariaLabel);b.ariaLive&&(e["aria-live"]=b.ariaLive);return Wia(l,Object.assign({},{id:c,className:d,style:m,elementtiming:a},e),n)};Uia=function(a){switch(a){case "xxlarge":return"ExtraExtraLa
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 65 64 69 75 6d 22 3a 61 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 78 78 6c 61 72 67 65 22 3a 72 65 74 75 72 6e 22 68 31 22 3b 63 61 73 65 20 22 78 6c 61 72 67 65 22 3a 72 65 74 75 72 6e 22 68 31 22 3b 63 61 73 65 20 22 6c 61 72 67 65 22 3a 72 65 74 75 72 6e 22 68 32 22 3b 63 61 73 65 20 22 6d 65 64 69 75 6d 22 3a 72 65 74 75 72 6e 22 68 33 22 3b 63 61 73 65 20 22 73 6d 61 6c 6c 22 3a 72 65 74 75 72 6e 22 68 34 22 3b 63 61 73 65 20 22 78 73 6d 61 6c 6c 22 3a 72 65 74 75 72 6e 22 68 35 22 3b 63 61 73 65 20 22 78 78 73 6d 61 6c 6c 22 3a 72 65 74 75 72 6e 22 68 36 22 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 5f 5f 63 2e 7a 28 61 29 3b 7d 7d 3b 0a 4e 69 61 3d 7b 64 61 74 65 3a 7b 77 65 65 6b 64 61 79 3a 7b 77 65 65 6b 64 61 79 3a 22 6c Data Ascii: edium":a;switch(a){case "xxlarge":return"h1";case "xlarge":return"h1";case "large":return"h2";case "medium":return"h3";case "small":return"h4";case "xsmall":return"h5";case "xxsmall":return"h6";default:throw new __c.z(a);}};Nia={date:{weekday:{weekday:"l
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 6e 20 74 68 69 73 2e 42 4d 7d 57 75 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 42 4d 3d 61 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 6b 6a 61 2e 46 28 74 68 69 73 29 3b 74 68 69 73 2e 42 4d 3d 22 6d 6f 75 73 65 22 7d 7d 3b 5f 5f 63 2e 64 6c 3d 6e 65 77 20 6b 6a 61 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 50 69 61 28 29 3b 76 61 72 20 52 69 61 3d 63 6c 61 73 73 7b 67 65 74 20 70 72 65 66 65 72 73 52 65 64 75 63 65 64 4d 6f 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 68 69 73 2e 74 36 26 26 74 68 69 73 2e 74 36 2e 6d 61 74 63 68 65 73 7d 61 64 64 4c 69 73 74 65 6e 65 72 28 61 29 7b 76 61 72 20 62 3b 6e 75 6c 6c 3d 3d 3d 28 62 3d 74 68 69 73 2e 74 36 29 7c 7c 76 6f 69 64 20 30 Data Ascii: n this.BM}Wu(a){return this.BM=a}constructor(){kja.F(this);this.BM="mouse"}};__c.dl=new kja;"undefined"!==typeof document&&Pia();var Ria=class{get prefersReducedMotion(){return null!=this.t6&&this.t6.matches}addListener(a){var b;null===(b=this.t6)\|\|void 0
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 39 31 36 2c 36 39 37 31 2c 36 39 37 39 2c 36 39 38 30 2c 34 33 33 39 35 2c 34 33 34 34 34 2c 34 33 34 34 35 2c 34 33 34 35 30 2c 34 33 34 35 31 2c 39 34 31 39 32 2c 39 34 31 39 33 5d 29 3b 5f 5f 63 2e 74 6c 3d 7b 22 26 22 3a 22 26 61 6d 70 3b 22 2c 22 3c 22 3a 22 26 6c 74 3b 22 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 22 2f 22 3a 22 26 23 78 32 46 3b 22 7d 3b 5f 5f 63 2e 70 6a 61 3d 6e 65 77 20 52 65 67 45 78 70 28 60 5b 24 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 5f 5f 63 2e 74 6c 29 2e 6a 6f 69 6e 28 22 22 29 7d 5d 60 2c 22 67 22 29 3b 5f 5f 63 2e 71 6a 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 5f 5f 63 2e 74 6c 2c 7b 27 22 27 3a 22 26 71 75 6f 74 3b 22 2c 22 27 22 3a 22 26 23 78 32 37 3b 22 7d 29 3b 5f 5f 63 2e 72 6a 61 3d 6e 65 77 20 52 65 67 Data Ascii: 916,6971,6979,6980,43395,43444,43445,43450,43451,94192,94193]);__c.tl={"&":"&","<":"<",">":">","/":"/"};__c.pja=new RegExp(`[${Object.keys(__c.tl).join("")}]`,"g");__c.qja=Object.assign({},__c.tl,{'"':""","'":"'"});__c.rja=new Reg
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 61 53 6d 61 6c 6c 3a 22 31 2e 30 72 65 6d 22 2c 74 65 78 74 54 69 74 6c 65 45 78 74 72 61 45 78 74 72 61 4c 61 72 67 65 4c 69 6e 65 48 65 69 67 68 74 3a 22 38 2e 34 72 65 6d 22 2c 6d 6f 62 69 6c 65 54 65 78 74 54 69 74 6c 65 45 78 74 72 61 45 78 74 72 61 4c 61 72 67 65 4c 69 6e 65 48 65 69 67 68 74 3a 22 36 2e 34 72 65 6d 22 2c 0a 74 65 78 74 54 69 74 6c 65 45 78 74 72 61 4c 61 72 67 65 4c 69 6e 65 48 65 69 67 68 74 3a 22 36 2e 34 72 65 6d 22 2c 6d 6f 62 69 6c 65 54 65 78 74 54 69 74 6c 65 45 78 74 72 61 4c 61 72 67 65 4c 69 6e 65 48 65 69 67 68 74 3a 22 34 2e 32 72 65 6d 22 2c 74 65 78 74 54 69 74 6c 65 4c 61 72 67 65 4c 69 6e 65 48 65 69 67 68 74 3a 22 34 2e 32 72 65 6d 22 2c 6d 6f 62 69 6c 65 54 65 78 74 54 69 74 6c 65 4c 61 72 67 65 4c 69 6e 65 48 65 Data Ascii: aSmall:"1.0rem",textTitleExtraExtraLargeLineHeight:"8.4rem",mobileTextTitleExtraExtraLargeLineHeight:"6.4rem",textTitleExtraLargeLineHeight:"6.4rem",mobileTextTitleExtraLargeLineHeight:"4.2rem",textTitleLargeLineHeight:"4.2rem",mobileTextTitleLargeLineHe
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 79 67 22 2c 74 65 78 74 54 69 74 6c 65 53 6d 61 6c 6c 3a 22 6c 6e 43 50 6f 41 22 2c 74 65 78 74 54 69 74 6c 65 45 78 74 72 61 53 6d 61 6c 6c 3a 22 64 5a 5f 63 46 67 22 2c 74 65 78 74 54 69 74 6c 65 45 78 74 72 61 45 78 74 72 61 53 6d 61 6c 6c 3a 22 5f 74 33 44 6c 51 22 2c 74 65 78 74 45 78 74 72 61 45 78 74 72 61 4c 61 72 67 65 3a 22 6f 68 75 48 72 51 22 2c 74 65 78 74 45 78 74 72 61 4c 61 72 67 65 3a 22 57 6a 79 73 47 51 22 2c 74 65 78 74 4c 61 72 67 65 3a 22 72 4e 75 71 52 41 22 2c 74 65 78 74 4d 65 64 69 75 6d 3a 22 66 46 4f 69 4c 51 22 2c 74 65 78 74 53 6d 61 6c 6c 3a 22 5f 35 52 53 71 49 67 22 2c 74 65 78 74 45 78 74 72 61 53 6d 61 6c 6c 3a 22 43 57 41 78 68 51 22 2c 74 65 78 74 42 6f 6c 64 4c 61 72 67 65 3a 22 66 54 33 41 50 51 22 2c 74 65 78 74 42 Data Ascii: yg",textTitleSmall:"lnCPoA",textTitleExtraSmall:"dZ_cFg",textTitleExtraExtraSmall:"_t3DlQ",textExtraExtraLarge:"ohuHrQ",textExtraLarge:"WjysGQ",textLarge:"rNuqRA",textMedium:"fFOiLQ",textSmall:"_5RSqIg",textExtraSmall:"CWAxhQ",textBoldLarge:"fT3APQ",textB
2024-05-03 04:44:08 UTC	321	IN	Data Raw: 61 6b 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 65 2e 72 65 6a 65 63 74 65 64 28 64 2e 65 72 72 6f 72 29 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 5f 5f 63 2e 7a 28 64 29 3b 7d 7d 3b 63 6f 6e 73 74 20 63 3d 7b 69 6e 69 74 69 61 6c 3a 28 29 3d 3e 7b 7d 2c 6c 6f 61 64 69 6e 67 3a 28 29 3d 3e 7b 7d 2c 45 76 62 3a 28 29 3d 3e 7b 7d 2c 72 65 6a 65 63 74 65 64 3a 28 29 3d 3e 7b 7d 7d 3b 61 2e 66 6f 72 45 61 63 68 3d 28 64 2c 65 29 3d 3e 7b 62 28 64 2c 0a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2c 65 29 29 7d 7d 29 28 5f 5f 63 2e 79 6c 7c 7c 28 5f 5f 63 2e 79 6c 3d 7b 7d 29 29 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 34 35 66 37 38 35 33 64 63 37 36 36 30 33 37 38 61 30 33 38 39 35 32 62 35 33 63 30 39 35 Data Ascii: ak;case 3:return e.rejected(d.error);default:throw new __c.z(d);}};const c={initial:()=>{},loading:()=>{},Evb:()=>{},rejected:()=>{}};a.forEach=(d,e)=>{b(d,Object.assign({},c,e))}})(__c.yl\|\|(__c.yl={}));}).call(self, self._45f7853dc7660378a038952b53c095

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49756	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:08 UTC	951	OUT	GET /web/b9914c5d2e1d14a5.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:08 UTC	1190	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:08 GMT Content-Type: text/javascript Content-Length: 126714 Connection: close CF-Ray: 87dd9818a88942db-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8488 Cache-Control: public, max-age=31556926 ETag: "08522e5b8c77d258f808df184b535e38" Expires: Sat, 03 May 2025 10:32:54 GMT Last-Modified: Fri, 03 May 2024 02:16:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: RuUobPHx3PM7a/bvA+k60G4Q7TGKzNZ+mQkusZ1HV55lkJhLLCh+sp+4EvAXi+y6xSN8L4G1ZRU= x-amz-replication-status: COMPLETED x-amz-request-id: XGCMXW4054KD91ZM x-amz-server-side-encryption: AES256 x-amz-version-id: 2oJv0oRaTK.i2hPxIiRR5BE8C2FjAhVh X-Content-Type-Options: nosniff
2024-05-03 04:44:08 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 73 63 49 64 77 52 43 64 50 38 45 64 4f 37 56 6f 67 4e 74 41 4a 49 72 34 36 5a 52 70 5a 32 72 71 53 39 65 33 66 43 51 30 52 48 6f 63 58 65 6a 75 25 32 46 6f 25 32 42 47 6a 58 56 38 25 32 46 76 25 32 46 55 53 70 4e 25 32 42 5a 68 52 6b 6a 4d 52 6b 79 48 64 61 74 55 43 57 62 6a 6a 6f 75 76 37 79 4a 44 44 74 44 43 25 32 46 59 36 41 62 44 4a 6c 63 37 41 37 4d 68 6b 32 74 7a 79 61 67 69 39 69 56 56 68 25 32 46 65 4a 39 78 61 38 4d 39 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=scIdwRCdP8EdO7VogNtAJIr46ZRpZ2rqS9e3fCQ0RHocXeju%2Fo%2BGjXV8%2Fv%2FUSpN%2BZhRkjMRkyHdatUCWbjjouv7yJDDtDC%2FY6AbDJlc7A7Mhk2tzyagi9iVVh%2FeJ9xa8M9A%3D"}],"group":"cf-nel","max_age
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 30 33 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 31 35 38 39 36 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6037],{/***/ 515896:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 4d 3b 76 61 72 20 59 54 3d 5f 5f 63 2e 59 54 3b 76 61 72 20 46 61 3d 5f 5f 63 2e 46 61 3b 76 61 72 20 7a 3d 5f 5f 63 2e 7a 3b 76 61 72 20 6f 6e 3d 5f 5f 63 2e 6f 6e 3b 76 61 72 20 74 3d 5f 5f 63 2e 74 3b 76 61 72 20 61 6e 3d 5f 5f 63 2e 61 6e 3b 76 61 72 20 70 6e 3d 5f 5f 63 2e 70 6e 3b 76 61 72 20 72 6e 3d 5f 5f 63 2e 72 6e 3b 76 61 72 20 77 3d 5f 5f 63 2e 77 3b 0a 76 61 72 20 54 6b 63 2c 55 6b 63 2c 56 6b 63 2c 58 6b 63 2c 59 6b 63 2c 50 39 2c 5a 6b 63 2c 51 39 2c 61 6c 63 2c 52 39 2c 53 39 2c 64 6c 63 2c 55 39 2c 62 6c 63 2c 54 39 2c 63 6c 63 2c 65 6c 63 2c 57 6b 63 2c 67 6c 63 2c 69 6c 63 2c 6c 6c 63 2c 6e 6c 63 2c 6f 6c 63 2c 70 6c 63 2c 72 6c 63 2c 76 6c 63 2c 75 6c 63 2c 74 6c 63 2c 5a 39 2c 42 6c 63 2c 49 6c 63 2c 4a 6c 63 2c 4b 6c 63 2c 4d 6c 63 Data Ascii: M;var YT=__c.YT;var Fa=__c.Fa;var z=__c.z;var on=__c.on;var t=__c.t;var an=__c.an;var pn=__c.pn;var rn=__c.rn;var w=__c.w;var Tkc,Ukc,Vkc,Xkc,Ykc,P9,Zkc,Q9,alc,R9,S9,dlc,U9,blc,T9,clc,elc,Wkc,glc,ilc,llc,nlc,olc,plc,rlc,vlc,ulc,tlc,Z9,Blc,Ilc,Jlc,Klc,Mlc
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 2e 61 62 2c 6d 6f 64 65 3a 61 2e 47 2e 45 63 2e 4f 63 2e 6d 6f 64 65 2c 41 58 3a 63 2c 4a 77 3a 22 70 6c 61 79 65 72 22 2c 7a 73 3a 61 2e 47 2e 45 63 2e 4f 63 2e 7a 73 2c 48 73 3a 62 2c 54 77 3a 22 66 61 72 65 77 65 6c 6c 22 7d 29 7d 3b 0a 56 6b 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 7b 4d 61 3a 62 2c 62 61 3a 63 7d 29 7b 76 61 72 20 64 3b 5f 5f 63 2e 47 51 61 28 61 29 3b 6e 75 6c 6c 3d 3d 3d 28 64 3d 61 2e 41 37 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 56 73 28 28 29 3d 3e 7b 7d 29 3b 63 6f 6e 73 74 20 65 3d 5f 5f 63 2e 61 46 28 7b 4d 61 3a 62 2c 62 61 3a 63 7d 29 2c 66 3d 61 2e 58 6a 2e 66 69 6c 74 65 72 28 67 3d 3e 67 2e 4d 61 3c 65 26 26 5f 5f 63 2e 61 46 28 67 29 3e 62 29 3b 61 2e 7a 37 3d 28 30 2c 5f 5f 63 2e 6e 4a 29 28 Data Ascii: .ab,mode:a.G.Ec.Oc.mode,AX:c,Jw:"player",zs:a.G.Ec.Oc.zs,Hs:b,Tw:"farewell"})};Vkc=function(a,{Ma:b,ba:c}){var d;__c.GQa(a);null===(d=a.A7)\|\|void 0===d?void 0:d.Vs(()=>{});const e=__c.aF({Ma:b,ba:c}),f=a.Xj.filter(g=>g.Ma<e&&__c.aF(g)>b);a.z7=(0,__c.nJ)(
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 64 29 2e 63 75 72 72 65 6e 74 3b 63 3d 62 2e 69 64 3d 3d 3d 61 2e 69 64 3f 62 3a 63 2e 67 65 74 28 61 2e 69 64 29 2e 63 75 72 72 65 6e 74 3b 63 6f 6e 73 74 20 66 3d 4d 61 74 68 2e 73 71 72 74 28 28 28 63 2e 78 2d 65 2e 78 29 2a 2a 32 2b 28 63 2e 79 2d 65 2e 79 29 2a 2a 32 29 2f 28 28 61 2e 78 2d 64 2e 78 29 2a 2a 32 2b 28 61 2e 79 2d 64 2e 79 29 2a 2a 32 29 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 5f 5f 63 2e 4c 53 28 62 2c 24 6b 63 28 64 2c 61 29 2c 24 6b 63 28 65 2c 63 29 29 2c 7b 73 63 61 6c 65 3a 66 7d 29 7d 3b 0a 61 6c 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 2e 73 74 61 74 65 26 26 32 3d 3d 3d 63 2e 73 69 7a 65 29 7b 63 6f 6e 73 74 20 5b 66 2c 67 5d 3d 41 72 72 61 79 2e 66 72 6f 6d 28 Data Ascii: d).current;c=b.id===a.id?b:c.get(a.id).current;const f=Math.sqrt(((c.x-e.x)2+(c.y-e.y)2)/((a.x-d.x)2+(a.y-d.y)2));return Object.assign({},__c.LS(b,$kc(d,a),$kc(e,c)),{scale:f})};alc=function(a,b,c){if(!a.state&&2===c.size){const [f,g]=Array.from(
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 5f 63 2e 4d 62 28 29 2c 4e 34 61 3a 61 2e 6c 51 2c 61 56 61 3a 63 2c 53 6b 61 3a 67 2e 53 6b 61 2c 54 6b 61 3a 67 2e 54 6b 61 2c 24 79 3a 67 2e 24 79 2c 42 55 3a 67 2e 42 55 2c 78 44 3a 67 2e 78 44 2c 64 62 62 3a 68 2c 61 50 61 3a 65 2c 52 39 3a 31 45 33 2a 64 2c 77 7a 3a 67 2e 77 7a 2c 71 70 3a 55 39 28 61 29 2c 66 32 61 3a 6e 75 6c 6c 3d 3d 3d 66 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 76 6f 69 64 20 30 3a 66 2e 6c 65 6e 67 74 68 2c 6b 4e 61 3a 66 7d 3b 61 2e 71 66 3f 61 2e 71 66 2e 24 66 61 28 29 2e 74 68 65 6e 28 6e 3d 3e 7b 61 2e 4d 2e 74 72 61 63 6b 28 56 39 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6d 2c 7b 58 46 3a 6e 7d 29 29 7d 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 61 2e 4d 2e 74 72 61 63 6b 28 56 39 2c 6d 29 7d 29 3a 61 2e 4d 2e 74 Data Ascii: _c.Mb(),N4a:a.lQ,aVa:c,Ska:g.Ska,Tka:g.Tka,$y:g.$y,BU:g.BU,xD:g.xD,dbb:h,aPa:e,R9:1E3*d,wz:g.wz,qp:U9(a),f2a:null===f\|\|void 0===f?void 0:f.length,kNa:f};a.qf?a.qf.$fa().then(n=>{a.M.track(V9,Object.assign({},m,{XF:n}))}).catch(()=>{a.M.track(V9,m)}):a.M.t
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 4f 52 54 45 44 22 3b 63 61 73 65 20 4d 65 64 69 61 45 72 72 6f 72 2e 4d 45 44 49 41 5f 45 52 52 5f 4e 45 54 57 4f 52 4b 3a 72 65 74 75 72 6e 22 4d 45 44 49 41 5f 45 52 52 5f 4e 45 54 57 4f 52 4b 22 3b 63 61 73 65 20 4d 65 64 69 61 45 72 72 6f 72 2e 4d 45 44 49 41 5f 45 52 52 5f 44 45 43 4f 44 45 3a 72 65 74 75 72 6e 22 4d 45 44 49 41 5f 45 52 52 5f 44 45 43 4f 44 45 22 3b 63 61 73 65 20 4d 65 64 69 61 45 72 72 6f 72 2e 4d 45 44 49 41 5f 45 52 52 5f 53 52 43 5f 4e 4f 54 5f 53 55 50 50 4f 52 54 45 44 3a 72 65 74 75 72 6e 22 4d 45 44 49 41 5f 45 52 52 5f 53 52 43 5f 4e 4f 54 5f 53 55 50 50 4f 52 54 45 44 22 7d 7d 3b 0a 57 6b 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 6c 69 6e 6b 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 Data Ascii: ORTED";case MediaError.MEDIA_ERR_NETWORK:return"MEDIA_ERR_NETWORK";case MediaError.MEDIA_ERR_DECODE:return"MEDIA_ERR_DECODE";case MediaError.MEDIA_ERR_SRC_NOT_SUPPORTED:return"MEDIA_ERR_SRC_NOT_SUPPORTED"}};Wkc=function(){var a={link:window.location.href
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 65 72 69 61 6c 69 7a 65 28 66 29 29 7d 29 3b 73 77 69 74 63 68 28 62 2e 52 77 29 7b 63 61 73 65 20 22 44 4f 43 55 4d 45 4e 54 22 3a 6f 6e 28 63 2c 7b 64 6f 63 75 6d 65 6e 74 49 64 3a 77 28 62 2e 4a 61 2c 22 44 65 6c 65 74 65 52 65 61 63 74 69 6f 6e 73 41 70 69 52 65 71 75 65 73 74 23 64 6f 63 75 6d 65 6e 74 49 64 20 72 65 71 75 69 72 65 64 22 29 2c 64 6f 63 75 6d 65 6e 74 45 78 74 65 6e 73 69 6f 6e 3a 62 2e 45 6a 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 46 4f 4c 44 45 52 22 3a 6f 6e 28 63 2c 7b 66 6f 6c 64 65 72 49 64 3a 77 28 62 2e 73 56 2c 22 44 65 6c 65 74 65 52 65 61 63 74 69 6f 6e 73 41 70 69 52 65 71 75 65 73 74 23 66 6f 6c 64 65 72 49 64 20 72 65 71 75 69 72 65 64 22 29 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 Data Ascii: erialize(f))});switch(b.Rw){case "DOCUMENT":on(c,{documentId:w(b.Ja,"DeleteReactionsApiRequest#documentId required"),documentExtension:b.Ej});break;case "FOLDER":on(c,{folderId:w(b.sV,"DeleteReactionsApiRequest#folderId required")});break;default:throw ne
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 3d 70 6c 63 28 7b 4d 3a 62 2c 24 61 3a 63 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 71 6c 63 28 61 2c 62 2c 63 2e 47 6d 28 22 72 65 6e 64 65 72 69 6e 67 2e 76 69 64 65 6f 22 29 2c 46 61 28 28 29 3d 3e 65 29 2c 64 29 7d 3b 76 6c 63 3d 66 75 6e 63 74 69 6f 6e 28 7b 52 61 61 3a 61 7d 29 7b 63 6f 6e 73 74 20 62 3d 6e 65 77 20 73 6c 63 2c 63 3d 59 39 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 5a 28 74 6c 63 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 64 2c 7b 6f 6e 43 6c 69 63 6b 3a 62 2e 70 43 61 7d 29 29 7d 29 3b 72 65 74 75 72 6e 7b 79 4a 3a 28 29 3d 3e 62 2e 66 68 2c 64 49 3a 59 39 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 28 75 6c 63 2c 7b 66 68 3a 62 2e 66 68 2c 41 76 3a 63 2c 52 61 61 3a 61 2c 6f 6e 43 6c 6f Data Ascii: =plc({M:b,$a:c});return new qlc(a,b,c.Gm("rendering.video"),Fa(()=>e),d)};vlc=function({Raa:a}){const b=new slc,c=Y9(function(d){return Z(tlc,Object.assign({},d,{onClick:b.pCa}))});return{yJ:()=>b.fh,dI:Y9(function(){return Z(ulc,{fh:b.fh,Av:c,Raa:a,onClo
2024-05-03 04:44:08 UTC	1369	IN	Data Raw: 61 3a 65 7d 29 7b 63 6f 6e 73 74 20 5b 66 2c 67 2c 68 5d 3d 24 39 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 6b 3d 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2a 62 29 2c 6c 3d 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2a 63 29 3b 76 61 72 20 6d 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 32 29 3b 6d 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 6c 2d 6b 29 2f 31 30 30 2a 6d 29 2f 6d 3b 72 65 74 75 72 6e 5b 4d 61 74 68 2e 72 6f 75 6e 64 28 28 6b 2d 6d 29 2f 6d 29 2a 6d 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 28 6c 2b 6d 29 2f 6d 29 2a 6d 2c 6d 5d 7d 2c 5b 63 2c 62 5d 29 3b 72 65 74 75 72 6e 20 61 24 28 77 6d 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 78 6c 63 2c 78 43 3a 22 31 75 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 5a 28 77 6d 2c 7b 4a 51 3a 22 31 2e 35 75 22 2c 63 68 69 6c 64 72 65 6e 3a 5a 28 79 Data Ascii: a:e}){const [f,g,h]=$9(()=>{const k=Math.log(100b),l=Math.log(100c);var m=Math.pow(10,2);m=Math.round((l-k)/100m)/m;return[Math.round((k-m)/m)m,Math.round((l+m)/m)*m,m]},[c,b]);return a$(wm,{className:xlc,xC:"1u",children:[Z(wm,{JQ:"1.5u",children:Z(y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49754	69.192.108.161	443

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:08 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-03 04:44:08 UTC	529	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=8339 Date: Fri, 03 May 2024 04:44:08 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-03 04:44:08 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49757	34.120.195.249	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:08 UTC	478	OUT	GET /api/1767683/envelope/?sentry_key=944d224d45b943ba9f96396432dfd868&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:08 UTC	550	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Fri, 03 May 2024 04:44:08 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST x-envoy-upstream-service-time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49758	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:08 UTC	1263	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/87dd97e63f924243 HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:08 UTC	783	IN	HTTP/1.1 400 Bad Request Date: Fri, 03 May 2024 04:44:08 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: NdtQns52CFU2TFCEMaqnbg==$K8dt1iukLGb/4ztBEPss/w== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AU%2FbQ%2BT4SmyCNS3cvqotndZ1%2BbTUaPeoCT385rSFCaV1M5hr%2BdBl9FhS8Vo6QINN%2By3n1iJDdK6V84rRBQ2pLUoIhUD6f6Aq52pkbTfr9UWFrqSx%2FmmfIHJdTRYHviI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87dd981a19a97d08-EWR
2024-05-03 04:44:08 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49761	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	536	OUT	OPTIONS /report/v4?s=AU%2FbQ%2BT4SmyCNS3cvqotndZ1%2BbTUaPeoCT385rSFCaV1M5hr%2BdBl9FhS8Vo6QINN%2By3n1iJDdK6V84rRBQ2pLUoIhUD6f6Aq52pkbTfr9UWFrqSx%2FmmfIHJdTRYHviI%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:09 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 03 May 2024 04:44:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49762	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	480	OUT	POST /report/v4?s=AU%2FbQ%2BT4SmyCNS3cvqotndZ1%2BbTUaPeoCT385rSFCaV1M5hr%2BdBl9FhS8Vo6QINN%2By3n1iJDdK6V84rRBQ2pLUoIhUD6f6Aq52pkbTfr9UWFrqSx%2FmmfIHJdTRYHviI%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 439 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:09 UTC	439	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 30 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 33 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 31 30 32 2e 31 31 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d Data Ascii: [{"age":206,"body":{"elapsed_time":538,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.16.102.112","status_code":400,"type":"http.error"},"type":"network-error","url":"https://www.canva.com
2024-05-03 04:44:09 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 03 May 2024 04:44:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49770	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	1857	OUT	GET /_ajax/reaction/config/DAGEBBzq9KM?documentExtension=jvjE01qRbaOyWhWyDOHDeg HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: getreactionconfigapi sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:09 UTC	1043	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:09 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98214b0472b9-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98214b0472b9 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cHs3%2FFYPRuVkEp6r%2BwyA2FZXWDYxZNyHsr%2BETwjMkARt%2F%2BrpFGlq%2F1Su8d2eZoQDgFYCVDZfVxmFJzrg3EinwY%2BODqr9v7ZImDd0zCdGSRjj7zBReWlZu2O48eSxbfo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; path=/; domain=.canva.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-05-03 04:44:09 UTC	57	IN	Data Raw: 33 33 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 42 22 3a 7b 22 41 22 3a 74 72 75 65 7d 7d 0d 0a Data Ascii: 33'"])}while(1);</x>//{"A":{"A":true},"B":{"A":true}}
2024-05-03 04:44:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49769	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	1950	OUT	GET /_ajax/reaction/reactions/summaries?parentArtifactType=DOCUMENT&source=B&reactedObjectType=B&limit=100&documentId=DAGEBBzq9KM&documentExtension=jvjE01qRbaOyWhWyDOHDeg HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: findreactionsummaryapi sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:09 UTC	1037	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:09 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9821c8250f78-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd9821c8250f78 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9f8ORjw2WN0xlJ%2FPHNAO33hwAzWwoDZ0pH7V1PEoSVITakBH%2BMhI0MPWoekYOQsQ%2FFd9YZzwMwv%2BQ0wzSIONOFNFyJbTkgbvf4PkwK11kqROiSGGhUwWO4MfbXrldJY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; path=/; domain=.canva.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-05-03 04:44:09 UTC	63	IN	Data Raw: 33 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 5b 5d 2c 22 42 22 3a 5b 5d 2c 22 44 22 3a 5b 5d 7d 7d 0d 0a Data Ascii: 39'"])}while(1);</x>//{"A":{"A?":"A","A":[],"B":[],"D":[]}}
2024-05-03 04:44:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49767	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	1035	OUT	GET /web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:09 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:09 GMT Content-Type: image/svg+xml Content-Length: 2312 Connection: close CF-Ray: 87dd9821cb1e42ec-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367459 Cache-Control: public, max-age=31556926 ETag: "9abc2241bf1479263a0a039f3d1e5b5c" Expires: Sat, 03 May 2025 10:32:55 GMT Last-Modified: Fri, 05 Jan 2024 01:59:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 5S6kRjaW7n4cWUuuHcXqfe5niTXihfQYcRB+5urtKn7KuNVK6NuVGiuhGCTFw0uUXtCZnVnUlgE= x-amz-replication-status: COMPLETED x-amz-request-id: SBT6BBS8NVTCY5JB x-amz-server-side-encryption: AES256 x-amz-version-id: Qt1V_3yKyk0lnrOtQlJXuFHqbSdX4sJF X-Content-Type-Options: nosniff
2024-05-03 04:44:09 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 61 69 25 32 42 74 36 48 46 50 70 6b 4f 61 52 56 76 59 54 6d 64 50 67 5a 67 6a 44 31 79 31 79 35 78 31 70 68 78 71 55 41 76 56 6f 43 51 6b 4e 41 65 38 55 25 32 46 4d 6d 77 50 78 6c 76 69 52 63 25 32 42 6f 25 32 42 4e 49 79 34 6c 31 77 67 6e 72 32 6c 63 73 70 33 4a 64 5a 4c 6b 6f 35 5a 6c 41 55 6c 5a 70 35 31 54 25 32 46 7a 25 32 46 46 63 38 43 4c 31 4d 31 61 76 68 46 7a 31 77 44 62 30 6f 34 7a 36 6e 33 4f 39 37 75 70 35 79 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ai%2Bt6HFPpkOaRVvYTmdPgZgjD1y1y5x1phxqUAvVoCQkNAe8U%2FMmwPxlviRc%2Bo%2BNIy4l1wgnr2lcsp3JdZLko5ZlAUlZp51T%2Fz%2FFc8CL1M1avhFz1wDb0o4z6n3O97up5y4%3D"}],"group":"cf-nel","max_age":
2024-05-03 04:44:09 UTC	1193	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 46 39 36 34 35 22 20 64 3d 22 4d 33 32 2e 33 30 32 20 32 34 2e 33 34 37 63 2d 2e 36 39 35 2d 31 2e 30 31 2d 2e 33 30 37 2d 32 2e 34 37 2d 2e 34 38 2d 34 2e 30 38 32 2d 2e 31 37 38 2d 32 2e 36 33 2d 31 2e 33 30 38 2d 35 2e 31 37 38 2d 33 2e 35 2d 37 2e 32 31 36 6c 2d 37 2e 34 36 36 2d 36 2e 39 34 32 73 2d 31 2e 34 37 31 2d 31 2e 33 36 39 2d 32 2e 38 34 31 2e 31 30 33 63 2d 31 2e 33 36 38 20 31 2e 34 37 31 2e 31 30 34 20 32 2e 38 34 2e 31 30 34 20 32 2e 38 34 6c 33 2e 31 35 34 20 32 2e 39 33 34 20 32 2e 37 33 34 20 32 2e 35 34 32 73 2d 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#EF9645" d="M32.302 24.347c-.695-1.01-.307-2.47-.48-4.082-.178-2.63-1.308-5.178-3.5-7.216l-7.466-6.942s-1.471-1.369-2.841.103c-1.368 1.471.104 2.84.104 2.84l3.154 2.934 2.734 2.542s-.
2024-05-03 04:44:09 UTC	1119	IN	Data Raw: 32 31 2e 37 36 37 61 31 20 31 20 30 20 30 20 31 2d 2e 37 30 37 2d 31 2e 37 30 38 6c 33 2e 35 35 32 2d 33 2e 35 35 61 31 20 31 20 30 20 30 20 31 20 31 2e 34 31 34 20 31 2e 34 31 35 6c 2d 33 2e 35 35 32 20 33 2e 35 35 61 2e 39 39 33 2e 39 39 33 20 30 20 30 20 31 2d 2e 37 30 37 2e 32 39 33 7a 6d 2d 34 2e 31 36 34 2d 31 2e 36 39 37 61 31 20 31 20 30 20 30 20 31 2d 2e 39 34 34 2d 31 2e 33 33 31 6c 2e 39 37 2d 32 2e 37 37 33 61 31 20 31 20 30 20 30 20 31 20 31 2e 38 38 38 2e 36 36 6c 2d 2e 39 37 20 32 2e 37 37 33 61 31 20 31 20 30 20 30 20 31 2d 2e 39 34 34 2e 36 37 31 7a 6d 36 2e 31 34 33 20 35 2e 37 37 34 61 31 2e 30 30 31 20 31 2e 30 30 31 20 30 20 30 20 31 2d 2e 33 33 33 2d 31 2e 39 34 33 6c 32 2e 34 39 34 2d 2e 38 38 31 61 31 20 31 20 30 20 31 20 31 20 2e Data Ascii: 21.767a1 1 0 0 1-.707-1.708l3.552-3.55a1 1 0 0 1 1.414 1.415l-3.552 3.55a.993.993 0 0 1-.707.293zm-4.164-1.697a1 1 0 0 1-.944-1.331l.97-2.773a1 1 0 0 1 1.888.66l-.97 2.773a1 1 0 0 1-.944.671zm6.143 5.774a1.001 1.001 0 0 1-.333-1.943l2.494-.881a1 1 0 1 1 .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49764	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	1035	OUT	GET /web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:09 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:09 GMT Content-Type: image/svg+xml Content-Length: 1865 Connection: close CF-Ray: 87dd9821bd988cbd-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367459 Cache-Control: public, max-age=31556926 ETag: "3e78ef31f2928a74c6d7ba19b91d0570" Expires: Sat, 03 May 2025 10:32:55 GMT Last-Modified: Mon, 08 Jan 2024 03:33:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: QGKEMYkmTq+aBaEIe1q4rqWpmKyLHDwXh+ze49a+l6dp7gQVHwJw9wQkGrwyQlVeJ+Kr6Y6DZGI= x-amz-replication-status: COMPLETED x-amz-request-id: KYRSHEV785YC1D84 x-amz-server-side-encryption: AES256 x-amz-version-id: wYxiof4L_66xzuPghQaGs3fOYc3qOrUp X-Content-Type-Options: nosniff
2024-05-03 04:44:09 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 5a 45 44 30 64 25 32 46 34 35 71 58 4e 4a 32 7a 78 68 34 56 42 47 54 6a 66 72 67 47 25 32 42 55 68 7a 6f 74 6d 74 6c 4d 53 48 68 52 6d 7a 6f 70 25 32 46 52 42 6b 77 67 4e 61 74 78 59 73 31 33 59 6e 77 54 42 6b 41 31 66 41 62 54 34 31 59 57 58 71 61 77 56 42 66 77 6c 70 76 36 35 72 51 69 47 6d 77 7a 66 57 6e 6a 6c 73 6f 4c 58 25 32 42 35 66 72 73 6a 77 66 70 33 31 74 38 4d 78 4f 25 32 46 55 52 4b 25 32 46 4b 43 45 53 63 31 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZED0d%2F45qXNJ2zxh4VBGTjfrgG%2BUhzotmtlMSHhRmzop%2FRBkwgNatxYs13YnwTBkA1fAbT41YWXqawVBfwlpv65rQiGmwzfWnjlsoLX%2B5frsjwfp31t8MxO%2FURK%2FKCESc1Q%3D"}],"group":"cf-nel","max_age":
2024-05-03 04:44:09 UTC	1193	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 32 2e 32 39 20 31 36 63 30 20 38 2e 38 33 37 2d 37 2e 31 36 34 20 31 36 2d 31 36 20 31 36 2d 38 2e 38 33 37 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 20 30 2d 38 2e 38 33 36 20 37 2e 31 36 33 2d 31 36 20 31 36 2d 31 36 20 38 2e 38 33 36 20 30 20 31 36 20 37 2e 31 36 34 20 31 36 20 31 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 33 39 30 30 36 36 33 33 39 34 5f 5f 61 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 31 33 31 20 31 Data Ascii: <svg width="33" height="32" viewBox="0 0 33 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32.29 16c0 8.837-7.164 16-16 16-8.837 0-16-7.163-16-16 0-8.836 7.163-16 16-16 8.836 0 16 7.164 16 16Z" fill="url(#_3900663394__a)"/><path d="M26.131 1
2024-05-03 04:44:09 UTC	672	IN	Data Raw: 5a 22 20 66 69 6c 6c 3d 22 23 36 36 34 35 30 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 38 31 38 20 32 30 2e 37 30 36 73 32 2e 38 32 34 2e 39 34 20 38 2e 34 37 2e 39 34 63 35 2e 36 34 38 20 30 20 38 2e 34 37 31 2d 2e 39 34 20 38 2e 34 37 31 2d 2e 39 34 73 2d 31 2e 38 38 32 20 33 2e 37 36 35 2d 38 2e 34 37 20 33 2e 37 36 35 63 2d 36 2e 35 38 38 20 30 2d 38 2e 34 37 2d 33 2e 37 36 35 2d 38 2e 34 37 2d 33 2e 37 36 35 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 39 2e 35 35 37 20 32 35 2e 36 32 38 61 34 2e 37 30 35 20 34 2e 37 30 35 20 30 20 30 20 31 2d 35 2e 37 32 20 33 2e 34 30 32 20 34 2e 37 30 34 20 34 2e 37 30 34 20 30 20 30 20 31 2d 33 2e 34 30 32 2d 35 2e 37 31 38 63 2e 36 34 2d 32 2e 35 32 20 35 2e 39 36 34 2d 38 Data Ascii: Z" fill="#664500"/><path d="M7.818 20.706s2.824.94 8.47.94c5.648 0 8.471-.94 8.471-.94s-1.882 3.765-8.47 3.765c-6.588 0-8.47-3.765-8.47-3.765Z" fill="#fff"/><path d="M9.557 25.628a4.705 4.705 0 0 1-5.72 3.402 4.704 4.704 0 0 1-3.402-5.718c.64-2.52 5.964-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49766	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	1035	OUT	GET /web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:09 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:09 GMT Content-Type: image/svg+xml Content-Length: 842 Connection: close CF-Ray: 87dd9821cf9841ad-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4363280 Cache-Control: public, max-age=31556926 ETag: "3a05dbf1cdd156fcd1677a0b444cc36f" Expires: Sat, 03 May 2025 10:32:55 GMT Last-Modified: Mon, 08 Jan 2024 03:33:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: soboA3isci4OqX1rbnBZlxk2Vkq4Q8TOHrSL3RF+RZnuKKFLJ3pMT+eSKtCa9jjvrBRCRhJCb3Q= x-amz-replication-status: COMPLETED x-amz-request-id: KYRG3BFHQBP1EAKM x-amz-server-side-encryption: AES256 x-amz-version-id: 9GJxmya_rzB42UYi8RMjAyeQyqSYuTAw X-Content-Type-Options: nosniff
2024-05-03 04:44:09 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 68 45 62 4b 70 46 67 31 68 70 25 32 46 4c 47 32 65 6d 47 67 63 6a 4a 69 79 68 30 25 32 46 42 58 58 57 68 42 4a 4a 66 4d 49 77 50 39 69 75 4f 58 75 51 4f 31 79 51 6f 57 4b 34 70 36 37 68 36 48 4c 52 51 6c 67 30 71 54 69 7a 43 78 55 7a 67 79 6c 4d 41 4a 72 6e 72 6e 35 54 6f 42 4d 30 65 42 4b 72 30 50 71 41 33 71 53 55 79 32 45 6b 52 46 30 6d 64 49 65 71 45 65 4a 44 37 6f 64 47 6f 67 5a 41 77 51 75 7a 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hEbKpFg1hp%2FLG2emGgcjJiyh0%2FBXXWhBJJfMIwP9iuOXuQO1yQoWK4p67h6HLRQlg0qTizCxUzgylMAJrnrn5ToBM0eBKr0PqA3qSUy2EkRF0mdIeqEeJD7odGogZAwQuzQ%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:09 UTC	842	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 32 20 31 36 63 30 20 38 2e 38 33 37 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 36 53 30 20 32 34 2e 38 33 37 20 30 20 31 36 20 37 2e 31 36 33 20 30 20 31 36 20 30 73 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 31 35 36 32 34 30 39 33 36 35 5f 5f 61 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 32 33 35 20 31 32 2e 32 33 35 63 30 20 31 2e 35 36 2d 2e 39 30 33 20 32 2e 38 32 34 2d 32 2e 30 31 37 20 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32 16c0 8.837-7.163 16-16 16S0 24.837 0 16 7.163 0 16 0s16 7.163 16 16Z" fill="url(#_1562409365__a)"/><path d="M12.235 12.235c0 1.56-.903 2.824-2.017

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49768	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	1035	OUT	GET /web/images/0483f2b648dcc986d01385062052ae1c.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:09 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:09 GMT Content-Type: image/svg+xml Content-Length: 368 Connection: close CF-Ray: 87dd9821cbcf238a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367459 Cache-Control: public, max-age=31556926 ETag: "0483f2b648dcc986d01385062052ae1c" Expires: Sat, 03 May 2025 10:32:55 GMT Last-Modified: Fri, 05 Jan 2024 01:59:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: pKKwB1VbPin77L5p89kVBmbGokHXM7WiOZtSgG4ZzNlFPfCYHVz5X9KjadkBz8OwU2FgMx7m9/0= x-amz-replication-status: COMPLETED x-amz-request-id: SBT43GNZ5ECZ2WWZ x-amz-server-side-encryption: AES256 x-amz-version-id: 9n6EP3FscgJ5AW31sdcdE0BNB9TJQZEp X-Content-Type-Options: nosniff
2024-05-03 04:44:09 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 65 5a 72 72 55 79 6b 6b 7a 30 6d 59 5a 6e 39 74 68 53 58 56 65 57 7a 70 58 58 58 73 31 36 63 76 63 62 42 46 42 45 4b 69 4f 6c 6b 66 68 43 56 48 75 62 4a 66 4e 46 43 50 4c 35 25 32 46 59 49 38 47 5a 45 66 39 6c 48 4e 6d 56 78 34 72 57 74 4f 32 49 59 46 72 4c 52 25 32 42 67 56 42 65 50 64 75 65 4e 68 64 53 62 47 66 6a 4d 35 25 32 46 6d 61 42 6b 35 6c 62 56 47 7a 78 78 39 6b 44 79 68 5a 51 57 71 34 6f 7a 6a 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZrrUykkz0mYZn9thSXVeWzpXXXs16cvcbBFBEKiOlkfhCVHubJfNFCPL5%2FYI8GZEf9lHNmVx4rWtO2IYFrLR%2BgVBePdueNhdSbGfjM5%2FmaBk5lbVGzxx9kDyhZQWq4ozjI%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:09 UTC	368	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 44 32 45 34 34 22 20 64 3d 22 4d 33 35 2e 38 38 35 20 31 31 2e 38 33 33 63 30 2d 35 2e 34 35 2d 34 2e 34 31 38 2d 39 2e 38 36 38 2d 39 2e 38 36 37 2d 39 2e 38 36 38 2d 33 2e 33 30 38 20 30 2d 36 2e 32 32 37 20 31 2e 36 33 33 2d 38 2e 30 31 38 20 34 2e 31 32 39 2d 31 2e 37 39 31 2d 32 2e 34 39 36 2d 34 2e 37 31 2d 34 2e 31 32 39 2d 38 2e 30 31 37 2d 34 2e 31 32 39 2d 35 2e 34 35 20 30 2d 39 2e 38 36 38 20 34 2e 34 31 37 2d 39 2e 38 36 38 20 39 2e 38 36 38 20 30 20 2e 37 37 32 2e 30 39 38 20 31 2e 35 32 2e 32 36 36 20 32 2e 32 34 31 43 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#DD2E44" d="M35.885 11.833c0-5.45-4.418-9.868-9.867-9.868-3.308 0-6.227 1.633-8.018 4.129-1.791-2.496-4.71-4.129-8.017-4.129-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49763	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	1035	OUT	GET /web/images/8777e8ed572c4159d71b08cca2972b15.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:09 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:09 GMT Content-Type: image/svg+xml Content-Length: 1525 Connection: close CF-Ray: 87dd9821be5c32f4-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367459 Cache-Control: public, max-age=31556926 ETag: "8777e8ed572c4159d71b08cca2972b15" Expires: Sat, 03 May 2025 10:32:55 GMT Last-Modified: Fri, 05 Jan 2024 01:59:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: oHfDZXcwOLZ8yygyXWprgXcEHl/hOBaWj/QS/sYT7lO/p+UUCvoAYcLjSBiDjSdtgA14LHuRzTo= x-amz-replication-status: COMPLETED x-amz-request-id: SBTBQ41XFRY2YQ9R x-amz-server-side-encryption: AES256 x-amz-version-id: Cpn1BEwfxrJaRmCwQkJzFzSPBqby1lLc X-Content-Type-Options: nosniff
2024-05-03 04:44:09 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 38 25 32 46 4b 6e 33 57 4e 52 46 56 7a 45 79 4d 49 66 7a 59 53 37 25 32 42 25 32 42 48 32 56 79 4b 6d 57 42 25 32 42 7a 51 48 45 43 57 77 51 44 63 35 25 32 46 63 4c 77 35 25 32 46 4f 66 75 66 70 4f 4b 39 73 46 49 65 50 76 30 56 59 77 72 76 55 65 59 4e 6a 32 4c 54 38 6f 79 77 64 31 56 34 68 6d 63 52 54 4b 39 53 50 77 58 6d 4c 49 43 71 51 64 69 79 75 35 64 6d 53 6a 73 37 79 76 41 43 67 46 6d 4d 69 4a 52 32 4f 71 6c 6e 70 63 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FKn3WNRFVzEyMIfzYS7%2B%2BH2VyKmWB%2BzQHECWwQDc5%2FcLw5%2FOfufpOK9sFIePv0VYwrvUeYNj2LT8oywd1V4hmcRTK9SPwXmLICqQdiyu5dmSjs7yvACgFmMiJR2OqlnpcA%3D"}],"group":"cf-nel","max_age":
2024-05-03 04:44:09 UTC	1193	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 23 46 46 43 42 34 43 22 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 37 2e 30 31 38 22 20 72 3d 22 31 37 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 36 35 34 37 31 42 22 20 64 3d 22 4d 31 34 2e 35 32 34 20 32 31 2e 30 33 36 61 2e 39 31 34 2e 39 31 34 20 30 20 30 20 31 2d 2e 33 31 32 2d 2e 34 36 34 2e 37 39 39 2e 37 39 39 20 30 20 30 20 31 20 2e 35 39 2d 31 2e 30 32 31 63 34 2e 35 32 38 2d 31 2e 30 32 31 20 37 2e 35 37 37 20 31 2e 33 36 33 20 37 2e 37 30 36 20 31 2e 34 36 35 2e 33 38 34 2e 33 30 36 2e 34 35 39 2e 38 34 35 2e 31 37 33 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036a.914.914 0 0 1-.312-.464.799.799 0 0 1 .59-1.021c4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173
2024-05-03 04:44:09 UTC	332	IN	Data Raw: 30 34 33 20 37 2e 38 34 33 2e 30 33 34 2e 34 33 33 2e 32 33 31 2e 36 30 38 2e 37 34 37 2e 33 39 31 20 31 2e 31 35 34 2d 2e 32 31 36 2e 34 30 35 2d 2e 37 34 2e 35 34 36 2d 31 2e 31 37 33 2e 33 31 38 2d 2e 31 32 33 2d 2e 30 36 33 2d 32 2e 38 33 32 2d 31 2e 34 33 32 2d 36 2e 32 37 38 2e 30 34 37 61 2e 39 31 35 2e 39 31 35 20 30 20 30 20 31 2d 2e 37 38 35 2d 2e 30 34 32 7a 6d 31 32 2e 31 33 35 20 33 2e 37 35 61 2e 39 32 34 2e 39 32 34 20 30 20 30 20 31 2d 2e 33 36 32 2d 2e 34 32 34 2e 38 2e 38 20 30 20 30 20 31 20 2e 34 36 38 2d 31 2e 30 38 34 63 34 2e 33 38 31 2d 31 2e 35 33 36 20 37 2e 36 38 35 2e 34 38 20 37 2e 38 32 33 2e 35 36 37 2e 34 31 35 2e 32 36 2e 35 35 35 2e 37 38 37 2e 33 31 32 20 31 2e 31 37 38 2d 2e 32 34 32 2e 33 39 2d 2e 37 37 36 2e 34 39 35 Data Ascii: 043 7.843.034.433.231.608.747.391 1.154-.216.405-.74.546-1.173.318-.123-.063-2.832-1.432-6.278.047a.915.915 0 0 1-.785-.042zm12.135 3.75a.924.924 0 0 1-.362-.424.8.8 0 0 1 .468-1.084c4.381-1.536 7.685.48 7.823.567.415.26.555.787.312 1.178-.242.39-.776.495

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49765	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:09 UTC	1035	OUT	GET /web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:09 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:09 GMT Content-Type: image/svg+xml Content-Length: 1404 Connection: close CF-Ray: 87dd9821bb0a8cc5-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353773 Cache-Control: public, max-age=31556926 ETag: "aba10b640f15bb01b8e5f0b804eefc7f" Expires: Sat, 03 May 2025 10:32:55 GMT Last-Modified: Mon, 08 Jan 2024 03:33:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: gmoAkuahGvd8SWUZ/ykbWyK2jCIoZFDD+zB34ZR+4V+htZVuhyaxDPx96G2IFrziM2L0zJD20jc= x-amz-replication-status: COMPLETED x-amz-request-id: SBT796YAEF9APNC7 x-amz-server-side-encryption: AES256 x-amz-version-id: 00A7HwucCkbuM5W3V_3qteAEbuOkxCO4 X-Content-Type-Options: nosniff
2024-05-03 04:44:09 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 59 44 42 34 6f 5a 72 48 32 48 66 6e 6e 79 42 53 42 51 76 71 31 53 57 25 32 42 42 57 6e 37 57 62 32 4e 76 33 68 48 4f 69 4d 73 71 38 71 77 4e 31 70 71 4e 42 6c 69 31 41 37 44 6b 71 25 32 46 6a 76 48 41 52 50 44 6b 76 25 32 46 39 43 6d 25 32 46 4a 34 68 70 78 4b 7a 58 71 6e 58 63 35 47 45 64 73 44 75 76 6f 6d 42 4a 52 36 53 57 37 43 69 6a 4f 46 25 32 46 6c 44 50 35 7a 6b 53 46 41 45 73 6b 72 74 45 4c 37 51 4e 4a 43 54 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YDB4oZrH2HfnnyBSBQvq1SW%2BBWn7Wb2Nv3hHOiMsq8qwN1pqNBli1A7Dkq%2FjvHARPDkv%2F9Cm%2FJ4hpxKzXqnXc5GEdsDuvomBJR6SW7CijOF%2FlDP5zkSFAEskrtEL7QNJCTU%3D"}],"group":"cf-nel","max_age":60
2024-05-03 04:44:09 UTC	1195	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 44 42 35 45 22 20 64 3d 22 4d 33 34 2e 39 35 36 20 31 37 2e 39 31 36 63 30 2d 2e 35 30 33 2d 2e 31 32 2d 2e 39 37 35 2d 2e 33 32 31 2d 31 2e 34 30 34 2d 31 2e 33 34 31 2d 34 2e 33 32 36 2d 37 2e 36 31 39 2d 34 2e 30 31 2d 31 36 2e 35 34 39 2d 34 2e 32 32 31 2d 31 2e 34 39 33 2d 2e 30 33 35 2d 2e 36 33 39 2d 31 2e 37 39 38 2d 2e 31 31 35 2d 35 2e 36 36 38 2e 33 34 31 2d 32 2e 35 31 37 2d 31 2e 32 38 32 2d 36 2e 33 38 32 2d 34 2e 30 31 2d 36 2e 33 38 32 2d 34 2e 34 39 38 20 30 2d 2e 31 37 31 20 33 2e 35 34 38 2d 34 2e 31 34 38 20 31 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFDB5E" d="M34.956 17.916c0-.503-.12-.975-.321-1.404-1.341-4.326-7.619-4.01-16.549-4.221-1.493-.035-.639-1.798-.115-5.668.341-2.517-1.282-6.382-4.01-6.382-4.498 0-.171 3.548-4.148 12
2024-05-03 04:44:09 UTC	209	IN	Data Raw: 37 35 20 30 20 31 20 30 2d 31 2e 35 30 34 2d 2e 38 39 34 20 31 2e 35 37 32 20 31 2e 35 37 32 20 30 20 30 20 31 2d 31 2e 33 36 33 2e 37 37 37 68 2d 37 2e 30 36 33 61 31 2e 35 38 35 20 31 2e 35 38 35 20 30 20 30 20 31 20 30 2d 33 2e 31 36 37 68 38 2e 30 39 31 61 33 2e 33 35 20 33 2e 33 35 20 30 20 30 20 30 20 32 2e 38 36 37 2d 31 2e 36 33 32 2e 38 37 35 2e 38 37 35 20 30 20 30 20 30 2d 31 2e 35 30 34 2d 2e 38 39 34 20 31 2e 35 37 33 20 31 2e 35 37 33 20 30 20 30 20 31 2d 31 2e 33 36 33 2e 37 37 36 48 32 33 2e 30 32 61 31 2e 35 38 35 20 31 2e 35 38 35 20 30 20 30 20 31 20 30 2d 33 2e 31 36 37 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 75 0 1 0-1.504-.894 1.572 1.572 0 0 1-1.363.777h-7.063a1.585 1.585 0 0 1 0-3.167h8.091a3.35 3.35 0 0 0 2.867-1.632.875.875 0 0 0-1.504-.894 1.573 1.573 0 0 1-1.363.776H23.02a1.585 1.585 0 0 1 0-3.167z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49771	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	989	OUT	GET /_fb/s/31ed695fc889d00593852e4078080fe8.css HTTP/1.1 Host: font-public.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ
2024-05-03 04:44:10 UTC	1346	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: text/css Content-Length: 35018 Connection: close CF-Ray: 87dd98233fa37cfc-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353786 Cache-Control: max-age=31536000 ETag: "46d87b5a7661e0529b44aca65fbdef86" Expires: Sat, 03 May 2025 04:44:10 GMT Last-Modified: Mon, 13 Mar 2023 08:11:23 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_font-public Timing-Allow-Origin: https://www.canva.com x-amz-id-2: nRkPL9pnas+5bf7e/I4zDfACV5J6P5vf/bDTABAocTk8MGjJUIvVvY+Lz/B/1HQQ0I+HQ+n55Dw= x-amz-replication-status: COMPLETED x-amz-request-id: SBT1KHP5S9RVFA2N x-amz-server-side-encryption: AES256 x-amz-version-id: vyr5_vt3y3tjZ_s2yxmwfnXM1Qv8Xk8f X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PC0OjWf5tByczs%2FBeUXRDKyErwVKcauoR9gJ7klvUAyMWQq7gzKlTO%2FqfwFCZ7j4Ug6%2BP%2BBc4%2BdZAViPvFVjS5l3bxakp%2BWIvmZA3NwKTJJkmu%2FhW%2BPkv%2FluhgC3FoaobxBZnekSYA%3D%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:10 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 66 66 66 64 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 Data Ascii: @font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 400; font-style: normal; src: url(https://font-public.canva.com/_fb/0/05.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) format("woff"), ur
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e Data Ascii: t-weight: 100; font-style: normal; src: url(https://font-public.canva.com/_fb/0/05.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) format("woff"), url(https://font-public.canva.com/_fb/0/05.ttf) format("truetype")}@font-face {un
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 66 66 66 64 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b Data Ascii: 5.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) format("woff"), url(https://font-public.canva.com/_fb/0/05.ttf) format("truetype")}@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 300;
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 32 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 66 66 66 64 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 33 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 Data Ascii: ("woff"), url(https://font-public.canva.com/_fb/0/02.ttf) format("truetype")}@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 600; font-style: italic; src: url(https://font-public.canva.com/_fb/0/03.woff2) forma
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 66 66 66 64 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 33 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 33 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 Data Ascii: ont-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 900; font-style: italic; src: url(https://font-public.canva.com/_fb/0/03.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/03.woff) format("woff"), url(
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 37 45 2d 71 75 61 64 72 61 74 69 63 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 37 45 2e 6f 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 32 31 39 30 2d 32 62 31 61 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 66 6f 6e 74 2d Data Ascii: off"), url(https://font-public.canva.com/_fb/0/7E-quadratic.woff) format("woff"), url(https://font-public.canva.com/_fb/0/7E.otf) format("truetype")}@font-face {unicode-range: U+2190-2b1a; font-family: "_fb_"; font-display: swap; font-weight: 700; font-
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 31 36 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 31 36 2d 71 75 61 64 72 61 74 69 63 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 31 36 2e 6f 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b Data Ascii: format("woff2"), url(https://font-public.canva.com/_fb/0/16.woff) format("woff"), url(https://font-public.canva.com/_fb/0/16-quadratic.woff) format("woff"), url(https://font-public.canva.com/_fb/0/16.otf) format("truetype")}@font-face {unicode-range: U+
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 36 31 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 36 31 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 36 31 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f Data Ascii: eight: 400; font-style: normal; src: url(https://font-public.canva.com/_fb/0/61.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/61.woff) format("woff"), url(https://font-public.canva.com/_fb/0/61.ttf) format("truetype")}@font-face {unico
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 32 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 32 34 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 32 34 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 Data Ascii: font-style: normal; src: url(https://font-public.canva.com/_fb/0/24.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/24.woff) format("woff"), url(https://font-public.canva.com/_fb/0/24.ttf) format("truetype")}@font-face {unicode-range: U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49773	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	1097	OUT	GET /web/images/749002f5a04f784cc1802d77d2fed423.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:10 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: image/svg+xml Content-Length: 2725 Connection: close CF-Ray: 87dd98253ac88c1d-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353774 Cache-Control: public, max-age=31556926 ETag: "749002f5a04f784cc1802d77d2fed423" Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Mon, 08 Jan 2024 03:33:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 5cdE2rDmvSJ10MEcpbd/FxBkcLlqwo3IRpldJqG43b0+0md7P8X3k2RvZObu12UXWiVTXFo3jqk= x-amz-replication-status: COMPLETED x-amz-request-id: SBT9293K5TT9YXKF x-amz-server-side-encryption: AES256 x-amz-version-id: CYjzPWbPE89Uh.x_PjEnj_d_.iZJD1mL X-Content-Type-Options: nosniff
2024-05-03 04:44:10 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 59 6f 4e 4e 78 61 39 53 36 43 49 70 68 44 36 37 35 64 43 6a 52 32 25 32 42 43 37 4d 74 69 64 63 44 4a 6f 5a 74 6e 4f 74 6b 78 35 56 44 68 49 69 46 6d 46 52 35 78 36 38 50 50 74 56 47 39 74 46 67 73 33 70 78 44 74 74 76 59 6e 30 75 76 67 50 50 46 76 32 6e 54 4a 73 52 48 70 43 25 32 42 25 32 46 64 35 52 63 7a 76 55 6f 77 6b 35 49 47 67 47 38 6a 74 69 4c 59 68 70 4e 5a 4b 51 77 56 6d 65 52 42 25 32 42 47 6c 77 51 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YoNNxa9S6CIphD675dCjR2%2BC7MtidcDJoZtnOtkx5VDhIiFmFR5x68PPtVG9tFgs3pxDttvYn0uvgPPFv2nTJsRHpC%2B%2Fd5RczvUowk5IGgG8jtiLYhpNZKQwVmeRB%2BGlwQc%3D"}],"group":"cf-nel","max_age":6048
2024-05-03 04:44:10 UTC	1197	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 38 30 38 20 33 31 2e 39 32 31 63 30 20 2e 39 36 33 2e 32 35 32 20 31 2e 36 31 32 2e 38 39 35 20 31 2e 36 31 32 20 31 2e 31 30 32 20 30 20 32 2e 31 38 39 2d 32 2e 39 39 35 20 32 2e 31 38 39 2d 34 2e 36 39 32 20 30 2d 2e 37 36 32 2d 2e 32 30 32 2d 31 2e 33 38 37 2d 2e 37 32 39 2d 31 2e 33 38 37 2d 31 2e 32 31 31 20 30 2d 32 2e 33 35 35 20 32 2e 37 39 37 2d 32 2e 33 35 35 20 34 2e 34 36 37 7a 6d 32 32 2e 33 34 37 2d 35 2e 30 31 31 63 30 20 Data Ascii: <svg width="60" height="60" viewBox="0 0 60 60" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.808 31.921c0 .963.252 1.612.895 1.612 1.102 0 2.189-2.995 2.189-4.692 0-.762-.202-1.387-.729-1.387-1.211 0-2.355 2.797-2.355 4.467zm22.347-5.011c0
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 2e 38 30 31 2d 32 2e 36 31 35 20 31 2e 38 30 31 2d 2e 38 36 38 20 30 2d 31 2e 35 33 35 2d 2e 35 36 39 2d 31 2e 37 38 37 2d 31 2e 37 32 37 2d 2e 36 35 34 20 31 2e 31 30 38 2d 31 2e 35 31 20 31 2e 37 33 36 2d 32 2e 35 36 38 20 31 2e 37 33 36 2d 31 2e 31 38 38 20 30 2d 31 2e 39 36 37 2d 2e 38 39 35 2d 32 2e 30 38 38 2d 32 2e 36 31 36 2d 31 2e 30 37 38 20 32 2e 30 37 37 2d 33 2e 30 37 35 20 33 2e 38 35 31 2d 35 2e 33 35 39 20 33 2e 38 35 31 43 38 2e 39 33 37 20 33 36 2e 30 37 34 20 37 20 33 33 2e 37 30 38 20 37 20 32 39 2e 37 38 33 20 37 20 32 34 2e 38 35 20 31 30 2e 38 35 20 32 31 20 31 34 2e 36 37 35 20 32 31 63 32 2e 33 31 36 20 30 20 33 2e 36 32 33 20 31 2e 31 38 32 20 33 2e 36 32 33 20 32 2e 37 39 33 20 30 20 31 2e 36 31 32 2d 31 2e 31 38 32 20 32 2e 37 Data Ascii: .801-2.615 1.801-.868 0-1.535-.569-1.787-1.727-.654 1.108-1.51 1.736-2.568 1.736-1.188 0-1.967-.895-2.088-2.616-1.078 2.077-3.075 3.851-5.359 3.851C8.937 36.074 7 33.708 7 29.783 7 24.85 10.85 21 14.675 21c2.316 0 3.623 1.182 3.623 2.793 0 1.612-1.182 2.7
2024-05-03 04:44:10 UTC	159	IN	Data Raw: 31 2e 32 33 33 2e 35 31 33 20 30 20 2e 37 32 2e 31 38 37 2e 37 32 2e 35 36 36 61 31 2e 34 31 37 20 31 2e 34 31 37 20 30 20 30 20 31 2d 2e 30 38 2e 34 31 38 63 2d 2e 34 30 33 20 31 2e 33 30 33 2d 31 2e 32 31 32 20 34 2e 31 35 39 2d 31 2e 32 31 32 20 35 2e 35 30 33 20 30 20 2e 35 34 2e 31 32 35 2e 38 38 33 2e 34 33 33 2e 38 38 33 2e 35 33 36 20 30 20 31 2e 31 38 38 2d 2e 38 32 20 31 2e 36 37 2d 32 2e 31 39 35 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 1.233.513 0 .72.187.72.566a1.417 1.417 0 0 1-.08.418c-.403 1.303-1.212 4.159-1.212 5.503 0 .54.125.883.433.883.536 0 1.188-.82 1.67-2.195z" fill="#fff"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49774	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	587	OUT	GET /web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2 HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:10 UTC	1353	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: font/woff2 Content-Length: 38848 Connection: close CF-Ray: 87dd98253c1c19c7-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 4353781 Cache-Control: public, max-age=31556926 ETag: "cff149ee1e9d2be50ac77bcd86769d05" Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Tue, 12 Mar 2024 05:52:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 13 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Lxze3chFKJJKiw90rkhaxVloLKz1UIzlN6RAR5h6vecuC4fadS1Qm8bVRN/tiew70uxqxAWIVUg= x-amz-replication-status: COMPLETED x-amz-request-id: 4CRCKBDFEQ9FQN0E x-amz-server-side-encryption: AES256 x-amz-version-id: 179KzEA6JvLCtYhDYLoQ53jVGjTgUqwh X-Content-Type-Options: nosniff
2024-05-03 04:44:10 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 33 7a 57 54 39 44 30 5f 64 78 69 47 42 68 6e 52 61 6f 79 45 4d 35 47 35 57 4c 33 5f 55 75 35 5f 63 2e 70 4b 61 37 55 31 33 58 55 2d 31 37 31 34 37 31 31 34 35 30 2d 31 2e 30 2e 31 2e 31 2d 4f 77 61 72 62 39 44 69 79 7a 37 6a 7a 74 5f 52 65 31 6d 67 41 74 6e 39 38 61 67 72 73 63 45 64 71 52 33 51 31 64 50 37 6e 78 71 4f 46 44 79 39 31 49 46 39 53 6b 50 38 77 44 69 41 5a 61 69 57 50 5f 72 76 4a 32 69 63 63 46 34 70 4b 76 51 55 2e 42 37 34 6b 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=3zWT9D0_dxiGBhnRaoyEM5G5WL3_Uu5_c.pKa7U13XU-1714711450-1.0.1.1-Owarb9Diyz7jzt_Re1mgAtn98agrscEdqR3Q1dP7nxqOFDy91IF9SkP8wDiAZaiWP_rvJ2iccF4pKvQU.B74kA; path=/; expires=Fri, 03-May-24 05:14:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:10 UTC	610	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 97 c0 00 13 00 00 00 01 25 28 00 00 97 4c 00 01 02 8f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 11 1b 81 91 6a 1c 90 18 3f 48 56 41 52 88 5e 3f 4d 56 41 52 5a 06 60 3f 53 54 41 54 24 27 28 00 83 4e 2f 81 00 0a ff 44 e6 7c 30 81 fc 00 01 36 02 24 03 87 7c 0b 84 00 00 04 20 05 85 3e 07 20 5b 94 15 71 80 a1 57 1d 8c db 06 f0 73 67 74 59 7f 8d 8a b1 0b 43 cf 6d e3 c8 58 3d 65 9d 8d 88 60 e3 00 08 7e 39 cc f8 ff 3f 2d e9 90 a1 09 ee 01 68 5b 55 e7 74 bb 2d 88 5c 14 91 51 de 7a 6b 6d d4 c8 2c cf d9 6b 16 cd b1 52 50 34 da d0 b1 a3 25 5a 23 5f 31 71 08 11 19 48 a7 10 f9 41 87 50 cd 54 0e 73 23 0f b8 51 e8 11 11 3b cf d3 0f f1 84 0c d7 5b a6 dc 17 48 7c aa 85 43 08 b4 c0 ce 69 0c a1 e3 ec 41 57 ba e5 fe b9 56 Data Ascii: wOF2%(Lj?HVAR^?MVARZ`?STAT$'(N/D\|06$\| > [qWsgtYCmX=e`~9?-h[Ut-\Qzkm,kRP4%Z#_1qHAPTs#Q;[H\|CiAWV
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 38 b5 f6 44 ed 45 5c 56 c4 28 35 2a 81 00 89 4f 32 f3 d3 37 e7 ff 39 33 b3 3a d9 6c 36 0a 24 84 42 c5 04 b8 f7 3e f7 5f ff f8 d6 39 bb a4 46 45 1c af a4 a5 9e aa ca ff e8 56 fd c0 cc 0a 8c b8 06 d1 c4 31 09 84 84 30 41 6c 8d 35 67 3d ec 99 b4 f7 ae a8 bc 3a 2f ba ab d7 4c 08 a5 33 e9 b5 62 0f 02 13 a0 fd fc 37 e7 ff af 08 12 b4 f4 20 b7 e5 aa d9 13 fd fa 6a c8 15 ff 75 ef 11 a3 46 29 84 86 84 10 9f c8 98 65 b2 67 8f 58 66 22 43 b8 b2 65 95 0d d3 33 3d a4 9f 23 a2 7f c3 79 8b c3 ff 77 fc ef 1e 49 fb 40 86 4f 10 3e 10 4a 0b 24 18 8d ba b9 ba 88 2e f7 7b 53 df 56 02 e0 93 65 38 42 2e 1d 20 15 22 4a 39 ce 11 44 44 14 22 32 37 6b 22 56 44 ac 88 28 c2 13 d8 7d ce fa 00 4c 48 54 ed fb bb 61 e5 36 2d ac ea a4 88 ff 72 a4 89 6d 7e b2 2e c0 01 81 16 b7 f9 cb 7e ca Data Ascii: 8DE\V(5*O2793:l6$B>_9FEV10Al5g=:/L3b7 juF)egXf"Ce3=#ywI@O>J$.{SVe8B. "J9DD"27k"VD(}LHTa6-rm~.~
2024-05-03 04:44:10 UTC	931	IN	Data Raw: d7 67 ef 7b 6d b6 29 76 3a 99 eb cf cf a4 3b b4 ba 3d 83 da 98 d4 31 5d c4 b4 8a 59 19 bb 8b 78 0b a6 e3 bd 91 7e 19 1c 90 dc 5d 24 6e 91 0c 76 c6 a6 98 b0 72 e2 9d 2e fa 9b 93 57 af 65 30 a6 11 d1 2a 9f 8e 8e e6 a4 9e cb 6c 6e 85 63 56 0b 87 3a ee 62 f1 b6 c3 c5 db 8e 76 56 f7 53 12 7b e6 72 c7 4d 76 5c ee bd 94 0a 06 49 00 a3 20 9f ad b0 d5 4a 5a df 70 d6 af b6 ef 5e ed bc f2 88 f1 ef 5b d8 ea 76 72 71 bb b0 77 bb bc 7d bb 12 0a c5 9d db 4b 5b 77 13 8f 5f a3 c6 0a 7d e7 1a b3 be cb fd 49 29 5e dc cf ac 3f 9f f9 ff 17 1c 2f c7 85 ff 7d 11 59 12 d2 12 b1 de cc f0 55 73 3f 8c ad 45 d6 35 af 4b bb ce 89 58 49 dd 18 eb 9b 13 7f ad 4f ac e9 8b c8 73 b3 10 d1 99 d7 7a ce 9e ba 37 7c be 7a fb db 95 10 10 02 00 82 75 d4 57 a3 34 a1 99 d3 04 08 00 4d 6d 06 bc d9 Data Ascii: g{m)v:;=1]Yx~]$nvr.We0*lncV:bvVS{rMv\I JZp^[vrqw}K[w_}I)^?/}YUs?E5KXIOsz7\|zuW4Mm
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 0f d8 91 22 72 4f 56 d9 55 69 e8 c3 83 19 03 c7 e5 e0 bc 29 e5 73 ac 31 e4 37 fc 50 00 20 bc 0d 22 1e fc 6f 75 a5 e2 88 2a 6f 77 16 2f 2e 00 39 94 a0 f2 cb 65 00 00 32 d9 e2 8d 10 cf 61 b0 c4 91 9a 10 9c a5 54 77 60 c6 e8 5f c4 0f ff fa a3 54 6e 1c 6e e8 ed f9 9f 77 0c 0f 02 44 5e 71 84 f2 2a 26 47 a1 7c 75 6f ec 29 6f 41 7c 4b b2 9f 67 99 74 f1 a4 55 31 82 b4 9e de 2c 86 95 76 1a 00 e5 19 00 c0 76 4a 19 aa 61 f7 fa d7 f4 50 4f 16 16 08 10 7e 8b bb f2 2c 5d c8 07 84 b2 44 80 e1 f6 66 37 a6 a1 01 3c c4 0f f3 78 4e bf be 29 95 98 cf f0 94 06 c2 be e8 51 32 20 0d 7d 28 5f 98 ac 2c c7 0e cb 29 92 00 c0 c2 74 bf af 07 e1 ef 9b f4 bb 6e 21 5c 3e 80 08 29 43 9e 48 d6 aa 63 60 d9 6d 20 8a 26 3e 6b 0c e3 d7 99 29 15 43 16 6b 71 4a 0c fb 39 13 f9 a6 49 33 cd a6 54 Data Ascii: "rOVUi)s17P "ouow/.9e2aTw`_TnnwD^q&G\|uo)oA\|KgtU1,vvJaPO~,]Df7<xN)Q2 }(_,)tn!\>)CHc`m &>k)CkqJ9I3T
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 78 16 b5 93 44 e3 3a fb 9a aa d8 54 f5 c3 d1 c8 6b 8f 81 ed 2e 8e 08 d9 be c8 af 33 07 bb e0 1f 1f 5c b6 3c 83 5d 0a 82 b1 82 2c 41 e5 87 37 79 91 06 db 91 59 f7 69 ca 5d 0d 5d 2f 6a e8 a3 35 ce 97 f7 4c 87 9e bf 3e cc e6 39 8e f6 f6 fa 4b d9 92 2b da 4a 2a 41 f2 f8 b9 bd d7 ed 82 a1 e6 75 7b f2 2a e2 79 d5 cb d9 8a d6 74 15 1a c3 6c 43 a5 06 72 5d 65 28 f8 fb 6f 3c ee 57 7d 62 49 87 ef a2 cf f3 f7 30 18 78 1a 59 ee 34 ef a2 43 db 9b 67 dd 0d cb 99 1b 94 9e bc f3 35 0a 33 4b 8d 6d b9 0f f7 60 da b0 65 8d 5d bf db 2d d3 1a 04 2c d9 fb 57 ff 33 59 6d ae 3d 43 70 b0 83 7a da ae 1f 6e e1 b6 cc df dd c1 5a be a3 a4 a6 82 d2 64 11 61 ec 2a 08 11 79 22 76 e6 e9 6c 91 8b b6 c8 64 30 b7 82 90 77 c6 ee c7 fa 95 b4 f1 e4 a8 23 79 36 43 59 63 1e de 7b ef 09 7a a6 57 Data Ascii: xD:Tk.3\<],A7yYi]]/j5L>9K+JAu{ytlCr]e(o<W}bI0xY4Cg53Km`e]-,W3Ym=CpznZda*y"vld0w#y6CYc{zW
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: fc a8 36 16 27 4d 54 2e f8 45 40 9b bc e3 0c c6 8f 38 ab f2 78 4f af fe 23 54 91 df 23 a8 73 c3 91 23 33 32 74 be 53 48 fc 37 f5 1b 38 7e a2 3e 67 94 be de 89 2d 7d 8d 39 4c 6b cf 06 c1 55 8c 51 9d 59 44 fd 9e e5 c9 6b fa 9a 82 de 63 ec 42 a6 1a 9c 40 52 ff cf 31 32 18 ff 8f 22 5a 15 fc ec 03 e2 45 d2 0f 27 2a 5e 5c 53 d0 03 4a 78 a7 15 66 70 5f 1b 01 d1 2f c7 37 71 ef 22 31 1b 58 da 93 1e e9 19 81 6a 5d 46 05 b7 f0 ef 1f fa 5f f2 0c dd 0e 3d 7d e1 4b a8 ce 64 9b 9b a2 83 80 d3 b2 98 48 4d 15 d2 4a 03 82 f7 a6 49 31 50 e5 a1 9a 44 d2 8b 93 e3 99 f6 3b 57 42 20 44 31 02 b3 1e 03 2e a9 db 71 4d 87 42 6b 92 58 94 f6 da 5c 86 1c 41 12 20 37 22 1f e3 fb df ab 61 c3 44 10 2e 00 1a 1f 97 90 14 4d c6 8f 97 00 1a 3e 82 84 92 0b 17 25 50 b4 68 ac 38 71 b4 12 65 d0 Data Ascii: 6'MT.E@8xO#T#s#32tSH78~>g-}9LkUQYDkcB@R12"ZE'*^\SJxfp_/7q"1Xj]F_=}KdHMJI1PD;WB D1.qMBkX\A 7"aD.M>%Ph8qe
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: af cd 93 55 88 2b 12 61 3d 82 d4 d4 83 a9 3c 5a 48 c2 22 8d e7 14 51 a7 91 ac 4b db 65 25 2e e2 5b 2e a2 6d 85 e2 c4 51 67 47 d6 e4 39 04 fe e8 ea 3e 11 a6 7e d1 29 09 02 91 f6 29 55 a2 4c f2 e0 06 a6 9f 52 a7 aa 5e 9b a9 1a 79 ba 7a 11 07 27 b6 de 77 da ca ab da 6f 1e 58 b6 5b 55 5f 17 b4 2e 1e 9b ce 3a a9 37 44 1e 37 5a 60 8e b8 54 c5 0a 59 46 ad 20 45 df 8f 53 5a 66 d4 b7 b8 74 ce 13 bd 49 c7 d1 eb dc d2 84 ae e8 6b 6e 96 84 90 f9 0d 68 f8 32 9e 41 b6 ad 8c 8a 54 49 fd 51 aa 90 e9 7d aa bf 56 c6 34 13 a7 4a 69 a2 5a 95 4a 55 ed 63 de 89 e8 65 57 cc 46 8f 37 72 50 a8 65 24 49 d2 2a f3 76 ba 37 ea 16 3c 70 e1 3a 36 9c 57 1e d6 5c 4c 65 f3 ce 79 34 90 ea be 74 86 ad 06 99 aa 45 26 84 e8 b7 02 bc 53 e7 83 4c 09 da 29 09 7d 6a 84 58 d7 a5 e2 b2 2d 29 96 75 Data Ascii: U+a=<ZH"QKe%.[.mQgG9>~))ULR^yz'woX[U_.:7D7Z`TYF ESZftIknh2ATIQ}V4JiZJUceWF7rPe$I*v7<p:6W\Ley4tE&SL)}jX-)u
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: d3 80 42 23 67 4a 4c 7a 42 ee 2a 91 2e 8d f2 3a fe c8 22 0b 40 55 ca 86 60 f6 2e 94 91 50 b2 86 2e 11 f3 46 0e 25 39 6e 5e 9c 6d 4c 88 4d 28 ac 35 f4 65 70 49 84 44 48 a4 15 ab 00 ba 9d ae 58 12 0d a1 36 dd a4 8e 5e c6 c9 9c 14 36 a1 04 f8 8e c8 62 c1 b1 a0 12 0f 29 df 49 c4 93 54 0c 82 9c 4a d1 b0 b1 63 5d 52 29 4e 69 28 6c 94 cb 25 69 6d 54 64 26 b8 f7 5c 93 70 ea 19 5e 88 89 d1 fe ce 9f 3d 65 c2 a4 d7 5e f9 bf 7f fc 0b 29 54 56 30 58 36 1a 14 54 95 14 07 2c 94 03 a6 60 53 ee 1a 90 49 c0 c0 76 46 92 0f 1c 65 4e 83 e9 c3 fb b9 20 e9 e6 32 14 80 d4 77 9e 6c 00 45 00 96 01 3c 09 80 17 dd 72 94 21 07 ba c2 f7 06 c0 1f 2e 76 e7 a5 ab a4 62 6e 40 08 3b 9f a1 84 9f f7 52 f5 5e d8 01 6b 00 6b c3 57 9a 80 2e 82 78 96 ee 90 24 2a 47 65 37 8e f5 e4 56 37 47 be 1d Data Ascii: B#gJLzB.:"@U`.P.F%9n^mLM(5epIDHX6^6b)ITJc]R)Ni(l%imTd&\p^=e^)TV0X6T,`SIvFeN 2wlE<r!.vbn@;R^kkW.x$Ge7V7G
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: df ef e3 7b 01 fd 51 2b 92 00 c7 10 8c 46 a0 fe 33 85 12 04 7a 26 23 0c 9c 9c b2 03 e8 c5 dc 07 a2 2b ce 4b 44 0f 62 b8 3f e1 4e 61 90 75 84 e0 ea 84 10 00 01 d5 be 05 29 3f d5 8e 14 a2 4c 49 67 9c d2 8c 81 79 ea 52 54 43 d5 54 13 6d a0 30 6f 8c 44 16 25 b2 d4 a8 fa ee 95 9a 11 41 a0 67 b3 b2 68 55 58 57 6e f6 8c 32 89 65 8d 31 61 71 d9 8d bc a0 a0 24 20 12 52 23 19 5f a0 42 16 cf c6 d1 8f d0 9c b7 33 d7 8f 00 b1 82 d2 d0 49 b0 c4 82 28 b9 74 d2 14 df d0 29 26 3c 5f cd 81 7c 21 2c 37 15 09 a6 b3 b3 1b 1a 70 0e b4 70 0e 77 9e 74 a7 fb 63 bb d2 af a0 7e 52 ae 26 f4 80 21 dc 73 84 31 f3 cc 4c 96 0c 2f 34 02 91 e6 e5 4e e9 f9 fc ed 6a e6 54 b1 02 a6 cd 1f 37 db 75 e8 e9 19 a9 2f 6e b6 6f cc a9 b0 84 42 42 1c e4 ad 01 ca b3 2c ef f0 b2 2d 35 e6 52 ca da 8b ff Data Ascii: {Q+F3z&#+KDb?Nau)?LIgyRTCTm0oD%AghUXWn2e1aq$ R#_B3I(t)&<_\|!,7ppwtc~R&!s1L/4NjT7u/noBB,-5R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49772	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	617	OUT	GET /web/images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.canva.com/web/2a50bb2d56bddf16.ltr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:10 UTC	1351	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: font/woff Content-Length: 1136 Connection: close CF-Ray: 87dd9825390419d3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 4363288 Cache-Control: public, max-age=31556926 ETag: "b46630e470f4040eba7033cf2435edce" Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Mon, 08 Jan 2024 03:33:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: O5TxyLBriFj8oc6PTzwp4wGecssL9clv8HeVuFMJ/RwipNOTmK/guy/n+pI5NOzXY1qLFxkZEes= x-amz-replication-status: COMPLETED x-amz-request-id: SBTE23HY1Y1T7PNH x-amz-server-side-encryption: AES256 x-amz-version-id: ff3wNg7x9OQgrhQMAfdw5LdHbyZrZJxi X-Content-Type-Options: nosniff
2024-05-03 04:44:10 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 64 78 4f 52 73 42 33 54 31 38 59 6f 4c 69 35 61 58 42 69 77 72 54 45 52 42 6f 52 66 62 4b 48 55 33 4e 73 71 32 53 4a 56 47 59 49 2d 31 37 31 34 37 31 31 34 35 30 2d 31 2e 30 2e 31 2e 31 2d 35 59 5f 4e 50 41 47 46 79 70 6d 5f 58 6d 79 4f 79 4b 50 70 34 77 64 66 35 33 69 58 6a 69 64 59 33 6b 36 6d 74 5a 55 76 6f 64 31 4d 48 77 6e 61 49 34 2e 35 30 44 62 70 39 69 6b 64 6f 34 4c 61 43 56 61 56 77 4a 4b 76 61 32 41 32 44 64 7a 4b 48 2e 65 2e 38 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=dxORsB3T18YoLi5aXBiwrTERBoRfbKHU3Nsq2SJVGYI-1714711450-1.0.1.1-5Y_NPAGFypm_XmyOyKPp4wdf53iXjidY3k6mtZUvod1MHwnaI4.50Dbp9ikdo4LaCVaVwJKva2A2DdzKH.e.8Q; path=/; expires=Fri, 03-May-24 05:14:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:10 UTC	612	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 04 70 00 0d 00 00 00 00 06 2c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 03 18 00 00 00 eb 00 00 00 f0 03 8b 26 a6 46 46 54 4d 00 00 04 28 00 00 00 1c 00 00 00 1c 8c c0 d0 84 47 44 45 46 00 00 04 04 00 00 00 1a 00 00 00 1e 00 27 00 08 4f 53 2f 32 00 00 01 8c 00 00 00 47 00 00 00 60 58 80 62 a3 63 6d 61 70 00 00 02 c8 00 00 00 37 00 00 01 42 00 0d 02 e8 68 65 61 64 00 00 01 30 00 00 00 33 00 00 00 36 13 17 ee 8d 68 68 65 61 00 00 01 64 00 00 00 1d 00 00 00 24 03 ae 01 6f 68 6d 74 78 00 00 04 20 00 00 00 08 00 00 00 08 01 48 00 48 6d 61 78 70 00 00 01 84 00 00 00 06 00 00 00 06 00 02 50 00 6e 61 6d 65 00 00 01 d4 00 00 00 f1 00 00 01 c8 9d d1 72 b4 70 6f 73 74 00 00 03 00 00 00 00 Data Ascii: wOFFOTTOp,CFF &FFTM(GDEF'OS/2G`Xbcmap7Bhead036hhead$ohmtx HHmaxpPnamerpost
2024-05-03 04:44:10 UTC	524	IN	Data Raw: f7 cc 5b 9c a9 f0 ec 63 1f da 73 ef 09 3b 8c 18 a8 4e 31 52 11 68 ed 50 41 18 b7 7c b7 ae 73 dd f1 96 5c ae 64 14 7e 42 43 ab 71 98 76 63 6c 83 75 95 d8 ad fd 9f 4e 76 ae 6c 4a 27 75 73 6f cf 03 f3 88 13 fb 69 2f 4b ef e4 5e fd c6 b4 13 0e 21 9e ba 71 b0 22 75 25 22 f6 8e e1 0f c6 b9 41 69 00 00 00 78 9c 63 60 60 60 66 80 60 19 06 46 06 10 b0 01 f2 18 c1 7c 16 06 05 20 cd 02 84 20 be e3 ff ff 10 f2 ff 01 a8 4a 06 46 36 06 18 93 7c 40 b1 01 03 0b 00 7d bb 06 f4 00 78 9c 63 60 66 00 83 ff cd 0c 46 40 8a 91 01 0d 00 00 28 55 01 b9 00 00 78 9c 45 8c 21 4f c3 40 1c 47 7f ff b6 5c 93 72 6c d0 a3 0d 81 c3 2c 24 24 48 14 5f a0 0a 8d 6d 32 c8 b2 2c 99 20 64 a1 82 13 f3 07 16 73 82 4c 22 97 54 20 76 9f 60 66 0a bd 6f d1 5b 3b 18 c3 c0 53 cf bc 47 08 02 10 51 74 d7 Data Ascii: [cs;N1RhPA\|s\d~BCqvcluNvlJ'usoi/K^!q"u%"Aixc```f`F\| JF6\|@}xc`fF@(UxE!O@G\rl,$$H_m2, dsL"T v`fo[;SGQt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49775	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	647	OUT	GET /web/images/87e22a62965f141aa08e93699b0b3527.jpg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:10 UTC	1360	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: image/jpeg Content-Length: 14135 Connection: close CF-Ray: 87dd98253d7343e8-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 4363287 Cache-Control: public, max-age=31556926 ETag: "87e22a62965f141aa08e93699b0b3527" Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Mon, 08 Jan 2024 03:33:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: degrade=85, origSize=21932, status=vary_header_present content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: JCQavvc18xtkAW+PjSCS/TK2LbVd+C+q24DA2EcinUBOHwHDfIx8sNBHdOEQo2BYBLZb4IewShQ= x-amz-replication-status: COMPLETED x-amz-request-id: SBT3ZNRFTE1W11PK x-amz-server-side-encryption: AES256
2024-05-03 04:44:10 UTC	866	IN	Data Raw: 78 2d 61 6d 7a 2d 76 65 72 73 69 6f 6e 2d 69 64 3a 20 32 4e 5a 79 38 41 33 52 7a 54 72 66 75 66 34 5f 42 4c 78 63 62 4b 6d 39 64 47 61 6d 63 77 32 4f 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 76 33 64 69 5a 51 75 2e 47 6a 44 4d 32 44 39 6a 51 66 41 70 68 43 5a 34 54 74 77 63 59 38 63 70 35 6d 50 7a 79 39 54 5f 74 6a 63 2d 31 37 31 34 37 31 31 34 35 30 2d 31 2e 30 2e 31 2e 31 2d 37 70 62 58 74 70 77 45 35 54 71 5f 46 39 6f 6f 70 47 62 6f 6e 41 50 68 31 69 7a 50 70 53 7a 35 6a 6b 5f 5f 43 79 32 74 33 6b 61 4f 66 35 4e 4f 57 71 56 64 36 71 71 69 78 6c 34 71 6b 33 51 79 42 61 72 4a 30 47 5a 74 41 77 45 59 54 39 30 62 53 57 50 70 54 67 3b Data Ascii: x-amz-version-id: 2NZy8A3RzTrfuf4_BLxcbKm9dGamcw2OX-Content-Type-Options: nosniffSet-Cookie: __cf_bm=v3diZQu.GjDM2D9jQfAphCZ4TtwcY8cp5mPzy9T_tjc-1714711450-1.0.1.1-7pbXtpwE5Tq_F9oopGbonAPh1izPpSz5jk__Cy2t3kaOf5NOWqVd6qqixl4qk3QyBarJ0GZtAwEYT90bSWPpTg;
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 02 30 05 9e 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 01 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 01 02 05 06 03 04 07 08 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 3a 3d af 9e 00 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}0"5:=
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: d2 d3 ab 8b 2d 26 99 68 65 a1 96 86 5a 19 68 65 a1 96 86 5a 19 68 65 a1 96 84 ec 1c 07 23 87 57 20 39 3d 00 00 00 00 00 00 00 00 00 07 1b c9 70 fa e1 ea 34 ed f3 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 a1 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 7f 67 af fb dc bd bc 93 c5 e5 c3 a8 22 40 00 00 00 00 00 00 31 ea da 9e 5e 1b 79 ec f3 c3 4c 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 5a 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 Data Ascii: -&heZheZhe#W 9=p42C-2C-2C-2C-2C-2C-2C-2C-2C-2`9g"@1^yLZ("("("("("("("("("
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 02 b2 00 00 00 00 00 00 00 00 00 03 d4 f6 fa fe 7a 7a bc ef 1b cf c0 35 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 00 00 00 00 00 00 01 e2 ab ca f9 ef cf 3e 6e ff 00 75 ea df 08 7c b6 bf 57 e2 3e 7e f1 ed dc 38 0e 39 cd 3c 97 63 e9 4b 3e 8d cc fc 81 d7 1f a1 3b 37 e5 5f 67 da a7 ea 77 c3 be 91 f5 79 f6 91 ef 50 00 00 00 00 07 Data Ascii: ("("("("("("("("("("("("("("("("("("("("(zz5>nu\|W>~89<cK>;7_gwyP
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 00 0e 43 8f 59 f4 4e cf f1 4f 27 a7 4f b6 be 61 ce fa 15 ee 4e 0b 90 ea 8f 75 e3 dd e2 a4 96 9e 0f 5a 93 c8 38 5f 43 37 69 74 5e 27 9e 7e a1 c4 fc b3 d7 e3 9e f5 d6 78 b7 9f 70 e7 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 62 eb ad 23 ea 5c f7 c3 fd af 4e 9f 67 7c df 9b ef 8e da e1 7d ee 98 f7 1e 3d e9 1f 0f 1f 19 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CYNO'OaNuZ8_C7it^'~xpb#\Ng\|}=
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 1c 3d 3e ec ed 8e 1f fc 2f 38 e1 ff 00 c2 f3 8e 1f fc 2f 38 e1 ff 00 c2 f3 8e 1e 3d df 9c 70 f4 fb b3 1c 39 ad 15 47 0d 67 b4 78 40 9b 63 4f ca 37 f6 4f 4a 20 29 26 e5 0f b9 8b 75 a6 be d1 d4 a7 f9 8d 5f 18 72 98 a3 5b be 6d 3f d3 c6 f8 42 f7 45 47 a6 ed f1 5a 93 f3 83 ba 59 6c 92 ee 79 41 dd 3a 72 49 9f cf fe 23 fd 51 fe c7 fe cf f1 1f ea 8f f6 3f f6 7f 88 4e e9 99 e7 4a af f3 57 08 dd 1c 8a b9 48 75 3e 00 fe b0 dd 33 46 b9 74 c8 1f cc 08 86 de 69 d1 5b 6e 25 7f ca 6b ea e9 ea 7d 89 7a d0 c7 ad 5e 7e 68 f9 c4 cc ec cc e2 ab 79 d2 ac c3 20 f0 c4 64 a9 99 b9 3a 93 5e f8 de 82 bf 43 12 54 94 ac f0 f5 6b a9 79 50 6f f6 4b 79 a4 72 96 21 53 c8 1c 94 13 ae 15 3a f1 ba a1 0a 75 d5 5e b3 b7 11 0b 5a 6e 59 1e 30 26 5f 1c fd b0 27 9c ca 90 61 33 c8 e7 20 8d 56 c2 Data Ascii: =>/8/8=p9Ggx@cO7OJ )&u_r[m?BEGZYlyA:rI#Q?NJWHu>3Fti[n%k}z^~hy d:^CTkyPoKyr!S:u^ZnY0&_'a3 V
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 8a 5a 59 57 85 a7 58 ae 11 39 2a e5 cf 27 c6 c8 04 1b 7e 84 a9 48 b5 2a ab 54 37 3a b1 62 c5 7a a1 13 0d 39 72 bc 0d 98 b2 94 94 82 54 40 03 29 89 cd d0 4a b1 5a 58 f5 cb ec e4 ed 89 ba 46 6e 74 fa d7 78 ba 02 c4 f5 14 9c fa e5 ce 0a ed 6f e1 0d b8 87 50 16 85 56 93 8c bc f3 6c 23 0d 6a ab f5 89 b9 d7 26 95 99 19 13 d4 72 54 96 0d 4d be 6c c8 bf 9c 02 08 ac 63 af 4f 4b 31 61 72 b3 98 5b 0e d2 ee 1b 1a 6c 27 b4 da 61 d9 97 de e5 ba 4f 66 30 95 ad 07 8a b2 93 d8 6a 84 52 13 68 e9 6b d7 08 a6 1c 1c b6 41 d4 6a 84 52 d2 ca e5 05 a7 c2 b8 44 e4 aa ee 7d 1e 26 a8 6e 61 c4 72 17 66 d8 4c f1 e7 a3 64 26 65 95 73 ea d7 64 56 0d d8 84 c5 29 21 2d 5e 1c ca 6b d1 4d a7 ca 26 77 4c 6e 96 63 fa 97 f2 89 89 d9 a9 b3 5b cf 29 5d 99 36 75 2c b4 d3 b2 ca ad 06 cc a9 39 62 Data Ascii: ZYWX9'~HT7:bz9rT@)JZXFntxoPVl#j&rTMlcOK1ar[l'aOf0jRhkAjRD}&narfLd&esdV)!-^kM&wLnc[)]6u,9b
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 21 08 42 10 84 21 08 42 10 84 21 08 42 10 84 27 82 3a 3a 2c 58 92 44 a4 4b 25 fb e4 5e 6b 21 1b 34 f0 6b 06 bc 19 e8 75 70 44 16 52 25 f5 51 82 b1 c7 e3 6e 22 42 79 e2 fb 09 5a 7d 0d 99 cd 60 33 1e 25 df c5 73 45 ae 83 56 6f e9 46 9a 71 92 77 78 bf a3 24 5d 70 7d 57 80 24 db 89 56 f2 48 51 5e 2d 91 94 b7 77 8b fd 11 09 34 a1 bf 9b a1 a5 b6 9a 4a 2f af c9 a6 d2 e9 e3 2e 52 42 55 2f da 4b 43 07 9a d9 f8 93 d0 92 ac 59 5a af 77 fa e1 48 7f 49 3a 08 f8 f4 cc 92 55 bc 20 94 af 17 ed c2 ae 2e c4 fc 67 03 c8 5f b9 6b b9 08 fb 08 71 c1 93 e6 66 58 ad d7 87 ad 2d e6 f1 7f 5b bf 1a c0 bb 1f 03 34 81 76 e3 11 1a b9 70 cc ae 81 ac 63 e8 a9 f2 b4 26 ad fc a3 f6 1a 69 c7 83 f1 35 75 28 b7 63 5a c1 a6 2b 52 d4 69 ba be 8b 49 a6 9e 29 95 bc 35 21 a3 6b eb a1 1a 78 a6 24 Data Ascii: !B!B!B'::,XDK%^k!4kupDR%Qn"ByZ}`3%sEVoFqwx$]p}W$VHQ^-w4J/.RBU/KCYZwHI:U .g_kqfX-[4vpc&i5u(cZ+RiI)5!kx$
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: c9 b9 b2 4a cb a5 7b 88 62 b2 68 69 a6 9e a9 af da 9a af 62 79 be 88 52 ab be 82 2f 26 24 f9 0e 29 8d 59 a7 ba c0 c9 d8 b6 fc 86 45 dc ab 0f e7 5c a2 19 4a b6 c8 d1 db a8 7e de 36 80 93 35 90 e9 e4 2d 1d 33 0d 1b ae a9 1c 5e 89 17 02 90 f2 1d 4d a3 4f 93 43 d6 63 16 38 8b 97 e6 5a c5 55 f0 62 9c e6 d5 82 f0 bc 99 77 7c 85 c9 36 4b 45 c3 ac 62 62 b9 95 cd ed 13 51 b9 ac 9b 6c d6 8f f4 a6 b0 da 62 29 a9 66 d8 86 0d 8d b7 9b 78 bf 02 ec 1c cb d8 c9 d9 d6 0c c1 9d 50 43 35 e4 d0 b5 99 d1 90 93 56 5d 2c 5a aa e8 d3 16 b2 7a 43 e4 a1 6a fa 68 ff 00 01 7e 44 fc d1 d5 21 bc da 75 0b 69 ea c6 41 e6 a2 f7 32 73 a1 a7 e1 28 22 d5 84 89 2d 5b 63 64 ea a9 d1 27 40 c7 cc e6 09 b2 4b 25 c2 b1 e3 56 1a 46 b5 4d 10 6b ca 48 bd 22 cd 08 10 75 aa 9f 0a 42 24 bc 51 f5 41 21 Data Ascii: J{bhibyR/&$)YE\J~65-3^MOCc8ZUbw\|6KEbbQlb)fxPC5V],ZzCjh~D!uiA2s("-[cd'@K%VFMkH"uB$QA!
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 01 00 00 00 00 00 00 11 02 01 03 04 05 06 20 30 40 13 15 50 00 10 14 70 12 16 80 60 ff da 00 08 01 02 01 01 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f d0 b3 bf 5c ba 65 c2 f7 ce d6 b5 bd 4b be 25 6b 76 ff 00 45 9b ff 00 37 2a ce e7 da dd df 0f 22 e7 55 99 f9 95 ad 6f 46 ef 69 55 55 55 59 dd f5 e7 77 a2 c4 95 55 55 55 b9 91 5a d2 52 97 56 3d 55 55 55 55 55 55 55 6e c9 61 72 97 15 55 7b d5 ad 64 aa b0 b9 4b f1 97 73 22 7d ab 32 ae 4c 72 69 5f 1e b5 f5 6b 5e 88 d7 ad 55 55 55 6b f4 76 2c 7d 2a aa aa e4 77 b1 e4 aa aa aa aa aa ac a8 74 52 34 fa 55 55 55 55 55 59 db f4 bd 2f 4b d2 f4 bd 2f 4a 96 a3 45 55 55 5b f1 ee d9 a2 aa aa aa aa aa aa aa aa aa fc 34 ec 9d a8 c6 dc 3f 40 2a aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa Data Ascii: 0@Pp`\eK%kvE7"UoFiUUUYwUUUZRV=UUUUUUUnarU{dKs"}2Lri_k^UUUkv,}wtR4UUUUUY/K/JEUU[4?@*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49776	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	1437	OUT	GET /_ajax/reaction/reactions/summaries?parentArtifactType=DOCUMENT&source=B&reactedObjectType=B&limit=100&documentId=DAGEBBzq9KM&documentExtension=jvjE01qRbaOyWhWyDOHDeg HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:10 UTC	899	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98250a7b4299-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98250a7b4299 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XqcEygWG6%2BJ2giepcAhUmAKg6hhx9%2FBsQt0a0SUQqBViTECQm1DAZACV6CkJebtEord3iwjCdvOTHWbL7OmwaUFJTC8MXVkeBtPodmy260L0NhIP51RjVBsz0mkng0c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:10 UTC	63	IN	Data Raw: 33 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 5b 5d 2c 22 42 22 3a 5b 5d 2c 22 44 22 3a 5b 5d 7d 7d 0d 0a Data Ascii: 39'"])}while(1);</x>//{"A":{"A?":"A","A":[],"B":[],"D":[]}}
2024-05-03 04:44:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49778	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	1097	OUT	GET /web/images/e5c5a4d109aeb5234e4405032dfd4800.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:10 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: image/svg+xml Content-Length: 470 Connection: close CF-Ray: 87dd982549610f70-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353774 Cache-Control: public, max-age=31556926 ETag: "e5c5a4d109aeb5234e4405032dfd4800" Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Fri, 05 Jan 2024 01:59:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Q8wJxEIc+CikODDbao9QDF6S060MoLsMS5tG2AYMNS1VtdQerI44QBQ5wBi/SjsFJdJdVP/pCwY= x-amz-replication-status: COMPLETED x-amz-request-id: SBTD8NZ1N9Y88HCK x-amz-server-side-encryption: AES256 x-amz-version-id: p2VG9BWpY91D6MGJbxvkLQlgT_VaNGG2 X-Content-Type-Options: nosniff
2024-05-03 04:44:10 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 50 5a 6c 6d 75 64 66 6c 6b 78 62 6b 6e 4d 32 4c 78 37 6a 68 4c 41 59 35 31 73 57 71 56 71 72 79 7a 6e 5a 72 6f 34 5a 42 25 32 46 43 46 64 62 6a 44 76 53 6e 25 32 42 70 4c 30 6e 5a 44 36 52 51 41 57 31 58 76 5a 74 39 65 43 30 53 34 6c 46 6a 47 4c 46 6c 37 63 74 68 4a 50 48 39 5a 76 63 35 56 5a 57 4d 25 32 46 70 46 43 54 30 6c 70 51 33 72 56 6f 4c 31 7a 30 5a 79 67 45 4f 6e 51 75 55 47 65 37 50 55 46 55 4f 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PZlmudflkxbknM2Lx7jhLAY51sWqVqryznZro4ZB%2FCFdbjDvSn%2BpL0nZD6RQAW1XvZt9eC0S4lFjGLFl7cthJPH9Zvc5VZWM%2FpFCT0lpQ3rVoL1z0ZygEOnQuUGe7PUFUOc%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:10 UTC	470	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 41 43 33 33 22 20 64 3d 22 4d 32 37 2e 32 38 37 20 33 34 2e 36 32 37 63 2d 2e 34 30 34 20 30 2d 2e 38 30 36 2d 2e 31 32 34 2d 31 2e 31 35 32 2d 2e 33 37 31 4c 31 38 20 32 38 2e 34 32 32 6c 2d 38 2e 31 33 35 20 35 2e 38 33 34 61 31 2e 39 37 20 31 2e 39 37 20 30 20 30 20 31 2d 32 2e 33 31 32 2d 2e 30 30 38 20 31 2e 39 37 31 20 31 2e 39 37 31 20 30 20 30 20 31 2d 2e 37 32 31 2d 32 2e 31 39 34 6c 33 2e 30 33 34 2d 39 2e 37 39 32 2d 38 2e 30 36 32 2d 35 2e 36 38 31 61 31 2e 39 38 20 31 2e 39 38 20 30 20 30 20 31 2d 2e 37 30 38 2d 32 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFAC33" d="M27.287 34.627c-.404 0-.806-.124-1.152-.371L18 28.422l-8.135 5.834a1.97 1.97 0 0 1-2.312-.008 1.971 1.971 0 0 1-.721-2.194l3.034-9.792-8.062-5.681a1.98 1.98 0 0 1-.708-2.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49779	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	1378	OUT	GET /_ajax/reaction/config/DAGEBBzq9KM?documentExtension=jvjE01qRbaOyWhWyDOHDeg HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3
2024-05-03 04:44:10 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98251e828c96-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98251e828c96 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vB57tGS0pLEf7VjaJS9ipi0NU4gwTcvbuLV198Oyb8wIZu3G6jHr7YgTlpQOAb%2F90iMBmWUe7iI8xcIL%2FI1U10tjeOq8%2Ft6HL9u8SRb5%2BVvSnUtZ9TQIU83eph4Mcuw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:10 UTC	57	IN	Data Raw: 33 33 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 42 22 3a 7b 22 41 22 3a 74 72 75 65 7d 7d 0d 0a Data Ascii: 33'"])}while(1);</x>//{"A":{"A":true},"B":{"A":true}}
2024-05-03 04:44:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49777	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	1249	OUT	GET /chunk-batch/118052af16110a6a.ltr.css+bbb36937bb9b2d18.ltr.css+f78d925eed25c026.ltr.css+0b904b0a14653f4e.ltr.css+77072c60218aa8fb.ltr.css+c58cd64d3a3f686a.ltr.css+44120d0e86f58fdd.ltr.css+0361d809f049c847.ltr.css+70f83d7290d33057.ltr.css HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:10 UTC	1139	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: text/css Content-Length: 12549 Connection: close CF-Ray: 87dd98254df48cc5-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 92634 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Tue, 26 Mar 2024 02:06:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: NDG3bSX8r5+NnNRDzpLdIV9pg9cgL1F1u1Ljkk/bR9Q+de8nlwY9jh8j0sJnUgSYF3D3ME5auJI= x-amz-replication-status: PENDING x-amz-request-id: 3510E1Z8SWGBANZW x-amz-server-side-encryption: AES256 x-amz-version-id: hCP4diSpICgZOpmJpQHJyqLvOqAcq_w1 X-Content-Type-Options: nosniff
2024-05-03 04:44:10 UTC	370	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 73 66 59 56 4e 73 58 4e 72 39 77 76 52 78 78 63 4a 37 36 53 48 25 32 46 47 77 6d 25 32 42 64 53 6d 57 37 32 58 76 33 67 5a 79 74 35 37 73 75 7a 61 34 67 37 31 25 32 46 48 44 69 52 71 25 32 42 45 6b 76 76 45 61 71 52 6c 6f 78 67 74 74 61 6e 41 4e 78 74 69 65 4b 5a 70 45 6c 75 75 25 32 42 46 67 45 49 4d 4b 77 46 71 64 36 74 34 47 36 79 4d 75 39 79 61 4b 37 32 6c 6e 33 5a 45 25 32 42 52 62 41 43 61 66 52 56 63 38 65 42 46 70 36 4a 58 6a 49 34 6e 25 32 46 68 71 34 50 38 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sfYVNsXNr9wvRxxcJ76SH%2FGwm%2BdSmW72Xv3gZyt57suza4g71%2FHDiRq%2BEkvvEaqRloxgttanANxtieKZpEluu%2BFgEIMKwFqd6t4G6yMu9yaK72ln3ZE%2BRbACafRVc8eBFp6JXjI4n%2Fhq4P8%3D"}],"group":"cf-n
2024-05-03 04:44:10 UTC	1229	IN	Data Raw: 2f 2a 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 31 31 38 30 35 32 61 66 31 36 31 31 30 61 36 61 2e 6c 74 72 2e 63 73 73 20 2a 2f 0a 2e 45 5f 79 42 77 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 0a 2f 2a 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 62 62 62 33 36 39 33 37 62 62 39 62 32 64 31 38 2e 6c 74 72 2e 63 73 73 20 2a 2f 0a 2e 70 76 4d 56 45 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 52 73 5a 35 39 51 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 5f 36 31 38 44 73 41 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 30 7d 2e 5f 36 31 38 44 73 41 2e 43 65 6f 44 75 41 7b 6d 61 78 Data Ascii: /* __FILE_CONTENT_FOR__:118052af16110a6a.ltr.css /.E_yBwg{overflow:hidden;position:relative}/ __FILE_CONTENT_FOR__:bbb36937bb9b2d18.ltr.css */.pvMVEg{display:inline-block;max-width:100%}.RsZ59Q{display:block}._618DsA{padding:8px 0}._618DsA.CeoDuA{max
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 58 79 59 54 77 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 5f 31 6a 56 4b 71 51 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 2c 4e 6f 74 6f 20 53 61 6e 73 20 56 61 72 69 61 62 6c 65 2c 4e 6f 74 6f 20 53 61 6e 73 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 52 68 72 Data Ascii: ition:relative;width:100%}.cXyYTw{height:100%}._1jVKqQ{border-style:solid;box-sizing:border-box;font-family:Canva Sans,Noto Sans Variable,Noto Sans,-apple-system,BlinkMacSystemFont,Segoe UI,Helvetica,Arial,sans-serif;overflow:hidden;position:absolute}.Rhr
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 58 74 6e 41 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 36 70 78 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6e 48 37 4e 56 77 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 36 70 78 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 39 76 31 30 4b 67 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 36 70 78 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 Data Ascii: rm:translateX(0)}}@keyframes spXtnA{0%{transform:translateX(16px)}to{transform:translateX(0)}}@keyframes nH7NVw{0%{transform:translateY(16px)}to{transform:translateY(0)}}@keyframes _9v10Kg{0%{transform:translateY(-16px)}to{transform:translateY(0)}}@keyfra
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 6b 55 4f 67 20 2e 35 73 20 65 61 73 65 7d 2e 4f 6f 4b 73 66 41 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 77 69 64 74 68 3a 33 32 30 70 78 7d 2e 4f 6f 4b 73 66 41 2c 2e 61 39 61 39 48 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 61 39 61 39 48 77 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 6f 55 42 55 49 51 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 75 37 62 37 6b 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 41 5f 4d 67 53 Data Ascii: kUOg .5s ease}.OoKsfA{box-sizing:border-box;padding:16px;width:320px}.OoKsfA,.a9a9Hw{display:flex;flex-direction:column}.a9a9Hw{margin-bottom:8px}.oUBUIQ{display:flex;justify-content:space-between}.u7b7kQ{align-items:center;display:flex;height:24px}.A_MgS
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 36 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 33 34 2c 31 2e 35 36 2c 2e 36 34 2c 31 29 7d 40 6d 65 64 69 61 20 28 68 6f 76 65 72 3a 68 6f 76 65 72 29 7b 2e 46 50 77 30 55 67 3a 68 6f 76 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 34 29 7d 7d 2e 4d 30 79 6c 70 51 3a 61 63 74 69 76 65 20 2e 5f 37 52 4f 70 76 77 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 38 29 7d 2e 5f 37 52 4f 70 76 77 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 Data Ascii: tion-duration:.6s;transition-property:transform;transition-timing-function:cubic-bezier(.34,1.56,.64,1)}@media (hover:hover){.FPw0Ug:hover{transform:scale(1.4)}}.M0ylpQ:active ._7ROpvw{transform:scale(.8)}._7ROpvw{transform-origin:center;transition-durati
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 6c 75 72 28 34 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 34 70 78 29 7d 2e 4d 78 68 61 49 51 2e 5f 38 4f 39 5f 5a 67 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 34 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 34 70 78 29 7d 2e 4d 78 68 61 49 51 2e 5f 35 61 55 72 4a 67 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 49 79 77 66 50 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 34 38 70 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 Data Ascii: lur(4px);backdrop-filter:blur(4px)}.MxhaIQ._8O9_Zg{-webkit-backdrop-filter:blur(14px);backdrop-filter:blur(14px)}.MxhaIQ._5aUrJg{opacity:1}.IywfPg{box-sizing:border-box;display:flex;margin:auto 0;max-width:100%;padding:16px 48px;pointer-events:none;transf
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 20 31 66 72 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 78 74 42 5a 75 51 7b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 31 36 70 78 20 2b 20 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 74 6f 70 29 29 20 63 61 6c 63 28 31 36 70 78 20 2b 20 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 72 69 67 68 74 29 29 20 63 61 6c 63 28 31 36 70 78 20 2b 20 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f 6d 29 29 20 63 61 6c 63 28 31 36 70 78 20 2b 20 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 Data Ascii: content 1fr;height:100%;justify-items:center;overflow:hidden;padding:16px;width:100%}.xtBZuQ{padding:calc(16px + var(--safe-area-inset-top)) calc(16px + var(--safe-area-inset-right)) calc(16px + var(--safe-area-inset-bottom)) calc(16px + var(--safe-area-i
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 38 30 70 78 7d 2e 4c 64 59 59 76 77 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 34 70 78 7d 2e 5f 51 69 4e 68 77 7b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 69 67 68 74 7b 2d 2d 62 58 6c 78 6f 51 3a 23 35 31 35 31 35 34 7d 2e 64 61 72 6b 7b 2d 2d 62 58 6c 78 6f 51 3a 23 66 66 66 7d 2e 58 53 49 55 5f 41 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 58 6c 78 6f 51 29 7d 2e 65 4a 35 62 66 51 7b 63 6f 6c 6f 72 3a 23 31 38 37 37 66 32 7d 2e 5f 32 70 59 4f 77 67 7b 63 6f 6c 6f 72 3a 23 30 30 62 39 30 30 7d 2e 41 61 49 4c 38 41 3e 2e 5f 33 38 6f 57 76 51 2c 2e 43 4f 41 57 51 51 3e 2e 5f 33 38 6f 57 Data Ascii: y-content:space-between;min-height:480px}.LdYYvw{padding:8px 4px}._QiNhw{text-overflow:ellipsis;width:100%}.light{--bXlxoQ:#515154}.dark{--bXlxoQ:#fff}.XSIU_A{color:var(--bXlxoQ)}.eJ5bfQ{color:#1877f2}._2pYOwg{color:#00b900}.AaIL8A>._38oWvQ,.COAWQQ>._38oW
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 63 61 6c 63 28 76 61 72 28 2d 2d 78 2d 6f 66 66 73 65 74 29 2a 2d 31 29 2c 63 61 6c 63 28 76 61 72 28 2d 2d 79 2d 6f 66 66 73 65 74 29 2a 2d 31 29 2c 30 29 7d 2e 46 45 35 61 58 41 3e 2e 55 4e 53 39 58 67 2c 2e 56 6c 4f 65 67 51 3e 2e 55 4e 53 39 58 67 2c 2e 61 78 71 63 30 67 3e 2e 55 4e 53 39 58 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 44 76 6c 74 4a 41 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 44 76 6c 74 4a 41 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5f 31 4f 4a 47 70 41 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 68 4c 71 4c 74 Data Ascii: m:translate3d(calc(var(--x-offset)-1),calc(var(--y-offset)-1),0)}.FE5aXA>.UNS9Xg,.VlOegQ>.UNS9Xg,.axqc0g>.UNS9Xg{transform:translateZ(0)}.DvltJA{display:flex}.DvltJA:hover{cursor:pointer}._1OJGpA{align-self:baseline;flex:0 0 auto;margin-right:8px}.hLqLt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49780	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	1353	OUT	GET /chunk-batch/1b96dc175117e75c.vendor.js+9a5bc247025fb8e8.js+96fce9fe2ad37a14.js+5b978aa1138d2dd3.js+cf288a3082e4672a.js+94def58aeb89e59c.js+c21b21bfb9577647.js+d7eb0d9b71092908.js+ab6a3e2e8cac7ce6.strings.js+570865c4d06b4285.js+f6632b2cc8e6c080.js+ccfc93f09f159cf4.strings.js+9ef9aea75d0fa20b.js+e31595af787f9905.js+d4aef339bff5f630.js+74ab07a470990b34.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:10 UTC	1146	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: text/javascript Content-Length: 369091 Connection: close CF-Ray: 87dd98251c9d0ce1-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8396 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Wed, 20 Mar 2024 05:42:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 21 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: HGw3UaawqUWyUguwU/NiOL69s7aX2MNt5KUoKG3e/+GOCl0f6NiTFJUSP5eYVljIiy1tHEPyXmk= x-amz-replication-status: PENDING x-amz-request-id: JGM47BPRQMSPWYQ7 x-amz-server-side-encryption: AES256 x-amz-version-id: l8LUpcm30ca_tnqavR5Ao6dcHCMTgUwI X-Content-Type-Options: nosniff
2024-05-03 04:44:10 UTC	368	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6f 55 52 25 32 46 76 55 54 62 48 4d 71 25 32 42 5a 46 6f 78 76 44 76 78 59 63 79 25 32 42 70 6a 72 77 66 4a 6d 67 63 32 69 5a 31 79 70 78 4b 61 52 58 6a 50 6c 47 43 53 4a 49 33 4f 33 4f 68 77 41 25 32 46 4f 51 25 32 42 73 71 31 67 31 56 52 4e 4e 6a 71 6b 51 6f 47 54 4b 47 45 62 32 63 39 51 25 32 42 47 58 52 42 61 7a 7a 54 34 45 79 67 45 52 67 45 46 53 53 48 67 6e 4b 38 30 6c 58 35 58 43 54 4b 79 41 6f 58 52 39 43 75 54 31 43 37 6a 61 38 32 6a 45 43 62 38 41 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oUR%2FvUTbHMq%2BZFoxvDvxYcy%2BpjrwfJmgc2iZ1ypxKaRXjPlGCSJI3O3OhwA%2FOQ%2Bsq1g1VRNNjqkQoGTKGEb2c9Q%2BGXRBazzT4EygERgEFSSHgnK80lX5XCTKyAoXR9CuT1C7ja82jECb8AA%3D"}],"group":"cf-nel
2024-05-03 04:44:10 UTC	1224	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 31 62 39 36 64 63 31 37 35 31 31 37 65 37 35 63 2e 76 65 6e 64 6f 72 2e 6a 73 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 33 36 5d 2c 7b 36 36 34 37 35 31 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 73 3d 69 28 39 34 33 36 38 29 2c 6e 3d 69 28 34 31 32 37 33 30 29 2c 72 3d 69 28 36 35 37 30 37 30 29 2c 6f 3d 69 28 39 34 35 35 32 32 29 2c 61 3d 69 28 39 32 30 33 33 35 29 2c 6c 3d 69 28 38 34 33 32 36 34 29 3b 63 6f 6e 73 74 Data Ascii: ;// __FILE_CONTENT_FOR__:1b96dc175117e75c.vendor.js"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{664751:(t,e,i)=>{i.d(e,{Z:()=>h});var s=i(94368),n=i(412730),r=i(657070),o=i(945522),a=i(920335),l=i(843264);const
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 3d 65 7d 6f 64 28 29 7b 69 66 28 22 69 6e 64 65 78 65 64 44 42 22 69 6e 20 74 68 69 73 2e 74 64 29 72 65 74 75 72 6e 20 74 68 69 73 2e 74 64 2e 69 6e 64 65 78 65 64 44 42 7d 72 64 28 29 7b 74 72 79 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 6f 64 28 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 68 69 73 2e 6f 64 28 29 2e 6f 70 65 6e 28 22 42 72 61 7a 65 20 49 6e 64 65 78 65 64 44 42 20 53 75 70 70 6f 72 74 20 54 65 73 74 22 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 7c 7c 77 69 6e 64 6f 77 2e 62 72 6f 77 73 65 72 7c 7c 77 69 6e 64 6f 77 2e 6d 73 42 72 6f 77 73 65 72 3b 69 66 28 74 26 26 74 2e 72 75 6e 74 69 6d 65 26 26 74 2e 72 75 6e 74 69 6d 65 Data Ascii: =e}od(){if("indexedDB"in this.td)return this.td.indexedDB}rd(){try{if(null==this.od())return!1;if(this.od().open("Braze IndexedDB Support Test"),"undefined"!=typeof window){const t=window.chrome\|\|window.browser\|\|window.msBrowser;if(t&&t.runtime&&t.runtime
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 20 22 2b 72 2e 65 64 2e 73 64 2b 22 20 2d 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6f 62 6a 65 63 74 53 74 6f 72 65 22 29 2c 76 6f 69 64 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 29 3b 63 6f 6e 73 74 20 61 3d 6f 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 74 5d 2c 22 72 65 61 64 77 72 69 74 65 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 29 2e 70 75 74 28 69 2c 65 29 3b 61 2e 6f 6e 65 72 72 6f 72 3d 28 29 3d 3e 7b 72 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 73 74 6f 72 65 20 6f 62 6a 65 63 74 20 22 2b 65 2b 22 20 69 6e 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 72 2e 65 64 2e 73 64 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 Data Ascii: "+r.ed.sd+" - "+t+" is not a valid objectStore"),void("function"==typeof n&&n());const a=o.transaction([t],"readwrite").objectStore(t).put(i,e);a.onerror=()=>{r.nd.error("Could not store object "+e+" in "+t+" on indexedDB "+r.ed.sd),"function"==typeof n&
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 64 28 28 73 3d 3e 7b 73 2e 6f 62 6a 65 63 74 53 74 6f 72 65 4e 61 6d 65 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3f 73 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 74 5d 2c 22 72 65 61 64 77 72 69 74 65 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 29 2e 64 65 6c 65 74 65 28 65 29 2e 6f 6e 65 72 72 6f 72 3d 28 29 3d 3e 7b 69 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 64 65 6c 65 74 65 20 72 65 63 6f 72 64 20 22 2b 65 2b 22 20 66 72 6f 6d 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 69 2e 65 64 2e 73 64 29 7d 3a 69 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 64 65 6c 65 74 65 20 72 65 63 6f 72 Data Ascii: )return!1;const i=this;return this.dd((s=>{s.objectStoreNames.contains(t)?s.transaction([t],"readwrite").objectStore(t).delete(e).onerror=()=>{i.nd.error("Could not delete record "+e+" from "+t+" on indexedDB "+i.ed.sd)}:i.nd.error("Could not delete recor
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6c 65 61 72 20 6f 62 6a 65 63 74 20 73 74 6f 72 65 73 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 65 2e 65 64 2e 73 64 29 7d 7d 29 29 7d 7d 73 2e 65 70 3d 7b 46 74 3a 7b 73 64 3a 22 41 70 70 62 6f 79 53 65 72 76 69 63 65 57 6f 72 6b 65 72 41 73 79 6e 63 53 74 6f 72 61 67 65 22 2c 56 45 52 53 49 4f 4e 3a 36 2c 24 74 3a 7b 6a 6c 3a 22 64 61 74 61 22 2c 6a 72 3a 22 70 75 73 68 43 6c 69 63 6b 73 22 2c 70 75 3a 22 70 75 73 68 53 75 62 73 63 72 69 62 65 64 22 2c 75 64 3a 22 66 61 6c 6c 62 61 63 6b 44 65 76 69 63 65 22 2c 4d 74 3a 22 63 61 72 64 55 70 64 61 74 65 73 22 2c 6f 65 3a 22 6f 70 74 4f 75 74 22 2c 24 72 3a 22 70 65 6e 64 Data Ascii: .onerror=function(){e.nd.error("Could not clear object stores on indexedDB "+e.ed.sd)}}))}}s.ep={Ft:{sd:"AppboyServiceWorkerAsyncStorage",VERSION:6,$t:{jl:"data",jr:"pushClicks",pu:"pushSubscribed",ud:"fallbackDevice",Mt:"cardUpdates",oe:"optOut",$r:"pend
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 73 69 6f 6e 22 2c 6e 61 3a 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 4c 6f 63 61 74 69 6f 6e 22 2c 72 61 3a 22 73 61 66 61 72 69 57 65 62 73 69 74 65 50 75 73 68 49 64 22 2c 6a 6e 3a 22 6c 6f 63 61 6c 69 7a 61 74 69 6f 6e 22 2c 61 6f 3a 22 63 6f 6e 74 65 6e 74 53 65 63 75 72 69 74 79 4e 6f 6e 63 65 22 2c 5f 6f 3a 22 65 6e 61 62 6c 65 48 74 6d 6c 49 6e 41 70 70 4d 65 73 73 61 67 65 73 22 2c 49 6f 3a 22 61 6c 6c 6f 77 55 73 65 72 53 75 70 70 6c 69 65 64 4a 61 76 61 73 63 72 69 70 74 22 2c 6e 6f 3a 22 69 6e 41 70 70 4d 65 73 73 61 67 65 5a 49 6e 64 65 78 22 2c 6c 6f 3a 22 6f 70 65 6e 49 6e 41 70 70 4d 65 73 73 61 67 65 73 49 6e 4e 65 77 54 61 62 22 2c 65 6e 3a 22 6f 70 65 6e 4e 65 77 73 46 65 65 64 43 61 72 64 73 49 6e 4e 65 77 54 61 62 22 2c 55 69 3a 22 72 Data Ascii: sion",na:"serviceWorkerLocation",ra:"safariWebsitePushId",jn:"localization",ao:"contentSecurityNonce",_o:"enableHtmlInAppMessages",Io:"allowUserSuppliedJavascript",no:"inAppMessageZIndex",lo:"openInAppMessagesInNewTab",en:"openNewsFeedCardsInNewTab",Ui:"r
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 7d 7d 2c 33 34 35 34 33 30 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 55 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 73 3d 69 28 34 34 37 39 39 33 29 2c 6e 3d 69 28 36 36 34 37 35 31 29 2c 72 3d 69 28 33 32 34 33 36 35 29 2c 6f 3d 69 28 37 34 37 35 36 37 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 69 66 28 21 73 2e 5a 50 2e 72 72 28 29 29 72 65 74 75 72 6e 3b 73 2e 5a 50 2e 6d 72 28 29 2e 6f 70 65 6e 53 65 73 73 69 6f 6e 28 29 3b 63 6f 6e 73 74 20 74 3d 6e 2e 5a 2e 78 74 2e 46 74 2c 65 3d 6e 65 77 20 6e 2e 5a 2e 71 74 28 74 2c 6e 2e 5a 2e 44 29 3b 65 2e 68 72 28 74 2e 24 74 2e 6a 72 2c 28 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 63 6f 6e 73 74 20 6c 3d 61 2e 6c 61 73 74 43 6c 69 63 6b 2c 68 3d 61 2e 74 72 61 63 6b 69 6e 67 53 74 72 69 6e 67 3b 6e Data Ascii: }},345430:(t,e,i)=>{i.d(e,{U:()=>a});var s=i(447993),n=i(664751),r=i(324365),o=i(747567);function a(){if(!s.ZP.rr())return;s.ZP.mr().openSession();const t=n.Z.xt.Ft,e=new n.Z.qt(t,n.Z.D);e.hr(t.$t.jr,(function(i,a){const l=a.lastClick,h=a.trackingString;n
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 3d 74 2e 68 65 61 64 65 72 5f 74 65 78 74 5f 63 6f 6c 6f 72 2c 45 3d 74 2e 66 72 61 6d 65 5f 63 6f 6c 6f 72 2c 50 3d 5b 5d 3b 6c 65 74 20 43 3d 74 2e 62 74 6e 73 3b 6e 75 6c 6c 3d 3d 43 26 26 28 43 3d 5b 5d 29 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 43 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 50 2e 70 75 73 68 28 61 2e 5a 2e 66 72 6f 6d 4a 73 6f 6e 28 43 5b 73 5d 29 29 3b 63 6f 6e 73 74 20 42 3d 74 2e 63 72 6f 70 5f 74 79 70 65 2c 78 3d 74 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 2c 52 3d 74 2e 61 6e 69 6d 61 74 65 5f 69 6e 2c 71 3d 74 2e 61 6e 69 6d 61 74 65 5f 6f 75 74 3b 6c 65 74 20 55 2c 24 3d 74 2e 68 74 6d 6c 5f 69 64 2c 4c 3d 74 2e 63 73 73 3b 69 66 28 6e 75 6c 6c 21 3d 24 26 26 22 22 21 3d 3d 24 26 26 6e 75 6c 6c 21 3d 4c 26 26 22 22 21 3d 3d 4c 7c 7c Data Ascii: =t.header_text_color,E=t.frame_color,P=[];let C=t.btns;null==C&&(C=[]);for(let s=0;s<C.length;s++)P.push(a.Z.fromJson(C[s]));const B=t.crop_type,x=t.orientation,R=t.animate_in,q=t.animate_out;let U,$=t.html_id,L=t.css;if(null!=$&&""!==$&&null!=L&&""!==L\|\|
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 47 65 7d 4e 65 28 74 29 7b 74 68 69 73 2e 47 65 3d 74 7d 71 65 28 74 2c 65 29 7b 69 66 28 21 28 30 2c 6d 2e 66 6b 29 28 61 2e 5a 2e 4f 65 2c 65 2c 60 24 7b 65 7d 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 69 6e 2d 61 70 70 20 6d 65 73 73 61 67 65 20 64 69 73 70 6c 61 79 20 66 61 69 6c 75 72 65 60 2c 22 49 6e 41 70 70 4d 65 73 73 61 67 65 2e 44 69 73 70 6c 61 79 46 61 69 6c 75 72 65 73 22 29 29 72 65 74 75 72 6e 20 6e 65 77 20 64 2e 5a 3b 63 6f 6e 73 74 20 69 3d 7b 74 72 69 67 67 65 72 5f 69 64 73 3a 5b 74 5d 2c 65 72 72 6f 72 5f 63 6f 64 65 3a 65 7d 3b 72 65 74 75 72 6e 20 68 2e 5a 2e 47 28 66 2e 5a 2e 41 2e 50 65 2c 69 29 7d 47 28 74 2c 65 2c 69 2c 73 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 64 2e 5a Data Ascii: e(){return this.Ge}Ne(t){this.Ge=t}qe(t,e){if(!(0,m.fk)(a.Z.Oe,e,`${e} is not a valid in-app message display failure`,"InAppMessage.DisplayFailures"))return new d.Z;const i={trigger_ids:[t],error_code:e};return h.Z.G(f.Z.A.Pe,i)}G(t,e,i,s){const n=new d.Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49781	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	636	OUT	GET /YAFcfhdOoGk/0/calibri.b242995fdba37a55d447fe541d829654.036b3d3daa452ce192466bbba1b30205.woff2 HTTP/1.1 Host: font-public.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:10 UTC	1249	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: application/octet-stream Content-Length: 565948 Connection: close CF-Ray: 87dd9825583b19f3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 4367411 Cache-Control: max-age=31536000 ETag: "d431517ea5861856469f91022d4db590" Expires: Sat, 03 May 2025 04:44:10 GMT Last-Modified: Tue, 07 Mar 2023 06:13:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_font-public Timing-Allow-Origin: https://www.canva.com x-amz-id-2: V791b9NrdY7RlfnCUcMB2o6HCcs//z0MaU6PLCk7X6JQ2nSOD9aFmzzF7M+L3TMAl/yIDf3xzV4= x-amz-replication-status: COMPLETED x-amz-request-id: SBT4VXVBDWFFBAK8 x-amz-server-side-encryption: AES256 x-amz-version-id: 6ETPlDPUPwT9XNaDkzul9oMNy7meVNms X-Content-Type-Options: nosniff
2024-05-03 04:44:10 UTC	785	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 35 65 4f 35 31 64 64 54 4e 39 77 56 5f 46 54 4a 59 44 56 63 58 4a 4a 4a 6e 42 4d 33 57 51 38 67 4d 36 73 63 41 46 6c 7a 6a 35 45 2d 31 37 31 34 37 31 31 34 35 30 2d 31 2e 30 2e 31 2e 31 2d 57 78 54 74 63 4c 4c 57 6c 50 47 7a 7a 4f 46 74 56 58 6c 35 68 7a 33 74 6a 4f 78 7a 73 4f 6a 6e 42 44 59 34 49 47 62 39 73 55 75 36 6d 43 6e 31 4b 35 62 38 79 72 70 35 4a 73 65 4c 56 75 32 46 30 74 50 68 53 55 36 6f 44 75 5a 4b 36 55 54 44 46 63 41 31 6d 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=5eO51ddTN9wV_FTJYDVcXJJJnBM3WQ8gM6scAFlzj5E-1714711450-1.0.1.1-WxTtcLLWlPGzzOFtVXl5hz3tjOxzsOjnBDY4IGb9sUu6mCn1K5b8yrp5JseLVu2F0tPhSU6oDuZK6UTDFcA1mw; path=/; expires=Fri, 03-May-24 05:14:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:10 UTC	704	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 08 a2 bc 00 14 00 00 00 16 6a c4 00 08 a2 47 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 81 9f 1c 10 ab 60 1a 8d 62 1b 8f 82 56 1c 8c da 72 06 60 00 ae 44 08 8b 3c 09 9a 2b 11 10 0a b7 ad 78 b1 97 74 01 36 02 24 03 81 d9 28 0b 81 d9 2c 00 04 20 3f 6d 65 74 61 81 04 05 9a 56 07 20 0c c9 6b 9b bb 71 14 2f a4 40 06 f7 17 8a 28 69 94 82 d9 cc 04 33 31 eb c6 08 82 42 d0 55 b3 b1 81 e9 01 00 a0 da bf 87 e7 76 00 92 86 8d 03 00 80 ea 7d 38 37 02 32 0f 00 00 b5 fe 3c 64 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa ea 0b 13 01 03 0e 5b d5 8d c2 83 66 80 1f e8 07 f9 c1 7e 88 1f ea 87 f9 e1 7e 84 1f e9 47 f9 d1 Data Ascii: wOF2jG`bVr`D<+xt6$(, ?metaV kq/@(i31BUv}872<d[f~~G
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: a3 08 1f 7b 55 eb 0d 49 0d 39 d2 90 1c 39 6d 82 78 2d 6d eb e3 38 f0 ea 76 79 36 b7 b4 3e 8e 03 5e d3 87 7d 55 e9 b3 a5 1b 87 5e 3e 5b f9 ea a3 d0 60 72 58 5e e9 ba ce 6b 5d 9f 0e 20 88 cb 70 16 69 80 00 dd 89 eb 9b 9b ec 18 5b b5 b8 0a 4c 80 de 67 55 da a7 8e fc dd a7 28 ec 3d 05 3c 67 f9 42 c4 1d 10 70 05 1f ba 3a 08 f0 3c e1 96 ff 67 86 84 14 12 06 3a 6b 17 6a ac a9 d1 3e 93 55 29 7d 5f 5c 34 7f cf 3b d7 9f fb 20 08 4f c2 12 e8 ef 3d ca 22 36 64 59 c4 fe 6c 0c 29 eb b0 a4 91 62 44 36 13 11 1b f6 58 40 ec 19 6c 7c 3e 96 96 61 b1 65 3b 93 9f 6d b1 31 2e b6 4c 7e 6c b1 b3 91 ef 8f 2d df 1f 4b c7 86 ed ef 71 aa ef bd ef 71 cb df 70 b1 a2 a8 65 05 b8 e4 90 02 e4 94 6c 2e b3 0b e4 90 82 1a 82 d7 b1 47 6e ef 4e 43 f6 8a e8 12 90 0e 60 2d 8f c1 d0 cf ea 54 31 Data Ascii: {UI99mx-m8vy6>^}U^>[`rX^k] pi[LgU(=<gBp:<g:kj>U)}_\4; O="6dYl)bD6X@l\|>ae;m1.L~l-Kqqpel.GnNC`-T1
2024-05-03 04:44:10 UTC	940	IN	Data Raw: 68 e6 55 de 65 23 09 10 f8 4e 45 64 7c 7e ce 08 69 7a d6 33 66 0d fd fd bf d7 f4 99 86 f4 8c 89 3b 27 de 99 39 13 ef 19 73 e6 c6 89 31 e7 ac b3 ce 8c f0 7f 74 e6 5d 01 e6 ee ed ec ce 2a 77 fe e3 02 74 0a a7 72 0a 39 95 52 29 ad 8f e7 4f 4d 9b a4 93 4a ec 23 29 71 f7 ee 61 10 9c 59 4e 7f 9e d7 cd 7f f7 dc 73 6e a8 14 5c b8 42 b0 11 37 88 03 1c ac 82 3b 8c 2e ac 74 ba b0 c2 b7 b8 02 b8 16 5f a9 63 c6 4a 07 bb 0b d9 4e 28 51 e2 08 42 64 54 c0 cf 74 e2 42 3e 61 f4 8b 8c f2 e5 c5 7f c4 a5 fe f7 e5 bb 3a 2c c9 92 0b 94 0e 42 45 be 51 b6 32 a5 c4 37 2a 10 66 1d 71 0a 40 74 1f 6d af a2 2f a5 79 77 7b b3 3b b3 73 c7 8f 3b 8d a8 10 a7 46 8d 18 35 2a 16 15 22 4e 8c 88 1b 35 e2 4e dc ff de 0e 9b 7d fa 1b 56 f1 01 62 15 d8 95 e4 f6 20 da f3 fc ff 9c 3f 7b ef b5 cf 05 Data Ascii: hUe#NEd\|~iz3f;'9s1t]wtr9R)OMJ#)qaYNsn\B7;.t_cJN(QBdTtB>a:,BEQ27fq@tm/yw{;s;F5*"N5N}Vb ?{
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: d3 fd ff d3 9c df 9d 37 93 09 24 93 17 99 41 ea a9 58 6a c1 82 d4 81 a6 46 cd f8 86 2d 76 82 c9 0f 96 d2 60 81 5a 1a 44 9b cf e1 50 33 6a 7c 96 a6 6c 7e 6a 59 2a 4e 8d 3a 15 63 59 2a 36 df 7b e5 ec bd 54 da cb ce b8 4c 21 e7 20 a7 d0 31 95 53 39 95 cf 5f 35 52 7e 29 95 53 39 05 54 fc b7 e6 ed 35 4b bc 32 2f 71 20 2a f2 65 e2 0e ff df cb 91 b3 73 03 be f3 53 b4 db 07 ea d6 50 00 b8 a8 04 0b e1 aa 2a 5d 59 e4 1e 02 46 6b fb 44 41 7d c8 7e 92 7b 8f d9 88 77 ad 3b 10 57 f0 c4 99 c4 91 88 59 a7 d2 34 88 fe 8f b8 5a f4 1d f6 b3 bb 49 2a 99 ea de 03 c8 4f ea d1 01 74 78 3e 52 be 48 53 5f 4f 77 76 55 39 4d 07 78 43 c4 ac 98 8d 3f 11 64 00 4c 16 f6 53 7f b4 7a 76 1b 49 56 26 0c 54 a2 53 3f 00 e2 91 80 35 8a 7b 3f 7d 99 c9 b6 df f6 49 38 01 c2 49 e0 46 1d 96 69 ae Data Ascii: 7$AXjF-v`ZDP3j\|l~jYN:cY6{TL! 1S9_5R~)S9T5K2/q esSP]YFkDA}~{w;WY4ZI*Otx>RHS_OwvU9MxC?dLSzvIV&TS?5{?}I8IFi
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: de 40 60 7b ab f7 16 09 2b a2 37 b6 11 ab 02 46 8d e8 51 35 a2 36 68 41 04 c4 40 51 ac 33 31 ea 04 c5 be f3 f4 14 fb 7b 77 5e 1a 67 5c 85 e7 f4 c2 bb fb 37 40 73 2b b7 1d 0c 16 b7 88 00 46 2d c9 55 00 63 83 25 11 2d 48 a4 08 22 82 88 f6 bf 8a 95 6f c5 9b f1 ff 46 7f 5a 5f 61 7c f9 ef 00 6c 53 37 a7 80 41 95 54 ab b4 08 16 55 02 06 20 18 28 18 dd 73 73 e1 d6 2e ca 55 e8 e2 8b 7f 51 8f 45 fe 5f 3d 5c bc 6a fb f7 da f0 78 da eb 55 69 f6 da a6 c8 52 7b ca a0 7a ea e6 8c e8 88 de 97 0f 70 4e ee 8e f8 84 07 60 6e e6 aa 1a 36 e8 55 c1 06 23 ba 45 04 94 52 2c b0 02 a3 30 a2 af bf fa 9b d7 1b bf b7 7f ef c3 7a e8 7f ff ff f9 4d 7b 2a 64 d2 11 0a e1 11 01 a2 50 aa 4c 86 88 55 fc 1d 4a e2 d4 92 c6 09 a4 a1 11 ab 91 a4 06 15 7b b4 a9 c3 1e a9 ff 74 fd 74 3c 9d 8c df Data Ascii: @`{+7FQ56hA@Q31{w^g\7@s+F-Uc%-H"oFZ_a\|lS7ATU (ss.UQE_=\jxUiR{zpN`n6U#ER,0zM{*dPLUJ{tt<
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: b1 09 69 d9 69 b1 fc 14 41 ef b7 7e 0a 9d 3c e3 09 d1 ad ee f6 aa f5 25 71 4e 7b 92 51 c7 bf 72 da f7 ba 13 19 d4 02 72 ac d8 92 49 06 19 21 e0 48 99 4f 0b 34 78 da 65 2b c9 54 75 d5 9c fe f1 fa 67 af 96 ed b8 a7 bc 40 57 e0 db 72 fe 11 c8 f1 4c f9 ff 7f 37 bf df 27 e4 a4 44 4a a4 90 04 bc e2 33 f7 50 92 2b 74 0d cd b9 06 35 ae 88 33 eb 5c 46 4c 9f e9 97 7d 7c 01 95 74 d4 b9 cf fa 74 54 d3 a7 36 ff e5 56 fd 5f 5a a0 04 2b a0 50 55 08 d2 e4 a6 84 02 ca 54 d0 5a df 14 ca 00 9a c1 90 da d9 fe 9b d2 79 f7 70 ea eb a4 fb dc 0c ad df b1 37 3b 93 e9 f0 86 09 be 7e 4e 4f 4a 4c 76 73 8f ff ff bb f9 df d9 87 06 49 02 39 21 85 1b a4 34 a5 21 48 20 0d 6d f1 ca be 26 e7 19 ef 8d 33 e3 8c 65 5c bf be c4 3f eb 79 a6 7f 22 ca ea e7 35 cf ff 7d 9b 5f 75 d3 54 a4 20 74 e3 Data Ascii: iiA~<%qN{QrrI!HO4xe+Tug@WrL7'DJ3P+t53\FL}\|ttT6V_Z+PUTZyp7;~NOJLvsI9!4!H m&3e\?y"5}_uT t
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: ac ba e2 c5 ce 96 e3 2f 9f fc b2 5b 4e 31 a7 ab 49 17 9b a9 7b ba 03 fc ff 55 b5 fe f2 3e 81 01 20 08 02 0c 60 12 43 16 21 12 81 a4 68 28 11 4a 0e 49 1a 4b 8e 67 25 8f 37 c9 f3 0e 36 87 6a db 3f 45 f7 5d 74 df 24 15 a0 ec 89 ca 13 53 d1 6d 51 ff f9 ff dc aa bf f7 16 85 4a 01 15 08 59 28 04 14 8a 54 04 25 09 97 c6 06 46 44 50 da d4 8a d2 d3 69 a6 ba 5c 71 43 ec 73 74 53 6c f6 ec e7 be f7 f0 85 bf e4 a8 b4 b2 49 7d a9 db 77 d6 79 3d 2f c6 ff 09 1f 7f 33 fd b7 69 ef 3d 48 0b be 88 66 6b 31 d9 dd b0 81 66 49 b9 2c 31 dd 8a 18 03 15 25 75 85 54 54 20 74 a3 5a c8 89 f9 d7 dd d0 3b ff 49 a7 ef 49 cf 76 2c d9 77 b2 6c d9 8e 4e 0a 0a 4c 49 05 0e c1 85 c1 2e aa 04 fa 9f b7 12 6c 3c 8c e9 b0 39 48 fb a7 61 29 8c 1d 3b 6c ff ef df cd fe 34 69 18 7a 2b 01 36 a5 25 6c Data Ascii: /[N1I{U> `C!h(JIKg%76j?E]t$SmQJY(T%FDPi\qCstSlI}wy=/3i=Hfk1fI,1%uTT tZ;IIv,wlNLI.l<9Ha);l4iz+6%l
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 90 1b 97 c4 ce 06 59 41 5a 43 48 eb 34 91 0b d7 b8 68 83 78 93 70 d3 64 83 38 5d 78 fe df 96 65 aa d2 ad b7 a4 aa 73 f4 a7 0c 9a 05 8c f6 28 73 10 c9 75 c6 0b e5 dc b1 93 b0 d4 5d dd b3 f2 ef ef 3e c7 dd 65 aa 01 03 6b b9 4d 50 dd ea 69 49 35 d4 fa f2 9a 88 ba 8d 0b 00 32 60 12 11 47 8e 9d 53 10 4b 33 26 4a 72 0e f2 0d 0d 49 e4 20 0a 80 82 d8 f0 cf bf a9 95 29 0b 77 fe c1 ae 67 2d d7 18 13 2a 48 30 c6 f1 6c b4 59 84 c6 ff 28 36 e7 f1 b3 34 42 fb df 58 1e 89 eb d1 1c 99 5a 8f 35 85 22 4c 11 ec 61 cb 59 8f a5 1c e4 29 63 4c b8 a9 7c e8 6d 14 aa 9d 0c 00 59 13 64 52 14 2b 08 02 29 cb 75 c4 03 ff fb f9 9f 76 72 f7 3f 05 4e f1 56 a2 f1 23 6b eb 5c 72 cf 79 79 9d 75 fe 2d 25 99 36 eb ce 70 66 fa d6 4a 89 3f 25 79 ef 0d 11 29 62 55 24 89 cb 77 79 60 49 a0 46 e8 Data Ascii: YAZCH4hxpd8]xes(su]>ekMPiI52`GSK3&JrI )wg-*H0lY(64BXZ5"LaY)cL\|mYdR+)uvr?NV#k\ryyu-%6pfJ?%y)bU$wy`IF
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: a2 bb 07 14 dd 3d a0 a9 1e 00 52 f5 80 61 7b 00 ae dc 23 aa 67 00 91 43 48 b5 26 b9 09 a4 13 48 47 fa 44 38 62 33 e0 ee 01 49 f7 40 a9 07 a0 55 03 47 c8 da 7c da da f3 52 dc 24 69 13 c5 d3 c6 74 8e 67 ef 9e f6 b8 87 e3 9e ee eb ff bf 4e ab fd 77 36 3a e7 6b 19 9d 2c 69 09 4e 9f f5 00 51 bb 50 34 6b 7f 59 ce 1f e9 25 d1 b1 35 a4 61 76 06 d8 92 ed 8c 12 5e 00 2a a7 e8 80 b1 5b a0 a2 d9 16 a8 68 b6 ea 53 4e 39 e5 96 5b 0e 3c df db fa 96 be bb 72 ea f5 2e 1a 92 e9 20 19 1b 64 88 07 29 51 32 72 f7 0d 5d b7 ef c8 8a 3d cc 1b 3c c2 47 d9 fe 33 e0 19 45 bc 95 13 44 66 12 a4 44 14 d0 7f dc 3f aa f7 64 76 4e be e3 b9 40 9e fc 17 03 16 b0 4c ad 5a 81 9a bf 52 27 58 ab 16 a9 88 05 0d 53 a7 04 58 ff 19 9b ff 1e 59 c2 ab f2 7f 30 16 69 34 ea b8 b8 30 8b 2d bb 30 57 4b Data Ascii: =Ra{#gCH&HGD8b3I@UG\|R$itgNw6:k,iNQP4kY%5av^*[hSN9[<r. d)Q2r]=<G3EDfD?dvN@LZR'XSXY0i40-0WK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49782	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	630	OUT	GET /YAFdJt8dAY0/0/OpenSans-Light11079511804754366555.edc5ef6407f2e2e0713337f40bb724fd.woff2 HTTP/1.1 Host: font-public.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:10 UTC	1248	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: application/octet-stream Content-Length: 59248 Connection: close CF-Ray: 87dd982578f819df-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 3453291 Cache-Control: max-age=31536000 ETag: "c75a81f90fc0ae864e9c7597315702de" Expires: Sat, 03 May 2025 04:44:10 GMT Last-Modified: Fri, 14 Jul 2023 15:31:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_font-public Timing-Allow-Origin: https://www.canva.com x-amz-id-2: 8q9cSx9rraL6XC9KVXeTzKf12pRPI5hsGfkivLC+sXf66V+VTktrIhZhzKvKecXPlfOtRyQiBVo= x-amz-replication-status: COMPLETED x-amz-request-id: 92C7MYSBCD0N6KH2 x-amz-server-side-encryption: AES256 x-amz-version-id: l096IK_SPVRIHPo5PWDpGe9zKEdTkDDy X-Content-Type-Options: nosniff
2024-05-03 04:44:10 UTC	789	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 76 57 42 4c 6a 42 67 57 43 68 56 76 30 77 51 58 52 69 42 76 63 50 66 45 66 68 6a 75 36 4b 48 57 63 53 36 4f 4b 30 55 6f 67 4e 45 2d 31 37 31 34 37 31 31 34 35 30 2d 31 2e 30 2e 31 2e 31 2d 4d 33 4b 79 5f 34 42 4c 4c 69 6e 4f 4b 4e 46 46 53 36 63 72 51 68 31 58 66 70 76 52 4d 32 4d 73 37 70 35 66 31 72 30 75 7a 70 30 77 31 45 68 69 63 4b 31 6d 5a 66 79 32 71 62 75 5f 31 79 77 49 43 30 67 55 71 6c 43 68 56 67 5f 78 41 5f 36 4c 36 73 50 75 61 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=vWBLjBgWChVv0wQXRiBvcPfEfhju6KHWcS6OK0UogNE-1714711450-1.0.1.1-M3Ky_4BLLinOKNFFS6crQh1XfpvRM2Ms7p5f1r0uzp0w1EhicK1mZfy2qbu_1ywIC0gUqlChVg_xA_6L6sPuag; path=/; expires=Fri, 03-May-24 05:14:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:10 UTC	701	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 e7 70 00 12 00 00 00 02 02 48 00 00 e7 04 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 42 1b f1 5a 1c 9e 06 06 60 3f 53 54 41 54 5a 00 87 76 08 81 7c 09 9f 14 11 10 0a 85 a5 78 84 cb 5b 0b 91 6a 00 01 36 02 24 03 a3 4e 04 20 05 93 62 07 ce 6a 0c 85 1f 5b ff ca 91 44 e4 c6 76 8f d2 20 b5 28 dd 86 40 58 6e 59 37 bd 9d 8f de 40 4f 3b 01 f3 eb 3c 52 aa 8a b1 d3 af 18 db b2 83 41 77 40 0a 4f cd e4 9f fd ff ff ff ff bf 28 59 84 5c ce ec 25 33 97 5c 4e d2 10 40 29 78 ef db 42 91 a0 c8 46 ce 64 76 97 95 7b ea 4a ee 3b 0b f6 20 b2 c4 42 75 e4 55 21 b3 c8 c1 28 09 9a 60 fc d2 c4 a2 99 d7 1d 36 bc b0 90 e3 91 e6 ed 5c 84 9d b0 c7 61 3a f6 43 8f 21 94 42 29 94 42 a9 81 93 2a 9f 0f db 71 1c c7 1d 7e 27 d7 Data Ascii: wOF2pHBZ`?STATZv\|x[j6$N bj[Dv (@XnY7@O;<RAw@O(Y\%3\N@)xBFdv{J; BuU!(`6\a:C!B)B*q~'
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 03 66 77 af d0 3e a1 0c c0 36 0b 03 54 44 45 45 29 15 90 54 a7 62 34 0a 92 82 20 20 b4 82 41 29 8a 98 3d 75 ba 28 9d ab 30 56 29 73 d1 ce 45 dd c2 bb d5 dd 2d 9c db 6e bb fb f5 dd f6 77 db 8f b6 ec 7d 22 1a 69 a4 01 5e 9c 05 d3 7a 6d df 7d 60 6c 13 ae 88 dd 96 29 53 34 29 db fc 79 9d 59 2f 10 48 88 2c 91 45 9c 10 19 5b 36 d8 e7 e3 12 5c 6c ba 6d fa 1f bc ef b9 6c f7 9b 99 69 7f ae 60 8a 6a ff 56 d7 5e f7 fd d2 56 af e6 08 e7 0c 24 43 ab 3a d4 de 8f 81 17 d0 b0 54 e7 d6 9c 41 5a fa f5 63 03 87 d8 ce 92 27 e3 5c 68 f2 cb 9c f5 0b bd b1 e0 a9 5b 64 d9 8e 13 c5 21 9e 8f 78 e4 ba ff 1b d6 7d 06 d6 65 2e 27 f2 c1 f3 58 fa 52 d9 08 6d cb 9d 8d 85 85 85 85 fe 11 3b e1 c0 c2 c6 66 58 d8 8c 61 61 34 63 18 85 cd 1c ea 3f 1f c5 18 e3 a3 98 c3 18 df 8c 2f 3e 8a 6f be Data Ascii: fw>6TDEE)Tb4 A)=u(0V)sE-nw}"i^zm}`l)S4)yY/H,E[6\lmli`jV^V$C:TAZc'\h[d!x}e.'XRm;fXaa4c?/>o
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: a5 2f 44 ad 09 eb 60 66 cc c9 79 64 83 4b 89 c7 13 5f 7f ca 4f cf 53 2e e1 b6 10 58 10 f9 81 b8 06 79 1b 9a 2f b4 3d d0 dd e3 d0 0c 47 af ca 34 a5 b7 55 b7 46 ef 07 7d f7 c0 90 6a 0c 54 08 71 54 fe c4 d4 af eb 0c 1b 5e d6 b8 fa 81 f2 e0 2c c6 45 8d ab 1e 2f 13 7c ed f1 a3 94 7f f3 09 cd 16 9f ce a3 de cd 77 fe 7b 4f bf 80 10 c0 c8 58 a6 9e fc 5c b6 3d 06 e8 7e 2a 1c 40 cf 8c 59 80 5e 3a 2a 00 7d 50 13 00 92 68 e0 00 d4 0f 14 40 40 7f 48 7a 40 65 97 fb 2d 00 05 00 6d 63 40 e6 3b dc f6 24 8a f0 21 41 3c fe 04 a9 49 5f b4 68 8d bf ef 27 c7 32 84 f6 d8 a6 d2 7a 04 e4 91 49 32 b1 f0 e1 c1 c5 0b 37 1c b1 c1 02 23 90 c1 0b 71 fb c2 b3 71 10 f7 ad ad e6 b6 7e 8d 45 77 2a 87 25 dd 02 e4 64 8b 14 29 52 59 69 ad a5 e8 69 42 bc 01 d5 f0 57 12 39 ed ce 9f 32 b7 26 6b Data Ascii: /D`fydK_OS.Xy/=G4UF}jTqT^,E/\|w{OX\=~@Y^:}Ph@@Hz@e-mc@;$!A<I_h'2zI27#qq~Ew*%d)RYiiBW92&k
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 2e 40 92 36 16 03 cb e2 25 75 9a 4a a0 30 94 83 24 e3 21 4b 19 b6 cd 35 48 88 e2 65 4c 30 1a 4a 08 30 12 2f 54 52 0c ef 74 03 b7 39 1a 08 5b 89 3f f1 bd c4 1d 68 89 8f f1 66 c3 f3 78 84 bb d7 08 7d 72 71 a9 34 e1 2c ef 6a e2 48 ac ec 2a 63 6f c8 b1 23 29 61 93 14 16 42 14 26 44 77 87 43 10 3d 4d 9b bc f3 39 03 34 06 3b 55 45 e9 06 7a e4 6c a5 e3 93 64 55 13 02 8c 27 20 16 1f 91 82 f1 7e 04 cf 28 42 66 87 5a d7 80 59 37 7d 7f f5 2b df ab b9 a6 34 19 fb 20 93 6e f7 da 86 0b c3 0d a7 eb 9a 13 cd 99 82 3a 6d 54 c5 6e a1 32 c0 c1 ee 86 4c d9 d6 b6 4a 64 9d b6 a8 ad a8 18 33 15 62 b0 fc d4 d5 96 0d f5 93 39 61 bd ff 0e 88 ab 98 83 1b 2d 56 24 97 8b 7d ad 7c 79 0b 4a b3 74 38 15 97 50 95 58 17 07 db 03 66 0b e8 e6 e3 28 1c d2 d4 32 07 97 9c b3 d0 ca 7c d1 d9 17 Data Ascii: .@6%uJ0$!K5HeL0J0/TRt9[?hfx}rq4,jH*co#)aB&DwC=M94;UEzldU' ~(BfZY7}+4 n:mTn2LJd3b9a-V$}\|yJt8PXf(2\|
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: d8 0f 81 a8 60 29 6f e1 f5 67 e7 04 15 31 c5 a3 e4 20 46 f4 7f e2 38 4f e8 60 6e 9c b3 8d 1a 66 c6 19 42 1e 67 c6 a9 80 12 01 a9 41 44 91 55 f1 50 10 00 4f c5 bd 1b c5 8d 81 1b 64 63 29 fd 69 03 b1 ef f4 c3 3f d2 1b e2 cf 67 3c a2 bb 71 3d b8 44 67 45 0d 5b e8 08 ad fc ac a4 bd 24 a7 1d b4 89 16 48 d4 fc 7d 9a a0 e1 a3 08 d2 2a 09 74 3d 81 ff 6a 52 34 18 d4 6c 65 a5 28 73 4f 8b d6 e6 7e 0b 37 26 ce 62 72 c8 35 4b ac f0 8f 36 ed 03 8d a8 c8 1f 2c c3 5b 09 d1 c6 cb 37 20 eb 0a fb a1 11 00 92 ff 96 42 16 84 61 31 7c c8 83 d4 a5 0a b2 e2 e4 9b 3f 32 36 17 e3 9b 51 5a 32 16 0d 0c 4a 6a 09 da 68 bc 44 2b d6 7f e8 db 14 9d 0b a8 2e 57 80 2c 25 c5 14 21 52 26 41 50 05 52 42 b7 0e 7c 1d db 7b c0 7b 53 a4 99 66 da e5 a1 c9 d9 16 df 83 9d ae 63 4b 1b ab 9e ef 84 ba Data Ascii: `)og1 F8O`nfBgADUPOdc)i?g<q=DgE[$H}*t=jR4le(sO~7&br5K6,[7 Ba1\|?26QZ2JjhD+.W,%!R&APRB\|{{SfcK
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: c6 3d 88 43 21 67 c6 c1 2d df ca b3 a5 9e c1 9d 30 ae 33 52 38 75 e9 29 b4 53 d7 88 2c 9a a9 e1 52 50 15 ae a4 b0 65 7b 8c 95 ab 6a ff 11 d7 10 e1 55 58 63 db 93 38 24 51 2b a8 de d2 fd 1d cc ea d1 0d 94 4e 89 d9 6c b6 0f 40 9f 1b 3c b1 57 12 06 93 75 f3 da 40 a1 47 fe 61 4f 41 48 df e2 a8 47 c7 dd a3 14 ad a6 58 a2 56 53 dc 63 26 20 a7 8a c6 bd 71 32 9e ff 40 64 70 ca 10 d2 83 f7 f1 a7 60 05 96 f3 6d 08 a2 eb e7 b9 b3 37 32 25 69 08 aa dd 19 e9 7b cf 8c ac d1 85 3d 46 14 60 4d 03 43 1e 8e e3 2e 06 72 b1 b8 74 5b 7a 35 cf 8e 13 f0 52 b8 40 c3 0e 68 7b 60 73 7e 44 44 78 15 56 76 b6 27 da 25 eb 7a 62 e9 62 94 88 6b 52 11 42 b7 61 81 86 1d e1 4c 8d 8b 49 8a 92 0a ad a4 0e 79 e2 25 f7 c4 46 ab ee 14 de 4e 9b ef 56 11 6a 52 93 cf 28 00 cf 0e 94 81 9a d4 ad 34 Data Ascii: =C!g-03R8u)S,RPe{jUXc8$Q+Nl@<Wu@GaOAHGXVSc& q2@dp`m72%i{=F`MC.rt[z5R@h{`s~DDxVv'%zbbkRBaLIy%FNVjR(4
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 9a 32 63 0e 16 e0 33 7c 45 22 25 55 04 d2 1c 87 e2 70 76 e7 cd 62 98 8d ed 6b e6 98 0c c1 7a eb 62 f5 d5 a5 ea e4 f2 10 f0 65 8c d8 84 ff 75 4a dc 69 45 96 81 43 04 3d b9 43 c0 10 6d d4 50 46 ce 76 41 09 b4 9d 17 c1 b5 1d 72 1f db 03 a3 cc ee 26 96 5b df bb 4f e3 17 12 0b d6 03 8a ee e9 1b 18 1a 19 9b 98 9a 99 2b ab a8 aa a9 6b 68 6a 69 eb 44 a0 2c 33 00 3a a7 44 fa 7d 37 67 ab 9b a2 88 50 2d c5 c6 2e ad 43 f9 e6 13 10 14 12 16 11 15 13 97 d0 51 6a 35 73 cd 90 64 f5 19 a0 12 f6 0f 2d 2a 80 93 e5 fe 57 1a b3 43 7d 77 de b4 95 cc 03 a1 c1 42 7b 2d 4e 00 8c 34 ba c1 7e be 1b 70 f3 e8 fa de 6c 09 57 aa 65 84 86 50 59 68 c1 f6 7a 08 12 1f 7a ef 5f 8b ed f6 89 54 25 80 86 d4 40 7b 42 57 c4 9d a5 63 52 fa b9 29 4a 90 c3 7d 0e bd e6 5d 9f 77 23 02 b5 ab ee b9 ee Data Ascii: 2c3\|E"%UpvbkzbeuJiEC=CmPFvAr&[O+khjiD,3:D}7gP-.CQj5sd-*WC}wB{-N4~plWePYhzz_T%@{BWcR)J}]w#
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: e8 d0 1c d6 c2 90 44 49 96 ba 68 8e b6 f8 18 73 f2 4b d5 ba 83 b7 e0 b3 52 80 25 61 68 9b ca ed a9 23 35 02 85 55 58 76 1d c7 78 bc 57 f5 b6 ae e9 ba 69 07 5e f3 7d ff 1b 68 2f 6a 8f 72 cd b6 a0 fd 77 95 a0 33 0e 59 28 35 61 46 16 b1 9e 72 72 17 f5 1c 09 e8 a4 f0 b0 c6 b1 60 32 ec 24 e1 b7 49 9f 45 ba f5 3d fa 5e 70 d8 be d4 d7 9a a8 7e dd 58 d7 54 76 fc f7 70 b5 71 ce b1 d8 2c aa 38 40 0e 10 8d aa 6e 9b 6e d5 2d ae f8 40 f6 da c0 22 7d 7e 22 16 5f 5b 1c 5e 1c 5a 1c 5c 5a 67 ad c8 1b bd bf 5f 38 d2 2c 0e 80 c5 ff 2e a6 fd 6d 29 c5 51 3d b1 ff 7c 1b fc 56 a9 69 7a 3b ff 36 73 42 fe 6d fa 5b a3 66 4d 3d 57 7f 89 a7 c5 53 e2 0f e2 71 f1 98 f8 85 f8 b9 f8 c1 84 14 00 98 b8 9e 18 07 13 be aa 4e 5c 08 c4 85 15 58 2c 3d 11 30 be 38 fe 6b fc f3 f8 ed 71 7d 88 83 Data Ascii: DIhsKR%ah#5UXvxWi^}h/jrw3Y(5aFrr`2$IE=^p~XTvpq,8@nn-@"}~"_[^Z\Zg_8,.m)Q=\|Viz;6sBm[fM=WSqN\X,=08kq}
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: ba 00 65 1f 8e 69 b1 39 e4 da d2 c8 b5 b8 e8 e5 d1 76 ba 1a b7 8b 03 19 5f d6 c2 4f 51 0c 14 63 c0 98 8e 9d d5 26 37 68 93 32 0b 5b 6e 38 0e a5 31 ae 24 e0 a9 a4 db ea 12 d8 53 3f 0b 08 b7 4b d6 e4 9a 9d 85 a1 0e 98 22 29 d0 fb 52 43 c0 36 01 74 68 99 eb 17 dc e3 04 dd cc 35 04 b6 10 3b f8 8e e3 75 97 3d a7 35 b2 68 ca cf 00 62 6e 4e a8 c8 40 d1 69 db 61 17 bc 6e 0b 1c 01 5a ab 26 58 dc bd fe a5 e6 89 70 20 7a b0 b9 d0 7a cd ee e8 ee 1b 38 50 9a 8c fd 96 57 d1 b3 a3 92 ba 14 e7 38 59 0b 00 a8 01 89 c3 3d e0 45 76 64 48 94 6e 2e b1 b8 e0 f3 81 7d 33 60 52 bb e4 17 0e 68 fb 48 02 6c 15 4c cd eb b0 33 d8 bf e2 4c 51 cb ed 08 3c 6f e1 d6 4a 80 57 d2 10 30 17 0f 62 8d e1 12 67 05 db 04 da de 45 ea 5c 0d f8 22 3b 30 54 41 68 cb 55 ee ca 73 35 9f 08 8d 5a 6e f2 Data Ascii: ei9v_OQc&7h2[n81$S?K")RC6th5;u=5hbnN@ianZ&Xp zz8PW8Y=EvdHn.}3`RhHlL3LQ<oJW0bgE\";0TAhUs5Zn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49784	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	883	OUT	GET /1/image-resize/1/712_189_92_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAPYxeOmPyW1bzVYb40NMA0bprSvrwK8HvGIql4lomZuh&exp=1714727913&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAGIqZFKlSkxdgQR7mXGP2n_ohxCdpEqOs_fVMzH2HDwU HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:10 UTC	1217	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98257ded42b0-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 116410 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: qual=85, origFmt=jpeg, origSize=21147 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf48ca1 Set-Cookie: __cf_bm=7acz524wFxzFqpzgcqV8tacaGHDRJEgNKsK13f6BdIs-1714711450-1.0.1.1-sfY3r_C3QAVftl49RQMmoLkAmMDng69t.JfOmBQOW1AsFqof1s1TY4rY8R4Ngivg8DWPE5W6EOeNnsVSRTgPeQ; path=/; expires=Fri, 03-May-24 05:14:10 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-05-03 04:44:10 UTC	511	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 62 68 25 32 42 74 35 63 7a 50 76 77 59 56 52 66 30 76 25 32 42 73 38 4c 50 45 71 71 4f 56 38 41 33 71 6a 6c 6f 4e 47 65 73 39 45 76 72 25 32 46 41 6d 6c 53 61 58 4c 41 6e 6b 71 77 35 35 53 73 49 6e 45 6b 44 62 77 31 75 30 25 32 42 46 69 79 61 56 52 42 31 58 46 31 75 5a 36 72 30 44 75 36 78 50 49 4f 34 39 70 79 48 32 53 30 59 55 72 68 4a 44 32 68 39 4b 38 4b 37 4c 4e 79 53 66 39 35 35 74 58 71 69 4a 51 41 4f 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bh%2Bt5czPvwYVRf0v%2Bs8LPEqqOV8A3qjloNGes9Evr%2FAmlSaXLAnkqw55SsInEkDbw1u0%2BFiyaVRB1XF1uZ6r0Du6xPIO49pyH2S0YUrhJD2h9K8K7LNySf955tXqiJQAOw%3D%3D"}],"group":"cf-nel","max_age":60
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 32 30 63 61 0d 0a 52 49 46 46 c2 20 00 00 57 45 42 50 56 50 38 20 b6 20 00 00 f0 83 00 9d 01 2a c8 02 bd 00 3e 49 24 90 45 22 a2 21 92 b9 cc ac 28 04 84 a6 ee 17 4a 10 36 cd fe 33 f8 cf c6 6f 06 d9 af c4 bf 6a fc a1 fe 97 ee d1 58 fe 87 f8 03 fb 97 ed 17 e2 15 b0 18 bf fd af 9d 77 98 fe 81 fe a7 fb 97 f9 7f d9 6f a2 3f e3 bf c3 7b 23 fc d3 fe 0b fb 47 ef 07 d0 2f e9 5f f9 2f eb df e4 bf f6 7f 8e f8 dc f5 49 e6 1f fa af f6 df d8 af 77 af f5 df b2 7e f9 bf c1 ff a5 fc 39 f9 25 fe a7 fe 17 ff c7 64 5f a1 a7 ee e7 a6 7f ee 0f c4 57 ed d7 ec b7 b9 b7 f8 5f ff 3a cb df 98 f2 5d f5 5f d8 bf c5 7f 68 f2 3f cf d7 a0 b7 51 bf 3f 60 1a 8a 7c cf ee a7 f0 bf ae fb ab fe ab fe 1f 86 bc 00 bf 23 fe 57 fe 2b f3 0f e4 dd f5 ce 02 f7 0b ea 9f ef 3d 58 3e db cd 3f 10 0e 0f Data Ascii: 20caRIFF WEBPVP8 *>I$E"!(J63ojXwo?{#G/_/Iw~9%d_W_:]_h?Q?`\|#W+=X>?
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 12 c0 ea 8e bc 4a 81 59 34 87 35 e4 98 07 6e 6d ff b6 d8 ab 13 3a 0f a5 d3 5a 26 73 ea 69 0f 59 9e 86 4e 9c 8c cf d9 bd dc 67 87 5d 9b fc b0 fe e6 9d 01 80 ee c9 ff 6d ad eb 84 9a 5d 2e 7a 74 86 fd 74 6b 21 8a ad a9 28 d1 47 29 3c 72 2b d0 2e 7f bd ab 75 82 8d fc f1 85 61 b3 7a 9b d8 11 53 47 34 3b be f5 d0 96 09 1c 37 64 30 fe 8c ee 44 f3 8b fe 90 ce ed cb 09 44 8e d4 a6 a7 18 d3 4a 9f 78 d6 d1 82 44 41 9e 3a 81 1d 58 c3 2c aa b3 f4 0f 77 ba 99 01 4b 5b f7 93 9a 99 e5 b8 d7 fd 67 bd bb a3 d8 7d b6 db ce 79 ee 07 33 f8 a2 ee d5 cb 43 58 8e 69 9b 81 fd 20 df d7 a8 98 59 f6 11 63 e7 8c 91 97 ef ca 11 34 2d 20 6c 6b 32 3f 43 6d 79 eb f3 1c c5 3a f2 0a a0 f4 53 48 dc 44 b6 28 d3 45 d0 6d 57 1e 92 e4 03 4f d6 c2 42 6a b4 a2 21 f9 38 fe e5 9c e3 f8 f3 c7 1d 64 Data Ascii: JY45nm:Z&siYNg]m].zttk!(G)<r+.uazSG4;7d0DDJxDA:X,wK[g}y3CXi Yc4- lk2?Cmy:SHD(EmWOBj!8d
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: f8 40 4d 36 70 0e 8e 0f ae 5b 4a 35 6a ef 96 f2 89 19 ea af 46 96 81 c0 82 79 a1 21 f6 9c 59 b6 44 a3 73 8f a0 ab 55 7d fc a3 07 1e c7 cd ab bd 09 18 e1 55 37 f9 80 db 8f 14 d8 62 12 3c b7 53 f2 1b d6 df 9e eb 27 5a d7 0d 85 01 de 99 3d 53 75 3e 57 0a 1f 6e b1 59 6c 75 2d 14 6e 7c 02 30 15 70 23 3d 56 a3 47 0e f2 1a a3 19 92 11 d4 9e 6b 1e b9 a7 f0 5f 9d 09 4f e8 4b 38 c1 e0 da 6d b8 2e d4 8b 76 1d b9 b0 8c 99 a6 c0 fd 6f 98 86 38 6f 9c 98 3e 76 55 6e d0 fd ec e3 9d b0 e3 7a 15 95 57 4c cd d6 6c 8a 2a 43 08 e2 56 12 a3 57 04 bb 85 16 1a 29 7e af 49 0a ca af 14 97 57 9b ca c9 66 4c 0e 23 44 e0 7c fd f3 3b 38 f6 92 5d 48 4d 27 0a 1d f4 2a 87 49 28 5b 91 19 bc b7 81 f8 9e 14 f8 ff c8 6c b0 b7 90 88 29 80 cd 12 87 4b ba 93 b2 aa 99 2a 21 b4 ec 7e e4 51 0a 4d Data Ascii: @M6p[J5jFy!YDsU}U7b<S'Z=Su>WnYlu-n\|0p#=VGk_OK8m.vo8o>vUnzWLlCVW)~IWfL#D\|;8]HM'I([l)K*!~QM
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 5f 7c c5 cb 9f 2d 96 ed 64 4a ec ca 25 5f 7e 63 e5 7f 5b bc 06 7b fc 6f f9 46 03 e8 c2 7b 9b 4f 43 53 3b 82 ca 29 a1 73 bd 6a ca f5 81 3b 37 e5 9c 5a 68 5e 1c 79 f9 90 18 3b eb d8 b2 ca b7 cf 43 06 01 49 a2 8d 38 52 be 97 26 67 29 bd 1b ad 73 87 75 aa 0f 73 16 a7 0b 43 10 0a 68 47 77 3c 7a 2b 4b 43 c0 d7 2f f0 8d 44 a2 ca c3 40 82 b4 60 66 ff 85 0a d5 9f 52 d0 5a 5a 44 56 ff d2 f0 46 66 33 cf 52 48 31 b4 b6 93 0b f1 a5 c3 e7 50 04 86 9c 65 13 ff 7f c4 a6 c4 34 62 ac 80 65 ce af 27 20 b7 49 d2 09 ab 84 99 d0 e0 51 3e e2 d5 78 9a 2f 06 e5 43 e9 82 9c 43 10 d8 f5 b0 ec 80 e1 f9 13 cc 81 8a 28 a5 ba 8b b6 78 5c 8e 91 92 d8 a2 db 1e 19 40 ed c3 1b 94 9c 1d 74 1c fe 1b 7a 66 c0 04 5a 50 fc 3e 2c f4 51 8e de 7d 16 be 36 33 0f 42 7b fc 23 59 50 c5 b1 0e ce 01 03 Data Ascii: _\|-dJ%_~c[{oF{OCS;)sj;7Zh^y;CI8R&g)susChGw<z+KC/D@`fRZZDVFf3RH1Pe4be' IQ>x/CC(x\@tzfZP>,Q}63B{#YP
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: fa 4a 45 20 39 0f 2e de 21 08 33 2c 4a 4d 97 a2 41 83 2b f1 0e 2e 62 7c 2d 97 c0 93 f7 67 db cf 1d 0c b8 94 64 1d 94 41 7a 36 59 78 20 d2 91 e8 d0 d1 13 5a e3 e1 e1 65 7c 7a ef 06 6c a8 87 ed ed 8b b1 83 eb 7a bd f3 58 f7 6e 3f 67 cc b3 e6 1e f3 c3 14 1c 90 91 de 51 e7 c1 47 95 74 a3 68 53 15 0b e6 f2 a3 c5 27 ea 4e 06 dd 85 21 77 c9 81 a0 ee a2 b0 ae 56 9e 0f a0 0d fc 90 f0 1f 41 cb 0f 11 3f bb 76 a1 ed 4b ad 5c c8 8f b3 59 a1 f4 53 a9 ac 9f 3d 40 8b 9f 4b 38 7e 34 01 38 2a 6d e1 00 d0 e8 0d d8 95 34 b1 f8 74 35 62 03 4c b9 aa 12 43 7e 79 69 8b 40 39 a2 4f 1b 3b 9a 72 88 05 56 74 c5 fc b2 01 24 45 8f 37 d8 0a 0a bf 68 68 e8 4c 37 3d 39 31 8e 48 6d af c6 a6 9e 1d fa eb 64 f1 c5 61 ea bb 01 0e d9 d6 ef 59 4b 67 95 53 f2 6a 12 42 30 12 37 39 14 95 2a 69 30 Data Ascii: JE 9.!3,JMA+.b\|-gdAz6Yx Ze\|zlzXn?gQGthS'N!wVA?vK\YS=@K8~48m4t5bLC~yi@9O;rVt$E7hhL7=91HmdaYKgSjB079i0
2024-05-03 04:44:10 UTC	1369	IN	Data Raw: 60 4a 4c 19 eb ae 22 d4 f3 3d 53 39 f4 4c a1 37 48 34 79 37 52 a7 eb 0b 68 21 21 6c 45 d4 de 6f c5 5a 9b b3 09 0b 2a 90 7e dc 22 8d 1f b3 47 a5 14 54 6d fd e3 f1 3e 60 21 8e 3f 78 a1 d4 61 48 10 69 75 00 61 75 1a 7e 39 0f 59 2b ee eb 34 5f a7 c0 50 aa 9f 78 38 2f 0a 8d bb e7 a7 f9 c6 94 09 d1 71 5d 38 c0 8c 6b ef 61 fb 17 84 f0 01 d9 2f 73 77 7d 54 97 71 cb d5 1b 4b 7e 75 d5 5d 7c 7f 9b b8 89 28 e6 a3 70 08 60 e7 37 69 de 50 28 16 d0 c6 7d 7d 20 f2 3d b3 e8 ca b8 5f 2b 29 32 35 08 54 5b 3e 3f f6 8d 9d e9 53 ab 07 58 87 8b 1d 69 4a 28 31 7b b9 b7 b8 c6 d9 a1 ee bc f3 2b d2 f6 ba f1 34 38 54 df 19 00 ab f5 af b0 43 88 06 2e 70 1c 1a 26 1e ce 32 7e bb c4 c8 c8 0b 9a 38 bb b7 a9 03 93 7c c8 4d c8 49 32 6b bb ce 30 ec e5 12 c3 5e ab 54 5d 8f 89 22 47 86 f6 ad Data Ascii: `JL"=S9L7H4y7Rh!!lEoZ*~"GTm>`!?xaHiuau~9Y+4_Px8/q]8ka/sw}TqK~u]\|(p`7iP(}} =_+)25T[>?SXiJ(1{+48TC.p&2~8\|MI2k0^T]"G
2024-05-03 04:44:10 UTC	188	IN	Data Raw: ea f9 c4 1e a3 13 b0 9a a5 c8 73 f7 60 e7 6e 75 aa 10 0e 18 d6 82 7f 6e 14 b2 1b f6 07 25 c6 d4 68 19 29 6e a0 62 f1 35 4c 02 10 0e a5 14 ef 8a bb 04 a1 36 e0 1f 6d 1c e7 f8 7b 95 be 7b 83 79 02 7f fc cf b9 6e 46 0e f8 1c 91 7c 03 8f 82 89 83 2c 53 37 53 39 58 46 4d 85 fa 87 0b 3b 90 9a aa ea c5 39 c8 4a 03 22 5e b3 d6 77 e9 38 f6 e5 88 04 4a c8 87 a2 d4 4e d8 2e 77 18 c5 5d ba d6 a0 15 f3 25 35 91 ea 2d 0d 6c 98 b7 5b a6 49 4d 9b 19 0b f6 61 31 cc 46 32 b0 2a 08 e5 37 b0 d1 0f 2e 5c 80 00 00 00 00 00 00 00 00 00 00 7b 04 4c 3b 2c 00 00 00 00 00 00 00 0d 0a Data Ascii: s`nun%h)nb5L6m{{ynF\|,S7S9XFM;9J"^w8JN.w]%5-l[IMa1F2*7.\{L;,
2024-05-03 04:44:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49783	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:10 UTC	885	OUT	GET /1/image-resize/1/200_53_75_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAB6daLSOMIMldyWCy4W8HA8OQDYBB1CM9WO_lTXa_UQd&exp=1714727913&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAABhv6lWY6En1hWe0SjUShCcYXN4KBGo_Fd_AjJojQYM2 HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:10 UTC	1215	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:10 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98257fa70f73-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 29226 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:56 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: qual=85, origFmt=jpeg, origSize=5889 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf88ca1 Set-Cookie: __cf_bm=BuefPhwJqoBdiL0HcdvyOlU_TigJdSzPFCK37hZNEQk-1714711450-1.0.1.1-ibAGbUf94EczqzDGDWoXvDI3zicXUMEfYxZ.8YZ3AWi9X2vTTNu2qw2VKDD1Ejl1vVnuxi.t8vzGU_bgwxKg1g; path=/; expires=Fri, 03-May-24 05:14:10 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-05-03 04:44:10 UTC	505	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 57 65 65 4f 79 56 61 53 58 62 70 46 70 52 79 37 46 77 6d 32 66 65 61 55 66 6f 46 57 53 72 45 56 79 34 37 4c 61 53 4d 7a 4c 4b 69 4a 46 74 50 43 70 43 67 4b 30 62 55 67 67 31 30 75 6e 43 4e 46 33 56 74 66 70 4b 73 45 75 58 77 47 4e 76 6b 31 61 41 75 65 6f 4e 4f 62 6b 36 32 56 46 36 25 32 42 4d 52 53 58 44 38 54 71 44 6b 57 59 67 38 59 50 33 58 6b 72 65 44 41 72 58 39 65 58 53 6c 33 52 6c 6c 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WeeOyVaSXbpFpRy7Fwm2feaUfoFWSrEVy47LaSMzLKiJFtPCpCgK0bUgg10unCNF3VtfpKsEuXwGNvk1aAueoNObk62VF6%2BMRSXD8TqDkWYg8YP3XkreDArX9eXSl3RllQ%3D%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:10 UTC	1018	IN	Data Raw: 38 63 34 0d 0a 52 49 46 46 bc 08 00 00 57 45 42 50 56 50 38 20 b0 08 00 00 f0 26 00 9d 01 2a c8 00 35 00 3e 49 22 8e 44 a2 a2 21 94 5b 6c f0 28 04 84 b3 00 69 c8 08 3d 67 f1 e3 f2 3b e4 ee b7 fd b7 f0 a7 0c 8d 0f e5 7b c8 df eb 3e e6 7e 86 7f 9c f5 39 f7 55 ee 01 fa a9 e7 97 ea 63 f6 2b d4 4f f1 1f ed df b3 3e cc df b3 3e f0 fd 00 3f ae ff 89 f4 77 f6 3f fd b1 f6 1d fd a3 f4 d2 fd b9 f8 52 fd ac fd b2 f6 98 ff d3 5a bf 91 ff 4e fb 73 ca 7a 20 5d 8d fe 67 fa af bb 1f d9 3b f7 da 97 fb ee f0 48 00 fc 7f f9 97 fa af e9 ff d7 7c 24 bd 0b fa b9 e6 97 fe f7 d6 6e f2 99 0d f4 39 ff a3 cd 6f d4 1f f9 ff cb 7c 0b 7e af 14 62 a9 bf e7 d9 aa 87 fa 1b 31 ed be 9c a8 29 4c e5 a9 30 1d 4b 77 fa c5 5b a8 dd 13 96 fc f4 a3 cb cd ca ab 7c 27 24 ee cb c7 a0 1c cf 36 3d e8 Data Ascii: 8c4RIFFWEBPVP8 &*5>I"D![l(i=g;{>~9Uc+O>>?w?RZNsz ]g;H\|$n9o\|~b1)L0Kw[\|'$6=
2024-05-03 04:44:10 UTC	1233	IN	Data Raw: 17 5b 27 5f c8 55 c8 4b f4 b5 11 d3 39 30 97 cf fb e9 3c b4 72 af e1 de d2 fd 3c 09 24 f0 bf 08 95 78 44 90 c9 e8 0f 30 ed c7 69 3e aa d7 83 8c 71 90 fb b1 62 91 e8 17 64 a3 b3 aa ad 64 e6 c2 bf b5 be 4e 8c ab 83 b9 da 43 05 f0 2b 8a 5a f5 42 32 09 6b a0 b4 27 74 02 5f 2b 1d bd bc b3 76 f9 3c e6 25 06 49 ec e7 70 7b d2 24 6c 43 04 f1 89 2f 4f 81 5d a0 b2 d2 b3 2a f2 ff 4c 7b 47 a1 f5 09 7a b5 62 35 4d 47 b4 24 53 ef a9 ea 20 6f 84 de 79 62 06 6d 9a 69 39 1e 0c f4 9f ff c2 9e 38 89 6c 3a 77 5a a9 4a d9 c3 8b 75 bc 15 e0 a1 66 be 45 22 f6 33 ad 54 f8 65 e7 e9 c2 a4 53 bf dc 6f 3b 98 c7 61 11 9c f7 36 df 67 d7 fb 9b 73 00 48 95 1a 8c ea 33 26 31 1f ec d3 9b 93 37 53 68 09 6b 0c 51 6d 52 d7 44 51 c9 59 de 76 f4 2e 4b b1 3e b1 f1 80 8c bd 06 a6 fe 0a 93 9c 63 Data Ascii: ['_UK90<r<$xD0i>qbddNC+ZB2k't_+v<%Ip{$lC/O]*L{Gzb5MG$S oybmi98l:wZJufE"3TeSo;a6gsH3&17ShkQmRDQYv.K>c
2024-05-03 04:44:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49787	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	883	OUT	GET /1/image-resize/1/395_96_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAGHbvX3xneW7SjcGPwRyf6_pp2Citdqk7T-79AamUlok&exp=1714727649&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAKAHhCl6skExOp6e0a73StuXf5NL8aE0ulbOhjloKTh5 HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:11 UTC	1205	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 87dd982decf55e73-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 65693 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Thu, 2 May 2024 10:29:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=5493 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d754589be842c0 Set-Cookie: __cf_bm=iklpE_CvAY3apLiI53X6hytLsrdNCmsp6JXjUr8UH1A-1714711451-1.0.1.1-K8uYSdsRPq9Nw8EIyPX7qc0JGF_.rwk2YWrIcnloQHeSit3qOXLUeBslgSPDFCDIIjJ8O9zSj1JBrFLhmRFmcQ; path=/; expires=Fri, 03-May-24 05:14:11 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-05-03 04:44:11 UTC	513	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 38 59 25 32 42 64 41 47 49 61 79 54 6b 6e 4d 78 31 47 35 51 67 56 55 72 38 37 59 31 41 4f 71 52 4a 63 4b 53 45 70 6d 25 32 42 6b 33 77 4e 4a 62 25 32 46 76 33 51 52 4e 42 6f 6e 62 54 79 75 5a 33 32 51 77 52 50 43 41 6f 53 41 30 6f 5a 69 32 65 58 52 45 57 6b 58 25 32 46 38 31 4e 6e 59 30 56 57 53 57 52 74 35 4c 66 50 77 42 48 64 52 42 54 5a 5a 6f 52 62 34 6f 7a 69 5a 68 5a 6f 53 49 35 6b 69 43 74 64 32 25 32 46 41 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Y%2BdAGIayTknMx1G5QgVUr87Y1AOqRJcKSEpm%2Bk3wNJb%2Fv3QRNBonbTyuZ32QwRPCAoSA0oZi2eXREWkX%2F81NnY0VWSWRt5LfPwBHdRBTZZoRb4oziZhZoSI5kiCtd2%2FAg%3D%3D"}],"group":"cf-nel","max_age":
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 35 62 34 0d 0a 52 49 46 46 ac 05 00 00 57 45 42 50 56 50 38 4c 9f 05 00 00 2f 8a c1 17 10 af c1 a0 91 24 45 75 77 cf 4c fe 15 be 03 5a 1b 6c db 46 72 c4 b9 e8 de db ec fb 2f f3 7e 0d a4 6d 93 7b b8 7f a9 2b db 46 92 14 cd 82 7f 0f f9 67 f4 01 30 83 f5 16 f3 6f 00 a0 eb fd ff fc c2 f6 0e cb 15 a6 73 18 f7 30 ee 43 bf 0e c3 1a fa 75 e8 97 d0 cd a1 9b 43 37 07 fb 5c d3 50 19 c2 fa 67 c1 f4 d4 cd 4d ef 4e 10 3e a1 d0 e0 50 e6 84 61 c1 1b 10 48 08 24 61 4a 1b 10 46 98 f8 13 a4 64 3f 84 38 41 89 5f c8 3f 90 52 07 56 82 ef 26 32 48 d7 b6 ad 69 24 63 01 15 95 6c 61 0a db 7b ef bb e7 7f 6e 09 df cb 87 1b 32 f1 d7 7c 44 f4 1f 12 24 c9 6d 9b 81 e4 1c e6 16 24 00 c2 f1 5d 85 6d ff e7 cb fb a7 57 fe f2 6e 57 f2 fe eb ef 7d 85 db b7 d7 37 fe 72 6f f2 fa fb 0e f0 e8 d3 Data Ascii: 5b4RIFFWEBPVP8L/$EuwLZlFr/~m{+Fg0os0CuC7\PgMN>PaH$aJFd?8A_?RV&2Hi$cla{n2\|D$m$]mWnW}7ro
2024-05-03 04:44:11 UTC	98	IN	Data Raw: 7a 4b dc 37 c5 9f 46 dc 14 7f 30 74 53 fc 19 dd 4d f1 c7 a5 1f 3f df 0c bc dd 57 3f b6 c2 3b cb cf 4a 76 9f 37 02 1f 77 1b e2 9f d6 78 18 fe 2b 27 af 36 00 f2 af 0a db c3 cf 97 fe 3b c8 c7 87 15 6d bb 9f 17 fe bf fd f3 6b 57 c1 b6 ff fd e5 fd d3 db 4b fc 1f 38 91 f7 5f 7f 3f a8 82 26 00 0d 0a Data Ascii: zK7F0tSM?W?;Jv7wx+'6;mkWK8_?&
2024-05-03 04:44:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49795	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	865	OUT	GET /web/images/0483f2b648dcc986d01385062052ae1c.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:11 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/svg+xml Content-Length: 368 Connection: close CF-Ray: 87dd982dfaf30ca4-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367461 Cache-Control: public, max-age=31556926 ETag: "0483f2b648dcc986d01385062052ae1c" Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Fri, 05 Jan 2024 01:59:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: pKKwB1VbPin77L5p89kVBmbGokHXM7WiOZtSgG4ZzNlFPfCYHVz5X9KjadkBz8OwU2FgMx7m9/0= x-amz-replication-status: COMPLETED x-amz-request-id: SBT43GNZ5ECZ2WWZ x-amz-server-side-encryption: AES256 x-amz-version-id: 9n6EP3FscgJ5AW31sdcdE0BNB9TJQZEp X-Content-Type-Options: nosniff
2024-05-03 04:44:11 UTC	360	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 77 76 51 6d 4c 35 5a 38 37 63 64 25 32 42 77 47 51 6b 35 30 52 68 35 67 66 34 75 52 38 48 6d 73 76 6c 59 41 4b 52 25 32 42 58 5a 77 43 53 4c 37 33 4d 43 6e 25 32 42 46 43 55 65 36 54 7a 25 32 42 45 41 69 78 6d 62 64 49 25 32 42 53 68 34 6d 35 64 6a 7a 52 4a 69 58 42 53 25 32 46 64 44 61 4d 4d 6f 7a 56 59 6e 5a 45 50 25 32 46 62 74 4e 55 43 57 69 62 62 50 25 32 42 68 71 41 38 6f 5a 69 52 6a 63 50 57 4a 42 51 4f 63 56 6b 56 47 5a 61 4a 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wvQmL5Z87cd%2BwGQk50Rh5gf4uR8HmsvlYAKR%2BXZwCSL73MCn%2BFCUe6Tz%2BEAixmbdI%2BSh4m5djzRJiXBS%2FdDaMMozVYnZEP%2FbtNUCWibbP%2BhqA8oZiRjcPWJBQOcVkVGZaJc%3D"}],"group":"cf-nel","max_a
2024-05-03 04:44:11 UTC	368	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 44 32 45 34 34 22 20 64 3d 22 4d 33 35 2e 38 38 35 20 31 31 2e 38 33 33 63 30 2d 35 2e 34 35 2d 34 2e 34 31 38 2d 39 2e 38 36 38 2d 39 2e 38 36 37 2d 39 2e 38 36 38 2d 33 2e 33 30 38 20 30 2d 36 2e 32 32 37 20 31 2e 36 33 33 2d 38 2e 30 31 38 20 34 2e 31 32 39 2d 31 2e 37 39 31 2d 32 2e 34 39 36 2d 34 2e 37 31 2d 34 2e 31 32 39 2d 38 2e 30 31 37 2d 34 2e 31 32 39 2d 35 2e 34 35 20 30 2d 39 2e 38 36 38 20 34 2e 34 31 37 2d 39 2e 38 36 38 20 39 2e 38 36 38 20 30 20 2e 37 37 32 2e 30 39 38 20 31 2e 35 32 2e 32 36 36 20 32 2e 32 34 31 43 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#DD2E44" d="M35.885 11.833c0-5.45-4.418-9.868-9.867-9.868-3.308 0-6.227 1.633-8.018 4.129-1.791-2.496-4.71-4.129-8.017-4.129-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49793	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	865	OUT	GET /web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:11 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/svg+xml Content-Length: 2312 Connection: close CF-Ray: 87dd982dfd3c8cd7-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367461 Cache-Control: public, max-age=31556926 ETag: "9abc2241bf1479263a0a039f3d1e5b5c" Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Fri, 05 Jan 2024 01:59:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 5S6kRjaW7n4cWUuuHcXqfe5niTXihfQYcRB+5urtKn7KuNVK6NuVGiuhGCTFw0uUXtCZnVnUlgE= x-amz-replication-status: COMPLETED x-amz-request-id: SBT6BBS8NVTCY5JB x-amz-server-side-encryption: AES256 x-amz-version-id: Qt1V_3yKyk0lnrOtQlJXuFHqbSdX4sJF X-Content-Type-Options: nosniff
2024-05-03 04:44:11 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 46 54 57 68 50 5a 77 56 51 61 46 31 63 79 69 69 67 6f 62 57 65 59 4e 4b 76 6d 69 50 7a 45 78 43 70 50 51 5a 78 6c 41 76 69 47 30 67 58 49 4c 25 32 42 72 43 36 6b 45 6b 38 69 63 43 75 66 44 5a 57 52 47 77 4a 44 6a 45 51 57 53 54 30 6c 38 73 71 69 6b 71 37 68 67 53 66 74 67 41 37 52 63 73 68 58 45 61 6b 38 30 72 31 59 52 6d 33 68 38 45 45 49 39 77 6f 43 4b 72 25 32 42 4d 67 6b 72 74 48 6f 65 65 58 4e 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FTWhPZwVQaF1cyiigobWeYNKvmiPzExCpPQZxlAviG0gXIL%2BrC6kEk8icCufDZWRGwJDjEQWST0l8sqikq7hgSftgA7RcshXEak80r1YRm3h8EEI9woCKr%2BMgkrtHoeeXNw%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 46 39 36 34 35 22 20 64 3d 22 4d 33 32 2e 33 30 32 20 32 34 2e 33 34 37 63 2d 2e 36 39 35 2d 31 2e 30 31 2d 2e 33 30 37 2d 32 2e 34 37 2d 2e 34 38 2d 34 2e 30 38 32 2d 2e 31 37 38 2d 32 2e 36 33 2d 31 2e 33 30 38 2d 35 2e 31 37 38 2d 33 2e 35 2d 37 2e 32 31 36 6c 2d 37 2e 34 36 36 2d 36 2e 39 34 32 73 2d 31 2e 34 37 31 2d 31 2e 33 36 39 2d 32 2e 38 34 31 2e 31 30 33 63 2d 31 2e 33 36 38 20 31 2e 34 37 31 2e 31 30 34 20 32 2e 38 34 2e 31 30 34 20 32 2e 38 34 6c 33 2e 31 35 34 20 32 2e 39 33 34 20 32 2e 37 33 34 20 32 2e 35 34 32 73 2d 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#EF9645" d="M32.302 24.347c-.695-1.01-.307-2.47-.48-4.082-.178-2.63-1.308-5.178-3.5-7.216l-7.466-6.942s-1.471-1.369-2.841.103c-1.368 1.471.104 2.84.104 2.84l3.154 2.934 2.734 2.542s-.
2024-05-03 04:44:11 UTC	943	IN	Data Raw: 30 20 30 20 31 2d 2e 39 34 34 2e 36 37 31 7a 6d 36 2e 31 34 33 20 35 2e 37 37 34 61 31 2e 30 30 31 20 31 2e 30 30 31 20 30 20 30 20 31 2d 2e 33 33 33 2d 31 2e 39 34 33 6c 32 2e 34 39 34 2d 2e 38 38 31 61 31 20 31 20 30 20 31 20 31 20 2e 36 36 36 20 31 2e 38 38 36 6c 2d 32 2e 34 39 34 2e 38 38 31 61 31 2e 30 30 31 20 31 2e 30 30 31 20 30 20 30 20 31 2d 2e 33 33 33 2e 30 35 37 7a 22 20 66 69 6c 6c 3d 22 23 46 41 37 34 33 45 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 44 42 35 45 22 20 64 3d 22 4d 33 35 2e 33 39 20 32 33 2e 38 32 32 63 2d 2e 36 36 31 2d 31 2e 30 33 32 2d 2e 32 32 34 2d 32 2e 34 37 39 2d 2e 33 34 32 2d 34 2e 30 39 36 2d 2e 30 39 2d 32 2e 36 33 34 2d 31 2e 31 33 33 2d 35 2e 32 31 39 2d 33 2e 32 35 35 2d 37 2e 33 33 6c 2d 37 2e 32 32 Data Ascii: 0 0 1-.944.671zm6.143 5.774a1.001 1.001 0 0 1-.333-1.943l2.494-.881a1 1 0 1 1 .666 1.886l-2.494.881a1.001 1.001 0 0 1-.333.057z" fill="#FA743E"/><path fill="#FFDB5E" d="M35.39 23.822c-.661-1.032-.224-2.479-.342-4.096-.09-2.634-1.133-5.219-3.255-7.33l-7.22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49792	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	865	OUT	GET /web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:11 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/svg+xml Content-Length: 842 Connection: close CF-Ray: 87dd982dfaa715af-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4363282 Cache-Control: public, max-age=31556926 ETag: "3a05dbf1cdd156fcd1677a0b444cc36f" Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Mon, 08 Jan 2024 03:33:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: soboA3isci4OqX1rbnBZlxk2Vkq4Q8TOHrSL3RF+RZnuKKFLJ3pMT+eSKtCa9jjvrBRCRhJCb3Q= x-amz-replication-status: COMPLETED x-amz-request-id: KYRG3BFHQBP1EAKM x-amz-server-side-encryption: AES256 x-amz-version-id: 9GJxmya_rzB42UYi8RMjAyeQyqSYuTAw X-Content-Type-Options: nosniff
2024-05-03 04:44:11 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4d 78 36 6e 79 41 54 64 71 34 39 64 47 73 56 5a 4a 75 62 39 61 44 34 6d 25 32 46 35 52 49 68 53 42 43 4f 63 76 6e 31 59 41 31 62 39 4c 52 61 4d 53 39 71 79 6a 59 6c 48 38 74 6c 33 50 45 68 34 36 4f 75 36 56 54 5a 4c 68 65 38 6a 46 45 49 31 6f 64 62 54 62 36 78 61 74 50 41 72 6c 38 25 32 46 47 4a 74 7a 68 36 4d 43 48 4a 4d 51 79 36 42 46 6d 70 63 33 50 4d 6b 48 48 43 42 39 4a 25 32 42 53 79 55 77 75 67 37 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mx6nyATdq49dGsVZJub9aD4m%2F5RIhSBCOcvn1YA1b9LRaMS9qyjYlH8tl3PEh46Ou6VTZLhe8jFEI1odbTb6xatPArl8%2FGJtzh6MCHJMQy6BFmpc3PMkHHCB9J%2BSyUwug7o%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:11 UTC	842	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 32 20 31 36 63 30 20 38 2e 38 33 37 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 36 53 30 20 32 34 2e 38 33 37 20 30 20 31 36 20 37 2e 31 36 33 20 30 20 31 36 20 30 73 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 31 35 36 32 34 30 39 33 36 35 5f 5f 61 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 32 33 35 20 31 32 2e 32 33 35 63 30 20 31 2e 35 36 2d 2e 39 30 33 20 32 2e 38 32 34 2d 32 2e 30 31 37 20 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32 16c0 8.837-7.163 16-16 16S0 24.837 0 16 7.163 0 16 0s16 7.163 16 16Z" fill="url(#_1562409365__a)"/><path d="M12.235 12.235c0 1.56-.903 2.824-2.017

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49794	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	865	OUT	GET /web/images/8777e8ed572c4159d71b08cca2972b15.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:11 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/svg+xml Content-Length: 1525 Connection: close CF-Ray: 87dd982df9b13354-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367461 Cache-Control: public, max-age=31556926 ETag: "8777e8ed572c4159d71b08cca2972b15" Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Fri, 05 Jan 2024 01:59:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: oHfDZXcwOLZ8yygyXWprgXcEHl/hOBaWj/QS/sYT7lO/p+UUCvoAYcLjSBiDjSdtgA14LHuRzTo= x-amz-replication-status: COMPLETED x-amz-request-id: SBTBQ41XFRY2YQ9R x-amz-server-side-encryption: AES256 x-amz-version-id: Cpn1BEwfxrJaRmCwQkJzFzSPBqby1lLc X-Content-Type-Options: nosniff
2024-05-03 04:44:11 UTC	360	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 70 71 6a 47 76 6f 62 59 49 49 4f 70 55 4c 58 6a 6b 39 36 76 65 76 61 50 6e 78 4f 53 74 31 69 70 6d 4c 75 5a 73 58 75 4b 58 44 65 4e 68 31 4d 6b 56 33 52 41 4d 4b 33 25 32 46 42 49 67 71 44 75 44 73 62 25 32 42 25 32 46 75 44 6d 59 25 32 46 4d 54 5a 62 77 56 25 32 42 75 79 71 4a 37 65 6a 55 6c 39 72 73 61 75 4b 6d 49 56 34 42 4e 42 4f 46 36 33 4c 68 51 6c 31 49 30 73 62 42 25 32 46 58 6e 25 32 46 73 25 32 46 64 78 45 67 57 53 42 66 34 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pqjGvobYIIOpULXjk96vevaPnxOSt1ipmLuZsXuKXDeNh1MkV3RAMK3%2FBIgqDuDsb%2B%2FuDmY%2FMTZbwV%2BuyqJ7ejUl9rsauKmIV4BNBOF63LhQl1I0sbB%2FXn%2Fs%2FdxEgWSBf40%3D"}],"group":"cf-nel","max_a
2024-05-03 04:44:11 UTC	1189	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 23 46 46 43 42 34 43 22 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 37 2e 30 31 38 22 20 72 3d 22 31 37 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 36 35 34 37 31 42 22 20 64 3d 22 4d 31 34 2e 35 32 34 20 32 31 2e 30 33 36 61 2e 39 31 34 2e 39 31 34 20 30 20 30 20 31 2d 2e 33 31 32 2d 2e 34 36 34 2e 37 39 39 2e 37 39 39 20 30 20 30 20 31 20 2e 35 39 2d 31 2e 30 32 31 63 34 2e 35 32 38 2d 31 2e 30 32 31 20 37 2e 35 37 37 20 31 2e 33 36 33 20 37 2e 37 30 36 20 31 2e 34 36 35 2e 33 38 34 2e 33 30 36 2e 34 35 39 2e 38 34 35 2e 31 37 33 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036a.914.914 0 0 1-.312-.464.799.799 0 0 1 .59-1.021c4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173
2024-05-03 04:44:11 UTC	336	IN	Data Raw: 39 39 2d 2e 30 34 33 20 37 2e 38 34 33 2e 30 33 34 2e 34 33 33 2e 32 33 31 2e 36 30 38 2e 37 34 37 2e 33 39 31 20 31 2e 31 35 34 2d 2e 32 31 36 2e 34 30 35 2d 2e 37 34 2e 35 34 36 2d 31 2e 31 37 33 2e 33 31 38 2d 2e 31 32 33 2d 2e 30 36 33 2d 32 2e 38 33 32 2d 31 2e 34 33 32 2d 36 2e 32 37 38 2e 30 34 37 61 2e 39 31 35 2e 39 31 35 20 30 20 30 20 31 2d 2e 37 38 35 2d 2e 30 34 32 7a 6d 31 32 2e 31 33 35 20 33 2e 37 35 61 2e 39 32 34 2e 39 32 34 20 30 20 30 20 31 2d 2e 33 36 32 2d 2e 34 32 34 2e 38 2e 38 20 30 20 30 20 31 20 2e 34 36 38 2d 31 2e 30 38 34 63 34 2e 33 38 31 2d 31 2e 35 33 36 20 37 2e 36 38 35 2e 34 38 20 37 2e 38 32 33 2e 35 36 37 2e 34 31 35 2e 32 36 2e 35 35 35 2e 37 38 37 2e 33 31 32 20 31 2e 31 37 38 2d 2e 32 34 32 2e 33 39 2d 2e 37 37 36 Data Ascii: 99-.043 7.843.034.433.231.608.747.391 1.154-.216.405-.74.546-1.173.318-.123-.063-2.832-1.432-6.278.047a.915.915 0 0 1-.785-.042zm12.135 3.75a.924.924 0 0 1-.362-.424.8.8 0 0 1 .468-1.084c4.381-1.536 7.685.48 7.823.567.415.26.555.787.312 1.178-.242.39-.776

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49796	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	865	OUT	GET /web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:11 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/svg+xml Content-Length: 1404 Connection: close CF-Ray: 87dd982dffa20f8b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353775 Cache-Control: public, max-age=31556926 ETag: "aba10b640f15bb01b8e5f0b804eefc7f" Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Mon, 08 Jan 2024 03:33:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: gmoAkuahGvd8SWUZ/ykbWyK2jCIoZFDD+zB34ZR+4V+htZVuhyaxDPx96G2IFrziM2L0zJD20jc= x-amz-replication-status: COMPLETED x-amz-request-id: SBT796YAEF9APNC7 x-amz-server-side-encryption: AES256 x-amz-version-id: 00A7HwucCkbuM5W3V_3qteAEbuOkxCO4 X-Content-Type-Options: nosniff
2024-05-03 04:44:11 UTC	360	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 6c 65 6f 5a 61 63 6d 25 32 42 6e 68 45 33 56 43 44 73 4c 65 35 71 66 32 37 63 58 25 32 42 72 48 44 6f 74 25 32 46 49 78 6e 59 6c 5a 30 72 49 72 49 34 4f 4a 6a 75 45 33 43 39 41 32 38 43 25 32 46 7a 75 4e 56 4e 56 46 4a 57 71 6e 41 4a 41 45 4b 41 59 6b 36 4c 54 57 67 73 39 5a 59 71 33 57 6c 53 67 32 25 32 46 4a 55 36 53 41 44 47 4f 32 4a 73 6a 76 37 25 32 46 72 5a 35 63 25 32 42 4b 71 49 4e 78 77 34 6e 25 32 42 67 7a 6c 52 46 56 49 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kleoZacm%2BnhE3VCDsLe5qf27cX%2BrHDot%2FIxnYlZ0rIrI4OJjuE3C9A28C%2FzuNVNVFJWqnAJAEKAYk6LTWgs9ZYq3WlSg2%2FJU6SADGO2Jsjv7%2FrZ5c%2BKqINxw4n%2BgzlRFVIY%3D"}],"group":"cf-nel","max_a
2024-05-03 04:44:11 UTC	1189	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 44 42 35 45 22 20 64 3d 22 4d 33 34 2e 39 35 36 20 31 37 2e 39 31 36 63 30 2d 2e 35 30 33 2d 2e 31 32 2d 2e 39 37 35 2d 2e 33 32 31 2d 31 2e 34 30 34 2d 31 2e 33 34 31 2d 34 2e 33 32 36 2d 37 2e 36 31 39 2d 34 2e 30 31 2d 31 36 2e 35 34 39 2d 34 2e 32 32 31 2d 31 2e 34 39 33 2d 2e 30 33 35 2d 2e 36 33 39 2d 31 2e 37 39 38 2d 2e 31 31 35 2d 35 2e 36 36 38 2e 33 34 31 2d 32 2e 35 31 37 2d 31 2e 32 38 32 2d 36 2e 33 38 32 2d 34 2e 30 31 2d 36 2e 33 38 32 2d 34 2e 34 39 38 20 30 2d 2e 31 37 31 20 33 2e 35 34 38 2d 34 2e 31 34 38 20 31 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFDB5E" d="M34.956 17.916c0-.503-.12-.975-.321-1.404-1.341-4.326-7.619-4.01-16.549-4.221-1.493-.035-.639-1.798-.115-5.668.341-2.517-1.282-6.382-4.01-6.382-4.498 0-.171 3.548-4.148 12
2024-05-03 04:44:11 UTC	215	IN	Data Raw: 2e 38 37 35 2e 38 37 35 20 30 20 31 20 30 2d 31 2e 35 30 34 2d 2e 38 39 34 20 31 2e 35 37 32 20 31 2e 35 37 32 20 30 20 30 20 31 2d 31 2e 33 36 33 2e 37 37 37 68 2d 37 2e 30 36 33 61 31 2e 35 38 35 20 31 2e 35 38 35 20 30 20 30 20 31 20 30 2d 33 2e 31 36 37 68 38 2e 30 39 31 61 33 2e 33 35 20 33 2e 33 35 20 30 20 30 20 30 20 32 2e 38 36 37 2d 31 2e 36 33 32 2e 38 37 35 2e 38 37 35 20 30 20 30 20 30 2d 31 2e 35 30 34 2d 2e 38 39 34 20 31 2e 35 37 33 20 31 2e 35 37 33 20 30 20 30 20 31 2d 31 2e 33 36 33 2e 37 37 36 48 32 33 2e 30 32 61 31 2e 35 38 35 20 31 2e 35 38 35 20 30 20 30 20 31 20 30 2d 33 2e 31 36 37 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: .875.875 0 1 0-1.504-.894 1.572 1.572 0 0 1-1.363.777h-7.063a1.585 1.585 0 0 1 0-3.167h8.091a3.35 3.35 0 0 0 2.867-1.632.875.875 0 0 0-1.504-.894 1.573 1.573 0 0 1-1.363.776H23.02a1.585 1.585 0 0 1 0-3.167z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49791	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	865	OUT	GET /web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:11 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/svg+xml Content-Length: 1865 Connection: close CF-Ray: 87dd982df84b9e05-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367461 Cache-Control: public, max-age=31556926 ETag: "3e78ef31f2928a74c6d7ba19b91d0570" Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Mon, 08 Jan 2024 03:33:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: QGKEMYkmTq+aBaEIe1q4rqWpmKyLHDwXh+ze49a+l6dp7gQVHwJw9wQkGrwyQlVeJ+Kr6Y6DZGI= x-amz-replication-status: COMPLETED x-amz-request-id: KYRSHEV785YC1D84 x-amz-server-side-encryption: AES256 x-amz-version-id: wYxiof4L_66xzuPghQaGs3fOYc3qOrUp X-Content-Type-Options: nosniff
2024-05-03 04:44:11 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 71 56 6b 56 66 48 50 75 37 5a 38 56 4c 73 49 46 56 37 33 50 30 38 64 43 58 54 71 71 38 64 46 32 66 66 38 70 7a 4e 59 4a 38 4a 74 6c 44 32 57 61 70 37 47 39 32 25 32 46 4e 77 4c 46 72 36 37 46 34 47 58 68 48 56 56 31 30 4f 6d 36 70 42 67 6e 77 51 52 7a 77 6e 30 30 51 69 76 46 57 75 77 36 51 59 55 42 6f 38 41 6d 58 63 61 35 75 4d 50 66 65 25 32 42 47 51 61 6b 67 4a 71 4d 49 46 63 62 4c 6c 45 67 39 35 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qVkVfHPu7Z8VLsIFV73P08dCXTqq8dF2ff8pzNYJ8JtlD2Wap7G92%2FNwLFr67F4GXhHVV10Om6pBgnwQRzwn00QivFWuw6QYUBo8AmXca5uMPfe%2BGQakgJqMIFcbLlEg95Y%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:11 UTC	1201	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 32 2e 32 39 20 31 36 63 30 20 38 2e 38 33 37 2d 37 2e 31 36 34 20 31 36 2d 31 36 20 31 36 2d 38 2e 38 33 37 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 20 30 2d 38 2e 38 33 36 20 37 2e 31 36 33 2d 31 36 20 31 36 2d 31 36 20 38 2e 38 33 36 20 30 20 31 36 20 37 2e 31 36 34 20 31 36 20 31 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 33 39 30 30 36 36 33 33 39 34 5f 5f 61 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 31 33 31 20 31 Data Ascii: <svg width="33" height="32" viewBox="0 0 33 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32.29 16c0 8.837-7.164 16-16 16-8.837 0-16-7.163-16-16 0-8.836 7.163-16 16-16 8.836 0 16 7.164 16 16Z" fill="url(#_3900663394__a)"/><path d="M26.131 1
2024-05-03 04:44:11 UTC	664	IN	Data Raw: 22 23 36 36 34 35 30 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 38 31 38 20 32 30 2e 37 30 36 73 32 2e 38 32 34 2e 39 34 20 38 2e 34 37 2e 39 34 63 35 2e 36 34 38 20 30 20 38 2e 34 37 31 2d 2e 39 34 20 38 2e 34 37 31 2d 2e 39 34 73 2d 31 2e 38 38 32 20 33 2e 37 36 35 2d 38 2e 34 37 20 33 2e 37 36 35 63 2d 36 2e 35 38 38 20 30 2d 38 2e 34 37 2d 33 2e 37 36 35 2d 38 2e 34 37 2d 33 2e 37 36 35 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 39 2e 35 35 37 20 32 35 2e 36 32 38 61 34 2e 37 30 35 20 34 2e 37 30 35 20 30 20 30 20 31 2d 35 2e 37 32 20 33 2e 34 30 32 20 34 2e 37 30 34 20 34 2e 37 30 34 20 30 20 30 20 31 2d 33 2e 34 30 32 2d 35 2e 37 31 38 63 2e 36 34 2d 32 2e 35 32 20 35 2e 39 36 34 2d 38 2e 31 39 36 20 36 2e 38 Data Ascii: "#664500"/><path d="M7.818 20.706s2.824.94 8.47.94c5.648 0 8.471-.94 8.471-.94s-1.882 3.765-8.47 3.765c-6.588 0-8.47-3.765-8.47-3.765Z" fill="#fff"/><path d="M9.557 25.628a4.705 4.705 0 0 1-5.72 3.402 4.704 4.704 0 0 1-3.402-5.718c.64-2.52 5.964-8.196 6.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49789	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	631	OUT	GET /YAFdJt8dAY0/0/OpenSans-Regular3933337718930570939.58b2543abe9187bb7f592b6bcdbf20d7.woff2 HTTP/1.1 Host: font-public.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:11 UTC	1248	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: application/octet-stream Content-Length: 59492 Connection: close CF-Ray: 87dd982dfd260f6b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 4363274 Cache-Control: max-age=31536000 ETag: "2c97dd77a19d382f7ce1cb267e0e3894" Expires: Sat, 03 May 2025 04:44:11 GMT Last-Modified: Fri, 14 Jul 2023 15:31:22 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_font-public Timing-Allow-Origin: https://www.canva.com x-amz-id-2: /p3PAiHsgQqZ9mjVT0JJyA0e3ftmXoRosZPYKlripWHrtc0BnRGudsLdaRVsMiR1weG4qoeK0mM= x-amz-replication-status: COMPLETED x-amz-request-id: 9AWCPKHXG245S7P5 x-amz-server-side-encryption: AES256 x-amz-version-id: whonf7goaRzvFj4BtogALToZsb_2mmKV X-Content-Type-Options: nosniff
2024-05-03 04:44:11 UTC	783	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 4d 72 78 53 6d 74 55 2e 73 63 2e 2e 57 46 5a 45 6b 39 77 45 31 33 4b 63 37 61 59 47 35 61 2e 44 49 39 34 7a 55 63 50 77 51 51 59 2d 31 37 31 34 37 31 31 34 35 31 2d 31 2e 30 2e 31 2e 31 2d 53 72 35 63 62 5f 68 42 77 4c 66 42 36 42 76 45 41 37 43 5a 4e 59 70 43 58 31 72 68 74 6c 56 71 46 39 32 2e 71 59 69 36 7a 39 4f 31 4f 45 32 44 2e 6a 6c 68 34 72 70 4f 70 6f 6e 42 7a 41 6c 7a 38 44 45 51 6f 34 4a 31 7a 6b 48 78 5f 5f 4e 49 4a 70 41 5a 50 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 31 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=MrxSmtU.sc..WFZEk9wE13Kc7aYG5a.DI94zUcPwQQY-1714711451-1.0.1.1-Sr5cb_hBwLfB6BvEA7CZNYpCX1rhtlVqF92.qYi6z9O1OE2D.jlh4rpOponBzAlz8DEQo4J1zkHx__NIJpAZPg; path=/; expires=Fri, 03-May-24 05:14:11 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:11 UTC	707	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 e8 64 00 12 00 00 00 02 02 78 00 00 e7 f9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 42 1b f2 7c 1c 9e 06 06 60 3f 53 54 41 54 5e 00 87 76 08 81 7c 09 9f 14 11 10 0a 85 a5 10 84 cc 08 0b 91 6a 00 01 36 02 24 03 a3 4e 04 20 05 93 56 07 ce 6a 0c 85 1f 5b c6 cb 91 05 a2 87 ed 22 06 f0 3f b9 9d a3 6d 53 11 4a 2e fd 7e f4 04 6e 73 0a 95 f5 eb 1c 9b f3 70 04 33 09 3a a7 06 cf 99 c2 0f ba 73 20 59 f0 b6 92 fd ff ff ff ff ff 96 a4 21 63 99 5c 21 d7 b6 00 05 05 f0 55 75 3a f5 37 c8 12 c4 2e 38 a2 93 27 c1 b3 e0 91 52 e9 10 93 90 bd 77 87 a4 04 39 dc 0d a7 61 b4 aa 63 62 b9 42 e6 76 38 0a 1d 8e 3d 96 75 ac 5b 89 3b 7a 53 32 3b 99 92 29 85 9f 0a 3a 1e d6 7e cf 63 1c f1 63 0f a6 64 4a 4d f6 53 a1 73 bd Data Ascii: wOF2dxB\|`?STAT^v\|j6$N Vj["?mSJ.~nsp3:s Y!c\!Uu:7.8'Rw9acbBv8=u[;zS2;):~ccdJMSs
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 8b 9c 78 65 ee fe b7 0e c3 d2 d7 4b 5d b9 bb 96 65 19 1e d9 3f 8e 14 86 4a 33 7e e2 bb c0 03 72 40 01 f2 4c fa d4 69 89 cb 70 d3 a6 4e 53 dd 00 6c b3 12 03 d1 39 01 0b 15 50 01 23 91 30 91 16 04 91 14 94 50 14 14 15 45 c5 c8 9e 6e 2e d4 19 b5 d0 c9 a2 74 73 51 77 8b bc bf dd ed 6e db d5 76 bd dd dd d7 9d f5 ed 75 b1 0a 85 d1 38 83 c2 82 4d a1 b5 9e 52 8f 3f bb 73 85 72 97 9f 47 ec b1 e6 ef 7f 18 ba 91 c9 8b ae 75 db d4 14 d7 2b 87 23 4c 9c da 15 30 6b 0e 2d f1 93 3d 98 65 cd b2 29 b3 8f 02 61 5e 67 f6 09 34 48 84 24 01 92 10 71 42 64 6c 6c b0 bf 3f 9b 86 1f ee 9a 6e 9b fe 82 f7 3d 97 ed 9e f1 4c 7b b9 82 29 aa bd ad 7e fb bb a3 50 ef 4f 00 ea 4d 26 34 9b d1 ee ff d2 f6 53 48 c2 0d 38 a2 79 7e 40 d1 63 dd 52 cb cc d6 82 32 5d e7 91 a0 e4 93 1f d9 b4 aa 1a Data Ascii: xeK]e?J3~r@LipNSl9P#0PEn.tsQwnvu8MR?srGu+#L0k-=e)a^g4H$qBdll?n=L{)~POM&4SH8y~@cR2]
2024-05-03 04:44:11 UTC	938	IN	Data Raw: b2 22 c6 64 21 55 69 f1 a2 72 bc e4 b0 da be 17 15 dd ed 32 71 a1 2d 03 52 db c3 89 3b 47 38 3d c7 bd 4b 7c eb 88 ef b5 f0 87 3e fe ba 53 ff 95 e7 3b 64 64 89 f1 e7 b8 b0 22 2a a5 d8 f2 c7 42 b4 d2 2f 5c f3 77 c4 9e 24 eb 60 2a 75 ac 30 f1 be 3e 5e 98 e3 63 5b 78 73 17 9b 2e f0 76 5a 7d 6b 50 5e 78 70 04 b7 06 f3 4d 2e c2 df 12 97 82 80 64 2f 80 f8 cc 5e 2e f9 82 89 e5 6c b1 91 cc 72 b6 91 b8 b2 9c 6d 71 2a 2d 67 47 a8 39 09 b0 68 e0 00 b4 7f 50 00 01 fd 43 62 b5 8c 77 5a f7 68 59 ba 00 9a 89 01 99 e2 70 2b 4d 14 89 43 13 e2 f8 f5 d6 46 40 c4 8c b6 a6 ef a3 8d 21 fb 54 aa 50 6a 1b b9 88 c8 26 9d 24 e2 10 c0 23 98 65 f8 c0 c4 19 5b 90 fe 6b f1 e0 c2 cf c7 08 7e 64 59 cc 03 b6 f6 25 7a 42 7d c9 5a da c0 92 86 2c ba d4 ea 59 11 d2 e6 e3 b6 05 62 d4 18 8d 57 Data Ascii: "d!Uir2q-R;G8=K\|>S;dd"B/\w$`u0>^c[xs.vZ}kP^xpM.d/^.lrmq*-gG9hPCbwZhYp+MCF@!TPj&$#e[k~dY%zB}Z,YbW
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: ba ff c0 9b b7 2e ee 4f 49 91 dc 43 f6 74 e7 c1 1b 8e 94 50 82 7d 7e 33 7b db 3b 46 f3 83 8a 26 71 d4 06 53 81 d0 6e 63 22 4b aa 9d 4a 19 f8 2a 54 b6 4b bb 89 1e 82 1b 53 30 8e 07 81 a0 25 1f c8 5d f0 6f ef 54 72 d1 d6 a3 e2 3a 4f e7 cc 08 2b b7 33 e9 f7 64 ad 39 80 fe 2a 4b c9 ea fd d1 cb da 51 f7 f1 bf 23 fb de 9d ef f4 b4 ce 5d f7 59 fb f3 37 1e 7d af dd d8 f9 f3 e7 d4 81 45 0c db 0c 8a ce 73 5e 53 b0 78 ff 6b e6 68 62 84 be 73 02 fa 4f d7 c0 b6 af 93 74 06 b2 b6 a5 b7 87 51 cc 7b 67 07 0a 5e 3a 92 cd fb 43 c4 dd ab 2b 87 b0 9e 91 a1 24 ec b9 cf 91 4e 0e de e8 13 b7 da 61 c7 3a 38 af e2 83 55 d4 3e c7 e8 65 e8 41 17 0b 75 19 a9 6b 05 66 b5 54 a0 8e 44 82 f0 a1 45 d8 2d ed ba 44 c6 d8 61 a8 3b 6a 01 f2 77 76 6f fd f5 6c 11 bd f3 4a 39 cf d3 c3 92 fd db Data Ascii: .OICtP}~3{;F&qSnc"KJTKS0%]oTr:O+3d9KQ#]Y7}Es^SxkhbsOtQ{g^:C+$Na:8U>eAukfTDE-Da;jwvolJ9
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 72 6b 06 c9 35 8e 88 1a 8c 5f f5 04 51 5d b0 af 60 40 3c 81 a1 ec a1 ca 0e 91 97 11 af f9 fb ec 53 7d dd 9f d7 f5 7e f5 f7 e5 7f f9 79 a8 aa 22 3d 57 24 b9 1c ce 68 55 f6 fa b2 21 6f 5f 28 81 f8 1a 3b 1a cc 4f 64 b9 78 60 71 d4 f6 89 10 53 34 35 7e 89 fc 01 66 fa 01 4b d4 8e 2a d5 1e d9 a5 8c 42 47 b6 ee ae 2f 69 52 89 8a b9 7d 8c 02 e5 23 f7 7d 78 f3 61 55 95 ea b6 8d 2f 39 b9 a2 2c 0d ac 55 55 ac ac b8 61 4c f9 6a d2 57 4d 9a f2 f6 95 25 ab f7 7a 79 f4 38 bf 0a cb c5 15 ba bb 45 ff 67 fe bb 9c b0 c8 df 75 a5 53 89 d9 c9 6b 65 31 cf bc 15 10 b9 2a e2 3c 92 59 f5 7f 77 5c fc 72 57 60 d8 99 f1 a8 d4 4c 11 49 44 11 94 0f 3e e3 06 6c 8e 3a 72 3f 9b 43 dd 76 ce e8 c3 d7 67 14 0b b9 0f b3 37 80 c8 d0 01 97 21 63 ac b2 c5 f2 0b 33 1f 18 9f 39 d0 86 31 56 26 d0 Data Ascii: rk5_Q]`@<S}~y"=W$hU!o_(;Odx`qS45~fKBG/iR}#}xaU/9,UUaLjWM%zy8EguSke1<Yw\rW`LID>l:r?Cvg7!c391V&
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: e5 38 5f b8 76 d5 cd ff 00 07 5d 76 0b 20 8b d8 c9 4e 7c 38 6d ca d5 75 02 81 35 cc 03 89 b9 1b 60 1b 9b c7 59 90 aa 58 9a e5 6a 9d 81 c4 d8 f3 9a 66 9a c4 2a 9d ba 77 ff 91 29 ca 6e e7 ad ae 8c b2 66 b7 ee 48 f9 64 dd 97 5c 02 61 9d 5d af d5 0c d8 72 ec 51 50 3b b3 75 21 0b 26 52 c5 ac 04 9c a4 84 64 09 25 7d ce 7f 48 e7 7a ac b2 b1 11 a5 a8 22 04 2f 04 91 dc fc 64 59 28 f2 28 00 cb fe 89 6d b6 19 62 08 83 32 a1 ea 15 a2 5a 2f c7 bf bd b4 2e f3 af b5 f9 9a 5a d5 b2 ba 78 9f 4d 25 b1 92 18 67 8d bf 4f bd a4 fd 2d f2 33 ff e2 57 fd 98 c4 b3 14 2f cf 39 3e c2 85 db b3 ac d5 d5 35 6c 22 46 04 bb 45 47 33 ff fd d6 1d 21 07 8c 56 fa 27 2e eb 72 1d 68 a1 13 48 21 c1 75 6d 40 1f d6 4f 23 d0 7d d6 7d 68 56 55 ee bb 4a c0 27 49 c8 58 6e a9 74 cb cc b2 b8 54 cd 25 Data Ascii: 8_v]v N\|8mu5`YXjf*w)nfHd\a]rQP;u!&Rd%}Hz"/dY((mb2Z/.ZxM%gO-3W/9>5l"FEG3!V'.rhH!um@O#}}hVUJ'IXntT%
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: b7 f6 58 6e bd 02 79 30 e4 cb 44 41 f6 bf 47 fd 97 1d 0a 62 9e e1 01 bb 57 cc b9 b3 cd a3 fa 97 5e fd 83 79 e8 92 8c 44 74 c3 23 bf 73 93 84 14 73 bc e0 d2 0f 64 e3 95 ae c0 71 5d 26 cd aa c8 d4 12 ff 7f 51 08 7f 62 eb 66 bd ff b9 cb b7 da d7 61 fe ac c2 9f 99 b9 3d f9 ad 7d 79 dc 9e 2f 22 d4 16 5b 35 e9 db fe 4b b4 26 0e 42 5e 6e dd cb 1a ff ca e9 3b 70 e1 2b 3f 98 7d 77 ff ca 99 f5 15 ae 1e 87 d6 f9 4f 68 8a c1 fb 2b 44 d4 50 47 03 03 0c b7 7f 96 11 c6 2c c0 84 85 50 30 c5 0c 73 2c a0 32 47 9f fe e8 d3 1b 55 1d 92 eb a7 5d 77 f4 69 8d 8a a6 18 93 e2 2c bf 5d 81 03 dc d1 e9 a3 6a 3f 4a 04 ba d2 0a 5d 07 d8 6b 08 da 0e e8 77 71 fd 48 3d 5f 0f dd e7 a8 ca c3 69 9b a5 32 6d d7 fe be ba 6e ec ca 17 0a 21 43 f6 47 27 6d c9 45 6d c7 6d 2d 21 b2 23 76 a4 04 da Data Ascii: Xny0DAGbW^yDt#ssdq]&Qbfa=}y/"[5K&B^n;p+?}wOh+DPG,P0s,2GU]wi,]j?J]kwqH=_i2mn!CG'mEmm-!#v
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 16 26 1a 8d 4c 56 3c 63 84 8a 42 25 a5 8e 67 b4 10 44 14 a9 32 e3 55 25 18 01 99 44 46 3c a3 04 c1 4b 20 a6 8a 27 51 20 1c 12 11 65 5c 4e 07 88 14 4f 48 11 27 6b 7f 58 71 04 e4 71 5b 1b 23 42 2c be f4 9c aa 84 16 2e 06 4f 8a b4 a8 75 f2 a3 ce 91 1b b5 86 d6 92 f3 eb 96 4f 97 fe b0 07 61 5d a6 75 ae 76 2c ca 69 19 e0 3b 6d 93 1e 92 80 2b d7 83 61 8f 49 c4 02 0e 01 7a 80 b2 1d 6a a9 86 6b b9 86 6a 05 c8 85 1f a5 2e 5b be eb 4d 45 6d 04 c7 b7 b9 d9 46 c3 f0 17 20 50 90 60 21 42 85 85 84 ca 77 e6 6b 61 e9 76 1c dd 6a df bc 90 14 7b 84 17 26 21 53 f8 52 ec 95 71 ec 42 33 00 18 70 ba c3 4b 7b 19 2f e7 19 5f c5 a2 c2 be 5a 14 b7 9d 46 7a 6c 0a 0f d4 7e 5e 93 6c a2 63 c4 8a 13 8f 24 01 19 05 15 2d d6 c3 38 09 05 02 10 73 f8 3d 30 9f bf 95 94 77 ee ae d5 12 e9 53 Data Ascii: &LV<cB%gD2U%DF<K 'Q e\NOH'kXqq[#B,.OuOa]uv,i;m+aIzjkj.[MEmF P`!Bwkavj{&!SRqB3pK{/_ZFzl~^lc$-8s=0wS
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 67 05 ba 12 10 38 32 e7 4a 61 94 3e 0a c4 b1 18 4d 08 8c 13 9c e1 0f 81 60 72 73 5d 01 21 20 e5 9b f2 73 94 c0 28 b7 7b 70 b0 ad f7 1e ec 3f 38 da c8 a2 8a 84 97 fe 2f b8 ed 5f 08 99 8b f0 6b 80 59 18 32 4c 7e 32 56 a1 79 5f 17 9b 4a 48 38 b9 37 0d f2 79 43 8f 1d 04 f5 5c 3c bf 71 af 5b ae 76 7e f9 d5 52 7e 0d e0 18 2b d6 4e 56 35 9e af 53 af b5 13 75 38 9e d2 36 0f 81 64 c0 c0 34 78 c3 a7 86 e5 93 4c a1 a7 42 36 1e 8c f5 47 c9 b7 da 60 59 2f 93 84 57 86 7d 2a 7c 56 57 da 29 b7 68 0e 35 1e 97 76 46 4f 67 a7 d1 9d b7 82 d3 e9 86 49 36 c4 c5 2d b9 08 96 ec 2f b8 13 d2 e3 0c 26 0f bf ff 39 b4 38 27 f4 c6 2a 9d ef 19 2a 3a da 60 11 2a e2 12 14 af 6f d8 92 09 99 cc ef 65 f7 12 12 0f de 79 d1 aa 01 3f 6a 94 7e ec 7e 76 3f c7 0d a7 0a 2c d6 f8 7f e3 36 b7 e9 c5 Data Ascii: g82Ja>M`rs]! s({p?8/_kY2L~2Vy_JH87yC\<q[v~R~+NV5Su86d4xLB6G`Y/W}\|VW)h5vFOgI6-/&98':`oey?j~~v?,6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49785	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	886	OUT	GET /1/image-resize/1/200_48_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAFJXAnYIQQ0xHcsErDaJWXvVvtPZT7fcxtbi8yxPG4l-&exp=1714727649&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAJsWmwRuJ3REECkw2TqnylaoozkHUBm97ga09yUfD0Mu HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:11 UTC	1205	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 87dd982dfbc71784-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 66271 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=7163 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf78ca1 Set-Cookie: __cf_bm=i.XBS03C4imzX9AnhAiJhSWZCZpzeBQawvxiyOlZV0s-1714711451-1.0.1.1-n.rTSOQy97CwgvCZB58KzPU1iSwLp8fwz0SSSJYRM4Qr6.EN.4P4frxre2Tp89WNIsfMSosOntXofWEsGwxx.A; path=/; expires=Fri, 03-May-24 05:14:11 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-05-03 04:44:11 UTC	511	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4d 45 52 43 56 6a 46 59 31 6c 36 6a 66 25 32 46 61 44 72 4f 4c 33 25 32 42 52 52 6c 77 62 55 4e 58 54 51 36 7a 57 6b 67 33 25 32 42 4e 4a 69 4b 33 49 30 77 59 6d 30 38 6c 6b 68 33 69 57 53 4b 5a 45 38 6e 6e 59 7a 46 78 67 78 51 55 5a 75 54 62 55 70 4f 49 35 30 75 79 73 56 4e 74 57 5a 43 73 55 50 7a 78 61 65 39 56 42 6b 25 32 42 4e 79 54 7a 34 50 59 6b 6d 41 4f 50 36 45 48 46 52 31 35 62 65 57 58 4c 36 41 69 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MERCVjFY1l6jf%2FaDrOL3%2BRRlwbUNXTQ6zWkg3%2BNJiK3I0wYm08lkh3iWSKZE8nnYzFxgxQUZuTbUpOI50uysVNtWZCsUPzxae9VBk%2BNyTz4PYkmAOP6EHFR15beWXL6AiQ%3D%3D"}],"group":"cf-nel","max_age":60
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 64 33 61 0d 0a 52 49 46 46 32 0d 00 00 57 45 42 50 56 50 38 4c 25 0d 00 00 2f c5 c0 0b 10 ea 50 90 b6 01 d3 f9 37 7e 05 44 c4 04 90 d5 4b 70 11 74 55 db 76 9c f8 37 43 9b 1b 66 79 f0 ff c2 cc 33 86 01 4c 46 55 d4 54 06 aa 2a a0 7f 58 45 4c 2d 5e 55 31 99 85 f3 98 8c aa e7 4a 41 db 36 12 7f 8c b7 25 bd 9f 46 a8 aa 6d 1b 5a ef 35 79 32 50 89 4f 4a 0c 29 88 46 85 e1 73 bc 0a da b6 61 d6 33 10 29 02 3b d2 f6 af 96 dc 88 a9 41 cc cc cc cc cc cc cc cc cc cc cc cc 4c c3 33 62 66 5a 96 fa 9e 73 66 ea ce 64 ce 99 1d ba 5a cc ca 4e 89 95 4f dd 40 94 aa aa 7b 01 a6 1d 78 0b cc b3 83 39 a1 30 6b b1 36 c0 90 9a bd 00 7b 17 bd 81 a9 b9 1d 98 79 ea 9a d9 d9 f4 ad 32 85 4c a1 17 a0 d4 b0 05 b1 16 30 ea ba c1 c0 9d 2a 87 f7 56 99 21 64 48 a7 4a 94 1a 42 8e a6 66 01 c6 ee Data Ascii: d3aRIFF2WEBPVP8L%/P7~DKptUv7Cfy3LFUTXEL-^U1JA6%FmZ5y2POJ)Fsa3);AL3bfZsfdZNO@{x90k6{y2L0V!dHJBf
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 50 91 61 45 d0 bb 0c 36 cd 07 c9 5d 61 a2 8b dc 36 f9 27 3a 4c 19 f9 a1 fa 52 2e d0 11 9a 07 44 2c 55 2a b3 0e 35 91 ec c8 f9 85 cc 9e 3b 78 2c e2 d8 30 b0 62 11 31 9b 7b ab af 2c bb b5 d9 9c 60 f2 2f 78 e5 01 11 f9 a1 78 79 7c 37 2f e8 88 9f fc 88 bf d7 a4 71 e2 e7 02 fc f8 d9 93 0c 33 9d ec d3 43 6d ba 87 1a 6b a4 65 f2 fc f9 bb 82 2b 11 17 57 b8 70 98 f7 cf 19 f8 35 e5 b6 02 2f 9e 27 54 a4 2f 00 dd 42 5d 60 22 b3 56 85 1c db 6f 7b 29 00 c3 cd cd f9 ac 29 be d0 4a f0 3c f4 4e 9d a4 77 49 bf 44 b6 4b 16 80 ee b5 eb 9d 6e 8a fa 99 7a aa 6a b6 a1 a7 12 15 60 9f 80 c7 e7 06 1a 05 e3 d8 07 74 1b 16 41 68 4b 35 eb bd 26 7d c7 80 7d a5 40 2c e7 6b 54 67 65 89 ee cb 5a d4 1d a4 ad cb e8 84 ec b0 a7 e0 35 f0 40 16 a6 a7 1b 0b 07 aa 54 85 14 8b e2 f1 47 5c a2 42 Data Ascii: PaE6]a6':LR.D,U*5;x,0b1{,`/xxy\|7/q3Cmke+Wp5/'T/B]`"Vo{))J<NwIDKnzj`tAhK5&}}@,kTgeZ5@TG\B
2024-05-03 04:44:11 UTC	655	IN	Data Raw: da 46 dd 97 b5 e3 c2 ae 76 c9 eb af d0 77 6b f1 cc ec 28 14 cf 56 30 bf e0 59 0a a2 c7 27 a8 d7 da fa 82 2d f6 77 83 8b 77 39 96 da bf 6a 79 19 76 26 09 de 72 47 69 23 5f 14 5f ca 15 c6 0b 40 f7 a5 8e 28 8b 4b 87 9d 4d 63 9e 41 19 6e 2e 95 c6 aa ef 32 2f b5 c8 71 5d e4 b4 c4 77 2e 9c d0 42 f6 7f cc 71 65 70 e8 77 72 06 22 eb 46 5e 66 73 30 cb 6e cd 50 27 c1 3d e9 b1 28 4c 96 e8 bb b0 04 9b cd 5b 4b f0 e7 17 6c e1 78 8e 36 c5 49 17 5b 61 85 ea 55 38 28 e6 21 90 93 ea 33 ff d2 87 b6 18 b0 24 e1 c2 35 6b 9e 37 14 41 f8 ca 60 d7 27 44 df 03 f8 50 00 1a 73 da d1 76 20 ec 9b ae 4a 19 49 56 38 a1 55 28 7c 13 f5 df 95 2d fd 75 e6 b3 a7 2e 18 cb ae b8 d5 2d d9 18 07 78 4d 55 b2 52 0c d9 4b 52 b9 94 6c 16 63 1f 3a 4d 0f c4 be bf 3c 3e 2d 8e ea 1d 79 64 e9 6c fa 87 Data Ascii: Fvwk(V0Y'-ww9jyv&rGi#__@(KMcAn.2/q]w.Bqepwr"F^fs0nP'=(L[Klx6I[aU8(!3$5k7A`'DPsv JIV8U(\|-u.-xMURKRlc:M<>-ydl
2024-05-03 04:44:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49786	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	887	OUT	GET /1/image-resize/1/200_190_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9pbmkway9NQUdFQkVpbmkway8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAHRtDJvT4iVHw-xk1cPTFzL_AKPah711V_ojCRfXlk8W&exp=1714728782&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAHGrLooAC_luHub6PE2uoo57xdsg8PXRO3LxkbO0hXKD HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:11 UTC	1205	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 87dd982dfba341d3-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 116411 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=607 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf58ca1 Set-Cookie: __cf_bm=gVoUmMvvhdf2yWM3eQYkEcr97P0fzgPM3EgAn1UpILU-1714711451-1.0.1.1-x_CnDF9TT1311KVpMz0zP8IAcXj3v9Q5B2.hCPRpATuQQpeZyqPqxNhGaTxB5BeLBolemW3zq7DZ3ejTYTFlUw; path=/; expires=Fri, 03-May-24 05:14:11 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-05-03 04:44:11 UTC	505	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 71 53 75 7a 43 4f 38 65 4f 71 25 32 46 36 4c 50 53 6e 76 6b 4d 46 49 4d 55 4f 38 50 79 4b 59 58 68 30 72 59 66 4b 58 55 58 71 32 54 44 64 77 73 6c 46 41 61 54 31 42 75 39 70 45 34 31 56 67 62 33 66 79 51 34 42 44 6b 49 4b 78 4c 38 30 30 53 69 43 44 69 74 47 44 34 67 45 4e 30 35 51 39 67 32 34 50 75 58 53 4a 57 55 33 70 69 76 73 49 77 49 7a 44 70 49 43 71 33 4c 50 4d 32 4f 31 42 7a 47 31 72 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qSuzCO8eOq%2F6LPSnvkMFIMUO8PyKYXh0rYfKXUXq2TDdwslFAaT1Bu9pE41Vgb3fyQ4BDkIKxL800SiCDitGD4gEN05Q9g24PuXSJWU3pivsIwIzDpICq3LPM2O1BzG1rg%3D%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:11 UTC	70	IN	Data Raw: 34 30 0d 0a 52 49 46 46 38 00 00 00 57 45 42 50 56 50 38 4c 2b 00 00 00 2f c6 40 2f 10 17 30 2e 5b b2 60 02 d9 64 87 0b 3a bb f8 08 60 34 00 99 e6 52 c9 69 4e 95 d9 22 fa 3f 01 74 ba f0 fe 7b ff 75 1d 00 0d 0a Data Ascii: 40RIFF8WEBPVP8L+/@/0.[`d:`4RiN"?t{u
2024-05-03 04:44:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49788	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	887	OUT	GET /1/image-resize/1/191_103_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9ZNHF6QS9NQUdFQkVZNHF6QS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAPzzLTNqWZXC4ApwNoIboqnc3sHGuUnKwnPPgAAqhb-R&exp=1714727114&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAEjx9Y7Qv0dKUIQPTqG4yvdZEScjaUd-e9V-GcQPK5Kd HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:11 UTC	1206	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:11 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 87dd982dfab143d7-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 116411 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:57 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=6915 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf68ca1 Set-Cookie: __cf_bm=4H75qJyillJaMI4fuYCjZg0LvXTbrTp.qDxPnNcY3S8-1714711451-1.0.1.1-KR6qk_CpUu6.XLuKB8eHVtYD.Ab2cnsaTZMO0p_CNt.hIHnScml8Id.fh7firs_WewXQ6iUZBXJMp4K8vHf_AQ; path=/; expires=Fri, 03-May-24 05:14:11 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-05-03 04:44:11 UTC	519	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 43 72 71 46 73 48 37 64 39 55 4b 35 46 57 55 71 55 38 39 25 32 46 55 46 4f 56 7a 56 76 37 52 54 6b 37 31 57 67 25 32 46 62 78 76 25 32 46 51 6a 4a 4a 78 31 64 4b 74 39 41 7a 68 54 50 30 51 63 58 35 6c 25 32 42 55 48 78 39 77 46 50 65 57 4d 38 6b 68 31 35 73 30 7a 62 61 6e 4d 4a 75 71 50 38 32 25 32 46 7a 6e 7a 67 25 32 42 62 79 25 32 42 6c 74 62 68 32 25 32 46 32 50 74 58 70 49 37 59 4f 55 68 54 65 45 6c 39 70 56 4c 49 4b 78 79 47 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CrqFsH7d9UK5FWUqU89%2FUFOVzVv7RTk71Wg%2Fbxv%2FQjJJx1dKt9AzhTP0QcX5l%2BUHx9wFPeWM8kh15s0zbanMJuqP82%2Fznzg%2Bby%2Bltbh2%2F2PtXpI7YOUhTeEl9pVLIKxyGQ%3D%3D"}],"group":"cf-nel","max
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: 62 32 36 0d 0a 52 49 46 46 1e 0b 00 00 57 45 42 50 56 50 38 4c 11 0b 00 00 2f be 80 19 10 09 06 91 24 c5 a9 db e3 67 fc 1b 06 92 95 10 d1 ff 09 80 b0 52 00 0c 14 09 c2 81 84 1c ba ba a0 78 c6 28 a5 78 ca e9 2b be 62 e3 07 3c da af cc 5b fc cf 05 9b 48 92 55 4d bd e8 85 e8 5f 20 43 f4 04 e0 07 01 8a da 36 92 3c 33 7b 3d 97 3f ca 42 18 81 fe 4f 00 44 e0 26 01 20 10 0f cb 0d 18 0e 80 05 7e b2 72 ed 49 be 6b ff 28 21 66 8a 23 0f cc 1d 9d 03 a2 02 0c 05 6d 1b 39 67 fe b0 6f fc 04 10 11 13 10 fb d9 c1 26 e9 7e d7 fd 15 0b 54 b1 62 b0 53 8e 24 49 8e e4 78 f5 81 73 76 f4 ff 6f 5b a2 83 03 db 25 cc ec b1 be ae d3 00 47 6e db 48 12 9d 59 4e 5d ff 7f 68 cd 6d 80 58 92 ad 6d 6b db dc df 8a 21 60 08 94 39 e5 4e 73 3a 23 6d 42 2b cc 50 a3 ee a0 3b e8 8c 99 41 25 57 05 Data Ascii: b26RIFFWEBPVP8L/$gRx(x+b<[HUM_ C6<3{=?BOD& ~rIk(!f#m9go&~TbS$Ixsvo[%GnHYN]hmXmk!`9Ns:#mB+P;A%W
2024-05-03 04:44:11 UTC	1369	IN	Data Raw: a0 10 8a 91 74 30 b4 90 81 64 68 c7 10 57 1d 75 13 09 6e 11 a2 85 03 81 40 85 42 94 02 85 81 52 0f 02 07 42 a0 42 20 4a a1 b0 60 4c 1c ad 28 81 bf 97 4a 00 00 41 80 00 81 02 eb 81 08 14 00 01 a2 12 00 85 04 fe 6e 03 28 4a 12 00 82 aa 22 80 24 02 c1 60 80 7f 88 b6 61 d6 d4 88 82 01 60 65 03 00 90 88 61 80 4a 16 49 a8 8d 0d 60 60 41 31 18 82 8a 93 8c 66 3c e5 86 2b 42 1c da 60 a0 65 a4 51 80 10 10 11 94 8a 23 e3 19 00 50 b2 44 65 37 16 db a1 40 b4 98 40 c9 44 01 02 62 95 c2 00 c2 68 91 b5 85 e1 e3 0d 0f d8 b1 68 1b 1b 0a 51 04 05 11 11 42 58 a1 30 00 c6 6b c6 e3 df 22 c9 2a 5d fb e2 ee ea 74 da 03 82 33 45 84 90 04 d1 28 09 15 6a c9 67 71 d7 16 56 2f ef 95 9f e9 21 dc a6 91 74 c8 55 ce d8 1b 83 80 ba 8c 02 80 2a 45 3e 26 db f3 9a c9 6b 19 ff af 83 dd a5 b3 Data Ascii: t0dhWun@BRBB J`L(JAn(J"$`a`eaJI``A1f<+B`eQ#PDe7@@DbhhQBX0k"]t3E(jgqV/!tUE>&k
2024-05-03 04:44:11 UTC	123	IN	Data Raw: 4d f5 4e 6c bc 13 7f df 9e 47 f1 98 3f a6 e3 fe 43 30 28 42 a4 51 46 15 75 9c 8e ba 73 8e e3 ba a6 d4 06 d3 0d c3 41 f3 63 27 86 db a8 c7 78 bc 1f f3 c7 74 1c 19 f9 30 18 14 43 80 80 2c 8a 80 32 aa 80 3a e0 b2 e9 f0 0c 30 1e 30 19 d3 71 64 e4 30 c0 60 5c 04 00 08 80 2c 00 a0 68 3a 1c 19 00 90 0f 00 83 a1 00 00 c1 2a 82 f9 62 b0 c4 e0 61 44 30 63 6c f1 a8 04 00 0d 0a Data Ascii: MNlG?C0(BQFusAc'xt0C,2:00qd0`\,h:*baD0cl
2024-05-03 04:44:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49790	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:11 UTC	993	OUT	GET /0EaXY/MAGEBD0EaXY/1/p.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJWF6QO3UH4PAAJ6Q%2F20240503%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240503T013957Z&X-Amz-Expires=25634&X-Amz-Signature=8330df290c95a272f32bfef9462c8809d9e2bebdfd3e24ad40f5cce4a3583c06&X-Amz-SignedHeaders=host%3Bx-amz-expected-bucket-owner&response-expires=Fri%2C%2003%20May%202024%2008%3A47%3A11%20GMT HTTP/1.1 Host: media-private.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:12 UTC	1170	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:12 GMT Content-Type: image/svg+xml Content-Length: 15299 Connection: close CF-Ray: 87dd982e390f423b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31556926 ETag: "d75ce760a9e21e8dc112fa302e58128c" Expires: Sat, 03 May 2025 10:32:58 GMT Last-Modified: Wed, 01 May 2024 20:23:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media-private Timing-Allow-Origin: https://www.canva.com x-amz-id-2: Q7Jiw65lh9XkebxCZywXqwkFHI9E86/xc/jiwlkXLDHV23vimqXOhbPCOgrk1ZF+XskMZgk6MBg= x-amz-replication-status: COMPLETED x-amz-request-id: R1XT7ZE3AS95A51J x-amz-server-side-encryption: AES256 x-amz-version-id: t84QQVM2Ws7XsGvoUWQbd_D5xZMHgj.Q X-Content-Type-Options: nosniff
2024-05-03 04:44:12 UTC	785	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 46 4c 69 54 71 33 4b 49 61 4d 71 50 50 61 6b 34 52 52 70 37 55 62 72 5a 41 2e 37 6e 35 46 77 79 61 51 64 52 4f 7a 52 54 78 48 51 2d 31 37 31 34 37 31 31 34 35 32 2d 31 2e 30 2e 31 2e 31 2d 4a 59 76 64 67 62 4c 41 6d 67 49 62 45 76 59 50 31 55 41 46 63 6e 66 66 6b 69 67 6d 63 5f 39 73 53 7a 4e 37 64 6e 52 76 4b 34 4c 62 61 54 46 49 4e 34 76 2e 44 68 51 63 35 44 4f 50 71 2e 67 74 34 78 59 71 54 73 35 63 57 34 78 4c 73 6a 34 71 5a 7a 49 46 57 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 30 33 2d 4d 61 79 2d 32 34 20 30 35 3a 31 34 3a 31 32 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=FLiTq3KIaMqPPak4RRp7UbrZA.7n5FwyaQdROzRTxHQ-1714711452-1.0.1.1-JYvdgbLAmgIbEvYP1UAFcnffkigmc_9sSzN7dnRvK4LbaTFIN4v.DhQc5DOPq.gt4xYqTs5cW4xLsj4qZzIFWw; path=/; expires=Fri, 03-May-24 05:14:12 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 27 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 30 2f 2f 45 4e 27 0a 20 20 20 20 20 20 20 20 20 20 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 32 30 30 31 2f 52 45 43 2d 53 56 47 2d 32 30 30 31 30 39 30 34 2f 44 54 44 2f 73 76 67 31 30 2e 64 74 64 27 3e 0a 3c 73 76 67 20 68 65 69 67 68 74 3d 22 37 33 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 33 2e 36 20 37 33 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC '-//W3C//DTD SVG 1.0//EN' 'http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd'><svg height="73" stroke="#000" stroke-linecap="square" stroke-miterlimit="10" viewBox="0 0 143.6 73
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 2d 2e 31 31 2d 2e 31 31 2d 2e 32 2d 2e 32 37 2d 2e 30 37 2d 2e 32 31 2d 2e 31 2d 2e 34 39 56 32 37 2e 36 31 68 31 2e 39 36 76 2d 2e 38 32 48 31 31 35 2e 32 56 32 34 2e 33 38 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 69 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 30 56 37 33 2e 32 48 31 34 33 2e 36 56 30 5a 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 69 29 22 20 69 64 3d 22 6a 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 34 35 2e 32 48 35 38 31 76 2d 35 37 36 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 Data Ascii: -.11-.11-.2-.27-.07-.21-.1-.49V27.61h1.96v-.82H115.2V24.38Zm0 0" /></clipPath ><clipPath id="i" ><path d="M5 0V73.2H143.6V0Z" /></clipPath ><clipPath clip-path="url(#i)" id="j" ><path d="M5 145.2H581v-576H5Zm0 0" /></clipPath
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 72 29 22 20 69 64 3d 22 73 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 36 38 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 73 29 22 20 69 64 3d 22 74 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 36 38 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 74 29 22 20 69 64 3d 22 75 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 35 Data Ascii: ><clipPath clip-path="url(#r)" id="s" ><path d="M5 68.2H138.6V5H5Zm0 0" /></clipPath ><clipPath clip-path="url(#s)" id="t" ><path d="M5 68.2H138.6V5H5Zm0 0" /></clipPath ><clipPath clip-path="url(#t)" id="u" ><path d="M5 5
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 41 29 22 20 69 64 3d 22 42 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 36 38 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 42 29 22 20 69 64 3d 22 43 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 35 48 31 33 38 2e 36 56 36 38 2e 32 48 35 5a 4d 35 20 35 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d Data Ascii: .2H138.6V5H5Zm0 0" /></clipPath ><clipPath clip-path="url(#A)" id="B" ><path d="M5 68.2H138.6V5H5Zm0 0" /></clipPath ><clipPath clip-path="url(#B)" id="C" ><path d="M5 5H138.6V68.2H5ZM5 5" /></clipPath ><clipPath clip-path=
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 4a 29 22 20 69 64 3d 22 4b 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 35 48 31 33 38 2e 36 56 36 38 2e 32 48 35 5a 4d 35 20 35 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 4b 29 22 20 69 64 3d 22 4c 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 2d 36 34 38 32 2e 32 20 38 30 2e 32 48 36 36 32 34 2e 32 56 2d 32 2e 32 48 2d 36 34 38 32 2e 32 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 4c 29 22 20 69 64 3d 22 4d 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 Data Ascii: clip-path="url(#J)" id="K" ><path d="M5 5H138.6V68.2H5ZM5 5" /></clipPath ><clipPath clip-path="url(#K)" id="L" ><path d="M-6482.2 80.2H6624.2V-2.2H-6482.2Zm0 0" /></clipPath ><clipPath clip-path="url(#L)" id="M" ><path d="M26
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 53 29 22 20 69 64 3d 22 54 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 2d 36 34 38 32 2e 32 20 38 30 2e 32 48 36 36 32 34 2e 32 56 2d 32 2e 32 48 2d 36 34 38 32 2e 32 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 54 29 22 20 69 64 3d 22 55 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 32 20 33 37 68 39 31 2e 32 56 32 31 2e 38 48 32 36 2e 32 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d Data Ascii: " /></clipPath ><clipPath clip-path="url(#S)" id="T" ><path d="M-6482.2 80.2H6624.2V-2.2H-6482.2Zm0 0" /></clipPath ><clipPath clip-path="url(#T)" id="U" ><path d="M26.2 37h91.2V21.8H26.2Zm0 0" /></clipPath ><clipPath clip-
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 32 2e 31 39 2e 39 32 2e 32 39 68 2e 35 37 6c 2e 38 32 2d 2e 30 36 2e 33 35 2d 2e 31 32 2e 36 35 2d 2e 32 37 2e 32 36 2d 2e 31 39 2e 34 37 2d 2e 34 31 2e 31 37 2d 2e 32 35 2e 32 38 2d 2e 35 31 2e 30 36 2d 2e 32 37 68 2d 31 6c 2d 2e 33 34 2e 36 31 2d 2e 33 32 2e 32 35 2d 2e 37 38 2e 33 37 68 2d 2e 35 39 6c 2d 2e 37 35 2d 2e 30 36 2d 2e 33 2d 2e 31 33 2d 2e 35 35 2d 2e 33 2d 2e 32 2d 2e 32 32 2d 2e 33 34 2d 2e 34 38 2d 2e 31 2d 2e 33 2d 2e 31 35 2d 2e 36 31 76 2d 2e 33 33 68 35 2e 34 38 63 2e 30 32 2d 2e 31 35 2e 30 33 2d 2e 32 38 2e 30 34 2d 2e 34 6c 2e 30 31 2d 2e 32 32 76 2d 2e 30 39 6c 2d 2e 30 38 2d 2e 38 31 2d 2e 31 36 2d 2e 33 36 2d 2e 33 39 2d 2e 36 37 2d 2e 32 39 2d 2e 32 37 2d 2e 36 33 2d 2e 34 38 2d 2e 34 2d 2e 31 35 2d 2e 38 33 2d 2e 32 33 68 2d Data Ascii: 2.19.92.29h.57l.82-.06.35-.12.65-.27.26-.19.47-.41.17-.25.28-.51.06-.27h-1l-.34.61-.32.25-.78.37h-.59l-.75-.06-.3-.13-.55-.3-.2-.22-.34-.48-.1-.3-.15-.61v-.33h5.48c.02-.15.03-.28.04-.4l.01-.22v-.09l-.08-.81-.16-.36-.39-.67-.29-.27-.63-.48-.4-.15-.83-.23h-
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 34 36 2e 34 33 2e 38 35 2e 33 32 2e 33 33 2e 37 2e 36 2e 34 33 2e 31 39 2e 38 39 2e 32 39 68 2e 34 39 63 2e 35 37 20 30 20 31 2e 30 37 2d 2e 31 32 20 31 2e 34 38 2d 2e 33 35 6c 2e 37 31 2d 2e 35 31 2e 31 39 2d 2e 33 33 76 31 2e 30 31 68 32 2e 33 36 56 32 32 2e 38 33 5a 4d 36 30 20 33 31 2e 33 31 6c 2d 2e 34 2d 2e 32 33 2d 2e 31 35 2d 2e 31 36 2d 2e 32 37 2d 2e 33 35 2d 2e 30 39 2d 2e 32 32 2d 2e 31 33 2d 2e 34 36 76 2d 2e 32 35 6c 2e 30 34 2d 2e 34 38 2e 30 39 2d 2e 32 32 2e 32 31 2d 2e 34 31 2e 31 35 2d 2e 31 37 2e 33 34 2d 2e 33 2e 32 32 2d 2e 31 2e 34 36 2d 2e 31 34 68 2e 32 37 6c 2e 35 32 2e 30 35 2e 32 32 2e 31 2e 34 2e 32 33 2e 31 35 2e 31 37 2e 32 37 2e 33 36 2e 30 39 2e 32 32 2e 31 33 2e 34 35 76 2e 32 35 6c 2d 2e 30 34 2e 34 39 2d 2e 30 39 2e 32 Data Ascii: 46.43.85.32.33.7.6.43.19.89.29h.49c.57 0 1.07-.12 1.48-.35l.71-.51.19-.33v1.01h2.36V22.83ZM60 31.31l-.4-.23-.15-.16-.27-.35-.09-.22-.13-.46v-.25l.04-.48.09-.22.21-.41.15-.17.34-.3.22-.1.46-.14h.27l.52.05.22.1.4.23.15.17.27.36.09.22.13.45v.25l-.04.49-.09.2
2024-05-03 04:44:12 UTC	1369	IN	Data Raw: 33 2d 2e 31 39 2d 2e 38 39 2d 2e 32 39 68 2d 2e 34 39 63 2d 2e 35 39 20 30 2d 31 2e 30 39 2e 31 32 2d 31 2e 35 2e 33 36 6d 2e 31 36 20 35 2e 30 37 6c 2d 2e 34 2d 2e 32 33 2d 2e 31 36 2d 2e 31 36 2d 2e 32 38 2d 2e 33 36 2d 2e 30 39 2d 2e 32 32 2d 2e 31 33 2d 2e 34 36 76 2d 2e 32 35 6c 2e 30 34 2d 2e 34 38 2e 30 39 2d 2e 32 32 2e 32 31 2d 2e 34 32 2e 31 36 2d 2e 31 36 2e 33 34 2d 2e 33 2e 32 32 2d 2e 31 2e 34 36 2d 2e 31 34 68 2e 32 37 6c 2e 35 31 2e 30 35 2e 32 32 2e 31 2e 34 2e 32 33 2e 31 36 2e 31 36 2e 32 38 2e 33 36 2e 30 39 2e 32 32 2e 31 33 2e 34 36 76 2e 32 35 6c 2d 2e 30 34 2e 34 39 2d 2e 30 39 2e 32 32 2d 2e 32 31 2e 34 31 2d 2e 31 36 2e 31 36 2d 2e 33 34 2e 32 39 2d 2e 32 32 2e 31 2d 2e 34 36 2e 31 35 68 2d 2e 32 37 6c 2d 2e 35 31 2d 2e 30 35 22 Data Ascii: 3-.19-.89-.29h-.49c-.59 0-1.09.12-1.5.36m.16 5.07l-.4-.23-.16-.16-.28-.36-.09-.22-.13-.46v-.25l.04-.48.09-.22.21-.42.16-.16.34-.3.22-.1.46-.14h.27l.51.05.22.1.4.23.16.16.28.36.09.22.13.46v.25l-.04.49-.09.22-.21.41-.16.16-.34.29-.22.1-.46.15h-.27l-.51-.05"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49797	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:12 UTC	508	OUT	OPTIONS /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.canva.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:12 UTC	1231	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:12 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.canva.com Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 Set-Cookie: __cf_bm=Zambmw.r5KkzEUpS55pS1mnx_ZeMm0sBdIeK__umK_E-1714711452-1.0.1.1-c1rQXpQaM_6UerYM_dQ0E63LJP7F.6tw5Mlw2cq43MJw1HLGfTdD9bZzZAUYYm2kOPlu5rIf1ecsJAHZ126boA; path=/; expires=Fri, 03-May-24 05:14:12 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yebej1ZWBUpGz71GqgDMdv5iRHTOIFAn6fksAZse%2BqOX7%2FihuZ1YFyiIN%2BoxubzXPBUdO%2BoVaSev7docr8JZ5e%2B9MK3UFlQ%2Fni8crg%2FZIVHe21jbEZc9SguLg9EZzwpALyyTIOk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=pLNYhNsvNznOAWA63K6dHSbzR00Wx1tsdF54a6D1.fE-1714711452320-0.0.1.1-604800000; path=/; domain=.canva.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87dd9830ee155e72-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49798	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:12 UTC	887	OUT	GET /1/image-resize/1/200_101_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS8wRWFYWS9NQUdFQkQwRWFYWS8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAO6e1PFmX2Er29AZfuvpz3512Xs_nbEFc3SEhvnaFaBu&exp=1714726031&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAPervKft4ICsWkqyBLRADT82t2PjahptjPl0muanri_Z HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:12 UTC	1205	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:12 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9832ba2843ac-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 66272 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:58 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=2425 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bfa8ca1 Set-Cookie: __cf_bm=og6d6ANoKNG76zzibfSZ8Xg1bh.fFIKAKXSyaaWlXg4-1714711452-1.0.1.1-hHl1gbunUUfjhAEm5h5ACpX.h2s.uPFa3k4yEj9heasQZGHS0S0g3ZK8Et3osV_L553Pn.cpcb7GbUXpXW1a8g; path=/; expires=Fri, 03-May-24 05:14:12 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-05-03 04:44:12 UTC	503	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 58 73 79 61 36 59 42 67 69 47 72 32 4f 63 4b 4c 47 47 6d 71 70 73 47 57 6f 57 32 62 4e 41 30 4d 63 52 37 75 54 70 63 36 63 34 68 77 74 49 35 30 37 42 71 58 4a 62 74 46 67 72 36 33 48 79 54 4b 50 45 4d 51 6d 31 7a 4d 7a 4d 4e 6b 41 38 7a 67 79 4f 55 37 48 36 76 48 39 53 36 59 30 6a 4c 34 47 38 76 51 47 6f 74 54 34 45 45 77 6f 61 57 41 73 74 62 53 62 4e 43 6f 31 44 57 58 53 32 49 4b 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Xsya6YBgiGr2OcKLGGmqpsGWoW2bNA0McR7uTpc6c4hwtI507BqXJbtFgr63HyTKPEMQm1zMzMNkA8zgyOU7H6vH9S6Y0jL4G8vQGotT4EEwoaWAstbSbNCo1DWXS2IKg%3D%3D"}],"group":"cf-nel","max_age":604800}N
2024-05-03 04:44:12 UTC	1030	IN	Data Raw: 34 61 63 0d 0a 52 49 46 46 a4 04 00 00 57 45 42 50 56 50 38 4c 98 04 00 00 2f c7 00 19 10 f7 e6 b0 6d 1b 49 f2 7e fd 57 7b ff 9d 09 dc cc 6e 0d 8e db 36 92 24 cd b1 f9 47 bb af dd 36 dd b6 91 e4 48 75 c2 7a 95 7f 9e 6f 5f 93 41 24 49 4e fa 9f 8c 11 6c 20 01 73 78 43 48 8e 27 20 28 1e c4 8c 14 04 90 40 01 20 36 0a 10 08 08 28 00 11 00 a5 67 80 80 12 00 01 50 02 d2 cd a0 7d 7f 0f 71 72 19 00 44 44 60 86 75 40 a4 e8 e6 24 2f 3a 02 52 40 cf 0c 6c 47 11 74 80 21 86 58 10 20 41 c7 40 77 00 74 fc ce 0c 6f 37 43 06 3d 03 4a 47 d0 51 d8 74 14 01 e9 a6 f8 fd 07 02 65 88 23 05 80 51 00 09 80 08 32 87 ff 43 47 d9 ef 4c a0 74 80 01 c5 f4 e5 0f bb 3e 03 a9 50 7f 6a 4b 22 ea 53 29 1a 5c ab d7 fb 2a 97 eb 8c b5 ad ab fb 7e dc 55 e9 59 f7 35 ae ff 2d bf bb 39 15 b9 da 97 Data Ascii: 4acRIFFWEBPVP8L/mI~W{n6$G6Huzo_A$INl sxCH' (@ 6(gP}qrDD`u@$/:R@lGt!X A@wto7C=JGQte#Q2CGLt>PjK"S)\*~UY5-9
2024-05-03 04:44:12 UTC	173	IN	Data Raw: b0 92 a4 34 2c 33 0e c8 cc c2 4e d2 2a 2c 24 39 68 50 18 1a 23 49 8b b0 4e 2d e2 68 fa 3d 3e 62 0b c4 16 88 83 48 67 ce 9c 19 71 2c 88 0f 1b 10 ea a6 89 d0 fb 89 21 3e ca a1 9d 20 62 0b c4 16 88 2d 10 5b 20 b6 40 6c 81 d8 02 b1 05 62 0b c4 16 88 2d 10 5b 20 b6 40 6c 81 d8 02 b1 05 62 0b c4 16 88 2d 10 5b 20 b6 40 6c 81 d8 02 b1 05 62 0b c4 16 88 2d 10 5b 20 b6 40 6c 81 d8 02 b1 05 62 0b c4 16 88 2d 10 5b 20 ce c5 6d 20 e2 4c 2c af 23 11 27 e2 89 b1 e3 34 6c 8e 83 11 e7 60 fb bc 67 f8 f3 6e 06 2f ef fc e4 0a 0d 0a Data Ascii: 4,3N*,$9hP#IN-h=>bHgq,!> b-[ @lb-[ @lb-[ @lb-[ @lb-[ m L,#'4l`gn/
2024-05-03 04:44:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49799	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:12 UTC	1084	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 1516 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:12 UTC	1516	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"design_viewer"}},{"key":"service.name","value":{"stringValue":"design_viewer \| telemetry.user_operation"}}
2024-05-03 04:44:12 UTC	859	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:12 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 87dd98333801334e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BzPeAufANdGUDNTFXZhetHX1mW3lN4UyhUFkDLqqcc12QOr3iEReTsTO6hz5UUQaqV1u9rbGZeaRN%2FN8Ad%2F%2FoEQ5O30qQB3YreBBqoPx0ponSMiRBKo%2BeHkB80u9WaLrgVsdp7A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:12 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49801	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1074	OUT	GET /chunk-batch/c9da08c886dcc2fd.ltr.css+40f0ce866d9a0621.ltr.css HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1141	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: text/css Content-Length: 536 Connection: close CF-Ray: 87dd9836cf9c42dc-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4367462 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Fri, 05 Jan 2024 02:45:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: izA9vrWsLm10lE9PhdPSg+rQUSXb4MONPNs3nC4d4ql/IWPguuGJCrr9k8tkCI5O9ojJXjfW09o= x-amz-replication-status: COMPLETED x-amz-request-id: SBT0NHWGEFT1KBQK x-amz-server-side-encryption: AES256 x-amz-version-id: LCl38dMzRbSJXP_8hEAb8WgcWD7FZyUP X-Content-Type-Options: nosniff
2024-05-03 04:44:13 UTC	362	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 62 32 38 37 54 79 44 61 4f 53 50 35 59 53 38 37 4e 78 32 4e 70 71 4a 32 6d 35 25 32 42 6a 42 45 50 30 4e 7a 51 42 57 78 33 69 41 78 4b 62 32 77 5a 48 41 49 42 73 30 4f 77 6d 75 71 63 64 68 75 4b 71 35 70 65 77 49 25 32 46 4d 56 64 35 45 43 48 76 66 47 44 73 65 6c 46 4b 4f 5a 4b 37 58 53 6c 6a 36 69 44 6c 6a 4a 4d 59 43 42 34 46 36 34 72 63 74 68 38 39 4c 25 32 46 63 6b 73 45 45 50 44 44 65 67 7a 68 52 46 45 55 4e 4d 4f 70 6e 64 43 73 57 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kb287TyDaOSP5YS87Nx2NpqJ2m5%2BjBEP0NzQBWx3iAxKb2wZHAIBs0OwmuqcdhuKq5pewI%2FMVd5ECHvfGDselFKOZK7XSlj6iDljJMYCB4F64rcth89L%2FcksEEPDDegzhRFEUNMOpndCsWI%3D"}],"group":"cf-nel","max
2024-05-03 04:44:13 UTC	536	IN	Data Raw: 2f 2a 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 63 39 64 61 30 38 63 38 38 36 64 63 63 32 66 64 2e 6c 74 72 2e 63 73 73 20 2a 2f 0a 2e 52 56 6c 4a 50 51 7b 77 69 64 74 68 3a 33 30 34 70 78 7d 2e 6b 41 49 50 64 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 79 73 6b 75 49 67 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 7d 2e 64 62 6a 7a 47 41 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 7d 2e 79 53 78 69 44 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 72 65 6d 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 32 34 70 78 7d 0a 2f 2a 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f Data Ascii: /* __FILE_CONTENT_FOR__:c9da08c886dcc2fd.ltr.css /.RVlJPQ{width:304px}.kAIPdw{display:flex}.yskuIg{flex-shrink:1}.dbjzGA{flex-shrink:0}.ySxiDg{align-items:center;display:flex;font-size:2.4rem;height:24px;white-space:nowrap;width:24px}/ __FILE_CONTENT_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49802	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1126	OUT	GET /chunk-batch/ce299b70190d23a5.js+cc24037a755de754.strings.js+4a15dab279524914.js+6f50888fcddc9770.strings.js+0a7fa6587a575f97.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1147	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: text/javascript Content-Length: 53145 Connection: close CF-Ray: 87dd9836cf6019a1-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8405 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Fri, 03 May 2024 02:16:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: BFYyCQshzEM75JPKuDBkgf+vsBu9qgGwQjoCkysIpdMzjnaXW058vPEJX8XvWow8/UA30ZN4gQU= x-amz-replication-status: COMPLETED x-amz-request-id: XR943DFJW0678H62 x-amz-server-side-encryption: AES256 x-amz-version-id: Raxpl2kgTJSjFfGhpk3VtiZMYFh_TUd_ X-Content-Type-Options: nosniff
2024-05-03 04:44:13 UTC	360	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 77 63 74 71 71 73 73 7a 67 56 42 58 73 41 64 63 64 44 33 76 37 44 43 43 47 66 72 62 34 52 47 62 41 51 56 39 6e 6f 56 74 70 50 79 6a 49 53 52 33 64 51 75 34 6a 70 69 6b 48 6b 47 67 53 38 6a 69 33 49 77 52 6b 65 5a 6b 55 67 64 53 71 34 53 38 32 61 4b 71 36 32 46 6a 33 71 58 6b 48 39 41 50 4d 39 51 78 73 4e 6a 6d 72 54 44 57 41 57 59 7a 59 4a 4f 38 48 6d 6b 25 32 42 37 73 31 30 54 5a 74 64 37 76 69 61 4d 71 49 39 5a 25 32 42 68 37 36 71 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wctqqsszgVBXsAdcdD3v7DCCGfrb4RGbAQV9noVtpPyjISR3dQu4jpikHkGgS8ji3IwRkeZkUgdSq4S82aKq62Fj3qXkH9APM9QxsNjmrTDWAWYzYJO8Hmk%2B7s10TZtd7viaMqI9Z%2Bh76qo%3D"}],"group":"cf-nel","max_a
2024-05-03 04:44:13 UTC	1231	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 63 65 32 39 39 62 37 30 31 39 30 64 32 33 61 35 2e 6a 73 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 39 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 39 36 30 35 33 37 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f Data Ascii: ;// __FILE_CONTENT_FOR__:ce299b70190d23a5.js(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1697],{/***/ 960537:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 22 41 43 68 71 45 41 22 2c 72 6f 6c 65 3a 61 2c 22 61 72 69 61 2d 61 74 6f 6d 69 63 22 3a 21 31 2c 63 68 69 6c 64 72 65 6e 3a 5f 5f 63 2e 56 46 61 2e 6d 61 70 28 62 2c 28 66 2c 67 29 3d 3e 28 30 2c 5f 5f 63 2e 6f 42 29 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 66 7d 2c 67 29 29 7d 29 3a 28 30 2c 5f 5f 63 2e 6f 42 29 28 22 70 22 2c 7b 69 64 3a 63 2c 63 6c 61 73 73 4e 61 6d 65 3a 65 2c 72 6f 6c 65 3a 61 2c 63 68 69 6c 64 72 65 6e 3a 62 7d 29 7d 3b 65 73 62 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 37 38 35 38 39 33 29 3b 4a 56 3d 65 73 62 2e 6a 73 78 3b 62 73 62 3d 65 73 62 2e 6a 73 78 73 3b 76 61 72 20 66 73 62 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 36 37 32 39 34 29 2c Data Ascii: "AChqEA",role:a,"aria-atomic":!1,children:__c.VFa.map(b,(f,g)=>(0,__c.oB)("p",{className:e,children:f},g))}):(0,__c.oB)("p",{id:c,className:e,role:a,children:b})};esb=__webpack_require__(785893);JV=esb.jsx;bsb=esb.jsxs;var fsb=__webpack_require__(667294),
2024-05-03 04:44:13 UTC	205	IN	Data Raw: 56 73 74 31 67 5c 22 3a 5c 22 53 69 6b 6b 69 6d 5c 22 2c 5c 22 39 52 39 53 4f 41 5c 22 3a 5c 22 46 72 65 6e 63 68 20 47 75 69 61 6e 61 5c 22 2c 5c 22 4d 6d 4c 42 73 41 5c 22 3a 5c 22 54 6f 6b 75 73 68 69 6d 61 5c 22 2c 5c 22 68 55 38 79 78 41 5c 22 3a 5c 22 53 69 6e 67 61 70 6f 72 65 5c 22 2c 5c 22 74 37 43 4e 66 51 5c 22 3a 5c 22 50 72 69 6e 63 65 20 45 64 77 61 72 64 20 49 73 6c 61 6e 64 5c 22 2c 5c 22 6b 62 47 71 48 41 5c 22 3a 5c 22 45 63 75 61 64 6f 72 5c 22 2c 5c 22 6f 43 69 49 4f 41 5c 22 3a 5c 22 43 6f 6c 69 6d 61 5c 22 2c 5c 22 57 63 7a 4c 73 67 5c 22 3a 5c 22 4d 6f 7a 61 6d 62 69 71 75 65 5c 22 2c Data Ascii: Vst1g\":\"Sikkim\",\"9R9SOA\":\"French Guiana\",\"MmLBsA\":\"Tokushima\",\"hU8yxA\":\"Singapore\",\"t7CNfQ\":\"Prince Edward Island\",\"kbGqHA\":\"Ecuador\",\"oCiIOA\":\"Colima\",\"WczLsg\":\"Mozambique\",
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 5c 22 42 78 6f 67 76 51 5c 22 3a 5c 22 51 75 65 62 65 63 5c 22 2c 5c 22 33 38 74 79 7a 51 5c 22 3a 5c 22 57 79 6f 6d 69 6e 67 5c 22 2c 5c 22 6d 42 32 65 6e 67 5c 22 3a 5c 22 4b 61 67 61 77 61 5c 22 2c 5c 22 4f 7a 41 75 76 77 5c 22 3a 5c 22 4c 6f 75 69 73 69 61 6e 61 5c 22 2c 5c 22 41 64 37 70 49 77 5c 22 3a 5c 22 4d 61 72 73 68 61 6c 6c 20 49 73 6c 61 6e 64 73 5c 22 2c 5c 22 61 44 34 78 6a 67 5c 22 3a 5c 22 4b 69 72 69 62 61 74 69 5c 22 2c 5c 22 32 4b 4c 45 55 41 5c 22 3a 5c 22 47 72 65 6e 61 64 61 5c 22 2c 5c 22 50 45 61 71 31 67 5c 22 3a 5c 22 47 65 72 6d 61 6e 79 5c 22 2c 5c 22 37 51 33 54 44 51 5c 22 3a 5c 22 47 75 65 72 6e 73 65 79 5c 22 2c 5c 22 5a 6e 4a 78 69 67 5c 22 3a 5c 22 42 6f 6e 61 69 72 65 2c 20 53 69 6e 74 20 45 75 73 74 61 74 69 75 73 20 Data Ascii: \"BxogvQ\":\"Quebec\",\"38tyzQ\":\"Wyoming\",\"mB2eng\":\"Kagawa\",\"OzAuvw\":\"Louisiana\",\"Ad7pIw\":\"Marshall Islands\",\"aD4xjg\":\"Kiribati\",\"2KLEUA\":\"Grenada\",\"PEaq1g\":\"Germany\",\"7Q3TDQ\":\"Guernsey\",\"ZnJxig\":\"Bonaire, Sint Eustatius
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 2c 5c 22 71 58 53 6b 46 41 5c 22 3a 5c 22 53 69 6e 61 6c 6f 61 5c 22 2c 5c 22 73 2f 32 57 4b 67 5c 22 3a 5c 22 54 6c 61 78 63 61 6c 61 5c 22 2c 5c 22 4e 42 72 6f 2f 77 5c 22 3a 5c 22 54 75 6e 69 73 69 61 5c 22 2c 5c 22 56 52 2b 38 6f 77 5c 22 3a 5c 22 56 65 6e 65 7a 75 65 6c 61 2c 20 42 6f 6c 69 76 61 72 69 61 6e 20 52 65 70 75 62 6c 69 63 20 6f 66 5c 22 2c 5c 22 50 53 6d 78 75 41 5c 22 3a 5c 22 57 65 73 74 65 72 6e 20 53 61 68 61 72 61 5c 22 2c 5c 22 78 31 34 74 46 41 5c 22 3a 5c 22 53 61 6f 20 54 6f 6d 65 20 61 6e 64 20 50 72 69 6e 63 69 70 65 5c 22 2c 5c 22 31 43 2b 48 61 77 5c 22 3a 5c 22 4d 79 61 6e 6d 61 72 5c 22 2c 5c 22 30 57 71 79 33 77 5c 22 3a 5c 22 50 65 6e 6e 73 79 6c 76 61 6e 69 61 5c 22 2c 5c 22 48 58 52 41 42 67 5c 22 3a 5c 22 56 69 72 67 Data Ascii: ,\"qXSkFA\":\"Sinaloa\",\"s/2WKg\":\"Tlaxcala\",\"NBro/w\":\"Tunisia\",\"VR+8ow\":\"Venezuela, Bolivarian Republic of\",\"PSmxuA\":\"Western Sahara\",\"x14tFA\":\"Sao Tome and Principe\",\"1C+Haw\":\"Myanmar\",\"0Wqy3w\":\"Pennsylvania\",\"HXRABg\":\"Virg
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 67 5c 22 3a 5c 22 53 61 69 6e 74 20 4d 61 72 74 69 6e 20 28 46 72 65 6e 63 68 20 70 61 72 74 29 5c 22 2c 5c 22 55 72 43 75 59 51 5c 22 3a 5c 22 44 69 73 74 72 69 63 74 20 6f 66 20 43 6f 6c 75 6d 62 69 61 5c 22 2c 5c 22 39 58 30 64 37 67 5c 22 3a 5c 22 41 6e 74 69 67 75 61 20 61 6e 64 20 42 61 72 62 75 64 61 5c 22 2c 5c 22 62 35 44 37 55 41 5c 22 3a 5c 22 59 65 6d 65 6e 5c 22 2c 5c 22 6f 2f 6b 41 50 77 5c 22 3a 5c 22 53 61 69 74 61 6d 61 5c 22 2c 5c 22 58 4b 44 35 6f 51 5c 22 3a 5c 22 48 69 72 6f 73 68 69 6d 61 5c 22 2c 5c 22 33 79 4b 36 31 41 5c 22 3a 5c 22 48 6f 6c 79 20 53 65 65 20 28 56 61 74 69 63 61 6e 20 43 69 74 79 20 53 74 61 74 65 29 5c 22 2c 5c 22 74 4d 67 4e 65 51 5c 22 3a 5c 22 4d 61 64 61 67 61 73 63 61 72 5c 22 2c 5c 22 43 31 41 52 59 51 5c Data Ascii: g\":\"Saint Martin (French part)\",\"UrCuYQ\":\"District of Columbia\",\"9X0d7g\":\"Antigua and Barbuda\",\"b5D7UA\":\"Yemen\",\"o/kAPw\":\"Saitama\",\"XKD5oQ\":\"Hiroshima\",\"3yK61A\":\"Holy See (Vatican City State)\",\"tMgNeQ\":\"Madagascar\",\"C1ARYQ\
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 61 67 61 72 20 48 61 76 65 6c 69 5c 22 2c 5c 22 53 4a 4a 5a 43 77 5c 22 3a 5c 22 46 75 6b 75 69 5c 22 2c 5c 22 37 51 50 63 45 51 5c 22 3a 5c 22 46 69 6a 69 5c 22 2c 5c 22 73 51 75 61 4d 77 5c 22 3a 5c 22 4e 65 62 72 61 73 6b 61 5c 22 2c 5c 22 62 44 41 73 35 41 5c 22 3a 5c 22 41 67 75 61 73 63 61 6c 69 65 6e 74 65 73 5c 22 2c 5c 22 71 4e 52 69 68 41 5c 22 3a 5c 22 59 61 6d 61 67 61 74 61 5c 22 2c 5c 22 55 32 2b 42 32 41 5c 22 3a 5c 22 41 62 75 20 44 68 61 62 69 5c 22 2c 5c 22 76 46 35 55 5a 51 5c 22 3a 5c 22 4e 65 77 20 43 61 6c 65 64 6f 6e 69 61 5c 22 2c 5c 22 57 66 62 6f 54 67 5c 22 3a 5c 22 41 6c 67 65 72 69 61 5c 22 2c 5c 22 6c 53 37 32 45 77 5c 22 3a 5c 22 52 69 6f 20 47 72 61 6e 64 65 20 64 6f 20 53 75 6c 5c 22 2c 5c 22 49 58 4a 55 33 41 5c 22 3a 5c Data Ascii: agar Haveli\",\"SJJZCw\":\"Fukui\",\"7QPcEQ\":\"Fiji\",\"sQuaMw\":\"Nebraska\",\"bDAs5A\":\"Aguascalientes\",\"qNRihA\":\"Yamagata\",\"U2+B2A\":\"Abu Dhabi\",\"vF5UZQ\":\"New Caledonia\",\"WfboTg\":\"Algeria\",\"lS72Ew\":\"Rio Grande do Sul\",\"IXJU3A\":\
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 5c 22 2c 5c 22 39 73 78 4f 32 67 5c 22 3a 5c 22 50 65 72 6e 61 6d 62 75 63 6f 5c 22 2c 5c 22 34 37 5a 70 48 51 5c 22 3a 5c 22 48 69 64 61 6c 67 6f 5c 22 2c 5c 22 43 73 73 6e 66 41 5c 22 3a 5c 22 4f 73 61 6b 61 5c 22 2c 5c 22 56 52 52 2b 4e 77 5c 22 3a 5c 22 4d 65 67 68 c4 81 6c 61 79 61 5c 22 2c 5c 22 56 6f 44 61 32 77 5c 22 3a 5c 22 4c 75 78 65 6d 62 6f 75 72 67 5c 22 2c 5c 22 58 58 5a 33 57 77 5c 22 3a 5c 22 48 69 6d c4 81 63 68 61 6c 20 50 72 61 64 65 73 68 5c 22 2c 5c 22 32 67 2f 59 54 41 5c 22 3a 5c 22 41 6e 67 75 69 6c 6c 61 5c 22 2c 5c 22 74 6d 34 7a 6e 51 5c 22 3a 5c 22 41 6e 64 61 6d 61 6e 20 61 6e 64 20 4e 69 63 6f 62 61 72 20 49 73 6c 61 6e 64 73 5c 22 2c 5c 22 54 64 2b 75 6a 67 5c 22 3a 5c 22 4b 61 7a 61 6b 68 73 74 61 6e 5c 22 2c 5c 22 34 6e Data Ascii: \",\"9sxO2g\":\"Pernambuco\",\"47ZpHQ\":\"Hidalgo\",\"CssnfA\":\"Osaka\",\"VRR+Nw\":\"Meghlaya\",\"VoDa2w\":\"Luxembourg\",\"XXZ3Ww\":\"Himchal Pradesh\",\"2g/YTA\":\"Anguilla\",\"tm4znQ\":\"Andaman and Nicobar Islands\",\"Td+ujg\":\"Kazakhstan\",\"4n
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 69 61 75 c3 ad 5c 22 2c 5c 22 65 68 41 5a 5a 67 5c 22 3a 5c 22 42 68 75 74 61 6e 5c 22 2c 5c 22 45 62 47 37 63 77 5c 22 3a 5c 22 53 6f 75 74 68 6c 61 6e 64 5c 22 2c 5c 22 56 78 41 53 6b 67 5c 22 3a 5c 22 41 72 67 65 6e 74 69 6e 61 5c 22 2c 5c 22 32 51 76 32 6b 41 5c 22 3a 5c 22 56 65 72 61 63 72 75 7a 5c 22 2c 5c 22 5a 74 45 30 4f 51 5c 22 3a 5c 22 44 65 6c 61 77 61 72 65 5c 22 2c 5c 22 64 78 61 57 75 67 5c 22 3a 5c 22 43 68 69 6e 61 20 4d 61 63 61 6f 5c 22 2c 5c 22 6e 71 58 6e 75 41 5c 22 3a 5c 22 54 69 6d 6f 72 2d 4c 65 73 74 65 5c 22 2c 5c 22 2b 68 71 37 4d 67 5c 22 3a 5c 22 4e 61 75 72 75 5c 22 2c 5c 22 6d 45 32 62 54 67 5c 22 3a 5c 22 4b 61 72 6e c4 81 74 61 6b 61 5c 22 2c 5c 22 30 6d 50 77 48 67 5c 22 3a 5c 22 43 68 72 69 73 74 6d 61 73 20 49 73 6c Data Ascii: iau\",\"ehAZZg\":\"Bhutan\",\"EbG7cw\":\"Southland\",\"VxASkg\":\"Argentina\",\"2Qv2kA\":\"Veracruz\",\"ZtE0OQ\":\"Delaware\",\"dxaWug\":\"China Macao\",\"nqXnuA\":\"Timor-Leste\",\"+hq7Mg\":\"Nauru\",\"mE2bTg\":\"Karntaka\",\"0mPwHg\":\"Christmas Isl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49803	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1896	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3
2024-05-03 04:44:13 UTC	913	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd983648c88cb4-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd983648c88cb4 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=coIN2KtdLLiNMD4%2FDTi50eJ6kxD0P9vUeSGl%2FNBwglM6VVVbArO7jsopuTcuJFd352PFjWH0WQF8IiX6vL9Vg1AwePDX7CABNxFCJCmml9etMGMtK9KpjJKgr7SvBUw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:13 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 6b 56 41 52 68 4e 79 47 59 70 76 51 44 5f 55 51 44 6d 37 43 39 71 4a 54 58 5f 35 63 45 55 79 67 73 4f 58 48 64 37 5a 54 63 49 35 43 30 65 30 77 68 6f 6c 47 6d 37 4c 59 4f 79 4f 58 69 66 48 72 74 38 2d 70 5f 78 50 53 4e 37 38 34 4b 78 48 35 34 34 61 6d 61 62 56 41 74 75 30 22 2c 22 42 22 3a 31 37 31 34 37 31 38 36 35 33 32 38 35 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"kVARhNyGYpvQD_UQDm7C9qJTX_5cEUygsOXHd7ZTcI5C0e0wholGm7LYOyOXifHrt8-p_xPSN784KxH544amabVAtu0","B":1714718653285}
2024-05-03 04:44:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49804	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	865	OUT	GET /web/images/e5c5a4d109aeb5234e4405032dfd4800.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/svg+xml Content-Length: 470 Connection: close CF-Ray: 87dd98373d0d8c4b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353777 Cache-Control: public, max-age=31556926 ETag: "e5c5a4d109aeb5234e4405032dfd4800" Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Fri, 05 Jan 2024 01:59:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Q8wJxEIc+CikODDbao9QDF6S060MoLsMS5tG2AYMNS1VtdQerI44QBQ5wBi/SjsFJdJdVP/pCwY= x-amz-replication-status: COMPLETED x-amz-request-id: SBTD8NZ1N9Y88HCK x-amz-server-side-encryption: AES256 x-amz-version-id: p2VG9BWpY91D6MGJbxvkLQlgT_VaNGG2 X-Content-Type-Options: nosniff
2024-05-03 04:44:13 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 7a 58 67 48 4a 25 32 42 76 66 78 39 45 76 66 6c 7a 4c 57 65 43 6d 77 6c 68 52 39 42 78 63 70 68 69 4b 6a 63 67 51 30 44 79 62 6c 77 70 25 32 42 42 4f 67 34 6a 5a 37 30 7a 64 6d 72 35 32 62 25 32 46 37 61 68 66 45 31 69 79 6c 6d 6f 50 73 52 66 57 65 51 6c 64 4a 70 41 56 7a 25 32 46 72 49 62 25 32 46 39 39 33 4a 4e 51 43 30 6f 55 54 35 79 74 79 35 75 77 4d 69 4a 54 76 4f 4a 4d 37 43 44 73 6a 37 46 6b 6f 4f 4c 4d 44 6c 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zXgHJ%2Bvfx9EvflzLWeCmwlhR9BxcphiKjcgQ0Dyblwp%2BBOg4jZ70zdmr52b%2F7ahfE1iylmoPsRfWeQldJpAVz%2FrIb%2F993JNQC0oUT5yty5uwMiJTvOJM7CDsj7FkoOLMDlQ%3D"}],"group":"cf-nel","max_age":60
2024-05-03 04:44:13 UTC	470	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 41 43 33 33 22 20 64 3d 22 4d 32 37 2e 32 38 37 20 33 34 2e 36 32 37 63 2d 2e 34 30 34 20 30 2d 2e 38 30 36 2d 2e 31 32 34 2d 31 2e 31 35 32 2d 2e 33 37 31 4c 31 38 20 32 38 2e 34 32 32 6c 2d 38 2e 31 33 35 20 35 2e 38 33 34 61 31 2e 39 37 20 31 2e 39 37 20 30 20 30 20 31 2d 32 2e 33 31 32 2d 2e 30 30 38 20 31 2e 39 37 31 20 31 2e 39 37 31 20 30 20 30 20 31 2d 2e 37 32 31 2d 32 2e 31 39 34 6c 33 2e 30 33 34 2d 39 2e 37 39 32 2d 38 2e 30 36 32 2d 35 2e 36 38 31 61 31 2e 39 38 20 31 2e 39 38 20 30 20 30 20 31 2d 2e 37 30 38 2d 32 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFAC33" d="M27.287 34.627c-.404 0-.806-.124-1.152-.371L18 28.422l-8.135 5.834a1.97 1.97 0 0 1-2.312-.008 1.971 1.971 0 0 1-.721-2.194l3.034-9.792-8.062-5.681a1.98 1.98 0 0 1-.708-2.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49805	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	865	OUT	GET /web/images/87e22a62965f141aa08e93699b0b3527.jpg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1242	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/jpeg Content-Length: 14135 Connection: close CF-Ray: 87dd983739cf4204-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4363272 Cache-Control: public, max-age=31556926 ETag: "87e22a62965f141aa08e93699b0b3527" Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Mon, 08 Jan 2024 03:33:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: degrade=85, origSize=21932 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 8P6DAljC/alsPageYzCOrYc3rLPTQLPfaOC+f38+w6C0ETS5HDrbphB3cG5DX6cvPuwrxehV9JY= x-amz-replication-status: COMPLETED x-amz-request-id: SBTEZ4Y6AS1EFKQT x-amz-server-side-encryption: AES256 x-amz-version-id: 2NZy8A3RzTrfuf4_BLxcbKm9dGamcw2O X-Content-Type-Options: nosniff
2024-05-03 04:44:13 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 35 32 73 66 52 6e 58 47 79 79 4d 48 6b 6c 48 78 59 69 73 39 76 38 46 42 32 62 79 46 6e 41 4a 6c 46 77 74 33 50 56 32 33 78 30 52 53 4b 44 53 48 65 78 74 39 31 4f 4a 72 76 4e 46 5a 6e 66 78 76 68 7a 32 45 35 4e 78 65 4a 75 78 4d 6b 52 67 45 75 38 38 67 79 43 70 66 64 56 68 6d 25 32 42 71 25 32 46 34 78 50 62 35 55 54 32 62 30 68 71 6b 6c 65 47 58 69 54 4c 50 46 66 58 42 6c 64 4b 41 47 45 43 25 32 42 6e 66 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52sfRnXGyyMHklHxYis9v8FB2byFnAJlFwt3PV23x0RSKDSHext91OJrvNFZnfxvhz2E5NxeJuxMkRgEu88gyCpfdVhm%2Bq%2F4xPb5UT2b0hqkleGXiTLPFfXBldKAGEC%2Bnf0%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 02 30 05 9e 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 01 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 01 02 05 06 03 04 07 08 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 3a 3d af 9e 00 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}0"5:=
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: d2 d3 ab 8b 2d 26 99 68 65 a1 96 86 5a 19 68 65 a1 96 86 5a 19 68 65 a1 96 84 ec 1c 07 23 87 57 20 39 3d 00 00 00 00 00 00 00 00 00 07 1b c9 70 fa e1 ea 34 ed f3 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 cb 43 2d 0c b4 32 d0 a1 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 7f 67 af fb dc bd bc 93 c5 e5 c3 a8 22 40 00 00 00 00 00 00 31 ea da 9e 5e 1b 79 ec f3 c3 4c 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 5a 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 Data Ascii: -&heZheZhe#W 9=p42C-2C-2C-2C-2C-2C-2C-2C-2C-2`9g"@1^yLZ("("("("("("("("("
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 22 88 a2 28 8a 02 b2 00 00 00 00 00 00 00 00 00 03 d4 f6 fa fe 7a 7a bc ef 1b cf c0 35 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 00 00 00 00 00 00 01 e2 ab ca f9 ef cf 3e 6e ff 00 75 ea df 08 7c b6 bf 57 e2 3e 7e f1 ed dc 38 0e 39 cd 3c 97 63 e9 4b 3e 8d cc fc 81 d7 1f a1 3b 37 e5 5f 67 da a7 ea 77 c3 be 91 f5 79 f6 91 ef 50 00 00 00 00 07 Data Ascii: ("("("("("("("("("("("("("("("("("("("("(zz5>nu\|W>~89<cK>;7_gwyP
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 00 0e 43 8f 59 f4 4e cf f1 4f 27 a7 4f b6 be 61 ce fa 15 ee 4e 0b 90 ea 8f 75 e3 dd e2 a4 96 9e 0f 5a 93 c8 38 5f 43 37 69 74 5e 27 9e 7e a1 c4 fc b3 d7 e3 9e f5 d6 78 b7 9f 70 e7 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 62 eb ad 23 ea 5c f7 c3 fd af 4e 9f 67 7c df 9b ef 8e da e1 7d ee 98 f7 1e 3d e9 1f 0f 1f 19 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CYNO'OaNuZ8_C7it^'~xpb#\Ng\|}=
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 1c 3d 3e ec ed 8e 1f fc 2f 38 e1 ff 00 c2 f3 8e 1f fc 2f 38 e1 ff 00 c2 f3 8e 1e 3d df 9c 70 f4 fb b3 1c 39 ad 15 47 0d 67 b4 78 40 9b 63 4f ca 37 f6 4f 4a 20 29 26 e5 0f b9 8b 75 a6 be d1 d4 a7 f9 8d 5f 18 72 98 a3 5b be 6d 3f d3 c6 f8 42 f7 45 47 a6 ed f1 5a 93 f3 83 ba 59 6c 92 ee 79 41 dd 3a 72 49 9f cf fe 23 fd 51 fe c7 fe cf f1 1f ea 8f f6 3f f6 7f 88 4e e9 99 e7 4a af f3 57 08 dd 1c 8a b9 48 75 3e 00 fe b0 dd 33 46 b9 74 c8 1f cc 08 86 de 69 d1 5b 6e 25 7f ca 6b ea e9 ea 7d 89 7a d0 c7 ad 5e 7e 68 f9 c4 cc ec cc e2 ab 79 d2 ac c3 20 f0 c4 64 a9 99 b9 3a 93 5e f8 de 82 bf 43 12 54 94 ac f0 f5 6b a9 79 50 6f f6 4b 79 a4 72 96 21 53 c8 1c 94 13 ae 15 3a f1 ba a1 0a 75 d5 5e b3 b7 11 0b 5a 6e 59 1e 30 26 5f 1c fd b0 27 9c ca 90 61 33 c8 e7 20 8d 56 c2 Data Ascii: =>/8/8=p9Ggx@cO7OJ )&u_r[m?BEGZYlyA:rI#Q?NJWHu>3Fti[n%k}z^~hy d:^CTkyPoKyr!S:u^ZnY0&_'a3 V
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 8a 5a 59 57 85 a7 58 ae 11 39 2a e5 cf 27 c6 c8 04 1b 7e 84 a9 48 b5 2a ab 54 37 3a b1 62 c5 7a a1 13 0d 39 72 bc 0d 98 b2 94 94 82 54 40 03 29 89 cd d0 4a b1 5a 58 f5 cb ec e4 ed 89 ba 46 6e 74 fa d7 78 ba 02 c4 f5 14 9c fa e5 ce 0a ed 6f e1 0d b8 87 50 16 85 56 93 8c bc f3 6c 23 0d 6a ab f5 89 b9 d7 26 95 99 19 13 d4 72 54 96 0d 4d be 6c c8 bf 9c 02 08 ac 63 af 4f 4b 31 61 72 b3 98 5b 0e d2 ee 1b 1a 6c 27 b4 da 61 d9 97 de e5 ba 4f 66 30 95 ad 07 8a b2 93 d8 6a 84 52 13 68 e9 6b d7 08 a6 1c 1c b6 41 d4 6a 84 52 d2 ca e5 05 a7 c2 b8 44 e4 aa ee 7d 1e 26 a8 6e 61 c4 72 17 66 d8 4c f1 e7 a3 64 26 65 95 73 ea d7 64 56 0d d8 84 c5 29 21 2d 5e 1c ca 6b d1 4d a7 ca 26 77 4c 6e 96 63 fa 97 f2 89 89 d9 a9 b3 5b cf 29 5d 99 36 75 2c b4 d3 b2 ca ad 06 cc a9 39 62 Data Ascii: ZYWX9'~HT7:bz9rT@)JZXFntxoPVl#j&rTMlcOK1ar[l'aOf0jRhkAjRD}&narfLd&esdV)!-^kM&wLnc[)]6u,9b
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 21 08 42 10 84 21 08 42 10 84 21 08 42 10 84 27 82 3a 3a 2c 58 92 44 a4 4b 25 fb e4 5e 6b 21 1b 34 f0 6b 06 bc 19 e8 75 70 44 16 52 25 f5 51 82 b1 c7 e3 6e 22 42 79 e2 fb 09 5a 7d 0d 99 cd 60 33 1e 25 df c5 73 45 ae 83 56 6f e9 46 9a 71 92 77 78 bf a3 24 5d 70 7d 57 80 24 db 89 56 f2 48 51 5e 2d 91 94 b7 77 8b fd 11 09 34 a1 bf 9b a1 a5 b6 9a 4a 2f af c9 a6 d2 e9 e3 2e 52 42 55 2f da 4b 43 07 9a d9 f8 93 d0 92 ac 59 5a af 77 fa e1 48 7f 49 3a 08 f8 f4 cc 92 55 bc 20 94 af 17 ed c2 ae 2e c4 fc 67 03 c8 5f b9 6b b9 08 fb 08 71 c1 93 e6 66 58 ad d7 87 ad 2d e6 f1 7f 5b bf 1a c0 bb 1f 03 34 81 76 e3 11 1a b9 70 cc ae 81 ac 63 e8 a9 f2 b4 26 ad fc a3 f6 1a 69 c7 83 f1 35 75 28 b7 63 5a c1 a6 2b 52 d4 69 ba be 8b 49 a6 9e 29 95 bc 35 21 a3 6b eb a1 1a 78 a6 24 Data Ascii: !B!B!B'::,XDK%^k!4kupDR%Qn"ByZ}`3%sEVoFqwx$]p}W$VHQ^-w4J/.RBU/KCYZwHI:U .g_kqfX-[4vpc&i5u(cZ+RiI)5!kx$
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: c9 b9 b2 4a cb a5 7b 88 62 b2 68 69 a6 9e a9 af da 9a af 62 79 be 88 52 ab be 82 2f 26 24 f9 0e 29 8d 59 a7 ba c0 c9 d8 b6 fc 86 45 dc ab 0f e7 5c a2 19 4a b6 c8 d1 db a8 7e de 36 80 93 35 90 e9 e4 2d 1d 33 0d 1b ae a9 1c 5e 89 17 02 90 f2 1d 4d a3 4f 93 43 d6 63 16 38 8b 97 e6 5a c5 55 f0 62 9c e6 d5 82 f0 bc 99 77 7c 85 c9 36 4b 45 c3 ac 62 62 b9 95 cd ed 13 51 b9 ac 9b 6c d6 8f f4 a6 b0 da 62 29 a9 66 d8 86 0d 8d b7 9b 78 bf 02 ec 1c cb d8 c9 d9 d6 0c c1 9d 50 43 35 e4 d0 b5 99 d1 90 93 56 5d 2c 5a aa e8 d3 16 b2 7a 43 e4 a1 6a fa 68 ff 00 01 7e 44 fc d1 d5 21 bc da 75 0b 69 ea c6 41 e6 a2 f7 32 73 a1 a7 e1 28 22 d5 84 89 2d 5b 63 64 ea a9 d1 27 40 c7 cc e6 09 b2 4b 25 c2 b1 e3 56 1a 46 b5 4d 10 6b ca 48 bd 22 cd 08 10 75 aa 9f 0a 42 24 bc 51 f5 41 21 Data Ascii: J{bhibyR/&$)YE\J~65-3^MOCc8ZUbw\|6KEbbQlb)fxPC5V],ZzCjh~D!uiA2s("-[cd'@K%VFMkH"uB$QA!
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 01 00 00 00 00 00 00 11 02 01 03 04 05 06 20 30 40 13 15 50 00 10 14 70 12 16 80 60 ff da 00 08 01 02 01 01 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f d0 b3 bf 5c ba 65 c2 f7 ce d6 b5 bd 4b be 25 6b 76 ff 00 45 9b ff 00 37 2a ce e7 da dd df 0f 22 e7 55 99 f9 95 ad 6f 46 ef 69 55 55 55 59 dd f5 e7 77 a2 c4 95 55 55 55 b9 91 5a d2 52 97 56 3d 55 55 55 55 55 55 55 6e c9 61 72 97 15 55 7b d5 ad 64 aa b0 b9 4b f1 97 73 22 7d ab 32 ae 4c 72 69 5f 1e b5 f5 6b 5e 88 d7 ad 55 55 55 6b f4 76 2c 7d 2a aa aa e4 77 b1 e4 aa aa aa aa aa ac a8 74 52 34 fa 55 55 55 55 55 59 db f4 bd 2f 4b d2 f4 bd 2f 4a 96 a3 45 55 55 5b f1 ee d9 a2 aa aa aa aa aa aa aa aa aa fc 34 ec 9d a8 c6 dc 3f 40 2a aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa Data Ascii: 0@Pp`\eK%kvE7"UoFiUUUYwUUUZRV=UUUUUUUnarU{dKs"}2Lri_k^UUUkv,}wtR4UUUUUY/K/JEUU[4?@*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49806	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	865	OUT	GET /web/images/749002f5a04f784cc1802d77d2fed423.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/svg+xml Content-Length: 2725 Connection: close CF-Ray: 87dd98373b5a43e2-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353777 Cache-Control: public, max-age=31556926 ETag: "749002f5a04f784cc1802d77d2fed423" Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Mon, 08 Jan 2024 03:33:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 5cdE2rDmvSJ10MEcpbd/FxBkcLlqwo3IRpldJqG43b0+0md7P8X3k2RvZObu12UXWiVTXFo3jqk= x-amz-replication-status: COMPLETED x-amz-request-id: SBT9293K5TT9YXKF x-amz-server-side-encryption: AES256 x-amz-version-id: CYjzPWbPE89Uh.x_PjEnj_d_.iZJD1mL X-Content-Type-Options: nosniff
2024-05-03 04:44:13 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 78 67 33 43 6f 39 25 32 46 65 69 64 56 41 37 51 54 6d 62 4c 4d 35 78 36 25 32 42 72 68 4c 50 49 59 4c 4b 31 37 44 4c 45 66 54 51 43 6c 47 4d 6a 75 55 57 4c 76 4b 63 4b 69 67 49 68 75 6b 74 33 70 5a 48 55 63 73 45 5a 62 55 63 6f 47 76 47 34 73 46 31 56 71 44 77 71 39 62 4d 66 6c 62 33 25 32 42 50 4e 46 7a 47 65 43 74 25 32 42 50 4e 68 42 68 75 33 61 56 6d 75 73 4d 69 6f 30 55 78 48 31 25 32 46 7a 79 72 4a 79 25 32 42 70 6f 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xg3Co9%2FeidVA7QTmbLM5x6%2BrhLPIYLK17DLEfTQClGMjuUWLvKcKigIhukt3pZHUcsEZbUcoGvG4sF1VqDwq9bMflb3%2BPNFzGeCt%2BPNhBhu3aVmusMio0UxH1%2FzyrJy%2BpoE%3D"}],"group":"cf-nel","max_age":
2024-05-03 04:44:13 UTC	1193	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 38 30 38 20 33 31 2e 39 32 31 63 30 20 2e 39 36 33 2e 32 35 32 20 31 2e 36 31 32 2e 38 39 35 20 31 2e 36 31 32 20 31 2e 31 30 32 20 30 20 32 2e 31 38 39 2d 32 2e 39 39 35 20 32 2e 31 38 39 2d 34 2e 36 39 32 20 30 2d 2e 37 36 32 2d 2e 32 30 32 2d 31 2e 33 38 37 2d 2e 37 32 39 2d 31 2e 33 38 37 2d 31 2e 32 31 31 20 30 2d 32 2e 33 35 35 20 32 2e 37 39 37 2d 32 2e 33 35 35 20 34 2e 34 36 37 7a 6d 32 32 2e 33 34 37 2d 35 2e 30 31 31 63 30 20 Data Ascii: <svg width="60" height="60" viewBox="0 0 60 60" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.808 31.921c0 .963.252 1.612.895 1.612 1.102 0 2.189-2.995 2.189-4.692 0-.762-.202-1.387-.729-1.387-1.211 0-2.355 2.797-2.355 4.467zm22.347-5.011c0
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 36 32 20 31 2e 38 30 31 2d 32 2e 36 31 35 20 31 2e 38 30 31 2d 2e 38 36 38 20 30 2d 31 2e 35 33 35 2d 2e 35 36 39 2d 31 2e 37 38 37 2d 31 2e 37 32 37 2d 2e 36 35 34 20 31 2e 31 30 38 2d 31 2e 35 31 20 31 2e 37 33 36 2d 32 2e 35 36 38 20 31 2e 37 33 36 2d 31 2e 31 38 38 20 30 2d 31 2e 39 36 37 2d 2e 38 39 35 2d 32 2e 30 38 38 2d 32 2e 36 31 36 2d 31 2e 30 37 38 20 32 2e 30 37 37 2d 33 2e 30 37 35 20 33 2e 38 35 31 2d 35 2e 33 35 39 20 33 2e 38 35 31 43 38 2e 39 33 37 20 33 36 2e 30 37 34 20 37 20 33 33 2e 37 30 38 20 37 20 32 39 2e 37 38 33 20 37 20 32 34 2e 38 35 20 31 30 2e 38 35 20 32 31 20 31 34 2e 36 37 35 20 32 31 63 32 2e 33 31 36 20 30 20 33 2e 36 32 33 20 31 2e 31 38 32 20 33 2e 36 32 33 20 32 2e 37 39 33 20 30 20 31 2e 36 31 32 2d 31 2e 31 38 32 Data Ascii: 62 1.801-2.615 1.801-.868 0-1.535-.569-1.787-1.727-.654 1.108-1.51 1.736-2.568 1.736-1.188 0-1.967-.895-2.088-2.616-1.078 2.077-3.075 3.851-5.359 3.851C8.937 36.074 7 33.708 7 29.783 7 24.85 10.85 21 14.675 21c2.316 0 3.623 1.182 3.623 2.793 0 1.612-1.182
2024-05-03 04:44:13 UTC	163	IN	Data Raw: 37 32 33 2d 31 2e 32 33 33 2e 35 31 33 20 30 20 2e 37 32 2e 31 38 37 2e 37 32 2e 35 36 36 61 31 2e 34 31 37 20 31 2e 34 31 37 20 30 20 30 20 31 2d 2e 30 38 2e 34 31 38 63 2d 2e 34 30 33 20 31 2e 33 30 33 2d 31 2e 32 31 32 20 34 2e 31 35 39 2d 31 2e 32 31 32 20 35 2e 35 30 33 20 30 20 2e 35 34 2e 31 32 35 2e 38 38 33 2e 34 33 33 2e 38 38 33 2e 35 33 36 20 30 20 31 2e 31 38 38 2d 2e 38 32 20 31 2e 36 37 2d 32 2e 31 39 35 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 723-1.233.513 0 .72.187.72.566a1.417 1.417 0 0 1-.08.418c-.403 1.303-1.212 4.159-1.212 5.503 0 .54.125.883.433.883.536 0 1.188-.82 1.67-2.195z" fill="#fff"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49818	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1211	OUT	GET /0EaXY/MAGEBD0EaXY/1/p.svg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJWF6QO3UH4PAAJ6Q%2F20240503%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240503T013957Z&X-Amz-Expires=25634&X-Amz-Signature=8330df290c95a272f32bfef9462c8809d9e2bebdfd3e24ad40f5cce4a3583c06&X-Amz-SignedHeaders=host%3Bx-amz-expected-bucket-owner&response-expires=Fri%2C%2003%20May%202024%2008%3A47%3A11%20GMT HTTP/1.1 Host: media-private.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1339	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/svg+xml Content-Length: 15299 Connection: close CF-Ray: 87dd9837d98c424a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 1 Cache-Control: public, max-age=31556926 ETag: "d75ce760a9e21e8dc112fa302e58128c" Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Wed, 01 May 2024 20:23:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media-private Timing-Allow-Origin: https://www.canva.com x-amz-id-2: Q7Jiw65lh9XkebxCZywXqwkFHI9E86/xc/jiwlkXLDHV23vimqXOhbPCOgrk1ZF+XskMZgk6MBg= x-amz-replication-status: COMPLETED x-amz-request-id: R1XT7ZE3AS95A51J x-amz-server-side-encryption: AES256 x-amz-version-id: t84QQVM2Ws7XsGvoUWQbd_D5xZMHgj.Q X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MTNHUQV42MmSulcxxEcecGv4%2FLvyBl6eMNpXKurQVX0oPrMXqllQHSVDRcPq7VEVPvG3a1LiDRBgbAT9pGzAHrKJZp0r07d3dmKd2uHEL7pE0PttXtyWxk4kUKP%2FRdgAUJYGMuY%2BNpdD"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:13 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-05-03 04:44:13 UTC	1307	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 27 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 30 2f 2f 45 4e 27 0a 20 20 20 20 20 20 20 20 20 20 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 32 30 30 31 2f 52 45 43 2d 53 56 47 2d 32 30 30 31 30 39 30 34 2f 44 54 44 2f 73 76 67 31 30 2e 64 74 64 27 3e 0a 3c 73 76 67 20 68 65 69 67 68 74 3d 22 37 33 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 33 2e 36 20 37 33 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC '-//W3C//DTD SVG 1.0//EN' 'http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd'><svg height="73" stroke="#000" stroke-linecap="square" stroke-miterlimit="10" viewBox="0 0 143.6 73
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 33 2d 2e 30 32 76 2d 2e 38 35 6c 2d 2e 32 37 2e 30 34 2d 2e 31 38 2e 30 31 2d 2e 33 36 2e 30 32 68 2d 2e 31 36 6c 2d 2e 33 33 2d 2e 30 32 2d 2e 31 35 2d 2e 30 33 2d 2e 32 37 2d 2e 31 31 2d 2e 31 31 2d 2e 31 31 2d 2e 32 2d 2e 32 37 2d 2e 30 37 2d 2e 32 31 2d 2e 31 2d 2e 34 39 56 32 37 2e 36 31 68 31 2e 39 36 76 2d 2e 38 32 48 31 31 35 2e 32 56 32 34 2e 33 38 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 69 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 30 56 37 33 2e 32 48 31 34 33 2e 36 56 30 5a 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 69 29 22 20 69 64 3d Data Ascii: 3-.02v-.85l-.27.04-.18.01-.36.02h-.16l-.33-.02-.15-.03-.27-.11-.11-.11-.2-.27-.07-.21-.1-.49V27.61h1.96v-.82H115.2V24.38Zm0 0" /></clipPath ><clipPath id="i" ><path d="M5 0V73.2H143.6V0Z" /></clipPath ><clipPath clip-path="url(#i)" id=
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 64 3d 22 72 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 34 35 2e 32 48 35 38 31 76 2d 35 37 36 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 72 29 22 20 69 64 3d 22 73 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 36 38 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 73 29 22 20 69 64 3d 22 74 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 36 38 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 Data Ascii: d="r" ><path d="M5 145.2H581v-576H5Zm0 0" /></clipPath ><clipPath clip-path="url(#r)" id="s" ><path d="M5 68.2H138.6V5H5Zm0 0" /></clipPath ><clipPath clip-path="url(#s)" id="t" ><path d="M5 68.2H138.6V5H5Zm0 0" /></clipPat
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 7a 29 22 20 69 64 3d 22 41 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 36 38 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 41 29 22 20 69 64 3d 22 42 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 36 38 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 42 29 22 20 69 64 3d 22 43 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 35 Data Ascii: ><clipPath clip-path="url(#z)" id="A" ><path d="M5 68.2H138.6V5H5Zm0 0" /></clipPath ><clipPath clip-path="url(#A)" id="B" ><path d="M5 68.2H138.6V5H5Zm0 0" /></clipPath ><clipPath clip-path="url(#B)" id="C" ><path d="M5 5
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 61 74 68 20 64 3d 22 4d 35 20 36 38 2e 32 48 31 33 38 2e 36 56 35 48 35 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 4a 29 22 20 69 64 3d 22 4b 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 35 48 31 33 38 2e 36 56 36 38 2e 32 48 35 5a 4d 35 20 35 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 4b 29 22 20 69 64 3d 22 4c 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 2d 36 34 38 32 2e 32 20 38 30 2e 32 48 36 36 32 34 2e 32 56 2d 32 2e 32 48 2d 36 34 38 32 2e 32 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 Data Ascii: ath d="M5 68.2H138.6V5H5Zm0 0" /></clipPath ><clipPath clip-path="url(#J)" id="K" ><path d="M5 5H138.6V68.2H5ZM5 5" /></clipPath ><clipPath clip-path="url(#K)" id="L" ><path d="M-6482.2 80.2H6624.2V-2.2H-6482.2Zm0 0" /></clipPa
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 52 29 22 20 69 64 3d 22 53 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 35 48 31 33 38 2e 36 56 36 38 2e 32 48 35 5a 4d 35 20 35 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 53 29 22 20 69 64 3d 22 54 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 2d 36 34 38 32 2e 32 20 38 30 2e 32 48 36 36 32 34 2e 32 56 2d 32 2e 32 48 2d 36 34 38 32 2e 32 5a 6d 30 20 30 22 0a 20 20 20 20 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 0a 20 20 20 20 3e 3c 63 6c 69 70 50 61 74 68 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 54 29 22 20 69 64 3d 22 55 22 0a 20 20 20 20 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 32 Data Ascii: lip-path="url(#R)" id="S" ><path d="M5 5H138.6V68.2H5ZM5 5" /></clipPath ><clipPath clip-path="url(#S)" id="T" ><path d="M-6482.2 80.2H6624.2V-2.2H-6482.2Zm0 0" /></clipPath ><clipPath clip-path="url(#T)" id="U" ><path d="M26.2
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 2d 2e 32 38 2e 33 31 2d 2e 35 2e 36 37 2d 2e 31 35 2e 34 31 2d 2e 32 33 2e 38 36 76 2e 34 39 6c 2e 30 37 2e 39 2e 31 34 2e 34 33 2e 33 35 2e 38 2e 32 38 2e 33 32 2e 36 33 2e 35 38 2e 34 32 2e 31 39 2e 39 32 2e 32 39 68 2e 35 37 6c 2e 38 32 2d 2e 30 36 2e 33 35 2d 2e 31 32 2e 36 35 2d 2e 32 37 2e 32 36 2d 2e 31 39 2e 34 37 2d 2e 34 31 2e 31 37 2d 2e 32 35 2e 32 38 2d 2e 35 31 2e 30 36 2d 2e 32 37 68 2d 31 6c 2d 2e 33 34 2e 36 31 2d 2e 33 32 2e 32 35 2d 2e 37 38 2e 33 37 68 2d 2e 35 39 6c 2d 2e 37 35 2d 2e 30 36 2d 2e 33 2d 2e 31 33 2d 2e 35 35 2d 2e 33 2d 2e 32 2d 2e 32 32 2d 2e 33 34 2d 2e 34 38 2d 2e 31 2d 2e 33 2d 2e 31 35 2d 2e 36 31 76 2d 2e 33 33 68 35 2e 34 38 63 2e 30 32 2d 2e 31 35 2e 30 33 2d 2e 32 38 2e 30 34 2d 2e 34 6c 2e 30 31 2d 2e 32 32 76 Data Ascii: -.28.31-.5.67-.15.41-.23.86v.49l.07.9.14.43.35.8.28.32.63.58.42.19.92.29h.57l.82-.06.35-.12.65-.27.26-.19.47-.41.17-.25.28-.51.06-.27h-1l-.34.61-.32.25-.78.37h-.59l-.75-.06-.3-.13-.55-.3-.2-.22-.34-.48-.1-.3-.15-.61v-.33h5.48c.02-.15.03-.28.04-.4l.01-.22v
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 38 2e 34 36 2d 2e 33 32 2e 33 33 2d 2e 35 37 2e 37 33 2d 2e 31 38 2e 34 36 63 2d 2e 31 38 2e 34 36 2d 2e 32 37 2e 39 36 2d 2e 32 37 20 31 2e 34 39 6c 2e 30 39 20 31 2e 30 33 2e 31 38 2e 34 36 2e 34 33 2e 38 35 2e 33 32 2e 33 33 2e 37 2e 36 2e 34 33 2e 31 39 2e 38 39 2e 32 39 68 2e 34 39 63 2e 35 37 20 30 20 31 2e 30 37 2d 2e 31 32 20 31 2e 34 38 2d 2e 33 35 6c 2e 37 31 2d 2e 35 31 2e 31 39 2d 2e 33 33 76 31 2e 30 31 68 32 2e 33 36 56 32 32 2e 38 33 5a 4d 36 30 20 33 31 2e 33 31 6c 2d 2e 34 2d 2e 32 33 2d 2e 31 35 2d 2e 31 36 2d 2e 32 37 2d 2e 33 35 2d 2e 30 39 2d 2e 32 32 2d 2e 31 33 2d 2e 34 36 76 2d 2e 32 35 6c 2e 30 34 2d 2e 34 38 2e 30 39 2d 2e 32 32 2e 32 31 2d 2e 34 31 2e 31 35 2d 2e 31 37 2e 33 34 2d 2e 33 2e 32 32 2d 2e 31 2e 34 36 2d 2e 31 34 68 Data Ascii: 8.46-.32.33-.57.73-.18.46c-.18.46-.27.96-.27 1.49l.09 1.03.18.46.43.85.32.33.7.6.43.19.89.29h.49c.57 0 1.07-.12 1.48-.35l.71-.51.19-.33v1.01h2.36V22.83ZM60 31.31l-.4-.23-.15-.16-.27-.35-.09-.22-.13-.46v-.25l.04-.48.09-.22.21-.41.15-.17.34-.3.22-.1.46-.14h
2024-05-03 04:44:13 UTC	505	IN	Data Raw: 34 36 2e 32 37 2d 2e 39 36 2e 32 37 2d 31 2e 34 39 6c 2d 2e 30 39 2d 31 2e 30 33 2d 2e 31 38 2d 2e 34 36 2d 2e 34 33 2d 2e 38 36 2d 2e 33 32 2d 2e 33 33 2d 2e 36 39 2d 2e 35 39 2d 2e 34 33 2d 2e 31 39 2d 2e 38 39 2d 2e 32 39 68 2d 2e 34 39 63 2d 2e 35 39 20 30 2d 31 2e 30 39 2e 31 32 2d 31 2e 35 2e 33 36 6d 2e 31 36 20 35 2e 30 37 6c 2d 2e 34 2d 2e 32 33 2d 2e 31 36 2d 2e 31 36 2d 2e 32 38 2d 2e 33 36 2d 2e 30 39 2d 2e 32 32 2d 2e 31 33 2d 2e 34 36 76 2d 2e 32 35 6c 2e 30 34 2d 2e 34 38 2e 30 39 2d 2e 32 32 2e 32 31 2d 2e 34 32 2e 31 36 2d 2e 31 36 2e 33 34 2d 2e 33 2e 32 32 2d 2e 31 2e 34 36 2d 2e 31 34 68 2e 32 37 6c 2e 35 31 2e 30 35 2e 32 32 2e 31 2e 34 2e 32 33 2e 31 36 2e 31 36 2e 32 38 2e 33 36 2e 30 39 2e 32 32 2e 31 33 2e 34 36 76 2e 32 35 6c 2d Data Ascii: 46.27-.96.27-1.49l-.09-1.03-.18-.46-.43-.86-.32-.33-.69-.59-.43-.19-.89-.29h-.49c-.59 0-1.09.12-1.5.36m.16 5.07l-.4-.23-.16-.16-.28-.36-.09-.22-.13-.46v-.25l.04-.48.09-.22.21-.42.16-.16.34-.3.22-.1.46-.14h.27l.51.05.22.1.4.23.16.16.28.36.09.22.13.46v.25l-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49815	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1103	OUT	GET /1/image-resize/1/200_53_75_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAB6daLSOMIMldyWCy4W8HA8OQDYBB1CM9WO_lTXa_UQd&exp=1714727913&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAABhv6lWY6En1hWe0SjUShCcYXN4KBGo_Fd_AjJojQYM2 HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1141	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9837ce4442d8-EWR CF-Cache-Status: HIT Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: degrade=85, origSize=5889 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf88ca1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z4liWbr9KyyScOmeBRYs2uNi%2BTCMt0tkxeiQMem8pwsrGFWyehoE%2FJxMWHigMSvyaMBsiovBiy6ICsPBeHP2vas%2BVScEhzeUNRN0Q9KOJsryTUEa6istFMt%2BgF2Ni%2F6Zyg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:13 UTC	228	IN	Data Raw: 63 61 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c0 00 11 08 00 35 00 c8 03 01 22 00 02 11 01 03 22 01 ff c4 00 a4 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 05 07 08 04 03 02 10 00 01 04 01 03 02 04 01 08 07 09 00 00 00 00 00 02 00 01 03 Data Ascii: caeJFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}5""
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 04 05 06 11 12 21 31 07 13 41 51 22 14 32 36 42 61 72 73 91 15 23 62 74 92 b2 b3 17 33 35 43 52 53 81 b1 c2 01 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 01 02 04 05 07 03 08 11 00 01 03 04 00 05 01 06 03 05 09 00 00 00 00 00 01 00 02 03 04 05 11 12 06 13 21 31 41 51 14 15 22 42 61 71 32 72 a2 07 53 82 92 a1 23 25 33 52 62 63 91 b1 c1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 9c 44 45 c8 97 d2 68 88 88 88 cc ee e2 2c ce ee fd 19 9b bb ab b0 4a 22 2b 1d 24 6c fc 4f 68 fb 94 45 6f 87 f0 fb 53 e6 1c 09 a8 bd 58 5f fc cb 3f ab fc 83 bb ad 8a 1e 0d 53 f9 2e d2 e7 27 f9 4f 7e 63 18 f0 fe 05 b2 86 d1 5f 50 dd 9b 02 f5 2d 73 be 4c 2f 32 e9 59 d0 39 45 ee 5c 55 6d a3 d8 41 50 64 78 f0 d0 a2 ce e3 da dd fe 0a 60 59 f5 2b 41 a2 bd d4 de 1f 65 b4 d5 63 b9 Data Ascii: !1AQ"26Bars#bt35CRS!1AQ"Baq2rS#%3Rbc?DEh,J"+$lOhEoSX_?S.'O~c_P-sL/2Y9E\UmAPdx`Y+Aec
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 21 90 5e 40 67 db 93 6f d4 77 f4 e4 b6 0e 17 2b 84 cd e5 2a e2 ac e9 2a 10 d6 b4 4f 18 c9 5f 93 4d 13 90 f4 2e 6a 0e f8 41 15 eb c1 58 d8 a0 19 e5 68 89 9f 90 b8 6e fb 3f e4 b6 16 03 3f a7 06 c4 15 6b e1 0b 17 6e 7d a0 0c 94 52 79 e7 19 97 c3 be d3 37 4e 5e ed d5 79 50 1d 67 31 ba 48 b4 cf f3 ae 95 52 31 48 e6 c1 37 2d c7 a6 f8 ca 86 dc 6d f7 1b 65 31 af 82 e6 f7 bc 0c 9d b0 01 c7 d1 4b 28 1d 24 b4 51 c9 27 e2 d0 64 7a 15 10 bd db 2e 93 46 66 96 e4 6a 62 69 2e e4 6b a7 4f b8 58 0c 4e 9e af 67 37 94 82 d5 82 6c 76 31 e6 3b 52 8f 77 8e 12 71 d9 be d2 4b 7a 93 15 62 2b 15 ab 69 4c 74 35 c8 48 62 3e f6 03 d8 c8 f7 ea ea b3 03 4a 1c 2e 2f c4 48 32 51 bd 97 aa f0 34 a2 25 c7 ce 11 77 21 1d fb b3 13 fc e5 e6 c0 5f a3 ab ac cb 84 bf 84 a1 03 cd 04 af 56 7a b0 f9 Data Ascii: !^@gow+**O_M.jAXhn??kn}Ry7N^yPg1HR1H7-me1K($Q'dz.Ffjbi.kOXNg7lv1;RwqKzb+iLt5Hb>J./H2Q4%w!_Vz
2024-05-03 04:44:13 UTC	287	IN	Data Raw: 18 1e cd 6c 98 1c 77 60 1e 9b 81 7f a3 d9 c7 d1 64 a0 cc e9 6d 3e 16 ec 60 c6 fc f9 09 61 38 a2 96 d3 00 05 76 2e ee 3c 7b ba 81 45 e8 ca e9 83 7f d7 e2 4f f2 a8 cd 5f 0d 93 43 4a 29 e5 22 78 70 61 3e 84 2d 7f bb af d7 9a a8 5b 70 d5 b0 44 47 30 0e ce c2 99 96 b2 1e ad 90 ec ee df 45 73 b9 cd 00 39 dd 0a a6 c6 8e 90 96 94 63 92 97 23 05 c1 22 e4 50 08 49 19 87 2e 9f 3b b3 af ae 6f 3b 4a c6 3a 9e 1b 13 56 58 71 b5 e4 29 88 a6 7d e5 9e 62 fa e7 c7 a3 29 44 56 fb 5b b9 66 36 c7 1b 3d 4a 8d d7 be ff 00 43 58 3d 93 47 c2 5b 80 0f 4c 14 b5 59 2a a1 b8 1b 8d c2 56 99 9e 3c 76 0a 42 37 63 f5 ce cf 2a e7 b6 37 8e 5c 8f f8 51 11 16 1a a9 ee 55 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 13 ba 22 22 22 22 60 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 Data Ascii: lw`dm>`a8v.<{EO_CJ)"xpa>-[pDG0Es9c#"PI.;o;J:VXq)}b)DV[f6=JCX=G[LYV<vB7c7\QU""""`"""""""""""""""""
2024-05-03 04:44:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49814	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1101	OUT	GET /1/image-resize/1/712_189_92_JPG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9HVzVjdy9NQUdFQkdHVzVjdy8xL3AuanBn?osig=AAAAAAAAAAAAAAAAAAAAAPYxeOmPyW1bzVYb40NMA0bprSvrwK8HvGIql4lomZuh&exp=1714727913&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAGIqZFKlSkxdgQR7mXGP2n_ohxCdpEqOs_fVMzH2HDwU HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1151	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9837ca0c4380-EWR CF-Cache-Status: HIT Age: 116413 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: degrade=85, origSize=21147 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf48ca1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oD1tcQGmxAuMf24dOon9vkhskzjwzxV16DT3G3eMTEWHpJ2aN8gELqwHmZKB%2BwSTE1naRXfklmmY60VW%2FFquLF085Y5oREfT%2BNAH55oJfWli37kdkXLkyT5TYSXDu0ro4Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:13 UTC	218	IN	Data Raw: 64 31 39 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 bd 02 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 03 01 00 03 01 00 00 00 00 00 00 00 00 00 00 06 07 08 05 01 03 04 02 01 01 00 02 03 01 01 01 00 00 Data Ascii: d19JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}"6
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 05 06 01 04 07 03 02 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 8e 0e 45 fa 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 dd 62 ed 46 d6 bf 4e 9a b0 27 a9 d8 6d b1 6b af 0d dc fe 9e c2 21 ed 1e 91 ad bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 41 80 00 00 00 00 00 00 00 00 00 f6 be 7d 4b 92 d9 9e a8 66 fb 62 e5 58 a8 dc be a7 12 0d bf 0d 6a fe 73 af 77 5a 46 f2 12 f5 ef c4 3e 63 18 d6 da c7 43 96 7e 87 0c 7d 00 7d 33 5d ad 08 0a ce e0 7a 6b 44 06 94 b8 63 3e 7c 4c af 89 8a c6 55 5e 14 ce ae ff 00 ca d1 32 a9 28 1c 98 97 4a a3 a7 2a 71 a1 34 00 Data Ascii: ELbFN'mk!A}KfbXjswZF>cC~}}3]zkDc>\|LU^2(J*q4
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ff c4 00 39 10 00 01 04 01 02 03 06 04 04 04 06 03 00 00 00 00 03 01 02 04 05 06 00 07 10 11 12 13 14 20 21 31 36 32 34 35 40 16 17 30 55 15 22 41 60 23 33 51 54 64 80 24 44 50 ff da 00 08 01 01 00 01 0c 00 ff 00 ae bc f5 e5 a1 41 9c 70 b8 e1 84 77 87 fb 56 3c 69 52 cc 81 8d 1c 85 25 3e d6 64 36 3d 0f 96 8c 84 2a 7d b2 c7 2a fa 08 50 ac c3 0c 02 13 11 83 13 51 b6 78 8e 3d 70 8e 59 b5 01 73 ed 36 76 01 55 5d 5d 64 50 2d 96 db e5 55 dc dc 90 db 24 67 8d 26 23 d4 72 23 90 44 fe cf a6 c2 32 4b a5 6a 82 bd c2 Data Ascii: 9 !16245@0U"A`#3QTd$DPApwV<iR%>d6=}PQx=pYs6vU]]dP-U$g&#r#D2Kj
2024-05-03 04:44:13 UTC	404	IN	Data Raw: 40 1a e6 38 24 cc 63 ff 00 28 2f 71 e0 af 87 d7 9a eb 68 ea 8d 16 ae 74 f2 b1 5a 9b b7 68 29 97 30 a0 89 dc d3 d7 58 f5 73 29 31 fa e8 88 88 8b 7f 66 fb 8b 9b 1b 07 3b 9a 78 36 6c 3c ec ed 8b ad e7 22 29 a8 07 c3 cf ee 71 df 70 51 69 bf 03 78 6f 57 ae 3f e1 d9 cf ac 59 f1 5d 66 7e d5 bf f0 ed ac 7e ef 87 d5 ff 00 ae ea c9 59 19 59 59 cf cb c0 9a db 53 b8 f8 7d 53 9d eb ba 28 e8 d9 83 8a 35 56 bc 19 5e 4c a5 03 16 f6 5f 49 9c e6 c3 2b d1 dc 9c 99 76 4d fb f4 cd 7e 2e c9 ff 00 7e 99 ad ac b1 9f 6b 49 30 b3 a5 90 ef dc eb eb aa ec 84 20 85 67 20 01 91 91 df cc 01 23 c8 b7 92 51 6d 67 bb 63 eb 75 fd a8 6d 27 52 fa 27 35 c1 71 61 63 95 4d 79 98 de fb 9c ee 39 e2 c9 2d 5d 29 51 ae 91 36 5c c7 a9 24 ca 31 9f 5b 7f 75 4e 46 92 05 99 85 ab eb b9 19 0c f4 9d 24 6d Data Ascii: @8$c(/qhtZh)0Xs)1f;x6l<")qpQixoW?Y]f~~YYYS}S(5V^L_I+vM~.~kI0 g #Qmgcum'R'5qacMy9-])Q6\$1[uNF$m
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 31 66 36 39 0d 0a 18 c9 9a e0 05 c7 9a b3 a1 39 c6 83 ad 98 17 d7 cb ab bc 5a 8b 20 34 72 d8 c4 42 bc 9b 6b 86 15 aa 89 57 d3 ab 6d 9e 8a f6 3c 95 73 de 27 da d5 4f a5 98 f8 93 a3 38 45 fb 7c 77 dc 14 5a 6f c0 de 1b d5 eb 8f f8 76 73 eb 16 7c 57 59 9f b5 6f fc 3b 78 f4 76 21 4c a9 ad d0 12 8b 30 9b cf d3 c3 b5 e3 56 61 d5 ca ba dd 67 23 f2 c7 a2 6a 3f f9 f1 f5 27 e4 4d c7 67 3e 81 61 ad dd f7 40 38 6d 5f bb a3 eb 75 fd a6 5d 61 30 1b 63 94 54 05 c9 cd b9 85 a2 d2 e3 96 72 d8 a8 84 55 55 57 2a af 35 e3 8c d7 a5 65 05 5c 34 67 25 c8 f1 9c be e2 f2 d2 6a d2 9d 5b f8 1b 2d fd 88 fa fc 0d 96 fe c4 7d 6d c4 2b 4a ec 75 22 d8 46 70 09 ba b1 99 1f 2a 7a b5 38 e3 d7 85 c7 ac 99 3c 40 61 5e dd e4 b1 4f 27 53 87 55 db c3 5e 67 a3 2c 2a ca 04 93 51 8a 66 b0 52 47 64 Data Ascii: 1f699Z 4rBkWm<s'O8E\|wZovs\|WYo;xv!L0Vag#j?'Mg>a@8m_u]a0cTrUUW5e\4g%j[-}m+Ju"Fpz8<@a^O'SU^g,*QfRGd
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: a2 ef 0c 82 81 43 fc 05 9c 71 3c f0 d8 a4 23 44 65 73 64 37 2a c9 09 94 d8 8e 73 e2 a0 17 58 cd f3 f1 bb 56 58 32 32 1d d9 46 e2 97 26 ab 7c 07 d5 34 0d d4 79 27 88 71 9e 39 9e 22 d3 6e e5 84 56 30 56 90 d2 4a 33 77 f1 c5 6a 2b e2 4c 4d 59 ef 18 ba 15 2b aa c8 ae b8 b7 9b 79 3c d3 a6 91 ae 37 a6 b1 dd cf b7 a9 18 e3 cd 1a 4d 08 77 82 81 cc ff 00 12 14 c6 3a 56 f1 53 b1 1d dd eb 65 91 d9 0e e3 5e df 0c 80 62 b6 1c 6e 11 64 9e 1c 90 49 01 15 86 ab de 09 81 63 19 65 5a d2 e8 7b c1 8f 39 89 d7 0e 62 2c bd e2 a8 1b 5d dd 2b 25 15 d9 16 7f 7b 90 b1 e1 71 12 34 4e 0d 73 9a e6 b9 aa a8 b4 1b ab 65 5e 26 47 b3 07 7c 1b 77 7f 1d 56 a2 ac 59 88 b6 fb c0 67 b1 cc aa ad e8 59 b3 a6 58 c9 7c a9 92 1e 53 6b 12 dc 39 98 d4 54 82 f8 6c 3c 50 6f 05 0b d3 fc 68 33 18 b2 37 Data Ascii: Cq<#Desd7*sXVX22F&\|4y'q9"nV0VJ3wj+LMY+y<7Mw:VSe^bndIceZ{9b,]+%{q4Nse^&G\|wVYgYX\|Sk9Tl<Poh37
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: c1 7c ee aa 11 88 c1 12 32 e8 52 5b 50 eb a8 a2 2e 84 c8 e6 c6 9a 17 62 14 94 d2 a3 7a d0 91 14 5e 42 e0 06 6d 3a 1b 81 f5 01 a9 57 7b 1d 82 b5 98 d0 94 88 57 f9 46 8c 7b cd 1d b0 a8 89 bb d2 d4 23 47 18 cd c8 c5 b2 f4 e5 55 15 45 c9 2d b1 69 80 23 26 46 f1 35 6f 74 0e 7b da e6 bd 38 07 14 7f 0d 31 23 8c 3e 5c 64 ea 0f 9f 95 48 04 7e a2 6d ef 35 91 c4 d8 fa 1a 4b 35 b8 20 c9 c6 3f 5c f3 98 f6 93 53 4e 4a 13 b1 3c 94 1d a0 66 a4 08 bf 79 a8 26 50 7b f0 fd 2f e5 0c 9b f3 05 5b 83 e7 fe 0c de 4a 3c 59 9c 8a 6f 01 cd 73 2b 9f b4 e4 d4 19 34 51 f7 dd fe 2c e4 e3 53 b1 5c 81 4d 93 c3 28 61 ac 15 24 51 70 3f 98 77 d0 88 90 7b 2b eb 4d 7d 69 a5 ca d9 43 48 71 10 30 2e 8a e4 88 4a 46 c5 45 c9 6d 34 e0 86 46 72 41 1d 35 c4 49 5c 7c 5e 2e 09 d4 34 ef ee 5e a1 51 92 Data Ascii: \|2R[P.bz^Bm:W{WF{#GUE-i#&F5ot{81#>\dH~m5K5 ?\SNJ<fy&P{/[J<Yos+4Q,S\M(a$Qp?w{+M}iCHq0.JFEm4FrA5I\\|^.4^Q
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: af 85 cd ae 28 6a 68 a5 03 d8 f8 6b d2 96 54 b7 e1 2c 68 8b 63 d4 91 83 ac 20 a9 d7 0c e4 10 78 a8 db 58 3d 2d f4 8c 9e 78 e5 c3 ab 17 16 e1 ad 7e ca 60 40 c9 a4 46 80 5b a6 55 2d 4d a4 34 53 29 c5 d2 71 61 bd 0d a8 86 41 f8 71 56 e9 14 8f 16 67 25 1e 2c ce 45 37 80 e7 ad 80 49 ef 8c 0e 87 d7 df 7a db c5 95 90 7b c5 6e c0 bf ed 5b 24 9d af f8 56 b6 6e 50 76 28 d4 38 50 a9 b5 15 22 fc 79 ff 00 4e 19 25 32 96 32 e0 b6 20 05 ad 66 a4 88 45 84 3e 2f 24 96 bd ec bb f8 16 37 5c 05 f0 f9 5d 36 6a 67 46 c6 26 c7 ab b1 78 10 dd 5d 0d 88 34 05 b8 d8 f9 ad da 35 1a dd 81 7f da b7 ce 42 f8 71 53 80 39 ab 60 02 ea 0a 0f 02 8b 62 2d 69 40 af 55 7f da bf cf 02 0f 79 a2 34 a4 44 e3 23 71 7e 18 99 59 18 6c 2b 40 69 78 4e 12 7e cb 57 a8 87 e2 ad 98 b0 20 f7 9a 7b 83 04 7e Data Ascii: (jhkT,hc xX=-x~`@F[U-M4S)qaAqVg%,E7Iz{n[$VnPv(8P"yN%22 fE>/$7\]6jgF&x]45BqS9`b-i@Uy4D#q~Yl+@ixN~W {~
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 15 36 75 f3 57 8e a6 66 d3 bc f9 b1 3b 7d e1 5c bb ab 7e 2b f5 28 6d 5f e7 63 a9 e7 d0 0c e5 de 63 f6 db fd df ff c4 00 3a 11 00 02 00 03 04 05 08 08 06 03 00 00 00 00 00 00 00 02 01 03 12 10 22 52 62 04 11 21 32 42 13 20 30 33 72 92 b1 d1 23 31 41 60 81 a1 a2 f0 40 50 51 53 61 c1 d2 e1 f1 ff da 00 08 01 02 01 09 3f 00 f7 8a 5d 44 da 63 fc 6d 23 59 29 97 f2 8b 8a 5f 6c c4 d9 68 5e ab db 66 06 e6 48 76 34 67 b6 30 96 b9 c6 ad a3 84 9a 8a 25 c9 7d 04 87 68 12 1d 61 6e 8a e4 ba 58 94 ee 68 cf dd 12 98 f4 98 e1 64 f7 a2 ee cf 87 33 03 5b d5 2f cc 97 4a 29 04 75 12 f9 fa 97 57 fc 4b d4 93 36 29 1b ad d0 2d 2a a2 d5 51 ba 26 de 01 a9 53 79 45 bd 5f 94 04 94 6f 74 98 e1 66 5f 08 73 30 35 bc 74 fd 5b 6d f5 51 51 a3 55 e9 6e 1a 3f 28 68 94 37 c0 d1 3d 2e 3d 84 b4 Data Ascii: 6uWf;}\~+(m_cc:"Rb!2B 03r#1A`@PQSa?]Dcm#Y)_lh^fHv4g0%}hanXhd3[/J)uWK6)-*Q&SyE_otf_s05t[mQQUn?(h7=.=
2024-05-03 04:44:13 UTC	1204	IN	Data Raw: 62 cd b6 9a 3c 96 a5 d3 4f 04 b6 d9 4d 58 83 4b d1 c2 2b a6 89 84 9f 37 94 9a 9a 36 4f 14 b1 c8 b4 e5 d7 b5 7c 2e 7c 86 fe b1 55 0c 87 3f 0d 57 94 d7 99 3d 5d 95 49 30 c3 a0 fe 60 da 67 b1 9c 15 11 53 92 99 8a d3 1a e7 48 f8 30 ba 58 5d bd 61 86 01 99 1c 50 aa 23 91 51 6b aa 00 ab 59 54 43 ab 85 b3 87 a2 50 82 c0 10 f1 41 01 14 d5 e4 98 c3 25 7c 71 c9 1f 4e 42 70 ca 62 24 ea 25 65 05 6d 53 b7 8f 61 58 05 93 36 14 dc 22 9b 7e e5 06 bc 2a e8 ba 62 bd 8c 91 8e 63 c8 c3 29 e6 7e e4 07 16 a6 06 46 c8 c4 fc 7e 12 c6 a4 0b 48 d1 84 c1 85 d3 c3 2a 48 b1 45 14 11 b6 38 ce c5 2a 4d 9a 49 9e 26 21 4a 2b 9b 22 22 35 a9 c9 3c d5 46 b9 39 2d 86 33 51 61 f9 71 98 11 8c 7f f8 81 60 3f ec 58 58 cd 38 3b 5c cf e7 7f ff c4 00 3f 11 00 00 04 01 07 07 08 09 03 05 00 00 00 00 Data Ascii: b<OMXK+76O\|.\|U?W=]I0`gSH0X]aP#QkYTCPA%\|qNBpb$%emSaX6"~bc)~F~HHE8*MI&!J+""5<F9-3Qaq`?XX8;\?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49812	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1101	OUT	GET /1/image-resize/1/395_96_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAGHbvX3xneW7SjcGPwRyf6_pp2Citdqk7T-79AamUlok&exp=1714727649&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAKAHhCl6skExOp6e0a73StuXf5NL8aE0ulbOhjloKTh5 HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9837cf6a0fa5-EWR CF-Cache-Status: HIT Age: 65695 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Thu, 2 May 2024 10:29:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=5493 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d754589be842c0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ohQVCDwE0inF3Y17QgtLroEjU6XkDUXTVKKvASqqFKlU3Tar4IwOYfSMGpmayQoH7PivUj5e7YLk47J8Pgw6P15JuXrGgHmpaaa2Eo6hXdpEJMz7vBpvKZAzUL6oLONnIA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:13 UTC	239	IN	Data Raw: 36 61 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8b 00 00 00 60 08 03 00 00 00 db ca ae 4c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a2 50 4c 54 45 e0 b3 00 98 7a 08 d7 ac 01 cd a4 02 72 5c 0d a4 83 06 b9 94 04 df b3 00 df b3 00 df b3 00 df b3 00 e0 b2 00 df b3 00 df b1 00 df b2 00 df b2 00 e0 b3 00 dc b1 00 db a4 00 00 00 00 00 00 00 e0 b3 00 da ad 00 d8 b2 00 df b2 00 df 9f 00 df b3 00 df b2 00 e0 b2 00 df b2 00 dc b0 00 df b1 00 dd b1 00 e0 b3 00 dd b3 00 e0 b3 00 e0 b2 00 df b2 00 df b2 00 df b3 00 d8 b1 00 dd aa 00 df b3 00 df b2 00 e0 b2 00 8c 70 09 af 8c 05 43 37 11 80 67 0b c3 9c 03 54 45 10 64 51 0e 2f 27 13 14 14 14 a1 8a 01 29 00 00 00 2d 74 52 4e 53 ff ff ff ff ff ff Data Ascii: 6aePNGIHDR`LsRGBPLTEzr\pC7gTEdQ/')-tRNS
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: ff fa f7 e7 bf db 7f 80 c0 e8 fb 3b 0e 00 01 a4 22 21 d7 08 d6 a5 a3 d8 3a 58 5b 5a 3c dd de a6 59 57 0d 0f da f9 f6 96 76 d4 31 00 00 05 81 49 44 41 54 78 da ed 9d e9 72 ab 38 10 85 5b 12 22 fb 8a b3 dd fd ce 3e 73 07 24 10 fd fe af 36 76 04 92 9c 36 8c 53 b7 0c 54 b9 bf 3f c1 27 42 1c f5 89 91 2c a7 0a 28 3c f7 5f 2e af 6f 7e 00 33 2d 3f 6e ae af ee ee 0b 0f f8 1f 5f 2f 4e b9 30 33 71 7a f1 c7 2a 66 f1 f4 e9 84 4b 32 23 27 0f 8f 7d 16 2f 1f b8 1c 33 f3 fc e2 b3 78 e2 28 e6 e7 f9 69 93 c5 ea 13 57 62 01 fc be 2a a0 f8 ca 73 c5 12 b8 fd 56 c0 fd 05 d7 61 11 fc 76 0f 5f fe e5 32 2c 82 d3 5f e0 92 ab b0 10 ae e0 9c 8b b0 10 ce e1 8c 8b b0 10 ce 80 57 51 0b 81 93 60 18 86 61 18 86 61 18 86 61 18 86 61 18 86 61 18 86 61 18 86 61 18 86 39 6a 04 7a 1a 98 14 91 Data Ascii: ;"!:X[Z<YWv1IDATxr8[">s$6v6ST?'B,(<_.o~3-?n_/N03qzfK2#'}/3x(iWbsVav_2,_WQ`aaaaaaa9jz
2024-05-03 04:44:13 UTC	109	IN	Data Raw: f2 4a 6a 09 9c 7c 2f a0 58 3d 70 21 16 c0 c7 55 01 45 f1 f4 81 2b 31 3b cf 8f c5 26 8b e2 e5 33 d7 62 66 3e bf 14 3e 8b e2 f1 81 e7 8c 39 39 f9 f8 58 f4 59 14 ab ef 17 a7 5c 92 99 38 bd f8 b6 2a 7c 16 9e fb bb cb eb 9b 5b 2e cc c4 dc de 5c 5f dd fd dd 65 f0 1f b6 16 dc 85 f9 ac 12 43 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: Jj\|/X=p!UE+1;&3bf>>99XY\8*\|[.\_eCIENDB`
2024-05-03 04:44:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49813	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1105	OUT	GET /1/image-resize/1/200_190_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9pbmkway9NQUdFQkVpbmkway8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAHRtDJvT4iVHw-xk1cPTFzL_AKPah711V_ojCRfXlk8W&exp=1714728782&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAHGrLooAC_luHub6PE2uoo57xdsg8PXRO3LxkbO0hXKD HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1136	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9837c861726e-EWR CF-Cache-Status: HIT Age: 116413 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=607 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf58ca1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o9fWl%2BMFtRYnNkexkVaxFoi0eORFf6WlzVpaX0ozaV%2BdFg8M3ZOkVx%2Fs3B3uwo1KbAw3sag6tb5drrP2b4W45QHcio3HKhdl93kLU8Yxiuped0JpF2uYA31cu5fEFNU6ww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:13 UTC	159	IN	Data Raw: 39 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c7 00 00 00 be 02 03 00 00 00 fc 46 f3 5c 00 00 00 09 50 4c 54 45 25 2e 60 27 2e 62 26 2e 61 d4 4a eb 7e 00 00 00 03 74 52 4e 53 b9 ff fe f9 d8 23 28 00 00 00 3c 49 44 41 54 78 da ed cb 31 01 00 00 04 00 30 69 34 e2 d6 3f 85 0c 0e df f6 2f b2 6e 7a 42 51 14 45 51 14 45 51 14 45 51 14 45 51 14 45 51 14 45 51 14 45 51 14 45 51 14 45 f9 2c 0b 6b 4e 39 07 d7 4a 93 0b 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 99PNGIHDRF\PLTE%.`'.b&.aJ~tRNS#(<IDATx10i4?/nzBQEQEQEQEQEQEQEQEQE,kN9JIENDB`
2024-05-03 04:44:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49817	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1104	OUT	GET /1/image-resize/1/200_48_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9lZkc0VS9NQUdFQkJlZkc0VS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAFJXAnYIQQ0xHcsErDaJWXvVvtPZT7fcxtbi8yxPG4l-&exp=1714727649&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAJsWmwRuJ3REECkw2TqnylaoozkHUBm97ga09yUfD0Mu HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1124	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9837cbeec468-EWR CF-Cache-Status: HIT Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=7163 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf78ca1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AWdVxtSjvkErBTaPK9No0V6S0ya7WiS25fVL4zuufipg2bo2P89xLfyIfRC1NxmRnxr1tHQaXCHjMy0XeESRgtqwH38pM%2BH2MDXrOGmtvfu7Iv5%2B4S2YJEVN%2BXaUSGYIlA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:13 UTC	245	IN	Data Raw: 31 30 63 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c6 00 00 00 30 08 06 00 00 00 4a 50 05 59 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 10 7d 49 44 41 54 78 da ec 9a 4f 6b 13 41 18 c6 9f 48 88 49 a0 48 24 f1 ae 07 3d a8 17 d1 ef e0 37 f0 a6 a2 54 bd e9 a1 58 11 3d 28 a8 07 41 0f f5 da 8b 07 41 b4 36 3b db 98 da e2 9f 0f 21 52 b0 d9 d9 a6 18 b4 8a 44 8f 25 cd 23 93 77 d3 b5 e4 90 06 da 42 36 ef e1 c7 c3 ec ec 6e 32 93 f9 cd bb 21 01 00 d4 7d a4 5c da 32 4e 5b 83 69 6b 10 58 83 56 e8 a3 6d 0d da a1 0f 2a 4a 52 70 6b 3a ca 56 b4 d6 a7 03 0f 67 00 a0 51 45 4a a4 a8 60 9f cb c0 e0 ba 35 d8 b0 5b 6e a0 93 a8 24 5b 0e 87 95 f6 46 e0 e1 06 00 ac be 75 4e 88 14 57 36 85 30 58 77 27 b9 0b b5 62 28 c9 95 42 32 Data Ascii: 10c3PNGIHDR0JPYsRGB}IDATxOkAHIH$=7TX=(AA6;!RD%#wB6n2!}\2N[ikXVm*JRpk:VgQEJ`5[n$[FuNW60Xw'b(B2
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 5a eb eb 51 9b 81 87 ab 22 c5 1b 1c b6 06 cd b8 b4 80 4e 88 50 85 50 92 8e 13 c3 77 c8 da 0f 25 ff d6 66 71 04 d6 e0 61 68 40 eb a3 e5 52 2b 84 32 8a 15 c4 8a 28 2d 97 81 c1 23 58 1f 36 ee 54 29 94 91 a5 1d 3f 62 c1 c2 35 a4 a4 68 b5 50 b4 6a 84 92 6d 84 7e 74 40 ab 85 a2 df 39 36 e5 80 8d 84 d0 c7 28 65 d4 f9 df 05 e8 84 28 4a 2f 2a 86 a2 a8 18 8a a2 62 28 8a 8a a1 28 2a 86 a2 0c bb 18 d6 48 06 1e f8 75 16 5c 2e 4b d6 bc 6e bf 90 90 1f 89 a2 94 f1 d5 ca e0 b2 1b 73 27 a5 1d 78 dd 31 eb 3f 98 07 9f db bd 9b 3b ec 89 14 06 6c cc 83 7f 3e 81 cd 8f 92 6b 0b 60 90 b8 c5 21 63 59 99 03 d7 16 c1 5f ef c1 66 67 cc 2e a5 fd fd 1d 58 9f 73 e2 a8 1c 83 6f 36 b2 c9 04 c3 2d 46 2c c5 b7 2a 58 9d 4a 73 e2 42 9e 77 c7 73 9c 38 9f e7 f3 fb 19 36 aa 60 e0 25 e9 43 94 45 Data Ascii: ZQ"NPPw%fqah@R+2(-#X6T)?b5hPjm~t@96(e(J/b((Hu\.Kns'x1?;l>k`!cY_fg.Xso6-F,*XJsBws86`%CE
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 0a da b1 ee 08 33 d6 3e 50 d3 a8 be 3a 3b e1 7a 3b d6 ab ec 31 ac f0 50 ba 1d 3e 30 a3 52 7a 9d 58 a2 a0 b6 ae 0e ab 7f 1e 0d a8 0d 57 47 55 36 9b 97 b5 a2 f1 82 78 95 ba 68 41 7e 0f e9 97 81 56 ae 27 63 2d 42 31 68 80 91 21 34 c3 2b 93 cb 50 d8 60 be 09 67 a5 38 97 c0 6e 2d 88 8e 62 f0 dd 69 07 e7 83 a3 c6 ab b3 16 e1 ee 58 ad 5c d1 7a a1 a9 13 f6 a1 20 7a bd 06 da 34 bd 1a 39 1b eb 0a 0f 5f da c6 be ac 17 9b 37 a3 3c ed 7f b1 3d 48 02 8d 62 b8 eb 4d d6 72 11 4f 14 dc 3c 0c ba 04 42 8d ea aa 4b eb 39 87 44 16 91 58 41 94 21 9f 37 de 36 16 2f c0 ef 6a 52 0c cb 38 98 f0 c4 86 5a 55 c8 e7 e5 c0 ab 74 85 e6 83 e7 03 6a ad 4e 3c 89 c1 89 19 ef 5e 19 41 70 b0 24 10 18 ab 4d d2 2a 49 ea fc f3 1a d4 83 6b 23 52 cd 79 ec e6 b0 58 8f 17 1f 2c 8f 83 c2 50 0a c6 aa Data Ascii: 3>P:;z;1P>0RzXWGU6xhA~V'c-B1h!4+P`g8n-biX\z z49_7<=HbMrO<BK9DXA!76/jR8ZUtjN<^Ap$M*Ik#RyX,P
2024-05-03 04:44:13 UTC	1316	IN	Data Raw: 2b d0 1e 1c f6 56 da ab 8a f1 2b 56 0c f6 c5 fe 50 10 ce 02 50 c4 81 27 f0 9d b3 56 43 28 65 13 6f 98 74 31 8c 49 1a c6 6c bf b9 4e fd e7 98 11 e0 7f bf 14 50 4f 6e a8 45 c0 88 5d a9 b8 e8 b1 e4 1e 21 11 98 6c 8e ea 83 c4 ae 3a c6 8d 50 de e4 13 c1 12 e1 cc 94 c1 b9 57 7f 12 6b 53 1a 24 d1 a3 82 41 ff e3 eb c2 ea d0 e6 10 82 2c 78 bf 7c cc d4 e0 11 30 9e 2b f0 a0 11 06 42 fc 2e 9d 25 f9 a4 64 ab 85 8d fa 79 58 87 36 11 1d 3a 05 61 2c 49 3a 67 12 2f f8 d4 dd c4 ed a5 15 03 1c 94 67 e4 a0 34 1e 47 92 e9 2b b5 c0 9f de 2b cb 99 09 8b 38 37 65 58 04 85 fd 51 8e a4 cf 4d be 51 a2 4b cf 6f 80 4e 54 80 dc 7c 8c bd 53 f9 a1 8d 33 f6 d7 49 ea 77 16 c7 28 1a 50 78 a0 80 20 8a b5 66 51 3d eb c8 bc 7d 7a 66 25 f1 5d b1 20 8e 15 67 ff f0 a5 94 62 60 91 bd 0a 50 b9 1d Data Ascii: +V+VPP'VC(eot1IlNPOnE]!l:PWkS$A,x\|0+B.%dyX6:a,I:g/g4G++87eXQMQKoNT\|S3Iw(Px fQ=}zf%] gb`P
2024-05-03 04:44:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49816	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:13 UTC	1105	OUT	GET /1/image-resize/1/191_103_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9ZNHF6QS9NQUdFQkVZNHF6QS8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAPzzLTNqWZXC4ApwNoIboqnc3sHGuUnKwnPPgAAqhb-R&exp=1714727114&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAEjx9Y7Qv0dKUIQPTqG4yvdZEScjaUd-e9V-GcQPK5Kd HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:13 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:13 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9837cd82c328-EWR CF-Cache-Status: HIT Age: 116413 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:32:59 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=6915 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bf68ca1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AqGxnsXtIWuhqZXZnL9c5JljIkOLmUbZNOfscl5DzWTkQcnyFP%2FL6qSckgGVSNa%2By9cis1B1Ul%2B3yh1ftJwwdrSH8aV5sAx4pnJplznW4E0eqqlxdybLAalEpyX5JPPW9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 65 61 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bf 00 00 00 67 08 06 00 00 00 51 87 93 44 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0e 63 49 44 41 54 78 da ec da 5d 8a 1c c9 15 86 e1 f7 3b 11 99 59 5d fd a3 71 43 21 f0 bd 57 30 1b d0 26 b4 4a 6d 62 76 e0 bb 59 81 18 10 05 c6 76 4b 55 95 3f 71 3e e3 6a 81 44 9b a6 1b a9 35 1e 98 7c ae ea ba f2 8d c8 c3 21 59 ad fe ac c4 f7 d3 fa 37 ae fe 0f fc 7b 87 ab f5 00 ac fe c0 e1 fb a5 e3 d7 e3 bf df f2 c5 7e 3d 00 ab df c1 ce f0 b5 77 7e 24 7e f3 84 fa cc f0 f5 25 f6 bd e0 4e 9c fd 2a ce 46 71 f6 b7 f5 d9 ac 7e b0 bf 73 6f 30 67 3f 1b ae 0d 3b c3 3b 01 7e ee db 40 cf 8b fe cd e7 e0 4f 82 51 b0 0b 98 c4 eb 59 e4 ad 00 f0 bc de fc ab 1f 4f 9d 01 88 7f 98 d2 99 df 7a c3 60 78 6f 78 95 5f 1d Data Ascii: ea9PNGIHDRgQDsRGBcIDATx];Y]qC!W0&JmbvYvKU?q>jD5\|!Y7{~=w~$~%N*Fq~so0g?;;~@OQYOz`xox_
2024-05-03 04:44:13 UTC	1369	IN	Data Raw: 47 67 b8 a5 ce d0 60 b1 22 7b e9 5a b2 0f 72 54 8e 70 a8 0b 2e 92 43 1d 33 d7 1f 6f a8 92 53 4b 6d 3c ba d3 43 1d 96 a5 6b b1 17 4d 09 b7 70 86 fc af cd 2c b4 69 8f 20 d1 b0 52 4d 24 48 6a 49 57 58 95 a5 0e 2c 9a 19 f4 c7 1b ae f8 20 8d ae b2 d2 2c b1 48 4a b4 0b e1 d0 36 7a c6 7f b8 78 9d 80 25 2a 9f 2f 79 3c 57 68 c8 94 3f de 40 50 24 22 9a 47 77 44 c5 12 5d 68 aa 01 78 eb f8 d1 e0 71 03 41 00 c8 6c 6c 1f 6f a5 84 87 20 40 43 82 d0 78 a5 e5 95 16 16 02 50 99 53 1c c6 17 12 00 15 22 58 58 5e 6f fe 3b 1b 5f 87 89 7f 8c 89 7f 8c 89 7f 8c 89 7f 8c 89 7f 8c 89 7f 4c fc 63 4c fc 63 4c fc 63 4c fc 63 4c fc 63 4c fc 63 4c fc 63 7c 73 f1 6f e9 a6 a5 94 a8 87 39 a6 67 7c 2b 23 7f 0a e8 84 3f be be f8 93 26 69 ec a2 a8 ad a8 ce 68 3f be ca f8 8f f2 5c e0 0e 25 95 Data Ascii: Gg`"{ZrTp.C3oSKm<CkMp,i RM$HjIWX, ,HJ6zx%*/y<Wh?@P$"GwD]hxqAllo @CxPS"XX^o;_LcLcLcLcLcLcLc\|so9g\|+#?&ih?\%
2024-05-03 04:44:13 UTC	1022	IN	Data Raw: 92 07 78 d3 bc 06 5e 13 fe 35 b9 2d 7a 37 3e 32 dc 09 63 8b 63 cd 9c 8c d5 ff da 37 a3 14 d9 a9 2d 0c 7f ff da 49 aa aa e5 70 bd 87 db 5c 41 5f 1d 80 33 70 12 67 94 67 12 4e c0 11 08 3e 89 a0 0d 8d 9c ea aa 54 92 bd d7 2f 9e 6e 28 1a 4a 11 9f 4e 24 1f 84 95 e4 31 7c ff ce da 2b 84 78 34 ec cc 15 5f e5 5f 69 00 2c 99 96 56 91 0d 29 d4 02 57 c3 1c 68 32 be 20 ed 6c 0f 12 bd a0 18 84 09 04 60 6d fb df 15 4c 7a 84 05 09 6a 86 45 68 12 9c 0d 47 d9 4f 12 a7 0c 8d 4e 4f 25 34 5b 2c 52 69 38 f3 18 25 29 cd d0 6e f7 fc eb 0a c0 c4 be 2f b4 ae 77 a9 d5 16 26 9d 81 5a 46 56 60 31 4c 98 0b e2 60 bc 97 b4 c3 74 c8 05 14 60 61 04 62 9b 7b 7e ba 18 01 18 30 d8 a0 26 b3 58 4c 12 a3 ec 27 d0 07 db 4f 22 cf 04 63 6b 39 05 b1 60 d7 18 6a 23 e6 e4 e7 c1 80 e1 bd 6f c8 bf a6 Data Ascii: x^5-z7>2cc7-Ip\A_3pggN>T/n(JN$1\|+x4__i,V)Wh2 l`mLzjEhGONO%4[,Ri8%)n/w&ZFV`1L`t`ab{~0&XL'O"ck9`j#o
2024-05-03 04:44:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49821	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:16 UTC	1105	OUT	GET /1/image-resize/1/200_101_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS8wRWFYWS9NQUdFQkQwRWFYWS8xL3Auc3Zn?osig=AAAAAAAAAAAAAAAAAAAAAO6e1PFmX2Er29AZfuvpz3512Xs_nbEFc3SEhvnaFaBu&exp=1714726031&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAPervKft4ICsWkqyBLRADT82t2PjahptjPl0muanri_Z HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449
2024-05-03 04:44:16 UTC	1141	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:16 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close CF-Ray: 87dd984b09b641d2-EWR CF-Cache-Status: HIT Age: 116416 Cache-Control: public, max-age=31556926 Expires: Sat, 03 May 2025 10:33:02 GMT Last-Modified: Wed, 1 May 2024 20:24:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=2425 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 87d27e195bfa8ca1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2D9s9OGjivfvJpTMr1chA1EDewQPQLy%2FgS4K4f3hHIo3FbxLIdsztAsLweHOUa%2FhxF2W0W%2FG6J%2BqqGneA2zZTxq6ORyqwQJd6a4vcZ0iVeY2%2FVDDMmjMAPHT9V8WUS4f6A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:16 UTC	228	IN	Data Raw: 38 30 35 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 65 08 03 00 00 00 3f 04 5c 9c 00 00 02 9d 50 4c 54 45 00 00 00 2a 2a 55 24 24 6d 1f 1f 5f 2a 2a 63 28 33 66 29 31 62 2a 2a 66 25 2d 61 26 2c 5f 29 2f 64 24 30 61 28 2e 62 28 2e 63 27 2d 61 27 2e 62 26 2d 61 26 2d 61 27 2d 62 27 2d 61 26 2d 61 26 2d 61 27 2d 62 ff ff ff fe fe fe fd fd fe fc fd fd fc fc fd fb fb fc fa fa fb f9 f9 fb f7 f8 f9 f7 f7 f9 f6 f6 f8 f5 f5 f8 f4 f4 f7 f3 f4 f6 f2 f3 f6 f1 f2 f5 f1 f1 f5 f0 f0 f4 ef ef f3 ee ef f3 ed ee f2 ec ed f1 ec ec f1 e9 ea ef e8 e9 ee e7 e8 ee e6 e7 ed e6 e6 ed e5 e6 ec e4 e5 eb e3 e4 eb e2 e3 ea e1 e2 e9 e1 e1 e9 e0 e1 e8 df e0 e8 dd de e6 dc dd Data Ascii: 805PNGIHDRe?\PLTEU$$m_c(3f)1b**f%-a&,_)/d$0a(.b(.c'-a'.b&-a&-a'-b'-a&-a&-a'-b
2024-05-03 04:44:16 UTC	1369	IN	Data Raw: e6 db dd e5 db dc e5 da db e4 d5 d7 e1 d5 d6 e0 d4 d5 e0 d3 d4 df d2 d4 de d1 d3 de d0 d2 dd d0 d1 dd cf d0 dc cd cf db cc ce da cb cd d9 ca cc d9 ca cb d8 c9 cb d8 c8 ca d7 c7 c9 d6 c6 c8 d6 c5 c7 d5 c5 c6 d5 c4 c6 d4 c3 c5 d3 c1 c3 d2 c0 c2 d1 bf c2 d1 be c0 d0 bc be ce bb bd ce ba bd cd ba bc cd b9 bb cc b8 ba cb b7 b9 cb b5 b8 c9 b4 b6 c8 b2 b4 c7 b1 b4 c6 b0 b3 c6 af b1 c5 ae b0 c4 ab ae c2 aa ad c1 a9 ac c1 a8 ab c0 a7 aa bf a5 a8 be a4 a6 bd a3 a6 bc a1 a4 bb a0 a3 ba 9e a2 b9 9e a1 b8 9d a0 b8 9b 9e b6 9a 9d b6 99 9d b5 99 9c b4 98 9b b4 97 9a b3 96 99 b3 95 99 b2 93 97 b1 93 96 b0 92 95 b0 91 94 af 90 94 ae 8e 92 ad 8d 91 ac 8c 90 ab 8a 8e aa 87 8b a8 86 8a a7 85 89 a6 84 88 a6 83 87 a5 81 85 a3 80 84 a3 7f 83 a2 7e 82 a1 7c 80 a0 7b 7f 9f 78 7d Data Ascii: ~\|{x}
2024-05-03 04:44:16 UTC	463	IN	Data Raw: 14 30 47 9c b9 8f 39 ad 15 f8 90 fd 20 95 5c f9 f7 f1 9b f5 12 7c 39 ee f1 42 a6 fa 20 8b 36 c2 97 ad 20 08 90 bd 43 43 38 ed c5 1c 3d 1f c5 27 7a 26 ae cb 89 f0 87 78 e6 3d 03 dd e9 b9 7b 35 a4 d0 ee 82 6e e7 1b 03 21 ef 25 b5 42 b7 6b 87 3f 64 77 ac 3b b8 90 19 6c 66 ab 87 fb 49 36 8b 4a f0 83 e0 eb 89 6b ca 7f ff 34 65 fe 05 0d 69 4b cf fe ae ed ec e6 09 5f 0c 84 b4 df fb e0 91 d6 f3 5b a2 0e fa 43 be e7 1d d5 55 c1 84 7c bb 66 3c 8f 7b ba 0e 80 e7 ad 64 0e cf 3c ba d4 6e 2f ee 87 a0 72 79 34 cf 7c a5 15 1a 82 e6 e7 a7 72 44 76 39 06 42 d0 92 77 1b 47 3c 54 06 7f 08 f2 c7 f3 f4 61 41 ae 1a 1b 10 e4 0f 18 b5 9d f0 d5 d8 ff 64 18 46 0f fc f2 18 1e 00 3d bd 2f 5d 2d d0 75 34 42 d7 e5 5b 74 43 d7 74 01 66 cd ed d0 75 1b 3d c3 82 d0 b5 63 03 83 8c 54 8a 06 Data Ascii: 0G9 \\|9B 6 CC8='z&x={5n!%Bk?dw;lfI6Jk4eiK_[CU\|f<{d<n/ry4\|rDv9BwG<TaAdF=/]-u4B[tCtfu=cT
2024-05-03 04:44:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49820	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:16 UTC	1897	OUT	GET /_ajax/csrf3/designinsight HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3
2024-05-03 04:44:16 UTC	897	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:16 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd984b0ec0431f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd984b0ec0431f X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ir38HQAqle0qDCK0ihvZ6liOvravXqXlv9XXzrPvexmDAX%2BKaTG4gU8UyTu36xBm8AFiuoVqZ07Hox7Gi6Z9KuetxZsXyCFZCqrzj3aa5fhmJ0zyvSG0FneTXFL2cTU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:16 UTC	164	IN	Data Raw: 39 65 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 70 48 79 46 54 4f 72 76 4a 48 35 42 56 39 33 48 71 42 66 32 6d 39 71 4d 43 47 53 4c 70 68 50 6a 4a 32 51 62 53 4e 6d 74 53 4a 7a 31 68 6b 61 2d 79 39 62 6c 58 4c 58 54 39 74 33 6d 56 35 30 45 4a 44 68 42 35 32 58 57 6f 51 33 4e 4f 46 50 57 6f 59 31 4f 6d 50 72 62 79 79 31 71 71 6f 36 77 7a 59 65 6c 64 31 75 5f 78 56 79 5a 4b 55 56 66 22 2c 22 42 22 3a 31 37 31 34 37 31 38 36 35 36 36 30 33 7d 0d 0a Data Ascii: 9e'"])}while(1);</x>//{"A":"pHyFTOrvJH5BV93HqBf2m9qMCGSLphPjJ2QbSNmtSJz1hka-y9blXLXT9t3mV50EJDhB52XWoQ3NOFPWoY1OmPrbyy1qqo6wzYeld1u_xVyZKUVf","B":1714718656603}
2024-05-03 04:44:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49819	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:16 UTC	2109	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 6344 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: kVARhNyGYpvQD_UQDm7C9qJTX_5cEUygsOXHd7ZTcI5C0e0wholGm7LYOyOXifHrt8-p_xPSN784KxH544amabVAtu0 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3
2024-05-03 04:44:16 UTC	6344	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 33 32 35 34 30 39 33 36 2d 34 63 62 32 2d 34 36 63 64 2d 61 66 63 37 2d 63 35 33 32 61 62 61 61 37 34 38 61 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 31 31 2e 35 39 36 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 31 31 2e 36 33 39 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 58 4c 49 4e 4f 22 3a 22 48 22 2c 22 50 49 4f 54 49 22 3a 22 42 22 2c 22 50 49 4e 43 4f 22 3a 22 42 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 46 41 54 48 50 22 3a 22 42 22 2c 22 45 48 50 4c 49 22 3a 22 42 22 2c 22 45 41 57 46 47 22 3a 22 41 22 2c 22 44 57 43 54 41 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"32540936-4cb2-46cd-afc7-c532abaa748a","E":"2024-05-03T04:44:11.596Z","F":"2024-05-03T04:44:11.639Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"XLINO":"H","PIOTI":"B","PINCO":"B","OCPS":"B","FATHP":"B","EHPLI":"B","EAWFG":"A","DWCTA"
2024-05-03 04:44:16 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:16 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd984b0ae37cab-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd984b0ae37cab X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=COOxGg9UHpV4%2BLIDX%2BCVS0t4wONIO3rFFwMEgGN68%2BAgIK5ujI9dTFadMopZgBGoZm5Pw3MUAEhoULFoCOC5e1DJjHxAFQIAcRC7owm4OJRSofoi9QtMketC%2BX9Lj7M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:16 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49823	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:17 UTC	2128	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 80 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: pHyFTOrvJH5BV93HqBf2m9qMCGSLphPjJ2QbSNmtSJz1hka-y9blXLXT9t3mV50EJDhB52XWoQ3NOFPWoY1OmPrbyy1qqo6wzYeld1u_xVyZKUVf X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3
2024-05-03 04:44:17 UTC	80	OUT	Data Raw: 7b 22 42 22 3a 22 61 62 32 62 33 39 63 39 2d 34 39 39 37 2d 34 30 63 31 2d 62 37 34 63 2d 63 61 32 39 64 63 34 39 61 31 31 33 22 2c 22 43 22 3a 22 44 41 47 45 42 42 7a 71 39 4b 4d 22 2c 22 45 22 3a 31 2e 30 31 39 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"B":"ab2b39c9-4997-40c1-b74c-ca29dc49a113","C":"DAGEBBzq9KM","E":1.019,"G":"C"}
2024-05-03 04:44:17 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:17 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9851adf34386-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd9851adf34386 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=km%2FOV9Yrr4rn%2BorR07105nawOioOomJti1DbKHVox7L5ACoE9%2B2CYbuc%2FDHbt8tWGDhoTgex0J4wvjLgr91UYeD2gjq69EkGvWXiGi2EfDNoNN33xenURr3GooWIBas%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:17 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49829	13.35.93.63	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:18 UTC	528	OUT	GET /site-insights.js HTTP/1.1 Host: cdn.metadata.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:18 UTC	788	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2770 Connection: close Last-Modified: Fri, 22 Mar 2024 02:23:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: EKO3EAYu2jpZrdQQfpOFGk3pdfA6AAQC Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 May 2024 07:03:28 GMT ETag: "0b8c32bd74fbe7b22dd7487f9d663115" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4a6fd791b6663fb7a124f5d43d11ba3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: L5OHq3qOB8JARU4grPgIknRziiV7UA8DLxWWjRKEA5UjUKKszh_oTg== Age: 78051 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-05-03 04:44:18 UTC	2770	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 76 61 72 20 61 63 63 6f 75 6e 74 49 64 3b 0a 20 20 76 61 72 20 76 69 73 69 74 6f 72 49 64 4b 65 79 20 3d 20 22 4d 65 74 61 64 61 74 61 5f 76 69 73 69 74 6f 72 5f 69 64 22 3b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 49 64 4b 65 79 20 3d 20 22 4d 65 74 61 64 61 74 61 5f 73 65 73 73 69 6f 6e 5f 69 64 22 3b 0a 20 20 76 61 72 20 62 61 73 65 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 70 69 2d 67 77 2e 6d 65 74 61 64 61 74 61 2e 69 6f 22 3b 0a 20 20 76 61 72 20 62 6c 61 63 6b 6c 69 73 74 49 64 73 20 3d 20 5b 31 37 32 31 5d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 56 61 6c 75 65 28 6b 65 79 29 20 7b 0a 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: (function () { var accountId; var visitorIdKey = "Metadata_visitor_id"; var sessionIdKey = "Metadata_session_id"; var baseUrl = "https://api-gw.metadata.io"; var blacklistIds = [1721]; function getCookieValue(key) { var cookie = document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49833	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:18 UTC	1557	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:18 UTC	915	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:18 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98575cb8429a-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98575cb8429a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v4wSFU3vuJoaZTgDRFWf%2BIBszvHZxyw59KV5RgcGRGxlBKcFlKb52qo5WHiiA8VnzBJVoq%2FL8FWpDq3%2Fa8ldc7an3P99lYrOPctV8vDBty7P3xmCftmYXLFbanFFfhQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:18 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 77 53 54 6f 4a 45 78 79 4f 6e 44 33 6d 44 38 75 61 62 6c 51 74 77 7a 47 77 39 37 43 6c 71 44 4c 6f 7a 6d 67 70 33 76 38 63 49 34 67 52 30 6c 6e 56 37 56 49 54 51 58 6e 75 74 5a 76 70 32 4e 71 5a 32 68 39 53 6a 66 42 6a 4f 71 30 59 77 74 73 65 37 2d 77 7a 58 51 67 46 6b 38 22 2c 22 42 22 3a 31 37 31 34 37 31 38 36 35 38 34 38 37 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"wSToJExyOnD3mD8uablQtwzGw97ClqDLozmgp3v8cI4gR0lnV7VITQXnutZvp2NqZ2h9SjfBjOq0Ywtse7-wzXQgFk8","B":1714718658487}
2024-05-03 04:44:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49832	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:18 UTC	1568	OUT	GET /_ajax/csrf3/designinsight HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:18 UTC	895	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:18 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98575f931971-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98575f931971 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U7UqRdUVybWiAnryy1UQePRtZixzMyghu0Vnhh2hldFXikmvDHYUixdiGbIQoSxYjOTUQeN7WzjacvMeDDYDHvV6dUYbGll78I17MCIw7ESAvpRXqVYxqSv6Fp9BP8c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:18 UTC	164	IN	Data Raw: 39 65 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 69 37 44 45 4c 50 57 55 72 36 4f 71 4f 4b 6e 34 54 6c 45 5a 77 53 36 36 38 32 34 50 30 57 51 53 5f 4c 2d 48 4a 73 79 51 34 7a 41 68 6b 56 53 45 54 4f 35 69 37 35 52 52 35 33 79 76 6d 6d 61 51 7a 70 51 74 2d 36 73 62 72 73 4f 56 37 48 54 43 4d 56 4c 6c 64 64 33 6c 34 6e 39 58 41 68 72 68 4f 43 77 49 34 66 68 48 69 67 72 55 4a 4f 53 79 22 2c 22 42 22 3a 31 37 31 34 37 31 38 36 35 38 34 38 32 7d 0d 0a Data Ascii: 9e'"])}while(1);</x>//{"A":"i7DELPWUr6OqOKn4TlEZwS66824P0WQS_L-HJsyQ4zAhkVSETO5i75RR53yvmmaQzpQt-6sbrsOV7HTCMVLldd3l4n9XAhrhOCwI4fhHigrUJOSy","B":1714718658482}
2024-05-03 04:44:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49831	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:18 UTC	1563	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:18 UTC	922	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:18 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98575e7b8c59-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98575e7b8c59 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nisoc5swxMcNWzKGKvHmohOQfJvOEXhA%2FtmSucJomFOuFFQmAT%2BGXiZkIUXuxxNoKQo49ge3yCMxQZLmtat6JDZwU01Dq5TCMYHelKWJ2g1zFr6F3Ti%2FvRzojZqbTwk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:18 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49834	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:18 UTC	1573	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:18 UTC	914	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:18 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd985759588c35-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd985759588c35 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ZFD%2FlvZPcwT%2Bf2Ypu7%2FMrmRWWfm3AyH9vfw9MjXxgbn1EaTzIyOgLL4BO2E69gwR5aZ0zcZ%2BhQB37KONI0AFbSEYpzV72Y8MI3%2F%2FbX4CxxoPUkkb9cywSnduxOapXE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:18 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49830	18.219.60.11	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:18 UTC	666	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1714711456187&gtmcb=1280289369 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:18 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 03 May 2024 04:44:18 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: e6c86ebd-fbef-4d9d-a22d-5c3067f404db Server: nginx Content-Length: 42 Connection: Close
2024-05-03 04:44:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49843	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:19 UTC	2449	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 86 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: pHyFTOrvJH5BV93HqBf2m9qMCGSLphPjJ2QbSNmtSJz1hka-y9blXLXT9t3mV50EJDhB52XWoQ3NOFPWoY1OmPrbyy1qqo6wzYeld1u_xVyZKUVf X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:19 UTC	86	OUT	Data Raw: 7b 22 41 22 3a 31 2c 22 42 22 3a 22 61 62 32 62 33 39 63 39 2d 34 39 39 37 2d 34 30 63 31 2d 62 37 34 63 2d 63 61 32 39 64 63 34 39 61 31 31 33 22 2c 22 43 22 3a 22 44 41 47 45 42 42 7a 71 39 4b 4d 22 2c 22 45 22 3a 35 2e 30 38 32 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":1,"B":"ab2b39c9-4997-40c1-b74c-ca29dc49a113","C":"DAGEBBzq9KM","E":5.082,"G":"C"}
2024-05-03 04:44:19 UTC	899	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:19 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd985c189a5e79-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd985c189a5e79 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uRn3aiMTscjkB8jFXwGZuTjQP%2Btx6gW8yA9PyMGw5ZR9JA0iUZG1jNofKKn7lJsuLZEdVjMA58ujmD3uTCelZyQ7s%2FiM2jH5r41EPsYYnm0KfX93cJ5u0Qj2QIOOsJM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:19 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49844	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:19 UTC	2156	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:19 UTC	1703	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 34 34 31 36 31 31 34 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 39 30 37 38 34 32 32 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 31 30 33 35 38 2e 31 39 39 39 39 39 39 39 39 39 38 33 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 31 30 33 35 38 2e 31 39 39 39 39 39 39 39 39 39 38 33 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 34 37 31 31 34 33 38 34 33 38 2e 31 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 Data Ascii: {"memory":{"totalJSHeapSize":44416114,"usedJSHeapSize":29078422,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":10358.199999999983,"firstContentfulPaint":10358.199999999983,"startTime":1714711438438.1,"versions":{"fl"
2024-05-03 04:44:19 UTC	370	IN	HTTP/1.1 204 No Content Date: Fri, 03 May 2024 04:44:19 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87dd985d8c5ac42c-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49846	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:19 UTC	1173	OUT	GET /static/images/favicon-1.ico HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505
2024-05-03 04:44:19 UTC	1346	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:19 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 4414 Connection: close CF-Ray: 87dd985ec9be6a55-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353793 Cache-Control: public, max-age=31556926 ETag: "a0c86da7fc37ea50e848c4733761d53e" Expires: Sat, 03 May 2025 10:33:05 GMT Last-Modified: Wed, 01 Nov 2023 23:04:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-id-2: 8XSk/HgSx4ZueZeY0GvwFHyODgIqTWAWzTQJ+vI9X7k50GtQ63yby3+qO/NpMoEL6tX03Lc9dqM= x-amz-replication-status: COMPLETED x-amz-request-id: SBTCX10F1012C9ZK x-amz-server-side-encryption: AES256 x-amz-version-id: ytNVK.Z3f3u4lf4TKL9HrtBMqKueQBAz X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IRhR7w2madTUijm9ti2Eb2p%2Bi%2BuYTpHt6HxxmjsX2Jqeyq%2F0hQcm6vSCxmEWKQrd79G5pq7Ohs0QaxhwUx%2FAWfBFZ3QPVC%2B3b22HC1D3GqM3ViI8phr6eIJS1xFaxex6leU%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:19 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-05-03 04:44:19 UTC	1300	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 28 11 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 01 ff 40 80 04 00 00 00 00 00 00 00 00 f3 23 68 16 f9 21 67 5c fc 22 68 9d fa 21 69 c9 f8 23 6b e3 f7 24 6c fb f6 24 6e fb f5 24 6f e3 f2 25 71 c9 f2 25 72 9d f1 27 73 5b e8 23 74 16 00 00 00 00 00 00 00 00 ff 40 80 04 ff 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 55 55 03 00 00 00 00 00 00 00 00 f9 2c 5d 29 fa 2b 5f 9f fb 29 62 f2 ff 2a 6a ff ff 29 6c ff ff 27 6c ff ff 25 6c ff f8 24 6b ff f7 Data Ascii: (( @ @#h!g\"h!i#k$l$n$o%q%r's[#t@UU,])+_)b*j)l'l%l$k
2024-05-03 04:44:19 UTC	1369	IN	Data Raw: ff ff e9 88 85 ff e3 3f 42 ff e4 53 5e ff e4 49 60 ff e5 43 65 ff e5 3d 6b ff e7 37 71 fa f6 36 7e ff e5 30 78 9f 00 00 00 00 dc 74 2e 16 e1 78 33 f2 e4 78 32 ff e2 75 32 fe e3 74 33 ff e4 73 33 ff e5 74 3d ff e4 5f 00 ff f8 e2 dc ff ff ff ff ff ff ff ff ff fa e7 e4 ff e5 58 00 ff e7 6d 45 ff e7 69 3e ff e6 67 3c ff e6 67 3d ff e5 66 3f ff e5 6a 48 ff e5 67 48 ff e1 35 00 ff f7 dd db ff fa ea ea ff e0 3e 27 ff e2 5b 59 ff e3 51 59 ff e3 4c 5f ff e3 46 64 ff e4 40 6a fe e7 3a 72 ff e6 35 75 f2 dc 2e 74 16 e0 81 2d 5b ed 89 30 ff de 80 2d fb e0 7f 2d ff e0 7d 2e ff e1 7d 33 ff e1 75 16 ff e5 8b 5e ff fe fa f9 ff ff fe fe ff ff ff ff ff ef b9 a9 ff e2 5d 00 ff e5 75 41 ff e4 6f 36 ff e4 6f 38 ff e4 6e 39 ff e3 6d 3a ff e3 6c 3b ff e3 6d 43 ff e2 66 3a ff e2 Data Ascii: ?BS^I`Ce=k7q6~0xt.x3x2u2t3s3t=_XmEi>g<g=f?jHgH5>'[YQYL_Fd@j:r5u.t-[0--}.}3u^]uAo6o8n9m:l;mCf:
2024-05-03 04:44:19 UTC	1369	IN	Data Raw: ff dc ca 85 ff cd ae 00 ff d1 b2 26 ff d1 ae 0e ff d1 ac 12 ff d2 aa 1d ff d1 a4 00 ff d6 ad 4f ff fc f8 f5 ff ff ff ff ff ea d5 bb ff d0 8e 00 ff d5 97 36 ff d5 90 2a ff d6 8b 2f ff d7 85 33 ff d8 80 38 ff d8 7a 3c fb e8 7a 46 ff db 6f 45 5c d1 ae 0c 16 d0 b3 0e f2 d1 b7 0c ff cf b7 0a fe ce b8 09 ff ce b9 08 ff ce ba 05 ff cf bc 26 ff c9 b5 00 ff e6 de b3 ff ff ff ff ff ff ff ff ff f5 f1 e2 ff cc b4 00 ff cf b7 20 ff cf b4 16 ff cf b1 0d ff d0 af 0f ff d1 ae 28 ff ce a2 00 ff f1 e7 d6 ff ff ff ff ff f8 f3 ec ff d3 9d 1d ff d3 98 23 ff d4 94 29 ff d5 8f 2c ff d6 89 30 ff d7 85 34 fe da 7f 3a ff d9 78 3e f2 dc 74 46 16 00 00 00 00 cf b5 0b 9f dd c3 0b ff ce b9 09 fa ce ba 08 ff ce bb 07 ff cd bc 07 ff cd bd 0a ff cd be 12 ff cb bb 00 ff f3 f0 de ff ff ff Data Ascii: &O6*/38z<zFoE\& (#),04:x>tF
2024-05-03 04:44:19 UTC	376	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 01 bf bf 00 04 00 00 00 00 00 00 00 00 c5 b9 00 16 ca bf 03 5c cd c0 03 9d cc c0 04 c9 ce bf 04 e3 cd be 05 fb cd bd 06 fb ce bd 07 e3 ce ba 08 c9 ce b9 0a 9d cd b4 0b 5c d1 ae 0c 16 00 00 00 00 00 00 00 00 ff bf 00 04 ff ff 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49845	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:19 UTC	2008	OUT	GET /_worker/service/web/service_worker.js?runtime=BROWSER HTTP/1.1 Host: www.canva.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:19 UTC	1168	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:19 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd985e8d158c06-EWR CF-Cache-Status: MISS Cache-Control: no-cache, no-store, no-cache Content-Language: en Expires: Thu, 01 Jan 1970 00:00:00 GMT Last-Modified: Fri, 03 May 2024 04:44:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com; Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin service-worker-allowed: / X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Request-ID: 87dd985e8d158c06 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R87PUK1jbUhoeN4KI2FdFUFBZlQi3twKQocVDujuUh0aOQZa87HLd8QEs1TxEpRjEfrABkSJY%2FHIOroNorg0Is41qvurI2s7S4j4H2UwSoKbmmL1UoT56%2F3c0A%2BOEp4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:19 UTC	201	IN	Data Raw: 33 65 39 0d 0a 73 65 6c 66 5b 27 5f 5f 63 61 6e 76 61 5f 70 75 62 6c 69 63 5f 70 61 74 68 5f 5f 27 5d 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 5c 2f 77 65 62 2f 27 3b 0a 73 65 6c 66 5b 27 62 6f 6f 74 73 74 72 61 70 27 5d 20 3d 20 7b 20 70 61 67 65 3a 20 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 7b 22 41 3f 22 3a 22 43 22 2c 22 62 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 64 66 65 35 65 38 34 64 62 63 32 31 34 34 31 38 38 30 31 30 38 31 61 62 33 37 65 35 38 64 61 35 40 6f 31 33 38 35 35 2e 69 6e 67 65 73 74 2e 73 65 6e 74 72 79 Data Ascii: 3e9self['__canva_public_path__'] = 'https:\/\/static.canva.com\/web/';self['bootstrap'] = { page: {"A?":"B","A":{"A?":"C","b":"https:\u002F\u002Fdfe5e84dbc214418801081ab37e58da5@o13855.ingest.sentry
2024-05-03 04:44:19 UTC	807	IN	Data Raw: 2e 69 6f 5c 75 30 30 32 46 35 35 34 36 36 38 33 22 2c 22 64 22 3a 6e 75 6c 6c 2c 22 68 22 3a 6e 75 6c 6c 2c 22 63 22 3a 30 2e 32 2c 22 65 22 3a 6e 75 6c 6c 2c 22 66 22 3a 66 61 6c 73 65 2c 22 67 22 3a 22 41 22 2c 22 69 22 3a 5b 5d 2c 22 6a 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 6b 22 3a 7b 22 41 22 3a 66 61 6c 73 65 2c 22 42 22 3a 31 30 30 2c 22 43 22 3a 33 30 2c 22 44 22 3a 31 30 7d 2c 22 6c 22 3a 5b 5d 7d 2c 22 48 22 3a 22 41 22 2c 22 4b 22 3a 22 4e 22 2c 22 4c 22 3a 22 4e 22 2c 22 47 22 3a 22 4e 22 2c 22 4e 22 3a 6e 75 6c 6c 2c 22 52 22 3a 33 30 30 30 30 2c 22 53 22 3a 30 2e 30 30 31 2c 22 54 22 3a 66 61 6c 73 65 2c 22 57 22 3a 66 61 6c 73 65 2c 22 55 22 3a 74 72 75 65 2c 22 56 22 3a 22 32 30 32 34 30 35 30 31 2d 32 32 2d 32 66 30 65 35 64 32 22 2c Data Ascii: .io\u002F5546683","d":null,"h":null,"c":0.2,"e":null,"f":false,"g":"A","i":[],"j":{"A":true},"k":{"A":false,"B":100,"C":30,"D":10},"l":[]},"H":"A","K":"N","L":"N","G":"N","N":null,"R":30000,"S":0.001,"T":false,"W":false,"U":true,"V":"20240501-22-2f0e5d2",
2024-05-03 04:44:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49848	216.239.32.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:19 UTC	2276	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556235&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_us [TRUNCATED] Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=deleted
2024-05-03 04:44:19 UTC	677	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:19 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=M2PMGiraZgg40FOBnnrpFgnwTwBOLAWAAVx9dUPpb%2FCFw%2BhN%2BJCq8pY73RAzoh1TbVuLkiJ3LSXxYLupNdrPnZAkpLPHgn47aSkCP%2BeNkKL%2FuroWLShPTdWA51ttig%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-05-03 04:44:19 UTC	731	IN	Data Raw: 33 33 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 34 36 36 31 37 31 30 32 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 64 65 73 69 Data Ascii: 33devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesi
2024-05-03 04:44:19 UTC	105	IN	Data Raw: 25 33 44 64 65 73 69 67 6e 73 68 61 72 65 25 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 6c 69 6e 6b 25 32 36 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 65 64 69 74 6f 72 3f 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: %3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor?"],"options":{"attribution_reporting":true}}
2024-05-03 04:44:19 UTC	768	IN	Data Raw: 32 66 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 34 36 36 31 37 31 30 32 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 64 65 73 69 67 6e 25 32 46 64 65 73 69 67 6e 2d 69 64 25 32 46 61 63 63 65 73 73 2d 63 6f 64 Data Ascii: 2f9event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-cod
2024-05-03 04:44:20 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49847	216.239.32.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:19 UTC	2320	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556267&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_t [TRUNCATED] Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505
2024-05-03 04:44:19 UTC	675	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:19 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-05-03 04:44:19 UTC	644	IN	Data Raw: 32 37 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 38 3b 6f 72 64 3d 31 38 36 30 38 37 31 39 31 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 Data Ascii: 27devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;ua
2024-05-03 04:44:19 UTC	576	IN	Data Raw: 32 33 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 38 3b 6f 72 64 3d 31 38 36 30 38 37 31 39 31 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d Data Ascii: 239event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrom
2024-05-03 04:44:19 UTC	1260	IN	Data Raw: 34 65 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 39 39 37 38 36 37 38 35 26 66 73 74 3d 31 37 31 34 37 31 31 34 35 39 37 35 33 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 59 61 78 4b 43 4b 54 4a 6c 59 77 59 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 Data Ascii: 4e5event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=99786785&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z984834
2024-05-03 04:44:20 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49849	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:19 UTC	1116	OUT	GET /static/lib/sentry/7.16.0.min.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505 If-None-Match: W/"ba9c619e1ba6a9272c44084a93375283" If-Modified-Since: Wed, 01 Nov 2023 23:04:36 GMT
2024-05-03 04:44:20 UTC	1361	IN	HTTP/1.1 304 Not Modified Date: Fri, 03 May 2024 04:44:20 GMT Connection: close CF-Ray: 87dd9861deeb4370-EWR CF-Cache-Status: HIT Age: 4358660 Cache-Control: public, max-age=31556926 ETag: "ba9c619e1ba6a9272c44084a93375283" Expires: Sat, 03 May 2025 10:33:06 GMT Last-Modified: Wed, 01 Nov 2023 23:04:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-id-2: w0+Z5O5Px+ZE6oHyOfteJbcAd8aLVAIKZRaFcKAkgBG4PfZgU5TPU1rul1RP9J3x+aDjeJ29M0w= x-amz-meta-vary: Origin x-amz-replication-status: COMPLETED x-amz-request-id: KYRGWCA4J46TP2TD x-amz-server-side-encryption: AES256 x-amz-version-id: kFCDbB.azfiZLQfhBYb8Gboqeqt3J2PO X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2BmOy657EVJLLFGW%2B1WOUMZ4zT02kQi0OZBXw2kEyVOktWDK7VCmVY3lGPFGOQKFllViI5GTVzcnjDDbVYdSTc6sWESX7GCxstLPlC0Y8VFLn1VsthIsk9fUYX09lk27ftc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-05-03 04:44:20 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49851	50.17.194.92	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	622	OUT	GET /spp.pl?a=10000&.yp=10137834&gtmcb=705921340 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:20 UTC	542	IN	HTTP/1.1 204 No Content Date: Fri, 03 May 2024 04:44:20 GMT Server: ATS/9.1.10.112 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.112) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49852	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	1972	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:20 UTC	906	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:20 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd9862abf7420b-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd9862abf7420b X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mZzIoCirQRhf60CSiW1sxozsQGysB0Cb37QH3hf3C3A1FNKB3cJ%2BAvfZL%2Fic4E0lgM5rqJ4kJtadRZ2Nzii4Fzn4vFpRORLRAvTC9SrrqilZviPZjgmUNwuAVK9Hn4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:20 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49853	104.16.103.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	1162	OUT	GET /static/images/favicon-1.ico HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
2024-05-03 04:44:20 UTC	1342	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:20 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 4414 Connection: close CF-Ray: 87dd9862ef0d1801-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353794 Cache-Control: public, max-age=31556926 ETag: "a0c86da7fc37ea50e848c4733761d53e" Expires: Sat, 03 May 2025 10:33:06 GMT Last-Modified: Wed, 01 Nov 2023 23:04:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-id-2: 8XSk/HgSx4ZueZeY0GvwFHyODgIqTWAWzTQJ+vI9X7k50GtQ63yby3+qO/NpMoEL6tX03Lc9dqM= x-amz-replication-status: COMPLETED x-amz-request-id: SBTCX10F1012C9ZK x-amz-server-side-encryption: AES256 x-amz-version-id: ytNVK.Z3f3u4lf4TKL9HrtBMqKueQBAz X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MKpxgcKAfMo9CR4e3nxOWOSe8Us0xHzY8%2BJuwe1x%2BcHuWbAAh70zEquJj69f6vDHBpnmgcYM43hH1Q5LickgHHHodpfz300HVTJ2lu8XQ%2BVjSRwicEggYbSPf4RBUDfgzK0%3D"}],"group":"cf-nel","max_age":604800}
2024-05-03 04:44:20 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-05-03 04:44:20 UTC	1304	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 28 11 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 01 ff 40 80 04 00 00 00 00 00 00 00 00 f3 23 68 16 f9 21 67 5c fc 22 68 9d fa 21 69 c9 f8 23 6b e3 f7 24 6c fb f6 24 6e fb f5 24 6f e3 f2 25 71 c9 f2 25 72 9d f1 27 73 5b e8 23 74 16 00 00 00 00 00 00 00 00 ff 40 80 04 ff 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 55 55 03 00 00 00 00 00 00 00 00 f9 2c 5d 29 fa 2b 5f 9f fb 29 62 f2 ff 2a 6a ff ff 29 6c ff ff 27 6c ff ff 25 6c ff f8 24 6b ff f7 Data Ascii: (( @ @#h!g\"h!i#k$l$n$o%q%r's[#t@UU,])+_)b*j)l'l%l$k
2024-05-03 04:44:20 UTC	1369	IN	Data Raw: 85 ff e3 3f 42 ff e4 53 5e ff e4 49 60 ff e5 43 65 ff e5 3d 6b ff e7 37 71 fa f6 36 7e ff e5 30 78 9f 00 00 00 00 dc 74 2e 16 e1 78 33 f2 e4 78 32 ff e2 75 32 fe e3 74 33 ff e4 73 33 ff e5 74 3d ff e4 5f 00 ff f8 e2 dc ff ff ff ff ff ff ff ff ff fa e7 e4 ff e5 58 00 ff e7 6d 45 ff e7 69 3e ff e6 67 3c ff e6 67 3d ff e5 66 3f ff e5 6a 48 ff e5 67 48 ff e1 35 00 ff f7 dd db ff fa ea ea ff e0 3e 27 ff e2 5b 59 ff e3 51 59 ff e3 4c 5f ff e3 46 64 ff e4 40 6a fe e7 3a 72 ff e6 35 75 f2 dc 2e 74 16 e0 81 2d 5b ed 89 30 ff de 80 2d fb e0 7f 2d ff e0 7d 2e ff e1 7d 33 ff e1 75 16 ff e5 8b 5e ff fe fa f9 ff ff fe fe ff ff ff ff ff ef b9 a9 ff e2 5d 00 ff e5 75 41 ff e4 6f 36 ff e4 6f 38 ff e4 6e 39 ff e3 6d 3a ff e3 6c 3b ff e3 6d 43 ff e2 66 3a ff e2 6b 4a ff fd Data Ascii: ?BS^I`Ce=k7q6~0xt.x3x2u2t3s3t=_XmEi>g<g=f?jHgH5>'[YQYL_Fd@j:r5u.t-[0--}.}3u^]uAo6o8n9m:l;mCf:kJ
2024-05-03 04:44:20 UTC	1369	IN	Data Raw: ff cd ae 00 ff d1 b2 26 ff d1 ae 0e ff d1 ac 12 ff d2 aa 1d ff d1 a4 00 ff d6 ad 4f ff fc f8 f5 ff ff ff ff ff ea d5 bb ff d0 8e 00 ff d5 97 36 ff d5 90 2a ff d6 8b 2f ff d7 85 33 ff d8 80 38 ff d8 7a 3c fb e8 7a 46 ff db 6f 45 5c d1 ae 0c 16 d0 b3 0e f2 d1 b7 0c ff cf b7 0a fe ce b8 09 ff ce b9 08 ff ce ba 05 ff cf bc 26 ff c9 b5 00 ff e6 de b3 ff ff ff ff ff ff ff ff ff f5 f1 e2 ff cc b4 00 ff cf b7 20 ff cf b4 16 ff cf b1 0d ff d0 af 0f ff d1 ae 28 ff ce a2 00 ff f1 e7 d6 ff ff ff ff ff f8 f3 ec ff d3 9d 1d ff d3 98 23 ff d4 94 29 ff d5 8f 2c ff d6 89 30 ff d7 85 34 fe da 7f 3a ff d9 78 3e f2 dc 74 46 16 00 00 00 00 cf b5 0b 9f dd c3 0b ff ce b9 09 fa ce ba 08 ff ce bb 07 ff cd bc 07 ff cd bd 0a ff cd be 12 ff cb bb 00 ff f3 f0 de ff ff ff ff ff ff ff Data Ascii: &O6*/38z<zFoE\& (#),04:x>tF
2024-05-03 04:44:20 UTC	372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 01 bf bf 00 04 00 00 00 00 00 00 00 00 c5 b9 00 16 ca bf 03 5c cd c0 03 9d cc c0 04 c9 ce bf 04 e3 cd be 05 fb cd bd 06 fb ce bd 07 e3 ce ba 08 c9 ce b9 0a 9d cd b4 0b 5c d1 ae 0c 16 00 00 00 00 00 00 00 00 ff bf 00 04 ff ff 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49854	18.219.60.11	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	433	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1714711456187&gtmcb=1280289369 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:20 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 03 May 2024 04:44:20 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: a940aeb5-0233-4a9d-94e1-6248160f9945 Server: nginx Content-Length: 42 Connection: Close
2024-05-03 04:44:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49861	216.239.34.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	2288	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556267&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_t [TRUNCATED] Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
2024-05-03 04:44:20 UTC	597	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:20 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=ySZemAhNIw%2F%2FFxZ3GGNXfEuekaDNaMrEkDtU6vIC223U%2Fe%2FbxkvivB%2FEu6rVg8NhkenoD7%2FQFYwIHeyXAMyctcr%2BHIM2ynL%2F%2F1VbGju6lKQ9Vce437%2B350hoi%2B3A8Q%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-05-03 04:44:20 UTC	643	IN	Data Raw: 32 37 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 38 3b 6f 72 64 3d 38 30 34 35 38 33 36 31 38 3b 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 Data Ascii: 27cevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;ord=804583618;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab
2024-05-03 04:44:20 UTC	575	IN	Data Raw: 32 33 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 38 3b 6f 72 64 3d 38 30 34 35 38 33 36 31 38 3b 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 Data Ascii: 238event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=804583618;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome
2024-05-03 04:44:20 UTC	1261	IN	Data Raw: 34 65 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 35 38 31 31 36 37 39 35 33 26 66 73 74 3d 31 37 31 34 37 31 31 34 36 30 38 31 36 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 59 61 78 4b 43 4b 54 4a 6c 59 77 59 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 34 75 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 Data Ascii: 4e6event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=581167953&fst=1714711460816&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z98483
2024-05-03 04:44:21 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49850	75.2.57.54	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	690	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=881380805 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:20 UTC	466	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=77c06a31-361f-4a2e-806e-98e63d50b1c6; Expires=Sat, 03 May 2025 04:44:20 GMT; Domain=tvpixel.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-03 04:44:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49857	142.251.35.166	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	1469	OUT	GET /activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:20 UTC	2359	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"745179039773954229"}],"aggregatable_trigger_data":[{"filters":[{"14":["16303776"]}],"key_piece":"0xf1a7204dcfd1235e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x72681d8f3590878d","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["16303776"]}],"key_piece":"0xf8411956a352f193","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x923795d580bd64ed","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"86839339002895418","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"745179039773954229","filters":[{"14":["16303776"],"source_ty [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 02-Jun-2024 04:44:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 03-May-2024 04:59:20 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49856	142.251.35.166	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	1272	OUT	GET /activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:20 UTC	2366	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5137447389760545385"}],"aggregatable_trigger_data":[{"filters":[{"14":["13079090"]}],"key_piece":"0x56b1af66d5ce3ac4","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xeee915080a3ecef8","not_filters":{"14":["13079090"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13079090"]}],"key_piece":"0x76b18d83983109a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x6a80cdfbe37de99c","not_filters":{"14":["13079090"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"7129394051170769551","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5137447389760545385","filters":[{"14":["13079090"],"sourc [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 02-Jun-2024 04:44:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 03-May-2024 04:59:20 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49855	142.251.35.166	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	1172	OUT	GET /activity;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:20 UTC	1286	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 03-May-2024 04:59:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49858	142.251.35.166	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	1364	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:20 UTC	1478	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 03-May-2024 04:59:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49859	18.238.49.74	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	707	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=437237257 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:20 UTC	898	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Fri, 03 May 2024 04:44:20 GMT Location: /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=437237257 set-cookie: UID=1917436ed9f0d0be4991d251714711460; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=1A77436ed9d5a0be4991b721714711460; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=1917436ed9f0d0be4991d251714711460; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 b15f339834cfb5119481b1c1eb890372.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: fV0HdSfOS09iAJcf-Y0EcbvQlri3Q3sRfZK0N405fEJDRWUfs1praA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49863	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	1401	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 1512 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
2024-05-03 04:44:20 UTC	1512	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"design_viewer"}},{"key":"service.name","value":{"stringValue":"design_viewer \| telemetry.user_operation"}}
2024-05-03 04:44:20 UTC	859	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:20 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 87dd98664b22436c-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oNeVJ9NZDB6YNtWnZrLv%2BqV3WnDUbqLPEs7fJ68H77Ounm2PUbYscJAugAnoDSpZp9%2FqMnBmxmZ9E7LvJpPm753J3pLy8h8VQWKsV2vrqtT79JGQpOGcYKFLCmB9Of4mCi%2B0x%2B4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:20 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49862	216.239.34.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	2278	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471z8812729902za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_171471202556235&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_us [TRUNCATED] Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
2024-05-03 04:44:21 UTC	581	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:20 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=AgSJD0GS8PJcR0b6JFHeWd7dTxIhlkAsQkbXC%2BAwLW5BlOko1pCtQJxvP4sklsv5ZpR5LD83btp7gpm6AJm25UBgQOllLmTPQ7z7FYLIh9%2FlgMKc7fs8xsPJv%2B27ZQ%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-05-03 04:44:21 UTC	827	IN	Data Raw: 33 34 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 70 73 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 36 36 38 35 37 37 33 34 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 35 31 30 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 64 Data Ascii: 340event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=1668577346;gtm=45j91e4510h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fd
2024-05-03 04:44:21 UTC	12	IN	Data Raw: 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: ":true}}
2024-05-03 04:44:21 UTC	771	IN	Data Raw: 32 66 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 36 36 38 35 37 37 33 34 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 35 31 30 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 64 65 73 69 67 6e 25 32 46 64 65 73 69 67 6e 2d 69 64 25 32 46 61 63 63 65 73 73 2d Data Ascii: 2fcevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1668577346;gtm=45j91e4510h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-
2024-05-03 04:44:21 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49864	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	1234	OUT	GET /web/af8d419008ac4515.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=Yik%2FgENy451TGH9mFDzuucw6MYkNNWtSS268nWJnYaHBzYznTcn7enCsepDp99m%2FZVZSROFTh1N68jXyj1l96k5XGxkzwLPizPSV2MLhBtVJA%2FbuK51Vhu8gmKN%2FIQ%3D%3D
2024-05-03 04:44:21 UTC	1186	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:21 GMT Content-Type: text/javascript Content-Length: 7112 Connection: close CF-Ray: 87dd986799c78c29-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8845 Cache-Control: public, max-age=31556926 ETag: "259bc5517c21aba0d160ff9c454cbff4" Expires: Sat, 03 May 2025 10:33:07 GMT Last-Modified: Fri, 03 May 2024 02:12:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 9VNKxuHjLh6iHMNfETsjAtak31pPVaM19orcweiC3KjpKC9xQzRjiJpfNdmMcoFkIi4CU0xofL4= x-amz-replication-status: PENDING x-amz-request-id: PZDB5MH946VNPR8B x-amz-server-side-encryption: AES256 x-amz-version-id: WpGsGr5EExb3erI_UTmqce_50zAkwEhX X-Content-Type-Options: nosniff
2024-05-03 04:44:21 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 72 7a 79 74 55 71 6b 58 4a 44 54 37 51 57 55 54 4c 78 77 68 6f 4b 4a 6b 42 6e 63 5a 65 45 52 48 43 71 6e 45 6e 4e 57 25 32 46 6f 6e 72 64 49 6d 6b 63 4d 32 6b 68 39 4a 45 34 6c 71 68 49 57 34 72 33 56 47 46 54 55 70 55 4d 47 75 66 33 34 25 32 42 65 34 25 32 46 67 59 4e 43 61 37 6c 68 6c 6e 52 39 59 69 6b 37 25 32 42 75 6d 67 77 54 63 64 65 65 52 58 61 4e 4e 65 38 59 65 32 6f 44 6e 30 72 71 45 6c 25 32 42 77 63 4a 46 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rzytUqkXJDT7QWUTLxwhoKJkBncZeERHCqnEnNW%2FonrdImkcM2kh9JE4lqhIW4r3VGFTUpUMGuf34%2Be4%2FgYNCa7lhlnR9Yik7%2BumgwTcdeeRXaNNe8Ye2oDn0rqEl%2BwcJFo%3D"}],"group":"cf-nel","max_age":60
2024-05-03 04:44:21 UTC	1198	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 3d 7b 7d 2c 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 73 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 73 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 69 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6c 29 2c 72 2e 65 78 70 6f 72 74 73 7d 6c 2e 6d 3d 69 2c 65 3d 5b 5d 2c 6c 2e 4f 3d 28 74 2c 72 2c 6e 2c 6f 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 72 2c 6e 2c 6f 5d 3d 65 5b 66 5d 2c 73 3d 21 30 2c 61 3d Data Ascii: (()=>{"use strict";var e,t,r,n,o,i={},s={};function l(e){var t=s[e];if(void 0!==t)return t.exports;var r=s[e]={exports:{}};return i[e](r,r.exports,l),r.exports}l.m=i,e=[],l.O=(t,r,n,o)=>{if(!r){var i=1/0;for(f=0;f<e.length;f++){for(var[r,n,o]=e[f],s=!0,a=
2024-05-03 04:44:21 UTC	1369	IN	Data Raw: 35 31 31 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 66 34 36 64 62 33 37 35 31 64 38 65 39 39 39 2e 6c 74 72 2e 63 73 73 22 7d 2c 6c 2e 6d 69 6e 69 43 73 73 46 52 74 6c 3d 65 3d 3e 7b 69 66 28 38 35 38 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 72 75 6e 74 69 6d 65 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 35 34 33 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 76 65 6e 64 6f 72 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 31 33 38 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 68 6a 66 65 70 74 2e 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 35 31 31 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 72 Data Ascii: 5110===e)return"ef46db3751d8e999.ltr.css"},l.miniCssFRtl=e=>{if(8581===e)return"c166e5d20ad58f4e.runtime.rtl.css";if(5436===e)return"c166e5d20ad58f4e.vendor.rtl.css";if(1389===e)return"hjfept.c166e5d20ad58f4e.rtl.css";if(5110===e)return"c166e5d20ad58f4e.r
2024-05-03 04:44:21 UTC	1369	IN	Data Raw: 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6c 2e 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 28 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 6e 3f 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6f 29 3a 28 69 3d 72 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 69 29 7d 29 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 2c 72 2c 6e 2d 31 29 7d 29 29 3b 76 61 72 20 69 7d 29 29 7d 3b 6c 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: ule",{value:!0})},(()=>{const e=l.e,t=function e(t,r,n){return t().catch((function(o){return 0===n?Promise.reject(o):(i=r,new Promise((function(e){setTimeout(e,i)}))).then((function(){return e(t,r,n-1)}));var i}))};l.e=function(r){return t((function(){ret
2024-05-03 04:44:21 UTC	1369	IN	Data Raw: 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 72 2e 6f 6e 65 72 72 6f 72 3d 65 3d 3e 74 28 65 29 2c 72 2e 68 72 65 66 3d 65 2c 72 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2c 66 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 6c 65 74 20 6c 3d 30 2c 61 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 65 29 7b 63 6f 6e 73 74 20 65 3d 6e 2e 73 72 63 2e 73 75 62 73 74 72 69 6e 67 28 73 2e 6c 65 6e 67 74 68 29 2c 74 3d 65 3f 69 5b 65 5d 7c 7c 30 3a 30 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3e 3d 31 26 26 6c 2b 74 3e 6f 7c 7c 61 2e 6c 65 6e 67 74 Data Ascii: =0;function p(e,t){const r=document.createElement("link");r.onload=r.onerror=e=>t(e),r.href=e,r.rel="stylesheet",f(r)}function m(e,t){const s=n();let l=0,a=[];for(const n of e){const e=n.src.substring(s.length),t=e?i[e]\|\|0:0;if(a.length>=1&&l+t>o\|\|a.lengt
2024-05-03 04:44:21 UTC	1369	IN	Data Raw: 7b 63 6f 6e 73 74 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 28 74 29 29 3b 63 6f 6e 73 74 20 6f 3d 72 28 6e 2c 5b 5d 2c 6e 65 77 20 53 65 74 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 6f 2e 6d 61 70 28 28 65 3d 3e 6c 2e 65 28 65 29 29 29 29 2e 74 68 65 6e 28 28 28 29 3d 3e 6c 28 74 29 29 29 7d 7d 29 28 29 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 6c 2e 66 2e 6c 6f 63 61 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 5b 65 5d 29 7b 63 6f 6e 73 74 20 72 3d 73 65 6c 66 2e 63 6d 73 67 3b 69 66 28 21 72 7c 7c 21 72 2e 61 73 73 65 74 73 29 72 65 74 75 72 6e 3b Data Ascii: {const n=e[t];if(null==n)return Promise.resolve(l(t));const o=r(n,[],new Set);return Promise.all(o.map((e=>l.e(e)))).then((()=>l(t)))}})(),(()=>{const e={};l.f.locale=function(t,r){!function(e,t,r){if(null==t[e]){const r=self.cmsg;if(!r\|\|!r.assets)return;
2024-05-03 04:44:21 UTC	438	IN	Data Raw: 75 6e 6b 2d 22 2b 74 2c 74 29 7d 65 6c 73 65 20 65 5b 74 5d 3d 30 7d 2c 6c 2e 4f 2e 6a 3d 74 3d 3e 30 3d 3d 3d 65 5b 74 5d 3b 76 61 72 20 74 3d 28 74 2c 72 29 3d 3e 7b 76 61 72 20 6e 2c 6f 2c 5b 69 2c 73 2c 61 5d 3d 72 2c 63 3d 30 3b 69 66 28 69 2e 73 6f 6d 65 28 28 74 3d 3e 30 21 3d 3d 65 5b 74 5d 29 29 29 7b 66 6f 72 28 6e 20 69 6e 20 73 29 69 66 28 6c 2e 6f 28 73 2c 6e 29 29 6c 2e 6d 5b 6e 5d 3d 73 5b 6e 5d 3b 69 66 28 61 29 76 61 72 20 66 3d 61 28 6c 29 7d 69 66 28 74 29 74 28 72 29 3b 66 6f 72 28 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 69 66 28 6f 3d 69 5b 63 5d 2c 6c 2e 6f 28 65 2c 6f 29 26 26 65 5b 6f 5d 29 65 5b 6f 5d 5b 30 5d 28 29 3b 65 5b 6f 5d 3d 30 7d 72 65 74 75 72 6e 20 6c 2e 4f 28 66 29 7d 2c 72 3d 73 65 6c 66 2e 77 65 62 70 61 Data Ascii: unk-"+t,t)}else e[t]=0},l.O.j=t=>0===e[t];var t=(t,r)=>{var n,o,[i,s,a]=r,c=0;if(i.some((t=>0!==e[t]))){for(n in s)if(l.o(s,n))l.m[n]=s[n];if(a)var f=a(l)}if(t)t(r);for(;c<i.length;c++){if(o=i[c],l.o(e,o)&&e[o])e[o][0]();e[o]=0}return l.O(f)},r=self.webpa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49865	18.238.49.74	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:20 UTC	833	OUT	GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=437237257 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1917436ed9f0d0be4991d251714711460; PID=1A77436ed9d5a0be4991b721714711460; XID=1917436ed9f0d0be4991d251714711460
2024-05-03 04:44:21 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 03 May 2024 04:44:21 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 92d8afc92e3597d245b2f6480cd44220.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: hDt8Emq9s0nPK7HMI4xVz8nuOMeJWkhjKrpmEtb1QaSsi-XiyC2Yaw==
2024-05-03 04:44:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49867	142.250.176.194	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:21 UTC	1366	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:21 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:44:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49869	142.250.176.194	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:21 UTC	1174	OUT	GET /ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:21 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:44:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49866	75.2.57.54	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:21 UTC	506	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=881380805 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=77c06a31-361f-4a2e-806e-98e63d50b1c6
2024-05-03 04:44:21 UTC	466	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=77c06a31-361f-4a2e-806e-98e63d50b1c6; Expires=Sat, 03 May 2025 04:44:21 GMT; Domain=tvpixel.com; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-03 04:44:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49868	142.250.65.226	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:21 UTC	2232	OUT	GET /pagead/viewthroughconversion/804757079/?random=453093911&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&tiba=Canva%20Design&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20267%3Bevent_id%3D1714712356152_171471202556267%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_doctype_id%3DTAGAkMpLE1g%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1&uip=191.96.227.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:21 UTC	2300	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=453093911&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&tiba=Canva%20Design&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20267%3Bevent_id%3D1714712356152_171471202556267%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_doctype_id%3DTAGAkMpLE1g%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1&uip=191.96.227.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 03-May-2024 04:59:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:44:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49873	142.250.65.198	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:24 UTC	1018	OUT	GET /activity;register_conversion=1;ps=1;src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-05-03 04:44:24 UTC	2536	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5137447389760545385"}],"aggregatable_trigger_data":[{"filters":[{"14":["13079090"]}],"key_piece":"0x56b1af66d5ce3ac4","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xeee915080a3ecef8","not_filters":{"14":["13079090"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13079090"]}],"key_piece":"0x76b18d83983109a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x6a80cdfbe37de99c","not_filters":{"14":["13079090"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"16353543319981097038","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5137447389760545385","filters":[{"14":["13079090"],"sour [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 02-Jun-2024 04:44:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkbcRcZuieg13XrjDkDuw8IkBxgvs0fJsRhK8zTzV5APMBFsZVZ6JPClaWs; expires=Sun, 03-May-2026 04:44:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49872	142.250.65.198	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:24 UTC	1210	OUT	GET /activity;register_conversion=1;ps=1;src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-05-03 04:44:24 UTC	2530	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"745179039773954229"}],"aggregatable_trigger_data":[{"filters":[{"14":["16303776"]}],"key_piece":"0xf1a7204dcfd1235e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x72681d8f3590878d","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["16303776"]}],"key_piece":"0xf8411956a352f193","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x923795d580bd64ed","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"7195138553346542881","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"745179039773954229","filters":[{"14":["16303776"],"source_ [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 02-Jun-2024 04:44:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUniIy2HHq9L1hcaVpBScErNkk-CZB0tOiM9hrLyNj4O38RcJb7g-C4nV9Wn; expires=Sun, 03-May-2026 04:44:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49871	142.251.40.230	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:24 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 134 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:24 UTC	134	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 36 38 33 39 33 33 39 30 30 32 38 39 35 34 31 38 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"86839339002895418"},"type":"trigger-no-matching-source"}]
2024-05-03 04:44:24 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 03 May 2024 04:44:24 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49870	142.251.40.230	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:24 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:24 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 37 31 32 39 33 39 34 30 35 31 31 37 30 37 36 39 35 35 31 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"7129394051170769551"},"type":"trigger-no-matching-source"}]
2024-05-03 04:44:24 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 03 May 2024 04:44:24 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49874	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:24 UTC	2914	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 2460 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: kVARhNyGYpvQD_UQDm7C9qJTX_5cEUygsOXHd7ZTcI5C0e0wholGm7LYOyOXifHrt8-p_xPSN784KxH544amabVAtu0 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:24 UTC	2460	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 31 32 33 65 65 33 31 32 2d 66 63 35 35 2d 34 62 36 64 2d 39 35 34 34 2d 31 33 35 39 62 39 61 38 37 65 32 33 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 31 38 2e 32 32 38 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 32 33 2e 30 37 33 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 58 4c 49 4e 4f 22 3a 22 48 22 2c 22 50 49 4f 54 49 22 3a 22 42 22 2c 22 50 49 4e 43 4f 22 3a 22 42 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 46 41 54 48 50 22 3a 22 42 22 2c 22 45 48 50 4c 49 22 3a 22 42 22 2c 22 45 41 57 46 47 22 3a 22 41 22 2c 22 44 57 43 54 41 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"123ee312-fc55-4b6d-9544-1359b9a87e23","E":"2024-05-03T04:44:18.228Z","F":"2024-05-03T04:44:23.073Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"XLINO":"H","PIOTI":"B","PINCO":"B","OCPS":"B","FATHP":"B","EHPLI":"B","EAWFG":"A","DWCTA"
2024-05-03 04:44:24 UTC	907	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:24 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd987daff30f67-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd987daff30f67 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9nC4fKbRQw90nWtaE8ly7bT7ti8%2BUPRlXv9aV6jnj%2BPbRlV1isYuLCYPpGOhd%2B68Eagq5P8HkCHa%2FoFhXWSe6z%2Bv7FgWXUdzbgyhe40VqzeeIjQvGRhAnFe7%2FHZ6hts%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:24 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49875	216.239.32.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:24 UTC	2671	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&_eu=AEA&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.sp=1&sst.em_event=1&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_17147120255620&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by [TRUNCATED] Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-navigation-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=AgSJD0GS8PJcR0b6JFHeWd7dTxIhlkAsQkbXC%2BAwLW5BlOko1pCtQJxvP4sklsv5ZpR5LD83btp7gpm6AJm25UBgQOllLmTPQ7z7FYLIh9%2FlgMKc7fs8xsPJv%2B27ZQ%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D
2024-05-03 04:44:24 UTC	673	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:24 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=YYMsjjGL%2F%2FBhKSXSsxnqZ4SQE7JC4K8kazRkn9KWgDupwYZkBsfhEPwVLbVoKHCwHKnQ8nH2VX%2BB81LiVYtyQriDX5zMM0eF9xsF2VgGih8mON9xjh2VNISHR8rqbw%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-05-03 04:44:24 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49876	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:24 UTC	1400	OUT	GET /web/3ca27320fba118d7.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; FPLC=AgSJD0GS8PJcR0b6JFHeWd7dTxIhlkAsQkbXC%2BAwLW5BlOko1pCtQJxvP4sklsv5ZpR5LD83btp7gpm6AJm25UBgQOllLmTPQ7z7FYLIh9%2FlgMKc7fs8xsPJv%2B27ZQ%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D
2024-05-03 04:44:24 UTC	1192	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:24 GMT Content-Type: text/javascript Content-Length: 10837 Connection: close CF-Ray: 87dd987ed8590cc4-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 4353800 Cache-Control: public, max-age=31556926 ETag: "34e1c8f1d5fdc60e02201c32efb25e58" Expires: Sat, 03 May 2025 10:33:10 GMT Last-Modified: Fri, 05 Jan 2024 02:02:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: u9K7VWjAQbwx4It8/CUYdX7Rhj3KmSCgedpc0mkUkXWxJeNyOXUElyh76inpRIFxgVlHMZ1hRbM= x-amz-replication-status: COMPLETED x-amz-request-id: SBTD4RKCJX340PA9 x-amz-server-side-encryption: AES256 x-amz-version-id: 4.q729ef1jyTc0iz1bpNfnCKtaQpzSmW X-Content-Type-Options: nosniff
2024-05-03 04:44:24 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 76 4c 6f 43 43 61 44 73 62 38 7a 6b 49 58 6d 4e 64 4c 7a 58 55 36 33 33 45 62 67 6f 25 32 46 75 25 32 46 59 61 48 33 43 48 58 35 54 6e 6b 4b 6e 49 4e 58 71 45 54 79 54 25 32 42 67 42 48 4f 77 37 44 53 74 4c 5a 6a 32 42 72 6a 7a 4a 4d 6b 57 4d 78 6d 53 36 33 31 43 32 34 67 71 48 70 49 6c 6b 44 72 57 65 77 38 63 63 63 6d 69 6d 69 7a 73 52 37 78 32 78 62 6c 6a 32 41 6a 50 58 6c 76 47 62 6c 63 65 72 36 52 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ivLoCCaDsb8zkIXmNdLzXU633Ebgo%2Fu%2FYaH3CHX5TnkKnINXqETyT%2BgBHOw7DStLZj2BrjzJMkWMxmS631C24gqHpIlkDrWew8cccmimizsR7x2xblj2AjPXlvGblcer6Rc%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:24 UTC	1196	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 33 35 33 36 31 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 49 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 37 31 32 33 34 33 29 3b 63 6c 61 73 73 20 69 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 2e 63 61 6c 6c 28 74 68 69 73 29 7d 73 74 61 74 69 63 20 5f 5f 69 6e 69 74 53 74 61 74 69 63 28 29 7b 74 68 69 73 2e 69 64 3d 22 44 65 64 75 70 65 22 7d 5f 5f 69 6e 69 74 28 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 69 2e 69 64 7d 73 Data Ascii: "use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{353610:(t,e,n)=>{n.d(e,{I:()=>i});var r=n(712343);class i{constructor(){i.prototype.__init.call(this)}static __initStatic(){this.id="Dedupe"}__init(){this.name=i.id}s
2024-05-03 04:44:24 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 21 3d 3d 65 2e 66 75 6e 63 74 69 6f 6e 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 74 2e 66 69 6e 67 65 72 70 72 69 6e 74 2c 72 3d 65 2e 66 69 6e 67 65 72 70 72 69 6e 74 3b 69 66 28 21 6e 26 26 21 72 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 21 72 7c 7c 21 6e 26 26 72 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 21 28 6e 2e 6a 6f 69 6e 28 22 22 29 21 3d 3d 72 2e 6a 6f 69 6e 28 22 22 29 29 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 78 63 65 70 74 69 6f 6e 26 26 74 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 26 26 74 2e 65 78 63 65 70 74 69 6f 6e Data Ascii: nction!==e.function)return!1}return!0}function c(t,e){let n=t.fingerprint,r=e.fingerprint;if(!n&&!r)return!0;if(n&&!r\|\|!n&&r)return!1;try{return!(n.join("")!==r.join(""))}catch(i){return!1}}function u(t){return t.exception&&t.exception.values&&t.exception
2024-05-03 04:44:24 UTC	1369	IN	Data Raw: 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 4a 53 4f 4e 28 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 29 7b 63 6f 6e 73 74 20 69 3d 65 5b 74 5d 3b 6e 5b 74 5d 3d 28 30 2c 72 2e 56 5a 29 28 69 29 3f 69 2e 74 6f 53 74 72 69 6e 67 28 29 3a 69 7d 7d 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 29 26 26 63 2e 6b 67 2e 65 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 65 78 74 72 61 63 74 20 65 78 74 72 61 20 64 61 74 61 20 66 72 6f 6d 20 74 68 65 20 45 72 72 6f 72 20 6f 62 6a 65 63 74 3a 22 2c 65 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d Data Ascii: ){const e=t.toJSON();for(const t of Object.keys(e)){const i=e[t];n[t]=(0,r.VZ)(i)?i.toString():i}}return n}catch(e){("undefined"==typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__)&&c.kg.error("Unable to extract extra data from the Error object:",e)}return null}}
2024-05-03 04:44:24 UTC	1369	IN	Data Raw: 74 26 26 74 2e 66 72 61 6d 65 73 26 26 74 2e 66 72 61 6d 65 73 2e 6d 61 70 28 28 74 3d 3e 74 68 69 73 2e 5f 69 74 65 72 61 74 65 65 28 74 29 29 29 7d 7d 7d 69 2e 5f 5f 69 6e 69 74 53 74 61 74 69 63 28 29 7d 2c 38 35 38 34 36 34 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 52 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 35 36 37 35 39 37 29 3b 6e 28 39 37 31 32 33 35 29 2e 6e 32 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 74 72 79 7b 6c 65 74 20 6e 3d 74 3b 63 6f 6e 73 74 20 72 3d 35 2c 69 3d 38 30 2c 63 3d 5b 5d 3b 6c 65 74 20 75 3d 30 2c 73 3d 30 3b 63 6f 6e 73 74 20 61 3d 22 20 3e 20 22 2c 66 3d 61 2e 6c 65 6e 67 74 68 3b 6c 65 74 20 6c 3b 66 6f 72 28 3b 6e 26 26 75 2b 2b 3c 72 26 26 28 6c 3d 6f 28 6e 2c 65 29 2c 21 28 22 68 74 Data Ascii: t&&t.frames&&t.frames.map((t=>this._iteratee(t)))}}}i.__initStatic()},858464:(t,e,n)=>{n.d(e,{Rt:()=>i});var r=n(567597);n(971235).n2;function i(t,e){try{let n=t;const r=5,i=80,c=[];let u=0,s=0;const a=" > ",f=a.length;let l;for(;n&&u++<r&&(l=o(n,e),!("ht
2024-05-03 04:44:24 UTC	1369	IN	Data Raw: 73 77 69 74 63 68 28 72 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 5d 22 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 68 28 74 2c 45 72 72 6f 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 29 3d 3d 3d 60 5b 6f 62 6a 65 63 74 20 24 7b 65 7d 5d 60 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 2c 22 53 74 72 69 6e 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d Data Ascii: switch(r.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function o(t,e){return r.call(t)===`[object ${e}]`}function c(t){return o(t,"String")}function u(t){return null===t\|\|"object"!=
2024-05-03 04:44:24 UTC	1369	IN	Data Raw: 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 63 6f 6e 73 74 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 53 65 74 2c 65 3d 74 3f 6e 65 77 20 57 65 61 6b 53 65 74 3a 5b 5d 3b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 29 72 65 74 75 72 6e 21 21 65 2e 68 61 73 28 6e 29 7c 7c 28 65 2e 61 64 64 28 6e 29 2c 21 31 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 69 66 28 65 5b 74 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 20 65 2e 70 75 73 68 28 6e 29 2c 21 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 29 65 2e 64 65 6c 65 74 65 28 6e 29 3b 65 6c 73 65 20 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b Data Ascii: =>{function r(){const t="function"==typeof WeakSet,e=t?new WeakSet:[];return[function(n){if(t)return!!e.has(n)\|\|(e.add(n),!1);for(let t=0;t<e.length;t++){if(e[t]===n)return!0}return e.push(n),!1},function(n){if(t)e.delete(n);else for(let t=0;t<e.length;t+
2024-05-03 04:44:24 UTC	1369	IN	Data Raw: 5b 43 69 72 63 75 6c 61 72 20 7e 5d 22 3b 63 6f 6e 73 74 20 68 3d 65 3b 69 66 28 68 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 2e 74 6f 4a 53 4f 4e 29 74 72 79 7b 72 65 74 75 72 6e 20 73 28 22 22 2c 68 2e 74 6f 4a 53 4f 4e 28 29 2c 75 2d 31 2c 61 2c 66 29 7d 63 61 74 63 68 28 6d 29 7b 7d 63 6f 6e 73 74 20 67 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 5b 5d 3a 7b 7d 3b 6c 65 74 20 64 3d 30 3b 63 6f 6e 73 74 20 79 3d 28 30 2c 6f 2e 53 68 29 28 65 29 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 79 29 7b 69 66 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 79 2c 6e 29 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 64 3e 3d 61 29 7b 67 5b 6e 5d 3d 22 5b 4d 61 78 Data Ascii: [Circular ~]";const h=e;if(h&&"function"==typeof h.toJSON)try{return s("",h.toJSON(),u-1,a,f)}catch(m){}const g=Array.isArray(e)?[]:{};let d=0;const y=(0,o.Sh)(e);for(const n in y){if(!Object.prototype.hasOwnProperty.call(y,n))continue;if(d>=a){g[n]="[Max
2024-05-03 04:44:24 UTC	1369	IN	Data Raw: 72 6e 20 65 3f 65 2e 73 6c 69 63 65 28 31 29 3a 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 2e 2e 2e 74 29 7b 6c 65 74 20 65 3d 22 22 2c 6e 3d 21 31 3b 66 6f 72 28 6c 65 74 20 72 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 72 3e 3d 2d 31 26 26 21 6e 3b 72 2d 2d 29 7b 63 6f 6e 73 74 20 69 3d 72 3e 3d 30 3f 74 5b 72 5d 3a 22 2f 22 3b 69 26 26 28 65 3d 60 24 7b 69 7d 2f 24 7b 65 7d 60 2c 6e 3d 22 2f 22 3d 3d 3d 69 2e 63 68 61 72 41 74 28 30 29 29 7d 72 65 74 75 72 6e 20 65 3d 72 28 65 2e 73 70 6c 69 74 28 22 2f 22 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 21 74 29 29 2c 21 6e 29 2e 6a 6f 69 6e 28 22 2f 22 29 2c 28 6e 3f 22 2f 22 3a 22 22 29 2b 65 7c 7c 22 2e 22 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 6c 65 74 20 65 3d 30 3b 66 6f 72 28 3b 65 3c 74 2e 6c 65 6e 67 Data Ascii: rn e?e.slice(1):[]}function c(...t){let e="",n=!1;for(let r=t.length-1;r>=-1&&!n;r--){const i=r>=0?t[r]:"/";i&&(e=`${i}/${e}`,n="/"===i.charAt(0))}return e=r(e.split("/").filter((t=>!!t)),!n).join("/"),(n?"/":"")+e\|\|"."}function u(t){let e=0;for(;e<t.leng
2024-05-03 04:44:24 UTC	58	IN	Data Raw: 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 33 63 61 32 37 33 32 30 66 62 61 31 31 38 64 37 2e 76 65 6e 64 6f 72 2e 6a 73 2e 6d 61 70 Data Ascii: sourceMappingURL=sourcemaps/3ca27320fba118d7.vendor.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49878	142.250.80.36	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:24 UTC	2285	OUT	GET /pagead/1p-conversion/804757079/?random=453093911&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&tiba=Canva%20Design&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20267%3Bevent_id%3D1714712356152_171471202556267%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_doctype_id%3DTAGAkMpLE1g%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1&uip=191.96.227.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%2 [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:44:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49879	18.238.49.74	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:25 UTC	522	OUT	GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=437237257 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1917436ed9f0d0be4991d251714711460
2024-05-03 04:44:25 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Fri, 03 May 2024 04:44:25 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 255e8a45aff6633687f7e4911e918abc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: q_7KptxkHH2sLnlHhNXxRkwzSuWua72zrBp4zGD2qvtaMPoJ1rFSew==
2024-05-03 04:44:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49880	142.251.32.98	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:25 UTC	941	OUT	GET /ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1860871916;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:25 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:44:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49881	142.251.32.98	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:25 UTC	1133	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=466171024;gtm=45j91e44u1v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:25 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:44:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49883	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:25 UTC	2129	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:25 UTC	918	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:25 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98814e58429a-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98814e58429a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yXbXsDftqRrzrvRrRYst%2FYotuCgbc2KLRQct8AQylc92lznwg4Ki6E0kU4IJRKCnZWG1cx9fugx97nTbJm4hSHqN5OjbLHQ3SgY6vX6mXVHpTJFVX2FZx6SstfNBDAU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:25 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49882	216.239.34.21	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:25 UTC	2408	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4510v872399471za200&_p=1714711451465&gcd=13l3l3l3l1&npa=0&dma=0&cid=1208532661.1714711458&ecid=2083150505&ul=en-us&sr=1280x1024&_fplc=0&ur=US-NY&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&_eu=AEA&sst.gcd=13l3l3l3l1&sst.tft=1714711451465&sst.sp=1&sst.em_event=1&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&dr=&dt=Canva%20Design&sid=1714711457&sct=1&seg=0&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20267&ep.event_id=1714712356152_17147120255620&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by [TRUNCATED] Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=YYMsjjGL%2F%2FBhKSXSsxnqZ4SQE7JC4K8kazRkn9KWgDupwYZkBsfhEPwVLbVoKHCwHKnQ8nH2VX%2BB81LiVYtyQriDX5zMM0eF9xsF2VgGih8mON9xjh2VNISHR8rqbw%3D%3D
2024-05-03 04:44:25 UTC	581	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:25 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-05-03 04:44:25 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49884	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:25 UTC	1400	OUT	GET /web/hjfept.e74599b4a81b369e.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=YYMsjjGL%2F%2FBhKSXSsxnqZ4SQE7JC4K8kazRkn9KWgDupwYZkBsfhEPwVLbVoKHCwHKnQ8nH2VX%2BB81LiVYtyQriDX5zMM0eF9xsF2VgGih8mON9xjh2VNISHR8rqbw%3D%3D
2024-05-03 04:44:25 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:25 GMT Content-Type: text/javascript Content-Length: 65071 Connection: close CF-Ray: 87dd98815e5a8c30-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8849 Cache-Control: public, max-age=31556926 ETag: "f473c0a476995e2f4bb9625923b67153" Expires: Sat, 03 May 2025 10:33:11 GMT Last-Modified: Fri, 03 May 2024 02:12:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: FP/LXCCi4JH0DmEArMn4OaZ+w4xpSjhrXCS7Vk6uWu3HxN9v2stsQG1zWlh+e1nzXGIUBswtGLI= x-amz-replication-status: COMPLETED x-amz-request-id: PZD5WS2HNB1XXBM2 x-amz-server-side-encryption: AES256 x-amz-version-id: 5M9M3AxYuT84LUBOZ6MTwJ0b9v5M418. X-Content-Type-Options: nosniff
2024-05-03 04:44:25 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 59 7a 34 69 34 4e 48 53 56 59 65 46 25 32 42 49 6e 53 30 54 56 6d 4f 4d 42 77 51 38 41 47 66 25 32 42 34 62 4f 6f 4d 31 33 37 77 47 65 69 66 6b 5a 30 76 64 47 58 7a 4b 38 6f 31 34 50 58 52 46 39 4f 25 32 46 74 52 31 6a 32 36 45 5a 70 4d 57 4d 77 36 75 70 4f 71 49 31 58 54 59 43 50 39 57 4b 66 43 4b 71 55 6c 79 48 42 50 64 4c 70 62 54 32 63 63 76 35 36 59 62 6a 64 75 6b 4f 55 4c 70 4a 4c 72 65 36 74 47 33 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yz4i4NHSVYeF%2BInS0TVmOMBwQ8AGf%2B4bOoM137wGeifkZ0vdGXzK8o14PXRF9O%2FtR1j26EZpMWMw6upOqI1XTYCP9WKfCKqUlyHBPdLpbT2ccv56YbjdukOULpJLre6tG3g%3D"}],"group":"cf-nel","max_age":604800
2024-05-03 04:44:25 UTC	1199	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 34 37 36 38 33 34 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 65 34 37 37 33 64 36 39 33 32 36 31 36 61 38 35 66 32 65 61 63 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{/***/ 476834:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._e4773d6932616a85f2eac
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 63 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 69 6e 76 61 6c 69 64 20 61 72 67 75 6d 65 6e 74 22 3a 65 61 28 62 2c 2e 2e 2e 63 29 29 3b 7d 3b 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 2e 2e 2e 62 29 7b 6c 65 74 20 63 3d 30 3b Data Ascii: h-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};fa=function(a,b){var c=[];if(!a)throw Error(null==b?"invalid argument":ea(b,...c));};ea=function(a,...b){let c=0;
2024-05-03 04:44:25 UTC	514	IN	Data Raw: 28 22 63 6f 6d 70 6c 65 74 65 22 2c 28 29 3d 3e 62 28 29 29 3b 61 2e 6d 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 64 3d 3e 7b 64 3d 64 2e 74 61 72 67 65 74 3b 63 28 28 6e 75 6c 6c 3d 3d 3d 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 65 72 72 6f 72 29 7c 7c 61 2e 6d 61 2e 65 72 72 6f 72 7c 7c 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 72 72 6f 72 22 29 29 7d 29 3b 61 2e 6d 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 28 29 3d 3e 63 28 6e 65 77 20 73 61 29 29 7d 29 7d 3b 0a 5f 5f 63 2e 76 61 3d 66 75 6e 63 74 69 6f 6e 28 7b 6e 61 6d 65 3a 61 2c 76 65 72 73 69 6f 6e 3a 62 2c 42 62 3a 63 2c 4f 61 3a 64 7d 29 7b 76 61 72 20 65 3d 69 6e 64 65 78 65 64 44 42 Data Ascii: ("complete",()=>b());a.ma.addEventListener("error",d=>{d=d.target;c((null===d\|\|void 0===d?void 0:d.error)\|\|a.ma.error\|\|Error("Unknown error"))});a.ma.addEventListener("abort",()=>c(new sa))})};__c.va=function({name:a,version:b,Bb:c,Oa:d}){var e=indexedDB
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 3a 6e 65 77 20 75 61 28 68 2e 72 65 73 75 6c 74 29 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 6f 63 6b 65 64 22 2c 28 29 3d 3e 7b 6c 3d 21 30 3b 67 28 45 72 72 6f 72 28 22 6f 70 65 72 61 74 69 6f 6e 20 62 6c 6f 63 6b 65 64 20 64 75 65 20 74 6f 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 22 29 29 7d 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 63 63 65 73 73 22 2c 28 29 3d 3e 7b 63 6f 6e 73 74 20 71 3d 68 2e 72 65 73 75 6c 74 3b 6c 3f 0a 71 2e 63 6c 6f 73 65 28 29 3a 28 71 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 65 72 73 69 6f 6e 63 68 61 6e 67 65 22 2c 77 3d 3e 7b 28 64 2e 54 61 26 26 6e 75 6c 6c 3d 3d 77 2e 6e 65 77 56 65 72 73 Data Ascii: :new ua(h.result))});break;case 1:h.addEventListener("blocked",()=>{l=!0;g(Error("operation blocked due to open connections"))});h.addEventListener("success",()=>{const q=h.result;l?q.close():(q.addEventListener("versionchange",w=>{(d.Ta&&null==w.newVers
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 74 61 67 3a 63 2c 4c 3a 31 2c 41 3a 76 6f 69 64 20 30 2c 78 62 3a 64 2c 76 61 6c 75 65 3a 65 2c 75 63 3a 21 31 2c 6c 3a 22 73 74 72 69 6e 67 22 7d 7d 3b 7a 3d 5f 5f 63 2e 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 63 2c 41 3a 64 2c 54 3a 65 7d 3d 6e 28 61 2c 62 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 4c 3a 32 2c 41 3a 64 2c 48 3a 65 2c 6c 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 63 2c 41 3a 64 2c 54 3a 65 7d 3d 6e 28 61 2c 62 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 4c 3a 33 2c 41 3a 64 2c 48 3a 65 2c 6c 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 42 3d 5f 5f 63 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 7b 74 61 67 Data Ascii: tag:c,L:1,A:void 0,xb:d,value:e,uc:!1,l:"string"}};z=__c.z=function(a,b){const {tag:c,A:d,T:e}=n(a,b);return{tag:c,L:2,A:d,H:e,l:"object"}};A=function(a,b){const {tag:c,A:d,T:e}=n(a,b);return{tag:c,L:3,A:d,H:e,l:"object"}};B=__c.B=function(a,b){const {tag
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 70 6f 70 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 76 61 72 20 77 3d 75 2e 4d 61 3b 71 3d 75 2e 6a 62 3b 69 66 28 6e 75 6c 6c 3d 3d 67 26 26 70 2e 75 63 29 7b 68 5b 76 5d 3d 70 2e 76 61 6c 75 65 3b 62 72 65 61 6b 7d 69 66 28 67 3d 3d 3d 77 29 7b 68 5b 76 5d 3d 70 2e 76 61 6c 75 65 3b 62 72 65 61 6b 7d 69 66 28 6e 75 6c 6c 21 3d 71 26 26 67 3d 3d 3d 71 29 7b 68 5b 76 5d 3d 70 2e 76 61 6c 75 65 3b 0a 62 72 65 61 6b 7d 65 3d 77 3b 68 3d 71 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 24 7b 68 3f 60 65 69 74 68 65 72 20 22 24 7b 65 7d 22 20 4f 52 20 22 24 7b 68 7d 22 60 3a 60 22 24 7b 65 7d 22 60 7d 20 66 6f 72 20 6b 65 79 20 24 7b 4d 61 28 7b 44 3a 6b 2c 55 3a 6c 7d 29 7d 20 66 6f 75 6e Data Ascii: pop();break;case 1:var w=u.Ma;q=u.jb;if(null==g&&p.uc){h[v]=p.value;break}if(g===w){h[v]=p.value;break}if(null!=q&&g===q){h[v]=p.value;break}e=w;h=q;throw new TypeError(`Expected value ${h?`either "${e}" OR "${h}"`:`"${e}"`} for key ${Ma({D:k,U:l})} foun
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 6e 61 6d 65 2c 6b 3d 65 5b 68 5d 3b 73 77 69 74 63 68 28 66 2e 4c 29 7b 63 61 73 65 20 31 3a 74 68 69 73 5b 68 5d 3d 66 2e 76 61 6c 75 65 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6b 3f 66 2e 64 65 66 61 75 6c 74 3a 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 68 69 73 5b 68 5d 3d 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6b 3f 5b 5d 3a 6b 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6b 3f 6e 65 77 20 4d 61 70 3a 6b 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 6d 28 66 29 3b 7d 7d 7d 7d 64 2e 69 6e 69 74 3d 63 3b 64 2e 66 61 3d 62 2e 45 61 3f 28 65 2c 66 29 3d 3e 7b 74 68 72 6f 77 20 6e 65 77 20 54 Data Ascii: name,k=e[h];switch(f.L){case 1:this[h]=f.value;break;case 2:this[h]=null==k?f.default:k;break;case 3:this[h]=k;break;case 4:this[h]=null==k?[]:k;break;case 5:this[h]=null==k?new Map:k;break;default:throw new m(f);}}}}d.init=c;d.fa=b.Ea?(e,f)=>{throw new T
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 63 65 6f 66 20 4d 61 70 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 4d 61 70 20 66 6f 72 20 6b 65 79 20 22 24 7b 6b 7d 22 2c 20 66 6f 75 6e 64 3a 20 24 7b 47 28 6c 29 7d 20 24 7b 46 28 66 29 7d 60 29 3b 69 66 28 30 3d 3d 3d 6c 2e 73 69 7a 65 29 62 72 65 61 6b 3b 6b 3d 7b 7d 3b 71 3d 6e 75 6c 6c 3d 3d 3d 28 79 3d 67 2e 48 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 79 3f 76 6f 69 64 20 30 3a 79 2e 66 61 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 75 2c 70 5d 6f 66 20 6c 29 7b 69 66 28 74 79 70 65 6f 66 20 75 21 3d 3d 67 2e 6d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 24 7b 67 2e 6d 62 7d 20 6d 61 70 20 6b 65 79 2c 20 66 6f 75 6e 64 3a 20 24 7b 47 28 75 29 7d 20 24 7b Data Ascii: ceof Map))throw new TypeError(`Expected Map for key "${k}", found: ${G(l)} ${F(f)}`);if(0===l.size)break;k={};q=null===(y=g.H)\|\|void 0===y?void 0:y.fa;for(const [u,p]of l){if(typeof u!==g.mb)throw new TypeError(`Expected ${g.mb} map key, found: ${G(u)} ${
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 74 75 72 6e 7b 74 79 70 65 3a 32 2c 4a 61 3a 4b 61 28 67 2c 63 2e 49 61 29 2c 78 63 3a 68 2c 61 64 3a 6c 2c 52 64 3a 78 2c 77 63 3a 6b 2c 6e 64 3a 71 2c 74 63 3a 75 2c 77 62 3a 67 2c 47 63 3a 79 2c 6d 63 3a 7b 7d 2c 76 66 3a 77 7d 7d 29 2c 65 3d 28 67 2c 68 29 3d 3e 7b 63 6f 6e 73 74 20 7b 78 63 3a 6b 2c 61 64 3a 6c 7d 3d 64 28 29 2c 71 3d 67 5b 6b 5d 2c 77 3d 6c 2e 67 65 74 28 71 29 3b 69 66 28 21 77 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 55 6e 6b 6e 6f 77 6e 20 6f 6e 65 6f 66 20 64 65 73 65 72 69 61 6c 69 7a 65 64 20 63 61 73 65 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 71 29 7d 20 24 7b 46 28 68 29 7d 60 29 3b 0a 72 65 74 75 72 6e 20 77 2e 66 61 28 67 2c 68 29 7d 2c 66 3d 28 67 2c 68 29 3d 3e 7b 63 6f 6e 73 74 Data Ascii: turn{type:2,Ja:Ka(g,c.Ia),xc:h,ad:l,Rd:x,wc:k,nd:q,tc:u,wb:g,Gc:y,mc:{},vf:w}}),e=(g,h)=>{const {xc:k,ad:l}=d(),q=g[k],w=l.get(q);if(!w)throw new TypeError(`Unknown oneof deserialized case: ${JSON.stringify(q)} ${F(h)}`);return w.fa(g,h)},f=(g,h)=>{const

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49886	142.250.80.36	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:25 UTC	1979	OUT	GET /pagead/1p-conversion/804757079/?random=453093911&fst=1714711459753&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e44u1v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2Fdesign%2Fdesign-id%2Faccess-code%2Fview%3Futm_content%3DDAGEBBzq9KM%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor&tiba=Canva%20Design&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20267%3Bevent_id%3D1714712356152_171471202556267%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_doctype_id%3DTAGAkMpLE1g%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1&uip=191.96.227.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%2 [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:25 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:44:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:44:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49887	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:25 UTC	1393	OUT	GET /web/8dd0898976a6bb84.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D
2024-05-03 04:44:25 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:25 GMT Content-Type: text/javascript Content-Length: 5535 Connection: close CF-Ray: 87dd98847e866a55-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 8849 Cache-Control: public, max-age=31556926 ETag: "02c893c09a20692a2f51b14cffffd7e4" Expires: Sat, 03 May 2025 10:33:11 GMT Last-Modified: Fri, 03 May 2024 02:12:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 04 May 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: +QjXAdw7C0VVrglJQcM7piuCquVCMaJHePwzWelKhACRJplRamYGuNsC8cr9qrB01gmxKXzfdN8= x-amz-replication-status: COMPLETED x-amz-request-id: PZD709CPPJ0D1A45 x-amz-server-side-encryption: AES256 x-amz-version-id: jtHv9zO4HsULMvTDydaKfz0jp2tj0EnS X-Content-Type-Options: nosniff
2024-05-03 04:44:25 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 7a 53 36 62 6f 79 37 4b 58 71 44 49 67 32 73 46 4a 78 72 64 5a 51 75 5a 66 56 62 6f 67 71 45 58 6c 33 57 75 31 43 6e 61 4f 68 4e 51 51 25 32 42 73 74 49 44 51 53 4e 41 32 30 77 61 77 46 53 54 56 51 73 77 4d 68 73 6e 49 6f 51 65 65 6b 30 4d 6f 77 6e 44 56 42 67 70 75 6d 37 53 30 65 55 25 32 46 56 25 32 42 62 56 70 30 36 74 47 6b 25 32 42 45 64 70 37 64 71 7a 4d 4d 69 4e 55 44 6e 25 32 42 33 62 4e 55 77 7a 6a 66 79 41 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zS6boy7KXqDIg2sFJxrdZQuZfVbogqEXl3Wu1CnaOhNQQ%2BstIDQSNA20wawFSTVQswMhsnIoQeek0MownDVBgpum7S0eU%2FV%2BbVp06tGk%2BEdp7dqzMMiNUDn%2B3bNUwzjfyAU%3D"}],"group":"cf-nel","max_age":60
2024-05-03 04:44:25 UTC	1196	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 31 30 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 31 33 37 37 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 34 37 36 38 33 34 29 3b 73 65 6c 66 2e 5f 65 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5110],{/***/ 13778:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(476834);self._e4
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 69 64 20 30 3a 62 2e 73 75 62 74 6c 65 3b 69 66 28 64 29 72 65 74 75 72 6e 20 61 3d 28 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 2e 65 6e 63 6f 64 65 28 61 29 2c 61 3d 61 77 61 69 74 20 64 2e 64 69 67 65 73 74 28 7b 6e 61 6d 65 3a 22 53 48 41 2d 32 35 36 22 7d 2c 61 29 2c 41 72 72 61 79 2e 66 72 6f 6d 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 29 2e 6d 61 70 28 65 3d 3e 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 29 2e 6a 6f 69 6e 28 22 22 29 3b 64 3d 30 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 64 3d 4d 61 74 68 2e 69 6d 75 6c 28 33 31 2c 0a 64 29 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 29 3b 72 65 74 75 72 6e 20 64 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 5a Data Ascii: id 0:b.subtle;if(d)return a=(new TextEncoder).encode(a),a=await d.digest({name:"SHA-256"},a),Array.from(new Uint8Array(a)).map(e=>e.toString(16).padStart(2,"0")).join("");d=0;for(b=0;b<a.length;++b)d=Math.imul(31,d)+a.charCodeAt(b);return d.toString()},Z
2024-05-03 04:44:25 UTC	518	IN	Data Raw: 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 59 2c 22 72 65 61 64 77 72 69 74 65 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 59 29 3b 76 61 72 20 63 3d 61 77 61 69 74 20 61 2e 67 65 74 28 62 29 3b 63 3d 6e 65 77 20 6c 67 28 7b 6b 65 79 3a 62 2c 56 3a 63 3f 28 6e 75 6c 6c 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 56 29 2b 31 3a 31 7d 29 3b 61 77 61 69 74 20 61 2e 70 75 74 28 63 2c 62 29 7d 2c 6e 67 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 77 61 69 74 20 61 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5a 2c 22 72 65 61 64 77 72 69 74 65 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 5a 29 2e 70 75 74 28 63 2c 62 29 7d 2c 63 67 3d Data Ascii: c function(a,b){a=a.db.transaction(Y,"readwrite").objectStore(Y);var c=await a.get(b);c=new lg({key:b,V:c?(null===c\|\|void 0===c?void 0:c.V)+1:1});await a.put(c,b)},ng=async function(a,b,c){await a.db.transaction(Z,"readwrite").objectStore(Z).put(c,b)},cg=
2024-05-03 04:44:25 UTC	1369	IN	Data Raw: 3a 51 28 36 29 2c 64 73 6e 3a 51 28 37 29 7d 29 29 2c 59 66 3d 48 28 28 29 3d 3e 28 7b 74 61 67 73 3a 5f 5f 63 2e 42 28 31 2c 5f 5f 63 2e 43 63 29 2c 4e 61 3a 5f 5f 63 2e 52 28 32 29 2c 65 78 74 72 61 3a 5f 5f 63 2e 42 28 33 2c 5f 5f 63 2e 4d 29 7d 29 29 2c 6f 67 3d 48 28 28 29 3d 3e 28 7b 6b 65 79 3a 51 28 31 29 2c 63 6f 6e 74 65 78 74 3a 5f 5f 63 2e 7a 28 32 2c 59 66 29 2c 56 3a 4e 28 33 29 7d 29 29 3b 76 61 72 20 70 67 3d 48 28 28 29 3d 3e 28 7b 65 72 72 6f 72 3a 5f 5f 63 2e 7a 28 31 2c 24 66 29 2c 71 61 3a 4e 28 32 29 2c 72 61 3a 4e 28 33 29 2c 63 6f 6e 74 65 78 74 73 3a 5f 5f 63 2e 42 28 34 2c 6f 67 29 7d 29 29 3b 76 61 72 20 6c 67 3d 48 28 28 29 3d 3e 28 7b 6b 65 79 3a 51 28 31 29 2c 56 3a 4e 28 32 29 7d 29 29 3b 76 61 72 20 71 67 3d 48 28 28 29 3d Data Ascii: :Q(6),dsn:Q(7)})),Yf=H(()=>({tags:__c.B(1,__c.Cc),Na:__c.R(2),extra:__c.B(3,__c.M)})),og=H(()=>({key:Q(1),context:__c.z(2,Yf),V:N(3)}));var pg=H(()=>({error:__c.z(1,$f),qa:N(2),ra:N(3),contexts:__c.B(4,og)}));var lg=H(()=>({key:Q(1),V:N(2)}));var qg=H(()=
2024-05-03 04:44:25 UTC	1083	IN	Data Raw: 69 74 20 66 67 28 74 68 69 73 2c 65 2e 6b 65 79 29 7d 72 65 74 75 72 6e 20 64 7d 61 73 79 6e 63 20 65 6e 71 75 65 75 65 28 61 2c 0a 62 2c 63 2c 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 64 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 76 67 29 3b 63 6f 6e 73 74 20 65 3d 61 77 61 69 74 20 62 67 28 61 2c 62 2c 63 2c 64 29 3b 61 3d 5b 5d 3b 69 66 28 62 3d 61 77 61 69 74 20 67 67 28 74 68 69 73 2c 65 2e 58 61 29 29 7b 69 66 28 61 2e 70 75 73 68 28 2e 2e 2e 62 2e 63 6f 6e 74 65 78 74 73 29 2c 6a 67 28 74 68 69 73 2c 62 2e 72 61 29 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 7d 65 6c 73 65 7b 63 3d 61 77 61 69 74 20 74 68 69 73 2e 73 69 7a 65 28 29 3b 76 61 72 20 66 3b 64 3d 6e 75 6c 6c 21 3d 3d 28 Data Ascii: it fg(this,e.key)}return d}async enqueue(a,b,c,d){if(void 0===this.db)throw Error(vg);const e=await bg(a,b,c,d);a=[];if(b=await gg(this,e.Xa)){if(a.push(...b.contexts),jg(this,b.ra))return Promise.resolve(void 0)}else{c=await this.size();var f;d=null!==(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49888	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:29 UTC	2933	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 87 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: pHyFTOrvJH5BV93HqBf2m9qMCGSLphPjJ2QbSNmtSJz1hka-y9blXLXT9t3mV50EJDhB52XWoQ3NOFPWoY1OmPrbyy1qqo6wzYeld1u_xVyZKUVf X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:29 UTC	87	OUT	Data Raw: 7b 22 41 22 3a 32 2c 22 42 22 3a 22 61 62 32 62 33 39 63 39 2d 34 39 39 37 2d 34 30 63 31 2d 62 37 34 63 2d 63 61 32 39 64 63 34 39 61 31 31 33 22 2c 22 43 22 3a 22 44 41 47 45 42 42 7a 71 39 4b 4d 22 2c 22 45 22 3a 31 30 2e 30 39 36 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":2,"B":"ab2b39c9-4997-40c1-b74c-ca29dc49a113","C":"DAGEBBzq9KM","E":10.096,"G":"C"}
2024-05-03 04:44:29 UTC	905	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:29 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd989c1c2e8cc5-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd989c1c2e8cc5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FY5V8Ncl5jtPevw%2FaCVf8sdJ41%2FJItexb%2F3cgKFa23J4PnnUbk0h2pqjtnnMnaQZZsGLBGf%2BLoUWUWoYqkpPxvhQUnAeixZlrZsmMCuxLNdBOpqzFoggcMU97buXGG4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:29 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49889	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:29 UTC	2139	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:30 UTC	908	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:29 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd989f391b1889-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd989f391b1889 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lF0p0OUkP3f6AxBwbwUwVDmvMzbS2JplnRh%2B7eiuAaJkIKbuD23cS3cT9AGt00jP6K9CY%2BOOdwXkPluBGVd8ayIraOe3Z%2F8PUxtfN3DsRqS5SPat1Ya0ioqKAhquut0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:30 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49890	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:30 UTC	2933	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 86 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: pHyFTOrvJH5BV93HqBf2m9qMCGSLphPjJ2QbSNmtSJz1hka-y9blXLXT9t3mV50EJDhB52XWoQ3NOFPWoY1OmPrbyy1qqo6wzYeld1u_xVyZKUVf X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:30 UTC	86	OUT	Data Raw: 7b 22 41 22 3a 33 2c 22 42 22 3a 22 61 62 32 62 33 39 63 39 2d 34 39 39 37 2d 34 30 63 31 2d 62 37 34 63 2d 63 61 32 39 64 63 34 39 61 31 31 33 22 2c 22 43 22 3a 22 44 41 47 45 42 42 7a 71 39 4b 4d 22 2c 22 45 22 3a 31 2e 37 31 37 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":3,"B":"ab2b39c9-4997-40c1-b74c-ca29dc49a113","C":"DAGEBBzq9KM","E":1.717,"G":"C"}
2024-05-03 04:44:31 UTC	899	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:31 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98a59b7e42ee-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98a59b7e42ee X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBUDC3TwbegS4MTM54C5p%2FLUUfRIYmUqMpGMlpW97B6k436ljlWBms435EMxYb6Y1W4h7f1BYFdO78eKt%2BdZs5QHZKBkbfq4kL0ctCC15qZKe5UgHHlKjPfEwkzvp0c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:31 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49891	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:31 UTC	2139	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:31 UTC	912	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:31 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98a8b9ad7d08-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98a8b9ad7d08 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gd8y%2F2P4tttmemJpAcB2%2FrLfkclZjb3ijlkPqNYD4xYxIVJGtxx720gLLMVBhdAWAZMtc9s%2F25mBO76QFY8JX2kfyTRTnCqfX8w30eei7%2BiL3Iz45Vf7xAXF%2FWXVLXo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:31 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49892	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:33 UTC	2933	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 86 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: pHyFTOrvJH5BV93HqBf2m9qMCGSLphPjJ2QbSNmtSJz1hka-y9blXLXT9t3mV50EJDhB52XWoQ3NOFPWoY1OmPrbyy1qqo6wzYeld1u_xVyZKUVf X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:33 UTC	86	OUT	Data Raw: 7b 22 41 22 3a 34 2c 22 42 22 3a 22 61 62 32 62 33 39 63 39 2d 34 39 39 37 2d 34 30 63 31 2d 62 37 34 63 2d 63 61 32 39 64 63 34 39 61 31 31 33 22 2c 22 43 22 3a 22 44 41 47 45 42 42 7a 71 39 4b 4d 22 2c 22 45 22 3a 32 2e 35 31 34 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":4,"B":"ab2b39c9-4997-40c1-b74c-ca29dc49a113","C":"DAGEBBzq9KM","E":2.514,"G":"C"}
2024-05-03 04:44:33 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:33 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98b4cb5a42b8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98b4cb5a42b8 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s7lVoZTBcFKoq8ba3eXMPA0%2F%2BcorV2gBxVTC3l7LA9D2Bkez6hI8U5ctV5nsdJ1QnMmL6Hu2Emzg0iDXlnGtcX2ERznodmWSNzgwZ7qd%2FI10F3jwivgB1IpE17ttWz8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:33 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49893	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:33 UTC	2139	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:33 UTC	902	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:33 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98b7eac918ee-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98b7eac918ee X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6drZVw0cN3DiAy4Fu5MHRuh58PmQP1KSsinWpovGlk8xI15kMIEH9Yx25GYi9zNPXFnRXQ51RyhFTUp48zmEWK08OPsPjU1XT9WQY6Wdvf3U6O8T3hKGjO6oQnxSKQg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:33 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49894	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:35 UTC	2933	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 84 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: pHyFTOrvJH5BV93HqBf2m9qMCGSLphPjJ2QbSNmtSJz1hka-y9blXLXT9t3mV50EJDhB52XWoQ3NOFPWoY1OmPrbyy1qqo6wzYeld1u_xVyZKUVf X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:35 UTC	84	OUT	Data Raw: 7b 22 41 22 3a 35 2c 22 42 22 3a 22 61 62 32 62 33 39 63 39 2d 34 39 39 37 2d 34 30 63 31 2d 62 37 34 63 2d 63 61 32 39 64 63 34 39 61 31 31 33 22 2c 22 43 22 3a 22 44 41 47 45 42 42 7a 71 39 4b 4d 22 2c 22 45 22 3a 32 2e 33 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":5,"B":"ab2b39c9-4997-40c1-b74c-ca29dc49a113","C":"DAGEBBzq9KM","E":2.3,"G":"C"}
2024-05-03 04:44:35 UTC	905	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:35 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98c31edd43e8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98c31edd43e8 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jc%2BGBkXLtvddjBqdKg4i7aT%2B2EhyBLG131oppmI0edvDQm8Nw4bDjJLtnRAGoscfHfM8%2Bw842cs6K71r0%2BbX7yzbbaFD71b52vmXE8cLMEFf6%2BrI7DY0k9LeFA2vccc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:35 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49895	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:35 UTC	2544	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:35 UTC	1675	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 34 2e 34 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 34 2e 31 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 35 38 34 61 38 37 31 31 2d 39 37 34 32 2d 34 35 63 63 2d 39 63 33 31 2d 35 64 36 31 61 63 39 61 63 31 34 38 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 64 65 73 69 67 6e 2f 44 41 47 45 42 42 7a 71 39 4b 4d 2f 6a 76 6a 45 30 31 71 52 62 61 4f 79 57 68 57 79 44 4f 48 44 65 67 2f 76 69 65 77 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 64 65 73 69 67 6e 2f 44 41 47 45 42 42 7a 71 39 4b 4d 2f 6a 76 6a 45 30 31 71 52 62 61 4f 79 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2024.4.0","fl":"2024.4.1"},"pageloadId":"584a8711-9742-45cc-9c31-5d61ac9ac148","location":"https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view","landingPath":"/design/DAGEBBzq9KM/jvjE01qRbaOy
2024-05-03 04:44:35 UTC	370	IN	HTTP/1.1 204 No Content Date: Fri, 03 May 2024 04:44:35 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 87dd98c31c4f8c05-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49896	52.2.56.64	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:35 UTC	711	OUT	GET /WOo1se&design=DAGEBBzq9KM&accessRole=viewer&linkSource=document HTTP/1.1 Host: link.childedocushare.site Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:36 UTC	212	IN	HTTP/1.1 404 Not Found X-Content-Type-Options: nosniff X-Powered-By: Short.io/Edge Date: Fri, 03 May 2024 04:44:36 GMT Content-Type: text/html; charset=utf-8 Connection: close Transfer-Encoding: chunked
2024-05-03 04:44:36 UTC	974	IN	Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 69 6e 6b 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 Data Ascii: 800<!DOCTYPE html><html><head> <title>Link is not found</title> <link rel="preconnect" href="https://d2te5kruq0pvbl.cloudfront.net"> <meta name="viewport" content="width=device-width, initial-scale=1"/> <link rel="shortcut ic
2024-05-03 04:44:36 UTC	2372	IN	Data Raw: 74 3a 69 6e 68 65 72 69 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 2c 71 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b Data Ascii: t:inherit;vertical-align:baseline}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:'';
2024-05-03 04:44:36 UTC	538	IN	Data Raw: 72 61 75 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 45 38 31 36 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 31 36 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 Data Ascii: raud { color: #FE8161; font-weight: bold; } @media (max-width: 420px) { .content { width: calc(100% - 16px); margin: 8px; } } </style></head><body>
2024-05-03 04:44:36 UTC	768	IN	Data Raw: 67 20 63 6c 61 73 73 3d 22 6d 61 69 6e 5f 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 72 65 64 69 72 65 63 74 6f 72 2f 6c 69 6e 6b 2d 64 6f 65 73 2d 6e 6f 74 2d 65 78 69 73 74 2e 70 6e 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 72 65 64 69 72 65 63 74 6f 0d 0a 32 31 32 0d 0a 72 2f 6c 69 6e 6b 2d 64 6f 65 73 2d 6e 6f 74 2d 65 78 69 73 74 2e 70 6e Data Ascii: g class="main_image" src="https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png" srcset=" https://d2te5kruq0pvbl.cloudfront.net/redirecto212r/link-does-not-exist.pn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49898	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:36 UTC	2139	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:36 UTC	910	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:36 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98c62d63196c-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98c62d63196c X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vgOkiybIaWJF58ykP1bbWs5lFJ7USiu6Ldfp%2BqekHpaTIox7Kb8udEzRVG8cAzpp2qs5D%2FQ9mQHNa0%2F8bDtLBWRp8ym37fGsQOlzHvmvCeg1NsDoA4ML6fOxqU%2Bt7Ak%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:36 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49900	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:38 UTC	632	OUT	GET /redirector/link-does-not-exist.png HTTP/1.1 Host: d2te5kruq0pvbl.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://link.childedocushare.site/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:38 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 236198 Connection: close Date: Fri, 03 May 2024 04:44:39 GMT Last-Modified: Mon, 21 Aug 2023 10:33:06 GMT ETag: "bf335fb11417efec74606befd718a6d2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ad22d4e4410fd07809425488bf6e79be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: IJpwJ9LnObIfW1zd0BVhu0haJF5WAuK0eETd1K4k5fy60EbJ0N6kDQ== Vary: Origin
2024-05-03 04:44:38 UTC	7685	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 90 00 00 02 ac 08 06 00 00 00 9a 83 52 46 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 03 9a 3b 49 44 41 54 78 01 ec 9d 05 60 1c d7 d5 b6 df 99 e5 5d 31 b3 64 5b 16 98 62 c7 0e 93 c3 d8 34 69 9b af dc a6 94 94 31 6d be b2 53 e6 f6 2f 37 6d da a6 6d fa b5 49 39 0d 93 43 0e 98 49 96 0c 32 48 b2 98 56 cb 30 f3 9f 33 33 2b ad 65 d9 96 51 b2 7d 9e e4 fa ce cc 0e ed 68 77 ef 7d ef 39 f7 1c 40 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 Data Ascii: PNGIHDRRFpHYs%%IR$sRGBgAMAa;IDATx`]1d[b4i1mS/7mmI9CI2HV033+eQ}hw}9@AAAAAAAAAAAAAAAAAAAAAAA
2024-05-03 04:44:38 UTC	16384	IN	Data Raw: 6f 43 38 22 d8 05 94 9e e5 85 54 ee a0 d5 99 54 72 ad 80 26 9c 8f 8f 03 1b 95 5b 69 4d 58 34 b6 53 d9 4a 42 f2 57 b1 58 6c 25 59 ba bb 30 85 62 72 f1 e2 c5 d9 e1 70 98 ad a8 af b5 36 a5 72 5e 7e 69 cb 96 2d f2 99 98 46 7c f9 da 8f 64 29 88 be 08 33 dd ca 28 7d 51 3f 36 0f ef c1 40 34 60 58 0e 8f 05 76 d5 86 1c a7 8f d3 7c 18 29 3f aa 7c 05 fb 09 49 62 1d 7d 5a 56 85 9c 89 4f 7e e7 3f bf 9d d2 bc ae 82 70 aa 62 83 20 08 82 30 25 90 78 e4 9c 86 f7 50 e1 79 5e 46 ba 05 ea 20 ef a1 4e 3d 5b 8b be 43 1d f9 3b a9 23 bf 05 a7 20 24 1e df 48 d6 c8 bb 69 91 e7 b3 d9 ad cd 46 d4 59 7a ff 45 64 85 fc 1a 2d ff a3 af af 2f 00 e1 88 e8 e9 e9 09 f6 f6 f6 6e 99 3b 77 ee bd 43 43 43 8f 93 38 cc e7 74 18 f4 dc d9 92 5d 6e 05 37 b2 5b 85 2d e1 9c 6b f3 7f e8 f5 f7 16 15 15 Data Ascii: oC8"TTr&[iMX4SJBWXl%Y0brp6r^~i-F\|d)3(}Q?6@4`Xv\|)?\|Ib}ZVO~?pb 0%xPy^F N=[C;# $HiFYzEd-/n;wCCC8t]n7[-k
2024-05-03 04:44:38 UTC	16384	IN	Data Raw: 8f 09 ba 6e 08 37 0e 3f 8b 4a 12 ad 06 fc 0e 57 d1 b5 48 07 1a d6 46 23 8a 0f c6 c6 23 53 81 67 17 d3 35 2b d3 06 29 6d 3e 7a 32 ef 00 9e 7d 09 98 7f 36 59 29 b7 02 83 bd 3a da b6 c6 e1 4e 0e 0d e4 66 e7 3e 76 c1 92 e4 d6 dc 19 4f f9 b4 8c 37 7e ba e4 8c 20 04 41 10 84 53 8a 2f 5e 73 db ff d2 10 ea 1d 64 8d cc e9 8d 0c d9 5e ed db 86 88 66 8e 46 a6 ac 7e aa 15 05 f5 d2 e2 f9 c8 73 65 ee 73 7c 66 5e 36 ca eb 67 a0 fe dc 33 30 f7 a2 25 46 3b b7 f9 b9 55 86 70 74 fb 3c 78 f4 97 7f 45 c8 1f c0 d1 b2 66 60 07 b6 8f 74 e2 74 86 fa 03 9a 62 84 6f 37 86 89 6f a3 f2 67 12 b4 31 08 c2 49 8a 08 48 61 da a0 3f 77 e5 57 c8 74 f7 05 98 9f 4b f6 93 61 bb db c4 b3 33 48 2c 1a b9 1e 03 31 ec 72 d5 e2 05 12 8e 73 d0 8a 4d ee 59 e8 20 0b 5d 4c 35 93 2a 2b 96 1a 4b 92 32 2b Data Ascii: n7?JWHF##Sg5+)m>z2}6Y):Nf>vO7~ AS/^sd^fF~ses\|f^6g30%F;Upt<xEf`ttbo7og1IHa?wWtKa3H,1rsMY ]L5*+K2+
2024-05-03 04:44:38 UTC	16384	IN	Data Raw: 7f 45 e5 1d 9c 92 46 22 0a 0b c2 f1 45 46 19 85 69 c3 0f 2b cf 0f 7f b3 f3 a9 3f 78 93 a1 73 5e d3 f9 90 ab 28 d2 33 09 1f d1 31 da 3c 15 68 ca 9e 83 80 2d 03 db 32 66 23 a1 58 1f 6f d3 41 cb 5c 1e cd 13 39 86 4a eb 76 1a 4b 39 d3 53 84 cb 49 74 1a f1 f9 f3 c9 d0 31 b4 01 0a cf bb 64 2d 46 0d 99 31 07 31 41 fd 2e 07 89 3b 1b 9d db 97 63 8a bc 48 c8 b4 46 f2 6b 3e 12 7f b9 24 1a f3 2e a7 fd 72 c7 c6 f7 2b 67 03 4d ab 81 10 9d 2f 4c fb 7b d9 15 d6 6e 1e c3 3b b0 75 53 a3 f1 55 55 37 83 ef 70 86 10 23 22 eb 61 c5 b9 e2 70 b1 7f 26 0b e9 dd ca 8d ab 25 6d 87 70 4a 31 3c 3c 3c 83 f3 28 52 87 31 d5 6e c5 69 9d 45 65 07 59 00 57 e1 28 60 cb 21 9d cb 4d e7 aa a7 9a 7f 77 78 5e 65 29 ad 8f 58 6e aa 0e 2a 73 78 1d e6 fc 47 8e 5c ea b5 ac 20 a9 94 1e bc cc a9 3a ee Data Ascii: EF"EFi+?xs^(31<h-2f#XoA\9JvK9SIt1d-F11A.;cHFk>$.r+gM/L{n;uSUU7p#"ap&%mpJ1<<<(R1niEeYW(`!Mwx^e)Xn*sxG\ :
2024-05-03 04:44:38 UTC	3072	IN	Data Raw: e3 77 f6 54 22 af ba 49 fa ea f9 fe bf 84 45 fc da e5 4b 74 b5 61 e5 e9 cd 47 c8 96 6b ed 82 a5 8c be cf 3e 56 dc 10 ba 59 e6 99 2a 6d 8e 8c 89 a8 7c b6 f2 3b 22 03 91 ab 85 90 f2 fe 44 38 ff fc f2 e5 cb 25 90 5a 3b 07 c4 7e 06 0d 0d 8d 0b 12 9a 40 6a 68 68 28 c5 d1 e7 f3 6d 60 e7 e1 e5 5c 64 6f 12 3e 3b b2 9f 8c 12 0b 69 91 51 e9 7c be 32 31 57 92 a8 0d bf 90 20 0b ec 04 dc cb e5 bf 81 c6 99 c4 33 76 24 5b 9f ed cb 24 ef ea 37 34 37 37 3f de d9 d9 39 a7 f3 b0 65 76 bc eb 9d a9 e4 81 cf 08 71 14 e5 30 6b 38 e0 18 22 89 e9 a0 0a e5 cd a1 76 74 08 cf b5 2c c6 48 49 09 0a a3 80 ee f0 b7 22 ec 2c c6 1d a3 7f 80 2b ca 3e ea 21 63 52 a3 70 fb d2 f0 fb 52 d3 f6 2f 84 04 85 59 bf c3 4a 7a 6e f2 33 13 1e 2f 0e 37 d4 15 ec a1 54 31 93 64 2a 99 8e c7 7d 89 b1 11 d5 Data Ascii: wT"IEKtaGk>VYm\|;"D8%Z;~@jhh(m`\do>;iQ\|21W 3v$[$7477?9evq0k8"vt,HI",+>!cRpR/YJzn3/7T1d}
2024-05-03 04:44:38 UTC	16384	IN	Data Raw: 95 68 ac 91 b1 d8 bb 9d 70 7c d8 64 d5 5c 42 22 f2 d4 22 c2 e7 17 30 55 8b 30 5a 4c cb a7 31 ff 8b c3 fd d2 a3 9b 11 f5 2d 40 c4 b4 0c 39 33 54 db 8a 48 e4 54 e2 0f e9 97 d7 b1 ef 58 26 cd 8b 8f 3f 2b 44 84 eb 32 a4 3a 09 92 20 6f 93 3a c6 4b d2 57 33 34 a2 94 44 51 b8 d2 12 40 87 e4 29 e1 79 e1 94 1b 13 c5 c5 46 5f 43 1d 55 48 49 34 69 d5 58 d4 bf 89 48 c6 d2 d6 f2 a1 4c 4f 00 93 44 8a 25 95 33 e0 34 94 e7 9f 12 51 13 59 07 7c ce 9c 9a 86 dc d9 7c aa 46 bc 88 85 ea d4 b9 2d 73 72 24 49 bc 84 20 0a 79 14 22 e9 65 91 c1 12 d5 e1 e6 3f 21 ba ec 84 23 47 e2 99 f2 78 31 50 57 8b ae e6 f9 93 e7 59 1e 3f 80 a5 09 2b 3d 61 8a 63 2b 4e 92 c7 94 e1 c6 2e 63 81 0a 3e 54 36 36 8e be aa 8a 17 ad cf fe d4 98 f2 85 2c 23 89 2c 71 fa 10 90 71 1a 51 6e d3 f2 15 cd 59 77 Data Ascii: hp\|d\B""0U0ZL1-@93THTX&?+D2: o:KW34DQ@)yF_CUHI4iXHLOD%34QY\|\|F-sr$I y"e?!#Gx1PWY?+=ac+N.c>T66,#,qqQnYw
2024-05-03 04:44:38 UTC	16384	IN	Data Raw: 04 3b ee 32 72 2d 91 fb 3e c1 17 fc 03 b0 5e f6 8d f1 78 fc ff 76 76 76 8e 9d e8 79 48 34 bf b8 7c f9 f2 32 9e e7 63 b0 42 b2 4b 4f cf c7 e9 47 38 d5 04 f2 3c a0 bc bc bc 6f 60 60 80 3d 6c bc 96 cf 45 94 e5 11 3e 0f f1 29 0c 71 fa 4e 4e e7 0c 81 94 54 03 ec 48 6c 67 79 79 b6 40 19 64 3d 2b 58 56 e2 24 09 64 1e ae 7f 7b e0 3e 7c f0 96 91 89 64 fc b5 91 68 e4 b5 2f 44 1d 25 e5 43 ae 67 1f 2a 23 11 ec a9 ad 41 77 69 08 49 d7 f4 9f 97 bc e2 94 21 0f 5f 93 3b aa 02 ea 3c e1 6c 56 ca 93 f2 75 23 1d 8a b9 5d f0 39 9c 78 a3 a3 02 f3 86 06 39 34 43 9e d0 c4 fe 7d 30 c4 ee 51 b7 45 0e 65 59 d4 b5 4c 4a ec 77 d9 db 27 31 94 7c 91 d1 71 92 26 12 c7 91 41 cb 94 53 3d 36 7e 25 87 7b ac f9 0a 8e cf 3c 75 2f b0 72 3d 1c d1 31 18 bb 9e e4 fe 31 18 1e 07 56 52 21 1d 71 0d Data Ascii: ;2r->^xvvvyH4\|2cBKOG8<o``=lE>)qNNTHlgyy@d=+XV$d{>\|dh/D%Cg*#AwiI!_;<lVu#]9x94C}0QEeYLJw'1\|q&AS=6~%{<u/r=11VR!q
2024-05-03 04:44:38 UTC	2048	IN	Data Raw: 36 fa 16 14 74 5e d9 5e 5f c5 f6 da 8b e9 d7 e1 18 19 19 59 c2 ce f9 7b e4 5a ec f0 f2 2f f8 d9 87 d3 61 3c 76 dd 35 3c 61 9a 84 d1 c0 ea ee 1e 3c bc 68 01 96 0c 0c 2a 13 56 f1 75 dc 5f 59 a9 08 d5 f2 be 01 cb 57 8e dd e8 22 3b cf a1 a8 91 8d a3 54 ae 76 8b 08 63 a8 b4 1a 12 74 45 82 cf 18 05 02 68 de 77 4e e8 4e 9c 04 b3 b3 be 1e cb 0e 1e 52 e9 3a 64 3f f1 1d ac 77 a5 90 2e 71 23 5d ee 84 49 35 ce 59 9c b5 cc 51 45 c1 0b 92 cc a5 02 38 5a 52 85 62 67 04 5e aa 62 91 4c 05 3f a7 85 04 cf 87 ea 64 06 4e 6f 0a 46 72 3b 72 0b 4a 61 64 bc 30 1a f9 1a f0 f2 91 4e 70 4c 28 97 56 54 c4 97 db 8f c9 38 a5 0d 56 cd f2 c2 a5 a1 42 0a 59 c9 31 0c 3b db 44 49 2e 62 f1 5e 11 30 c9 e5 e2 54 e2 bc 66 4a 05 9d b1 88 a3 f0 52 2a 71 24 7d 31 87 9f b7 c6 a9 b6 17 67 63 a2 d5 Data Ascii: 6t^^_Y{Z/a<v5<a<hVu_YW";TvctEhwNNR:d?w.q#]I5YQE8ZRbg^bL?dNoFr;rJad0NpL(VT8VBY1;DI.b^0TfJRq$}1gc
2024-05-03 04:44:38 UTC	16384	IN	Data Raw: e1 92 b4 05 63 63 ca a2 cf 49 25 72 3d ac 41 11 c9 7d b7 8d 75 fd c8 f1 ce c3 ed 8d b0 23 af bc 98 f9 aa da 67 7e 1a d9 46 03 29 b7 0b e3 7e 1f 62 11 17 46 dd 01 8c f6 50 55 2c 31 11 a8 4a 23 e0 4a 62 1b 4f 7b 8b 8f 23 ea a9 3e f6 e0 63 30 13 fd 70 a4 f7 01 13 54 e4 fa 85 7b e7 4d 35 8d 02 93 d6 bc 92 66 af 37 ac 34 20 96 b7 21 14 69 71 92 58 8a fa 19 a4 b4 28 6a a3 c3 9c 4e 94 d4 43 c8 2b 81 d3 2e d4 3c 96 7b 99 05 1f 5b 38 5f b8 6d ea 04 d6 ca fc 79 8d 29 d2 9a 3f d0 80 39 49 c6 94 ff a0 ba c6 bc 8a 67 4e af 8a 31 35 9d fa bc 42 45 d1 3e c6 28 d8 e1 78 e4 d0 30 66 e7 95 33 aa 7e 0c 49 9c 65 b7 e9 0b 16 41 76 d8 27 97 a9 61 07 38 f2 51 45 94 e7 31 59 63 95 af d2 22 8e 2e 75 dd e6 8c 73 4f 55 30 9f db d2 51 a0 e1 16 28 e0 42 b8 5a 3b 3b 3b 85 fc 15 9a 5d Data Ascii: ccI%r=A}u#g~F)~bFPU,1J#JbO{#>c0pT{M5f74 !iqX(jNC+.<{[8_my)?9IgN15BE>(x0f3~IeAv'a8QE1Yc".usOU0Q(BZ;;;]
2024-05-03 04:44:38 UTC	2804	IN	Data Raw: 3b d3 4c 35 47 95 d6 2f cd 36 fe 0b 3b 21 0f 34 6e 96 9d d1 26 e9 92 a0 2a 48 79 58 d6 65 85 d4 ae a3 ec 0e 39 60 f1 19 82 a9 3b f7 b1 df 0e fa 7e 76 cb cc 77 1c 56 24 5f 34 6a 3c 40 d7 6b 94 eb 8b 38 4f 05 a5 a7 a7 47 45 65 9d 3e 7d ba 14 15 15 89 37 10 14 5d 58 b1 cd b4 60 30 48 05 e6 8f c3 3d cf 92 25 4b f2 da da da 3e 86 49 9e 87 0d 32 aa 28 62 60 7e bc 27 e2 f1 f8 03 62 60 70 02 63 dd ba 75 f5 f8 f6 7f 11 93 ff 8e e1 9d 7a b1 76 8d 90 66 bc 1b 4f e2 dd d8 88 f1 e6 ea ea 6a 13 08 ca e0 88 61 8c 67 83 b7 2c 98 d6 a0 a4 a4 e4 34 ba f4 61 60 1f 96 4f 61 bc 10 e3 b9 ba 15 bb 05 06 49 09 3e b6 e5 b0 c5 4d 20 1d 83 93 0d f6 f6 ed db eb a0 36 32 02 df bf a2 4c 17 60 a8 15 c7 7d 75 13 86 cf a3 fc a7 8a 8b 8b 7f 11 8b c5 18 aa fd 7d 18 18 85 58 89 5b 4c 47 80 Data Ascii: ;L5G/6;!4n&*HyXe9`;~vwV$_4j<@k8OGEe>}7]X`0H=%K>I2(b`~'b`pcuzvfOjag,4a`OaI>M 62L`}u}X[LG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49901	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:38 UTC	1568	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 1715 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; _ga=GA1.1.1208532661.1714711458; _ga_EPWEMH6717=GS1.1.1714711457.1.0.1714711457.0.0.2083150505; FPID=FPID2.2.9g0FhC8MK7KWDubNG3el37ZZpWRmE3aJ99o07iD%2FkRE%3D.1714711458; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22bcaa9303-af11-d8e9-743d-8ccff6ba3c5b%22%2C%22c%22%3A1714711463028%2C%22l%22%3A1714711463028%7D; FPLC=m%2BCRiMJe5BKVyiQRVFq8%2FJmCvHwVKFEh8RvlV4pj4eoiw8RHSxEK3O4nrXjTTotJ8D6KQyzZ0o3RxTVgS%2FAG8GwOFN4UhaHGJTl82PmJJFr20sUfEoFSO8jFbQKvSQ%3D%3D
2024-05-03 04:44:38 UTC	1715	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"design_viewer"}},{"key":"service.name","value":{"stringValue":"design_viewer \| telemetry.user_operation"}}
2024-05-03 04:44:38 UTC	865	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:38 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 87dd98d3a9425e71-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C9DxYYiyhcqAoAJBkns%2BO%2BzqF2iUxzL%2Flli6PENZBu82HWcObyMmFT%2Fq3vxLAwLBSxPO9uLUQgZAGpf31V715s2C6VDPZF6%2Bmqy%2FSuOiNf093VLYW50LsmmV1ThEPmhtZWo%2F74I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:38 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49902	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:38 UTC	2914	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 4237 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 2f0e5d2 X-Csrf-Token: kVARhNyGYpvQD_UQDm7C9qJTX_5cEUygsOXHd7ZTcI5C0e0wholGm7LYOyOXifHrt8-p_xPSN784KxH544amabVAtu0 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240501-22 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:38 UTC	4237	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 31 64 63 30 33 39 38 39 2d 66 34 63 36 2d 34 39 62 33 2d 62 61 62 38 2d 36 34 36 63 63 65 34 65 33 66 61 38 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 33 34 2e 32 39 36 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 33 36 2e 38 30 39 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 58 4c 49 4e 4f 22 3a 22 48 22 2c 22 50 49 4f 54 49 22 3a 22 42 22 2c 22 50 49 4e 43 4f 22 3a 22 42 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 46 41 54 48 50 22 3a 22 42 22 2c 22 45 48 50 4c 49 22 3a 22 42 22 2c 22 45 41 57 46 47 22 3a 22 41 22 2c 22 44 57 43 54 41 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"1dc03989-f4c6-49b3-bab8-646cce4e3fa8","E":"2024-05-03T04:44:34.296Z","F":"2024-05-03T04:44:36.809Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"XLINO":"H","PIOTI":"B","PINCO":"B","OCPS":"B","FATHP":"B","EHPLI":"B","EAWFG":"A","DWCTA"
2024-05-03 04:44:38 UTC	899	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:38 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98d3aaa20ca8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98d3aaa20ca8 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xgQDV8ndRLKnzHaJaEF7UUj8hs9El5MlWMYzjHWbkR8oQVdYGKOlt0PCWndRoSQk0Equl3PKHNV3N3KkR8hfVJWpwIDOoFrfZyJj6vKeUFG9xQjXyzb24Gs%2B%2B4tAYjc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:38 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-05-03 04:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49904	104.16.102.112	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:38 UTC	2129	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=0a01a614-c7b3-4262-a36c-484f53a587ba; CPA=cnvanWgclcSBpOo1c6B9hgHjpbL14B-jVJnk82wiv9sO0eyDdUpG-rwr6CyxQNIDzroPtLVbvXraGlFFL9S7h8l-b8csimlaBnWxAJR6e7qTLWkm2d7Inu3hwPlaVugMn5cuKA81QhR6rv8bH2kxxwHqOldGoWGzOAisYVgBuivxI3hMzFYJgVaaz23il3EQF6THXB-6QAb2IhdMvn-mOlHnGF26505vzcyiFKL_kRrS_GvXcIAxKcwyGJkkYtaQOjJ7IJMRbOBu6QVzeNddT49FHbKGaKHjil8x7lS-qX9OrRN1DNZNnU4s6voep7ideteHhplBN5QmdZerkKG8aaLp2vriarQfK7-0IGa5zaQKmkYQjEAsBc9b381f5; CCK=885eP5hMz6pXdJqxmymJIg; __cf_bm=AwFzKliha0dk.sBowU5gnGtT1UgIv6nekQd_e0_iefE-1714711440-1.0.1.1-87WZBG7ck16tlVqFjGJWgkWW91DWpODE0_PLFflZ8wMfPAsIO.WwmQEukWjjtIXAF7oBYotEv6KgmoJ2k4uy7g; _cfuvid=6Fno2PQ7MtSM9k325a6EA7DPygUXA8cEWo8tgi7PdCo-1714711440448-0.0.1.1-604800000; cf_clearance=Xs8E9_HRLsdehk8qPt7x7j.cS8jE0poavbyOZ1M03js-1714711447-1.0.1.1-HJd0jDmh3aPOdrv79pytmGthiq2YkTKDH3O4GyqBT2Hs88_fn2u3uBpC7Jdg81oQwy9umjMfd6Bf0PGvyIK6KQ; __cfruid=2a3c494091ed119680da73378e370a94915be0be-1714711449; ASI=01HWYC8K74HAACNR330JPC20F3; gtm_fpc_engagement_event={"url":"https://www.canva.com/de [TRUNCATED]
2024-05-03 04:44:38 UTC	920	IN	HTTP/1.1 404 Not Found Date: Fri, 03 May 2024 04:44:38 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87dd98d708af42d2-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 87dd98d708af42d2 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fbt03sJUB0MakZ4szsH38FZwFvY6Hb8DsRHNkFDc%2BTm3JoHLJGC0Cq5H4g2M1RRggN3UiAK0xtLbcZU4GB1KUp2bdxJRizJhwKxqo6%2FKNmB2FgZpikIinFRN6LfKwfc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-03 04:44:38 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-05-03 04:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49907	18.164.96.95	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:39 UTC	387	OUT	GET /redirector/link-does-not-exist.png HTTP/1.1 Host: d2te5kruq0pvbl.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:39 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 236198 Connection: close Date: Fri, 03 May 2024 04:44:40 GMT Last-Modified: Mon, 21 Aug 2023 10:33:06 GMT ETag: "bf335fb11417efec74606befd718a6d2" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d8e93128b8c3fa45992684bc1f50eeb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XKcFEMGnojBDntvy2zTbv8xfma3dxrVJb6rGHmX7J_5CvaI3oPSwAg== Vary: Origin
2024-05-03 04:44:39 UTC	15853	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 90 00 00 02 ac 08 06 00 00 00 9a 83 52 46 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 03 9a 3b 49 44 41 54 78 01 ec 9d 05 60 1c d7 d5 b6 df 99 e5 5d 31 b3 64 5b 16 98 62 c7 0e 93 c3 d8 34 69 9b af dc a6 94 94 31 6d be b2 53 e6 f6 2f 37 6d da a6 6d fa b5 49 39 0d 93 43 0e 98 49 96 0c 32 48 b2 98 56 cb 30 f3 9f 33 33 2b ad 65 d9 96 51 b2 7d 9e e4 fa ce cc 0e ed 68 77 ef 7d ef 39 f7 1c 40 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 Data Ascii: PNGIHDRRFpHYs%%IR$sRGBgAMAa;IDATx`]1d[b4i1mS/7mmI9CI2HV033+eQ}hw}9@AAAAAAAAAAAAAAAAAAAAAAA
2024-05-03 04:44:39 UTC	16384	IN	Data Raw: 53 92 5c 39 3e 94 5f b5 10 6f 7a f3 9b a8 bc 19 cd 2d cd c6 f6 94 88 e4 1c 8f cc d1 b8 b4 1e 6f 74 2b 55 c7 d1 c2 2e a6 4c b1 3b 1b e7 17 36 4e ea 98 86 f3 16 e2 dc 9b af 84 bf 6f 00 b9 24 1c cb 66 57 1b a1 6f 47 ef 27 55 a7 59 72 43 c3 23 d8 bd 79 3b 4a 66 56 1a 56 c9 e6 57 37 e0 1f cf 3d 82 67 5f 7c 7e f4 39 2b 66 7e 0f b2 4d ea a9 37 c6 27 e0 39 90 77 35 35 35 fd 00 e2 ca 2a 4c 33 44 40 0a a7 15 fa b2 65 2a d4 5d 73 e9 d7 ba 18 36 e5 73 b8 28 b9 04 39 c8 40 ea bb a0 23 49 4b 66 0b ca 71 06 5e 50 75 b8 69 6b 0e 09 ca 11 98 02 d1 49 f5 7c d2 7f 79 a3 bf e7 ba f5 af 86 88 62 c3 b3 24 20 79 f0 95 5f b7 d3 fe c3 dc 18 db 7a 6c f6 c4 df 07 e7 67 dc de 55 9b b7 7d 8b ab e6 6d 45 f1 e1 ee 8b 66 7d 7c 0f 04 41 10 04 e1 d0 28 77 5d 73 db bd d4 1a bd 95 f4 c9 fe Data Ascii: S\9>_oz-ot+U.L;6No$fWoG'UYrC#y;JfVVW7=g_\|~9+f~M7'9w555L3D@e]s6s(9@#IKfq^PuikI\|yb$ y_zlgU}mEf}\|A(w]s
2024-05-03 04:44:39 UTC	16384	IN	Data Raw: 96 60 57 90 f6 d1 0e e8 5a ab 93 70 4c d2 f1 ff a0 f2 7a 5a b6 59 db fe 4d eb ff 0f 82 20 ec 87 58 20 85 29 e1 47 6f 2d 38 3b 2f 36 70 3d cc cf 60 12 66 6e c2 c9 7d 1e 55 1b 9e da 9c c0 3f 9e ed 47 30 ac 19 16 47 c6 66 e9 2e 56 a2 1a bb be e8 1c 7b c7 0e c5 4e 23 9c 34 6a e9 2b ca 43 e3 f5 e7 e1 bd 6f af c3 9d d7 7b 51 98 6d 37 5c 57 ed b6 23 88 ca c6 f3 1d 3b 4d d7 51 3d aa 20 5e 64 c7 16 cc c4 f3 73 ce c0 86 d9 b5 e8 cd cd 85 46 62 55 57 70 40 f1 68 40 75 81 cd 83 eb 32 6a b0 d8 53 8c 42 9b 77 82 8b d1 01 9d 7f a2 6b a6 05 4f e5 f7 ea b7 4e ce 6d 39 e7 bc ac 80 e9 52 cb 45 33 83 e9 28 bc 9c 1b 50 91 15 d5 31 e2 d8 89 a0 72 df 5d cf ac 95 bc 55 82 20 08 c2 01 59 b1 6d 65 e0 82 a2 79 2b a2 e1 58 56 22 1a 29 75 b9 5d 99 c5 05 85 08 90 c5 2f 12 8b 21 a9 58 Data Ascii: `WZpLzZYM X )Go-8;/6p=`fn}U?G0Gf.V{N#4j+Co{Qm7\W#;MQ= ^dsFbUWp@h@u2jSBwkONm9RE3(P1r]U Ymey+XV")u]/!X
2024-05-03 04:44:39 UTC	16384	IN	Data Raw: ed de bd fb ef 38 fb 2e 58 66 b4 fb d9 b6 bf c3 ef 43 c7 e0 e0 60 0a 1a 1a 1a 1a 1a 1a e7 01 da 84 55 43 43 63 ce 60 ff fe fd 83 24 84 e2 07 79 1b 89 e4 67 b8 aa 9b e5 52 96 b7 92 24 be 49 4c 54 3f f5 a9 4f ed 21 49 f4 b2 23 3d d4 4d 54 56 56 2e e0 fe ee ef 7d ef 7b 4e ae 17 55 12 ec f0 83 e4 d1 95 c9 64 5a d8 d9 6e e1 be 1b 59 76 2d 5d ba f4 09 9e ab 3f 9b cd 7e db e5 72 0d ca 67 b2 83 ae 3b e2 1a 0a 6c 5f db 4c 0b 61 ce 7b 39 8d b3 0d d5 73 d3 00 ce 03 7e f0 83 1f c8 6f f4 ab 58 0f 3f eb 53 c2 f9 1c a7 3f 62 db 4e 42 43 e3 3c 62 e3 c6 8d 2e 0e d8 19 5b b7 6e 4d 43 43 43 e3 a2 83 01 0d 0d 0d 8d 39 06 c9 bd 97 4c 26 5b 49 fa de cc c5 0f c1 1a ec 4a b3 23 7d b4 ad ad 2d f6 da d7 be 76 d1 cd 37 df 2c 29 3e 0c ae 53 c1 75 e2 f1 b8 f8 b1 c1 eb f5 1a 24 a2 d8 Data Ascii: 8.XfC`UCCc`$ygR$ILT?O!I#=MTVV.}{NUdZnYv-]?~rg;l_La{9s~oX?S?bNBC<b.[nMCCC9L&[IJ#}-v7,)>Su$
2024-05-03 04:44:39 UTC	16384	IN	Data Raw: 00 d2 fd a3 4a 81 dc 39 7a 18 09 aa a8 2e 87 13 a9 9c 09 4f 69 11 6a ae 5d 03 a7 9d 6a 24 1f 18 c9 4b c2 26 49 d1 33 54 47 45 6d f4 52 ad 73 3a 4e 3d 55 73 21 f7 9d bd fa 26 49 b4 c9 cf 70 28 1f d2 f6 e6 f9 68 ea eb c7 bc 9e 5e 8c 16 17 a1 a7 ba fa 98 23 dc 7c 06 12 38 a7 28 17 9f 1e 51 97 1f 32 5a 1a 42 cf 92 2a cc 7f ba 0f ee 54 7a 52 5f 6a 70 05 51 ea 14 1f 4d 3e 63 37 b7 95 86 ad d8 ce 02 ea e9 26 55 68 b3 88 44 92 ed 63 c2 15 40 9f ab cc dc 16 68 db e3 cb a5 fe f7 f2 62 43 08 ce ef 71 fe 20 03 4d eb cc 82 08 b5 62 ae c9 f2 8d fd fb f7 9f 37 62 7b 12 90 3c b2 21 b6 ab 0d c8 67 60 35 8c ad bb 76 ed fa 68 e1 3e f6 36 51 5b 6b b8 6f 84 6d 33 90 4e a7 55 24 2a 12 b3 58 24 12 89 75 77 77 27 17 2c 58 50 7c f0 e0 c1 09 99 c6 e3 f1 7f 0e 06 83 ae 54 2a e5 0c Data Ascii: J9z.Oij]j$K&I3TGEmRs:N=Us!&Ip(h^#\|8(Q2ZBTzR_jpQM>c7&UhDc@hbCq Mb7b{<!g`5vh>6Q[kom3NU$X$uww',XP\|T*
2024-05-03 04:44:39 UTC	16384	IN	Data Raw: bf 8e d3 c0 6b 5e f3 1a 27 df df 62 a2 5a 91 0f 40 22 ea 1e 07 5a 92 d5 d5 d5 62 c2 ba cc ce a3 2a 83 44 e7 2d b9 a2 28 51 b1 58 4c a2 7e e7 07 71 f2 ef 9e 2e de 87 ff 3a d9 60 2b 1a 73 0f f2 3b c2 36 26 2a a4 c3 1e 90 ab 65 7b f7 9f e8 f1 a2 40 b3 dd ca 8b 51 bd f0 78 7c 8f 0c 6c 72 76 37 34 34 ce 22 34 81 d4 d0 78 11 f0 87 5a 24 17 29 25 36 69 18 61 e7 e6 b4 fd 1e 05 8b 17 2f 6e e3 cb fe 6d c8 87 fb b0 3a 33 3b 39 fd 87 17 4a 20 ac 71 ee 91 4e a7 1f 62 5b f8 2b 3e fb 4f f2 f9 b8 ec 5c 9d ef 0c 85 42 d7 70 fa c7 38 be 81 e1 39 01 3b 1d 92 af 31 5d 5e 5e 9e 1b 1c 1c 74 92 00 66 25 cd 1d 07 22 42 ac f7 46 9c 44 60 06 01 95 97 42 13 3f 35 b8 71 c9 25 97 c8 39 1d f6 b2 61 13 49 e3 85 ce 23 c1 51 ae 74 e6 10 34 a9 da 99 31 cb 0f 6e 52 c8 2d 24 82 12 d1 d3 3e Data Ascii: k^'bZ@"ZbD-(QXL~q.:`+s;6&e{@Qx\|lrv744"4xZ$)%6ia/nm:3;9J qNb[+>O\Bp89;1]^^tf%"BFD`B?5q%9aI#Qt41nR-$>
2024-05-03 04:44:39 UTC	16384	IN	Data Raw: db d5 ff 01 fb 40 8e 34 2c 9f e3 74 9b e0 b3 d5 d7 c3 67 90 87 ff b9 2e d9 01 62 6c 4b 54 52 d9 cf d1 71 64 d6 2e d8 b9 8e cb 3e c5 ec 5b 8c 6d bf a8 dd 58 f1 c7 4a 4b 5e 5e 9e 5c 74 d1 45 bb 50 ee 63 cc 09 89 77 a3 96 f9 24 b1 dd 31 eb 83 c8 bc 8f 18 7d d1 b3 88 17 4e e5 b3 0b e4 f1 0f 62 60 70 94 40 39 8a 8b 81 c1 9b 00 43 20 0d 0c b2 b0 7e fd fa 7f 83 a1 ff 47 7c 98 8f 99 5b 93 c1 df 24 68 0d d3 bd 8e 81 3b ae d0 d1 51 19 48 83 11 22 df d5 d2 d2 42 52 d9 26 23 08 18 cb 3d 49 92 13 cb 6a e0 ec 8e 1d 3b e6 c0 a8 b5 ce 3f ff fc ba 6f 7f fb db 2d 83 ed 5b 5f 5f 4f 05 de cd 59 97 21 8d 43 e6 81 54 d5 4a 16 43 ec a3 34 72 d0 e4 10 24 c5 4e 07 c5 4a e6 63 31 88 44 0a 84 aa 87 c2 50 8a 31 32 21 af 45 74 d8 21 34 b2 8f 3d 47 a4 b0 16 6c 26 e6 10 c8 44 92 21 4c Data Ascii: @4,tg.blKTRqd.>[mXJK^^\tEPcw$1}Nb`p@9C ~G\|[$h;QH"BR&#=Ij;?o-[__OY!CTJC4r$NJc1DP12!Et!4=Gl&D!L
2024-05-03 04:44:39 UTC	4561	IN	Data Raw: d7 1d cc 4d 57 53 53 b3 e6 e0 c1 83 17 60 d9 a5 98 67 12 74 7e bb b7 61 9e 65 84 e4 ae 1d e3 b6 2d 5b b6 9c 76 c3 0d 37 fc fb 81 03 07 c2 68 20 14 ba b3 52 85 fc d2 97 be 64 83 78 da 3a 82 2a 4f 71 08 ef c0 99 20 a1 3b bd e7 9d 35 6b d6 c7 b0 fe 47 d8 ee 19 8c 2f 17 e7 fd e0 1f 42 9f e3 7f d8 b0 61 c3 ed 62 60 60 60 60 90 13 86 40 1a 9c f4 60 ff 15 8c fe c0 b4 04 18 62 4c d9 91 48 24 de b3 75 eb d6 57 b9 1e ea e4 42 10 46 e6 7e ac 14 c7 32 63 44 be 3f c1 40 f8 94 f7 38 50 22 37 62 34 96 ae 7c 38 4e 08 c3 17 40 32 7f 27 06 06 6f 01 e0 3d b9 1c 46 fa 76 18 e2 8b 51 b6 c7 c0 e0 7e 14 d3 9b f0 1e 50 6e 3b 26 2a 4b 5b 5b 1b 55 fd 72 bc 8f 01 18 f1 09 aa 45 f1 78 5c a5 46 08 85 42 e9 68 34 9a 86 f1 1f c3 fb 59 81 f5 f3 48 32 7b 24 ed 5f d9 fa cc 65 56 72 cf 3b Data Ascii: MWSS`gt~ae-[v7h Rdx:Oq ;5kG/Bab````@`bLH$uWBF~2cD?@8P"7b4\|8N@2'o=FvQ~Pn;&K[[UrEx\FBh4YH2{$_eVr;
2024-05-03 04:44:39 UTC	16384	IN	Data Raw: 1b f6 e1 73 01 cf 79 3d 62 a7 52 22 39 a4 9d 48 a8 24 91 01 30 a8 71 1f 12 39 88 b6 a3 a7 37 a8 be 8b 0a e3 b4 3b 6b 83 e5 38 50 12 14 2e 9b 86 76 ce 71 2e e6 cd fa 3c 58 c3 3b 3f 5d 4a 8b 4a 18 ce c6 e1 da 87 03 94 97 d3 96 5e 88 e1 02 e5 7a 7b eb cd 37 cb 4d 37 df 22 9b 77 1c 52 67 2d 2f 2b 93 df ff e2 2e b9 f2 5d 3d c9 e9 d3 a7 fb e7 cc 99 43 37 68 a6 69 a1 ab 34 23 de f8 5c 25 bb cf 85 6b d8 bd e9 67 dc 69 96 e1 a4 5b 1e dc 75 ee e6 ae aa 89 81 df e8 22 92 3e 0c 6b 51 66 0e 6a 97 69 9e b3 5e 9c c6 bf 71 d8 8e fd 24 b7 e3 1a a8 34 ba 92 f5 2a 4c 8f 11 a5 29 cb c6 9e 9e 9e 9b f3 f2 f2 ae c2 31 1e 5f b4 68 51 b7 18 18 18 18 18 0c 0b c6 85 d5 e0 a4 c4 ec d9 b3 df 89 d1 77 61 0c fc 12 c6 c2 bf 61 7a f3 86 0d 1b de 2e 39 08 df 8c 19 33 6a 61 44 7c 14 db fe Data Ascii: sy=bR"9H$0q97;k8P.vq.<X;?]JJ^z{7M7"wRg-/+.]=C7hi4#\%kgi[u">kQfji^q$4*L)1_hQwaaz.93jaD\|
2024-05-03 04:44:39 UTC	16384	IN	Data Raw: 6e f9 d6 8d 2a 8c 70 cd 08 d0 21 7d 4c d5 6d c0 1e d8 4d 75 b0 46 87 5c 4a b6 77 36 ad 97 a5 dd 7d 6c c7 03 c5 5d a7 94 3d e9 9f ee c6 ee 3d 55 26 8d 06 2b 1e 6e 4b 62 bc ca 72 dc 74 49 18 d9 d8 d1 85 6f c9 5a 7c 3f ba 74 fd e9 f6 fd 4c b9 f5 d3 60 75 15 1b 51 3d 0d a8 29 dd ad 22 ad 55 47 bf f7 39 e8 46 22 1e ae 0a eb 26 62 1c 91 01 5c cf a9 52 8a e3 66 bb 82 6e b1 d8 7e 1b de 0f fe 4f 2a f5 d5 e4 c9 93 f9 0d 6c 46 a3 59 a7 1c 63 cc 9a 35 eb 22 5c eb bf 63 f2 4c 0c fc 56 8e b3 9c fe c8 ff 8e 06 f7 3b c4 c0 e0 08 60 08 a4 c1 49 0d 7c 84 4b 50 39 7f 15 1f e8 4f da 4e 92 f9 88 fe c8 f3 a3 4e a3 65 0d d6 7d 0b 1f ef 97 40 24 9b e4 18 81 e7 86 61 5c c1 0a 82 2d b9 30 96 03 68 7d 8c ef db b7 8f f9 fd 98 a8 9a 7d 09 d9 f2 ca d6 cd 69 68 8d 9e a1 dd 88 58 d9 c5 Data Ascii: np!}LmMuF\Jw6}l]==U&+nKbrtIoZ\|?tL`uQ=)"UG9F"&b\Rfn~OlFYc5"\cLV;`I\|KP9ONNe}@$a\-0h}}ihX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49910	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:48 UTC	657	OUT	GET /?utm_source=link_not_found HTTP/1.1 Host: short.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:48 UTC	684	IN	HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Thu, 02 May 2024 15:40:37 GMT Server: nginx Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: Hit from cloudfront Via: 1.1 cf549a03d4f209dc2ee52d1dd6cb3730.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jQen3_VES3LbfhxEoiUgCf74BDSwCQZt5WOgWM54cuSDO9hJFo1vWA== Age: 47051 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 31 66 62 62 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 61 74 73 62 79 20 35 2e 31 33 2e 34 22 2f 3e 3c Data Ascii: 1fbb5<!DOCTYPE html><html lang=""><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><meta name="generator" content="Gatsby 5.13.4"/><
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 53 41 78 49 44 41 67 4e 6a 59 75 4f 43 41 7a 4d 79 34 31 49 44 4d 7a 4c 6a 55 67 4d 43 41 77 49 44 45 67 4d 43 30 32 4e 69 34 35 57 6d 30 30 4c 6a 51 67 4d 54 59 75 4e 6b 67 79 4e 79 34 33 64 6a 4d 7a 4c 6a 56 6f 4e 69 34 33 64 69 30 78 4d 45 67 30 4e 47 45 78 4d 53 34 33 49 44 45 78 4c 6a 63 67 4d 43 41 77 49 44 41 67 4c 6a 49 74 4d 6a 4d 75 4e 55 67 30 4e 46 70 4e 4d 6a 63 7a 4c 6a 63 67 4e 54 4e 6a 4d 79 34 32 49 44 41 67 4e 53 34 79 49 44 49 67 4e 53 34 79 49 44 56 32 4d 54 45 75 4e 6d 67 74 4e 43 34 79 64 69 30 78 4d 47 4d 77 4c 54 49 75 4d 69 30 78 4c 6a 45 74 4d 79 30 79 4c 6a 6b 74 4d 79 30 78 4c 6a 59 67 4d 43 30 79 4c 6a 6b 67 4d 53 30 7a 4c 6a 59 67 4d 6e 59 78 4d 55 67 79 4e 6a 52 57 4e 54 4d 75 4d 32 67 30 4c 6a 4a 32 4d 6d 4d 78 4c 54 45 75 Data Ascii: SAxIDAgNjYuOCAzMy41IDMzLjUgMCAwIDEgMC02Ni45Wm00LjQgMTYuNkgyNy43djMzLjVoNi43di0xMEg0NGExMS43IDExLjcgMCAwIDAgLjItMjMuNUg0NFpNMjczLjcgNTNjMy42IDAgNS4yIDIgNS4yIDV2MTEuNmgtNC4ydi0xMGMwLTIuMi0xLjEtMy0yLjktMy0xLjYgMC0yLjkgMS0zLjYgMnYxMUgyNjRWNTMuM2g0LjJ2MmMxLTEu
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 4d 32 67 78 4d 53 34 30 59 79 34 32 49 44 41 67 4d 53 34 7a 49 44 41 67 4d 69 41 75 4d 33 59 74 4e 69 34 30 65 6d 30 7a 4e 79 34 31 49 44 49 78 4c 6a 46 6a 4c 6a 49 75 4e 79 34 32 49 44 45 75 4e 43 41 78 4c 6a 45 67 4d 6d 67 74 4d 54 51 75 4e 32 4d 77 4c 53 34 33 4c 53 34 79 4c 54 45 75 4d 79 30 75 4e 43 30 79 62 43 30 75 4e 69 30 78 4c 6a 4d 74 4c 6a 45 74 4c 6a 4e 49 4d 54 4d 79 64 69 34 7a 62 43 30 75 4e 69 41 78 4c 6a 4e 6a 4c 53 34 79 4c 6a 63 74 4c 6a 51 67 4d 53 34 7a 4c 53 34 7a 49 44 4a 6f 4c 54 45 78 4c 6a 5a 6a 4c 6a 51 74 4c 6a 59 75 4f 43 30 78 4c 6a 49 67 4d 53 30 79 62 44 63 74 4d 54 6b 75 4d 57 4d 75 4d 69 30 75 4e 79 34 31 4c 54 45 75 4d 79 34 30 4c 54 4a 6f 4d 54 6b 75 4e 57 4d 74 4c 6a 45 75 4e 79 34 79 49 44 45 75 4d 79 34 31 49 44 4a Data Ascii: M2gxMS40Yy42IDAgMS4zIDAgMiAuM3YtNi40em0zNy41IDIxLjFjLjIuNy42IDEuNCAxLjEgMmgtMTQuN2MwLS43LS4yLTEuMy0uNC0ybC0uNi0xLjMtLjEtLjNIMTMydi4zbC0uNiAxLjNjLS4yLjctLjQgMS4zLS4zIDJoLTExLjZjLjQtLjYuOC0xLjIgMS0ybDctMTkuMWMuMi0uNy41LTEuMy40LTJoMTkuNWMtLjEuNy4yIDEuMy41IDJ
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 20 63 6c 61 73 73 3d 22 62 72 61 6e 73 53 65 74 5f 5f 62 72 61 6e 64 22 3e 3c 70 69 63 74 75 72 65 3e 3c 73 6f 75 72 63 65 20 73 72 63 53 65 74 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 33 61 57 52 30 61 44 30 69 4d 6a 59 77 49 69 42 6f 5a 57 6c 6e 61 48 51 39 49 6a 45 79 4d 43 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 6a 34 4b 49 43 41 38 62 57 46 7a 61 79 42 70 5a 44 30 69 59 53 49 67 63 33 52 35 62 47 55 39 49 6d 31 68 63 32 73 74 64 48 6c 77 5a 54 70 68 62 48 42 6f 59 53 49 67 62 57 46 7a 61 31 56 75 61 58 52 7a 50 53 4a 31 63 32 56 79 55 33 42 Data Ascii: class="bransSet__brand"><picture><source srcSet="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMjYwIiBoZWlnaHQ9IjEyMCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KICA8bWFzayBpZD0iYSIgc3R5bGU9Im1hc2stdHlwZTphbHBoYSIgbWFza1VuaXRzPSJ1c2VyU3B
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 30 63 6d 39 72 5a 53 31 33 61 57 52 30 61 44 30 69 4c 6a 4d 69 4c 7a 34 38 63 47 46 30 61 43 42 6b 50 53 4a 4e 4d 54 4d 75 4d 79 41 79 4d 43 34 31 62 43 34 7a 4c 6a 4e 6a 4c 6a 45 67 4d 43 41 75 4d 79 34 30 4c 6a 63 75 4e 53 41 77 49 44 41 67 4c 6a 49 67 4d 43 41 75 4d 69 34 79 61 43 34 79 62 43 34 30 4c 6a 4d 75 4e 69 30 75 4e 79 30 75 4d 69 30 75 4d 32 67 74 4c 6a 46 32 4c 53 34 79 62 43 30 75 4e 43 30 75 4d 6e 4d 77 49 44 41 67 4d 43 41 77 64 69 30 75 4d 6d 67 74 4c 6a 4e 68 4c 6a 51 75 4e 43 41 77 49 44 41 78 4c 53 34 7a 4c 53 34 79 62 43 30 75 4d 69 30 75 4d 6d 67 75 4d 58 59 74 4c 6a 4a 49 4d 54 52 32 4c 53 34 7a 62 43 30 75 4d 79 30 75 4d 6d 4d 77 4c 53 34 79 4c 53 34 78 4c 53 34 79 4c 53 34 31 4c 53 34 30 62 43 30 75 4d 53 30 75 4d 58 4d 74 4c 6a Data Ascii: 0cm9rZS13aWR0aD0iLjMiLz48cGF0aCBkPSJNMTMuMyAyMC41bC4zLjNjLjEgMCAuMy40LjcuNSAwIDAgLjIgMCAuMi4yaC4ybC40LjMuNi0uNy0uMi0uM2gtLjF2LS4ybC0uNC0uMnMwIDAgMCAwdi0uMmgtLjNhLjQuNCAwIDAxLS4zLS4ybC0uMi0uMmguMXYtLjJIMTR2LS4zbC0uMy0uMmMwLS4yLS4xLS4yLS41LS40bC0uMS0uMXMtLj
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 6a 4d 75 4e 57 77 74 4c 6a 45 75 4d 6e 4d 77 49 44 41 67 4d 43 41 77 56 6a 56 73 4c 53 34 7a 4c 6a 49 74 4c 6a 49 75 4d 57 67 77 49 44 42 4d 4d 54 49 67 4e 6d 4d 74 4c 6a 49 67 4d 43 30 75 4d 53 41 77 4c 53 34 79 4c 6a 49 67 4d 43 41 77 49 44 41 67 4c 6a 49 74 4c 6a 49 75 4d 69 34 79 4c 6a 4d 67 4d 43 41 75 4d 79 41 77 49 43 34 33 4c 53 34 79 49 44 41 67 4c 6a 45 75 4e 43 30 75 4d 79 34 31 61 43 30 78 4c 6a 4a 32 4c 6a 46 7a 4c 53 34 78 4c 6a 49 74 4c 6a 51 67 4d 47 4d 77 49 43 34 78 4c 53 34 79 4c 6a 49 74 4c 6a 4d 75 4d 55 67 35 62 43 30 75 4e 79 34 78 54 44 67 67 4f 47 67 74 4c 6a 4a 73 4c 53 34 33 4c 6a 45 75 4d 79 30 75 4e 58 70 74 4c 6a 45 67 4d 6a 45 75 4e 6e 4d 74 4c 6a 55 74 4c 6a 51 67 4d 43 41 77 59 79 30 75 4d 53 41 77 49 43 34 79 49 44 41 67 Data Ascii: jMuNWwtLjEuMnMwIDAgMCAwVjVsLS4zLjItLjIuMWgwIDBMMTIgNmMtLjIgMC0uMSAwLS4yLjIgMCAwIDAgLjItLjIuMi4yLjMgMCAuMyAwIC43LS4yIDAgLjEuNC0uMy41aC0xLjJ2LjFzLS4xLjItLjQgMGMwIC4xLS4yLjItLjMuMUg5bC0uNy4xTDggOGgtLjJsLS43LjEuMy0uNXptLjEgMjEuNnMtLjUtLjQgMCAwYy0uMSAwIC4yIDAg
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 6f 64 44 30 69 4e 54 51 69 49 47 5a 70 62 47 77 39 49 6d 35 76 62 6d 55 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 2b 43 69 41 67 50 48 42 68 64 47 67 67 5a 44 30 69 54 54 49 32 4c 6a 55 67 4d 46 4d 30 4d 69 34 78 4e 69 30 75 4e 79 41 31 4d 43 34 30 4e 69 41 78 4e 57 67 74 4d 6a 55 75 4d 33 4d 74 4e 43 34 33 4e 79 30 75 4d 54 59 74 4f 43 34 34 4e 53 41 31 4c 6a 59 78 59 79 30 78 4c 6a 45 33 49 44 49 75 4e 44 4d 74 4d 69 34 30 4d 79 41 30 4c 6a 6b 79 4c 54 45 75 4d 44 45 67 4f 53 34 34 4e 45 4d 78 4d 79 34 79 4e 69 41 79 4e 79 41 30 4c 6a 55 67 4d 54 45 75 4e 7a 6b 67 4e 43 34 31 49 44 45 78 4c 6a 63 35 55 7a 45 77 4c 6a 59 33 4c 6a 59 79 49 44 49 32 4c 6a Data Ascii: odD0iNTQiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CiAgPHBhdGggZD0iTTI2LjUgMFM0Mi4xNi0uNyA1MC40NiAxNWgtMjUuM3MtNC43Ny0uMTYtOC44NSA1LjYxYy0xLjE3IDIuNDMtMi40MyA0LjkyLTEuMDEgOS44NEMxMy4yNiAyNyA0LjUgMTEuNzkgNC41IDExLjc5UzEwLjY3LjYyIDI2Lj
2024-05-03 04:44:48 UTC	15294	IN	Data Raw: 6b 72 49 36 49 62 68 4b 49 49 73 48 54 54 51 44 49 35 6a 65 55 56 6d 30 79 6b 7a 4b 4d 71 6c 48 37 4a 35 2f 50 62 36 7a 4e 30 32 63 6b 65 70 34 42 46 43 72 4d 34 64 6b 6c 64 77 76 4c 69 4d 44 4c 5a 59 57 6a 4b 4e 77 70 6d 41 70 4e 4a 61 75 41 45 32 48 4a 35 47 6c 51 36 45 79 49 4c 69 39 33 56 58 2f 6f 61 58 73 2b 2f 51 45 46 2b 68 48 54 43 68 39 6a 58 62 70 54 56 6e 43 31 62 6b 4e 4a 36 53 79 69 57 43 58 75 61 47 37 47 4e 6e 4a 4a 68 47 67 72 48 4c 4a 52 6e 38 57 54 30 4a 6b 61 6c 32 35 69 4c 33 38 58 54 6b 61 74 59 79 55 2b 49 74 41 31 58 70 63 6b 66 39 6a 6a 54 6e 4f 34 68 63 70 62 49 58 32 44 76 57 6d 6e 4f 79 73 72 33 6b 45 77 39 77 4f 7a 30 48 56 53 53 31 36 43 58 5a 48 43 69 4a 47 73 7a 77 6b 73 74 39 65 65 49 37 43 6e 43 4f 69 31 51 61 69 6f 6f 38 Data Ascii: krI6IbhKIIsHTTQDI5jeUVm0ykzKMqlH7J5/Pb6zN02ckep4BFCrM4dkldwvLiMDLZYWjKNwpmApNJauAE2HJ5GlQ6EyILi93VX/oaXs+/QEF+hHTCh9jXbpTVnC1bkNJ6SyiWCXuaG7GNnJJhGgrHLJRn8WT0Jkal25iL38XTkatYyU+ItA1Xpckf9jjTnO4hcpbIX2DvWmnOysr3kEw9wOz0HVSS16CXZHCiJGszwkst9eeI7CnCOi1Qaioo8
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 61 65 64 63 0d 0a 75 72 63 65 20 6d 65 64 69 61 3d 22 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 22 20 73 72 63 53 65 74 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 44 68 55 6c 45 51 56 52 34 32 6f 32 55 66 30 68 55 57 52 54 48 33 31 72 30 52 39 51 53 42 45 47 4f 4f 76 58 6d 2f 58 34 7a 62 7a 4c 54 69 41 6f 4a 6a 62 49 79 61 75 6f 6c 69 62 58 68 47 70 49 6f 47 47 7a 39 46 55 34 52 2f 68 45 52 37 57 62 68 66 79 32 37 43 78 56 45 55 56 46 52 30 4d 4a 43 6c 43 56 55 55 Data Ascii: aedcurce media="(prefers-color-scheme: dark)" srcSet="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAADhUlEQVR42o2Uf0hUWRTH31r0R9QSBEGOOvXm/X4zbzLTiAoJjbIyauolibXhGpIoGGz9FU4R/hER7Wbhfy27CxVEUVFR0MJClCVUU
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 44 58 4d 30 6e 6f 57 66 48 43 30 6a 2f 45 47 6d 66 45 4d 79 46 71 4e 35 67 58 31 6b 70 45 50 78 59 49 58 44 61 6c 31 4c 34 4b 38 67 30 4b 63 49 57 75 69 55 44 63 41 4d 4a 51 38 45 34 67 67 48 69 42 31 65 67 6e 67 4a 7a 6a 36 35 4b 57 58 58 71 2f 70 59 71 52 48 49 46 36 67 54 2b 4b 65 73 62 2f 75 65 2f 45 78 72 50 66 4a 71 5a 47 34 58 33 70 72 6e 61 55 65 51 42 6c 72 4e 4e 53 79 77 63 2f 4c 6a 51 38 2f 49 48 70 4c 54 52 63 66 50 4f 57 38 6d 45 59 67 56 52 46 5a 2f 34 55 72 71 43 79 77 2f 6f 6c 55 2b 45 6c 4f 2b 47 2f 5a 4a 55 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 4a 45 6d 53 70 4e 2f 74 77 59 45 41 41 41 41 41 67 43 42 2f 36 78 45 57 71 41 41 41 41 41 41 41 Data Ascii: DXM0noWfHC0j/EGmfEMyFqN5gX1kpEPxYIXDal1L4K8g0KcIWuiUDcAMJQ8E4ggHiB1egngJzj65KWXXq/pYqRHIF6gT+Kesb/ue/ExrPfJqZG4X3prnaUeQBlrNNSywc/LjQ8/IHpLTRcfPOW8mEYgVRFZ/4UrqCyw/olU+ElO+G/ZJUmSJEmSJEmSJEmSJEmSJEmSJEmSJEmSJEmSJEmSJEmSJEmSJEmSpN/twYEAAAAAgCB/6xEWqAAAAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49912	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:48 UTC	572	OUT	GET /styles.0f0d0189161b3d582858.css HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:48 UTC	821	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 591216 Connection: close Date: Fri, 26 Apr 2024 10:52:20 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-90570" Expires: Tue, 25 Jun 2024 10:52:20 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 58a45bf3f07dfdca95ebcb7935e84994.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QmNRxBJqsgyOmyfYay1mVVpRh33NzK2lBc4ZzFlvnhiohsyFGUkPwQ== Age: 582748 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:48 UTC	15563	IN	Data Raw: 2e 6e 6f 74 46 6f 75 6e 64 57 72 61 70 70 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 76 68 20 2d 20 36 2e 38 37 35 76 77 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 35 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 2f 31 29 7b 2e 6e 6f 74 Data Ascii: .notFoundWrapper{align-items:center;box-sizing:border-box;display:flex;flex-direction:column;height:calc(100vh - 6.875vw);justify-content:space-between;min-height:600px;padding-bottom:3%}@media screen and (max-width:1025px) and (max-aspect-ratio:1/1){.not
2024-05-03 04:44:48 UTC	2335	IN	Data Raw: 44 41 67 4d 43 41 77 4c 53 34 31 49 44 42 49 4e 7a 46 73 4c 53 34 7a 4c 6a 49 74 4c 6a 45 75 4d 53 30 75 4e 69 34 30 4c 54 45 75 4e 43 41 78 4c 6a 4e 4d 4e 6a 4d 67 4d 54 64 73 4c 54 49 75 4d 69 41 79 4c 6a 59 75 4e 43 30 75 4e 43 30 75 4d 79 34 7a 59 79 30 75 4f 43 41 78 4c 6a 45 74 4d 53 34 33 49 44 49 75 4d 53 30 79 4c 6a 59 67 4d 32 77 74 4d 53 34 78 49 44 45 75 4d 32 45 30 4e 54 55 67 4e 44 55 31 49 44 41 67 4d 43 41 77 4c 54 45 78 4c 6a 51 67 4d 54 52 73 4c 54 51 75 4e 69 41 31 4c 6a 6b 74 4c 6a 67 67 4d 53 34 7a 4c 6a 51 74 4c 6a 56 32 4c 6a 4a 73 4c 53 34 79 4c 6a 45 74 4d 79 41 30 59 54 55 32 4c 6a 63 67 4e 54 59 75 4e 79 41 77 49 44 41 67 4d 53 30 30 49 44 55 75 4e 47 4d 74 4d 53 41 78 4c 6a 4d 74 4d 53 34 30 49 44 49 75 4d 79 30 79 4c 6a 63 67 Data Ascii: DAgMCAwLS41IDBINzFsLS4zLjItLjEuMS0uNi40LTEuNCAxLjNMNjMgMTdsLTIuMiAyLjYuNC0uNC0uMy4zYy0uOCAxLjEtMS43IDIuMS0yLjYgM2wtMS4xIDEuM2E0NTUgNDU1IDAgMCAwLTExLjQgMTRsLTQuNiA1LjktLjggMS4zLjQtLjV2LjJsLS4yLjEtMyA0YTU2LjcgNTYuNyAwIDAgMS00IDUuNGMtMSAxLjMtMS40IDIuMy0yLjcg
2024-05-03 04:44:48 UTC	12792	IN	Data Raw: 4d 53 34 33 4c 54 55 75 4f 43 34 31 4c 54 51 75 4e 6d 45 79 4d 69 34 35 49 44 49 79 4c 6a 6b 67 4d 43 41 77 49 44 41 74 4c 6a 51 74 4e 6d 4d 77 4c 53 34 7a 4c 53 34 79 4c 53 34 31 4c 53 34 7a 4c 53 34 34 59 54 45 78 4c 6a 63 67 4d 54 45 75 4e 79 41 77 49 44 41 67 4d 43 30 78 4c 54 45 75 4d 6b 45 78 4e 69 34 31 49 44 45 32 4c 6a 55 67 4d 43 41 77 49 44 41 67 4d 7a 6b 75 4e 79 41 30 4e 57 77 74 4d 53 34 33 4c 53 34 79 59 79 30 78 4c 6a 63 74 4c 6a 49 74 4d 79 34 31 4c 53 34 79 4c 54 55 75 4d 69 41 77 62 43 30 79 4c 6a 55 75 4d 53 30 7a 49 43 34 7a 4c 54 4d 67 4c 6a 64 6a 4c 54 49 67 4c 6a 4d 74 4d 79 34 35 4c 6a 59 74 4e 53 34 34 49 44 45 75 4d 57 77 74 4e 53 41 79 59 79 30 79 4c 6a 51 75 4f 43 30 79 4c 6a 67 67 4d 53 34 79 4c 54 55 67 4d 69 34 78 59 54 49 Data Ascii: MS43LTUuOC41LTQuNmEyMi45IDIyLjkgMCAwIDAtLjQtNmMwLS4zLS4yLS41LS4zLS44YTExLjcgMTEuNyAwIDAgMC0xLTEuMkExNi41IDE2LjUgMCAwIDAgMzkuNyA0NWwtMS43LS4yYy0xLjctLjItMy41LS4yLTUuMiAwbC0yLjUuMS0zIC4zLTMgLjdjLTIgLjMtMy45LjYtNS44IDEuMWwtNSAyYy0yLjQuOC0yLjggMS4yLTUgMi4xYTI
2024-05-03 04:44:48 UTC	12792	IN	Data Raw: 71 47 70 69 41 65 2f 2f 2b 2f 64 74 67 53 55 54 5a 42 6b 48 45 48 35 51 36 42 36 75 77 59 67 4e 54 46 66 43 35 67 75 7a 41 4d 34 71 6f 70 67 58 47 52 50 75 46 52 46 36 2f 66 6a 33 79 58 4e 61 79 6b 74 6f 34 42 5a 31 46 66 6b 70 39 36 61 50 70 32 76 51 52 4f 6f 7a 61 55 41 42 30 50 72 64 71 74 36 69 75 6c 76 63 42 63 35 6a 7a 4c 33 70 2f 50 4d 66 33 35 35 31 77 70 43 43 6a 4c 72 53 63 39 44 71 55 74 58 5a 77 63 50 41 53 4c 49 6c 6f 74 56 6f 69 6e 59 4d 53 59 68 52 75 35 75 66 7a 63 2f 4f 72 76 47 31 43 41 65 44 37 7a 5a 78 2f 66 2f 7a 47 39 5a 32 34 7a 6f 4e 43 49 58 58 70 6f 30 42 5a 7a 36 63 43 6f 30 51 63 7a 62 59 46 75 56 65 44 4b 5a 4a 79 61 4a 6d 5a 49 67 47 75 58 71 6d 75 64 6f 2b 37 56 4b 44 64 53 48 79 52 50 6a 78 73 2f 36 65 55 75 61 79 6c 51 47 Data Ascii: qGpiAe//+/dtgSUTZBkHEH5Q6B6uwYgNTFfC5guzAM4qopgXGRPuFRF6/fj3yXNaykto4BZ1Ffkp96aPp2vQROozaUAB0Prdqt6iulvcBc5jzL3p/PMf3551wpCCjLrSc9DqUtXZwcPASLIlotVoinYMSYhRu5ufzc/OrvG1CAeD7zZx/f/zG9Z24zoNCIXXpo0BZz6cCo0QczbYFuVeDKZJyaJmZIgGuXqmudo+7VKDdSHyRPjxs/6eUuaylQG
2024-05-03 04:44:48 UTC	12792	IN	Data Raw: 41 67 4d 43 41 77 49 43 34 30 4c 6a 56 6f 4c 6a 4a 6a 4c 53 34 78 4c 6a 49 74 4c 6a 45 75 4d 69 34 78 4c 6a 4a 73 4c 53 34 30 4c 6a 68 6f 4c 6a 52 6a 4c 6a 45 74 4c 6a 45 75 4d 53 41 77 49 43 34 79 49 44 42 73 4c 6a 51 74 4c 6a 46 6f 4c 6a 4a 73 4c 53 34 78 4c 6a 49 74 4c 6a 49 75 4d 6d 45 75 4d 69 34 79 49 44 41 67 4d 43 41 78 49 43 34 78 4c 6a 4a 32 4c 6a 4e 6f 4c 6a 4a 73 4c 6a 45 75 4d 69 34 78 4c 6a 46 32 4c 6a 4a 6f 4c 6a 46 73 4c 6a 45 74 4c 6a 46 6a 4c 6a 45 75 4d 69 34 78 4c 6a 49 75 4e 53 41 77 49 44 41 67 4c 6a 4d 67 4d 43 41 75 4d 79 34 79 4c 6a 52 73 4c 53 34 7a 4c 6a 5a 32 4c 6a 56 6f 4c 6a 56 73 4c 6a 4d 75 4e 47 67 75 4d 6e 4d 77 49 43 34 7a 4c 6a 49 75 4d 6d 67 75 4d 32 77 74 4c 6a 45 75 4d 33 59 75 4d 6d 67 75 4d 33 4d 77 49 43 34 79 4c Data Ascii: AgMCAwIC40LjVoLjJjLS4xLjItLjEuMi4xLjJsLS40LjhoLjRjLjEtLjEuMSAwIC4yIDBsLjQtLjFoLjJsLS4xLjItLjIuMmEuMi4yIDAgMCAxIC4xLjJ2LjNoLjJsLjEuMi4xLjF2LjJoLjFsLjEtLjFjLjEuMi4xLjIuNSAwIDAgLjMgMCAuMy4yLjRsLS4zLjZ2LjVoLjVsLjMuNGguMnMwIC4zLjIuMmguM2wtLjEuM3YuMmguM3MwIC4yL
2024-05-03 04:44:48 UTC	8348	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 3a 32 35 25 20 61 75 74 6f 20 32 35 25 3b 70 61 64 64 69 6e 67 3a 36 25 20 33 25 20 31 25 20 35 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 35 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 2f 31 29 7b 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 46 69 6e 61 6c 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 32 37 25 20 61 75 74 6f 20 32 33 25 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 39 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 31 25 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 29 20 61 6e 64 20 28 6d 61 Data Ascii: -columns:25% auto 25%;padding:6% 3% 1% 5%}@media screen and (max-width:1025px) and (max-aspect-ratio:1/1){.integrationsFinal{grid-template-columns:27% auto 23%;padding-bottom:9%;padding-right:5%;padding-top:11%}}@media screen and (max-width:500px) and (ma
2024-05-03 04:44:48 UTC	12792	IN	Data Raw: 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d Data Ascii: margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-
2024-05-03 04:44:48 UTC	12792	IN	Data Raw: 70 70 65 72 63 61 73 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 35 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 31 2f 31 29 7b 2e 6e 61 76 42 61 72 41 63 74 69 6f 6e 73 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 65 6d 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6e 61 76 42 61 72 41 63 74 69 6f 6e 73 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 74 65 78 74 2d 6d 61 69 6e 2d 63 6f 6c 6f 72 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 6f Data Ascii: ppercase;white-space:nowrap}@media screen and (max-width:1025px) and (max-aspect-ratio:1/1){.navBarActions__link{font-weight:700;justify-content:center;margin-bottom:3em;padding:0}.navBarActions__button{background:var(--text-main-color);color:var(--text-o
2024-05-03 04:44:48 UTC	7184	IN	Data Raw: 4e 57 4d 74 4c 6a 49 67 4d 43 30 75 4d 79 30 75 4d 69 30 75 4e 53 30 75 4d 53 30 75 4d 79 41 77 4c 53 34 30 4c 6a 51 74 4c 6a 63 75 4e 43 30 75 4d 79 41 77 4c 53 34 7a 4c 53 34 79 4c 53 34 31 4c 53 34 7a 61 43 30 75 4e 47 45 75 4d 69 34 79 49 44 41 67 4d 43 41 77 4c 53 34 7a 49 44 42 6a 4c 53 34 78 4c 6a 49 74 4c 6a 49 75 4d 69 30 75 4e 43 34 78 62 43 30 75 4d 79 30 75 4d 53 30 75 4e 43 34 79 59 54 45 67 4d 53 41 77 49 44 41 67 4d 53 30 75 4e 53 30 75 4d 53 41 78 49 44 45 67 4d 43 41 77 49 44 41 74 4c 6a 63 74 4c 6a 45 67 4d 69 41 79 49 44 41 67 4d 43 41 78 4c 53 34 7a 49 44 41 67 4d 53 41 78 49 44 41 67 4d 43 41 78 4c 53 34 79 4c 53 34 30 59 7a 41 74 4c 6a 49 74 4c 6a 49 74 4c 6a 4d 74 4c 6a 4d 74 4c 6a 55 74 4c 6a 45 74 4c 6a 49 74 4c 6a 49 74 4c 6a 45 Data Ascii: NWMtLjIgMC0uMy0uMi0uNS0uMS0uMyAwLS40LjQtLjcuNC0uMyAwLS4zLS4yLS41LS4zaC0uNGEuMi4yIDAgMCAwLS4zIDBjLS4xLjItLjIuMi0uNC4xbC0uMy0uMS0uNC4yYTEgMSAwIDAgMS0uNS0uMSAxIDEgMCAwIDAtLjctLjEgMiAyIDAgMCAxLS4zIDAgMSAxIDAgMCAxLS4yLS40YzAtLjItLjItLjMtLjMtLjUtLjEtLjItLjItLjE
2024-05-03 04:44:48 UTC	12792	IN	Data Raw: 4c 6a 63 74 4d 56 70 74 4c 54 45 75 4f 43 41 79 4e 43 34 31 57 6b 30 7a 4e 69 41 30 4e 53 34 34 59 79 34 78 4c 6a 45 67 4d 43 41 75 4d 53 41 77 49 43 34 78 62 43 30 75 4d 69 34 79 4c 6a 45 75 4d 57 4d 74 4c 6a 45 67 4d 43 41 77 49 43 34 78 49 44 41 67 4c 6a 49 67 4d 43 41 77 49 43 34 79 4c 6a 49 75 4d 53 34 7a 61 43 34 79 64 69 34 79 62 43 30 75 4d 69 34 78 4c 53 34 79 4c 6a 46 32 4c 6a 4a 6a 4c 53 34 79 4c 6a 45 74 4c 6a 49 75 4d 79 30 75 4d 69 34 30 64 69 34 7a 59 7a 41 67 4c 6a 45 74 4c 6a 49 67 4d 43 30 75 4d 69 34 79 62 43 34 79 4c 6a 4d 74 4c 6a 4d 75 4d 53 30 75 4d 53 34 79 64 69 34 78 59 79 34 79 49 44 41 67 4c 6a 4d 75 4d 69 34 78 4c 6a 4a 6f 4c 53 34 78 62 43 34 79 4c 6a 4e 68 4c 6a 49 75 4d 69 41 77 49 44 41 67 4d 53 41 77 49 43 34 79 4c 6a 49 Data Ascii: LjctMVptLTEuOCAyNC41Wk0zNiA0NS44Yy4xLjEgMCAuMSAwIC4xbC0uMi4yLjEuMWMtLjEgMCAwIC4xIDAgLjIgMCAwIC4yLjIuMS4zaC4ydi4ybC0uMi4xLS4yLjF2LjJjLS4yLjEtLjIuMy0uMi40di4zYzAgLjEtLjIgMC0uMi4ybC4yLjMtLjMuMS0uMS4ydi4xYy4yIDAgLjMuMi4xLjJoLS4xbC4yLjNhLjIuMiAwIDAgMSAwIC4yLjI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49911	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:48 UTC	636	OUT	GET /static/hero-da68e1f98d49eea0edcc5cc53fba8dd1.avif HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:48 UTC	762	IN	HTTP/1.1 200 OK Content-Type: image/avif Content-Length: 127802 Connection: close Date: Fri, 03 May 2024 04:44:48 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-1f33a" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 5ba825173b1f7429171e730e7ae12588.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vUNW0GOEBrBH1WhmpS2xcegEC1eB3Wvf4QRTZZqLgSKL6X08dY3fMQ== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:48 UTC	15622	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 01 a1 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 2c 69 6c 6f 63 00 00 00 00 44 00 00 02 00 01 00 00 00 01 00 00 cb 4b 00 01 27 ef 00 02 00 00 00 01 00 00 01 c9 00 00 c9 82 00 00 00 42 69 69 6e 66 00 00 00 00 00 02 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 1a 69 6e 66 65 02 00 00 00 00 02 00 00 61 76 30 31 41 6c 70 68 61 00 00 00 00 1a 69 72 65 66 00 00 00 00 00 00 00 0e 61 75 78 6c 00 02 00 01 00 01 00 00 00 d7 69 70 72 70 00 00 00 b1 69 70 63 6f 00 00 00 14 69 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitm,ilocDK'Biinfinfeav01Colorinfeav01Alphairefauxliprpipcoi
2024-05-03 04:44:48 UTC	368	IN	Data Raw: a8 09 5d 19 e0 96 dd b7 f4 b9 f7 bf 87 b4 f3 f1 57 e6 4c 56 83 b3 c1 b7 a8 53 d7 76 1e 31 23 15 42 3c 19 97 fe d7 d6 79 8f 2c 65 fd f6 07 1a e9 22 aa 72 da 75 96 74 b6 41 cd 6e 3e f6 f7 80 e8 6b 99 29 97 92 69 f2 c3 d4 3b e3 f8 60 8e 13 79 af 52 16 3f dc 6e 8b 30 9d 1d 22 bf 17 aa 50 55 f3 7b 0b 44 63 ba fd e5 2f 1c ba f5 b2 74 20 6d 86 82 90 fb 49 1e 05 21 d2 ac 9b e8 29 48 c1 6e be ec ca 5f e7 3f 3e 19 3f 32 7d cd fd de 5d f6 24 38 7b 95 93 35 b5 e4 0c 6f 5a b0 c8 c5 07 d4 b1 ba 45 5c fa 16 51 9b b2 32 9a f8 5d b2 8d e9 9f b5 78 b6 e6 09 18 30 40 aa 15 40 d1 aa 85 a1 d1 37 aa da 77 c1 e4 bf 1c 88 96 30 c7 38 84 b8 f9 ed e2 09 0d 1b a0 5d 78 26 a4 54 9f db 78 7c 24 1c f8 58 4b a3 22 76 57 af e0 08 7d 0d c7 35 34 97 bb 67 fb 46 e6 45 08 85 ea 32 09 2a 1b Data Ascii: ]WLVSv1#B<y,e"rutAn>k)i;`yR?n0"PU{Dc/t mI!)Hn_?>?2}]$8{5oZE\Q2]x0@@7w08]x&Tx\|$XK"vW}54gFE2*
2024-05-03 04:44:48 UTC	1908	IN	Data Raw: 93 6e ef bf a1 16 54 a0 f0 65 37 5e e2 d5 f4 0f 6e 3f e9 7c 2b 57 ee d3 5f 02 d6 b1 4d 1b af 85 20 bc 53 1a 12 2d ad 71 23 d1 16 0f 00 32 d4 a0 c7 ea 06 f9 a2 48 74 4d 36 b6 f4 ba 16 c8 30 18 e9 f2 f0 d4 b3 24 66 cc 16 31 08 58 40 83 08 2b 70 38 3d cf 31 5f f0 4e b4 6b d8 c0 cc 69 fa 18 70 8a 07 80 a0 6c e4 84 f6 10 18 fe b5 28 ac 0f 75 3c 37 be c8 fd cd 96 c4 8a d3 27 95 e6 45 9a c2 95 7e b5 65 04 0e ef 51 cc d1 5c b8 b2 86 dc 57 d5 11 65 22 ba 63 34 38 09 b1 84 3d ab 49 29 9b 21 8d c3 bc 89 20 d1 ce 31 e9 ad 35 fb bb 0c 59 b2 22 d8 37 81 46 ea 8e 48 fb 82 d3 5e 4d c7 46 ca df 34 1d 4c e8 ef 4e 7b 67 cc 09 59 ae d8 f8 d4 1a 20 41 4f ac 12 f2 ac 81 5a b6 3c 57 2a 82 13 f7 66 49 b2 b4 18 87 13 be 43 06 15 76 4e f9 a7 81 0f 2e 25 06 1d f8 4a 78 0f 56 86 e3 Data Ascii: nTe7^n?\|+W_M S-q#2HtM60$f1X@+p8=1_Nkipl(u<7'E~eQ\We"c48=I)! 15Y"7FH^MF4LN{gY AOZ<W*fICvN.%JxV
2024-05-03 04:44:48 UTC	8949	IN	Data Raw: 4a 5c fa 78 ae 90 33 df 25 da 18 2b d3 87 59 32 ba 3a 03 c8 d6 92 8a b6 cc f8 f6 81 1b f1 c3 80 28 11 c1 78 62 4e b5 bf 2f 70 d6 2d b1 18 4c 2b d2 1d e9 04 e7 2c 01 0f 22 aa db bd e5 6b ef 23 ae 02 2a c6 f9 04 70 23 1a 5f 25 1f c4 1a 35 7d 63 0b cb 6e f7 f4 ba 44 bc be f7 5b e8 6b 17 4e b2 3b 1a 8b 66 44 38 b4 87 2e 91 3a 58 c5 a3 20 13 cd 19 a0 04 8e 8e 9d 30 d3 2e 88 e5 42 6f 43 58 2c 06 51 0d 78 9b af 8c 04 6f df 14 d5 98 50 14 08 43 44 c6 f2 90 51 f0 31 40 26 2a 88 7c 1a 0e 9e 83 08 6e 2b c4 e0 0d a7 f3 62 09 b4 fd 09 4d 6f 48 ae 6d 77 e1 cb 0f bb 68 5a c1 ac 7c 2d 39 e2 48 4f 8b 2b 44 e8 97 c9 73 0b d9 60 93 f2 99 7e 4e 2e 56 48 2a 9a d8 ae b5 da 48 3f 77 57 ae f4 0f 4c ac 3d fd d9 4c 2e ec 9e fc af 08 48 95 4e ed c1 af 2a 1f a2 29 d0 8c b6 3f 3b c0 Data Ascii: J\x3%+Y2:(xbN/p-L+,"k#p#_%5}cnD[kN;fD8.:X 0.BoCX,QxoPCDQ1@&\|n+bMoHmwhZ\|-9HO+Ds`~N.VHH?wWL=L.HN)?;
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: d7 ca 8f ea d1 46 b5 5b a6 2c fd 23 cb d5 a3 11 4a 9c bd 21 a5 fd cf 71 dd 6b 77 03 40 2e 61 4a 2a 64 5f 42 80 07 61 ba c7 fb e0 73 8d bc 87 61 cd 42 f1 80 29 b9 f8 13 77 ae 45 96 a2 25 da 39 c1 8c 74 48 69 95 61 5a 9c 4d 59 05 18 72 51 fd be 57 5a 13 5f 00 9b 99 ae a4 6c 37 cd 2b 1a db ac 45 c8 af a4 26 6a 7b 4d e8 34 46 81 f7 0f 79 0c b1 91 b4 e3 cb d9 63 2d 7c 06 72 a7 73 a9 ac 59 b5 2e 60 69 41 3f 06 9c 2c b9 38 dd 2e 67 6a 33 f3 3c c3 05 5e bb d5 7a 56 fb e1 b5 3f 1f 99 cf f9 29 82 55 b5 4a 25 b9 de 26 2d 95 47 cf 53 a2 88 0a 7f 06 e9 89 81 1a 0b 17 75 be b8 8a d4 55 13 bb f0 f9 c3 4a e6 ce 94 95 1a 7b 63 08 5e 37 a1 75 df 1e 2b b9 b2 2f 5b 7b db 53 01 91 e1 e7 a1 98 1f ce 8a c1 ce a7 23 da 52 06 e2 30 7e b7 27 b9 ba e4 82 02 75 12 d2 80 71 97 3f 76 Data Ascii: F[,#J!qkw@.aJ*d_BasaB)wE%9tHiaZMYrQWZ_l7+E&j{M4Fyc-\|rsY.`iA?,8.gj3<^zV?)UJ%&-GSuUJ{c^7u+/[{S#R0~'uq?v
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 3e 2a 53 4c dc 90 01 73 8c d9 69 72 13 8e cb 95 64 c6 e5 6e 81 b1 7b 90 37 0d 5d d4 db 19 68 e6 85 7c d1 20 22 f5 e7 53 a6 0b ed 27 e7 0a 78 a0 75 ec 13 b6 47 31 1d c7 d8 76 f9 50 11 e8 fd 0b 23 92 7a f7 03 8c f9 f0 4a 1b c6 20 4a da b9 bb 5a 1d b9 7c f3 35 5a dc 9e f7 eb cd f7 21 dc b0 65 c4 49 3e e6 57 1f 58 9b 55 83 6d d4 55 76 0b da 4e db 5b fe 6f 63 41 92 00 33 1c da a0 25 a9 14 36 e4 2f 51 9d 27 93 91 1e f9 43 a1 0b 49 d2 0e 49 49 eb 12 15 1b 11 bd 52 4b b5 70 10 ac 6a 0f f9 e6 8c de 1f 77 e4 46 60 23 95 2f 38 b8 9b 33 73 5c ce f2 ca 6a 5f 9a 7b 19 36 b7 99 64 35 72 ae 71 e5 e4 79 5d d8 9f 7c 08 83 64 a9 77 7d df c0 05 c3 64 e9 d6 dd 16 02 77 48 46 1d 24 07 41 17 0d 0b 2e ee 52 be 33 26 b7 33 e2 49 93 78 92 6a f1 9e 40 35 14 ba 51 95 59 cf 73 0f 7f Data Ascii: >*SLsirdn{7]h\| "S'xuG1vP#zJ JZ\|5Z!eI>WXUmUvN[ocA3%6/Q'CIIIRKpjwF`#/83s\j_{6d5rqy]\|dw}dwHF$A.R3&3Ixj@5QYs
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: f6 96 49 99 cd b4 bf b9 86 04 e9 08 70 65 7f 9a 4f 52 6f 0d 4f 8a ee ef 03 19 7b dc 87 42 c6 02 e2 c1 21 7d a8 0b 3c d5 b7 7c 31 8c 8d 6e 75 ad c0 9d ee 39 6e 84 80 b5 5f f1 96 df 62 e1 46 3c 43 0d 0d 4a e2 88 45 89 e9 5a ef 3f 58 e0 df e3 70 61 5a 4c 8f 1f e5 16 ca 59 46 eb 20 a3 e0 3b 72 ba 6d a2 bb a9 bc 79 f8 b1 4e c0 c6 03 ad 78 48 9b 37 7b af 65 e6 77 90 58 41 c6 25 7a 97 d7 15 84 b8 14 6c bd a4 d0 c0 0d a0 5a 9b 95 3c ee 7e 58 b8 92 fb c1 5a a1 4f fb a0 85 62 02 84 f3 04 e1 ab 73 8d de f2 56 2c 28 80 9c 18 b4 e1 6b 11 5f ee 92 18 f3 ea fb ae 86 b3 8b ea 62 fa 1f ca 79 f4 99 90 31 d5 6a 97 75 d1 19 21 78 2e 0d 8f 8e 01 e1 7a a5 5d 6a d4 9d 8a da 1d 25 b7 ba fa 07 01 21 10 53 5e f2 0a 8c ee b2 39 16 88 c8 ec d1 ee 08 cb 28 f8 e0 6c 8d 0d a8 87 34 70 Data Ascii: IpeORoO{B!}<\|1nu9n_bF<CJEZ?XpaZLYF ;rmyNxH7{ewXA%zlZ<~XZObsV,(k_by1ju!x.z]j%!S^9(l4p
2024-05-03 04:44:48 UTC	4542	IN	Data Raw: ca 65 69 d0 df 3f d8 a3 df 0a 5a ae ba b4 19 d8 a3 92 a9 09 a9 c5 91 0a 72 8a ff f7 bc a5 d6 06 f4 ad 97 a0 c6 48 96 3a a7 5a 30 b3 a4 88 a6 10 ca ff df c8 77 d7 e1 f6 4d 56 d6 82 a7 96 53 ed 06 93 83 ab 93 63 ad 53 f0 aa b5 46 e3 c4 07 23 16 7a 89 bb 74 04 43 90 af a4 fa 6e 07 82 37 ba 8c 40 12 1c 69 61 58 82 f8 57 49 2f c6 21 7b f1 c7 39 7f 05 a8 8b d2 9f 9d 0d aa 32 75 54 2a 68 3a de ac 1d ef d2 cf a4 c1 92 d6 48 8b 0b c9 d6 60 49 fb 0c 07 a5 06 9a f5 33 40 11 1e d3 d5 a7 80 54 51 9c b0 b5 9d 13 4b d9 ac b5 b2 26 56 d5 4f d5 fb 5f 3f 18 3f 51 51 25 bf 29 a4 30 ac 2a 0f 37 e0 bc c3 69 db 69 60 e5 c1 93 4a 37 39 0a 90 90 8e 5d e1 10 91 ff 30 0a 6a 0d 14 b0 83 00 41 0a b1 b6 2b 2c e5 69 ad 1d aa 3b aa 7c 3a 47 04 8a 1a c0 eb 90 2c 5d f0 b1 e1 e5 cc 76 b9 Data Ascii: ei?ZrH:Z0wMVScSF#ztCn7@iaXWI/!{92uTh:H`I3@TQK&VO_??QQ%)07ii`J79]0jA+,i;\|:G,]v
2024-05-03 04:44:48 UTC	16384	IN	Data Raw: 82 9e 51 a2 5a 45 3e 78 46 7d 6c 8f 99 3f c3 fd be 74 81 ef b2 65 b3 2a 2f 5d 67 79 6d 67 7a a5 3d 85 58 2d 7e 47 62 56 a9 09 b4 60 cc e4 e9 73 36 d2 59 f7 32 4a 10 c9 49 9e bf 46 82 55 74 4e a2 68 65 0e 07 ae 3e b3 65 a1 0e 4c fc 10 d8 86 34 51 f5 21 85 f8 a2 0f 45 d0 15 a7 db 44 ba 39 93 1e 03 1b 80 be dd 04 80 b3 d9 24 ad fe 76 05 cd 34 21 75 89 5e 2c 0f 78 0c b4 a1 ed 00 f0 00 00 05 9c 14 6e 46 40 e8 2c e3 ff 4a 28 03 1d f1 3c 99 d6 29 0c 0c 5b 8b 77 f1 bd b9 5a bc e6 a4 0e e5 89 b7 e7 44 fa 74 21 8f 5f 52 b0 a6 b5 1d 80 ec 7b ca 11 fe 5d 55 b0 fe 9d 60 10 2b 67 85 a2 2b 8f 34 90 7a 04 09 94 ca 45 a9 4b cb 1a 03 b9 fc 0c 08 5f b4 50 dc c4 08 7e 37 2f 4c 86 f9 5b 32 80 92 1d cc 25 65 ee 92 eb fd c3 1e 15 06 f0 00 00 0f a3 e1 de 68 a2 29 4c 8a c0 9c f7 Data Ascii: QZE>xF}l?te*/]gymgz=X-~GbV`s6Y2JIFUtNhe>eL4Q!ED9$v4!u^,xnF@,J(<)[wZDt!_R{]U`+g+4zEK_P~7/L[2%eh)L
2024-05-03 04:44:48 UTC	6396	IN	Data Raw: 6e 33 d4 73 89 63 24 bd 8f 37 55 a4 0b 7e c6 91 5c 7b 2a 40 da ec da cf e2 74 cb b8 f5 14 fd c6 5c bd 03 de d7 1e ac 69 51 ab 04 ff ac 8b b2 6b 9a f3 80 52 89 42 58 02 83 42 58 c7 63 98 fe f0 c4 31 a7 1b 3a 44 e1 00 17 00 d7 9b 2e d3 3e de 6b b2 a6 c1 cb 89 31 f3 ed 7f 0d 6c 75 3c 4c d6 9e 69 4b 5a 66 e0 0d 89 bd a9 76 56 4d e4 2c b6 e8 21 55 e0 53 95 dc 57 b9 a7 48 4d d7 f6 4a c6 e1 90 6f c9 10 5e 86 75 c7 7a f8 ad 78 db 4b d1 53 ee 49 00 ac b5 d0 c1 4d da 28 12 67 4c 8c b5 48 9f 6b 27 b9 0c 7c 50 eb 2c 02 c5 e9 7e cb 28 68 c2 19 7b 53 23 30 ea 77 81 a5 2a c7 61 e8 19 4a 2d bc 09 8d ba 92 f0 ff 76 ba e5 ea 10 4a ea d3 40 9d c5 bb a1 cd 5c ca 72 6c da d7 4e 5b f4 de 36 41 cf f0 25 4a 3e 28 a6 32 9d 3b 6c 33 bb 2d 18 1c 25 98 8c 9f 93 c9 fe 87 1b 3c df 9c Data Ascii: n3sc$7U~\{@t\iQkRBXBXc1:D.>k1lu<LiKZfvVM,!USWHMJo^uzxKSIM(gLHk'\|P,~(h{S#0waJ-vJ@\rlN[6A%J>(2;l3-%<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49913	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:50 UTC	566	OUT	GET /webpack-runtime-b7cae2b65a67c6a710e2.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:50 UTC	832	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4576 Connection: close Date: Thu, 25 Apr 2024 15:09:02 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-11e0" Expires: Mon, 24 Jun 2024 15:09:02 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f5527f719bbc0d2932043daaeff80252.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2Aiq4_2h6XEM4To39e52fzJfmrOFr874VBUVTWreeCblcwsmQU_sXg== Age: 653748 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:50 UTC	4576	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 61 3d 7b 7d 2c 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 76 61 72 20 74 3d 63 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 63 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 65 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 66 29 2c 6e 2e 65 78 70 6f 72 74 73 7d 66 2e 6d 3d 61 2c 66 2e 61 6d 64 4f 3d 7b 7d 2c 65 3d 5b 5d 2c 66 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 6e 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 73 3d 30 3b 73 3c 65 2e 6c 65 Data Ascii: !function(){"use strict";var e,t,n,r,o,a={},c={};function f(e){var t=c[e];if(void 0!==t)return t.exports;var n=c[e]={exports:{}};return a[e].call(n.exports,n,n.exports,f),n.exports}f.m=a,f.amdO={},e=[],f.O=function(t,n,r,o){if(!n){var a=1/0;for(s=0;s<e.le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49915	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:50 UTC	560	OUT	GET /framework-d8026fe3df59b77201cc.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:50 UTC	835	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 140361 Connection: close Date: Thu, 25 Apr 2024 15:55:21 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-22449" Expires: Mon, 24 Jun 2024 15:55:21 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3b0649a8bee506c1d7498462d39e6c44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Lk_ucekrtdXT8zdK_Z-H-1fBTfaM64K_QQ_fLWAeh4c9OidbHplyVQ== Age: 650969 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 72 61 6d 65 77 6f 72 6b 2d 64 38 30 32 36 66 65 33 64 66 35 39 62 37 37 32 30 31 63 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 33 5d 2c 7b 32 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 36 39 32 35 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 61 2e 72 65 73 65 74 57 61 72 6e 69 6e 67 43 61 63 68 65 3d Data Ascii: /! For license information please see framework-d8026fe3df59b77201cc.js.LICENSE.txt /(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);function l(){}function a(){}a.resetWarningCache=
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 65 54 79 70 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 65 7d 76 61 72 20 53 65 3d 6e 75 6c 6c 2c 78 65 3d 6e 75 6c 6c 2c 45 65 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 43 65 28 65 29 7b 69 66 28 65 3d 62 6c 28 65 29 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 53 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 32 38 30 29 29 3b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 26 26 28 6e 3d 77 6c 28 6e 29 2c 53 65 28 65 2e 73 74 61 74 65 4e 6f 64 65 2c 65 2e 74 79 70 65 2c 6e 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 28 65 29 7b 78 65 3f 45 65 3f 45 65 2e 70 75 73 68 28 65 29 3a 45 65 3d 5b 65 5d 3a 78 65 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 29 7b 69 66 28 78 65 29 7b 76 61 72 20 65 3d 78 65 2c 6e 3d 45 Data Ascii: eType?e.parentNode:e}var Se=null,xe=null,Ee=null;function Ce(e){if(e=bl(e)){if("function"!=typeof Se)throw Error(a(280));var n=e.stateNode;n&&(n=wl(n),Se(e.stateNode,e.type,n))}}function _e(e){xe?Ee?Ee.push(e):Ee=[e]:xe=e}function Pe(){if(xe){var e=xe,n=E
2024-05-03 04:44:50 UTC	12004	IN	Data Raw: 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 29 7b 74 72 79 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 72 29 7b 74 3d 21 31 7d 69 66 28 21 74 29 62 72 65 61 6b 3b 6e 3d 4b 28 28 65 3d 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 70 72 28 65 29 7b 76 61 72 20 6e 3d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 6e 26 26 28 22 69 6e 70 75 74 22 3d 3d 3d 6e 26 26 28 22 74 65 78 74 22 3d 3d 3d 65 2e 74 Data Ascii: stanceof e.HTMLIFrameElement;){try{var t="string"==typeof n.contentWindow.location.href}catch(r){t=!1}if(!t)break;n=K((e=n.contentWindow).document)}return n}function pr(e){var n=e&&e.nodeName&&e.nodeName.toLowerCase();return n&&("input"===n&&("text"===e.t
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 75 74 3a 76 6f 69 64 20 30 2c 6c 6c 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 3f 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 76 6f 69 64 20 30 2c 61 6c 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 3f 50 72 6f 6d 69 73 65 3a 76 6f 69 64 20 30 2c 6f 6c 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 3f 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 3a 76 6f 69 64 20 30 21 3d 3d 61 6c 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 6c 2e 72 65 73 6f 6c 76 65 28 6e 75 6c 6c 29 2e 74 68 65 6e 28 65 29 2e 63 61 74 63 68 28 75 6c 29 7d 3a 72 6c 3b 66 75 6e 63 74 69 6f 6e 20 75 6c 28 65 29 7b 73 65 74 54 69 6d 65 6f Data Ascii: ut:void 0,ll="function"==typeof clearTimeout?clearTimeout:void 0,al="function"==typeof Promise?Promise:void 0,ol="function"==typeof queueMicrotask?queueMicrotask:void 0!==al?function(e){return al.resolve(null).then(e).catch(ul)}:rl;function ul(e){setTimeo
2024-05-03 04:44:50 UTC	284	IN	Data Raw: 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 6e 75 6c 6c 21 3d 3d 6f 29 7b 73 77 69 74 63 68 28 6f 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 77 3a 65 3a 7b 66 6f 72 28 76 61 72 20 73 3d 6f 2e 6b 65 79 2c 63 3d 61 3b 6e 75 6c 6c 21 3d 3d 63 3b 29 7b 69 66 28 63 2e 6b 65 79 3d 3d 3d 73 29 7b 69 66 28 28 73 3d 6f 2e 74 79 70 65 29 3d 3d 3d 78 29 7b 69 66 28 37 3d 3d 3d 63 2e 74 61 67 29 7b 74 28 72 2c 63 2e 73 69 62 6c 69 6e 67 29 2c 28 61 3d 6c 28 63 2c 6f 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 29 29 2e 72 65 74 75 72 6e 3d 72 2c 72 3d 61 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 69 66 28 63 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 3d 3d 73 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: .props.children),"object"==typeof o&&null!==o){switch(o.$$typeof){case w:e:{for(var s=o.key,c=a;null!==c;){if(c.key===s){if((s=o.type)===x){if(7===c.tag){t(r,c.sibling),(a=l(c,o.props.children)).return=r,r=a;break e}}else if(c.elementType===s\|\|"object"==t
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 3d 3d 3d 52 26 26 4b 61 28 73 29 3d 3d 3d 63 2e 74 79 70 65 29 7b 74 28 72 2c 63 2e 73 69 62 6c 69 6e 67 29 2c 28 61 3d 6c 28 63 2c 6f 2e 70 72 6f 70 73 29 29 2e 72 65 66 3d 51 61 28 72 2c 63 2c 6f 29 2c 61 2e 72 65 74 75 72 6e 3d 72 2c 72 3d 61 3b 62 72 65 61 6b 20 65 7d 74 28 72 2c 63 29 3b 62 72 65 61 6b 7d 6e 28 72 2c 63 29 2c 63 3d 63 2e 73 69 62 6c 69 6e 67 7d 6f 2e 74 79 70 65 3d 3d 3d 78 3f 28 28 61 3d 44 73 28 6f 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 2c 72 2e 6d 6f 64 65 2c 69 2c 6f 2e 6b 65 79 29 29 2e 72 65 74 75 72 6e 3d 72 2c 72 3d 61 29 3a 28 28 69 3d 46 73 28 6f 2e 74 79 70 65 2c 6f 2e 6b 65 79 2c 6f 2e 70 72 6f 70 73 2c 6e 75 6c 6c 2c 72 2e 6d 6f 64 65 2c 69 29 29 2e 72 65 66 3d 51 61 28 72 2c 61 2c 6f 29 2c 69 2e 72 65 74 75 72 6e Data Ascii: ===R&&Ka(s)===c.type){t(r,c.sibling),(a=l(c,o.props)).ref=Qa(r,c,o),a.return=r,r=a;break e}t(r,c);break}n(r,c),c=c.sibling}o.type===x?((a=Ds(o.props.children,r.mode,i,o.key)).return=r,r=a):((i=Fs(o.type,o.key,o.props,null,r.mode,i)).ref=Qa(r,a,o),i.return
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 6f 72 65 55 70 64 61 74 65 7c 7c 75 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 26 26 64 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 7c 7c 28 6e 2e 66 6c 61 67 73 7c 3d 31 30 32 34 29 2c 6e 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 3d 72 2c 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6d 29 2c 6f 2e 70 72 6f 70 73 3d 72 2c 6f 2e 73 74 61 74 65 3d 6d 2c 6f 2e 63 6f 6e 74 65 78 74 3d 69 2c 72 3d 73 29 3a 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6f 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 7c 7c 75 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 26 26 64 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 7c 7c 28 6e 2e 66 6c 61 67 73 7c 3d 34 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 Data Ascii: oreUpdate\|\|u===e.memoizedProps&&d===e.memoizedState\|\|(n.flags\|=1024),n.memoizedProps=r,n.memoizedState=m),o.props=r,o.state=m,o.context=i,r=s):("function"!=typeof o.componentDidUpdate\|\|u===e.memoizedProps&&d===e.memoizedState\|\|(n.flags\|=4),"function"!=typ
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 69 6f 6e 20 6f 69 28 65 29 7b 76 61 72 20 6e 3d 65 2e 61 6c 74 65 72 6e 61 74 65 3b 6e 75 6c 6c 21 3d 3d 6e 26 26 28 65 2e 61 6c 74 65 72 6e 61 74 65 3d 6e 75 6c 6c 2c 6f 69 28 6e 29 29 2c 65 2e 63 68 69 6c 64 3d 6e 75 6c 6c 2c 65 2e 64 65 6c 65 74 69 6f 6e 73 3d 6e 75 6c 6c 2c 65 2e 73 69 62 6c 69 6e 67 3d 6e 75 6c 6c 2c 35 3d 3d 3d 65 2e 74 61 67 26 26 28 6e 75 6c 6c 21 3d 3d 28 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 29 26 26 28 64 65 6c 65 74 65 20 6e 5b 64 6c 5d 2c 64 65 6c 65 74 65 20 6e 5b 70 6c 5d 2c 64 65 6c 65 74 65 20 6e 5b 68 6c 5d 2c 64 65 6c 65 74 65 20 6e 5b 67 6c 5d 2c 64 65 6c 65 74 65 20 6e 5b 76 6c 5d 29 29 2c 65 2e 73 74 61 74 65 4e 6f 64 65 3d 6e 75 6c 6c 2c 65 2e 72 65 74 75 72 6e 3d 6e 75 6c 6c 2c 65 2e 64 65 70 65 6e 64 65 6e 63 69 Data Ascii: ion oi(e){var n=e.alternate;null!==n&&(e.alternate=null,oi(n)),e.child=null,e.deletions=null,e.sibling=null,5===e.tag&&(null!==(n=e.stateNode)&&(delete n[dl],delete n[pl],delete n[hl],delete n[gl],delete n[vl])),e.stateNode=null,e.return=null,e.dependenci
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 75 6c 6c 2c 52 69 3d 30 29 2c 21 28 32 30 36 34 26 74 2e 73 75 62 74 72 65 65 46 6c 61 67 73 29 26 26 21 28 32 30 36 34 26 74 2e 66 6c 61 67 73 29 7c 7c 4b 69 7c 7c 28 4b 69 3d 21 30 2c 54 73 28 6e 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 73 28 29 2c 6e 75 6c 6c 7d 29 29 29 2c 6f 3d 21 21 28 31 35 39 39 30 26 74 2e 66 6c 61 67 73 29 2c 21 21 28 31 35 39 39 30 26 74 2e 73 75 62 74 72 65 65 46 6c 61 67 73 29 7c 7c 6f 29 7b 6f 3d 4e 69 2e 74 72 61 6e 73 69 74 69 6f 6e 2c 4e 69 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 6e 75 6c 6c 3b 76 61 72 20 75 3d 6b 6e 3b 6b 6e 3d 31 3b 76 61 72 20 69 3d 7a 69 3b 7a 69 7c 3d 34 2c 50 69 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 6c 3d 57 6e 2c 70 72 Data Ascii: ull,Ri=0),!(2064&t.subtreeFlags)&&!(2064&t.flags)\|\|Ki\|\|(Ki=!0,Ts(nn,(function(){return xs(),null}))),o=!!(15990&t.flags),!!(15990&t.subtreeFlags)\|\|o){o=Ni.transition,Ni.transition=null;var u=kn;kn=1;var i=zi;zi\|=4,Pi.current=null,function(e,n){if(el=Wn,pr
2024-05-03 04:44:50 UTC	13385	IN	Data Raw: 64 48 6f 73 74 49 6e 73 74 61 6e 63 65 42 79 46 69 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 57 65 28 65 29 29 3f 6e 75 6c 6c 3a 65 2e 73 74 61 74 65 4e 6f 64 65 7d 2c 66 69 6e 64 46 69 62 65 72 42 79 48 6f 73 74 49 6e 73 74 61 6e 63 65 3a 74 63 2e 66 69 6e 64 46 69 62 65 72 42 79 48 6f 73 74 49 6e 73 74 61 6e 63 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 66 69 6e 64 48 6f 73 74 49 6e 73 74 61 6e 63 65 73 46 6f 72 52 65 66 72 65 73 68 3a 6e 75 6c 6c 2c 73 63 68 65 64 75 6c 65 52 65 66 72 65 73 68 3a 6e 75 6c 6c 2c 73 63 68 65 64 75 6c 65 52 6f 6f 74 3a 6e 75 6c 6c 2c 73 65 74 52 65 66 72 65 73 68 48 61 6e 64 6c 65 72 3a 6e 75 6c 6c 2c 67 65 74 43 75 72 72 65 6e Data Ascii: dHostInstanceByFiber:function(e){return null===(e=We(e))?null:e.stateNode},findFiberByHostInstance:tc.findFiberByHostInstance\|\|function(){return null},findHostInstancesForRefresh:null,scheduleRefresh:null,scheduleRoot:null,setRefreshHandler:null,getCurren

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49914	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:50 UTC	554	OUT	GET /app-03b578d60f542c677ed5.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:50 UTC	835	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 748812 Connection: close Date: Thu, 25 Apr 2024 15:09:02 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-b6d0c" Expires: Mon, 24 Jun 2024 15:09:02 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1abf103face183cd8172f37e6ac30038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WUM8UcLxvuN0nfve08qeWJhF4tV8EEQkZSs7W3J5r6MnArQUE2JqBg== Age: 653748 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:50 UTC	15549	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2d 30 33 62 35 37 38 64 36 30 66 35 34 32 63 36 37 37 65 64 35 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 34 5d 2c 7b 32 36 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 7b 22 2e 2f 64 65 2f 34 30 34 2e 6a 73 6f 6e 22 3a 31 38 32 39 2c 22 2e 2f 64 65 2f 61 62 6f 75 74 2d 75 73 2e 6a 73 6f 6e 22 3a 36 31 35 31 2c 22 2e 2f 64 65 2f 63 6f 6d 6d 6f 6e 2e 6a 73 6f 6e 22 3a 36 38 35 34 2c 22 2e 2f 64 Data Ascii: /! For license information please see app-03b578d60f542c677ed5.js.LICENSE.txt /(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[524],{262:function(e,t,n){var i={"./de/404.json":1829,"./de/about-us.json":6151,"./de/common.json":6854,"./d
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 45 76 65 6e 74 28 65 2c 7b 2e 2e 2e 74 2c 65 76 65 6e 74 5f 69 64 3a 6e 7d 2c 74 68 69 73 29 2c 6e 29 3a 28 73 2e 76 46 2e 77 61 72 6e 28 22 4e 6f 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 73 63 6f 70 65 20 2d 20 77 69 6c 6c 20 6e 6f 74 20 63 61 70 74 75 72 65 20 65 76 65 6e 74 21 22 29 2c 6e 29 7d 5f 6e 6f 74 69 66 79 53 63 6f 70 65 4c 69 73 74 65 6e 65 72 73 28 29 7b 74 68 69 73 2e 5f 6e 6f 74 69 66 79 69 6e 67 4c 69 73 74 65 6e 65 72 73 7c 7c 28 74 68 69 73 2e 5f 6e 6f 74 69 66 79 69 6e 67 4c 69 73 74 65 6e 65 72 73 3d 21 30 2c 74 68 69 73 2e 5f 73 63 6f 70 65 4c 69 73 74 65 6e 65 72 73 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 28 74 68 69 73 29 7d 29 29 2c 74 68 69 73 2e 5f 6e 6f 74 69 66 79 69 6e 67 4c 69 73 74 65 6e 65 72 Data Ascii: Event(e,{...t,event_id:n},this),n):(s.vF.warn("No client configured on scope - will not capture event!"),n)}_notifyScopeListeners(){this._notifyingListeners\|\|(this._notifyingListeners=!0,this._scopeListeners.forEach((e=>{e(this)})),this._notifyingListener
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 74 3d 3d 3d 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 22 5b 57 69 6e 64 6f 77 5d 22 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 74 3d 3d 3d 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 22 5b 44 6f 63 75 6d 65 6e 74 5d 22 3b 69 66 28 28 30 2c 69 2e 4c 32 29 28 74 29 29 72 65 74 75 72 6e 22 5b 56 75 65 56 69 65 77 4d 6f 64 65 6c 5d 22 3b 69 66 28 28 30 2c 69 2e 6d 45 29 28 74 29 29 72 65 74 75 72 6e 22 5b 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 5d 22 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 21 3d 74 29 72 65 74 75 72 6e 22 5b 4e 61 4e 5d 22 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 Data Ascii: typeof window&&t===window)return"[Window]";if("undefined"!=typeof document&&t===document)return"[Document]";if((0,i.L2)(t))return"[VueViewModel]";if((0,i.mE)(t))return"[SyntheticEvent]";if("number"==typeof t&&t!=t)return"[NaN]";if("function"==typeof t)ret
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 61 70 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 7d 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 Data Ascii: ction"==typeof Map?new Map:void 0;return m=function(e){if(null===e\|\|!function(e){try{return-1!==Function.toString.call(e).indexOf("[native code]")}catch(t){return"function"==typeof e}}(e))return e;if("function"!=typeof e)throw new TypeError("Super express
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 2c 74 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 3b 69 66 28 6e 26 26 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 29 7b 63 6f 6e 73 74 20 69 3d 74 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 3b 72 65 74 75 72 6e 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 22 22 29 2c 69 2e 6e 6f 6e 63 65 3d 6e 2c 6e 3d 3d 3d 65 2e 6e 6f 6e 63 65 26 26 65 2e 69 73 45 71 75 61 6c 4e 6f 64 65 28 69 29 7d 7d 72 65 74 75 72 6e 20 65 2e 69 73 45 71 75 61 6c 4e 6f 64 65 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ,t){if(e instanceof HTMLElement&&t instanceof HTMLElement){const n=t.getAttribute("nonce");if(n&&!e.getAttribute("nonce")){const i=t.cloneNode(!0);return i.setAttribute("nonce",""),i.nonce=n,n===e.nonce&&e.isEqualNode(i)}}return e.isEqualNode(t)}function
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 41 7d 2c 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 65 7d 2c 53 65 72 76 65 72 4c 6f 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 7d 2c 63 72 65 61 74 65 48 69 73 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 63 72 65 61 74 65 4d 65 6d 6f 72 79 53 6f 75 72 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 67 6c 6f 62 61 6c 48 69 73 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 69 6e 73 65 72 74 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 2c 69 73 52 65 64 69 72 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 6d 61 74 63 68 3a 66 75 6e 63 Data Ascii: A},Router:function(){return ue},ServerLocation:function(){return ne},createHistory:function(){return m},createMemorySource:function(){return g},globalHistory:function(){return f},insertParams:function(){return D},isRedirect:function(){return w},match:func
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 62 6c 65 28 29 3a 28 30 2c 72 2e 70 71 29 28 28 28 29 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 53 65 6e 74 72 79 5d 20 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 53 44 4b 20 77 69 74 68 20 60 64 65 62 75 67 60 20 6f 70 74 69 6f 6e 20 75 73 69 6e 67 20 61 20 6e 6f 6e 2d 64 65 62 75 67 20 62 75 6e 64 6c 65 2e 22 29 7d 29 29 29 3b 28 30 2c 4c 2e 6f 35 29 28 29 2e 75 70 64 61 74 65 28 74 2e 69 6e 69 74 69 61 6c 53 63 6f 70 65 29 3b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 65 28 74 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 75 2e 42 46 29 28 29 2e 67 65 74 53 74 61 63 6b 54 6f 70 28 29 3b 74 2e 63 6c 69 65 6e 74 3d 65 2c 74 2e 73 63 6f 70 65 2e 73 65 74 43 6c 69 65 6e 74 28 65 29 7d 28 6e 29 2c 66 75 6e 63 Data Ascii: ble():(0,r.pq)((()=>{console.warn("[Sentry] Cannot initialize SDK with `debug` option using a non-debug bundle.")})));(0,L.o5)().update(t.initialScope);const n=new e(t);!function(e){const t=(0,u.BF)().getStackTop();t.client=e,t.scope.setClient(e)}(n),func
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 72 74 73 26 26 45 65 2e 64 6f 63 75 6d 65 6e 74 26 26 45 65 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 22 68 69 64 64 65 6e 22 3d 3d 3d 45 65 2e 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 74 68 69 73 2e 5f 66 6c 75 73 68 4f 75 74 63 6f 6d 65 73 28 29 7d 29 29 7d 65 76 65 6e 74 46 72 6f 6d 45 78 63 65 70 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 63 6f 6e 73 74 20 6f 3d 49 65 28 65 2c 74 2c 6e 26 26 6e 2e 73 79 6e 74 68 65 74 69 63 45 78 63 65 70 74 69 6f 6e 7c 7c 76 6f 69 64 20 30 2c 69 29 3b 72 65 74 75 72 6e 28 30 2c 73 2e 4d 36 29 28 6f 29 2c 6f Data Ascii: rts&&Ee.document&&Ee.document.addEventListener("visibilitychange",(()=>{"hidden"===Ee.document.visibilityState&&this._flushOutcomes()}))}eventFromException(e,t){return function(e,t,n,i){const o=Ie(e,t,n&&n.syntheticException\|\|void 0,i);return(0,s.M6)(o),o
2024-05-03 04:44:50 UTC	1325	IN	Data Raw: 6e 69 73 6d 3a 7b 64 61 74 61 3a 7b 66 75 6e 63 74 69 6f 6e 3a 22 68 61 6e 64 6c 65 45 76 65 6e 74 22 2c 68 61 6e 64 6c 65 72 3a 28 30 2c 4e 2e 71 51 29 28 69 29 2c 74 61 72 67 65 74 3a 65 7d 2c 68 61 6e 64 6c 65 64 3a 21 31 2c 74 79 70 65 3a 22 69 6e 73 74 72 75 6d 65 6e 74 22 7d 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 7d 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 6e 2c 44 65 28 69 2c 7b 6d 65 63 68 61 6e 69 73 6d 3a 7b 64 61 74 61 3a 7b 66 75 6e 63 74 69 6f 6e 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 68 61 6e 64 6c 65 72 3a 28 30 2c 4e 2e 71 51 29 28 69 29 2c 74 61 72 67 65 74 3a 65 7d 2c 68 61 6e 64 6c 65 64 3a 21 31 2c 74 79 70 65 3a 22 69 6e 73 74 72 75 6d 65 6e 74 22 7d 7d 29 2c 6f 5d 29 7d 7d 29 29 2c 28 30 2c Data Ascii: nism:{data:{function:"handleEvent",handler:(0,N.qQ)(i),target:e},handled:!1,type:"instrument"}}))}catch(r){}return t.apply(this,[n,De(i,{mechanism:{data:{function:"addEventListener",handler:(0,N.qQ)(i),target:e},handled:!1,type:"instrument"}}),o])}})),(0,
2024-05-03 04:44:50 UTC	16384	IN	Data Raw: 28 74 5b 33 5d 29 3b 65 26 26 28 74 5b 31 5d 3d 74 5b 31 5d 7c 7c 22 65 76 61 6c 22 2c 74 5b 33 5d 3d 65 5b 31 5d 2c 74 5b 34 5d 3d 65 5b 32 5d 2c 74 5b 35 5d 3d 22 22 29 7d 6c 65 74 20 65 3d 74 5b 33 5d 2c 6e 3d 74 5b 31 5d 7c 7c 43 74 3b 72 65 74 75 72 6e 5b 6e 2c 65 5d 3d 47 74 28 6e 2c 65 29 2c 52 74 28 65 2c 6e 2c 74 5b 34 5d 3f 2b 74 5b 34 5d 3a 76 6f 69 64 20 30 2c 74 5b 35 5d 3f 2b 74 5b 35 5d 3a 76 6f 69 64 20 30 29 7d 7d 5d 2c 5b 34 30 2c 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 46 74 2e 65 78 65 63 28 65 29 3b 72 65 74 75 72 6e 20 74 3f 52 74 28 74 5b 32 5d 2c 74 5b 31 5d 7c 7c 43 74 2c 2b 74 5b 33 5d 2c 74 5b 34 5d 3f 2b 74 5b 34 5d 3a 76 6f 69 64 20 30 29 3a 76 6f 69 64 20 30 7d 5d 5d 2c 51 74 3d 28 30 2c 4e 2e 67 64 29 28 2e 2e 2e 57 74 29 2c 47 Data Ascii: (t[3]);e&&(t[1]=t[1]\|\|"eval",t[3]=e[1],t[4]=e[2],t[5]="")}let e=t[3],n=t[1]\|\|Ct;return[n,e]=Gt(n,e),Rt(e,n,t[4]?+t[4]:void 0,t[5]?+t[5]:void 0)}}],[40,e=>{const t=Ft.exec(e);return t?Rt(t[2],t[1]\|\|Ct,+t[3],t[4]?+t[4]:void 0):void 0}]],Qt=(0,N.gd)(...Wt),G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49916	108.139.29.30	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:50 UTC	674	OUT	GET /xhr.html HTTP/1.1 Host: app.short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:50 UTC	1045	IN	HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Fri, 03 May 2024 04:44:50 GMT Server: nginx Cache-Control: public, max-age=60, stale-while-revalidate=3600, stale-if-error=3600 strict-transport-security: max-age=63072000; includeSubdomains; preload x-content-type-options: nosniff Content-Security-Policy: script-src 'nonce-bd70fb4c3b048b1b11f7f90caab4dc0d' 'report-sample' 'strict-dynamic' 'unsafe-inline' http: https: 'sha384-XYenUSTqiv+nam4OYXS7f8jE1g0w48N39aClx7VtDJSBbhHon48vwUQzU9lAlu+c' 'sha384-Qkti7soZgFU9T8qfnQy+GB/xybE5wbDDF+MUb5be479yklDnPVt5CrEkzw4kSDQY'; base-uri 'self'; object-src 'none'; report-uri https://o64941.ingest.sentry.io/api/137923/security/?sentry_key=e63e4b408c9d4d1cb6a399ff24fc9a5f; referrer-policy: strict-origin-when-cross-origin X-Cache: Miss from cloudfront Via: 1.1 fdc88b576635a6d1858343ad162c44fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UTccd26JQyGzX7e2tamhu-POzXfoM95pwqd5yBTuKALvxZ4CoIyovg==
2024-05-03 04:44:50 UTC	830	IN	Data Raw: 33 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 62 64 37 30 66 62 34 63 33 62 30 34 38 62 31 62 31 31 66 37 66 39 30 63 61 61 62 34 64 63 30 64 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 4a 77 74 28 74 6f 6b 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 61 73 65 36 34 55 72 6c 20 3d 20 74 6f 6b 65 6e 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 61 73 65 36 34 20 3d 20 62 61 73 65 36 34 55 72 6c 2e 72 65 Data Ascii: 337<!DOCTYPE html><html> <script type="text/javascript" nonce="bd70fb4c3b048b1b11f7f90caab4dc0d"> /* eslint-disable */ function parseJwt(token) { var base64Url = token.split(".")[1]; var base64 = base64Url.re
2024-05-03 04:44:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49917	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:50 UTC	618	OUT	GET /static/Graphik-Regular-Web-d3151eef921a9fea9980627ea3af95b4.woff2 HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://short.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	1042	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 44016 Connection: close Date: Fri, 03 May 2024 04:44:51 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-abf0" Expires: Tue, 02 Jul 2024 04:44:51 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 f9aa0e4086fcbefc20f307d96a8e3b44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Hk01aPazHWIucs_Jz2Z-H1bUXyAgJIameEqIvFEdUQGGgWnX_DzAeA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server-Timing: cdn-upstream-layer;desc="REC",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=6,cdn-cache-miss,cdn-pop;desc="JFK50-P5",cdn-rid;desc="Hk01aPazHWIucs_Jz2Z-H1bUXyAgJIameEqIvFEdUQGGgWnX_DzAeA==",cdn-downstream-fbl;dur=28
2024-05-03 04:44:51 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ab f0 00 13 00 00 00 02 49 ec 00 00 ab 85 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 df 1e 1c ac 06 14 85 36 06 60 16 8b 60 00 89 10 08 48 09 82 73 11 0c 0a 85 81 40 84 c2 45 0b 8a 66 00 12 85 3c 01 36 02 24 03 95 48 04 20 05 8d 18 07 ad 00 0c 84 78 5b c3 23 92 00 d6 6e bb f4 0f 0a b7 0d 80 8b cb cf 3f 61 32 37 d0 71 fb 55 05 6c 1e 8d ea 96 9c 16 fc 4b 35 4c af 62 fc ee 56 55 d9 26 48 ee ec ff ff ff ff 35 c9 42 c6 f4 ee 53 ee 3f 01 0a 80 80 aa 6a d4 75 6b 3b c8 72 77 84 48 19 4e 19 4e 0e a9 b4 d1 66 57 d7 2b 10 f8 1c 10 59 79 9c 82 e6 4c 0b 74 a0 15 9b b1 ef 65 82 50 8e 25 b2 38 f2 c9 58 23 4c c9 94 52 fd 6c 5d e6 6e 20 91 1f 30 18 4e 57 23 20 e3 ec a6 14 96 e3 66 de e9 28 be 3c 4c 09 cb 89 Data Ascii: wOF2I6``Hs@Ef<6$H x[#n?a27qUlK5LbVU&H5BS?juk;rwHNNfW+YyLteP%8X#LRl]n 0NW# f(<L
2024-05-03 04:44:51 UTC	1514	IN	Data Raw: cc c0 ff d3 c8 16 3e fb 36 3f f6 f4 ed c4 6b 65 98 30 a2 97 8e bd b3 29 fd c8 5d b4 18 6d d3 ce d3 46 5e 26 72 ab a9 1b dc 55 ef 3b d3 e0 2a 84 c5 66 a5 64 12 4a c0 52 85 8d c5 dc a0 39 99 05 be 43 94 d4 07 62 24 f5 a8 10 82 93 4b 5f e3 c9 22 54 a5 fb df e3 40 fa af 00 72 41 bc cf fc d9 ad 7c f8 a6 37 aa 70 86 9e 1a fd 62 75 3f 09 4e b9 1e d7 e0 fd 88 54 fd 2e 08 c6 e8 23 47 84 84 f6 8f 13 5a f4 d0 55 ee ac 4d 3f 72 07 a5 96 6c 77 6a 3e 37 9e 95 77 2e be 34 7f 8a 4b 02 a0 ef 60 c5 f1 d8 96 8b 28 50 35 c4 5d 77 d0 0e 98 38 bc 1d f6 1d 77 7b 78 81 db d5 7f 04 28 97 c0 9f 3a c4 24 f5 c9 06 64 5f a5 4b 8d a0 84 f7 8f e5 ee d1 a7 7c d5 82 ee d7 97 73 ed 11 13 55 70 cd c1 eb 6c 8a ea 6b 2d 93 38 21 01 dd fd 5d 41 e6 f5 96 d8 c1 08 a7 4b 6e ee c0 5a c9 50 ae e1 Data Ascii: >6?ke0)]mF^&rU;*fdJR9Cb$K_"T@rA\|7pbu?NT.#GZUM?rlwj>7w.4K`(P5]w8w{x(:$d_K\|sUplk-8!]AKnZP
2024-05-03 04:44:51 UTC	8949	IN	Data Raw: 56 23 3a ee e6 c2 b5 9a 6b b7 1d af 6b 54 cd ae 3b b5 81 56 52 2d 0a b9 21 27 89 05 39 0e 97 40 2d bb 78 73 d8 43 eb cd c6 9d d6 32 e0 b4 f6 b7 86 12 af 26 2a a8 29 50 6e 6a 03 6e d9 f7 ce a4 23 ca 56 17 b1 37 d5 ff 82 39 fe a2 0a eb 76 43 6a d7 1b 98 97 cb f2 fb 7a 5d 48 38 22 25 16 42 e9 28 5f 7d 58 1f 0d a3 21 bb 0e 35 6e 8a 93 7a a3 c3 f7 5a a0 0a 1d 55 4b 5f 28 05 0e c5 ca c1 09 67 75 3f 93 fa b0 4d 25 b6 1f 3a ad 2c 17 27 5a 61 72 c7 dc 91 7a 5c bf 17 81 12 34 b7 d4 cc 52 d5 42 a5 98 5f 68 ed d1 15 dd 92 75 09 d2 80 4a 3d e8 40 d1 3f 90 4d a5 0f 7a 20 45 d6 c1 39 b2 c1 9d 1c e9 9c be fb 1e b2 51 b8 6e 63 a0 55 f9 81 36 74 3f 32 18 cc d4 15 36 28 8f 6e c9 98 59 35 68 e6 05 9b 84 bb 39 8e ce 55 b7 f6 77 76 0a d7 d3 9a c4 7d 70 75 84 41 5a 95 9a bd 76 Data Ascii: V#:kkT;VR-!'9@-xsC2&*)Pnjn#V79vCjz]H8"%B(_}X!5nzZUK_(gu?M%:,'Zarz\4RB_huJ=@?Mz E9QncU6t?26(nY5h9Uwv}puAZv
2024-05-03 04:44:51 UTC	12792	IN	Data Raw: 96 d4 26 5e c9 2e 52 5f da f7 c0 cb 0e 11 ac 0a 77 c9 97 7f 78 ec 9f f0 87 4d ae 3c cf 63 93 f5 6e 2b f9 4a 40 19 44 31 b5 65 18 af 2d bb be 76 dc 6f e6 6c 62 84 a8 17 70 29 a6 79 4e da 17 b3 95 71 5c 2f 79 99 db 54 97 d1 b4 60 59 66 e6 b2 05 19 4d 75 26 f7 32 b2 56 68 c2 5e 1a 3f 75 ff be 59 6a ff 37 9a 6f 7d 6a 96 1c df a7 4b 26 ac d0 3b 7e 20 ef 0b f8 be d5 7c e3 1f 55 5b dc 11 bd 5c 77 23 ae 11 b8 32 78 45 9a 78 15 73 05 78 f7 3f 93 15 67 e1 72 31 42 0f f6 1c 4d cf 93 2f 54 28 5a b6 1a c8 cb fa c7 36 51 15 73 2f 2d 20 15 81 3c 95 c1 22 de 6f c3 a0 33 23 55 7c 7b e6 a4 bf f3 c4 7a b5 62 c6 56 03 79 73 d3 c3 0a 92 a2 fd ae ba c4 25 51 f1 1f cf 2c 56 b9 2d 14 fb cd 10 2d 8e bd bf 94 85 76 ec 72 0a c8 57 b5 29 94 0d 03 7a f2 dc 81 ec e6 6c 65 f5 96 3a 92 Data Ascii: &^.R_wxM<cn+J@D1e-volbp)yNq\/yT`YfMu&2Vh^?uYj7o}jK&;~ \|U[\w#2xExsx?gr1BM/T(Z6Qs/- <"o3#U\|{zbVys%Q,V--vrW)zle:
2024-05-03 04:44:51 UTC	4377	IN	Data Raw: 46 db b5 20 e4 b5 5b bc 1b 28 68 5f 86 19 4f dd f4 86 f2 f6 91 70 e0 ac c9 9c 7c a4 02 89 2c 8f 06 88 a1 a5 30 9c 64 31 34 38 c0 80 a1 a1 77 2f d9 26 cd 66 fb c0 73 5b c7 86 8c 49 a0 e0 0a 80 9e 00 76 7d 52 20 02 8d 43 fc e2 3f 52 a8 75 59 48 75 e6 a8 07 22 6d ba 6c ce 44 fd 72 cf cc f7 76 46 9f fd a9 af 5a 56 92 30 27 5c 01 30 06 09 50 5e 1c db e7 74 27 4a 06 59 f3 f3 03 43 b2 2e f2 64 a8 3a f0 6f fa 34 f6 2a 97 1f a7 4b 50 73 a3 c2 b2 86 37 42 34 26 de ec c3 6d 55 98 b0 b4 7a cb 80 0b 5c b5 fa e6 2a 4f 8f 02 ae 40 ee 8e b6 58 42 f0 68 4c de e2 7e a1 cf 7e 2f 24 ba 9a ad d1 05 49 be 32 da c1 a1 b3 a0 57 c4 7d 82 ce cf 86 94 9e d9 e5 8f 1f 13 4c ce 7c 53 24 13 af 48 26 34 07 03 fc 02 df 4f d6 ac ec 31 0a bb c5 63 04 15 3c 86 c7 f0 18 7f 6f 88 f0 16 ef 7d Data Ascii: F [(h_Op\|,0d148w/&fs[Iv}R C?RuYHu"mlDrvFZV0'\0P^t'JYC.d:o4KPs7B4&mUz\O@XBhL~~/$I2W}L\|S$H&4O1c<o}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49918	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:50 UTC	617	OUT	GET /static/Graphik-Medium-Web-2a840b356254e218b9b3a2c600652730.woff2 HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://short.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	786	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 47196 Connection: close Date: Fri, 03 May 2024 04:44:51 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-b85c" Expires: Tue, 02 Jul 2024 04:44:51 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 57a5349e40888d521545fc9b83f270a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RGJCY_n50REOQVc1BewUz_j_pnwxtUhxUpiCwXwcpR7b2_K5MQ533w== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:51 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 b8 5c 00 10 00 00 00 02 61 28 00 00 b7 fa 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 83 91 0c 1c ac 12 06 60 00 89 10 08 48 09 82 73 11 0c 0a 85 94 14 84 d5 25 0b 8a 66 00 01 36 02 24 03 95 48 04 20 05 8d 18 07 ad 00 0c 85 6c 5b 3f 3b 92 03 32 c7 7e 72 34 12 ad 56 6e 1b 00 cf 55 af 5d cd d6 35 b2 31 1c 71 ad eb b9 09 44 af 59 5a da 0a 36 ee 12 83 ee 00 f0 63 4b c5 94 fd ff ff ff ff 2f 48 26 32 96 c9 15 2e 49 0a 14 26 0c 54 e4 f5 37 85 14 33 67 b8 ca aa 1c 0d c2 d1 46 6a 2f 98 30 1b e0 0c b9 cc 32 cb 1f 15 37 47 ab a5 23 db fe fa 42 d9 33 dd 8e 43 9a e7 dd 1f 3a 42 ee 65 db 80 d6 e7 2c 0f a1 4a 59 4e 57 ae 1c 50 0d a0 9a 2c ea 25 ee 80 aa 3a 8a 03 67 41 75 09 ed 29 e7 75 49 28 5a 55 ae 43 53 19 Data Ascii: wOF2\a(`Hs%f6$H l[?;2~r4VnU]51qDYZ6cK/H&2.I&T73gFj/027G#B3C:Be,JYNWP,%:gAu)uI(ZUCS
2024-05-03 04:44:51 UTC	1514	IN	Data Raw: 1f c1 f2 55 9e 25 e5 13 75 37 c6 92 3e 7b 16 4e df 5b e0 f8 86 c5 dc 39 b6 c4 9f 59 c2 ac d8 49 2c 5a 68 1b 15 06 8e b0 0b f7 66 e0 88 8e 45 14 d6 1d 09 66 28 a4 77 61 2e fb 86 4f 0d c9 a4 bf bc 96 b4 dd d0 7e 6e 8e 27 60 6b 0f db f4 70 54 67 9d a6 53 72 08 2f 35 db 86 6f 2d e1 d9 76 2f 50 a7 19 8b e9 6d 33 fc c9 63 c1 e3 b2 3f a8 73 12 72 1d ed fb fa 78 1f b0 19 ab fb dd a4 6c 3a 7f 90 32 df 28 c3 15 8f 03 bb 96 eb 27 76 99 ba e9 08 57 17 8b 42 d6 ed a0 52 6e 96 39 e6 8c 6a 7a 9d 46 7c 51 53 84 5a 8e db de 4f 00 56 06 63 8a a5 7c 4c f7 a4 eb e2 f3 47 eb 85 30 10 05 0a b3 83 a4 1c b7 96 e4 06 12 d8 ed 52 2e f2 73 0d 85 2d ee de 3e 1d 15 b1 06 0c 67 6e 6c 25 db 71 80 c3 d2 9c 88 ba 1e 06 6b fa d4 cc 2e a9 b2 8f 77 17 63 17 a6 0f c9 ed d8 34 88 43 d7 de c2 Data Ascii: U%u7>{N[9YI,ZhfEf(wa.O~n'`kpTgSr/5o-v/Pm3c?srxl:2('vWBRn9jzF\|QSZOVc\|LG0R.s->gnl%qk.wc4C
2024-05-03 04:44:51 UTC	8949	IN	Data Raw: 02 73 a2 f7 03 0b d2 3d ac 1f fa fc 56 19 5b c6 0c 47 ea e4 65 c5 16 9f 3d c7 9d 63 ba 62 70 60 15 0b 61 7d 99 9d 0e b1 96 c0 48 4d 3d 72 6e 95 fa 9d 18 41 61 ee 6e 86 fe f1 3d 10 65 eb 51 bd 62 54 7c 1d 99 fb 89 9f bc db 8c a3 c5 b8 86 61 45 dc d6 a9 3b 58 e3 a1 3f 72 74 e8 6e c9 ea 21 fd 38 0a ba 1f 10 16 1f ae 51 10 c3 61 db ea a8 b1 a7 94 5b dd 22 30 ad 4d fa ed df c3 e3 75 3f 57 4f c2 6e c2 a1 3d 94 22 ee ce 38 22 a1 d4 d6 33 65 ea 5a 8d 8c 7c 63 c2 03 d1 a2 95 f8 c8 f7 27 cb 81 54 85 2d 60 0c 23 e7 63 e1 6e 1c b2 be 3c 5d 97 ca dc db e6 e5 f1 32 b1 30 c0 62 73 d5 15 c5 99 6d 82 f2 9a da e3 20 1c 9d 1e cc fd cc f9 32 24 c2 15 98 dd 16 60 5a b5 9e 91 15 ae 23 3d d6 08 f1 40 1a 0f 55 00 19 6e 96 d1 db 7f fb 8b f9 57 50 c2 93 e6 67 b7 09 61 4d 67 86 71 Data Ascii: s=V[Ge=cbp`a}HM=rnAan=eQbT\|aE;X?rtn!8Qa["0Mu?WOn="8"3eZ\|c'T-`#cn<]20bsm 2$`Z#=@UnWPgaMgq
2024-05-03 04:44:51 UTC	16384	IN	Data Raw: ca 5b 6a 2d 9e c7 30 63 c6 50 2e 5e 2d c1 07 48 7d b8 8d dc 6c 5d 94 21 75 c1 07 54 04 5f d5 4a bd bf 85 2e f5 2f f6 e4 84 06 97 ff c0 56 39 46 53 26 9a 9c 6c 31 d3 86 79 15 e3 e0 f0 71 6e 99 d4 8f ab 8b d4 a9 0d 52 b9 5a 2f 42 a5 b2 18 28 8d 5e bf 7e 2a a4 6e fb 31 3f ff ec 52 27 35 9b ed 83 a9 39 55 66 2e a8 f6 24 7e e1 ea b8 35 24 d5 63 5b 05 ad c6 5e f1 39 41 45 e5 f1 b5 5f 5c 02 71 b6 4a 8b 8a eb 83 b3 63 88 67 3b 8b 53 ea 44 3c f8 b3 67 8e 67 30 88 9f 95 3a c6 29 46 cd d7 ea e8 7f 63 30 e5 dc fe 72 68 db 70 24 27 38 b8 ca 26 d4 eb e3 29 93 cd f5 4c 11 d3 8a 7e 1d eb e0 96 46 f1 fd 8c 49 ce be b8 53 70 68 ed e9 a1 b0 48 a7 14 69 f4 26 51 9d 5a 2f 93 ab f5 53 15 59 04 07 59 9c 67 51 15 30 d1 d4 df 81 56 69 5b d5 98 a2 f8 6c 7d ad b3 f6 79 66 e3 02 e8 Data Ascii: [j-0cP.^-H}l]!uT_J./V9FS&l1yqnRZ/B(^~*n1?R'59Uf.$~5$c[^9AE_\qJcg;SD<gg0:)Fc0rhp$'8&)L~FISphHi&QZ/SYYgQ0Vi[l}yf
2024-05-03 04:44:51 UTC	3965	IN	Data Raw: 88 f4 49 7f bc 7c be 20 20 e0 fa 39 db ad bf 92 b8 fe 5f e9 a4 b7 80 d7 ff de 33 02 f0 c1 4f 52 aa 3f 06 27 78 db 1e 82 81 09 61 00 01 ed c3 2b 06 ba 2b ae c1 19 bd 6d 90 6f 51 f5 f0 20 f9 e7 cf 8f f2 59 96 2c 45 66 c6 63 51 0a c9 24 cc 6a 37 8d 77 66 ba da 74 57 d3 f3 12 49 02 12 ad 98 18 ca 45 89 05 39 75 bf f7 0f 47 ff 24 cc 93 6e 45 13 95 4e 90 9a b8 74 8e 49 98 16 cf ae 0c 76 da 5a 14 47 7a 4e c2 6e 64 b0 74 12 ae 47 03 d3 1d 67 d9 1d c6 ed a7 a8 77 ec 6a a5 28 39 45 39 52 34 26 d8 f5 99 22 ce 7c 72 8b b8 5c 8a b2 a1 68 c9 14 35 4c d1 1c d8 15 5a 94 ac e7 8a 4a 21 cd 0b bf 67 e4 75 91 e1 6e e1 77 8d b8 1d f4 0a 41 b8 d3 8a 9c c2 71 27 eb 68 20 b6 f8 4e 66 93 df 9a ce a2 9d 64 e5 4e 72 d5 49 93 ad 75 1b a2 93 e4 24 23 8b 3e 37 f3 48 25 4c eb bd 5a 3e Data Ascii: I\| 9_3OR?'xa++moQ Y,EfcQ$j7wftWIE9uG$nENtIvZGzNndtGgwj(9E9R4&"\|r\h5LZJ!gunwAq'h NfdNrIu$#>7H%LZ>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49919	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:50 UTC	619	OUT	GET /static/Graphik-Semibold-Web-483a378d3eceb3b9ca5c6b0eb2e273f0.woff2 HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://short.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	798	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 47932 Connection: close Date: Tue, 30 Apr 2024 00:16:32 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-bb3c" Expires: Sat, 29 Jun 2024 00:16:32 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 f5527f719bbc0d2932043daaeff80252.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: psorXkZCh5g7VDQ9b3BouL2KBOleQbI1T2NT9sCkBJzBY-RC1NeiSw== Age: 275299 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:51 UTC	15586	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 bb 3c 00 10 00 00 00 02 6e 90 00 00 ba da 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 83 90 54 1c ac 08 06 60 00 89 10 08 62 09 82 73 11 0c 0a 85 ae 24 84 e3 4c 0b 8a 66 00 01 36 02 24 03 95 48 04 20 05 8d 34 07 ad 00 0c 86 4e 5b bc 42 72 06 cd b8 76 7f cb 41 d0 6d 08 00 96 aa 6b 5a f5 57 74 81 e9 e6 64 8f 57 7a 6e e6 a8 52 b0 16 53 33 c6 dd 8c dd ad aa 04 13 a3 ab ec ff ff ff cf 4f 2a 32 66 d3 49 d2 6e 00 a8 c0 15 51 fe ff 46 4f 92 05 21 33 83 b5 a5 85 a5 91 26 59 f6 59 39 54 13 8e 02 71 9a af 51 2b 5e 19 36 09 e2 66 b3 30 2c 29 87 24 3d 92 04 da 3d 14 46 72 59 65 01 dc 8c 46 56 98 e6 af 7c 50 71 63 9b 9e ad f5 d6 5a ab 30 58 8e b8 47 d8 cb d1 1e 78 cc 19 f0 b6 e8 39 92 cb 2e b8 79 e4 47 b6 2c Data Ascii: wOF2<nT`bs$Lf6$H 4N[BrvAmkZWtdWznRS3O*2fInQFO!3&YY9TqQ+^6f0,)$==FrYeFV\|PqcZ0XGx9.yG,
2024-05-03 04:44:51 UTC	16384	IN	Data Raw: 42 29 94 02 b6 96 47 3c 76 9c 07 d2 76 5b ac 3b 11 e2 d6 1c 85 24 13 71 13 a2 4a 30 6d 30 0d 0b 38 93 6e b2 98 31 06 29 44 ff 87 72 82 c9 70 25 9d a6 9e b4 5e 0e 8c 0c 27 10 cf 89 f9 18 2d 02 be 66 79 ec b8 ba 7e 29 9a 5f 61 2a 4b b2 78 0e 15 12 df 9e c1 b4 2b 8d 86 f8 e6 0c a0 15 62 31 e3 10 e7 73 42 2c d4 3c 9b a7 71 fa 1a 02 37 9e ae 63 ce c7 1c 49 dd 6c 58 3a 96 3a 7f 71 2c 69 0b 22 89 1e 80 e4 59 80 94 a5 cc b1 04 ed f0 f2 18 c9 b2 f2 89 f4 20 8c 41 0a ef 31 9e eb 48 87 11 2b 1d aa c7 d9 22 65 20 d8 20 03 2a 64 af cd 04 e4 87 f6 6e dc bb fd 96 ff 41 25 17 44 64 1c 2d 00 61 9a e5 85 db 7c cd 8b a2 1d 9c 9b 0b b6 18 34 27 9a bf 09 a6 12 9a 5d bc 61 fd 2f 48 16 a1 bd 32 6c 2a 02 76 62 cd 2a a0 b1 b2 e5 3a 2f 33 9a 53 92 dd 11 22 72 f2 5e 43 30 ae 8a bc Data Ascii: B)G<vv[;$qJ0m08n1)Drp%^'-fy~)_aKx+b1sB,<q7cIlX::q,i"Y A1H+"e dnA%Dd-a\|4']a/H2lvb:/3S"r^C0
2024-05-03 04:44:51 UTC	15962	IN	Data Raw: 17 2f 6e 13 86 fc 90 5d c2 29 fa 2f 6e 6a 4b 56 ca b3 5c 82 51 bb 27 63 d5 91 c3 ab a4 59 ee 05 dc 42 b3 78 a6 45 87 2f b9 f6 54 9b 48 90 5f 9a 35 5f 43 67 e8 b2 0a 1d 1c 94 73 e7 6a 4d 32 99 c5 dd 52 d6 89 0e 55 70 92 e2 5d 3f ff 14 63 e0 29 a8 15 03 8b 5b 53 8d c6 1e f6 bb 77 bc 99 76 4d 6a db 8e d5 dd 1c a7 ab 99 d6 9f 55 ac 12 2c 5c 5f 1a af 4f 8b 4d 3e 73 e6 77 8c ac 82 44 62 a9 c5 29 96 63 61 8e c8 f2 82 72 c6 a4 90 c8 16 bf 72 8a 67 f7 5b 08 c6 20 07 c0 3f a5 34 48 02 10 0c de 09 a5 39 c2 41 bb 3e 65 1b 55 66 1b 94 bb 55 6e 8b a9 91 b2 b3 15 b5 3e de 1b 35 3e 19 35 3c 11 5a 60 48 ad df 07 6a fc 31 50 c3 0f 01 2d 6c 26 02 dd 2c 17 8f 01 23 c7 3d 23 c7 90 91 3f d9 4c 0b 5b 13 a0 ce 58 a3 c9 58 c7 0d 60 5a a4 fb d9 0a 6e b7 83 37 4a b8 13 50 e7 2d 51 Data Ascii: /n])/njKV\Q'cYBxE/TH_5_CgsjM2RUp]?c)[SwvMjU,\_OM>swDb)carrg[ ?4H9A>eUfUn>5>5<Z`Hj1P-l&,#=#?L[XX`Zn7JP-Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49921	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	640	OUT	GET /static/star-d38c032d63bee9674f56de0a6cb578e7.svg HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	786	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 10562 Connection: close Date: Fri, 03 May 2024 04:44:51 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-2942" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6ea9421ec132e3640100792ef9535494.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2WiFfgWvA4odMpQIEgBVWPMBki2_fMwkBHYBfDdLkK9SprO2JLV0Vw== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:51 UTC	10562	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 31 30 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 31 30 31 22 20 66 69 6c 6c 3d 22 23 30 30 30 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 39 30 76 31 30 31 48 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 34 20 35 30 2e 39 6c 2e 38 2e 32 63 2e 32 20 30 20 2e 34 20 30 20 2e 36 2e 32 20 31 Data Ascii: <svg width="90" height="101" fill="none" xmlns="http://www.w3.org/2000/svg"> <mask id="a" maskUnits="userSpaceOnUse" x="0" y="0" width="90" height="101" fill="#000"> <path fill="#fff" d="M0 0h90v101H0z"/> <path d="M4.4 50.9l.8.2c.2 0 .4 0 .6.2 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49920	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	648	OUT	GET /static/small-planet-e3789c1103edc526be0f3eb2b4c28d03.png HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 32744 Connection: close Date: Sun, 28 Apr 2024 14:33:03 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-7fe8" Expires: Thu, 27 Jun 2024 14:33:03 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 cf549a03d4f209dc2ee52d1dd6cb3730.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RfgAc23L6uDsvXuaSG9APO4bPJIyTWR2hJXw8SwHRBI3XCJR882M-Q== Age: 396708 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:51 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dc 00 00 00 dc 08 06 00 00 00 1b 5a cf 81 00 00 7f af 49 44 41 54 78 da ec d8 db 6f db 74 14 07 70 77 88 3d 00 9a 00 21 34 a9 bc 21 e8 1b 0f 3c 20 ed 85 7f 82 37 c4 3b 0f 80 72 69 ba 9b ba 2e 63 6c 43 9b 40 30 b5 b1 d3 0d 46 29 1b a2 e3 3a 2e d3 78 60 5c 64 3b 4d 2b 56 db 4d a2 6a bd a0 d2 12 db 4d 94 34 49 1b 3b 17 1f 8e 93 a8 ad 22 55 da 1e 26 18 7c 3f d2 d1 ef e7 f3 b3 d4 5a ca 57 c7 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 1c 91 d0 43 82 d0 23 6c eb 69 f7 ba fa dc 6b 17 f5 08 00 70 77 21 13 ee 50 3b 74 bb 23 a2 3d 3b cb 0f e4 ce 3d df 82 80 c2 ff 8b 1f b0 4e ed d9 ee c5 Data Ascii: PNGIHDRZIDATxotpw=!4!< 7;ri.clC@0F):.x`\d;M+VMjM4I;"U&\|?ZWC#likpw!P;t#=;=N
2024-05-03 04:44:51 UTC	1514	IN	Data Raw: 6d 6d 24 61 cb ea 8f fa 96 dd ea a4 12 17 99 d0 1a 45 b1 19 c1 40 53 e2 c7 21 01 68 34 57 49 49 fd e7 df 7b c0 e9 5f c0 6f 50 f3 a7 7f 00 77 ff e1 b0 2d 51 c4 d9 a0 0a 68 76 57 3b c2 03 c7 2c eb 54 ab 39 03 6c b6 9c 8a 10 47 bb a8 ac 56 ed 38 3f 6c 41 3d 96 b2 8a 8e 62 7f c9 b2 1e 00 dc 8a 80 f7 1a 72 28 68 b5 06 11 a0 0b b0 7c 2d e8 78 01 04 34 f0 41 b8 ee 8a fb de 23 95 8b 6d 0a b8 fd c1 80 f9 1c 53 2a ec 3e 47 8e a6 cd d4 7d 2b 99 de 88 43 5a 12 3b 17 a2 bb 52 69 49 bf ef fd ec 45 da bb f1 67 b4 70 c5 c7 f4 fa ca 34 7a ed 83 b7 b8 85 1c d8 4c 02 2d 9a f1 b0 a0 91 e1 f1 2c 65 9e fb 8c 6d aa 07 ac 5e ca e4 e2 75 e6 93 f4 d2 5b 3f 91 de 4a 09 38 bc ff b7 97 4f b5 cf ab 8e 6a 30 54 cd 4e 8d cf 11 e8 ee 05 43 e1 06 c6 c9 c7 3d 00 9e c3 b1 81 3b 72 a1 00 56 Data Ascii: mm$aE@S!h4WII{_oPw-QhvW;,T9lGV8?lA=br(h\|-x4A#mS*>G}+CZ;RiIEgp4zL-,em^u[?J8Oj0TNC=;rV
2024-05-03 04:44:51 UTC	12792	IN	Data Raw: 90 c7 0a 55 8f d9 0b 6c a7 cd d0 96 a0 9b 29 bc 10 d4 5b cb 5d 39 9d a8 b7 f1 96 e0 90 80 cb 5b f6 63 1a 64 77 f8 62 b0 1a ab 3f 53 55 06 72 41 79 11 04 3e dd 5e 46 d9 22 9d 0c 9e b6 d4 63 f9 3c 81 14 de ce 69 87 21 3e 8b b2 95 e4 8a 7c d9 c7 ff 41 3b 50 10 26 e0 09 39 60 36 fe dc 50 79 99 f5 56 de 28 bb 07 c7 8e 64 3d 4e 9d db 07 a7 87 dd b9 99 63 9b 63 10 24 12 00 7c cb d9 93 09 0f e7 b4 a0 d3 19 4f c6 dc 30 ba 98 6d 6b 24 9b 07 eb 9a b7 45 84 57 d9 87 bf 75 d9 16 87 a1 c2 ba 31 15 49 74 15 03 c0 2b 26 87 94 94 b6 11 25 ed bf c4 6c 38 fd c3 87 ec 8b 5e 82 4a 39 18 d4 63 27 0c 34 16 06 81 1b e2 07 d8 dc 10 2f ae 49 f5 63 54 cc 18 83 a0 0a 9c e3 36 ed 66 51 ae 93 41 36 65 25 67 3b b0 cb 7f a0 92 3a 3d bd 34 3c 35 da 37 12 a4 c8 b8 83 42 5d 45 14 b0 a7 6b Data Ascii: Ul)[]9[cdwb?SUrAy>^F"c<i!>\|A;P&9`6PyV(d=Ncc$\|O0mk$EWu1It+&%l8^J9c'4/IcT6fQA6e%g;:=4<57B]Ek
2024-05-03 04:44:51 UTC	2054	IN	Data Raw: ac 9d 03 3b 91 8c 2a b3 5e 53 e8 33 00 ce c8 c0 a3 a8 5d bb 68 59 33 51 6c d9 1a 5a e6 38 34 35 1c 71 72 1e e2 72 15 4a 8e b7 5d 49 9d b8 6e 5b d3 83 de 24 3b c9 32 77 0e d9 16 fd 23 ed fb 8e 65 ff 7f af 37 a3 9a 09 95 f0 4d 2c ee 72 2c a8 6b 7e c4 de b8 78 55 73 aa 4c 46 2f 50 dd 63 19 e0 63 06 95 64 23 66 36 2f 64 52 49 90 40 14 2c c7 20 84 ad 68 b6 2c 8b ac 00 3b 7c 0a e7 43 ba ed 30 b7 f8 ae 80 fb bd 8b 5b 44 a4 b0 bd 57 a3 64 71 40 1a f1 32 8e 63 f9 be 2d 16 8b be a6 83 6b 2a fb 46 bf 26 1f 33 be 7f e9 61 95 7d 5d 16 06 9b cd 29 ea 6a db 2e 3f 5c fd 81 94 86 52 61 d7 05 3e 72 94 d5 61 ac f2 be 51 fb a7 ff 11 08 fb c1 2c 6c b1 21 f7 b1 6d da 8d ec 89 3f a2 96 b4 a7 b0 d8 de 06 a8 8e 23 28 de 25 54 4d 2d 09 3a 2e 3a 24 20 d5 4e 80 92 cf bf e2 f9 d3 ae Data Ascii: ;^S3]hY3QlZ845qrrJ]In[$;2w#e7M,r,k~xUsLF/Pccd#f6/dRI@, h,;\|C0[DWdq@2c-kF&3a}])j.?\Ra>raQ,l!m?#(%TM-:.:$ N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49922	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	643	OUT	GET /static/pumpkin-308a8ade7af387bedeca727644710baf.png HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	785	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 47006 Connection: close Date: Fri, 03 May 2024 04:44:51 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-b79e" Expires: Tue, 02 Jul 2024 04:44:51 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 cfc46590021b7df312893ffb67317bb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VVNxagqSNAZwSGM_XZVGy4gQYzW4b1BALsbDtrJsHMnQ5BWANto0FQ== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:51 UTC	15345	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 02 d0 08 03 00 00 00 8e 89 b7 ae 00 00 00 b1 50 4c 54 45 00 00 00 ff d2 5f ff d2 5f ff d3 5f ff d2 5f ff d2 5f ff d2 5f ff d3 5f ff d2 5f ff d2 5f ff d2 5f ff d1 5d ff d2 5f ff d2 5f ff d2 5f ff d2 58 ff d3 5f ff d1 5e ff d2 5f ff d2 5f ff d2 5f ff d3 5f ff d2 5f ff d2 5e ff d2 5f ff d1 5e ff d2 5e ff d2 5e ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5e ff d2 5e ff d2 5f ff d2 5e ff d2 5f ff d2 5f ff d2 5e ff d2 5f ff d2 5f ff d2 5f ff d2 5e ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5e ff d2 5f ff d2 5f 4b 6d 3f cf 00 00 00 3a 74 52 4e 53 00 fb ee dc ea df cc f8 cf bb d9 0f bf e6 ac 05 9b 1e c8 f6 9f af 8c 4f b7 Data Ascii: PNGIHDRPLTE__________]___X_^_____^_^^^_______^^_^__^___^__________^__Km?:tRNSO
2024-05-03 04:44:51 UTC	2553	IN	Data Raw: b6 81 34 19 25 c3 e3 ae ec 02 36 9e 39 6e 70 17 90 62 20 35 5f b7 ce 94 ca 27 2f c7 3d 4e 77 13 bc a2 1b ab f2 19 3e f6 4f b9 0e 18 2c 7f 47 9e b6 96 53 e1 f7 55 fa 73 95 25 6a 8b 2c 4b fa 47 3f d5 f4 9c 5b ee 60 a8 45 40 c0 67 d0 7f 5f 5c cf 1c fe 87 ea 3c 00 00 e6 29 2d e1 ca 5d 7e 35 ac 73 8d c0 0f 40 42 e0 e9 16 84 c2 02 e2 97 44 bd 3d b6 c8 d5 33 8f 9c 77 0d d9 7d e9 1d 5d 03 f1 14 a5 7d f5 2a bf 1e 08 ff 33 22 15 7b 88 ff 0a 88 41 4f 95 4e af 3a a8 0a 57 2e 5b 4f 10 52 20 17 d7 b5 e0 b2 c2 02 3a bd de f2 a8 4a a8 3e 0b df bf 5f ee 78 f4 2c 77 00 3a d0 1a 48 d3 87 91 7a 93 3d b4 3a fc af 54 ec f5 ad e5 fe 79 46 02 ed 8e 4b 97 17 1d 4e e6 c3 26 d7 38 71 9c 3a 22 1a e3 b3 7b 21 6d 91 88 76 87 ed 7c 99 53 17 aa 0d 92 bc 5d 2d 6d 0e cf 07 31 91 88 76 ab Data Ascii: 4%69npb 5_'/=Nw>O,GSUs%j,KG?[`E@g_\<)-]~5s@BD=3w}]}*3"{AON:W.[OR :J>_x,w:Hz=:TyFKN&8q:"{!mv\|S]-m1v
2024-05-03 04:44:51 UTC	16384	IN	Data Raw: b9 a0 51 b6 ca 27 d6 93 f2 62 52 9d 8b 93 9d 06 fc ae 64 72 56 ee 74 06 07 b1 dd 76 a5 28 f3 1b 6b 06 e9 65 db b6 d1 e3 9f 61 82 3a 3f 17 18 a1 cd 3d 40 10 18 92 bd 18 d9 75 91 92 8e 4a 7e 99 d9 f0 13 8f 6f c0 89 52 10 da b1 43 2f 21 15 37 17 97 ad 37 c6 d7 4d 5f 9f 37 a3 36 bf ed f0 e2 c2 5a f4 b3 20 2e 66 34 93 c8 7f c2 41 4d 68 f8 27 88 1b d8 e6 d3 15 42 11 a1 18 11 ee 9a 1b 04 83 a9 04 01 a0 e1 16 a9 0f fa 38 0f b6 93 25 02 c8 bb 49 46 90 55 dc d7 52 21 05 dc 98 53 5d bc 39 8a a2 d5 30 19 c4 f1 86 fc b6 f8 fa ba 73 bd f4 e2 79 51 e6 ea fe 91 f0 cf 10 ca df f8 af 8c 4e 1a 03 11 12 09 8a d8 a9 e3 a8 09 1b 7c 25 80 6a 0a 25 92 e3 f9 bd a6 18 9b 1b 43 e3 c6 7a 51 1e d6 75 0a 9d 1c f2 db 50 bd 5e c4 8e 7f ee 15 74 78 fe 6b e4 b3 3f 73 48 56 5d 39 27 84 bb Data Ascii: Q'bRdrVtv(kea:?=@uJ~oRC/!77M_76Z .f4AMh'B8%IFUR!S]90syQN\|%j%CzQuP^txk?sHV]9'
2024-05-03 04:44:51 UTC	12724	IN	Data Raw: bb e9 38 35 ee 9b 98 21 db 6b f1 bc 34 cb ce 46 08 b7 ee ba a7 2f 49 dd 5d 94 a6 ef 07 b4 b3 8a 01 86 31 12 27 f5 2c c8 23 e0 ce 79 44 da 9c 65 b5 dd 76 2a c1 1f 4b 5c 21 c4 bb 97 be 7a 18 cc db ca d7 fc 13 ff e9 58 12 62 5d e6 c7 a9 32 ae e2 9c 06 60 56 c8 bb 38 2b d4 b4 19 b7 56 d1 7c c5 b1 a1 72 1b 51 d4 ac 3e 2b 39 85 2a 4e 44 03 15 c7 32 ca bd c3 ac 57 6b 67 ed 71 6f dc c8 da 8d 2c 74 c3 30 b3 bc 7b 4e 55 31 d8 68 b2 9a da 66 4b fb d5 d3 78 a2 27 57 9c 94 7e 78 c9 f9 16 9c 78 c6 39 a0 31 12 67 a5 a3 af 72 0d e2 4f 03 00 bd ae 2f 8e db 4e 93 3e 11 d0 6e 4a 7c 83 06 e4 60 be dc e6 4a f3 4f 5e eb 4f a7 76 a6 57 7e 1c dc 68 21 cd 99 01 9f 7c c5 0c 14 a9 c7 5f 88 c1 d1 07 5f 81 1f 21 86 f6 c6 dd 48 9d de 15 e7 b2 10 7a 38 57 e3 d0 75 dd 27 e1 0a 31 13 8d Data Ascii: 85!k4F/I]1',#yDevK\!zXb]2`V8+V\|rQ>+9ND2Wkgqo,t0{NU1hfKx'W~xx91grO/N>nJ\|`JO^OvW~h!\|__!Hz8Wu'1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49923	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	546	OUT	GET /page-data/app-data.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	761	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 50 Connection: close Date: Fri, 03 May 2024 04:44:51 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT ETag: "662a30ac-32" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 ab734ad5d81cc9d470b6176a05dd968e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: W0wmL5UsIIsfkotLidEZ2lucW3BhXNB0uNJOmCalVuR29QwJFy49QA== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:51 UTC	50	IN	Data Raw: 7b 22 77 65 62 70 61 63 6b 43 6f 6d 70 69 6c 61 74 69 6f 6e 48 61 73 68 22 3a 22 64 61 38 35 38 31 33 38 61 34 66 62 33 30 63 64 65 61 39 33 22 7d 0a Data Ascii: {"webpackCompilationHash":"da858138a4fb30cdea93"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49925	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	579	OUT	GET /page-data/index/page-data.json?utm_source=link_not_found HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 260 Connection: close Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Fri, 03 May 2024 04:44:51 GMT Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 ETag: "662a30ac-104" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e80aeefdda01afc3c41fc332ff42e7ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rGx0_KC9t6mklWazQ3fRxP2XUfmlM_JUGMllk8fSlZte0SAqohNBTw== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:51 UTC	260	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 69 6e 64 65 78 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 31 32 34 32 31 36 32 32 39 39 22 2c 22 31 34 36 37 32 38 38 37 37 30 22 2c 22 32 30 34 38 31 32 36 31 31 31 22 2c 22 32 33 38 35 33 35 35 36 34 36 22 2c 22 32 35 36 32 38 31 39 31 38 37 22 5d 2c 22 73 6c 69 63 65 73 4d 61 70 Data Ascii: {"componentChunkName":"component---src-pages-index-tsx","path":"/","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/"}},"staticQueryHashes":["1242162299","1467288770","2048126111","2385355646","2562819187"],"slicesMap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49926	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	640	OUT	GET /static/chat-8b5b6f04fb69dbe0a772f7d695503bbb.svg HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 20031 Connection: close Date: Thu, 02 May 2024 13:26:37 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-4e3f" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f8b0654d6e6bbf12f54a635de5db7ee4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: LCqC_bW2TqAC5cWUGBf4CjXoHFjP-WyjoGU-GafPoBTt8QuUlCpYhA== Age: 55095 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 38 22 20 68 65 69 67 68 74 3d 22 31 30 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 33 2e 35 22 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 39 37 22 20 66 69 6c 6c 3d 22 23 30 30 30 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 33 2e 35 68 31 32 38 76 39 37 48 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 34 20 31 34 2e 34 6c 2d 2e 36 2e 34 2d 2e 37 2e 33 68 2e 31 63 2d Data Ascii: <svg width="158" height="101" fill="none" xmlns="http://www.w3.org/2000/svg"> <mask id="a" maskUnits="userSpaceOnUse" x="0" y="3.5" width="128" height="97" fill="#000"> <path fill="#fff" d="M0 3.5h128v97H0z"/> <path d="M29.4 14.4l-.6.4-.7.3h.1c-
2024-05-03 04:44:52 UTC	3647	IN	Data Raw: 35 2d 31 2e 33 6c 2e 37 2d 32 20 2e 32 2d 2e 36 7a 6d 2d 31 2e 35 20 38 2e 38 6c 2d 2e 32 2e 31 2e 33 2d 2e 35 63 2e 33 20 30 20 30 20 2e 32 2d 2e 31 2e 34 7a 6d 32 31 2e 34 2d 32 39 56 32 36 7a 4d 31 33 36 20 35 30 2e 34 76 2d 2e 31 7a 22 20 66 69 6c 6c 3d 22 23 46 45 38 31 36 31 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 33 2e 38 20 34 36 2e 33 56 34 36 76 30 61 2e 34 2e 34 20 30 20 30 31 2e 32 2d 2e 33 76 30 63 2e 31 2d 2e 36 2e 34 2d 2e 37 2e 35 2d 31 2e 33 6c 2e 31 2d 2e 38 63 2e 32 2d 2e 34 2e 33 2d 2e 37 2e 33 2d 31 2e 31 76 30 63 30 2d 2e 35 20 30 2d 31 20 2e 32 2d 31 2e 36 6c 2d 2e 31 2d 2e 33 2e 31 2d 2e 37 2e 33 2d 31 2e 34 63 30 2d 2e 34 2e 33 2d 2e 35 2e 33 2d 31 76 2d 31 2e 31 6c 2e 32 2d 2e 37 76 30 61 31 37 2e 39 20 31 37 2e 39 Data Ascii: 5-1.3l.7-2 .2-.6zm-1.5 8.8l-.2.1.3-.5c.3 0 0 .2-.1.4zm21.4-29V26zM136 50.4v-.1z" fill="#FE8161"/> <path d="M133.8 46.3V46v0a.4.4 0 01.2-.3v0c.1-.6.4-.7.5-1.3l.1-.8c.2-.4.3-.7.3-1.1v0c0-.5 0-1 .2-1.6l-.1-.3.1-.7.3-1.4c0-.4.3-.5.3-1v-1.1l.2-.7v0a17.9 17.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49924	3.94.39.175	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	727	OUT	POST /api/5729459/envelope/?sentry_key=0559e45064ad45fd8ca4c7912b6287c4&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.112.2 HTTP/1.1 Host: sentry-relay.short.io Connection: keep-alive Content-Length: 492 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://short.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:51 UTC	492	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 35 30 2e 30 32 38 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 67 61 74 73 62 79 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 32 2e 32 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 63 33 38 66 32 65 34 34 37 62 35 62 34 62 37 63 38 66 64 32 64 63 66 32 64 36 33 64 39 31 33 64 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 35 30 2e 30 32 34 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 35 2d 30 33 54 30 34 3a 34 34 3a 35 30 2e 30 32 35 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-05-03T04:44:50.028Z","sdk":{"name":"sentry.javascript.gatsby","version":"7.112.2"}}{"type":"session"}{"sid":"c38f2e447b5b4b7c8fd2dcf2d63d913d","init":true,"started":"2024-05-03T04:44:50.024Z","timestamp":"2024-05-03T04:44:50.025Z","stat
2024-05-03 04:44:52 UTC	400	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:52 GMT Content-Type: application/json Content-Length: 2 Connection: close access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin server: sentry-relay/24.4.0
2024-05-03 04:44:52 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49927	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	654	OUT	GET /static/support-background-5c8af4d33bb148d57a2ab16ae8132caa.png HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	787	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 125207 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-1e917" Expires: Tue, 02 Jul 2024 04:44:52 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 ab734ad5d81cc9d470b6176a05dd968e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XoYALdJB8DDdfD8UDrtSf4rEF47ZwI8PLzZF0ET0XMx-uuPiUF3I5g== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 89 00 00 03 a3 08 03 00 00 00 21 c7 b1 37 00 00 02 13 50 4c 54 45 00 00 00 f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa f9 f9 f9 fa fa fa fa fa fa fa fa fa f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa fa fa fa fa fa fa f9 f9 f9 fa fa fa f8 f8 f8 fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa f9 f9 f9 fa fa fa fa fa fa fa fa fa f8 f8 f8 f9 f9 f9 f9 f9 f9 f9 f9 f9 f8 f8 f8 f9 f9 f9 fc fc fc fa fa fa fa Data Ascii: PNGIHDR!7PLTE
2024-05-03 04:44:52 UTC	1514	IN	Data Raw: 76 e7 89 5a 50 fb 35 d7 d8 4d 84 0c fd 42 f1 39 46 9f 93 71 a5 88 01 f3 b7 56 2f ce d5 c8 8c 59 64 07 e9 64 d5 ea a4 95 0b 4d a6 33 5c 09 ff 55 03 a0 cb 4d 99 41 b9 6a 7b f9 f5 69 0b bc 6e eb 01 1c 26 51 07 90 cd 8f 87 67 ef 6c e3 bb 2a 51 55 9f 00 f0 f5 cd 11 d0 de be 34 f2 35 95 67 b5 50 92 b6 a6 fd 5b 84 cd ff 2c 2f cf c3 9b 88 1e 6b da 6e 34 7a b9 f0 82 22 f3 dc a9 10 ad 8c 01 ff 8f 79 f1 e1 95 7b 56 76 6a 8a 4a fa 01 61 a7 e8 62 28 ec 9c 9e 94 65 21 43 85 38 0f 7b 72 21 5a db 1a ff 08 75 9d e7 4a ef 05 ec 26 ad d4 07 ad 81 16 1d 28 d5 01 5f 3e 29 2f 7d 9d 3f 00 ad bf be 82 0b 36 87 0d a7 83 c8 e6 f3 c7 c6 f3 eb 3b 9b c4 88 5c 07 74 60 fe 11 a8 3e 36 c6 14 6b 55 25 55 f4 36 c8 bf 85 c3 11 3f 35 69 4d 1a 92 6d c0 6e 1c 3f d5 b6 2f bc 56 3e 03 65 86 e5 Data Ascii: vZP5MB9FqV/YddM3\UMAj{in&Qgl*QU45gP[,/kn4z"y{VvjJab(e!C8{r!ZuJ&(_>)/}?6;\t`>6kU%U6?5iMmn?/V>e
2024-05-03 04:44:52 UTC	8949	IN	Data Raw: 9a 58 f6 6a 59 a2 7d 0f 54 a8 fb da 60 0a c3 c7 a7 5c 01 d2 15 2c 2e 86 7f 45 34 81 fa 54 17 62 a0 55 7d 97 c8 91 0e 44 5a 64 d4 fb c2 bf 0c e7 0b ff 1c 68 61 7c 29 44 d2 8f 12 43 f8 51 50 de fb b0 7e fc fe 88 06 99 2b a0 36 15 ad ca 64 2f 40 48 51 25 3f 88 44 1c 8b 53 7a ca f2 2e 98 e1 a9 12 79 65 c2 35 17 66 d8 d3 4f 1e 5b e8 22 04 3b 1d 5c 83 d5 82 48 7a e1 1e 63 98 b6 c4 ed 3c 4d d5 f4 09 5d 99 6a cb a8 a4 3b 4e 1c d7 15 58 38 48 ac d0 e7 ec 0e 1f df ea f6 c1 45 9a 36 fd 0a 34 6d 38 b0 66 b0 d9 7a bf 07 28 6f ec 82 21 42 4c af b8 0f 25 e6 9e 37 ca da fc 48 f4 95 06 c0 ef e0 e8 c4 6c 2e 16 e5 80 52 ff 18 50 94 c4 8f f6 7e bb 51 64 c4 64 e2 c6 60 1b bd 54 30 c6 9b a1 89 09 fb 26 94 44 90 b5 9a e2 d6 f5 18 22 5d f0 a8 08 29 45 b1 e7 e6 ee 0c c7 8d 18 8e Data Ascii: XjY}T`\,.E4TbU}DZdha\|)DCQP~+6d/@HQ%?DSz.ye5fO[";\Hzc<M]j;NX8HE64m8fz(o!BL%7Hl.RP~Qdd`T0&D"])E
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 44 62 fe 29 42 ce a9 fb fe 7e fd ef 47 22 88 82 a2 08 8e 78 85 90 d4 98 be bd ab f1 91 c1 be dc df 45 54 da 00 f0 4f 13 f3 98 ca 20 6b 02 42 92 73 b0 55 34 57 28 c5 43 9c 39 78 f3 ce dd 1b 2b a5 fd 83 b6 46 4b 7a 85 a1 7a db 52 ab b9 d0 c6 27 ac 79 ff dd 89 31 af 2f 8f 8d e7 2a 02 e2 88 f2 17 00 6c b0 8d f4 2b 81 70 20 a6 08 03 51 76 0d 51 2c 2c 4e 39 81 22 f1 f0 ff da 53 d1 e2 cc 4d 54 19 07 77 f8 19 80 0e 2d 70 3f cc 91 7f 5b 35 82 7c 60 72 37 44 24 b7 8e d5 f5 3c bb 38 b9 fc 7a 7d fd eb ba d0 8b 22 09 42 24 e4 da e7 dd 40 ad 94 a9 20 1f 21 4b b3 44 43 c6 60 41 06 7e 3e 32 97 79 37 af 98 74 64 a9 01 e8 5f bd 75 d8 7a 2f af ae 0a c6 de 4d 53 43 b5 18 b0 f3 21 3d 26 19 a5 50 ee 43 79 39 f5 51 be fc c1 e7 63 39 be a6 3c 34 92 f0 27 97 57 22 b8 37 88 f3 c1 Data Ascii: Db)B~G"xETO kBsU4W(C9x+FKzzR'y1/*l+p QvQ,,N9"SMTw-p?[5\|`r7D$<8z}"B$@ !KDC`A~>2y7td_uz/MSC!=&PCy9Qc9<4'W"7
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 0a 53 25 94 15 45 80 3d 74 65 45 9c 99 8e 35 bf c3 8d de 32 d1 54 26 46 72 bc 04 1f 6d c2 45 d2 27 4f 8e ce 47 bf df 19 7c c7 dc 50 11 cf 7d a6 7c 7c f7 5e e5 c9 bb 55 e6 f1 83 6f ce 3e f4 d3 70 10 8a 57 18 5b c6 4b b0 ae 1a e2 c2 ef de 17 13 36 e5 15 10 60 42 44 d5 05 50 95 70 8c ce bd 48 b4 a3 2f 12 e8 94 52 84 2a 7c 58 80 91 cb a7 41 01 e4 84 d4 4e 0c 80 ee e1 92 0b 9d c2 79 76 03 22 4f 61 da 04 cb 14 f2 81 20 06 44 71 06 1f 11 11 39 76 7c a3 94 cd b7 09 10 f8 68 15 ce 0c e0 33 56 1f 9c 0c 9f 7c f8 b2 75 84 5b 37 74 51 dc b8 eb 7f f9 96 d9 5f 3d ac 6c 30 1f 13 6b 2b 71 d3 30 2a ee 49 aa 30 d8 df e5 6e b8 90 f3 16 1f 5d e1 38 5e 00 d0 a5 12 80 ad ec 28 d5 46 d6 25 a2 53 b6 51 9d 27 94 08 b6 31 61 ff 25 1a 80 72 a8 03 a0 ee a2 e8 41 87 f8 bd d8 c6 25 63 Data Ascii: S%E=teE52T&FrmE'OG\|P}\|\|^Uo>pW[K6`BDPpH/R\|XANyv"Oa Dq9v\|h3V\|u[7tQ_=l0k+q0I0n]8^(F%SQ'1a%rA%c
2024-05-03 04:44:52 UTC	1514	IN	Data Raw: 23 8b 23 4a c4 aa 8b cb a4 bb ed f0 8e b5 2d 39 7f e0 5d 48 89 d2 13 a9 1b 8e 6c fb 33 c3 8f fa 53 c6 b5 cd b5 29 49 da c9 bb c9 67 f3 74 75 43 87 cb fd 7c 7f ea ad 1f 66 01 c0 30 8c 4c d1 e3 f4 40 db 28 d2 8d 74 4e dc 0c 65 3a eb 56 19 01 44 76 75 56 02 60 46 d8 4f 46 94 1a 6e 2d 74 ed d5 8b 44 a5 f3 8f 43 2d ab 0e 81 30 4d cd e4 b5 9e 15 e9 44 a8 4b 10 b9 eb 76 6c aa 43 40 83 21 a1 a3 6a 62 61 42 dc bc d2 42 7a dd 58 b2 55 07 02 63 c4 21 c8 a9 81 75 ab 58 b5 3b 91 8d 64 f6 a2 4f 1e 4b 34 c7 2b 29 dd c2 6b 9c fe b7 cc f5 22 29 f3 79 c3 8d aa e2 29 39 ea 4c 6a e2 32 63 b2 bd c7 da 5b 3b 4f de bb 0b 91 f8 aa b5 68 4c 85 17 9f 66 e7 cd b1 a9 35 7f 8b ff 93 9d 11 21 fc 64 11 93 73 29 1b ae 30 f9 eb 27 93 83 06 41 79 03 a9 d1 2e e5 43 39 c7 51 c5 0d d9 2d 6b Data Ascii: ##J-9]Hl3S)IgtuC\|f0L@(tNe:VDvuV`FOFn-tDC-0MDKvlC@!jbaBBzXUc!uX;dOK4+)k")y)9Lj2c[;OhLf5!ds)0'Ay.C9Q-k
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: b7 b7 ee 3e 3c ad 44 25 a2 8f 92 c6 41 c2 86 50 6e ef e7 dd cd 31 d3 4c 4d b6 92 eb f5 51 56 57 69 49 d6 0d bf d6 42 0e 21 98 71 e4 ae 51 b3 d6 01 8c da 60 ef ea 89 62 bd 60 d3 b3 96 83 10 8e df ae 8c b3 01 e2 3e 7b a6 d5 0c 53 4a 9c 83 13 18 21 0e a1 33 f8 28 d6 f5 68 69 14 22 41 a2 dc f1 cc 36 5a 23 0d 22 60 60 14 fa 16 5a 66 bd b5 69 b9 e9 cd 75 e5 34 ea 94 d7 7c 86 a6 15 6c 96 38 18 3c c2 df 7d 16 b1 78 ca 44 6c 1f 28 f4 7a c5 80 de 24 71 fb ce cd 87 27 19 f1 ff 61 2f 71 1e 89 db 0f bf 5d d9 98 ff e0 74 57 ff e6 db e7 f5 a7 f7 e8 84 98 86 5f b3 36 3a 76 7e ec 33 91 ad 24 d3 eb c2 a3 e5 31 51 86 9c 73 f9 13 9f 39 2e 1a 72 0c 30 11 74 95 ca 74 45 a1 2e a9 7b e6 c4 aa f9 6d 0e 61 70 0e 8d 69 c1 c9 1f 20 c6 2b 2c 6f 61 95 73 64 08 a1 23 51 9e 47 22 13 29 Data Ascii: ><D%APn1LMQVWiIB!qQ`b`>{SJ!3(hi"A6Z#"``Zfiu4\|l8<}xDl(z$q'a/q]tW_6:v~3$1Qs9.r0ttE.{mapi +,oasd#QG")
2024-05-03 04:44:52 UTC	2804	IN	Data Raw: 96 a0 0e 74 c7 81 21 13 26 4d 44 32 19 93 28 55 d1 d0 2e bb 56 8c 3d 07 60 28 15 60 64 e8 a6 08 32 6b e5 ac c5 82 2a ea 5d 03 0c 52 63 e6 20 77 e4 47 dc ee a5 e5 a0 dd 88 59 36 00 cd c2 91 f7 64 bb 34 02 9a ee ae c2 c1 fa 60 e9 33 53 9e cc ec 8d 1c d7 0d b9 6f 73 e1 d3 f3 ed dd d9 df e9 61 f4 9a 2d 71 21 b8 30 ee 3c f8 fc cd 59 2b 4e 42 71 f5 f7 d1 ff 31 14 e7 83 62 b6 42 53 fc ce 17 6f df 79 97 0b 21 0a d7 07 62 7b 50 56 2f ae 12 47 ca 19 2c fa 66 4f 88 4e 1f f7 ed dd 78 4b b1 60 d2 1d d8 2c 2d 01 48 09 54 2e 5c 86 15 dd 3a 00 c0 10 70 82 76 7e 96 43 37 cf dc 1a 0e bb 74 73 5a 8d fc 9e 0c 7c c3 7d d3 8a 48 f6 7c 44 4c af 67 a6 3b 48 c7 97 57 ee 44 4f 1c bc c2 3e a2 54 96 6e 6a 00 da 35 74 9e 96 4c 08 a2 54 35 ee 3c 2f 65 08 3d 21 78 ef ee 2a a6 ff a1 bd Data Ascii: t!&MD2(U.V=`(`d2k]Rc wGY6d4`3Sosa-q!0<Y+NBq1bBSoy!b{PV/G,fONxK`,-HT.\:pv~C7tsZ\|}H\|DLg;HWDO>Tnj5tLT5</e=!x
2024-05-03 04:44:52 UTC	224	IN	Data Raw: 2b 02 6e ed 0b c1 bb 2b 5f 3f 58 f9 6a e7 d7 2b 6f a6 9f 94 d3 c9 b2 59 e7 d1 47 9c 7c 17 ea 4a fd 5f c2 1f d5 79 f4 85 32 3e 5a a3 0b 8e 0c 47 03 b8 fb c9 3b 6f 7f fa e3 55 c6 16 86 e2 34 37 c7 2c ec 52 77 41 f6 f9 51 34 31 3c 04 36 2d 16 04 8c b6 61 a0 96 d6 eb 07 8f b7 76 32 9d 17 77 7a 53 74 dc 8c a4 8d e0 47 8e d2 ed b6 01 c7 19 6a 27 36 3e a6 e5 1a 97 a9 7c 32 1c 7a 80 0c 13 8a 69 5c a0 9d a3 6b b2 69 99 bc ad e2 45 16 9c 15 33 fc 40 b7 14 22 69 55 3b a8 d4 96 bf 8f 28 d6 0f bc 62 73 04 5b b3 30 a0 7b 0a 28 1a 80 87 a9 f8 fc 47 33 c5 ec c8 d7 d8 0c 16 89 d9 71 aa 55 9e d4 7a 7e b2 72 ff 2f 2b 6f 9c 69 b9 c1 e7 5f fc 76 8d e7 8e 72 15 ce 5f d8 b0 27 1e 2f 3c Data Ascii: +n+_?Xj+oYG\|J_y2>ZG;oU47,RwAQ41<6-av2wzStGj'6>\|2zi\kiE3@"iU;(bs[0{(G3qUz~r/+oi_vr_'/<
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: bb 49 31 4a 17 77 f2 5f b4 09 85 09 f6 c9 9d 3b 77 7e 71 97 b1 bb b7 16 e4 fe 14 18 0c 15 cf 25 d7 eb b4 20 71 9a dc b0 bd c0 77 95 c6 60 33 cb 50 0d fb a0 61 9a 8d 0d 93 d3 8b 44 ab 11 97 2c 10 30 4f 3b aa 87 91 ad bd f4 5a 21 4e 4b 57 68 95 94 0e 9f ac 61 00 83 fe 4e 03 48 1f 09 5a 84 d7 37 d3 75 4b 29 b0 e0 8c 84 34 00 56 d2 56 d3 8e f7 4d de a5 a5 ca 64 c6 2d d7 d0 00 58 f8 fd cd b4 82 94 15 89 a9 87 d1 47 17 3f 83 d9 64 80 3b 09 39 f1 b9 0f fc 0a f0 3b 9f ae bc 71 ee cf 0f 2d 7e 55 4d 09 1e 15 7c 8e e6 0a 85 f1 b3 0b be a7 7f 5c 7a 59 62 cb c3 ec 32 9a 0f de 5a 79 f0 d5 ed f7 b6 57 af ed e6 26 c5 f4 99 76 b5 4c d4 d6 00 53 41 ab 2f 36 94 21 75 23 97 e8 a7 f2 d5 d1 2c 29 72 b1 f2 7f 2f 4c 85 63 f1 44 03 67 ae d6 27 bc 62 d2 72 f1 cc d1 86 ab c3 06 e2 Data Ascii: I1Jw_;w~q% qw`3PaD,0O;Z!NKWhaNHZ7uK)4VVMd-XG?d;9;q-~UM\|\zYb2ZyW&vLSA/6!u#,)r/LcDg'br

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49928	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	546	OUT	GET /manifest.webmanifest HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	771	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 986 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:00 GMT ETag: "662a2ff4-3da" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 bf8d7cb6fca5d51158e1109ca40fe242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oxQ3rSgnVXKs3ymflx0mrWrLlj0wBhN3EG75pzq22dqg7zsxCyWm4Q== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	986	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 67 61 74 73 62 79 2d 73 74 61 72 74 65 72 2d 64 65 66 61 75 6c 74 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 73 74 61 72 74 65 72 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 37 43 45 43 43 35 22 2c 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 22 23 37 43 45 43 43 35 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 6d 69 6e 69 6d 61 6c 2d 75 69 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 69 63 6f 6e 73 2f 69 63 6f 6e 2d 34 38 78 34 38 2e 70 6e 67 3f 76 3d 65 36 38 34 33 30 39 61 64 66 64 66 36 65 66 61 35 31 35 61 37 30 37 64 31 31 61 33 65 31 66 31 22 2c 22 73 69 7a 65 73 22 3a 22 34 38 78 34 38 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 Data Ascii: {"name":"gatsby-starter-default","short_name":"starter","start_url":"/","background_color":"#7CECC5","theme_color":"#7CECC5","display":"minimal-ui","icons":[{"src":"icons/icon-48x48.png?v=e684309adfdf6efa515a707d11a3e1f1","sizes":"48x48","type":"image/png

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49929	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:51 UTC	645	OUT	GET /static/medium-03-459ab7b8d6ddab3db59a811ce69ca557.png HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	785	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 49185 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-c021" Expires: Tue, 02 Jul 2024 04:44:52 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 f5527f719bbc0d2932043daaeff80252.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Ph3Fi5hvm3Jnfo25VM3Vh221j_EHEKIVz-G2mBDsfTuwKl9U_EwEqA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 01 81 08 06 00 00 00 80 59 0d 24 00 00 bf e8 49 44 41 54 78 da ec d8 49 68 9c 75 18 c7 f1 34 d5 48 a9 b5 d6 7d 0b b5 22 e2 82 0b 88 fb 41 dc 40 c1 93 88 17 a9 a2 20 82 a0 20 e8 cd 9b 9e c4 4b ad cb 59 50 10 02 e2 72 aa 75 41 44 69 0e 8a 2d 15 d7 4a 96 2a 26 21 ad a9 a2 b1 99 64 fa 1b 78 06 26 4b 93 a6 94 1e d2 cf 07 be fc df 79 67 de b7 ef 64 e0 79 a7 d3 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 a7 d9 6c ae ea a8 bb d6 e5 d6 5d 2d 75 7c 17 00 cb b0 d8 40 5d 64 10 af 9e 53 77 e7 3a e7 98 ae e3 65 d6 75 d4 Data Ascii: PNGIHDRY$IDATxIhu4H}"A@ KYPruADi-J*&!dx&KygdyGl]-u\|@]dSw:eu
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: db 2f 1e 20 c7 fb 3f 8c f2 6f 18 15 20 c4 f4 7b 9d f2 2f d9 5a f6 02 7e 0b 4b 6f b2 51 13 35 8b 85 27 2f 3a ba 60 2d 1e 41 26 37 38 0f 21 1c 42 ac ee b5 ea 46 b9 e9 21 17 6a 87 4a d1 58 d5 c9 6a b3 ee 6f b0 62 46 69 aa 06 80 78 31 2b da 2a de 19 55 c9 46 45 52 a7 6f b2 14 1a 89 5d 94 58 95 07 c0 d8 44 97 cc ca 58 2d 10 8b 82 72 42 b1 c9 58 0e de c5 2c 5d e8 15 3b 6c a5 8c 18 e7 24 2a 68 bc 26 15 58 45 36 51 0c 95 e6 b4 58 89 1c df c3 0a ab df 94 57 51 dc 07 cf 4d 34 20 89 8a f1 4a e8 ab da 5d 96 de 7f d1 d3 58 b8 70 61 16 cf 86 44 0d 61 3c 5a f0 aa d7 0e 2c 37 79 48 cf 78 c3 da 83 fb 4d fe 4e b7 9d e6 8d 7c 80 4d c4 4a cf fc ef 9f 25 23 10 d1 01 6b bd e2 f0 b9 9c 8c 40 e0 96 47 09 b2 aa 54 ac bb 34 16 7d eb ad b7 d6 3d be b0 e0 e2 f7 91 22 29 53 cc 4a 56 Data Ascii: / ?o {/Z~KoQ5'/:`-A&78!BF!jJXjobFix1+UFERo]XDX-rBX,];l$h&XE6QXWQM4 J]XpaDa<Z,7yHxMN\|MJ%#k@GT4}=")SJV
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: ab 4b b6 a2 7a e5 7a 66 10 ab 55 10 26 b8 c2 f7 dd 2f 42 d0 ac 87 bf ee 3e cd 62 9a 86 d5 b7 e0 39 bc 3a e3 0b 88 6a 21 29 d9 04 18 f0 69 20 13 dd b2 12 c8 f3 e2 29 cc 37 ae a2 e5 da 1d 94 6d 23 79 f4 74 22 6a d1 0b 73 58 12 81 a7 fb 35 26 3a da 60 6b 78 2e 33 95 e3 9f 6e c6 ed af 36 a3 65 ed 4a f8 f8 ba 9e 5d 04 89 48 22 f7 53 e1 09 cc 49 39 28 e3 0b 5c 96 dd b7 c2 1c 7e 09 2b 75 77 a9 e3 53 06 a2 94 23 bb 89 5f d3 30 6e 0b 08 09 a7 47 68 ff aa 0f a0 45 05 e5 c9 01 6e f5 d6 1b 24 8f 2d 52 d2 f1 f4 52 c2 eb bf 08 0b 65 1e df 44 33 de 04 6d a2 dc 54 ce 1f 92 9b c8 f3 2c c6 44 87 2c a7 c4 e0 38 31 ec 4d fa 01 63 94 82 da cd f4 63 74 5b 48 0c 62 0f e3 0b 34 8c 6b 50 34 d6 24 9b c4 32 64 73 d1 d9 86 7c 5b 03 b6 59 6a 50 68 2e 43 94 24 62 d7 ed c0 7e 73 05 5e Data Ascii: KzzfU&/B>b9:j!)i )7m#yt"jsX5&:`kx.3n6eJ]H"SI9(\~+uwS#_0nGhEn$-RReD3mT,D,81Mcct[Hb4kP4$2ds\|[YjPh.C$b~s^
2024-05-03 04:44:52 UTC	33	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 4c 05 5e 5d 73 57 71 75 12 fb 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: L^]sWquIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49930	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	553	OUT	GET /page-data/sq/d/1242162299.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 9157 Connection: close Date: Thu, 02 May 2024 13:26:40 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:29 GMT ETag: "662a3011-23c5" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 07f7cebee7fc49278f602ad96f5f6790.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9I0h6WoRqHiu-9n26Fn9hbHQ0EQqpyVXjm7__MA1o_tVoRdKyRDZ5Q== Age: 55092 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	9157	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 64 69 75 6d 5f 30 31 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 43 38 45 6c 45 51 56 52 34 32 70 32 55 79 30 38 54 55 52 54 47 73 61 42 62 33 52 68 4e 31 4c 6a 56 6d 4b 68 4c 6f 32 35 4d 2f 41 4e 63 75 6a 49 Data Ascii: {"data":{"medium_01":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC8ElEQVR42p2Uy08TURTGsaBb3RhN1LjVmKhLo25M/ANcujI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49931	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	553	OUT	GET /page-data/sq/d/1467288770.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4561 Connection: close Date: Thu, 02 May 2024 13:26:40 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:29 GMT ETag: "662a3011-11d1" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0ac640943c2918c03a0350f4e8b083a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 3MyX-ACVGT-Q8uhIne0nw58nUryKPg6WiJvWAGBdipYD-uTpuSpQEg== Age: 55092 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	4561	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 72 65 76 69 65 77 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 43 33 30 6c 45 51 56 52 34 32 6f 32 55 58 55 67 55 55 52 54 48 4e 34 30 65 6f 71 4b 6e 6f 50 65 49 49 41 6a 36 65 4b 75 33 6e 67 71 4b 36 44 46 36 36 43 Data Ascii: {"data":{"review":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC30lEQVR42o2UXUgUURTHN40eoqKnoPeIIAj6eKu3ngqK6DF66C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49932	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	553	OUT	GET /page-data/sq/d/2048126111.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 5520 Connection: close Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:29 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Date: Fri, 03 May 2024 04:44:52 GMT Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 ETag: "662a3011-1590" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 98bc8180e0431e8f05afc9802305f1d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: X9xXcv4k2w2g7GZ9oq8LSJInAjtERyXIon4mzULmm1uNgOAopd6PVg== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	5520	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 73 75 70 70 6f 72 74 5f 77 6f 72 6b 65 72 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 57 43 41 59 41 41 41 44 41 51 62 77 47 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 45 58 30 6c 45 51 56 52 34 32 70 57 55 66 30 78 54 56 78 54 48 43 39 52 6b 30 38 79 6f 69 38 4b 79 78 73 61 6c 30 4e 65 66 72 36 Data Ascii: {"data":{"support_worker":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAWCAYAAADAQbwGAAAACXBIWXMAAAsTAAALEwEAmpwYAAAEX0lEQVR42pWUf0xTVxTHC9Rk08yoi8Kyxsal0Nefr6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49933	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	553	OUT	GET /page-data/sq/d/2385355646.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4933 Connection: close Date: Thu, 02 May 2024 13:26:40 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:30 GMT ETag: "662a3012-1345" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 82139f26335f87e45d45c08d5208817a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: MwRkpy-aGGHleZjl_PWyth5EovlJGYUVwGlMrX7y4MwRelVlMm1bew== Age: 55092 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	4933	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 44 61 30 6c 45 51 56 52 34 32 71 56 55 57 30 68 55 55 52 51 64 7a 51 79 79 31 31 66 6b 52 31 41 59 32 75 4d 6e 4d 4f 67 6a 77 34 6f 67 Data Ascii: {"data":{"integrations":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAADa0lEQVR42qVUW0hUURQdzQyy11fkR1AY2uMnMOgjw4og

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49938	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	383	OUT	GET /static/pumpkin-308a8ade7af387bedeca727644710baf.png HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	792	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 47006 Connection: close Date: Fri, 03 May 2024 04:44:51 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-b79e" Expires: Tue, 02 Jul 2024 04:44:51 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 1abf103face183cd8172f37e6ac30038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: yGP-0GY2DrQB7V5TEFxUbHDPJxscL3PVDb6aXicplwGDm2QZxdaiSQ== Age: 1 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 02 d0 08 03 00 00 00 8e 89 b7 ae 00 00 00 b1 50 4c 54 45 00 00 00 ff d2 5f ff d2 5f ff d3 5f ff d2 5f ff d2 5f ff d2 5f ff d3 5f ff d2 5f ff d2 5f ff d2 5f ff d1 5d ff d2 5f ff d2 5f ff d2 5f ff d2 58 ff d3 5f ff d1 5e ff d2 5f ff d2 5f ff d2 5f ff d3 5f ff d2 5f ff d2 5e ff d2 5f ff d1 5e ff d2 5e ff d2 5e ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5e ff d2 5e ff d2 5f ff d2 5e ff d2 5f ff d2 5f ff d2 5e ff d2 5f ff d2 5f ff d2 5f ff d2 5e ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5f ff d2 5e ff d2 5f ff d2 5f 4b 6d 3f cf 00 00 00 3a 74 52 4e 53 00 fb ee dc ea df cc f8 cf bb d9 0f bf e6 ac 05 9b 1e c8 f6 9f af 8c 4f b7 Data Ascii: PNGIHDRPLTE__________]___X_^_____^_^^^_______^^_^__^___^__________^__Km?:tRNSO
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 9a 25 59 96 dc 6d b9 60 83 1b bd 18 78 ff ff 0f fb 30 a2 05 cc 0d b8 24 e2 bb f7 c9 49 94 13 c2 49 c0 a3 f5 68 77 76 36 fc 29 ab 2b 1e 20 90 5f 6b 06 41 b2 6a b8 3d 7f 38 fe a7 59 e8 93 f6 cf 5d f7 06 74 7a 3a b9 ec 3c 7f 7d 2d eb 55 23 65 ae df 2d af 52 ea 72 b9 72 b7 6a 4e 52 39 ec f7 7e 64 ab 0e fc 80 cd 58 cf c7 6d ce f1 80 af 34 1e 50 53 b8 3d 7d b7 b8 7b 4a 96 3f 6a cd c6 57 26 e3 77 88 29 4a d5 bc 90 29 e6 ed 9b d2 ea b6 7c 17 ce d6 2c e0 93 cb ce 63 e2 5c 9a 8d 67 95 f2 6c 72 74 bb cc c0 4f 15 7a af 30 50 f0 92 8e f2 73 0a 0d 05 be 31 54 a2 d5 8e 3a 5d 24 dd 4a a7 f5 79 c2 71 1a 65 fc 0e a7 e7 15 e5 91 4a 48 42 5f 58 b9 49 d9 7a 6b 02 d2 09 15 bd 41 b9 5c ee ac c2 bd 31 6d 2d ee ce dc c8 77 1c ae f1 03 26 3e 40 24 c5 4e 3a 2e f2 cb 11 a2 50 f3 8d Data Ascii: %Ym`x0$IIhwv6)+ _kAj=8Y]tz:<}-U#e-RrrjNR9~dXm4PS=}{J?jW&w)J)\|,c\glrtOz0Ps1T:]$JyqeJHB_XIzkA\1m-w&>@$N:.P
2024-05-03 04:44:52 UTC	14238	IN	Data Raw: 62 a7 1c 8f 47 1e 01 1c 4b 22 be 01 9c 9b 7e cc ec 70 aa f8 f3 68 4b 89 c5 5f d3 9e 09 b1 ae 37 f8 1d 84 71 7f de f3 48 4d f9 cd 74 b2 5c 84 a2 34 f8 a6 80 a6 1f 6c 4e 0f c1 60 52 1f ee 07 9e 65 17 e7 d8 6f 21 16 a3 ce 98 2f a5 43 32 88 1c 7f b5 33 03 c7 18 a8 ff b9 15 9a cc 32 99 cf 63 8b 6f 81 c6 2b bd 25 1d e0 cf 93 64 10 f1 97 78 e2 87 de a6 ca b7 81 ad 30 ac ed 4c c0 e6 7f 5a 66 a7 42 5f 89 bf e9 aa 10 00 a1 37 b2 cb d3 a7 6a bf d5 f5 ca 8e 28 8e 7a b4 6c f1 a5 48 5a 84 6a da 9a 36 6a 35 d3 24 e7 bf e8 2c b4 07 20 6b ec 03 be f2 f9 76 c4 82 9d a9 b2 71 fe 10 74 5f ee f0 f5 80 6e f4 4a ef 07 f4 7e 51 0b 97 f1 7f 36 e9 37 d7 f5 85 10 8d 3e 7f 1b 10 4c 7b 40 e6 73 a5 31 35 23 a7 59 a4 25 7a b2 dc 19 7c 49 49 86 94 e6 66 39 9f 9a c4 70 fe a7 96 68 3a 18 Data Ascii: bGK"~phK_7qHMt\4lN`Reo!/C232co+%dx0LZfB_7j(zlHZj6j5$, kvqt_nJ~Q67>L{@s15#Y%z\|IIf9ph:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49935	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	388	OUT	GET /static/small-planet-e3789c1103edc526be0f3eb2b4c28d03.png HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 32744 Connection: close Date: Sun, 28 Apr 2024 14:33:03 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-7fe8" Expires: Thu, 27 Jun 2024 14:33:03 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 ad22d4e4410fd07809425488bf6e79be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PEBMXXXFRGBCGtIAnWkfCiX4L0LFFhKZn9ndrnCx3rutZAey1KPS4g== Age: 396709 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:52 UTC	15587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dc 00 00 00 dc 08 06 00 00 00 1b 5a cf 81 00 00 7f af 49 44 41 54 78 da ec d8 db 6f db 74 14 07 70 77 88 3d 00 9a 00 21 34 a9 bc 21 e8 1b 0f 3c 20 ed 85 7f 82 37 c4 3b 0f 80 72 69 ba 9b ba 2e 63 6c 43 9b 40 30 b5 b1 d3 0d 46 29 1b a2 e3 3a 2e d3 78 60 5c 64 3b 4d 2b 56 db 4d a2 6a bd a0 d2 12 db 4d 94 34 49 1b 3b 17 1f 8e 93 a8 ad 22 55 da 1e 26 18 7c 3f d2 d1 ef e7 f3 b3 d4 5a ca 57 c7 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 1c 91 d0 43 82 d0 23 6c eb 69 f7 ba fa dc 6b 17 f5 08 00 70 77 21 13 ee 50 3b 74 bb 23 a2 3d 3b cb 0f e4 ce 3d df 82 80 c2 ff 8b 1f b0 4e ed d9 ee c5 Data Ascii: PNGIHDRZIDATxotpw=!4!< 7;ri.clC@0F):.x`\d;M+VMjM4I;"U&\|?ZWC#likpw!P;t#=;=N
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: d9 3e a3 5d b6 6d be 5d 96 ed a1 f5 b6 3d b4 de 5a 40 b5 0a 92 8b f5 3b 6b 90 c1 35 bd 04 74 f1 e9 19 12 93 fa dd b9 1b 80 eb 57 d2 e8 18 aa 8a 5d 7a ec ed 6c eb 01 f6 54 a2 c1 0e ff c0 9b e1 81 3c 82 e3 76 a8 3f 13 96 14 7e 4e 0f 1c 31 0d 60 ba 16 84 0d 86 4c 49 94 b7 fa 27 f4 18 e2 55 b3 b1 40 e1 d1 fb 9a ce c4 3a 00 21 7a 6d 18 37 60 fd f1 c2 0f 28 f5 c4 2e ce 33 84 5a f7 f0 d8 6e 40 4b bf fa 70 f3 d2 28 6f 25 0b a7 62 bd bf 2e 9d b6 a1 b0 74 eb e0 2d a4 51 5d a2 8b 60 1b e1 c9 0d 8a b6 7d 9a 7d c5 b6 5b 1d 54 71 97 75 09 27 1e c3 ee 36 b0 1e 6a 12 f1 f8 8d a6 1d 78 ce 26 a8 ee a7 e9 0c 2a 0f 4e 40 dd ac 82 8d 87 fc 4e fe 4d 01 3e ce fe 29 83 9a 8e f7 c6 4e a9 02 9d ed f2 21 38 67 d0 b6 23 b7 d2 ab c4 b1 2d cd 31 5a 25 89 05 ef 85 01 c7 a1 25 f3 22 af Data Ascii: >]m]=Z@;k5tW]zlT<v?~N1`LI'U@:!zm7`(.3Zn@Kp(o%b.t-Q]`}}[Tqu'6jx&*N@NM>)N!8g#-1Z%%"
2024-05-03 04:44:52 UTC	773	IN	Data Raw: 0e 43 30 db f9 7d 51 8c c5 e0 62 76 65 10 4e 48 5b 0e 7b 4e 3f 53 8c 6a a4 ac fd e3 bd b0 4f f1 78 3e 87 45 ec 0b ff 15 75 a4 fe 3e f5 af ff dd 18 d0 62 db c3 db 64 45 b9 14 d9 f0 86 17 68 f3 c7 7f 10 6a 88 7f d1 67 8a cb c2 e2 2f 03 eb 75 80 25 02 00 47 bf cf 9a 44 f0 7c ea 65 2c 49 a4 28 99 aa d5 9c 41 37 2c 2b 23 ed e6 f4 f0 1e 25 27 fc 89 bd 38 24 6c 38 c3 6c 6b de a7 30 f8 8a bc cb ed fb d5 4a 65 0d 0d 6b 99 2c 6e 2f d4 57 0f c0 12 c2 b1 6c 05 88 6b 53 f3 ce 25 b8 70 ae 09 db 9b c1 90 35 91 b4 a0 fe a2 56 30 f4 fe 80 39 e9 d3 a0 69 d1 c7 a4 a4 ca 18 9a 11 68 14 73 88 c4 b6 47 65 63 00 42 e4 79 43 ca 0f c9 b6 60 76 c8 b6 e8 79 bf 35 e9 b5 a0 65 51 0e 98 ed 24 d8 63 9b c7 92 98 e7 35 27 b6 62 b4 d6 e8 75 65 85 a7 d4 b2 c9 8f 5c ca 90 59 59 46 07 ad d9 Data Ascii: C0}QbveNH[{N?SjOx>Eu>bdEhjg/u%GD\|e,I(A7,+#%'8$l8lk0Jek,n/WlkS%p5V09ihsGecByC`vy5eQ$c5'bue\YYF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49934	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	381	OUT	GET /static/hero-da68e1f98d49eea0edcc5cc53fba8dd1.avif HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/avif Content-Length: 127802 Connection: close Date: Fri, 03 May 2024 04:44:48 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-1f33a" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 53a1f042d35b1ad7e45dd18908041b36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: AI285vU8lGCwTDdsNcqMa4dABFC1fOIF50UevV_xyLnYizY8d0YTVQ== Age: 4 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	15615	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 01 a1 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 2c 69 6c 6f 63 00 00 00 00 44 00 00 02 00 01 00 00 00 01 00 00 cb 4b 00 01 27 ef 00 02 00 00 00 01 00 00 01 c9 00 00 c9 82 00 00 00 42 69 69 6e 66 00 00 00 00 00 02 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 1a 69 6e 66 65 02 00 00 00 00 02 00 00 61 76 30 31 41 6c 70 68 61 00 00 00 00 1a 69 72 65 66 00 00 00 00 00 00 00 0e 61 75 78 6c 00 02 00 01 00 01 00 00 00 d7 69 70 72 70 00 00 00 b1 69 70 63 6f 00 00 00 14 69 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitm,ilocDK'Biinfinfeav01Colorinfeav01Alphairefauxliprpipcoi
2024-05-03 04:44:52 UTC	9969	IN	Data Raw: 45 4d 0c 43 f1 58 9c a8 09 5d 19 e0 96 dd b7 f4 b9 f7 bf 87 b4 f3 f1 57 e6 4c 56 83 b3 c1 b7 a8 53 d7 76 1e 31 23 15 42 3c 19 97 fe d7 d6 79 8f 2c 65 fd f6 07 1a e9 22 aa 72 da 75 96 74 b6 41 cd 6e 3e f6 f7 80 e8 6b 99 29 97 92 69 f2 c3 d4 3b e3 f8 60 8e 13 79 af 52 16 3f dc 6e 8b 30 9d 1d 22 bf 17 aa 50 55 f3 7b 0b 44 63 ba fd e5 2f 1c ba f5 b2 74 20 6d 86 82 90 fb 49 1e 05 21 d2 ac 9b e8 29 48 c1 6e be ec ca 5f e7 3f 3e 19 3f 32 7d cd fd de 5d f6 24 38 7b 95 93 35 b5 e4 0c 6f 5a b0 c8 c5 07 d4 b1 ba 45 5c fa 16 51 9b b2 32 9a f8 5d b2 8d e9 9f b5 78 b6 e6 09 18 30 40 aa 15 40 d1 aa 85 a1 d1 37 aa da 77 c1 e4 bf 1c 88 96 30 c7 38 84 b8 f9 ed e2 09 0d 1b a0 5d 78 26 a4 54 9f db 78 7c 24 1c f8 58 4b a3 22 76 57 af e0 08 7d 0d c7 35 34 97 bb 67 fb 46 e6 45 Data Ascii: EMCX]WLVSv1#B<y,e"rutAn>k)i;`yR?n0"PU{Dc/t mI!)Hn_?>?2}]$8{5oZE\Q2]x0@@7w08]x&Tx\|$XK"vW}54gFE
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 96 4d d3 16 34 34 c5 12 fb d0 ab c5 a7 0f 41 ef e4 b1 68 6c c2 7a f9 41 57 63 e3 26 fd dc aa 18 19 06 03 c7 45 4a 59 3f 91 46 bf 59 5b 45 a8 b8 81 9b 55 bc 57 bb 13 6c 64 14 ca eb 86 14 0d 3d 6a 57 59 d3 98 8b 73 b5 59 29 2c ca 42 0a 95 73 8c b6 28 e2 4a 8f 43 6f 73 15 13 88 30 0a 1c 2a 7b 59 18 40 2b da fa c0 f1 5d c1 05 b9 09 2c 2f ee b9 59 8b e8 ca d3 56 0f a6 f7 bf 00 b0 20 7e 75 6d df 78 95 1f 6e 0f cf ed 3f 8b 77 24 02 4a 26 f0 cb 88 0b 9c 4c 65 b2 be 69 f6 27 c8 df ca 4c 00 00 92 ac 60 02 81 27 15 24 53 22 5e 1c 55 ab 91 09 78 0e 9d 95 8d 5e 6b 53 f5 b1 68 29 23 83 40 5e 1d 58 45 dd 14 65 80 c2 55 89 94 8f d6 b1 ff ae ed ac f4 6e f4 06 b3 42 74 9d c4 27 d5 48 fe 63 40 9f 63 fa 00 00 07 c7 a9 43 54 97 94 48 10 00 86 34 7b 8c 78 c7 45 63 dd cf b7 17 Data Ascii: M44AhlzAWc&EJY?FY[EUWld=jWYsY),Bs(JCos0*{Y@+],/YV ~umxn?w$J&Lei'L`'$S"^Ux^kSh)#@^XEeUnBt'Hc@cCTH4{xEc
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 15 9a 7c 14 24 da b8 01 64 a6 50 98 37 44 b0 11 2e 39 90 1e 46 2a 4e 7a 97 31 6d 64 76 8b c1 50 25 51 49 15 07 ae a1 af e4 f9 ad 69 2f 5c 59 bf 0d a6 da 0d 21 34 00 db 87 f2 ea 38 a6 6a 85 2e 5e e0 a9 c0 38 b1 94 27 47 d3 e2 49 f3 d9 1b 46 01 60 2f b0 ef 01 68 eb aa 36 20 62 bd bd 01 a4 1e 11 53 bf 11 bc d8 69 a3 75 ac 4b a0 f1 9c a8 f8 3c 60 46 da 64 ca 22 79 47 79 a1 28 be d3 b4 c9 e6 90 0b 72 36 72 df 98 cb 0b 0b 8f 97 f5 89 c6 b9 c2 1b e4 1a d7 8d 78 ad bd fa 35 60 0d 7d 6b a3 3b 35 40 8d 5d 02 cc 02 76 47 6f 51 3c ae ca 14 34 09 52 b3 42 01 06 40 8a cd 99 32 1f 15 92 c7 4e 8a 81 0b f2 0e 9a e5 90 95 c8 a4 b0 01 4d 43 e1 13 14 1e 94 0c a6 64 c2 2e f5 3c f4 c2 70 8d c1 9e 19 28 6c dd cd 70 e8 26 b1 01 5c 20 15 17 89 ab 48 67 6f 69 fc c2 05 28 d0 55 ad Data Ascii: \|$dP7D.9F*Nz1mdvP%QIi/\Y!48j.^8'GIF`/h6 bSiuK<`Fd"yGy(r6rx5`}k;5@]vGoQ<4RB@2NMCd.<p(lp&\ Hgoi(U
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: c1 7b cf 1a 8e 3c 3e cb 9f 4b 2c ba 93 aa 94 4d 8f f3 0b 00 9a 0b 33 1d ed 38 d6 40 06 4f 52 2f d9 a7 39 b6 80 ac 9e e0 92 85 6a e2 58 4e 9e d7 7f af 5a 66 ed 03 cb 98 6b b0 00 0a 8a 4c 52 bd 57 ab 60 38 0f 05 ac 2e e2 b9 7f a9 08 bc 2d 33 71 33 e0 db ef 34 42 5d e3 35 7b b6 43 96 c4 b6 7e 18 1e 8e 4b ce 1f 85 72 34 ec 6c f4 35 c8 67 56 bf 25 02 11 60 65 fd ac 45 93 c7 ae d3 2d 31 68 32 06 dc 2b f3 52 35 84 cd 69 94 63 81 e6 27 62 97 96 fe e3 da 7a ef 92 90 08 58 1c 71 8e ed 81 d7 f9 00 00 f3 44 a7 6d a5 f1 ee a1 bc af ed cb d1 83 dc 8b 47 16 76 4c fa 7a 49 a1 5a fc 19 62 1d e2 51 73 90 fd 0d e2 a3 0c bf ec 1e e0 80 df 95 c7 49 89 aa ca 47 4a 24 85 33 cd 8c e9 f0 ba 66 da 61 c0 12 42 14 f1 74 84 b7 c8 0c 5d 8f 84 1e fb d4 81 9a 34 86 b2 d9 2d f7 03 38 c5 Data Ascii: {<>K,M38@OR/9jXNZfkLRW`8.-3q34B]5{C~Kr4l5gV%`eE-1h2+R5ic'bzXqDmGvLzIZbQsIGJ$3faBt]4-8
2024-05-03 04:44:52 UTC	1263	IN	Data Raw: f2 b9 2f fe 1f 9e 1e 68 66 13 e5 e0 b8 dc 33 b3 bd 3a 71 d6 f9 84 43 bf bb a5 f9 b9 d5 0d f3 3a f6 40 dc 7c e3 df 0c 80 b8 cb 25 c6 51 7b bd 0d ce 0a 87 ae 68 f1 87 cb d8 4f 7e c2 80 ac bb 93 d9 e2 28 3c 2f 64 99 57 46 1e cd 46 e6 a6 a5 f8 6f 65 05 4a 08 0b b5 ac 1c 85 48 43 8c 0e 40 06 64 c3 fa 12 49 55 9e 46 e6 17 f8 0d 7f 1f f0 04 3e 88 a0 2d e7 9f ac 5a 47 ae 70 8d ea e0 c5 7f 54 84 bb fa 78 fd c6 90 fd 8c 82 e3 bb 6d 4d e9 03 8b 72 5e 71 5e 7b 21 23 fd dd f2 56 e4 51 9a 70 03 df 78 d9 3e f4 3a e9 41 9a cb b4 34 73 1e 30 52 9a 5c 1a 0b 6e 44 72 39 cc b7 f2 41 4d 95 bf 73 d9 ac f5 78 e6 d7 52 05 7f c7 0e e2 80 fb 29 25 c2 a8 01 f6 de 4e 09 d0 9c 30 94 73 0b 52 bc f3 c1 b5 c4 b6 af ee 10 f1 bc 38 de 67 2e f8 67 d0 15 93 53 7e e7 08 a6 95 5e 35 3d b0 61 Data Ascii: /hf3:qC:@\|%Q{hO~(</dWFFoeJHC@dIUF>-ZGpTxmMr^q^{!#VQpx>:A4s0R\nDr9AMsxR)%N0sR8g.gS~^5=a
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: ca 65 69 d0 df 3f d8 a3 df 0a 5a ae ba b4 19 d8 a3 92 a9 09 a9 c5 91 0a 72 8a ff f7 bc a5 d6 06 f4 ad 97 a0 c6 48 96 3a a7 5a 30 b3 a4 88 a6 10 ca ff df c8 77 d7 e1 f6 4d 56 d6 82 a7 96 53 ed 06 93 83 ab 93 63 ad 53 f0 aa b5 46 e3 c4 07 23 16 7a 89 bb 74 04 43 90 af a4 fa 6e 07 82 37 ba 8c 40 12 1c 69 61 58 82 f8 57 49 2f c6 21 7b f1 c7 39 7f 05 a8 8b d2 9f 9d 0d aa 32 75 54 2a 68 3a de ac 1d ef d2 cf a4 c1 92 d6 48 8b 0b c9 d6 60 49 fb 0c 07 a5 06 9a f5 33 40 11 1e d3 d5 a7 80 54 51 9c b0 b5 9d 13 4b d9 ac b5 b2 26 56 d5 4f d5 fb 5f 3f 18 3f 51 51 25 bf 29 a4 30 ac 2a 0f 37 e0 bc c3 69 db 69 60 e5 c1 93 4a 37 39 0a 90 90 8e 5d e1 10 91 ff 30 0a 6a 0d 14 b0 83 00 41 0a b1 b6 2b 2c e5 69 ad 1d aa 3b aa 7c 3a 47 04 8a 1a c0 eb 90 2c 5d f0 b1 e1 e5 cc 76 b9 Data Ascii: ei?ZrH:Z0wMVScSF#ztCn7@iaXWI/!{92uTh:H`I3@TQK&VO_??QQ%)07ii`J79]0jA+,i;\|:G,]v
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 00 e4 aa 1f ff a2 5c ca d3 1a 08 28 5a 6a ae b7 a4 a4 90 c1 52 4f b1 6b 36 cb 7d 7c cb 45 00 f2 75 3d 03 1f d6 8f f8 26 d9 a6 83 b5 08 0d 42 af b3 97 33 d7 a2 6a 4c 33 ed 28 62 29 99 f1 4b c0 8c 3a 71 88 9e f4 bb b7 ef c1 4e 1c 0e 53 b7 5c 93 2f dd ce aa ac 1c 01 30 ef 91 25 f7 d0 9c cb b0 47 f5 e0 c8 5d 9d 5c 9c 79 13 a6 d3 e6 d2 31 55 a4 5d 18 f2 4f 0a 3a 80 0d 95 95 2d f7 b7 fd d7 3c 4e 34 08 96 a8 08 12 df ff ff 00 63 ac 97 f2 e9 9e 7d e6 02 51 f2 42 88 54 3e 09 f4 b8 fa d2 94 aa fd 4b 7a a2 51 25 65 10 9c bf b5 62 fc 88 2a c3 44 de 8b 97 a3 b4 f9 b7 0d fe 04 2c 80 79 54 b4 22 e7 0c 7e 94 74 4b d5 6d 3b 31 2f c0 04 50 38 d2 1d b1 18 8d 44 94 ff 52 2f da 94 d3 f6 67 24 90 f4 80 ed 6e 43 b5 1d 2a b5 bc a1 45 89 78 40 e1 20 b3 6c 99 ed 5e 66 de 5a 3d 48 Data Ascii: \(ZjROk6}\|Eu=&B3jL3(b)K:qNS\/0%G]\y1U]O:-<N4c}QBT>KzQ%ebD,yT"~tKm;1/P8DR/g$nCEx@ l^fZ=H
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 3c a3 ae 63 ec 47 c1 b7 80 ef 8a 0e 00 82 4a 2b c8 ab 5b c9 2d 7d be f0 4e af 86 f1 45 b9 d9 00 53 89 73 10 79 f9 82 cc cf e4 ba fe 7f 5f 22 b2 9c 95 76 f6 f2 67 3f 9f 25 f9 a4 9d 4e b2 2c b1 8d 80 ed 0b 6e 43 c1 3f 28 5d 06 46 b2 45 c8 fc 86 0a 85 b0 32 99 45 e1 c6 01 61 52 8e f1 a5 b8 4e 0c 92 0a 1f 6c 01 e9 86 a1 be 99 b3 84 1a 0c 09 c1 e4 f7 e9 1a 25 c1 8e e9 af c9 6a 93 8a aa fb 30 cb ed 29 2a e3 6f 17 dd 68 94 a0 d3 88 50 7e 28 b7 19 64 8d cd e8 5a 6e 6c ac 36 ba 72 7d 7c d8 39 3c 7d 50 a9 86 55 b4 5a ef d1 54 e2 05 fd 84 51 77 47 db 22 21 24 a2 15 03 14 66 20 8d b7 09 df 08 d4 b2 f3 71 1b 19 c0 63 b9 b6 f3 e3 29 cb 0a 4d a3 9c 90 71 ef fd ee 86 4e d5 cf bd 99 c1 9c 8a 5d 03 f7 ce fe 5d b7 59 19 c5 d1 be 7d af 35 2d 47 74 c5 58 35 7d 9d 74 68 84 1a Data Ascii: <cGJ+[-}NESsy_"vg?%N,nC?(]FE2EaRNl%j0)*ohP~(dZnl6r}\|9<}PUZTQwG"!$f qc)MqN]]Y}5-GtX5}th
2024-05-03 04:44:52 UTC	2651	IN	Data Raw: ad ca 44 f5 fe 98 fe d5 a8 99 37 78 51 3f fe 77 7e 3f 65 d3 dc 9d a1 98 0f c2 a9 16 02 be 47 5e 8e 47 b2 78 5f 23 5c d3 13 28 e2 9f ea 88 53 72 86 4f 49 9f f3 f3 3e c2 50 87 09 06 62 c5 ca c8 f5 5b aa 15 1f db a1 94 ea 6d a6 b6 8d c4 00 66 e5 c3 9c 1b 36 1b 38 b5 65 7d ac db e8 77 04 72 6c 72 fc 0e a0 fd 59 49 da e5 2b d7 5a 5d 0e ab a3 3c 6a 22 d5 bc f6 a0 9b 17 0b b0 55 87 65 86 ad 1b 2b bb 96 9b af b3 ca b1 24 70 70 45 f4 cd 32 33 ed b1 06 35 1b 8a 83 c5 33 40 94 3e a3 f7 4e 95 8b 2b ea fa e2 6e a3 ff ff ff ff ff f3 60 2d 04 2c 22 f7 eb e2 f8 4a ba c4 4a dd a6 21 06 2f b5 b7 07 59 bd 47 eb d5 ac 6a a0 65 9d 6e 0f 9b ac 10 f6 ab 09 a7 1a 64 98 ad aa 00 0c 59 0f 8e 52 65 67 25 72 62 f0 80 78 ab c1 10 6e 04 e7 8b 92 18 93 3d 41 b8 c3 5f fb 98 14 6f 9e 62 Data Ascii: D7xQ?w~?eG^Gx_#\(SrOI>Pb[mf68e}wrlrYI+Z]<j"Ue+$ppE2353@>N+n`-,"JJ!/YGjendYReg%rbxn=A_ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	49937	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	380	OUT	GET /static/star-d38c032d63bee9674f56de0a6cb578e7.svg HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	793	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 10562 Connection: close Date: Fri, 03 May 2024 04:44:51 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-2942" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 07f7cebee7fc49278f602ad96f5f6790.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: iZaCtN3FOHap045sMkhV9afb9B7Fi9501LKcYJmN3zempRI73tlvKw== Age: 1 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	10562	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 31 30 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 31 30 31 22 20 66 69 6c 6c 3d 22 23 30 30 30 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 39 30 76 31 30 31 48 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 34 20 35 30 2e 39 6c 2e 38 2e 32 63 2e 32 20 30 20 2e 34 20 30 20 2e 36 2e 32 20 31 Data Ascii: <svg width="90" height="101" fill="none" xmlns="http://www.w3.org/2000/svg"> <mask id="a" maskUnits="userSpaceOnUse" x="0" y="0" width="90" height="101" fill="#000"> <path fill="#fff" d="M0 0h90v101H0z"/> <path d="M4.4 50.9l.8.2c.2 0 .4 0 .6.2 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	49936	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	355	OUT	GET /page-data/app-data.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	768	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 50 Connection: close Date: Fri, 03 May 2024 04:44:51 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT ETag: "662a30ac-32" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 fa503ecd9278a874859948f3b586c782.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: p1sJgKASVmdCIYz80acC3d473pi1ojXLxg4RcLADsaRnzlYq-p_I4g== Age: 1 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	50	IN	Data Raw: 7b 22 77 65 62 70 61 63 6b 43 6f 6d 70 69 6c 61 74 69 6f 6e 48 61 73 68 22 3a 22 64 61 38 35 38 31 33 38 61 34 66 62 33 30 63 64 65 61 39 33 22 7d 0a Data Ascii: {"webpackCompilationHash":"da858138a4fb30cdea93"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	49939	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	388	OUT	GET /page-data/index/page-data.json?utm_source=link_not_found HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	771	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 260 Connection: close Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Fri, 03 May 2024 04:44:51 GMT Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 ETag: "662a30ac-104" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9750f5ee94b45ad0faba87b3fac2aad6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ebCR5s6TiopFbbp-igfa3pnJrglvBYhA-08zNUcGDovhXAaHg9t0MA== Age: 1 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	260	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 69 6e 64 65 78 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 31 32 34 32 31 36 32 32 39 39 22 2c 22 31 34 36 37 32 38 38 37 37 30 22 2c 22 32 30 34 38 31 32 36 31 31 31 22 2c 22 32 33 38 35 33 35 35 36 34 36 22 2c 22 32 35 36 32 38 31 39 31 38 37 22 5d 2c 22 73 6c 69 63 65 73 4d 61 70 Data Ascii: {"componentChunkName":"component---src-pages-index-tsx","path":"/","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/"}},"staticQueryHashes":["1242162299","1467288770","2048126111","2385355646","2562819187"],"slicesMap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	49941	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	553	OUT	GET /page-data/sq/d/2562819187.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 8284 Connection: close Date: Thu, 02 May 2024 13:26:40 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:29 GMT ETag: "662a3011-205c" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e80aeefdda01afc3c41fc332ff42e7ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: P9iYldji1E63uAZa0w_Lu69RDgdTwEwBAMI--GCiS86UU_7espQXZg== Age: 55092 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	8284	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 64 69 75 6d 5f 30 35 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 43 7a 45 6c 45 51 56 52 34 32 72 31 55 58 55 68 54 59 52 6a 57 72 53 37 36 67 36 69 62 4c 72 72 70 73 6f 73 49 62 31 53 53 49 69 32 74 31 4d 79 Data Ascii: {"data":{"medium_05":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAACzElEQVR42r1UXUhTYRjWrS76g6ibLrrpsosIb1SSIi2t1My

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	49942	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	645	OUT	GET /static/medium-02-b924d3f3e6b83880002b74f126d8be45.png HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	785	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 61401 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-efd9" Expires: Tue, 02 Jul 2024 04:44:52 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 f8debc28b6c73eb3dc7540e2ac2f0e18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 0zY4wgR0RDsJAfnDwV2SNctQsellq8ctw3zEADAQLN3icVL0SXMO_g== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 01 81 08 06 00 00 00 80 59 0d 24 00 00 ef a0 49 44 41 54 78 da ec 9b 4b 68 1d 65 18 86 4f 2e b5 b5 6d 34 ba 71 e1 46 74 51 05 83 52 04 57 6a 41 44 51 0a 4a 15 11 a4 56 10 29 88 ab 82 37 10 51 d4 8d 08 82 1b 51 5a f0 52 44 a8 50 2d 14 4c 8c 8a b8 11 a5 d6 12 48 6a 4b e8 25 89 44 53 da 9e a4 69 72 ce cc 19 9f 91 6f c2 30 24 26 01 a1 4d fb 3c f0 f0 fe ff 3f 97 03 59 7c df 9c ff 4c 6a 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 2b 8c 2c cb da 70 2e 45 44 e4 12 20 2f ea 61 3b 76 44 2e e5 9a f6 79 ae 6d b3 49 88 88 5c c4 2c 56 f0 ab 4f fd e1 6a 5c 13 e7 af c7 a5 7c 4e Data Ascii: PNGIHDRY$IDATxKheO.m4qFtQRWjADQJV)7QQZRDP-LHjK%DSiro0$&M<?Y\|Lj""""""""""""""""""""""""""""""""""""""""""""""""""""""""""+,p.ED /a;vD.ymI\,VOj\\|N
2024-05-03 04:44:52 UTC	1514	IN	Data Raw: 07 43 4d 01 2b 0a d4 aa d6 0f bb 59 68 15 0f 40 07 3c 00 88 af 17 b0 2b 3e ac 84 52 31 9e 2a 9b 27 8d db 82 48 11 1d 81 e1 4e 61 67 9f f2 ac a0 d1 61 17 65 0f 6c c9 70 66 4d 26 a9 d6 a4 77 07 13 80 2a ca 12 e3 af 3c 02 c3 b3 01 22 f1 09 a5 11 24 51 38 36 9a 18 50 7d 7c 06 92 11 0a 67 0c ea 48 86 69 b0 f3 38 19 2e 9e 1b b0 91 7a a0 4b 24 45 00 96 b0 0e ef e0 79 b7 cf 9f 93 bd 13 b5 f6 3b 17 b2 08 cc 86 5f 11 41 5c 17 81 b3 32 87 60 e0 95 10 ec 75 af c5 ce ff 1a b7 9f 06 01 7c a5 6e 6f 73 ad 50 1e 46 0c af 13 af ff 90 67 1b 5b 85 64 f9 8f 11 5d 83 13 61 77 22 33 bc b3 c3 b9 3f 06 96 01 ab 81 f3 a2 0b 3c 04 41 6c e6 f7 c2 ba 0d b0 da 4c e7 d3 45 cb 0a fa bf 64 88 b4 57 0c f1 88 e6 2a 66 18 b9 92 80 b6 ab f0 01 1e 20 3e 8e 27 90 02 f2 4a 0f a8 1f e9 a6 6d dc Data Ascii: CM+Yh@<+>R1'HNagaelpfM&w<"$Q86P}\|gHi8.zK$Ey;_A\2`u\|nosPFg[d]aw"3?<AlLEdW*f >'Jm
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 22 0a e4 cb 0f 9e d1 6d 0c b3 c1 57 ed a0 05 e2 01 c0 c0 77 96 21 fc 53 ca f9 f1 aa f8 2b cd fd 7b 80 07 20 00 1e 28 73 73 c8 c3 f9 fa 10 94 7b 28 2c 95 b3 7e 23 8c 70 d2 7d ee e7 a3 04 e6 83 38 0e 82 14 f8 be 74 a4 19 06 dc ec 21 34 8b cc 5a 00 c3 b5 10 02 70 91 82 d1 8c 74 cb c1 3a 4d 48 8e f2 ed dc 3b 48 8c ff 0c c1 cc 2c cc e2 5d ba 5a 53 40 18 b7 d5 a1 85 45 61 f7 55 18 e8 d5 1c df c7 ba 86 12 63 f4 04 8a 80 88 d0 62 5a 75 1c b5 35 ef a2 02 7f 25 9e bb 43 79 04 36 a4 c1 76 e3 3e 7e 6d a9 3e 56 cf cb 60 be 41 1f 0a d9 5a 9a d6 b2 30 8d e3 c5 aa 30 2e 02 f8 30 7f 20 12 b1 44 e2 7c 86 b6 9b 67 e3 7d 4d 8a 3b 7b 73 20 82 3b 32 0f c4 2f 75 03 83 59 af e1 01 fa 78 6e 39 60 91 c0 af fa 22 27 60 8f 18 e7 18 d0 00 84 81 b4 d4 0b 18 66 11 d7 24 76 10 41 21 84 Data Ascii: "mWw!S+{ (ss{(,~#p}8t!4Zpt:MH;H,]ZS@EaUcbZu5%Cy6v>~m>V`AZ00.0 D\|g}M;{s ;2/uYxn9`"'`f$vA!
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 04 ef 53 26 58 43 e9 c1 3a 4a 87 9b 28 13 f3 d3 68 a2 5f 21 63 0c 58 0d dd 2c e4 0d b4 d4 d0 11 39 1e 06 0c 33 82 00 e8 35 02 3f b5 44 e1 c9 65 06 fd 1e 67 ef 60 4d 66 55 e4 51 0e 48 4a 9d 80 1d 6b 50 7a 7f c7 4d 56 97 56 12 58 e8 22 f0 1d 1b 27 69 c1 82 85 c7 48 02 21 ac 8c a8 f4 0b f2 69 69 a6 19 d9 b0 0e e2 78 d0 2a 14 9b bc 27 30 85 33 79 80 c6 c9 a6 81 09 01 54 63 dd 06 ac c2 b1 db 14 6f 80 98 30 78 34 5f 7e 68 cf 36 ac 5d bf 85 fc ea 20 3a 8e 30 3c 08 d8 00 03 20 59 03 a2 07 8c c8 06 f6 bf b7 3c 81 1c 2e 66 fc 0c f8 f7 66 8f 6e 46 ae aa bf d4 17 b4 c8 09 2b 97 b6 d4 6b b2 66 07 f7 02 51 ab 65 84 05 0b 16 be 09 a2 2f d6 4a 34 21 08 c4 00 2f e0 91 c8 05 af 27 c5 f0 5b 24 30 09 12 f8 3e 10 36 45 96 49 20 2e eb 7d e9 ff 7d 53 58 3b 2d 5e 40 3f d0 c5 d7 Data Ascii: S&XC:J(h_!cX,935?Deg`MfUQHJkPzMVVX"'iH!iix*'03yTco0x4_~h6] :0< Y<.ffnF+kfQe/J4!/'[$0>6EI .}}SX;-^@?
2024-05-03 04:44:52 UTC	10735	IN	Data Raw: 4d 9a 44 2d 85 2d 36 a9 5d 38 15 50 d7 ae 5d eb 44 36 a5 c3 dc 42 b2 e2 75 d1 27 42 7f c5 f1 e3 c7 49 64 ac aa ca 22 78 f4 97 d0 3c 45 52 e1 3e 96 ef a0 36 c4 d7 98 64 c7 a2 78 24 3f 16 c2 e3 7e 46 4b b1 98 1e c1 50 5a 6a 2c d4 54 48 42 8e 06 d3 d3 dd 23 17 d7 6c 92 8b de 18 39 94 90 22 47 13 fc 2c 07 c1 99 3f 13 b6 b4 d7 30 fb 06 70 5b db 4b e2 b5 b9 30 0f ed ca 48 93 ea c3 3e e9 b8 e6 93 ce 1b d0 08 ce c0 79 7c 2a 5e 9c 50 d2 a3 d0 0e f6 21 4c 34 6f a2 54 a6 8c 95 7b 09 63 a0 01 bc 49 81 df 2f dc 01 51 dc f6 8d 95 d2 88 6f c8 b3 82 0f fb 4d 00 bd 95 84 26 7a 73 ec aa 1f e0 a1 55 41 b4 87 e8 ed fc 2a e4 df 51 53 cf 6f 03 c9 1a 21 f4 fb 4a 06 6e e0 f3 61 47 f0 6b be 88 c8 af a9 fd f0 5f 70 63 94 03 65 3a 43 a8 05 d6 63 fd 6c b0 9b a8 8f 74 f6 27 41 6e d6 Data Ascii: MD--6]8P]D6Bu'BId"x<ER>6dx$?~FKPZj,THB#l9"G,?0p[K0H>y\|^P!L4oT{cI/QoM&zsUAQSo!JnaGk_pce:Cclt'An

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	49940	3.94.39.175	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	476	OUT	GET /api/5729459/envelope/?sentry_key=0559e45064ad45fd8ca4c7912b6287c4&sentry_version=7&sentry_client=sentry.javascript.gatsby%2F7.112.2 HTTP/1.1 Host: sentry-relay.short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	397	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 03 May 2024 04:44:52 GMT Content-Length: 0 Connection: close access-control-allow-origin: * vary: origin vary: access-control-request-method vary: access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin server: sentry-relay/24.4.0 allow: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	49943	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	638	OUT	GET /static/03-d26b079ea5970bce38a0e708d0cff905.svg HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	787	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 74892 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-1248c" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5ba825173b1f7429171e730e7ae12588.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: IFUvpHi_BSJVegvhakv0msR1-WKfc95ZibQvB1pvmI0dVF8ZfOBJRQ== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 37 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 30 20 37 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 31 2e 33 39 31 36 20 33 39 2e 30 38 37 36 4c 35 31 2e 34 38 33 31 20 33 39 2e 32 35 34 33 43 35 31 2e 34 38 33 31 20 33 39 2e 33 35 34 33 20 35 31 2e 35 34 39 36 20 33 39 2e 33 36 32 36 20 35 31 2e 36 32 34 35 20 33 39 2e 33 32 31 43 35 31 2e 38 32 34 31 20 33 39 2e 34 37 39 33 20 35 31 2e 39 39 38 38 20 33 39 2e 32 37 39 33 20 35 32 2e 31 38 31 38 20 33 39 2e 33 38 37 36 43 35 32 2e 33 36 34 38 20 33 39 2e 34 39 36 20 35 32 2e 32 35 36 37 Data Ascii: <svg width="90" height="75" viewBox="0 0 90 75" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M51.3916 39.0876L51.4831 39.2543C51.4831 39.3543 51.5496 39.3626 51.6245 39.321C51.8241 39.4793 51.9988 39.2793 52.1818 39.3876C52.3648 39.496 52.2567
2024-05-03 04:44:52 UTC	9594	IN	Data Raw: 33 2e 31 32 37 31 20 34 37 2e 31 36 34 20 37 32 2e 38 36 39 32 20 34 37 2e 31 32 32 33 20 37 32 2e 36 32 38 20 34 37 2e 31 31 34 43 37 32 2e 33 37 30 34 20 34 37 2e 31 30 34 33 20 37 32 2e 31 31 36 38 20 34 37 2e 30 34 37 38 20 37 31 2e 38 37 39 33 20 34 36 2e 39 34 37 33 43 37 31 2e 36 38 38 20 34 36 2e 39 34 37 33 20 37 31 2e 35 37 31 36 20 34 37 2e 31 36 34 20 37 31 2e 33 33 38 36 20 34 37 2e 31 34 37 33 43 37 31 2e 31 30 35 37 20 34 37 2e 31 33 30 37 20 37 30 2e 39 31 34 34 20 34 36 2e 38 33 39 20 37 30 2e 36 33 31 36 20 34 36 2e 39 31 34 43 37 30 2e 33 34 38 38 20 34 36 2e 39 38 39 20 37 30 2e 33 33 32 31 20 34 37 2e 31 38 39 20 37 30 2e 31 38 32 34 20 34 37 2e 32 32 32 34 43 37 30 2e 30 32 38 33 20 34 37 2e 32 36 35 31 20 36 39 2e 38 38 32 32 20 34 Data Ascii: 3.1271 47.164 72.8692 47.1223 72.628 47.114C72.3704 47.1043 72.1168 47.0478 71.8793 46.9473C71.688 46.9473 71.5716 47.164 71.3386 47.1473C71.1057 47.1307 70.9144 46.839 70.6316 46.914C70.3488 46.989 70.3321 47.189 70.1824 47.2224C70.0283 47.2651 69.8822 4
2024-05-03 04:44:52 UTC	869	IN	Data Raw: 39 37 32 20 36 31 2e 34 34 37 36 43 36 35 2e 34 30 37 32 20 36 31 2e 35 32 32 35 20 36 35 2e 34 33 33 36 20 36 31 2e 35 39 34 33 20 36 35 2e 34 37 34 33 20 36 31 2e 36 35 37 39 43 36 35 2e 35 39 39 31 20 36 31 2e 38 31 36 32 20 36 35 2e 37 32 33 38 20 36 31 2e 37 36 36 32 20 36 35 2e 38 34 30 33 20 36 31 2e 37 34 31 32 43 36 35 2e 39 32 33 34 20 36 31 2e 37 33 36 37 20 36 36 2e 30 30 36 37 20 36 31 2e 37 33 36 37 20 36 36 2e 30 38 39 38 20 36 31 2e 37 34 31 32 43 36 36 2e 31 38 30 37 20 36 31 2e 39 33 35 35 20 36 36 2e 33 31 31 20 36 32 2e 31 30 38 37 20 36 36 2e 34 37 32 35 20 36 32 2e 32 34 39 36 43 36 36 2e 36 32 32 32 20 36 32 2e 33 37 34 36 20 36 36 2e 37 37 31 39 20 36 32 2e 34 39 39 37 20 36 36 2e 39 33 20 36 32 2e 36 31 36 33 43 36 36 2e 39 38 39 Data Ascii: 972 61.4476C65.4072 61.5225 65.4336 61.5943 65.4743 61.6579C65.5991 61.8162 65.7238 61.7662 65.8403 61.7412C65.9234 61.7367 66.0067 61.7367 66.0898 61.7412C66.1807 61.9355 66.311 62.1087 66.4725 62.2496C66.6222 62.3746 66.7719 62.4997 66.93 62.6163C66.989
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 31 35 33 38 20 36 39 2e 33 31 37 34 4c 37 32 2e 32 33 37 20 36 39 2e 37 35 39 31 43 37 32 2e 35 31 31 35 20 37 30 2e 30 31 37 35 20 37 32 2e 38 36 30 39 20 37 30 2e 31 35 30 38 20 37 32 2e 39 33 35 37 20 37 30 2e 35 39 32 36 43 37 32 2e 39 33 35 37 20 37 30 2e 37 30 30 39 20 37 32 2e 37 34 34 34 20 37 30 2e 37 36 37 36 20 37 32 2e 38 32 37 36 20 37 30 2e 39 30 39 33 43 37 32 2e 39 39 38 39 20 37 30 2e 39 32 39 39 20 37 33 2e 31 37 32 20 37 30 2e 39 32 39 39 20 37 33 2e 33 34 33 33 20 37 30 2e 39 30 39 33 43 37 33 2e 34 33 34 38 20 37 30 2e 39 30 39 33 20 37 33 2e 35 30 39 37 20 37 30 2e 39 30 39 33 20 37 33 2e 36 30 31 32 20 37 30 2e 39 30 39 33 43 37 33 2e 36 33 36 39 20 37 31 2e 30 36 31 39 20 37 33 2e 36 39 35 38 20 37 31 2e 32 30 38 20 37 33 2e 37 37 Data Ascii: 1538 69.3174L72.237 69.7591C72.5115 70.0175 72.8609 70.1508 72.9357 70.5926C72.9357 70.7009 72.7444 70.7676 72.8276 70.9093C72.9989 70.9299 73.172 70.9299 73.3433 70.9093C73.4348 70.9093 73.5097 70.9093 73.6012 70.9093C73.6369 71.0619 73.6958 71.208 73.77
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 2e 36 34 36 38 4c 36 36 2e 35 38 38 37 20 34 32 2e 37 36 33 35 43 36 36 2e 36 35 35 32 20 34 32 2e 37 36 33 35 20 36 36 2e 36 33 38 36 20 34 32 2e 38 34 36 39 20 36 36 2e 35 38 38 37 20 34 32 2e 39 31 33 35 43 36 36 2e 35 33 38 38 20 34 32 2e 39 38 30 32 20 36 36 2e 35 31 33 38 20 34 32 2e 38 33 38 35 20 36 36 2e 33 37 32 34 20 34 32 2e 39 31 33 35 43 36 36 2e 33 37 32 34 20 34 33 2e 30 32 31 39 20 36 36 2e 33 37 32 34 20 34 33 2e 30 38 30 32 20 36 36 2e 35 35 35 34 20 34 33 2e 30 34 36 39 43 36 36 2e 37 33 38 34 20 34 33 2e 30 31 33 35 20 36 36 2e 36 38 30 32 20 34 33 2e 30 34 36 39 20 36 36 2e 36 37 31 39 20 34 33 2e 30 34 36 39 43 36 36 2e 36 36 33 36 20 34 33 2e 30 34 36 39 20 36 36 2e 38 33 38 32 20 34 33 2e 30 34 36 39 20 36 36 2e 38 34 36 36 20 34 Data Ascii: .6468L66.5887 42.7635C66.6552 42.7635 66.6386 42.8469 66.5887 42.9135C66.5388 42.9802 66.5138 42.8385 66.3724 42.9135C66.3724 43.0219 66.3724 43.0802 66.5554 43.0469C66.7384 43.0135 66.6802 43.0469 66.6719 43.0469C66.6636 43.0469 66.8382 43.0469 66.8466 4
2024-05-03 04:44:52 UTC	15277	IN	Data Raw: 30 2e 35 30 31 39 20 31 37 2e 38 32 37 32 20 32 30 2e 32 31 38 35 43 31 38 2e 30 31 38 35 20 32 30 2e 31 34 33 35 20 31 38 2e 32 31 38 31 20 32 30 2e 30 34 33 34 20 31 38 2e 34 30 39 35 20 31 39 2e 39 36 30 31 43 31 38 2e 34 37 39 39 20 31 39 2e 39 36 37 35 20 31 38 2e 35 34 39 35 20 31 39 2e 39 38 31 34 20 31 38 2e 36 31 37 34 20 32 30 2e 30 30 31 38 43 31 38 2e 38 34 32 35 20 32 30 2e 31 30 34 32 20 31 39 2e 30 34 38 20 32 30 2e 32 34 35 32 20 31 39 2e 32 32 34 36 20 32 30 2e 34 31 38 35 43 31 39 2e 32 38 30 39 20 32 30 2e 34 37 35 35 20 31 39 2e 33 35 33 37 20 32 30 2e 35 31 33 34 20 31 39 2e 34 33 32 36 20 32 30 2e 35 32 36 39 43 31 39 2e 35 39 33 37 20 32 30 2e 35 35 39 35 20 31 39 2e 37 35 32 32 20 32 30 2e 36 30 34 31 20 31 39 2e 39 30 36 37 20 32 Data Ascii: 0.5019 17.8272 20.2185C18.0185 20.1435 18.2181 20.0434 18.4095 19.9601C18.4799 19.9675 18.5495 19.9814 18.6174 20.0018C18.8425 20.1042 19.048 20.2452 19.2246 20.4185C19.2809 20.4755 19.3537 20.5134 19.4326 20.5269C19.5937 20.5595 19.7522 20.6041 19.9067 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	49944	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	652	OUT	GET /static/universal-music-group-4923aecff27e9e6bc93fcea741271061.svg HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	786	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 16592 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-40d0" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 53a1f042d35b1ad7e45dd18908041b36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Y7tPMOfgAfHnrTPV2ao9LMCpbbXXObnypPj8QcgOXbhshtWTJQ9Xhg== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 30 20 31 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 22 20 6d 61 73 6b 2d 74 79 70 65 3d 22 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 31 30 22 20 79 3d 22 31 34 22 20 77 69 64 74 68 3d 22 32 30 33 22 20 68 65 69 67 68 74 3d 22 39 30 22 3e 0a 3c 72 65 63 74 20 78 3d 22 31 30 Data Ascii: <svg width="220" height="120" viewBox="0 0 220 120" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="10" y="14" width="203" height="90"><rect x="10
2024-05-03 04:44:52 UTC	208	IN	Data Raw: 4f 56 48 77 73 52 65 45 64 6f 7a 64 42 58 63 56 38 49 50 55 58 6a 62 36 57 33 75 6e 70 49 70 7a 78 41 72 4e 72 61 47 43 79 56 67 2f 2b 2f 4f 68 46 38 63 33 53 77 32 39 6c 68 4e 38 63 6e 37 67 75 51 6b 4d 31 35 32 63 4d 52 77 51 69 39 6e 2b 78 6b 55 70 50 6c 49 59 77 41 68 4c 4e 37 6c 6e 6e 30 6e 6c 47 38 35 59 70 70 54 70 69 56 67 33 35 47 52 2b 2f 67 35 75 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 6a 41 35 41 6e 38 48 36 64 49 58 68 2b 43 4e 39 64 62 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 22 2f 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: OVHwsReEdozdBXcV8IPUXjb6W3unpIpzxArNraGCyVg/+/OhF8c3Sw29lhN8cn7guQkM152cMRwQi9n+xkUpPlIYwAhLN7lnn0nlG85YppTpiVg35GR+/g5uACZiACZiACZiACZiACZiACZiACZiACZiACZjA5An8H6dIXh+CN9dbAAAAAElFTkSuQmCC"/></defs></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	49945	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	643	OUT	GET /static/raspberry-pi-941b09e756b134ff119b7a893a3d900c.svg HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 17027 Connection: close Date: Thu, 02 May 2024 11:54:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-4283" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f9aa0e4086fcbefc20f307d96a8e3b44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nF5MO15Ygqp_tEU7d3yoeih3B3-Tq_uGas0tDF0kjkZq3bm1yRoP-Q== Age: 60600 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	15587	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 30 20 31 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 22 20 6d 61 73 6b 2d 74 79 70 65 3d 22 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 31 35 22 20 79 3d 22 33 31 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 36 32 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 20 33 31 48 36 34 2e 31 31 38 33 56 39 32 2e 37 34 36 32 48 31 35 56 33 31 5a 22 20 66 69 6c 6c 3d 22 23 32 45 32 45 32 45 22 2f Data Ascii: <svg width="260" height="120" viewBox="0 0 260 120" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="15" y="31" width="50" height="62"><path d="M15 31H64.1183V92.7462H15V31Z" fill="#2E2E2E"/
2024-05-03 04:44:52 UTC	403	IN	Data Raw: 32 31 2e 30 36 37 43 32 32 33 2e 34 37 32 20 34 39 2e 30 32 33 37 20 32 32 35 2e 33 36 34 20 34 39 2e 36 33 36 37 20 32 32 36 2e 37 34 35 20 35 30 2e 38 36 32 35 43 32 32 38 2e 31 32 35 20 35 32 2e 30 38 38 35 20 32 32 38 2e 38 31 35 20 35 33 2e 37 30 32 31 20 32 32 38 2e 38 31 35 20 35 35 2e 37 30 33 36 43 32 32 38 2e 38 31 35 20 35 37 2e 37 30 35 34 20 32 32 38 2e 31 32 35 20 35 39 2e 33 31 34 33 20 32 32 36 2e 37 34 35 20 36 30 2e 35 33 30 35 43 32 32 35 2e 33 36 34 20 36 31 2e 37 34 36 39 20 32 32 33 2e 34 37 32 20 36 32 2e 33 35 34 39 20 32 32 31 2e 30 36 37 20 36 32 2e 33 35 34 39 48 32 31 36 2e 39 32 37 5a 22 20 66 69 6c 6c 3d 22 23 32 45 32 45 32 45 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 Data Ascii: 21.067C223.472 49.0237 225.364 49.6367 226.745 50.8625C228.125 52.0885 228.815 53.7021 228.815 55.7036C228.815 57.7054 228.125 59.3143 226.745 60.5305C225.364 61.7469 223.472 62.3549 221.067 62.3549H216.927Z" fill="#2E2E2E"/><path fill-rule="evenodd" cli
2024-05-03 04:44:52 UTC	1037	IN	Data Raw: 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 34 32 2e 32 32 32 20 35 31 2e 36 37 30 39 43 32 34 30 2e 37 31 39 20 35 31 2e 36 37 30 39 20 32 33 39 2e 34 39 39 20 35 30 2e 34 35 32 36 20 32 33 39 2e 34 39 39 20 34 38 2e 39 34 38 38 43 32 33 39 2e 34 39 39 20 34 37 2e 34 34 34 32 20 32 34 30 2e 37 31 39 20 34 36 2e 32 32 36 39 20 32 34 32 2e 32 32 32 20 34 36 2e 32 32 36 39 43 32 34 33 2e 37 32 37 20 34 36 2e 32 32 36 39 20 32 34 34 2e 39 34 36 20 34 37 2e 34 34 34 32 20 32 34 34 2e 39 34 36 20 34 38 2e 39 34 38 38 43 32 34 34 2e 39 34 36 20 35 30 2e 34 35 32 36 20 32 34 33 2e 37 32 37 20 35 31 2e 36 37 30 39 20 32 34 32 2e 32 32 32 20 35 31 2e 36 37 30 39 5a 4d 32 34 32 2e 32 32 32 Data Ascii: rule="evenodd" clip-rule="evenodd" d="M242.222 51.6709C240.719 51.6709 239.499 50.4526 239.499 48.9488C239.499 47.4442 240.719 46.2269 242.222 46.2269C243.727 46.2269 244.946 47.4442 244.946 48.9488C244.946 50.4526 243.727 51.6709 242.222 51.6709ZM242.222

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	49946	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	636	OUT	GET /static/stats-15e710f22b373350ce9729f5fb4b2383.svg HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14814 Connection: close Date: Thu, 02 May 2024 11:54:53 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-39de" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 53a1f042d35b1ad7e45dd18908041b36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XOojg6q-GR71cVGIIzMRW9joGQEK0gNFMPIB755nsvy_jXVsUBjh_w== Age: 60599 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	14814	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 33 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 2e 32 20 31 39 2e 36 48 33 63 2d 2e 36 2e 34 2d 2e 38 2e 33 2d 31 20 2e 33 48 32 76 2d 2e 32 2d 2e 32 63 2e 32 2d 2e 31 2e 33 2d 2e 32 2e 33 2d 2e 34 6c 2e 35 2d 2e 34 48 33 6c 2e 36 2d 2e 37 63 2e 37 2d 2e 37 20 31 2e 32 2d 31 2e 32 20 31 2e 39 2d 31 2e 33 6c 2e 31 2d 2e 32 2e 33 2d 2e 33 2e 35 2d 2e 35 20 32 2e 38 2d 32 2e 33 2e 37 2d 2e 34 2e 35 2d 2e 35 63 2e 32 20 30 20 2e 33 2d Data Ascii: <svg width="34" height="34" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M3.2 19.6H3c-.6.4-.8.3-1 .3H2v-.2-.2c.2-.1.3-.2.3-.4l.5-.4H3l.6-.7c.7-.7 1.2-1.2 1.9-1.3l.1-.2.3-.3.5-.5 2.8-2.3.7-.4.5-.5c.2 0 .3-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	49947	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:52 UTC	380	OUT	GET /static/chat-8b5b6f04fb69dbe0a772f7d695503bbb.svg HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:52 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 20031 Connection: close Date: Thu, 02 May 2024 13:26:37 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-4e3f" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f9aa0e4086fcbefc20f307d96a8e3b44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TinhhXlaA3-fM30wSO3Cl5QOba6ErGEs6eRDMgVYW3BPJ2hmq3Fjyw== Age: 55095 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:52 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 38 22 20 68 65 69 67 68 74 3d 22 31 30 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 6d 61 73 6b 20 69 64 3d 22 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 33 2e 35 22 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 39 37 22 20 66 69 6c 6c 3d 22 23 30 30 30 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 33 2e 35 68 31 32 38 76 39 37 48 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 34 20 31 34 2e 34 6c 2d 2e 36 2e 34 2d 2e 37 2e 33 68 2e 31 63 2d Data Ascii: <svg width="158" height="101" fill="none" xmlns="http://www.w3.org/2000/svg"> <mask id="a" maskUnits="userSpaceOnUse" x="0" y="3.5" width="128" height="97" fill="#000"> <path fill="#fff" d="M0 3.5h128v97H0z"/> <path d="M29.4 14.4l-.6.4-.7.3h.1c-
2024-05-03 04:44:52 UTC	2804	IN	Data Raw: 35 2d 31 2e 33 6c 2e 37 2d 32 20 2e 32 2d 2e 36 7a 6d 2d 31 2e 35 20 38 2e 38 6c 2d 2e 32 2e 31 2e 33 2d 2e 35 63 2e 33 20 30 20 30 20 2e 32 2d 2e 31 2e 34 7a 6d 32 31 2e 34 2d 32 39 56 32 36 7a 4d 31 33 36 20 35 30 2e 34 76 2d 2e 31 7a 22 20 66 69 6c 6c 3d 22 23 46 45 38 31 36 31 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 33 2e 38 20 34 36 2e 33 56 34 36 76 30 61 2e 34 2e 34 20 30 20 30 31 2e 32 2d 2e 33 76 30 63 2e 31 2d 2e 36 2e 34 2d 2e 37 2e 35 2d 31 2e 33 6c 2e 31 2d 2e 38 63 2e 32 2d 2e 34 2e 33 2d 2e 37 2e 33 2d 31 2e 31 76 30 63 30 2d 2e 35 20 30 2d 31 20 2e 32 2d 31 2e 36 6c 2d 2e 31 2d 2e 33 2e 31 2d 2e 37 2e 33 2d 31 2e 34 63 30 2d 2e 34 2e 33 2d 2e 35 2e 33 2d 31 76 2d 31 2e 31 6c 2e 32 2d 2e 37 76 30 61 31 37 2e 39 20 31 37 2e 39 Data Ascii: 5-1.3l.7-2 .2-.6zm-1.5 8.8l-.2.1.3-.5c.3 0 0 .2-.1.4zm21.4-29V26zM136 50.4v-.1z" fill="#FE8161"/> <path d="M133.8 46.3V46v0a.4.4 0 01.2-.3v0c.1-.6.4-.7.5-1.3l.1-.8c.2-.4.3-.7.3-1.1v0c0-.5 0-1 .2-1.6l-.1-.3.1-.7.3-1.4c0-.4.3-.5.3-1v-1.1l.2-.7v0a17.9 17.9
2024-05-03 04:44:52 UTC	843	IN	Data Raw: 2e 32 2d 2e 32 2e 32 2d 2e 33 2e 34 20 30 20 2e 31 2d 2e 33 2e 34 2d 2e 34 2e 33 68 2d 2e 31 76 2d 2e 32 2d 2e 33 73 2d 2e 32 20 30 20 30 2d 2e 33 76 2d 2e 31 63 2e 31 2d 2e 32 2e 32 2d 2e 35 2e 35 2d 2e 35 6c 2e 37 2d 31 20 2e 32 2d 2e 35 63 2e 32 2d 2e 35 2e 33 2d 31 20 2e 33 2d 31 2e 36 6c 2e 32 2d 2e 35 2e 33 2d 31 2e 32 2e 32 2d 2e 32 63 2e 33 2d 2e 34 2e 35 2d 2e 38 2e 35 2d 31 2e 33 6c 2e 37 2d 32 20 2e 32 2d 2e 36 68 30 7a 6d 2d 31 2e 35 20 38 2e 38 6c 2d 2e 32 2e 31 73 30 20 30 20 30 20 30 6c 2e 33 2d 2e 35 63 2e 33 20 30 20 30 20 2e 32 2d 2e 31 2e 34 7a 6d 32 31 2e 34 2d 32 39 68 30 56 32 36 73 30 20 30 20 30 20 30 68 30 7a 4d 31 33 36 20 35 30 2e 34 68 30 76 2d 2e 31 73 30 20 30 20 30 20 30 68 30 7a 22 20 73 74 72 6f 6b 65 3d 22 23 46 45 38 31 Data Ascii: .2-.2.2-.3.4 0 .1-.3.4-.4.3h-.1v-.2-.3s-.2 0 0-.3v-.1c.1-.2.2-.5.5-.5l.7-1 .2-.5c.2-.5.3-1 .3-1.6l.2-.5.3-1.2.2-.2c.3-.4.5-.8.5-1.3l.7-2 .2-.6h0zm-1.5 8.8l-.2.1s0 0 0 0l.3-.5c.3 0 0 .2-.1.4zm21.4-29h0V26s0 0 0 0h0zM136 50.4h0v-.1s0 0 0 0h0z" stroke="#FE81

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	49953	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:55 UTC	385	OUT	GET /static/medium-03-459ab7b8d6ddab3db59a811ce69ca557.png HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:55 UTC	792	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 49185 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-c021" Expires: Tue, 02 Jul 2024 04:44:52 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 57a5349e40888d521545fc9b83f270a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: x7erEYOJw_C7Jd3xGxyLwYrKdTuxvHJu_pgbsWNx8qremjHZxGvQPQ== Age: 3 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:55 UTC	15592	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 01 81 08 06 00 00 00 80 59 0d 24 00 00 bf e8 49 44 41 54 78 da ec d8 49 68 9c 75 18 c7 f1 34 d5 48 a9 b5 d6 7d 0b b5 22 e2 82 0b 88 fb 41 dc 40 c1 93 88 17 a9 a2 20 82 a0 20 e8 cd 9b 9e c4 4b ad cb 59 50 10 02 e2 72 aa 75 41 44 69 0e 8a 2d 15 d7 4a 96 2a 26 21 ad a9 a2 b1 99 64 fa 1b 78 06 26 4b 93 a6 94 1e d2 cf 07 be fc df 79 67 de b7 ef 64 e0 79 a7 d3 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 a7 d9 6c ae ea a8 bb d6 e5 d6 5d 2d 75 7c 17 00 cb b0 d8 40 5d 64 10 af 9e 53 77 e7 3a e7 98 ae e3 65 d6 75 d4 Data Ascii: PNGIHDRY$IDATxIhu4H}"A@ KYPruADi-J*&!dx&KygdyGl]-u\|@]dSw:eu
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 9c 07 04 72 7c 27 36 b3 4f 2d 00 38 3e d4 22 32 02 ca 1f 64 11 ae 73 88 e8 16 e7 03 9b 04 d4 e1 ba 01 6f fe 93 be a2 df 56 33 2f 30 e9 b9 84 ff d6 79 01 19 6d 21 04 f4 93 84 7f 3c f3 7f 34 4c e0 41 8c c2 0c ae 2c a6 f4 5e af ad 4a 9a 6a 40 8a 3a a5 58 a0 8f 8e 8a 42 24 62 31 89 58 16 12 42 f1 47 96 d0 48 3b 51 16 a2 d0 ea 53 9d af 12 f4 ca 49 44 12 bf 23 3c 3b 46 ac 1f 03 a0 b8 ba e0 b3 bc e7 3c 08 6f a9 60 0a 5a 04 41 25 07 15 c2 60 ca 09 a8 16 03 e5 58 1c 1b 74 1a ba 96 0a 0d a5 b8 85 44 c3 21 98 68 99 17 22 e5 5f 56 63 41 28 87 ff 29 44 47 68 ac aa c1 0d 79 19 0c 51 2c 46 ec 65 04 a9 2a 17 3a 88 f3 23 31 9c 05 25 38 89 5f 04 ba 08 ff 7b 97 2f 0e 5f 77 43 f0 f7 4d 7e 43 46 20 f5 4c c7 e7 dd 64 bb c9 3c 8f 3a bc a9 33 02 19 6c 22 86 b3 95 cb 39 30 03 86 Data Ascii: r\|'6O-8>"2dsoV3/0ym!<4LA,^Jj@:XB$b1XBGH;QSID#<;F<o`ZA%`XtD!h"_VcA()DGhyQ,Fe*:#1%8_{/_wCM~CF Ld<:3l"90
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 85 be b2 1a c5 eb 8e a0 78 fd 91 0c 09 08 48 12 b8 b3 6c 13 ea 56 af 83 95 81 d8 cd c0 ee ce 5d 40 e3 b6 6c 52 d6 11 7e 40 c5 35 f8 9f 56 c0 77 ff 8a 58 f9 6b f4 7b 9e 77 2f 81 ff c9 3d 04 94 ec 43 e2 90 92 8f 57 d7 0d c3 fd 4a 34 1f cf c3 d0 e3 c7 18 6f 95 bf e7 fd 9d bc dd 02 77 57 27 2c b5 75 28 5d b5 0b 17 17 6d 96 ef 61 74 17 ff 2d fb 34 24 c0 7f 93 30 9f 23 af 9e 65 45 90 99 09 ea bc 6a ac b4 9a bc 59 c2 a0 1e 1e a9 10 32 90 ac e2 89 0b 23 b7 73 11 e2 f6 aa c9 86 b0 44 4c 56 0e e9 83 76 14 3b 3b 27 67 10 a9 61 71 79 34 85 cb 6c 0f 31 d6 bb 75 b2 07 80 c6 6e 50 0c 7c e3 39 d6 bb 01 89 89 56 44 45 f6 10 f5 cb 5d c3 5a bd 66 74 98 8e 4d 3e 96 af e3 a1 0f 20 bc 83 1e d3 69 ca 40 c5 72 7f e2 37 9d 5f c8 f9 40 79 8e 16 69 1c 5f 52 84 53 48 09 e9 e4 f0 33 Data Ascii: xHlV]@lR~@5VwXk{w/=CWJ4owW',u(]mat-4$0#eEjY2#sDLVv;;'gaqy4l1unP\|9VDE]ZftM> i@r7_@yi_RSH3
2024-05-03 04:44:55 UTC	825	IN	Data Raw: 21 43 e6 93 d1 3e bd ee f7 62 9d 5b 5c 05 45 f4 a4 78 1f 96 fc 76 94 cc 4a 29 a1 ef 6a bc 93 3a 89 7a 71 84 4a f0 0b c5 f7 8a 57 8b 37 12 b4 ce 88 bd 9c e3 2b e2 45 08 fe 67 a3 08 9c c0 3e 21 a6 87 0f 63 7c 5d 09 75 24 2f a6 77 d4 29 1c 7f ba 09 7f 83 c1 30 25 bd 91 70 2d bc 8a 9e 44 11 c2 0a e3 43 f4 aa d9 89 95 be 9f 4e 9b 81 8b 68 2a 96 6a e4 3a e2 1b ba 1d 62 b6 70 9a f8 5a f1 1f c5 b8 e0 e9 72 f1 75 12 f2 97 d1 64 ed db e2 e7 c4 1b 11 e0 5f 12 ff 97 f6 1e 9f 12 2f e7 75 9f 20 9d f6 ad 74 e6 fc 3f f1 c3 e2 47 69 ea 77 0e ef 3d 66 33 b6 b1 6a 46 5c f7 5a f6 9f 2a 5e 8c 22 38 de 04 be c1 60 98 ae 98 c1 22 04 dd ad 62 83 b7 80 4a 33 e6 7e 56 fc a5 36 d7 d0 cc ee 21 8d ad e3 16 e8 30 ae 88 0a 16 bd e7 8b 81 1f 7e ad 78 bf 78 37 ae 98 2b b8 e6 57 8a 2b b0 Data Ascii: !C>b[\ExvJ)j:zqJW7+Eg>!c\|]u$/w)0%p-DCNhj:bpZrud_/u t?Giw=f3jF\Z^"8`"bJ3~V6!0~xx7+W+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	49952	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:55 UTC	394	OUT	GET /static/support-background-5c8af4d33bb148d57a2ab16ae8132caa.png HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:55 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 125207 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-1e917" Expires: Tue, 02 Jul 2024 04:44:52 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 ad22d4e4410fd07809425488bf6e79be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: uLJo3_DNNytmWJRUtSRfoIGsSl7Q4LAU5DZNTE3y-3wWoBKonfMKvQ== Age: 3 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 89 00 00 03 a3 08 03 00 00 00 21 c7 b1 37 00 00 02 13 50 4c 54 45 00 00 00 f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa f9 f9 f9 fa fa fa fa fa fa fa fa fa f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa fa fa fa fa fa fa f9 f9 f9 fa fa fa f8 f8 f8 fa fa fa f9 f9 f9 f9 f9 f9 f9 f9 f9 fa fa fa fa fa fa f9 f9 f9 fa fa fa fa fa fa fa fa fa f8 f8 f8 f9 f9 f9 f9 f9 f9 f9 f9 f9 f8 f8 f8 f9 f9 f9 fc fc fc fa fa fa fa Data Ascii: PNGIHDR!7PLTE
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 76 e7 89 5a 50 fb 35 d7 d8 4d 84 0c fd 42 f1 39 46 9f 93 71 a5 88 01 f3 b7 56 2f ce d5 c8 8c 59 64 07 e9 64 d5 ea a4 95 0b 4d a6 33 5c 09 ff 55 03 a0 cb 4d 99 41 b9 6a 7b f9 f5 69 0b bc 6e eb 01 1c 26 51 07 90 cd 8f 87 67 ef 6c e3 bb 2a 51 55 9f 00 f0 f5 cd 11 d0 de be 34 f2 35 95 67 b5 50 92 b6 a6 fd 5b 84 cd ff 2c 2f cf c3 9b 88 1e 6b da 6e 34 7a b9 f0 82 22 f3 dc a9 10 ad 8c 01 ff 8f 79 f1 e1 95 7b 56 76 6a 8a 4a fa 01 61 a7 e8 62 28 ec 9c 9e 94 65 21 43 85 38 0f 7b 72 21 5a db 1a ff 08 75 9d e7 4a ef 05 ec 26 ad d4 07 ad 81 16 1d 28 d5 01 5f 3e 29 2f 7d 9d 3f 00 ad bf be 82 0b 36 87 0d a7 83 c8 e6 f3 c7 c6 f3 eb 3b 9b c4 88 5c 07 74 60 fe 11 a8 3e 36 c6 14 6b 55 25 55 f4 36 c8 bf 85 c3 11 3f 35 69 4d 1a 92 6d c0 6e 1c 3f d5 b6 2f bc 56 3e 03 65 86 e5 Data Ascii: vZP5MB9FqV/YddM3\UMAj{in&Qgl*QU45gP[,/kn4z"y{VvjJab(e!C8{r!ZuJ&(_>)/}?6;\t`>6kU%U6?5iMmn?/V>e
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 52 d8 d2 ae ae f0 83 6e 9b 88 2c 9b 4c 93 a8 66 b9 69 d1 a6 63 51 3a 43 c4 02 98 23 48 d3 d0 40 43 dc db 9f 96 be 3f b8 79 55 17 3e f4 ed 35 8f c5 f9 ef fb 06 3a 06 7e 27 e8 a7 b7 44 07 11 37 de 5d 25 85 bf 39 f2 50 19 51 67 6c 2d df 28 f9 6c 12 22 48 7d a4 d3 74 01 9b 2a 57 65 6e 7b 8f 1b 0d 25 c6 6e cd 3c fb 79 8a 9d 8c 73 8f 1b b4 9c b7 9b f2 32 7d 0e a0 f9 6b b5 9a 47 96 55 ee 91 a4 69 de f3 b6 6f 6c 37 c5 39 e3 ad c8 7a c6 58 6d 7e ef 44 28 aa 91 cf a1 28 39 bd d0 b3 7c f4 a1 27 74 12 dc 79 dd 31 3b 40 51 82 28 0d 0d 52 eb c5 7f 4c fc c5 fb f4 6a b6 d4 b0 1a a3 08 c4 20 2e 67 53 40 6f a1 89 08 99 90 1b 85 7e 41 02 5a 5e 0f 67 43 e8 16 b9 bd 55 94 ec 2a 51 70 e4 0b 3c 7c 3e 3d cd 79 5e 55 de 35 fd be 58 d8 fb f1 80 9d 8a 7b 7a 71 28 79 e2 56 b5 49 97 Data Ascii: Rn,LficQ:C#H@C?yU>5:~'D7]%9PQgl-(l"H}tWen{%n<ys2}kGUiol79zXm~D((9\|'ty1;@Q(RLj .gS@o~AZ^gCUQp<\|>=y^U5X{zq(yVI
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 1d 32 6e 08 a4 d2 c4 23 55 0b 98 f6 2c 5c 24 fa fd bb d5 ec 5c 43 81 2b e3 db 54 55 08 cf f3 b9 39 d2 98 93 0a eb 01 3c 23 af b7 ea 78 26 8a 62 b0 34 77 e1 fd ce 70 7c b3 b8 b8 f8 fa d9 29 73 9d 08 1c e7 9d 67 65 ce f5 f7 a7 e6 b3 b4 8b 75 95 44 71 77 75 10 8a 47 e5 66 ff f2 bd e9 41 aa ba 92 7e dd fc 71 05 26 43 c2 2a b1 2c 95 9f 33 da 11 a2 c6 bc eb e8 dc e3 8c 2c 8e 0f dc 64 c5 ec 98 e1 8e 1c 92 c3 42 52 81 91 32 fc 89 62 09 82 3b c7 2b e1 71 6b 9d 6a a9 80 53 b3 5d 55 24 52 37 88 00 4e 21 94 37 04 90 ec 32 21 56 3d 5c cd b4 62 f8 bf e7 da 4d 55 b3 6b 44 80 2b a3 a6 32 47 75 42 78 95 17 1a 85 54 c0 cb e1 88 57 cc fc ea 45 96 f5 72 0a 2f 91 0b 4b 0d e2 8b 77 e3 a3 85 e1 e7 9f 9f 5d a7 27 c5 6e e6 6b 8e 5b 70 b9 4a 51 d7 e6 5c 55 14 a3 fe 2a 9b 15 5d 86 Data Ascii: 2n#U,\$\C+TU9<#x&b4wp\|)sgeuDqwuGfA~q&C,3,dBR2b;+qkjS]U$R7N!72!V=\bMUkD+2GuBxTWEr/Kw]'nk[pJQ\U]
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 8c df 1d 15 62 22 45 ca b8 c7 5e e9 21 7c 09 a3 19 e4 f3 23 8d 21 c3 9a 04 88 c7 bc dc e1 81 42 cb a0 10 75 4d 0c 7f 68 9e 81 e3 30 b7 bc 8a 10 4f 8a cc c1 d5 ba c7 1d 8e fb 76 a4 12 35 44 8d e1 1c 8b 8f 56 5d 1e 39 10 f1 4c 9c 3b 07 2a 2d c1 9e 9e dd e1 2c 5a 4f 19 06 06 f0 d8 54 ab 3b 42 d4 29 84 d1 74 3c e6 10 09 83 13 f8 92 59 d9 29 d3 55 5d 12 89 b9 74 23 93 5b 4f aa aa e7 e4 af e7 cc fe 5b 99 98 92 52 f4 d2 c8 87 97 6e c0 25 98 e1 66 b2 1c 8d 36 ce 81 95 54 94 72 61 95 96 40 89 29 24 26 12 11 30 f4 7c 8d 71 87 ef b7 5a cc dc f7 e8 6a bc ba 61 84 cf 88 52 9e 8d 2d f1 84 99 e8 97 db 71 3c 01 1c a3 6d 24 6a 88 da 59 77 88 c5 53 d5 44 a3 63 62 e4 d4 8d d6 ba 5b 2b 15 3c 1a 12 79 74 89 83 72 8d c1 95 e0 d9 7d 53 6c 2c ca 0a 5d 89 a7 93 42 97 24 c5 d5 75 Data Ascii: b"E^!\|#!BuMh0Ov5DV]9L;*-,ZOT;B)t<Y)U]t#[O[Rn%f6Tra@)$&0\|qZjaR-q<m$jYwSDcb[+<ytr}Sl,]B$u
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 3f ae b2 ed 5b 57 d6 2d 79 bd ce e5 33 bf 54 36 9a e2 fd 44 fa a0 8a 80 39 78 a9 60 59 52 36 d4 61 a6 16 b1 7b f7 c4 0b d3 97 0c 89 a4 b9 a7 1d 7f cc 43 f0 62 2f 5b 95 36 d3 3b b4 6c b9 ec e3 74 13 e1 22 11 73 1a 1a 40 bb 4b 13 d1 7a 52 d0 e5 b2 ed d0 69 59 9f 05 58 ae d3 1b ea 33 21 68 89 04 75 c5 56 65 90 6e b9 18 36 5e e5 74 3e 5c a9 e0 69 2f d1 e9 b7 f8 7c f7 42 d0 8b cc 6e 8a 0b 7e 6d 53 c7 73 5f ae fc bf 78 eb eb 95 77 fc cb 12 0f 87 1f 3b 22 eb c7 a4 e0 fc b2 9d 52 8a 72 a2 e3 97 5a 0d bf fd f7 9f bd fb e9 ed fd f7 de dd be 3a 12 ed cb 6b c8 cc 31 17 a9 71 c9 f2 b4 6e ea 80 39 3f 66 58 30 d4 b0 6a 37 76 0a 5b 35 f3 85 7c d2 e3 c7 91 5c 36 bd 1e 3f 48 4b b6 00 5e e8 20 a5 81 03 5d 5e f6 d4 b4 4b e2 78 6b 34 1a 36 13 a1 e2 04 1e 9e d3 76 24 45 13 99 Data Ascii: ?[W-y3T6D9x`YR6a{Cb/[6;lt"s@KzRiYX3!huVen6^t>\i/\|Bn~mSs_xw;"RrZ:k1qn9?fX0j7v[5\|\6?HK^ ]^Kxk46v$E
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: ae df 24 ef 48 0d 00 0d 40 28 a0 58 59 0d 94 30 1e 54 f7 b6 3d 96 bd 76 db 20 29 50 10 03 1e f1 91 a4 95 c2 40 1b 8f c7 fb 7b 2d d4 6e eb 2b 3e 89 d8 c4 d7 0a 95 52 b0 58 de eb ee e9 9d a2 77 84 1f 4b 11 fb f9 65 a4 42 48 51 17 45 dd cc 96 1b f5 50 19 8f ab 8e aa 55 1b 0c b3 c4 be 52 1f a4 82 1e aa e9 b9 40 77 90 1f 9d 90 85 70 5f b8 33 b3 6b de 79 b0 0f 23 2b c9 34 3f 98 7b fc ee bd ee ec 29 ba cf 18 af ee eb 45 3f d6 2f 3c 7c 3c f3 f8 f6 c1 76 a4 ad 8b af 48 fa 0a 49 5f 8e 77 b6 d3 ef d7 2e 29 b0 ab a7 03 28 fa 8e 8a 07 d4 eb 75 a3 1d 71 03 27 f6 68 7c b3 fc cc 67 fa 43 8e 60 a2 84 c7 20 a3 2c 2f 6e ea 0a 1b 70 62 17 87 61 26 11 fa bd 10 1e a1 27 83 d3 f0 23 26 6d e7 b6 4f 3a 48 b9 75 a1 c1 22 08 5d 14 ea 75 3c 2e 3f fa 75 68 f7 89 4d 4e ae 91 98 cf 52 Data Ascii: $H@(XY0T=v )P@{-n+>RXwKeBHQEPUR@wp_3ky#+4?{)E?/<\|<vHI_w.)(uq'h\|gC` ,/npba&'#&mO:Hu"]u<.?uhMNR
2024-05-03 04:44:56 UTC	10519	IN	Data Raw: f1 cc 74 86 89 af de 2e 4e fa e5 57 f8 62 77 56 f5 8f 5c dc 8f d4 6c a6 a8 e1 0e 3a 4a 59 ce 8f 46 30 fa d7 9d 97 e9 ee 36 6d d8 ba fc 32 76 44 9f 3d 13 ea d9 4f ce 8f 41 fd 07 ac 3e b9 e5 1f b9 34 f0 79 f3 b3 05 c2 e7 9a f1 85 16 d9 4f e2 8e 91 38 19 59 20 f1 e6 c6 d5 ad 7b a6 99 f8 f5 a5 ed 14 21 9c 9a f3 96 7f 15 93 03 3c 00 48 7d c0 4b 00 5c c5 87 fa 50 8c 22 e6 70 47 7e 76 f9 f5 f8 84 ba 9d 72 98 e8 c5 01 e1 16 7d 7d a2 ec e2 7f 85 a7 64 24 88 00 12 08 bd 7b 77 11 f4 60 07 c3 33 d4 49 db 8b b7 67 70 0e 7e fa 17 cd 8b 88 f5 15 3c 24 ea 97 d1 80 48 e4 4f ff f8 dd df 6a a6 c9 12 52 6c 93 e5 de 88 6b 7b 2e 68 3a f7 9f 71 f5 e7 73 44 80 9b 0f 6a b0 2e d4 c8 67 7b 51 ec 0c 0b 9b 9d 87 d6 ec f5 39 f2 e4 ee 8d 2b cb 9b ab a6 7b f7 ae 12 02 3e 2d e2 e2 5c b0 Data Ascii: t.NWbwV\l:JYF06m2vD=OA>4yO8Y {!<H}K\P"pG~vr}}d${w`3Igp~<$HOjRlk{.h:qsDj.g{Q9+{>-\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	49950	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:55 UTC	362	OUT	GET /page-data/sq/d/1242162299.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:55 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 9157 Connection: close Date: Thu, 02 May 2024 13:26:40 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:29 GMT ETag: "662a3011-23c5" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 57a5349e40888d521545fc9b83f270a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Hw3Nlkv4R54R3UK1Cdn2oXwDf0A3ro-6WEaYznA1BvZg-T_VAEs7Hw== Age: 55095 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:55 UTC	9157	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 64 69 75 6d 5f 30 31 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 43 38 45 6c 45 51 56 52 34 32 70 32 55 79 30 38 54 55 52 54 47 73 61 42 62 33 52 68 4e 31 4c 6a 56 6d 4b 68 4c 6f 32 35 4d 2f 41 4e 63 75 6a 49 Data Ascii: {"data":{"medium_01":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC8ElEQVR42p2Uy08TURTGsaBb3RhN1LjVmKhLo25M/ANcujI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	49951	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:55 UTC	362	OUT	GET /page-data/sq/d/2048126111.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:55 UTC	795	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 5520 Connection: close Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:29 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Date: Fri, 03 May 2024 04:44:52 GMT Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 ETag: "662a3011-1590" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5af2699243b550d789ef9dce0b522ed2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Y2n1ILL809dA64NjuYl76ebM3nwb7Gx6YkT2BjA3S8J7HUHrMlCgmw== Age: 3 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:55 UTC	5520	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 73 75 70 70 6f 72 74 5f 77 6f 72 6b 65 72 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 57 43 41 59 41 41 41 44 41 51 62 77 47 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 45 58 30 6c 45 51 56 52 34 32 70 57 55 66 30 78 54 56 78 54 48 43 39 52 6b 30 38 79 6f 69 38 4b 79 78 73 61 6c 30 4e 65 66 72 36 Data Ascii: {"data":{"support_worker":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAWCAYAAADAQbwGAAAACXBIWXMAAAsTAAALEwEAmpwYAAAEX0lEQVR42pWUf0xTVxTHC9Rk08yoi8Kyxsal0Nefr6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	49949	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:55 UTC	362	OUT	GET /page-data/sq/d/1467288770.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:55 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4561 Connection: close Date: Thu, 02 May 2024 13:26:40 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:29 GMT ETag: "662a3011-11d1" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6e202b767e6bdee837ba15ada7e3120e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9uPHFjW0uoUJtsngwTn3LeU7FGQ08_QEMHBQQCRKUhCOWX_MHeU1Lg== Age: 55095 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:55 UTC	4561	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 72 65 76 69 65 77 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 43 33 30 6c 45 51 56 52 34 32 6f 32 55 58 55 67 55 55 52 54 48 4e 34 30 65 6f 71 4b 6e 6f 50 65 49 49 41 6a 36 65 4b 75 33 6e 67 71 4b 36 44 46 36 36 43 Data Ascii: {"data":{"review":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC30lEQVR42o2UXUgUURTHN40eoqKnoPeIIAj6eKu3ngqK6DF66C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	49948	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:55 UTC	636	OUT	GET /static/stats-a6d9e893096b5c669d8cc5160be1482e.svg HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:55 UTC	786	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 23058 Connection: close Date: Fri, 03 May 2024 04:44:55 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-5a12" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 241db89625f6ef70a00b0e19e0cfc332.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: suNyB-HgHaE9jHqtYJbzoh-MqTWmdHdpqz01wNFPg_uPjImruOTrUA== X-XSS-Protection: 1; mode=block
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 31 37 22 20 68 65 69 67 68 74 3d 22 34 38 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 72 65 63 74 20 78 3d 22 2e 38 22 20 79 3d 22 2e 38 22 20 77 69 64 74 68 3d 22 37 31 35 2e 35 22 20 68 65 69 67 68 74 3d 22 34 38 34 2e 35 22 20 72 78 3d 22 31 35 2e 33 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 3d 22 23 46 32 46 32 46 32 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 2e 38 20 31 36 43 2e 38 20 37 2e 36 20 37 2e 35 2e 37 20 31 36 20 2e 37 68 36 38 35 63 38 2e 34 20 30 20 31 35 2e 33 20 36 2e 39 20 31 35 2e 33 20 31 35 2e 33 76 32 33 2e 33 48 2e Data Ascii: <svg width="717" height="486" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x=".8" y=".8" width="715.5" height="484.5" rx="15.3" fill="#fff" stroke="#F2F2F2" stroke-width="1.5"/><path d="M.8 16C.8 7.6 7.5.7 16 .7h685c8.4 0 15.3 6.9 15.3 15.3v23.3H.
2024-05-03 04:44:55 UTC	6674	IN	Data Raw: 7a 6d 30 20 32 2e 32 63 32 2e 35 20 30 20 34 2e 33 2d 31 2e 38 20 34 2e 33 2d 34 2e 33 20 30 2d 32 2e 34 2d 31 2e 39 2d 34 2e 31 2d 34 2e 33 2d 34 2e 31 61 34 2e 32 20 34 2e 32 20 30 20 30 30 2d 34 2e 33 20 34 2e 32 63 30 20 32 2e 34 20 31 2e 37 20 34 2e 32 20 34 2e 33 20 34 2e 32 7a 6d 2d 32 20 38 2e 39 68 32 2e 31 6c 31 31 2e 34 2d 31 37 2e 32 68 2d 32 2e 31 4c 33 31 39 2e 39 20 31 35 33 7a 6d 31 31 2e 35 2d 32 63 2d 31 20 30 2d 31 2e 37 2d 2e 36 2d 31 2e 37 2d 32 20 30 2d 31 2e 33 2e 37 2d 32 20 31 2e 37 2d 32 73 31 2e 36 2e 37 20 31 2e 36 20 32 2d 2e 36 20 32 2d 31 2e 36 20 32 7a 6d 30 20 32 2e 33 63 32 2e 35 20 30 20 34 2e 33 2d 31 2e 39 20 34 2e 33 2d 34 2e 33 20 30 2d 32 2e 35 2d 32 2d 34 2e 32 2d 34 2e 33 2d 34 2e 32 61 34 2e 32 20 34 2e 32 20 30 Data Ascii: zm0 2.2c2.5 0 4.3-1.8 4.3-4.3 0-2.4-1.9-4.1-4.3-4.1a4.2 4.2 0 00-4.3 4.2c0 2.4 1.7 4.2 4.3 4.2zm-2 8.9h2.1l11.4-17.2h-2.1L319.9 153zm11.5-2c-1 0-1.7-.6-1.7-2 0-1.3.7-2 1.7-2s1.6.7 1.6 2-.6 2-1.6 2zm0 2.3c2.5 0 4.3-1.9 4.3-4.3 0-2.5-2-4.2-4.3-4.2a4.2 4.2 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	49954	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:55 UTC	559	OUT	GET /ea88be26-ca08e4c3b26e1cdbc62c.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:55 UTC	835	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 305429 Connection: close Date: Tue, 30 Apr 2024 00:16:32 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-4a915" Expires: Sat, 29 Jun 2024 00:16:32 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab734ad5d81cc9d470b6176a05dd968e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VZvV00XbFNJ9NtGZ20CYTMrxWk0dO3eoKuLXGlk8JZa2MpqI8iit_Q== Age: 275303 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 32 5d 2c 7b 39 38 39 31 3a 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 76 61 72 20 66 61 63 74 6f 72 79 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 28 66 61 63 74 6f 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 76 67 4e 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 6c 6f 63 61 74 69 6f 6e 48 72 65 66 3d 22 22 2c 5f 75 73 Data Ascii: (self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[342],{9891:function(module,exports,__webpack_require__){var factory;"undefined"!=typeof navigator&&(factory=function(){"use strict";var svgNS="http://www.w3.org/2000/svg",locationHref="",_us
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 73 5b 74 5d 29 66 6f 72 28 76 61 72 20 69 3d 74 68 69 73 2e 5f 63 62 73 5b 74 5d 2c 72 3d 30 3b 72 3c 69 2e 6c 65 6e 67 74 68 3b 72 2b 3d 31 29 69 5b 72 5d 28 65 29 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 62 73 5b 74 5d 7c 7c 28 74 68 69 73 2e 5f 63 62 73 5b 74 5d 3d 5b 5d 29 2c 74 68 69 73 2e 5f 63 62 73 5b 74 5d 2e 70 75 73 68 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 65 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 7d 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 63 62 73 5b Data Ascii: s[t])for(var i=this._cbs[t],r=0;r<i.length;r+=1)i[r](e)},addEventListener:function(t,e){return this._cbs[t]\|\|(this._cbs[t]=[]),this._cbs[t].push(e),function(){this.removeEventListener(t,e)}.bind(this)},removeEventListener:function(t,e){if(e){if(this._cbs[
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 72 61 6d 65 2c 74 68 69 73 2e 74 6f 74 61 6c 46 72 61 6d 65 73 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 65 73 74 72 6f 79 22 3a 74 68 69 73 2e 74 72 69 67 67 65 72 45 76 65 6e 74 28 74 2c 6e 65 77 20 42 4d 44 65 73 74 72 6f 79 45 76 65 6e 74 28 74 2c 74 68 69 73 29 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 69 73 2e 74 72 69 67 67 65 72 45 76 65 6e 74 28 74 29 7d 22 65 6e 74 65 72 46 72 61 6d 65 22 3d 3d 3d 74 26 26 74 68 69 73 2e 6f 6e 45 6e 74 65 72 46 72 61 6d 65 26 26 74 68 69 73 2e 6f 6e 45 6e 74 65 72 46 72 61 6d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 65 77 20 42 4d 45 6e 74 65 72 46 72 61 6d 65 45 76 65 6e 74 28 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 46 72 61 6d 65 2c 74 68 69 73 2e 74 6f 74 61 6c 46 72 61 6d 65 73 2c 74 68 69 73 Data Ascii: rame,this.totalFrames));break;case"destroy":this.triggerEvent(t,new BMDestroyEvent(t,this));break;default:this.triggerEvent(t)}"enterFrame"===t&&this.onEnterFrame&&this.onEnterFrame.call(this,new BMEnterFrameEvent(t,this.currentFrame,this.totalFrames,this
2024-05-03 04:44:55 UTC	16384	IN	Data Raw: 64 66 3d 21 31 3b 76 61 72 20 65 3d 74 68 69 73 2e 64 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 69 65 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 74 3d 30 3b 74 3c 65 3b 74 2b 3d 31 29 74 68 69 73 2e 64 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 69 65 73 5b 74 5d 2e 67 65 74 56 61 6c 75 65 28 29 2c 74 68 69 73 2e 64 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 69 65 73 5b 74 5d 2e 5f 6d 64 66 26 26 28 74 68 69 73 2e 5f 6d 64 66 3d 21 30 29 7d 2c 69 6e 69 74 44 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 79 43 6f 6e 74 61 69 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 74 2c 74 68 69 73 2e 64 79 6e 61 6d 69 63 50 72 6f 70 65 72 74 69 65 73 3d 5b 5d 2c 74 68 69 73 2e 5f 6d 64 66 3d 21 31 2c 74 68 69 73 2e 5f 69 73 41 6e 69 6d 61 74 Data Ascii: df=!1;var e=this.dynamicProperties.length;for(t=0;t<e;t+=1)this.dynamicProperties[t].getValue(),this.dynamicProperties[t]._mdf&&(this._mdf=!0)},initDynamicPropertyContainer:function(t){this.container=t,this.dynamicProperties=[],this._mdf=!1,this._isAnimat
2024-05-03 04:44:55 UTC	8020	IN	Data Raw: 20 4d 61 74 72 69 78 3b 72 65 74 75 72 6e 20 6f 2e 70 72 6f 70 73 5b 30 5d 3d 65 2c 6f 2e 70 72 6f 70 73 5b 31 5d 3d 69 2c 6f 2e 70 72 6f 70 73 5b 34 5d 3d 72 2c 6f 2e 70 72 6f 70 73 5b 35 5d 3d 73 2c 6f 2e 70 72 6f 70 73 5b 31 32 5d 3d 61 2c 6f 2e 70 72 6f 70 73 5b 31 33 5d 3d 6e 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 76 65 72 73 65 4d 61 74 72 69 78 28 29 2e 61 70 70 6c 79 54 6f 50 6f 69 6e 74 41 72 72 61 79 28 74 5b 30 5d 2c 74 5b 31 5d 2c 74 5b 32 5d 7c 7c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 76 61 72 20 65 2c 69 3d 74 2e 6c 65 6e 67 74 68 2c 72 3d 5b 5d 3b 66 6f 72 28 65 3d 30 3b 65 3c 69 3b 65 2b 3d 31 29 72 5b 65 5d 3d 41 28 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 72 7d 66 Data Ascii: Matrix;return o.props[0]=e,o.props[1]=i,o.props[4]=r,o.props[5]=s,o.props[12]=a,o.props[13]=n,o}function A(t){return this.getInverseMatrix().applyToPointArray(t[0],t[1],t[2]\|\|0)}function T(t){var e,i=t.length,r=[];for(e=0;e<i;e+=1)r[e]=A(t[e]);return r}f
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 64 2e 73 68 61 70 65 2e 70 61 74 68 73 29 2e 5f 6c 65 6e 67 74 68 2c 66 3d 30 2c 21 64 2e 73 68 61 70 65 2e 5f 6d 64 66 26 26 64 2e 70 61 74 68 73 44 61 74 61 2e 6c 65 6e 67 74 68 29 66 3d 64 2e 74 6f 74 61 6c 53 68 61 70 65 4c 65 6e 67 74 68 3b 65 6c 73 65 7b 66 6f 72 28 6c 3d 74 68 69 73 2e 72 65 6c 65 61 73 65 50 61 74 68 73 44 61 74 61 28 64 2e 70 61 74 68 73 44 61 74 61 29 2c 6f 3d 30 3b 6f 3c 68 3b 6f 2b 3d 31 29 70 3d 62 65 7a 2e 67 65 74 53 65 67 6d 65 6e 74 73 4c 65 6e 67 74 68 28 72 2e 73 68 61 70 65 73 5b 6f 5d 29 2c 6c 2e 70 75 73 68 28 70 29 2c 66 2b 3d 70 2e 74 6f 74 61 6c 4c 65 6e 67 74 68 3b 64 2e 74 6f 74 61 6c 53 68 61 70 65 4c 65 6e 67 74 68 3d 66 2c 64 2e 70 61 74 68 73 44 61 74 61 3d 6c 7d 63 2b 3d 66 2c 64 2e 73 68 61 70 65 2e 5f 6d Data Ascii: d.shape.paths)._length,f=0,!d.shape._mdf&&d.pathsData.length)f=d.totalShapeLength;else{for(l=this.releasePathsData(d.pathsData),o=0;o<h;o+=1)p=bez.getSegmentsLength(r.shapes[o]),l.push(p),f+=p.totalLength;d.totalShapeLength=f,d.pathsData=l}c+=f,d.shape._m
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 5d 2a 6e 2a 73 2c 72 2e 70 2e 76 5b 32 5d 29 2c 65 2e 74 72 61 6e 73 6c 61 74 65 28 2d 72 2e 61 2e 76 5b 30 5d 2c 2d 72 2e 61 2e 76 5b 31 5d 2c 72 2e 61 2e 76 5b 32 5d 29 2c 65 2e 72 6f 74 61 74 65 28 2d 72 2e 72 2e 76 2a 6e 2a 73 29 2c 65 2e 74 72 61 6e 73 6c 61 74 65 28 72 2e 61 2e 76 5b 30 5d 2c 72 2e 61 2e 76 5b 31 5d 2c 72 2e 61 2e 76 5b 32 5d 29 2c 69 2e 74 72 61 6e 73 6c 61 74 65 28 2d 72 2e 61 2e 76 5b 30 5d 2c 2d 72 2e 61 2e 76 5b 31 5d 2c 72 2e 61 2e 76 5b 32 5d 29 2c 69 2e 73 63 61 6c 65 28 61 3f 31 2f 6f 3a 6f 2c 61 3f 31 2f 68 3a 68 29 2c 69 2e 74 72 61 6e 73 6c 61 74 65 28 72 2e 61 2e 76 5b 30 5d 2c 72 2e 61 2e 76 5b 31 5d 2c 72 2e 61 2e 76 5b 32 5d 29 7d 2c 52 65 70 65 61 74 65 72 4d 6f 64 69 66 69 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 Data Ascii: ]ns,r.p.v[2]),e.translate(-r.a.v[0],-r.a.v[1],r.a.v[2]),e.rotate(-r.r.vns),e.translate(r.a.v[0],r.a.v[1],r.a.v[2]),i.translate(-r.a.v[0],-r.a.v[1],r.a.v[2]),i.scale(a?1/o:o,a?1/h:h),i.translate(r.a.v[0],r.a.v[1],r.a.v[2])},RepeaterModifier.prototype.i
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 4c 6f 61 64 65 64 3d 21 30 7d 7d 3b 72 65 74 75 72 6e 20 70 2e 70 72 6f 74 6f 74 79 70 65 3d 66 2c 70 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 53 6c 6f 74 4d 61 6e 61 67 65 72 28 74 29 7b 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 44 61 74 61 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 73 6c 6f 74 46 61 63 74 6f 72 79 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 53 6c 6f 74 4d 61 6e 61 67 65 72 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 52 65 6e 64 65 72 61 62 6c 65 45 6c 65 6d 65 6e 74 28 29 7b 7d 53 6c 6f 74 4d 61 6e 61 67 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 44 61 74 61 2e 73 6c 6f 74 73 Data Ascii: :function(){this.isLoaded=!0}};return p.prototype=f,p}();function SlotManager(t){this.animationData=t}function slotFactory(t){return new SlotManager(t)}function RenderableElement(){}SlotManager.prototype.getProp=function(t){return this.animationData.slots
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 65 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 69 3d 30 3b 69 3c 6e 3b 69 2b 3d 31 29 61 3d 65 5b 69 5d 2e 6d 61 74 2e 61 70 70 6c 79 54 6f 50 6f 69 6e 74 41 72 72 61 79 28 30 2c 30 2c 30 29 2c 74 3d 5b 74 5b 30 5d 2d 61 5b 30 5d 2c 74 5b 31 5d 2d 61 5b 31 5d 2c 30 5d 3b 72 65 74 75 72 6e 20 74 7d 2c 6d 48 65 6c 70 65 72 3a 6e 65 77 20 4d 61 74 72 69 78 7d 2c 4d 61 73 6b 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4d 61 73 6b 50 72 6f 70 65 72 74 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 69 65 77 44 61 74 61 5b 74 5d 2e 70 72 6f 70 7d 2c 4d 61 73 6b 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 74 68 69 Data Ascii: e.length;for(i=0;i<n;i+=1)a=e[i].mat.applyToPointArray(0,0,0),t=[t[0]-a[0],t[1]-a[1],0];return t},mHelper:new Matrix},MaskElement.prototype.getMaskProperty=function(t){return this.viewData[t].prop},MaskElement.prototype.renderFrame=function(t){var e,i=thi
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 69 73 29 2c 74 68 69 73 2e 61 3d 50 72 6f 70 65 72 74 79 46 61 63 74 6f 72 79 2e 67 65 74 50 72 6f 70 28 74 2c 65 2e 61 7c 7c 7b 6b 3a 30 7d 2c 30 2c 64 65 67 54 6f 52 61 64 73 2c 74 68 69 73 29 2c 74 68 69 73 2e 67 3d 6e 65 77 20 47 72 61 64 69 65 6e 74 50 72 6f 70 65 72 74 79 28 74 2c 65 2e 67 2c 74 68 69 73 29 2c 74 68 69 73 2e 73 74 79 6c 65 3d 69 2c 74 68 69 73 2e 73 74 6f 70 73 3d 5b 5d 2c 74 68 69 73 2e 73 65 74 47 72 61 64 69 65 6e 74 44 61 74 61 28 69 2e 70 45 6c 65 6d 2c 65 29 2c 74 68 69 73 2e 73 65 74 47 72 61 64 69 65 6e 74 4f 70 61 63 69 74 79 28 65 2c 69 29 2c 74 68 69 73 2e 5f 69 73 41 6e 69 6d 61 74 65 64 3d 21 21 74 68 69 73 2e 5f 69 73 41 6e 69 6d 61 74 65 64 7d 2c 53 56 47 47 72 61 64 69 65 6e 74 46 69 6c 6c 53 74 79 6c 65 44 61 74 61 Data Ascii: is),this.a=PropertyFactory.getProp(t,e.a\|\|{k:0},0,degToRads,this),this.g=new GradientProperty(t,e.g,this),this.style=i,this.stops=[],this.setGradientData(i.pElem,e),this.setGradientOpacity(e,i),this._isAnimated=!!this._isAnimated},SVGGradientFillStyleData

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	49955	13.35.93.76	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:55 UTC	422	OUT	GET /v1alpha/publicKeys HTTP/1.1 Host: publickeyservice.aws.privacysandboxservices.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	401	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 614 Connection: close Date: Fri, 03 May 2024 02:00:53 GMT Cache-Control: max-age=582794 Apigw-Requestid: XK_FYgMjIAMEJfA= X-Cache: Hit from cloudfront Via: 1.1 bb230469f03d4df9d78eb6119c0e0ccc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: dZTdq-KTj91OPhY9flDqtXDLxFdKwHOLrKJhoiLQiauFJ6t1FCaHjA== Age: 9843
2024-05-03 04:44:56 UTC	614	IN	Data Raw: 7b 0a 20 20 22 6b 65 79 73 22 3a 20 5b 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 33 38 31 66 36 38 32 39 2d 30 61 66 35 2d 34 30 62 34 2d 61 65 30 31 2d 62 65 36 35 62 36 30 64 64 39 66 39 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 6a 53 58 4a 46 6b 44 62 73 50 71 69 67 78 33 2f 52 35 78 55 65 6f 62 44 63 34 71 43 5a 36 76 67 77 4a 31 48 6f 55 53 4b 4e 79 73 5c 75 30 30 33 64 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 37 34 65 37 31 38 30 65 2d 66 38 66 63 2d 34 30 63 66 2d 61 37 38 34 2d 63 39 31 35 33 62 36 63 31 30 36 36 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 78 44 79 6f 56 34 33 44 64 76 6e 65 6a 52 57 71 78 6b 78 76 75 45 44 63 52 33 7a 65 4d 4c 45 47 6d 66 46 68 30 48 4d 41 31 47 6b 5c 75 30 30 33 64 22 0a 20 20 7d 2c 20 7b 0a Data Ascii: { "keys": [{ "id": "381f6829-0af5-40b4-ae01-be65b60dd9f9", "key": "jSXJFkDbsPqigx3/R5xUeobDc4qCZ6vgwJ1HoUSKNys\u003d" }, { "id": "74e7180e-f8fc-40cf-a784-c9153b6c1066", "key": "xDyoV43DdvnejRWqxkxvuEDcR3zeMLEGmfFh0HMA1Gk\u003d" }, {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	49956	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:56 UTC	362	OUT	GET /page-data/sq/d/2385355646.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4933 Connection: close Date: Thu, 02 May 2024 13:26:40 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:30 GMT ETag: "662a3012-1345" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6e202b767e6bdee837ba15ada7e3120e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: gyiIKJ0kDnIAl8HwHqxxSeeOq_6l2gFS1wgc0heoicYGmgx2cOfFyQ== Age: 55096 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:56 UTC	4933	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 44 61 30 6c 45 51 56 52 34 32 71 56 55 57 30 68 55 55 52 51 64 7a 51 79 79 31 31 66 6b 52 31 41 59 32 75 4d 6e 4d 4f 67 6a 77 34 6f 67 Data Ascii: {"data":{"integrations":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAADa0lEQVR42qVUW0hUURQdzQyy11fkR1AY2uMnMOgjw4og

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	49957	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:56 UTC	591	OUT	GET /a88f938da5de181922832d50f06213eec0b7550e-ec2257cdde6a79943bb5.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	833	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11303 Connection: close Date: Tue, 30 Apr 2024 00:16:32 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-2c27" Expires: Sat, 29 Jun 2024 00:16:32 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 38bc9c97daf30f968ccac44ef89e14e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: i5KYvKKD_kzg5aUNoDpUH-UiAqyCBLZ-8dFGYF8ONHWPkcxGTcuIDg== Age: 275304 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:56 UTC	11303	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 34 35 5d 2c 7b 32 37 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 2f 5b 5c 70 7b 4c 75 7d 5d 2f 75 2c 61 3d 2f 5b 5c 70 7b 4c 6c 7d 5d 2f 75 2c 72 3d 2f 5e 5b 5c 70 7b 4c 75 7d 5d 28 3f 21 5b 5c 70 7b 4c 75 7d 5d 29 2f 67 75 2c 73 3d 2f 28 5b 5c 70 7b 41 6c 70 68 61 7d 5c 70 7b 4e 7d 5f 5d 7c 24 29 2f 75 2c 6e 3d 2f 5b 5f 2e 5c 2d 20 5d 2b 2f 2c 69 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 6e 2e 73 6f 75 72 63 65 29 2c 6c 3d 6e 65 77 20 52 65 67 45 78 70 28 6e 2e 73 6f 75 72 63 65 2b 73 2e 73 Data Ascii: "use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[945],{2729:function(e){const t=/[\p{Lu}]/u,a=/[\p{Ll}]/u,r=/^[\p{Lu}](?![\p{Lu}])/gu,s=/([\p{Alpha}\p{N}_]\|$)/u,n=/[_.\- ]+/,i=new RegExp("^"+n.source),l=new RegExp(n.source+s.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	49958	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:56 UTC	591	OUT	GET /8235685ff385744a4e98baf37fa1220d2a52f68a-d2c6e11abf704479efde.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	835	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 177595 Connection: close Date: Tue, 30 Apr 2024 00:16:32 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-2b5bb" Expires: Sat, 29 Jun 2024 00:16:32 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bf8d7cb6fca5d51158e1109ca40fe242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lPFdZ_Xu4bG390qFjzwv7b244eFCcbp3RU5ZMawEBb7pdsF8qnFqKA== Age: 275304 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 30 38 5d 2c 7b 38 38 38 30 3a 66 75 6e 63 74 69 6f 6e 28 4c 2c 4d 2c 6a 29 7b 6a 2e 64 28 4d 2c 7b 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 7d 29 3b 76 61 72 20 75 3d 6a 28 36 35 34 30 29 3b 63 6f 6e 73 74 20 49 3d 4c 3d 3e 7b 63 6f 6e 73 74 20 4d 3d 28 30 2c 75 2e 75 73 65 52 65 66 29 28 29 2c 7b 30 3a 6a 2c 31 3a 49 7d 3d 28 30 2c 75 2e 75 73 65 53 74 61 74 65 29 28 21 31 29 3b 72 65 74 75 72 6e 28 30 2c 75 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d Data Ascii: "use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[208],{8880:function(L,M,j){j.d(M,{P:function(){return I}});var u=j(6540);const I=L=>{const M=(0,u.useRef)(),{0:j,1:I}=(0,u.useState)(!1);return(0,u.useEffect)((()=>{if(void 0!==
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 4e 58 52 67 6b 62 53 38 4e 45 51 31 51 78 6d 50 49 30 42 46 58 59 6c 54 53 69 4d 34 62 57 78 6c 6a 44 34 77 79 6c 43 66 2f 53 72 47 59 5a 4e 49 54 46 64 47 4d 52 39 7a 4d 70 58 54 36 53 59 55 64 48 6d 35 42 71 71 4f 52 6c 42 52 51 4f 6c 4d 48 32 59 6b 46 41 67 31 7a 63 43 2f 4b 61 50 55 32 2f 79 32 68 6d 61 49 2b 44 5a 6e 76 42 72 73 39 57 45 36 59 45 46 37 59 66 45 62 6b 39 58 6c 4c 70 30 56 39 35 6b 69 73 51 79 46 4b 35 4e 6a 38 65 4d 7a 4a 46 69 6c 53 6b 73 69 4c 6c 49 4f 67 68 35 35 30 59 35 76 30 54 65 70 4a 48 49 55 48 65 41 6d 52 50 65 43 75 39 32 4e 6a 73 58 42 6f 69 68 31 77 6a 65 55 46 38 6b 52 77 44 37 64 4d 49 4c 7a 57 76 6b 70 71 34 54 57 58 63 39 76 78 6b 39 51 49 50 53 45 73 41 33 77 53 4b 4f 61 48 2f 63 61 47 45 56 56 64 65 68 4d 52 64 65 Data Ascii: NXRgkbS8NEQ1QxmPI0BFXYlTSiM4bWxljD4wylCf/SrGYZNITFdGMR9zMpXT6SYUdHm5BqqORlBRQOlMH2YkFAg1zcC/KaPU2/y2hmaI+DZnvBrs9WE6YEF7YfEbk9XlLp0V95kisQyFK5Nj8eMzJFilSksiLlIOgh550Y5v0TepJHIUHeAmRPeCu92NjsXBoih1wjeUF8kRwD7dMILzWvkpq4TWXc9vxk9QIPSEsA3wSKOaH/caGEVVdehMRde
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 59 32 4e 6d 45 78 4d 69 34 79 49 44 45 79 4c 6a 49 67 4d 43 41 77 49 44 41 67 4c 6a 63 67 4e 47 67 74 4e 43 34 79 57 6b 30 78 4d 54 4d 75 4e 43 41 32 4e 53 34 33 59 7a 41 74 4c 6a 55 74 4c 6a 49 74 4c 6a 6b 74 4c 6a 63 74 4d 53 34 79 4c 53 34 30 4c 53 34 30 4c 54 45 75 4d 69 30 75 4e 79 30 79 4c 6a 51 74 4d 55 45 78 4d 43 41 78 4d 43 41 77 49 44 41 67 4d 53 41 78 4d 44 59 67 4e 6a 4a 6a 4c 54 45 74 4c 6a 63 74 4d 53 34 30 4c 54 45 75 4e 79 30 78 4c 6a 51 74 4d 33 4d 75 4e 69 30 79 4c 6a 55 67 4d 53 34 33 4c 54 4d 75 4e 47 4d 78 4c 6a 45 74 4d 53 41 79 4c 6a 59 74 4d 53 34 30 49 44 51 75 4e 53 30 78 4c 6a 51 67 4d 69 41 77 49 44 4d 75 4e 69 34 31 49 44 51 75 4f 43 41 78 4c 6a 51 67 4d 53 34 78 49 44 45 67 4d 53 34 33 49 44 49 75 4d 53 41 78 4c 6a 59 67 4d Data Ascii: Y2NmExMi4yIDEyLjIgMCAwIDAgLjcgNGgtNC4yWk0xMTMuNCA2NS43YzAtLjUtLjItLjktLjctMS4yLS40LS40LTEuMi0uNy0yLjQtMUExMCAxMCAwIDAgMSAxMDYgNjJjLTEtLjctMS40LTEuNy0xLjQtM3MuNi0yLjUgMS43LTMuNGMxLjEtMSAyLjYtMS40IDQuNS0xLjQgMiAwIDMuNi41IDQuOCAxLjQgMS4xIDEgMS43IDIuMSAxLjYgM
2024-05-03 04:44:56 UTC	15534	IN	Data Raw: 56 68 58 4a 2b 78 69 35 52 6f 4e 42 32 77 77 2b 76 30 71 33 6a 4b 78 70 77 46 4b 2f 6f 2b 76 56 31 57 53 4c 67 79 6f 31 76 45 39 4c 32 41 52 79 66 69 70 4a 38 56 6e 5a 36 70 35 61 78 30 62 75 2f 4e 6b 42 47 68 52 5a 38 32 2f 37 72 59 77 42 38 50 42 68 4a 7a 30 53 38 68 30 7a 37 75 7a 34 48 53 4b 2f 77 64 71 49 6c 5a 57 31 5a 30 48 54 34 46 31 47 58 52 6d 4e 46 74 78 6f 49 78 35 52 6e 45 42 31 34 55 66 53 38 44 57 32 42 76 48 4b 51 30 57 4e 46 56 53 49 58 30 71 70 45 6a 32 41 31 6e 37 50 48 67 69 6c 7a 4f 64 61 70 43 31 6f 45 73 77 2f 2b 32 39 73 69 49 66 69 7a 36 75 6e 4c 50 6a 4e 34 72 33 6c 36 2f 59 59 62 32 71 75 67 7a 48 57 6a 57 38 74 76 6c 53 68 54 6e 52 2b 2f 41 41 35 6b 4b 65 41 61 61 74 30 76 69 34 34 77 37 48 6d 79 78 6b 4e 6b 34 42 66 43 6f 56 Data Ascii: VhXJ+xi5RoNB2ww+v0q3jKxpwFK/o+vV1WSLgyo1vE9L2ARyfipJ8VnZ6p5ax0bu/NkBGhRZ82/7rYwB8PBhJz0S8h0z7uz4HSK/wdqIlZW1Z0HT4F1GXRmNFtxoIx5RnEB14UfS8DW2BvHKQ0WNFVSIX0qpEj2A1n7PHgilzOdapC1oEsw/+29siIfiz6unLPjN4r3l6/YYb2qugzHWjW8tvlShTnR+/AA5kKeAaat0vi44w7HmyxkNk4BfCoV
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 54 67 75 4f 57 77 75 4d 53 34 78 53 44 45 35 62 43 34 78 4c 6a 49 75 4d 79 34 7a 4c 6a 45 75 4d 69 34 79 4c 6a 4a 6a 4c 6a 49 67 4d 43 41 75 4d 79 34 79 4c 6a 55 75 4e 47 77 75 4d 53 34 79 4c 6a 49 75 4d 53 34 79 4c 6a 49 75 4d 79 34 7a 4c 6a 4d 75 4e 46 59 32 62 43 34 7a 4c 6a 5a 7a 4c 6a 45 75 4d 53 41 77 49 43 34 78 62 43 34 78 4c 6a 46 57 4e 32 77 75 4d 53 34 78 4c 6a 45 75 4d 33 59 75 4d 6d 67 74 4c 6a 46 73 4c 53 34 7a 4c 53 34 78 59 53 34 79 4c 6a 49 67 4d 43 41 77 49 44 45 74 4c 6a 49 67 4d 47 67 74 4c 6a 5a 73 4c 53 34 79 4c 53 34 78 59 53 34 7a 4c 6a 4d 67 4d 43 41 77 49 44 45 74 4c 6a 4d 67 4d 47 67 74 4c 6a 56 68 4c 6a 45 75 4d 53 41 77 49 44 41 67 4d 43 30 75 4d 69 41 77 62 43 30 75 4e 53 30 75 4d 6d 67 74 4d 53 34 78 59 53 34 33 4c 6a 63 67 Data Ascii: TguOWwuMS4xSDE5bC4xLjIuMy4zLjEuMi4yLjJjLjIgMCAuMy4yLjUuNGwuMS4yLjIuMS4yLjIuMy4zLjMuNFY2bC4zLjZzLjEuMSAwIC4xbC4xLjFWN2wuMS4xLjEuM3YuMmgtLjFsLS4zLS4xYS4yLjIgMCAwIDEtLjIgMGgtLjZsLS4yLS4xYS4zLjMgMCAwIDEtLjMgMGgtLjVhLjEuMSAwIDAgMC0uMiAwbC0uNS0uMmgtMS4xYS43Ljcg
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 63 43 31 6a 62 32 78 76 63 6a 30 69 49 7a 4a 69 59 7a 4e 6b 4d 69 49 76 50 67 6f 67 49 43 41 67 49 43 41 38 63 33 52 76 63 43 42 76 5a 6d 5a 7a 5a 58 51 39 49 69 34 33 49 69 42 7a 64 47 39 77 4c 57 4e 76 62 47 39 79 50 53 49 6a 4d 7a 5a 6a 4e 7a 55 79 49 69 38 2b 43 69 41 67 49 43 41 38 4c 33 4a 68 5a 47 6c 68 62 45 64 79 59 57 52 70 5a 57 35 30 50 67 6f 67 49 43 41 67 50 48 4a 68 5a 47 6c 68 62 45 64 79 59 57 52 70 5a 57 35 30 49 47 6c 6b 50 53 4a 6d 49 69 42 6a 65 44 30 69 4d 7a 63 32 4c 6a 55 69 49 47 4e 35 50 53 49 31 4e 6a 67 69 49 48 49 39 49 6a 6b 33 4c 6a 4d 69 49 47 64 79 59 57 52 70 5a 57 35 30 56 48 4a 68 62 6e 4e 6d 62 33 4a 74 50 53 4a 74 59 58 52 79 61 58 67 6f 4c 6a 49 34 49 43 34 35 4e 69 41 75 4e 7a 67 67 4c 53 34 79 4d 79 41 74 4d 7a 41 Data Ascii: cC1jb2xvcj0iIzJiYzNkMiIvPgogICAgICA8c3RvcCBvZmZzZXQ9Ii43IiBzdG9wLWNvbG9yPSIjMzZjNzUyIi8+CiAgICA8L3JhZGlhbEdyYWRpZW50PgogICAgPHJhZGlhbEdyYWRpZW50IGlkPSJmIiBjeD0iMzc2LjUiIGN5PSI1NjgiIHI9Ijk3LjMiIGdyYWRpZW50VHJhbnNmb3JtPSJtYXRyaXgoLjI4IC45NiAuNzggLS4yMyAtMzA
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 2d 32 36 2e 35 34 39 2c 31 39 2e 32 35 5d 2c 5b 2d 32 38 2c 32 31 2e 33 31 5d 2c 5b 2d 32 39 2e 38 33 2c 32 32 2e 38 37 39 5d 2c 5b 2d 33 31 2e 34 30 31 2c 32 35 2e 32 30 39 5d 2c 5b 2d 33 32 2e 31 33 39 2c 32 36 2e 30 35 5d 2c 5b 2d 33 32 2e 38 34 2c 32 37 2e 32 30 39 5d 2c 5b 2d 33 33 2e 39 31 31 2c 32 39 2e 32 5d 2c 5b 2d 33 34 2e 31 39 2c 32 39 2e 34 31 5d 2c 5b 2d 33 34 2e 35 33 39 2c 32 39 2e 35 35 5d 2c 5b 2d 33 35 2e 37 37 31 2c 33 30 2e 39 35 5d 2c 5b 2d 33 36 2e 30 34 39 2c 33 31 2e 35 33 5d 2c 5b 2d 33 37 2e 36 30 31 2c 33 33 2e 30 37 5d 2c 5b 2d 33 39 2e 30 37 2c 33 34 2e 35 37 5d 2c 5b 2d 33 39 2e 32 31 2c 33 34 2e 38 37 39 5d 2c 5b 2d 33 39 2e 37 31 2c 33 35 2e 35 32 31 5d 2c 5b 2d 34 30 2e 31 35 31 2c 33 35 2e 38 37 39 5d 2c 5b 2d 34 32 2e Data Ascii: -26.549,19.25],[-28,21.31],[-29.83,22.879],[-31.401,25.209],[-32.139,26.05],[-32.84,27.209],[-33.911,29.2],[-34.19,29.41],[-34.539,29.55],[-35.771,30.95],[-36.049,31.53],[-37.601,33.07],[-39.07,34.57],[-39.21,34.879],[-39.71,35.521],[-40.151,35.879],[-42.
2024-05-03 04:44:56 UTC	14808	IN	Data Raw: 2e 31 32 2c 33 33 2e 30 32 31 5d 2c 5b 2d 33 30 2e 39 39 31 2c 33 34 2e 31 30 31 5d 2c 5b 2d 33 33 2e 38 31 2c 33 36 2e 37 35 5d 2c 5b 2d 33 35 2e 37 37 31 2c 33 38 2e 34 35 39 5d 2c 5b 2d 33 36 2e 35 2c 33 38 2e 36 38 31 5d 2c 5b 2d 33 38 2e 34 36 2c 33 39 2e 39 31 39 5d 2c 5b 2d 34 30 2e 36 30 31 2c 34 31 2e 32 38 5d 2c 5b 2d 34 31 2e 35 31 2c 34 31 2e 35 5d 2c 5b 2d 34 31 2e 39 31 31 2c 34 31 2e 37 34 5d 2c 5b 2d 34 32 2e 37 30 31 2c 34 32 2e 37 35 5d 2c 5b 2d 34 35 2e 38 37 2c 34 35 2e 31 30 31 5d 2c 5b 2d 34 37 2e 36 31 31 2c 34 36 2e 30 31 5d 2c 5b 2d 34 38 2e 33 38 39 2c 34 36 2e 37 35 5d 2c 5b 2d 34 38 2e 38 37 2c 34 37 5d 2c 5b 2d 34 39 2e 34 30 31 2c 34 37 2e 33 34 5d 2c 5b 2d 35 34 2e 31 35 31 2c 34 37 2e 35 37 5d 2c 5b 2d 35 36 2e 33 38 2c 34 Data Ascii: .12,33.021],[-30.991,34.101],[-33.81,36.75],[-35.771,38.459],[-36.5,38.681],[-38.46,39.919],[-40.601,41.28],[-41.51,41.5],[-41.911,41.74],[-42.701,42.75],[-45.87,45.101],[-47.611,46.01],[-48.389,46.75],[-48.87,47],[-49.401,47.34],[-54.151,47.57],[-56.38,4
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 2c 5b 31 34 2e 31 36 2c 31 37 2e 32 34 5d 2c 5b 31 35 2e 37 39 2c 31 37 2e 31 36 5d 2c 5b 31 36 2e 35 38 31 2c 31 37 2e 31 36 5d 2c 5b 31 37 2e 35 34 39 2c 31 37 2e 32 33 31 5d 2c 5b 31 38 2e 35 38 31 2c 31 37 5d 2c 5b 32 30 2e 35 2c 31 37 2e 31 36 39 5d 2c 5b 32 32 2e 33 32 2c 31 36 2e 38 31 5d 2c 5b 32 34 2e 31 33 2c 31 36 2e 34 35 39 5d 2c 5b 32 36 2e 30 37 2c 31 37 2e 31 36 5d 2c 5b 32 38 2e 37 31 39 2c 31 37 2e 33 32 5d 2c 5b 32 39 2e 34 33 2c 31 37 2e 37 5d 2c 5b 33 32 2e 37 31 39 2c 31 38 2e 32 38 5d 2c 5b 33 34 2e 33 34 39 2c 31 38 2e 35 31 5d 2c 5b 33 37 2e 33 38 2c 31 39 2e 36 31 5d 2c 5b 33 39 2e 31 39 2c 31 39 2e 39 30 31 5d 2c 5b 34 31 2e 39 32 2c 32 31 2e 31 34 5d 2c 5b 34 32 2e 33 38 2c 32 31 2e 34 33 31 5d 2c 5b 34 35 2e 35 39 39 2c 32 32 Data Ascii: ,[14.16,17.24],[15.79,17.16],[16.581,17.16],[17.549,17.231],[18.581,17],[20.5,17.169],[22.32,16.81],[24.13,16.459],[26.07,17.16],[28.719,17.32],[29.43,17.7],[32.719,18.28],[34.349,18.51],[37.38,19.61],[39.19,19.901],[41.92,21.14],[42.38,21.431],[45.599,22
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 20 46 69 6c 74 65 72 20 2d 20 4d 65 72 67 65 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 66 6c 22 2c 22 63 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2e 39 39 35 39 39 39 39 38 33 32 34 35 2c 30 2e 35 30 35 39 39 39 39 39 35 32 31 33 2c 30 2e 33 38 30 30 30 30 30 30 35 39 38 34 2c 31 5d 2c 22 69 78 22 3a 34 7d 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 35 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 6e 6d 22 3a 22 46 69 6c 6c 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 61 70 68 69 63 20 2d 20 46 69 6c 6c 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 74 72 22 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 37 38 2e 31 32 2c 32 37 32 2e 30 37 5d 2c 22 69 Data Ascii: Filter - Merge","hd":false},{"ty":"fl","c":{"a":0,"k":[0.995999983245,0.505999995213,0.380000005984,1],"ix":4},"o":{"a":0,"k":100,"ix":5},"r":1,"bm":0,"nm":"Fill 1","mn":"ADBE Vector Graphic - Fill","hd":false},{"ty":"tr","p":{"a":0,"k":[78.12,272.07],"i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	49959	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:56 UTC	591	OUT	GET /d4bba0e56524b98c7438ba84a7dae7c0b050da0f-d32dd0c39334c86598f9.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	821	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 39476 Connection: close Date: Fri, 03 May 2024 04:44:56 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-9a34" Expires: Tue, 02 Jul 2024 04:44:56 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ab734ad5d81cc9d470b6176a05dd968e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: oUeQGUbtacmkvbKv3kYFtlC7fEbm1t5smOC8JqxZnuCLkgkJYMvuAg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 34 5d 2c 7b 35 30 39 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 76 22 3a 22 35 2e 35 2e 37 22 2c 22 6d 65 74 61 22 3a 7b 22 67 22 3a 22 4c 6f 74 74 69 65 46 69 6c 65 73 20 41 45 20 30 2e 31 2e 32 30 22 2c 22 61 22 3a 22 22 2c 22 6b 22 3a 22 22 2c 22 64 22 3a 22 22 2c 22 74 63 22 3a 22 22 7d 2c 22 66 72 22 3a 36 30 2c 22 69 70 22 3a 33 32 35 2c 22 6f 70 22 3a 35 36 34 2c 22 77 22 3a 36 31 38 2c 22 68 22 3a 33 35 34 2c 22 6e 6d 22 3a 22 63 69 72 63 6c Data Ascii: "use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[274],{5093:function(a){a.exports=JSON.parse('{"v":"5.5.7","meta":{"g":"LottieFiles AE 0.1.20","a":"","k":"","d":"","tc":""},"fr":60,"ip":325,"op":564,"w":618,"h":354,"nm":"circl
2024-05-03 04:44:56 UTC	1514	IN	Data Raw: 30 34 2e 31 35 31 5d 2c 5b 31 34 33 2e 37 31 34 2c 31 30 30 2e 38 30 31 5d 2c 5b 31 34 37 2e 36 38 38 2c 39 38 2e 35 36 39 5d 2c 5b 31 35 32 2e 30 34 32 2c 39 35 2e 39 35 37 5d 2c 5b 31 36 31 2e 30 33 31 2c 39 31 2e 32 39 5d 2c 5b 31 36 37 2e 32 39 34 2c 38 37 2e 30 35 37 5d 2c 5b 31 37 34 2e 31 34 39 2c 38 32 2e 33 33 36 5d 2c 5b 31 37 37 2e 32 31 39 2c 37 39 2e 39 36 37 5d 2c 5b 31 38 30 2e 31 37 38 2c 37 37 2e 37 33 34 5d 2c 5b 31 38 33 2e 30 39 32 2c 37 35 2e 35 30 32 5d 2c 5b 31 38 35 2e 38 38 33 2c 37 33 2e 32 31 34 5d 2c 5b 31 39 32 2e 35 31 35 2c 36 37 2e 31 38 34 5d 2c 5b 31 39 34 2e 36 33 36 2c 36 35 2e 31 31 38 5d 2c 5b 31 39 37 2e 37 35 31 2c 36 32 2e 31 37 32 5d 2c 5b 32 30 30 2e 37 33 32 2c 35 38 2e 39 36 35 5d 2c 5b 32 30 33 2e 35 32 33 2c Data Ascii: 04.151],[143.714,100.801],[147.688,98.569],[152.042,95.957],[161.031,91.29],[167.294,87.057],[174.149,82.336],[177.219,79.967],[180.178,77.734],[183.092,75.502],[185.883,73.214],[192.515,67.184],[194.636,65.118],[197.751,62.172],[200.732,58.965],[203.523,
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 2e 31 33 38 2c 34 30 2e 34 37 37 5d 2c 5b 32 31 30 2e 30 32 31 2c 34 31 2e 39 36 33 5d 2c 5b 32 30 37 2e 34 38 38 2c 34 35 2e 33 31 31 5d 2c 5b 32 30 36 2e 32 30 33 2c 34 36 2e 39 39 37 5d 2c 5b 32 30 34 2e 38 32 39 2c 34 38 2e 36 31 36 5d 2c 5b 32 30 30 2e 30 39 36 2c 35 34 2e 30 37 36 5d 2c 5b 31 39 34 2e 37 38 32 2c 35 39 2e 35 39 31 5d 2c 5b 31 39 34 2e 36 30 33 2c 35 39 2e 39 36 31 5d 2c 5b 31 39 34 2e 35 33 36 2c 36 30 2e 32 36 5d 2c 5b 31 38 37 2e 34 36 38 2c 36 36 2e 39 36 31 5d 2c 5b 31 38 32 2e 35 2c 37 31 2e 37 37 32 5d 2c 5b 31 38 31 2e 38 33 2c 37 32 2e 33 38 37 5d 2c 5b 31 37 35 2e 33 38 38 2c 37 37 2e 32 36 36 5d 2c 5b 31 36 38 2e 31 35 33 2c 38 32 2e 35 32 33 5d 2c 5b 31 35 38 2e 31 30 35 2c 38 38 2e 32 30 38 5d 2c 5b 31 35 36 2e 31 37 33 Data Ascii: .138,40.477],[210.021,41.963],[207.488,45.311],[206.203,46.997],[204.829,48.616],[200.096,54.076],[194.782,59.591],[194.603,59.961],[194.536,60.26],[187.468,66.961],[182.5,71.772],[181.83,72.387],[175.388,77.266],[168.153,82.523],[158.105,88.208],[156.173
2024-05-03 04:44:56 UTC	5194	IN	Data Raw: 32 5d 2c 5b 2d 32 30 34 2e 35 32 37 2c 39 32 2e 39 35 33 5d 2c 5b 2d 32 30 30 2e 35 37 34 2c 39 35 2e 34 35 34 5d 2c 5b 2d 31 39 39 2e 34 35 38 2c 39 35 2e 39 36 37 5d 2c 5b 2d 31 39 35 2e 36 39 35 2c 39 38 2e 33 33 35 5d 2c 5b 2d 31 39 31 2e 38 35 35 2c 31 30 30 2e 34 35 36 5d 2c 5b 2d 31 38 32 2e 30 37 34 2c 31 30 35 2e 32 36 38 5d 2c 5b 2d 31 36 39 2e 39 36 2c 31 31 30 2e 39 33 39 5d 2c 5b 2d 31 34 32 2e 31 37 31 2c 31 32 30 2e 37 39 38 5d 2c 5b 2d 31 33 32 2e 36 38 31 2c 31 32 33 2e 34 36 36 5d 2c 5b 2d 31 32 36 2e 34 32 39 2c 31 32 34 2e 39 31 39 5d 2c 5b 2d 31 31 34 2e 39 30 37 2c 31 32 37 2e 31 35 31 5d 2c 5b 2d 31 30 39 2e 31 33 35 2c 31 32 38 2e 34 34 35 5d 2c 5b 2d 31 30 37 2e 37 37 33 2c 31 32 38 2e 38 31 35 5d 2c 5b 2d 39 37 2e 37 32 34 2c 31 Data Ascii: 2],[-204.527,92.953],[-200.574,95.454],[-199.458,95.967],[-195.695,98.335],[-191.855,100.456],[-182.074,105.268],[-169.96,110.939],[-142.171,120.798],[-132.681,123.466],[-126.429,124.919],[-114.907,127.151],[-109.135,128.445],[-107.773,128.815],[-97.724,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	49960	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:56 UTC	362	OUT	GET /page-data/sq/d/2562819187.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	799	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 8284 Connection: close Date: Thu, 02 May 2024 13:26:40 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:29 GMT ETag: "662a3011-205c" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e80aeefdda01afc3c41fc332ff42e7ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qzbHS66vqd3NKNNVi5lW6PPeIQ7CI8KBkSc3qkcu7HcKgRci9Lsn_A== Age: 55096 X-XSS-Protection: 1; mode=block
2024-05-03 04:44:56 UTC	8284	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 65 64 69 75 6d 5f 30 35 22 3a 7b 22 63 68 69 6c 64 49 6d 61 67 65 53 68 61 72 70 22 3a 7b 22 67 61 74 73 62 79 49 6d 61 67 65 44 61 74 61 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 63 6f 6e 73 74 72 61 69 6e 65 64 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 66 61 6c 6c 62 61 63 6b 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 55 43 41 59 41 41 41 43 4e 69 52 30 4e 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 73 54 41 41 41 4c 45 77 45 41 6d 70 77 59 41 41 41 43 7a 45 6c 45 51 56 52 34 32 72 31 55 58 55 68 54 59 52 6a 57 72 53 37 36 67 36 69 62 4c 72 72 70 73 6f 73 49 62 31 53 53 49 69 32 74 31 4d 79 Data Ascii: {"data":{"medium_05":{"childImageSharp":{"gatsbyImageData":{"layout":"constrained","placeholder":{"fallback":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAACXBIWXMAAAsTAAALEwEAmpwYAAACzElEQVR42r1UXUhTYRjWrS76g6ibLrrpsosIb1SSIi2t1My

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	49961	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:56 UTC	582	OUT	GET /component---src-pages-index-tsx-ca1b83f425a6d364586f.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	835	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 202355 Connection: close Date: Tue, 30 Apr 2024 00:16:32 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-31673" Expires: Sat, 29 Jun 2024 00:16:32 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8a9cdb228e33f8d52a4b42c56ca26590.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _b2RtQJoxjW1ON0mSRCwIkRy9jJev3mxm7J9eZbx7tcWvuCI4jwNEA== Age: 275304 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:56 UTC	15990	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 34 35 5d 2c 7b 37 30 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 74 2e 72 28 61 29 2c 74 2e 64 28 61 2c 7b 48 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 65 7d 2c 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 65 7d 7d 29 3b 76 61 72 20 69 3d 74 28 34 30 38 34 29 2c 72 3d 74 28 36 35 34 30 29 3b 76 61 72 20 73 3d 28 29 3d 3e 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 41 2c 6e 75 6c 6c 29 2c 6e 3d 74 28 35 37 31 32 29 2c 6f 3d 74 28 32 33 38 Data Ascii: "use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[245],{7087:function(e,a,t){t.r(a),t.d(a,{Head:function(){return ae},default:function(){return te}});var i=t(4084),r=t(6540);var s=()=>r.createElement(i.A,null),n=t(5712),o=t(238
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 5b 34 38 2e 32 34 35 2c 31 34 2e 31 32 35 5d 2c 5b 34 33 2e 36 36 35 2c 32 31 2e 36 34 35 5d 2c 5b 34 33 2e 36 36 35 2c 32 32 2e 30 33 35 5d 2c 5b 34 38 2e 36 37 34 2c 32 32 2e 30 33 35 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 34 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 34 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 35 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 31 2e 32 33 5d 2c 5b 31 2e 38 35 31 2c 30 5d 2c 5b 30 2e 31 35 31 2c 2d 31 2e 39 36 5d 2c 5b 30 Data Ascii: [48.245,14.125],[43.665,21.645],[43.665,22.035],[48.674,22.035]],"c":true},"ix":2},"nm":"Path 4","mn":"ADBE Vector Shape - Group","hd":false},{"ind":4,"ty":"sh","ix":5,"ks":{"a":0,"k":{"i":[[0,0],[0,0],[0,0],[0,0],[0,0],[0,1.23],[1.851,0],[0.151,-1.96],[0
2024-05-03 04:44:56 UTC	1514	IN	Data Raw: 5b 2d 30 2e 34 31 39 2c 30 5d 2c 5b 30 2c 30 2e 34 32 5d 2c 5b 30 2e 34 32 2c 30 5d 2c 5b 30 2c 2d 30 2e 34 32 5d 5d 2c 22 6f 22 3a 5b 5b 30 2e 34 32 2c 30 5d 2c 5b 30 2c 2d 30 2e 34 32 5d 2c 5b 2d 30 2e 34 31 39 2c 30 5d 2c 5b 30 2c 30 2e 34 32 5d 5d 2c 22 76 22 3a 5b 5b 2d 38 2e 39 35 36 2c 2d 34 2e 37 31 35 5d 2c 5b 2d 38 2e 31 38 35 2c 2d 35 2e 34 38 35 5d 2c 5b 2d 38 2e 39 35 36 2c 2d 36 2e 32 35 35 5d 2c 5b 2d 39 2e 37 32 35 2c 2d 35 2e 34 38 35 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 34 34 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 34 34 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 Data Ascii: [-0.419,0],[0,0.42],[0.42,0],[0,-0.42]],"o":[[0.42,0],[0,-0.42],[-0.419,0],[0,0.42]],"v":[[-8.956,-4.715],[-8.185,-5.485],[-8.956,-6.255],[-9.725,-5.485]],"c":true},"ix":2},"nm":"Path 44","mn":"ADBE Vector Shape - Group","hd":false},{"ind":44,"ty":"sh","i
2024-05-03 04:44:56 UTC	394	IN	Data Raw: 5b 31 2e 33 39 39 2c 30 5d 2c 5b 30 2e 31 36 2c 2d 31 2e 36 36 5d 2c 5b 30 2c 30 5d 2c 5b 2d 31 2c 30 5d 2c 5b 30 2c 2d 31 2e 31 36 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 2d 31 2e 36 39 5d 5d 2c 22 6f 22 3a 5b 5b 31 2e 30 38 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 2d 32 2e 30 34 5d 2c 5b 2d 31 2e 34 31 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2e 31 32 2c 2d 30 2e 38 39 5d 2c 5b 31 2e 31 32 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 2d 31 2e 38 37 2c 30 5d 2c 5b 30 2c 31 2e 35 5d 5d 2c 22 76 22 3a 5b 5b 2d 32 30 2e 32 34 36 2c 34 2e 32 36 35 5d 2c 5b 2d 31 37 2e 39 36 35 2c 33 2e 32 31 35 5d 2c 5b 2d 31 37 2e 39 36 35 2c 34 2e 31 33 35 5d 2c 5b 2d 31 36 2e 38 30 35 2c 34 2e 31 33 35 5d 2c 5b 2d 31 36 2e 38 Data Ascii: [1.399,0],[0.16,-1.66],[0,0],[-1,0],[0,-1.16],[0,0],[0,0],[0,-1.69]],"o":[[1.08,0],[0,0],[0,0],[0,0],[0,-2.04],[-1.41,0],[0,0],[0.12,-0.89],[1.12,0],[0,0],[0,0],[-1.87,0],[0,1.5]],"v":[[-20.246,4.265],[-17.965,3.215],[-17.965,4.135],[-16.805,4.135],[-16.8
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 32 2e 31 30 35 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 34 38 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 34 38 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 34 39 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 2d 31 2e 34 36 39 2c 30 2e 30 37 5d 2c 5b 30 2c 30 5d 2c 5b 30 2e 34 36 2c 2d 30 2e 38 32 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 2d 31 2e 38 5d 2c 5b 30 2c 30 5d 2c 5b 2d 31 2e 33 32 2c 30 2e 30 34 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 Data Ascii: 2.105]],"c":true},"ix":2},"nm":"Path 48","mn":"ADBE Vector Shape - Group","hd":false},{"ind":48,"ty":"sh","ix":49,"ks":{"a":0,"k":{"i":[[0,0],[0,0],[0,0],[-1.469,0.07],[0,0],[0.46,-0.82],[0,0],[0,0]],"o":[[0,0],[0,0],[0,-1.8],[0,0],[-1.32,0.04],[0,0],[0,0
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 22 3a 31 30 30 2c 22 69 78 22 3a 37 7d 2c 22 73 6b 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 34 7d 2c 22 73 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 35 7d 2c 22 6e 6d 22 3a 22 54 72 61 6e 73 66 6f 72 6d 22 7d 5d 2c 22 6e 6d 22 3a 22 47 72 6f 75 70 20 33 22 2c 22 6e 70 22 3a 34 2c 22 63 69 78 22 3a 32 2c 22 62 6d 22 3a 30 2c 22 69 78 22 3a 33 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 69 70 22 3a 31 30 34 2c 22 6f 70 22 3a 31 31 35 30 34 2c 22 73 74 22 3a 31 30 34 2c 22 62 6d 22 3a 30 7d 2c 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 33 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 53 68 61 70 65 20 4c 61 79 65 72 20 35 22 2c 22 74 64 22 3a 31 Data Ascii: ":100,"ix":7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},"nm":"Transform"}],"nm":"Group 3","np":4,"cix":2,"bm":0,"ix":3,"mn":"ADBE Vector Group","hd":false}],"ip":104,"op":11504,"st":104,"bm":0},{"ddd":0,"ind":3,"ty":4,"nm":"Shape Layer 5","td":1
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 38 39 35 2c 34 2e 31 33 35 5d 2c 5b 2d 32 33 2e 37 33 36 2c 34 2e 31 33 35 5d 2c 5b 2d 32 33 2e 37 33 36 2c 2d 33 2e 31 38 35 5d 2c 5b 2d 32 34 2e 38 39 35 2c 2d 33 2e 31 38 35 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 33 38 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 33 38 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 33 39 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 2d 31 2e 34 36 2c 30 5d 2c 5b 2d 30 2e 33 33 39 2c 30 2e 36 38 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 31 2e 30 34 2c 30 5d 2c 5b 30 Data Ascii: 895,4.135],[-23.736,4.135],[-23.736,-3.185],[-24.895,-3.185]],"c":true},"ix":2},"nm":"Path 38","mn":"ADBE Vector Shape - Group","hd":false},{"ind":38,"ty":"sh","ix":39,"ks":{"a":0,"k":{"i":[[-1.46,0],[-0.339,0.68],[0,0],[0,0],[0,0],[0,0],[0,0],[1.04,0],[0
2024-05-03 04:44:56 UTC	14808	IN	Data Raw: 31 30 30 2c 2d 32 36 5d 2c 5b 2d 38 34 2c 2d 34 32 5d 2c 5b 38 34 2c 2d 34 32 5d 2c 5b 31 30 30 2c 2d 32 36 5d 2c 5b 31 30 30 2c 34 32 5d 2c 5b 2d 38 34 2c 34 32 5d 2c 5b 2d 31 30 30 2c 32 36 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 66 6c 22 2c 22 63 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2e 34 38 36 30 30 30 30 30 31 31 39 37 2c 30 2e 39 32 35 2c 30 2e 37 37 33 30 30 30 30 32 31 35 34 32 2c 31 5d 2c 22 69 78 22 3a 34 7d 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 35 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 Data Ascii: 100,-26],[-84,-42],[84,-42],[100,-26],[100,42],[-84,42],[-100,26]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"fl","c":{"a":0,"k":[0.486000001197,0.925,0.773000021542,1],"ix":4},"o":{"a":0,"k":100,"ix":5},"r":1,"bm"
2024-05-03 04:44:56 UTC	552	IN	Data Raw: 5b 30 2c 32 2e 32 34 5d 2c 5b 30 2c 30 5d 2c 5b 31 2e 39 32 2c 30 5d 2c 5b 30 2e 34 32 2c 2d 30 2e 37 31 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2e 34 32 2c 30 2e 37 32 5d 2c 5b 32 2e 30 32 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 2d 32 2e 32 38 5d 2c 5b 2d 31 2e 30 36 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 5d 2c 22 76 22 3a 5b 5b 31 37 2e 34 35 35 2c 36 2e 36 38 35 5d 2c 5b 31 38 2e 36 32 35 2c 36 2e 36 38 35 5d 2c 5b 31 38 2e 36 32 35 2c 32 2e 39 33 35 5d 2c 5b 32 31 2e 30 39 35 2c 34 2e 32 36 35 5d 2c 5b 32 34 2e 34 33 35 2c 30 2e 34 38 35 5d 2c 5b 32 34 2e 34 33 35 2c 30 2e 33 36 35 5d 2c 5b 32 31 2e 30 39 35 2c 2d 33 2e 33 31 35 5d 2c 5b 31 38 2e 36 32 35 2c 2d 31 2e Data Ascii: [0,2.24],[0,0],[1.92,0],[0.42,-0.71],[0,0],[0,0]],"o":[[0,0],[0,0],[0.42,0.72],[2.02,0],[0,0],[0,-2.28],[-1.06,0],[0,0],[0,0],[0,0]],"v":[[17.455,6.685],[18.625,6.685],[18.625,2.935],[21.095,4.265],[24.435,0.485],[24.435,0.365],[21.095,-3.315],[18.625,-1.
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 33 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 33 31 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 33 32 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 30 2c 30 5d 2c 5b 2d 31 2e 31 39 2c 30 5d 2c 5b 2d 30 2e 31 31 2c 2d 31 2e 35 31 5d 5d 2c 22 6f 22 3a 5b 5b 30 2e 31 38 39 2c 2d 31 2e 33 5d 2c 5b 31 2e 32 2c 30 5d 2c 5b 30 2c 30 5d 5d 2c 22 76 22 3a 5b 5b 36 2e 36 32 35 2c 2d 30 2e 32 33 35 5d 2c 5b 38 2e 38 30 35 2c 2d 32 2e 33 34 35 5d 2c 5b 31 30 2e 39 30 35 2c 2d 30 2e 32 33 35 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 Data Ascii: },"ix":2},"nm":"Path 31","mn":"ADBE Vector Shape - Group","hd":false},{"ind":31,"ty":"sh","ix":32,"ks":{"a":0,"k":{"i":[[0,0],[-1.19,0],[-0.11,-1.51]],"o":[[0.189,-1.3],[1.2,0],[0,0]],"v":[[6.625,-0.235],[8.805,-2.345],[10.905,-0.235]],"c":true},"ix":2},"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	49962	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:56 UTC	644	OUT	GET /static/omelette-a8254318025275264ddf581532bf02ce.png HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	786	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 90652 Connection: close Date: Fri, 03 May 2024 04:44:56 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-1621c" Expires: Tue, 02 Jul 2024 04:44:56 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 c50e3f7de0b772d07240015272b1aff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ML6Ta_vcKgsfd_BNyBs4bcj1zQpyq-l9h2UNHykOCcOjUyruFAYKbw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:56 UTC	15990	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 02 d0 08 06 00 00 00 b9 57 47 9c 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 61 b1 49 44 41 54 78 01 ec 9d 07 60 5c d5 95 f7 cf 7d 23 c9 dd 96 dc 00 83 6d 19 d3 71 37 35 21 60 03 29 90 d0 e3 6c 12 e2 02 24 6c 7a db 6c df 4d 48 b6 7d 9b 7c bb 69 5b be cd ee 86 e2 64 53 48 82 21 85 4d 42 31 a1 24 01 e3 4e 77 91 6d 3a 2e b2 dc a5 99 77 be ff 39 f7 8d 34 92 65 5b b2 47 c5 f6 ff 07 cf af dd 57 66 34 ef de ff 3b f7 dc 73 44 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 Data Ascii: PNGIHDRWGpHYs%%IR$sRGBgAMAaaIDATx`\}#mq75!`)l$lzlMH}\|i[dSH!MB1$Nwm:.w94e[GWf4;sD!B!B!B!B!B!B!B!B!B!B!B
2024-05-03 04:44:56 UTC	10857	IN	Data Raw: 25 e6 e7 62 7e 76 4c fb 2d a8 f7 42 13 fe 76 8b c5 32 30 e6 0b 3f 97 1d 0d f7 87 0b ee d9 26 a4 c7 a8 10 42 c8 11 87 2e 9b 7b 25 1a c6 53 25 4d df 81 f9 c4 18 bf 54 ce 93 3d b9 61 a8 84 af 6d 53 3c 0a e8 60 f3 b0 2c 4c ba ed 36 58 aa 6b 7d 7b 3e 19 2a 15 fa 99 38 a8 45 3e 2d dd 86 27 67 31 c3 98 dd b7 8d 66 37 eb f2 48 8f cf 1c fd 9f 4d 48 9f 85 fd 10 d8 10 c7 16 3f 55 74 52 d6 d3 3c c8 cb 87 ac 9b da 92 bd 44 5f e7 90 89 02 42 8e 5e d4 07 b5 e1 f9 48 ce 90 44 9f 86 b5 f9 62 c8 64 7b c9 bc 0d cf f9 8d 62 29 a7 43 30 e1 5c fa ac f0 b9 e9 0e 42 f8 44 36 1f ee e1 34 13 d4 57 69 58 e0 69 c1 13 19 88 7a 7c 04 76 8e 91 a4 f2 11 a9 1e 72 b6 3e 38 ef 31 79 a8 b6 91 be d0 3d 03 1f 0a 42 8e 10 d4 a2 4a 2c 9f 33 42 d2 5c 7f c9 e9 7f a0 02 3e 17 4f f8 a0 2c f8 ff dd Data Ascii: %b~vL-Bv20?&B.{%S%MT=amS<`,L6Xk}{>*8E>-'g1f7HMH?UtR<D_B^HDbd{b)C0\BD64WiXiz\|vr>81y=BJ,3B\>O,
2024-05-03 04:44:56 UTC	8949	IN	Data Raw: c7 67 37 60 95 d9 5d d8 33 c5 5d 36 62 97 99 85 a2 cb c7 90 41 3a 38 4b e5 5d 8b 6d 1b 31 bf c2 43 d5 75 99 4b 36 21 84 90 5e 4d 68 d5 00 74 ce 17 ba 25 7f e1 b1 68 6a 6c 50 fa e5 30 de 14 87 22 c2 98 24 d3 b3 88 ae fd 21 a2 0b 1e 0d aa c5 e8 0d 43 8f 1e 23 a4 4b a0 80 26 bd 02 5d fc fe b1 92 ab 9a 84 07 ff 1d 58 1d 8d 87 3f 97 55 31 ad 7f a3 21 a4 d9 20 c2 e1 98 5b 6c cb c6 2c ae 72 57 dc 95 fd 33 03 f7 91 c7 a2 45 ff f8 1e a6 d9 98 ce c1 b6 93 c4 06 0f 86 60 d6 71 1b 1c 58 db 9c ae d5 53 73 5b 8c 67 0b 1d a4 95 14 cf 84 10 72 94 d2 da fa 1c 0d c7 7a 50 99 b5 c7 79 db 92 14 fd 9d fd 94 27 60 b6 05 cb 43 62 e6 db 78 85 4c 75 c7 48 1f 21 3c 22 a4 4b a0 80 26 3d 8e ae 9c 77 ac 14 f4 4b 30 ee 9e eb 03 ee 44 06 49 e9 7b 77 ab c2 be ed a4 6c cf 38 e9 32 3f 7e Data Ascii: g7`]3]6bA:8K]m1CuK6!^Mht%hjlP0"$!C#K&]X?U1! [l,rW3E`qXSs[grzPy'`CbxLuH!<"K&=wK0DI{wl82?~
2024-05-03 04:44:56 UTC	7435	IN	Data Raw: 21 e4 68 a2 de 03 c6 86 76 b3 00 b7 41 37 4b 95 98 76 b6 f6 f2 06 b1 10 75 aa ea ee 1a 96 45 38 a8 ad db 79 e6 63 f9 4a 34 f3 e3 b1 9e 62 2a 40 58 2f 13 d2 e3 70 10 e1 61 82 de 72 8b c5 87 fc 37 bc 89 ee c2 03 74 31 96 a7 e2 a1 bb 5c 5a fd 0d c3 52 c9 55 fe 21 e6 ef 97 f2 85 ac bb 4d 3a 07 84 73 c0 8b 59 58 8c bb ce 0b 21 84 10 72 74 80 9e 60 b7 12 1f 18 73 87 d4 8a 4f 60 e9 63 98 76 a0 cd 5c 05 f1 6c 46 4d 8b 70 65 2e 90 5b dc 3f 5a f4 0d 3f af 7a 17 b0 45 84 1e 0f 41 fd b8 90 1e 87 02 fa 70 e1 da ba 9b 24 09 2f 48 92 3e 8c 67 6b 8f ec ed 1a 51 9f 0d 32 38 07 53 39 33 14 cd 93 83 42 a7 41 ec d3 0a 4d 08 21 e4 68 a1 13 c9 c5 c2 72 fc b3 08 d3 d5 68 2f 6f c3 74 aa 6f 56 4f 93 52 9f b9 40 0e 83 b5 f9 1a b4 a5 0f 60 bd 0e 3b 2b 31 47 5b 9f ae 13 d2 e3 50 40 Data Ascii: !hvA7KvuE8ycJ4b*@X/par7t1\ZRU!M:sYX!rt`sO`cv\lFMpe.[?Z?zEAp$/H>gkQ28S93BAM!hrh/otoVOR@`;+1G[P@
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 1f d2 e5 37 58 46 43 09 e3 ef 8c 3e d5 aa 5b 31 dd 0d a9 b6 10 d2 7d a1 90 5e 05 7d a0 0f 44 be e2 0d d9 23 a7 e2 ad f1 6e c9 e1 6d 31 95 5b f0 63 af 95 43 25 34 bf b9 5a 1c 9b d0 26 08 7b 3b 3e cd 25 91 39 54 56 49 48 2f c7 31 39 61 e4 0d 42 08 21 a4 3b 18 5a b2 5c 6c 7b 3b da 1b 5d 2f 85 f0 6e a8 ae cb 44 73 1b 74 f9 9c d1 96 d6 10 56 e6 69 be b7 ff ae 75 cd c2 59 a2 25 5a 97 cc 5b 28 d1 ba 5d 8d f5 3a 21 bd 0a 5a a0 f7 83 3e 3d ef 64 a9 18 90 97 42 ee 43 52 51 f5 11 49 f5 5d 12 ad c6 e3 e4 d0 a9 6e 99 87 fd 87 a6 f1 60 ed a1 80 07 6d 9d 84 64 2d 96 ff 13 d3 64 21 84 10 42 48 cf 11 e4 c1 8e 97 4d 27 a0 41 7f 14 26 b2 f5 52 68 78 46 0a c9 4f a1 c2 ea 7d 70 e1 96 1a 8b f4 75 7e ab f2 b9 f4 2d 99 70 ae d6 47 6e 1c 24 a4 57 41 01 bd 3f 9a c2 20 e9 bf 73 88 Data Ascii: 7XFC>[1}^}D#nm1[cC%4Z&{;>%9TVIH/19aB!;Z\l{;]/nDstViuY%Z[(]:!Z>=dBCRQI]n`md-d!BHM'A&RhxFO}pu~-pGn$WA? s
2024-05-03 04:44:56 UTC	16384	IN	Data Raw: 14 e5 7f 88 c5 b7 e4 a3 22 a0 75 68 6d 3b 39 8e e3 38 4e 5b a3 23 ae 59 a9 c0 4a 2b ac cf 34 cc 2c c8 02 81 5c 43 0f 25 73 84 20 c6 45 27 e5 6b 72 32 81 a1 2b 85 fd 2b 13 97 8e 87 49 47 71 2d ee b4 9c 43 71 ea 7f d0 fe 4e a0 54 ea 8f 7c ea 9d 7b c8 71 de 01 17 d0 4d 44 96 4e 3f 49 96 4d eb d9 d8 71 1e 37 67 39 c5 32 05 67 5e 4d 71 bc 02 85 f2 7d 30 0e 7f 1b 95 c2 f7 51 a8 57 53 93 89 47 58 9a 51 4a fc c1 c4 e2 62 e6 44 31 d6 b8 10 8b ad f8 e9 76 e2 14 dc 97 cb 28 b8 7e 14 9a cf b5 d8 d0 54 1b 88 68 cb 8a b8 33 6f c7 00 72 1c c7 71 9c 36 87 fb 41 8d 68 e4 8d d6 44 92 d2 c8 1a 1b 6d e2 7e 9a ee b3 b0 af 75 6d 58 7f 6c af c3 6b 05 44 f4 43 d8 ff 06 5a d6 57 b1 ff 49 13 ef f6 11 b0 8c 64 05 65 e3 f5 e4 38 4d c0 c3 d8 35 95 f5 c5 3b e9 f2 d7 8f ec 63 1c 51 0a Data Ascii: "uhm;98N[#YJ+4,\C%s E'kr2++IGq-CqNT\|{qMDN?IMq7g92g^Mq}0QWSGXQJbD1v(~Th3orq6AhDm~umXlkDCZWIde8M5;cQ
2024-05-03 04:44:56 UTC	8806	IN	Data Raw: 6b a9 58 6d 49 27 b5 b1 f7 d2 fd bb e8 d8 75 7a ff 8c 57 11 a9 a8 8e 30 d2 15 c7 ff dc 82 0c a9 1d 1f a6 55 a4 9d 92 10 49 e8 50 b4 83 ff 7b d4 bb a8 93 e2 8f 51 cb d0 79 1f 73 2c da 09 47 3d a9 3a 7b 0f a5 a3 bf c2 fb 3e 82 fd a7 51 4d 7c 3b a5 f8 5f f0 09 7a 53 ba e0 5f 69 ef be 5d 54 70 30 cc 69 d9 30 b8 9a af b8 7d 3f 39 4e 17 a2 3b fa 87 39 c7 10 1e 7e af 4e ea 79 41 96 4e 3f 09 c2 f8 4e 1b 62 2e e9 bf 95 0e ee 7c 5e 96 cf 18 47 92 81 d5 b9 e4 74 58 87 60 a9 a6 a7 c2 45 66 cd aa f3 d1 3c 12 61 f6 7e 08 41 d7 1e 88 4e d4 32 a1 72 a5 f9 04 6a 9a 70 89 fe 86 42 63 a3 f1 6a 07 90 e3 b4 84 e0 af 5c 91 4c d4 aa b2 b4 d9 b1 ac c6 be d7 61 d9 4b 61 fb 78 22 0b 2f 17 25 19 00 55 24 f5 48 42 95 45 c1 02 7b 18 47 cb 68 d2 90 c0 6e ec bd 98 8e 6d 79 d5 4e c6 4e Data Ascii: kXmI'uzW0UIP{Qys,G=:{>QM\|;_zS_i]Tp0i0}?9N;9~NyAN?Nb.\|^GtX`Ef<a~AN2rjpBcj\LaKax"/%U$HBE{GhnmyNN
2024-05-03 04:44:56 UTC	5847	IN	Data Raw: 33 91 c5 9f 1a 4e 51 e1 64 9e 30 eb be 7a fb 67 a2 f1 86 a5 46 56 4e 1b 46 12 cd 46 93 a4 82 58 5d 35 f6 85 30 71 bc 19 43 a3 1b 29 45 97 a3 81 52 31 f5 0d 88 a0 af 52 18 52 9d 8f f5 6b 6c 22 0f c7 a3 13 ab a3 47 ab 38 3a 54 26 09 64 c6 53 c8 b8 46 2d 9a e0 28 7c 5b 98 64 a9 bf a5 8e 36 f0 38 58 ee 1e c4 6f 7d 3d 85 2c 96 2a 7a 61 11 d6 b8 d7 fa 5b d6 0a f6 fc 08 26 9a 46 7d 1b ae 1f 68 fe cb 26 74 04 96 d2 e8 7c 74 ac 76 c3 6a 18 07 0f 7b fd 9c bc 02 db 77 f3 b8 59 77 e6 12 8d 90 63 c8 8a 1b 86 92 64 87 d0 b8 d9 cf 31 73 bd f0 6f b2 ec fa 2b f0 7b fc 04 af 67 50 fe f4 37 e8 81 ef 51 47 00 ee 83 6d 76 0a be 7b fd 1d b6 c3 1a bd 03 bf 95 7e cf 9a 2d b0 b5 6d a3 de 53 85 bc 46 d3 18 40 c7 2e 51 8a fe ed 1a a5 44 85 b1 ba 8c a9 8f 78 bf f0 59 ec 19 1d 84 bf Data Ascii: 3NQd0zgFVNFFX]50qC)ER1RRkl"G8:T&dSF-(\|[d68Xo}=,*za[&F}h&t\|tvj{wYwcd1so+{gP7QGmv{~-mSF@.QDxY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	49963	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:56 UTC	643	OUT	GET /static/avocado-509e0714a39e8881beb85352538ea3b5.png HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/styles.0f0d0189161b3d582858.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:56 UTC	785	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 27553 Connection: close Date: Fri, 03 May 2024 04:44:56 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-6ba1" Expires: Tue, 02 Jul 2024 04:44:56 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 eb2e4893b47f0d155cd51b82c2a8d596.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: KWKYuRxUwngn5oup7JTuFkw0s4fPlcBvI-SiBUeNrINxS4q1gCnnUA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:56 UTC	15599	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 68 00 00 01 68 08 06 00 00 00 7a e5 61 d5 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 6b 36 49 44 41 54 78 01 ed 9d 07 60 1c f5 95 ff df 9b 59 49 ee 96 6d 30 d5 b6 dc 00 83 3b 26 47 48 00 03 c9 a5 41 80 24 4e 21 18 cb 21 47 ca 5d ea b5 dc fd 73 17 73 b9 7e 97 7e c9 5d b8 24 b8 40 72 89 13 4a 20 40 0a c1 94 00 01 e3 4e 75 93 6d 08 60 63 5b 72 97 b4 3b ef ff 7d ef 37 2b c9 c6 92 76 65 d9 d6 ae de 07 46 3b 3b 3b 33 92 77 e6 f7 e6 fd 5e 25 72 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 Data Ascii: PNGIHDRhhzapHYssRGBgAMAak6IDATx`YIm0;&GHA$N!!G]ss~~]$@rJ @Num`c[r;}7+veF;;;3w^%rqqqqqqqqqqqqqqqqq
2024-05-03 04:44:56 UTC	2204	IN	Data Raw: 79 0b 4f 5c 50 f2 c2 59 29 39 01 cd e7 df ba 2b 15 b0 3b c2 06 fb d9 dc b1 7c b6 d4 7e 4c 99 e4 05 68 dc 6f 6c 33 95 72 1c e7 58 91 48 23 34 67 15 d2 0f 84 d2 ee bc 19 5a f2 dd e9 a7 ad 7e 24 6d f4 cc d1 32 48 a7 b8 b0 f3 f2 40 59 59 fb 76 ca 48 cb fe b2 7a ee 05 54 06 94 9c 80 b6 3e dd cc ff d5 62 9f 12 2b 80 b4 b7 93 c3 52 4d 9b 47 e0 a6 90 b4 c4 a1 e3 38 c7 12 d6 aa 92 b9 87 48 12 ad f7 ac 89 24 b0 3b 27 5a 0b ba ce 96 3c 12 fd 82 1a 2b 7f 04 73 66 61 c5 cd 22 39 81 a7 cc bf 8f 0e 1c 68 90 a5 b5 67 c9 8a eb 7e 42 9c 2d 8b f6 76 a5 a7 41 87 26 93 cf e1 2a 7e 95 cc 70 91 37 71 74 a2 14 27 02 7b bb 68 3a e8 10 08 75 ef b0 e2 38 c7 9e 4a 68 c6 a7 52 08 8b 5b 82 d7 86 d0 e2 8a 34 4c b6 26 dd 67 35 84 f8 fd 54 75 e0 42 b8 ff 2f 2a e8 ac c2 35 b2 fc aa 6a aa Data Ascii: yO\PY)9+;\|~Lhol3rXH#4gZ~$m2H@YYvHzT>b+RMG8H$;'Z<+sfa"9hg~B-vA&~p7qt'{h:u8JhR[4L&g5TuB/5j
2024-05-03 04:44:56 UTC	95	IN	Data Raw: 1d 86 6b 29 e1 fe 38 fe 4e 7c 5e 93 9e f0 39 2a 51 ca b8 16 72 34 1f 4f d2 4f a5 fd 0a 3b 26 d8 aa d5 06 5d 85 b5 fd 78 bf 1b 1b 4f 2a 2a 68 de 71 9c 2e d2 5a 29 d8 66 b1 92 c0 2c 09 21 db f9 61 59 d2 dc 07 0b a5 4b 2e c2 b1 27 a5 75 a1 35 06 7a a7 85 db 46 51 96 32 bc 8e 4a 94 f2 4d Data Ascii: k)8N\|^9Qr4OO;&]xO*hq.Z)f,!aYK.'u5zFQ2JM
2024-05-03 04:44:56 UTC	9655	IN	Data Raw: 75 6e aa 7c 0e 17 eb 8b 94 d7 a2 a5 93 68 0e a2 53 f0 e4 ae 4b eb 69 9d 94 4e 9d 1c c7 39 5a 58 dd 66 35 45 b6 d1 83 24 e1 50 e0 88 ea 3a 39 56 c3 f1 16 61 65 14 0e 7f ca e2 a8 23 f8 9b 58 d4 26 5d 67 ef d9 6a 43 bf c0 13 16 96 64 88 9d 52 b6 02 3a 14 50 92 5f 63 4d cb 0f 4a 9a 4f d8 91 90 d6 a9 d6 38 2c fb d2 fd 73 9e bc e2 38 47 95 3d 18 67 9b 0e de c4 79 c7 60 21 b5 33 d4 b9 b8 04 e3 f4 12 1c 57 8d 51 db 87 42 8d 0e 2d 9c f4 30 cc 1e 0f 12 27 ff 4e 25 4c 79 17 0b ea 17 3d 8b 8b f7 18 b5 da a2 3b 42 9d 14 03 b0 ff 5e 2c 0d b8 d8 9b 5d 8b 76 9c a3 88 56 b1 13 6d 4f 25 6d ec cf a2 76 e5 20 64 3b 22 c2 7f 2c fd 30 b2 df 88 73 4c 4e 5b 68 69 36 e2 ea 54 0f 9b 44 39 4d f1 a6 17 a8 84 29 6b 01 cd a3 e7 1f c0 94 e9 b3 14 ec cb 6d 9d 85 87 17 bc cc 6a 93 d7 80 Data Ascii: un\|hSKiN9ZXf5E$P:9Vae#X&]gjCdR:P_cMJO8,s8G=gy`!3WQB-0'N%Ly=;B^,]vVmO%mv d;",0sLN[hi6TD9M)kmj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	49966	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:57 UTC	554	OUT	GET /108-639038011f01d16f61d8.js HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:57 UTC	834	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72248 Connection: close Date: Tue, 30 Apr 2024 00:16:33 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-11a38" Expires: Sat, 29 Jun 2024 00:16:33 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f8debc28b6c73eb3dc7540e2ac2f0e18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: sczyxBh9KlyimutX_yrbMg2Q7u0u7NuB3h9TqUrPDumE6LyJbKAPzw== Age: 275304 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:44:57 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 30 38 2d 36 33 39 30 33 38 30 31 31 66 30 31 64 31 36 66 36 31 64 38 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 53 68 6f 72 74 5f 69 6f 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 38 5d 2c 7b 31 31 30 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 72 65 6e 64 65 72 49 6d 61 67 65 54 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 73 77 61 70 50 6c 61 63 65 68 6f 6c 64 Data Ascii: /! For license information please see 108-639038011f01d16f61d8.js.LICENSE.txt /"use strict";(self.webpackChunkShort_io=self.webpackChunkShort_io\|\|[]).push([[108],{1108:function(e,t,n){n.r(t),n.d(t,{renderImageToString:function(){return p},swapPlacehold
2024-05-03 04:44:57 UTC	16384	IN	Data Raw: 65 32 3d 74 2e 76 61 6c 75 65 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 65 29 7b 76 61 72 20 74 3d 6e 65 3b 74 21 3d 3d 65 26 26 28 6e 75 6c 6c 3d 3d 3d 74 3f 61 65 28 65 29 3a 6e 75 6c 6c 3d 3d 3d 65 3f 6f 65 28 74 29 3a 74 2e 64 65 70 74 68 3d 3d 3d 65 2e 64 65 70 74 68 3f 72 65 28 74 2c 65 29 3a 74 2e 64 65 70 74 68 3e 65 2e 64 65 70 74 68 3f 6c 65 28 74 2c 65 29 3a 69 65 28 74 2c 65 29 2c 6e 65 3d 65 29 7d 76 61 72 20 73 65 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 29 2e 71 75 65 75 65 26 26 65 2e 71 75 65 75 65 2e 70 75 73 68 28 Data Ascii: e2=t.value}function ue(e){var t=ne;t!==e&&(null===t?ae(e):null===e?oe(t):t.depth===e.depth?re(t,e):t.depth>e.depth?le(t,e):ie(t,e),ne=e)}var se={isMounted:function(){return!1},enqueueSetState:function(e,t){null!==(e=e._reactInternals).queue&&e.queue.push(
2024-05-03 04:44:57 UTC	16384	IN	Data Raw: 6e 3d 21 30 2c 74 2e 70 75 73 68 28 27 66 75 6e 63 74 69 6f 6e 20 24 52 53 28 61 2c 62 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3b 66 6f 72 28 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 3b 61 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2e 66 69 72 73 74 43 68 69 6c 64 2c 62 29 3b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 7d 3b 24 52 53 28 22 27 29 29 2c 74 2e 70 75 73 68 28 65 2e 73 65 67 6d 65 6e 74 50 72 65 66 69 78 29 2c 61 3d 61 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 Data Ascii: n=!0,t.push('function $RS(a,b){a=document.getElementById(a);b=document.getElementById(b);for(a.parentNode.removeChild(a);a.firstChild;)b.parentNode.insertBefore(a.firstChild,b);b.parentNode.removeChild(b)};$RS("')),t.push(e.segmentPrefix),a=a.toString(16)
2024-05-03 04:44:57 UTC	16384	IN	Data Raw: 3c 74 65 6d 70 6c 61 74 65 20 69 64 3d 22 27 29 2c 70 65 3d 66 28 27 22 3e 3c 2f 74 65 6d 70 6c 61 74 65 3e 27 29 2c 68 65 3d 66 28 22 5c 78 33 63 21 2d 2d 24 21 2d 2d 5c 78 33 65 22 29 2c 67 65 3d 66 28 22 5c 78 33 63 21 2d 2d 2f 24 2d 2d 5c 78 33 65 22 29 2c 6d 65 3d 66 28 22 3c 74 65 6d 70 6c 61 74 65 22 29 2c 62 65 3d 66 28 27 22 27 29 2c 79 65 3d 66 28 27 20 64 61 74 61 2d 64 67 73 74 3d 22 27 29 3b 66 28 27 20 64 61 74 61 2d 6d 73 67 3d 22 27 29 2c 66 28 27 20 64 61 74 61 2d 73 74 63 6b 3d 22 27 29 3b 76 61 72 20 76 65 3d 66 28 22 3e 3c 2f 74 65 6d 70 6c 61 74 65 3e 22 29 3b 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 2c 6e 29 7b 69 66 28 69 28 65 2c 66 65 29 2c 6e 75 6c 6c 3d 3d 3d 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 39 35 29 29 3b Data Ascii: <template id="'),pe=f('"></template>'),he=f("\x3c!--$!--\x3e"),ge=f("\x3c!--/$--\x3e"),me=f("<template"),be=f('"'),ye=f(' data-dgst="');f(' data-msg="'),f(' data-stck="');var ve=f("></template>");function Se(e,t,n){if(i(e,fe),null===n)throw Error(o(395));
2024-05-03 04:44:57 UTC	4820	IN	Data Raw: 7d 7d 7d 61 2e 73 70 6c 69 63 65 28 30 2c 6f 29 2c 6e 75 6c 6c 21 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 26 26 49 6e 28 65 2c 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 7d 63 61 74 63 68 28 70 29 7b 66 6e 28 65 2c 70 29 2c 70 6e 28 65 2c 70 29 7d 66 69 6e 61 6c 6c 79 7b 61 6e 3d 72 2c 6c 6e 2e 63 75 72 72 65 6e 74 3d 6e 2c 6e 3d 3d 3d 6f 6e 26 26 50 74 28 74 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 65 2c 74 2c 6e 29 7b 73 77 69 74 63 68 28 6e 2e 70 61 72 65 6e 74 46 6c 75 73 68 65 64 3d 21 30 2c 6e 2e 73 74 61 74 75 73 29 7b 63 61 73 65 20 30 3a 76 61 72 20 72 3d 6e 2e 69 64 3d 65 2e 6e 65 78 74 53 65 67 6d 65 6e 74 49 64 2b 2b 3b 72 65 74 75 72 6e 20 6e 2e 6c 61 73 74 50 75 73 68 65 64 54 65 78 74 3d 21 31 2c 6e 2e 74 65 78 74 45 6d 62 65 64 Data Ascii: }}}a.splice(0,o),null!==e.destination&&In(e,e.destination)}catch(p){fn(e,p),pn(e,p)}finally{an=r,ln.current=n,n===on&&Pt(t)}}}function Fn(e,t,n){switch(n.parentFlushed=!0,n.status){case 0:var r=n.id=e.nextSegmentId++;return n.lastPushedText=!1,n.textEmbed
2024-05-03 04:44:57 UTC	1892	IN	Data Raw: 6f 6f 74 54 61 73 6b 73 3a 30 2c 63 6f 6d 70 6c 65 74 65 64 52 6f 6f 74 53 65 67 6d 65 6e 74 3a 6e 75 6c 6c 2c 61 62 6f 72 74 61 62 6c 65 54 61 73 6b 73 3a 63 2c 70 69 6e 67 65 64 54 61 73 6b 73 3a 73 2c 63 6c 69 65 6e 74 52 65 6e 64 65 72 65 64 42 6f 75 6e 64 61 72 69 65 73 3a 5b 5d 2c 63 6f 6d 70 6c 65 74 65 64 42 6f 75 6e 64 61 72 69 65 73 3a 5b 5d 2c 70 61 72 74 69 61 6c 42 6f 75 6e 64 61 72 69 65 73 3a 5b 5d 2c 6f 6e 45 72 72 6f 72 3a 76 6f 69 64 20 30 3d 3d 3d 6f 3f 75 6e 3a 6f 2c 6f 6e 41 6c 6c 52 65 61 64 79 3a 76 6f 69 64 20 30 3d 3d 3d 61 3f 73 6e 3a 61 2c 6f 6e 53 68 65 6c 6c 52 65 61 64 79 3a 76 6f 69 64 20 30 3d 3d 3d 6c 3f 73 6e 3a 6c 2c 6f 6e 53 68 65 6c 6c 45 72 72 6f 72 3a 76 6f 69 64 20 30 3d 3d 3d 69 3f 73 6e 3a 69 2c 6f 6e 46 61 74 61 Data Ascii: ootTasks:0,completedRootSegment:null,abortableTasks:c,pingedTasks:s,clientRenderedBoundaries:[],completedBoundaries:[],partialBoundaries:[],onError:void 0===o?un:o,onAllReady:void 0===a?sn:a,onShellReady:void 0===l?sn:l,onShellError:void 0===i?sn:i,onFata

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	49969	13.226.34.3	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:59 UTC	525	OUT	GET /widget/rmf95u7h HTTP/1.1 Host: widget.intercom.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:59 UTC	728	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 2707 Connection: close Date: Fri, 03 May 2024 04:45:00 GMT Last-Modified: Thu, 02 May 2024 15:41:18 GMT ETag: "d37cddeb09731c8266da504f6505a75b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300, s-maxage=300, public Content-Encoding: gzip x-amz-version-id: uwohhPNMuuNYqlle3dq4z026Sks.ycGG Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 da79f1e019da644d2a3fd9e73f79a700.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XWFhWGgmwSrp9fJiqdGDEjr9waWBnhE-JTYBMmGDxFlEtSOPB2k-uQ== Cross-Origin-Resource-Policy: cross-origin Vary: Origin
2024-05-03 04:44:59 UTC	2707	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 8b 72 db 36 16 fd 15 8a bb 23 93 13 88 7a c4 b1 1d 3a 74 d6 71 dc d6 b3 71 93 89 32 dd ee d8 5a 0d 44 42 12 12 8a 60 41 c8 b2 2a e9 df f7 80 2f 91 92 ec 36 33 c9 24 36 79 71 5f b8 b8 8f 03 a6 31 9e 47 be e2 22 b2 ec d5 03 95 06 f3 56 a7 27 dd e3 ae 5b d2 99 bd 62 0e 7b 8c 85 54 89 b7 4a c4 5c fa 6c 38 a3 b1 6b 4e 79 10 b0 a8 95 91 5a 20 99 84 c6 7c 38 a2 09 c3 a2 52 71 e2 b6 db a0 b4 38 9d 39 3c 52 4c fa 02 0f c2 24 f1 7c 14 72 7f 18 53 35 dd 72 7e 4d 4a 26 3f 88 1c fc 6a 9b 24 99 32 a6 92 61 2c c5 e3 72 87 bf 60 6e 65 3c a9 40 95 1d c2 2c 52 72 79 50 78 b1 58 94 d6 5a 92 e9 dd f1 68 92 e9 48 a5 a0 3e 60 8f ce 54 cd 42 93 f0 28 51 34 0c 87 33 11 b0 bd fd c5 db bd e1 5f 69 35 48 a2 2d d7 f8 65 e7 55 c0 4e 5e fb d4 3f 39 Data Ascii: Yr6#z:tqq2ZDB`A*/63$6yq_1G"V'[b{TJ\l8kNyZ \|8Rq89<RL$\|rS5r~MJ&?j$2a,r`ne<@,RryPxXZhH>`TB(Q43_i5H-eUN^?9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	49968	3.94.39.175	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:44:59 UTC	538	OUT	GET /changelog HTTP/1.1 Host: profile.short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://short.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:44:59 UTC	719	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:44:59 GMT Content-Type: application/json; charset=utf-8 Content-Length: 4715 Connection: close content-security-policy: default-src 'none'; Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer strict-transport-security: max-age=63072000; includeSubDomains; x-content-type-options: nosniff X-DNS-Prefetch-Control: off X-Download-Options: noopen x-frame-options: DENY X-Permitted-Cross-Domain-Policies: none x-xss-protection: 1; mode=block vary: Origin access-control-allow-origin: https://short.io x-ratelimit-limit: 1000 x-ratelimit-remaining: 999 x-ratelimit-reset: 60
2024-05-03 04:44:59 UTC	4715	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 36 35 66 63 39 34 63 39 62 64 30 64 37 66 30 35 33 30 65 33 62 66 30 33 22 2c 22 63 72 65 61 74 65 64 22 3a 22 32 30 32 34 2d 30 33 2d 32 31 54 32 30 3a 31 32 3a 35 37 2e 38 32 38 5a 22 2c 22 6c 61 62 65 6c 73 22 3a 5b 5d 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 31 54 32 30 3a 31 38 3a 35 39 2e 32 33 33 5a 22 2c 22 74 69 74 6c 65 22 3a 22 50 75 62 6c 69 63 20 51 52 20 63 6f 64 65 20 67 65 6e 65 72 61 74 6f 72 20 26 20 55 54 4d 20 62 75 69 6c 64 65 72 22 2c 22 74 79 70 65 73 22 3a 5b 22 6e 65 77 22 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 66 65 65 64 62 61 63 6b 2e 73 68 6f 72 74 2e 69 6f 2f 63 68 61 6e 67 65 6c 6f 67 2f 70 75 62 6c 69 63 2d 71 72 2d 63 6f 64 65 2d 67 65 6e 65 72 61 74 6f Data Ascii: [{"id":"65fc94c9bd0d7f0530e3bf03","created":"2024-03-21T20:12:57.828Z","labels":[],"publishedAt":"2024-03-21T20:18:59.233Z","title":"Public QR code generator & UTM builder","types":["new"],"url":"https://feedback.short.io/changelog/public-qr-code-generato

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	49972	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:00 UTC	648	OUT	GET /page-data/enterprise/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://short.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:00 UTC	763	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 282 Connection: close Date: Fri, 03 May 2024 04:45:00 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT ETag: "662a30ac-11a" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 f8debc28b6c73eb3dc7540e2ac2f0e18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Iz6idbt96MDCx0lcO2K1aK6KAON1uHwcSfu0ABnfHNFAlKAohcaKTQ== X-XSS-Protection: 1; mode=block
2024-05-03 04:45:00 UTC	282	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 65 6e 74 65 72 70 72 69 73 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 65 6e 74 65 72 70 72 69 73 65 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 65 6e 74 65 72 70 72 69 73 65 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 31 30 31 36 32 38 39 33 33 32 22 2c 22 32 36 39 36 38 33 39 39 37 30 22 2c 22 36 34 36 30 39 32 31 33 32 22 2c 22 36 38 36 33 35 38 38 39 38 22 2c 22 Data Ascii: {"componentChunkName":"component---src-pages-enterprise-tsx","path":"/enterprise","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/enterprise"}},"staticQueryHashes":["1016289332","2696839970","646092132","686358898","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	49974	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:00 UTC	646	OUT	GET /page-data/features/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://short.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:00 UTC	792	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 266 Connection: close Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Date: Fri, 03 May 2024 04:45:00 GMT Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 ETag: "662a30ac-10a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6e202b767e6bdee837ba15ada7e3120e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5Ig5hL4YdROv6DmJtrDZCmEZ7SlgzJiNYDX0pexr1eZ8Xgr0mK44UQ== X-XSS-Protection: 1; mode=block
2024-05-03 04:45:00 UTC	266	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 66 65 61 74 75 72 65 73 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 66 65 61 74 75 72 65 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 66 65 61 74 75 72 65 73 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 31 38 30 35 38 38 38 37 30 32 22 2c 22 33 31 35 31 31 31 36 39 38 31 22 2c 22 33 35 30 31 30 32 32 31 34 37 22 2c 22 34 31 31 30 34 32 32 31 31 36 22 5d 2c 22 73 6c 69 Data Ascii: {"componentChunkName":"component---src-pages-features-tsx","path":"/features","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/features"}},"staticQueryHashes":["1805888702","3151116981","3501022147","4110422116"],"sli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	49973	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:00 UTC	645	OUT	GET /page-data/pricing/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://short.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:00 UTC	762	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 212 Connection: close Date: Fri, 03 May 2024 04:45:00 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT ETag: "662a30ac-d4" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 52143757d25f4b31ebf04bc09765f6c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: -2Fj69PrPKUNyb-h87nIsLczwd-bDevKIwlJJpo2zOebz4uG-QVdwg== X-XSS-Protection: 1; mode=block
2024-05-03 04:45:00 UTC	212	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 70 72 69 63 69 6e 67 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 70 72 69 63 69 6e 67 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 5d 2c 22 73 6c 69 63 65 73 4d 61 70 22 3a 7b 7d 7d Data Ascii: {"componentChunkName":"component---src-pages-pricing-tsx","path":"/pricing","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/pricing"}},"staticQueryHashes":[],"slicesMap":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	49975	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:00 UTC	643	OUT	GET /page-data/index/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://short.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:00 UTC	771	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 260 Connection: close Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Fri, 03 May 2024 04:44:51 GMT Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 ETag: "662a30ac-104" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5ba825173b1f7429171e730e7ae12588.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ktxaWfc3Zt0iODEAngZPd9tDPNvNvUhpOwhBtigTIQhKp7JgHr5FYw== Age: 9 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:00 UTC	260	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 69 6e 64 65 78 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 31 32 34 32 31 36 32 32 39 39 22 2c 22 31 34 36 37 32 38 38 37 37 30 22 2c 22 32 30 34 38 31 32 36 31 31 31 22 2c 22 32 33 38 35 33 35 35 36 34 36 22 2c 22 32 35 36 32 38 31 39 31 38 37 22 5d 2c 22 73 6c 69 63 65 73 4d 61 70 Data Ascii: {"componentChunkName":"component---src-pages-index-tsx","path":"/","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/"}},"staticQueryHashes":["1242162299","1467288770","2048126111","2385355646","2562819187"],"slicesMap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	49977	108.139.47.46	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:00 UTC	506	OUT	GET /frame-modern.26b8f221.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:00 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 145097 Connection: close Date: Fri, 03 May 2024 04:45:01 GMT Last-Modified: Thu, 02 May 2024 15:37:05 GMT ETag: "03a12749fa7d8338f2e28b68039dc719" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: j1tSI7QCSEn9x9f2oCYKpoFDqNYeyil4 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fcf7ae9d0acd31cfede668ccef6e2ace.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 0GOqFZ8tFvxSuOm3zaj4Wtx6xZDJakiI4EFB8GVSiW9z6-rScKncPQ== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-05-03 04:45:00 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 07 7b db c8 96 20 fa 57 28 8e 9f 06 b8 5d 82 19 14 a9 cb d6 2a d9 96 6d 05 2b 38 ae 97 06 c9 a2 08 0b 04 68 00 24 4d 4b fc ef 7b ce a9 80 42 a0 e4 ee 7b 67 76 df fb de 37 73 dd 14 0a a8 78 ea e4 60 59 76 fb cf fb a9 1b 55 38 4b 58 c4 02 e6 b1 b0 7d bf d5 6c 34 6b 2d 8b 9e a9 17 82 f6 7d d5 79 3e 70 3d 9f f7 9d d1 b8 59 6d 35 1b db 9b 4d 06 0f 83 30 f1 06 5e cf 4d bc 30 10 4d 3b 3b cd f5 3a 36 85 63 1e b9 49 18 c9 2f b6 1b eb eb f8 38 9e 74 47 5e 22 1e ae af d7 37 36 17 bb 83 49 d0 c3 0e 2a 9e c5 6d 1a 31 69 87 f0 73 37 e2 c9 24 0a 2a 91 95 d8 0b fd 12 b6 dc 7b 03 6b 25 72 42 2b 60 dc 56 9f 04 7c 56 39 8e a2 30 b2 aa 87 6e 00 33 ab 0c bc a0 5f 19 85 fd 89 cf 2b ff 59 fd 83 ff 51 fd cf aa bd 9b 0c a3 70 56 49 9c 5e d8 e7 Data Ascii: { W(]m+8h$MK{B{gv7sx`YvU8KX}l4k-}y>p=Ym5M0^M0M;;:6cI/8tG^"76Im1is7$*{k%rB+`V\|V90n3_+YQpVI^
2024-05-03 04:45:00 UTC	400	IN	Data Raw: ae 8f 64 be d7 eb 89 cc 37 7b 73 25 ed 3f 51 22 eb 1a 4f 86 d2 da 33 f5 a5 b5 47 26 87 9d b3 9f ef 7f af fa 70 5a 19 63 73 ab 26 99 6e 75 f1 88 ed de 68 6c d5 05 7d 6c d4 1a 5b eb 82 ed 16 25 87 91 eb 96 c5 85 91 eb 96 25 87 87 29 7f 3d 6d eb e2 c2 a6 b3 de ff 87 73 af 8e fe 4b 92 41 0e 7e 27 19 e4 ed 7f 6f 32 c8 c1 7f 6b 32 48 33 7a e2 ff 4f 6e fb ff 82 e4 b6 f3 3c cb e0 3a 07 9b 20 b6 4c 80 1d 9d 67 74 6c dd a2 7e c6 75 5e 6d bf 64 24 69 2a a7 b0 48 27 3e c8 5b dc f2 c1 d0 ae 33 39 fd 21 07 a2 4f e3 84 8f 29 c0 92 dc eb 65 2e b7 18 8e 2a 13 9f 5b 28 72 e0 3a ee fa af cc 24 1e ab 58 ef 3a b7 9f 3e 2e 7b bb 60 c7 70 9d 17 fd d0 98 63 c6 8a 51 78 f7 ee cd e7 f2 77 8f 7f db f8 15 3b 27 c2 f8 25 f5 ef c7 1b f4 57 49 21 4e cc 6a a2 96 11 2f b1 7e 89 a2 97 49 Data Ascii: d7{s%?Q"O3G&pZcs&nuhl}l[%%)=msKA~'o2k2H3zOn<: Lgtl~u^md$iH'>[39!O)e.[(r:$X:>.{`pcQxw;'%WI!Nj/~I
2024-05-03 04:45:00 UTC	841	IN	Data Raw: 38 3e 86 ab bb cc 7a 5e 52 c4 b8 47 a2 a4 2f d6 f4 1e 4b 28 91 3f 0a aa 8b 28 e8 17 65 50 05 1f 42 ca 0a 51 6d 2f ad cd 04 66 16 c8 82 42 12 15 85 93 19 96 19 da a5 da c7 69 55 3e 59 ee b8 25 0c 0d 1d bc 65 2d 75 c1 d1 74 08 47 ea 21 54 e0 c1 29 24 0b 7d c4 c0 3c f5 f7 14 68 0f e7 de a2 55 be 36 f5 ca 87 bb 66 e6 36 d3 cf 2b 1c 4d 58 fe 71 12 7d 4a b9 c6 45 d9 a8 57 3f 6c ac 0a 18 db 46 0d 65 39 f7 85 ca 0c 03 04 4c 3f d2 a0 72 f2 98 2d 4c 98 6f 05 94 44 b6 2c f4 91 b9 15 06 a0 a8 a2 b0 9a 64 70 27 07 16 3a 81 59 a1 05 76 98 5b 1d cb db c3 5c 83 2d 1d c8 99 4e f3 fb 52 95 b4 2c 2f d6 33 6f 3c 1e c1 72 d5 2f 6c ef c7 71 06 b9 e0 9e a4 29 82 7b ba ac 75 bf bc f6 b6 8f 96 6d 13 bc 42 a3 ec b1 84 26 9f a0 68 62 ae e1 22 e3 e2 99 a9 b8 4c 97 e5 aa b7 b4 62 a5 Data Ascii: 8>z^RG/K(?(ePBQm/fBiU>Y%e-utG!T)$}<hU6f6+MXq}JEW?lFe9L?r-LoD,dp':Yv[\-NR,/3o<r/lq){umB&hb"Lb
2024-05-03 04:45:00 UTC	12792	IN	Data Raw: f6 f3 f0 f0 e5 6b ca ac 4d ec af cc c4 81 2d 64 e4 0d de 4e c7 e3 d2 e6 5c 95 82 61 65 08 f7 96 2a b1 cb 4c e7 e2 05 f3 98 02 b8 77 e4 f5 6a 8d 45 e6 21 ed 95 b0 1c 52 30 f6 a5 14 4e 30 b5 75 45 65 3e 33 61 84 e0 61 0e 4c 7b 2e a9 73 26 9e 4d 57 94 56 c0 6d 56 94 96 e7 5c 56 4b 7a fa 5f 5c 4b 5a 93 6c a1 c5 d0 c8 08 c9 89 68 92 cc 10 ef 77 50 4d 8d c5 a1 45 55 e2 c0 74 3b e8 3b 31 2a 77 28 b9 47 d0 0e f0 b4 77 83 b4 f2 98 fd e7 5a 7d af 70 a0 f9 0a d5 78 a0 ae ac 1a 4f 07 ab 87 56 55 a6 55 a9 f8 c4 ed 62 89 f8 27 7b 5c 56 f3 fa 02 78 83 71 b1 e6 35 0b 44 11 71 e0 f6 71 41 31 2e 88 e5 8a 49 53 2e 38 ac c0 99 9e a5 59 1e 5b 1e 65 49 6d 6c 33 7b 77 11 34 d0 03 74 19 78 50 46 aa 25 40 e2 fd 77 00 09 4d c0 04 15 55 cf f8 f0 55 3a 6e 54 32 6e 94 8e 1b 89 52 86 Data Ascii: kM-dN\aeLwjE!R0N0uEe>3aaL{.s&MWVmV\VKz_\KZlhwPMEUt;;1w(GwZ}pxOVUUb'{\Vxq5DqqA1.IS.8Y[eIml3{w4txPF%@wMUU:nT2nR
2024-05-03 04:45:00 UTC	6396	IN	Data Raw: 73 2b af 12 24 e7 40 5b 49 d9 99 da c4 43 59 7c c0 71 ec 84 ef 76 b4 09 c8 40 72 08 37 e5 e3 4b aa 78 fe 54 e3 e5 2b 63 b2 21 fa 54 ba 80 39 7e b6 eb 32 6d b3 0e 02 32 a5 a8 c6 ee d9 79 9a 44 cb 43 cd 19 1b 3c 89 46 1e fd 2a 03 a9 ae 36 8c da 66 70 f9 c1 63 2b 6f ce 29 27 c7 36 91 aa 03 c0 62 3c 3a 81 86 e1 e3 29 2d 3a ce c7 95 a8 a8 ae 2e d0 27 7a b1 2f fe f9 ab 2b e8 2c 3f b0 fb 3b cc fb 07 9a c6 4b 68 30 8d 1e 8f f3 93 b9 c0 f1 cf 13 6e 74 d4 3f 46 5e cb 99 be 9f 28 bd 70 4e 61 4f 17 1f 06 e3 e5 b0 78 4c 5c 67 a5 7d 18 8c a3 0f f2 ba 0f 55 e0 2a fa c3 79 55 cb 7e 56 55 80 ab 46 81 f5 3a e1 5a 13 55 69 bd 71 d7 9f 1f b4 20 35 15 9d 37 25 05 2d 28 47 1b e0 d2 f6 9b d9 86 eb 8c 8a 1d 13 78 7d 56 eb d1 c0 0a 29 67 16 c5 c4 ac 93 45 c1 4e 63 8d 7b 62 4e a1 Data Ascii: s+$@[ICY\|qv@r7KxT+c!T9~2m2yDC<F6fpc+o)'6b<:)-:.'z/+,?;Kh0nt?F^(pNaOxL\g}UyU~VUF:ZUiq 57%-(Gx}V)gENc{bN
2024-05-03 04:45:00 UTC	6396	IN	Data Raw: a6 61 47 cd c2 ab 57 4f be c3 21 72 5f c5 5d a9 50 03 31 35 cb 14 6f ed 14 df d3 a1 b5 73 52 68 7b dc 7a cd dd fb 6a 1e 55 74 73 d7 f5 8f 2c 2a 6a 65 f1 a9 5f b2 5e ec 23 cc 62 8e 67 7c fd 56 d5 bd ed c1 83 e8 f5 d6 ba 4e d1 8d 9a 66 96 4c 64 76 56 19 fb c3 cb 57 2f f6 3f 93 47 31 23 a7 d6 79 7d 44 16 b2 a2 34 fc 29 22 ee b5 ee 6e 54 b6 be 2f 7f 68 fa 4c 75 f7 b5 30 5e 38 45 a5 a9 c2 44 6e 8d c2 34 8d e3 1e 6a f9 6c 65 ba 3d e1 1b 0a a7 68 75 27 ac 59 eb 0e 70 37 25 6f 27 fa 6a f6 44 ac 97 57 44 1a f7 95 50 d5 31 8c 7f 38 33 7d a2 14 1b 56 61 61 51 7a d2 95 0d 9a b1 50 d0 bb ba f7 46 5e c7 c3 7f c0 a0 6f d3 9d de 68 15 7d 60 83 e7 ac 95 43 e5 7e 62 49 23 01 75 6f 86 18 ac 9b 34 bf af ae 9d 65 6f d0 eb f5 9e b1 be f5 b0 f7 74 eb a9 d6 48 26 64 7b 75 d3 b5 Data Ascii: aGWO!r_]P15osRh{zjUts,*je_^#bg\|VNfLdvVW/?G1#y}D4)"nT/hLu0^8EDn4jle=hu'Yp7%o'jDWDP183}VaaQzPF^oh}`C~bI#uo4eotH&d{u
2024-05-03 04:45:00 UTC	6396	IN	Data Raw: 45 28 0b 16 fd af e4 2b 64 14 6a ea 9e f0 eb e2 62 36 9d 3c d4 d3 79 31 d1 59 df 4d df cb 34 9c 50 16 3c 96 28 68 e2 bc c9 88 f2 a6 ea 9b 97 92 7e 1a f1 d3 5e 81 c7 b9 f4 60 1f 4d e0 49 fa cf 79 4f 75 9e fe 60 e6 d0 09 33 ce cf d5 37 cf 1c a5 3f 23 32 94 91 a3 63 30 ac cc f0 6f 33 f3 e6 d1 d9 f4 cf 91 cc e8 4a a6 44 fd 11 d0 9a 98 57 df 8f 8e 39 eb dd cc ce b2 ca ce ca b2 07 34 c3 9c 37 44 1e c7 82 37 20 35 46 e7 96 e7 6a 60 e7 f4 04 5b 6a f6 5d ce 39 67 23 47 ab 27 42 63 48 03 e8 f3 c2 c1 ec 72 ec 40 3c 3f 74 24 a4 2d 01 81 02 8c a3 91 c3 dd 7f 0e 9b 0c 59 de 3d 9a 36 2b cf ea ec 47 87 95 01 39 fd 35 4a 5d e8 29 fa 89 aa f9 40 53 29 95 be 2b e8 49 ae c0 10 64 5e f6 98 43 03 b7 5a f9 a5 7c b6 5a 78 e7 7c 3f 2b 2e 9f 4c 8e a7 66 0c fb 85 b3 57 8c 65 a3 7e Data Ascii: E(+djb6<y1YM4P<(h~^`MIyOu`37?#2c0o3JDW947D7 5Fj`[j]9g#G'BcHr@<?t$-Y=6+G95J])@S)+Id^CZ\|Zx\|?+.LfWe~
2024-05-03 04:45:00 UTC	2836	IN	Data Raw: a6 9e b6 ae a4 ad 6b 69 eb 76 f7 30 2e 7b 58 7c 64 05 7e 7b a5 53 ed 72 64 20 38 a3 30 64 c2 53 2c bc 68 5c 21 db d5 df 7f 86 42 99 a1 90 67 28 3c 8d ee 37 43 bb 6c ae 4d d5 e0 17 f5 e0 37 8b ef 39 3f bb 31 8f 07 d7 dd 18 0f 7e a9 e5 f8 93 a6 26 52 53 13 b9 da f8 8d a6 e6 29 b7 4e 88 60 17 97 41 11 77 2a f6 15 5b b6 de d9 f5 be 76 ca 11 4b 84 1a f9 de e7 59 f3 4f 3d bf 7e da 56 7a da b1 26 df 13 47 2b 21 6f 0c ee 2b 27 3a e1 e1 1a a0 b7 6b d6 b1 63 0d 1a c8 9a c7 0c 72 91 07 cd 1a 4e 8d 0e 26 70 57 0f 54 0d 3b 10 40 5c ad 09 ff 4a 5e f4 6d e1 bc 2c 9c 17 85 f3 81 b9 05 a2 ce 6c 46 f4 a9 85 1d 9f fe 53 b1 e3 d3 9b b1 e3 fe 0d d8 f1 e9 bd b0 e3 7d 0d 11 de 02 3b be dd 8c 1d cd 85 9d b7 83 ff d7 1a 83 d1 f9 18 70 28 b3 43 be 6b a1 c5 a4 3a 5f d6 d4 69 38 ae Data Ascii: kiv0.{X\|d~{Srd 80dS,h\!Bg(<7ClM79?1~&RS)N`Aw*[vKYO=~Vz&G+!o+':kcrN&pWT;@\J^m,lFS};p(Ck:_i8
2024-05-03 04:45:00 UTC	12792	IN	Data Raw: b7 03 3a 1a 1c 3d 92 e8 b9 01 9b 1c 71 78 5f c8 ef 10 41 92 6a ef 73 2c 40 d6 8f c3 6c 4f d0 a7 04 44 35 b1 48 20 52 92 55 e6 28 88 d8 5b 40 b2 d8 30 2c 2e a5 67 3e 83 38 86 d8 f3 f4 15 84 e7 2a 58 40 f6 a5 7b 81 f4 2d 40 27 9a 35 11 9c 19 0c 11 b9 10 f0 d4 97 fa 12 22 72 8f b9 9a 40 1a 4a ce e5 59 a0 ca 95 f2 87 53 0b 8f 0e 2d 3c 3a bc ad 78 74 58 8d 47 9f 2a f0 e8 f0 46 f7 d0 53 e0 d1 e9 f5 f0 48 8b 1f 80 32 1e 6c 40 02 e4 0d 01 f8 28 04 81 e6 55 07 6d 2b 64 02 a1 62 4d b5 73 e9 13 01 3c 4b 82 11 8c d2 32 8c d7 1e 89 21 b8 a7 78 0b d5 45 4d ff d5 6f 21 ce 93 8f 0c 75 6c 56 e2 23 2d 02 c2 ad c2 8d 21 f4 13 62 c1 10 87 42 65 e1 2d 03 70 76 2d 80 28 9a d2 01 ab 34 7e b2 88 4c fa 0a c3 42 ca 06 19 17 c3 e2 c4 93 a1 52 f4 8e 40 94 ab 4c f0 0c 8b 55 44 7b f0 Data Ascii: :=qx_Ajs,@lOD5H RU([@0,.g>8X@{-@'5"r@JYS-<:xtXGFSH2l@(Um+dbMs<K2!xEMo!ulV#-!bBe-pv-(4~LBR@LUD{
2024-05-03 04:45:00 UTC	6396	IN	Data Raw: 69 c6 8a c1 c4 97 43 aa d0 68 21 59 af cb ff 73 6a 2d 5f c6 e6 a6 79 ad 56 84 eb e6 8d 20 51 db 9f 69 23 f6 f2 26 dc 3f 37 88 a0 18 43 f0 e7 be 43 16 63 10 fe 9f 6c 42 15 4d 78 55 2d d8 bc 86 db 8e 3c a2 2d 68 c3 04 e1 4a e7 3a 9d ea 40 1c 3a 1d c3 c0 77 a0 a4 0e 02 5f d1 d9 d2 81 75 37 4d 37 17 2a 2f 8e 7d 09 a9 34 c8 79 5a 49 cf 61 72 dc 8b 42 1d dd 3e 0e 83 c8 a3 93 8c 11 95 28 23 e2 38 38 fd 2b 9d 95 44 ac a0 98 ba 12 a1 c7 95 95 a4 03 4e 51 c3 bc bd d0 4e 2f 68 44 b8 db 05 4d 40 27 09 9d 5d 82 c9 a4 20 c4 01 47 27 0c aa 62 14 2e 6d ea b2 d4 1c 11 4d 8a 4e 43 55 ea 1a e7 49 14 e2 4c d1 e3 a4 e7 d0 0a c1 1e 90 0e a2 28 88 f9 a3 7c e1 73 ee 57 1a 90 4b cd f2 20 30 01 b1 47 34 f5 ae df 16 01 68 39 57 f0 5c 51 bb 74 bc d4 76 43 6c 24 4a 09 9a 42 78 57 d0 Data Ascii: iCh!Ysj-_yV Qi#&?7CCclBMxU-<-hJ:@:w_u7M7*/}4yZIarB>(#88+DNQN/hDM@'] G'b.mMNCUIL(\|sWK 0G4h9W\QtvCl$JBxW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	49976	108.139.47.46	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:00 UTC	507	OUT	GET /vendor-modern.07772018.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:00 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 150799 Connection: close Date: Fri, 03 May 2024 04:45:01 GMT Last-Modified: Thu, 02 May 2024 15:37:05 GMT ETag: "b27b573e6b04daed0b4144a6e206ba93" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: Cuu1BjaLf5vVdWbEKMp5YFz3GMKAAlr1 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3e7fb742ce78adbb687505d8440bf99c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nLEtt3et4Nnq4xylMk28d57BqR4H0V3u2HnKnorngwa75v1pp6iSTw== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-05-03 04:45:00 UTC	7513	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 7b db 38 96 28 fc fd fd 15 36 27 ed 21 23 5a 96 e4 9d 32 a3 c9 e2 54 f9 76 12 67 62 a7 aa fa 2a 2a 3d 94 08 49 2c 53 a4 42 52 5e ca d2 7f 7f cf 39 58 08 2e 72 92 ea 9e e7 ce 87 ee ea 58 c4 0e 1c 9c 15 38 00 f6 9e 6f 6f bd 8d 93 ad 30 18 b3 28 65 5b 41 34 89 93 b9 97 05 71 b4 b5 08 99 07 51 29 63 5b b7 2c f2 e3 64 77 1e fb 2c 89 9a ad e3 e3 e3 4e ab 7d d2 fc 23 6d be bb 78 7d fe e1 ea bc 99 dd 67 5b cf f7 fe 3f 73 1a c6 23 2f bc 9e 05 69 f3 8e 8d 16 de f8 e6 f5 6c 19 dd 04 51 c6 92 71 3c 1f fe 91 ba df ce b2 5a f5 07 56 73 b1 4c 67 66 bf 7f d0 ee b4 07 f6 e3 f1 c1 c1 e1 89 63 32 3b b3 23 cb 7d f1 68 2c b1 6f 59 12 8c 33 a3 7b 39 fa 83 8d b3 a6 cf 26 41 c4 3e 26 f1 82 25 d9 83 99 d9 c6 70 c8 d2 f7 b1 bf 0c 99 61 3f de Data Ascii: i{8(6'!#Z2Tvgb**=I,SBR^9X.rX8oo0(e[A4qQ)c[,dw,N}#mx}g[?s#/ilQq<ZVsLgfc2;#}h,oY3{9&A>&%pa?
2024-05-03 04:45:00 UTC	6396	IN	Data Raw: c6 af 43 53 b9 1b 9f 70 36 94 c8 bb d8 7d 2b c6 d6 71 38 1b b8 de d9 39 3c 29 cb b8 8b dd 7d 44 9f 4f ee b5 60 69 27 0e 77 58 78 4f b1 ef 0b a3 3b 2c 76 0e 44 6d a1 47 00 44 3e 5b 57 30 5f f7 02 1f 6e 11 1f 12 a3 90 51 93 75 54 00 b2 9e bb e7 48 00 3d 8e 63 e7 60 e2 9c 17 8a 80 d8 94 4d 5f ed ec dc 17 51 e6 74 bf 90 58 52 23 da 7a a7 af 4a 89 ad 02 0c 49 11 23 91 89 8b b7 9d e7 d7 8d fd e7 ef 5d f7 70 7f 5f ec 1b 2e c0 a0 b8 02 61 5b 24 64 6d d4 8d b7 8d 39 0c 07 38 78 11 34 b9 9e 82 5b 8f c0 0f 31 ef 95 e2 78 37 8a 45 88 88 ce f3 19 b4 bd 49 ed e9 ec 1f 3a 37 a0 60 ea 4d 74 3a 2d e7 95 7b 01 1a f0 41 67 5d 6c 9a ab 26 42 c5 01 34 78 45 2a cd 05 f4 73 7f bf 8c 10 90 26 f8 49 49 97 c0 d6 11 13 0d d4 b1 81 61 c8 99 03 82 bf b5 d6 ef dd 6b d0 b7 67 b6 d0 44 Data Ascii: CSp6}+q89<)}DO`i'wXxO;,vDmGD>[W0_nQuTH=c`M_QtXR#zJI#]p_.a[$dm98x4[1x7EI:7`Mt:-{Ag]l&B4xE*s&IIakgD
2024-05-03 04:45:00 UTC	11012	IN	Data Raw: 00 14 1d 88 cc f9 c3 c1 d1 49 07 79 7b 86 bc d1 87 4f e4 d3 19 43 e6 d9 12 cc 13 cd d7 0c 01 0b 02 7b e2 03 4a 64 68 ab c7 24 17 f6 0f 60 b4 3a 3d c1 14 f9 50 46 4a 63 c0 ab 0e 0e ff 6e c6 bc 0c 89 05 f4 b8 7d 0c 4a 31 29 be d3 79 7c 23 54 4b e4 ff 39 a3 6a c9 80 44 4b 8f 98 d3 da 7e 03 ea ee 8c dd 7f 20 8d f7 ad f9 de ca 7d 40 df 16 de a8 52 fb ff 1b ac e3 c8 a2 e7 a9 f0 60 c3 c0 8d f2 35 b7 dc 9f e0 9d 7e 17 bc bb c0 07 ac df 86 b1 87 c7 78 6d 33 48 3f 78 1f e8 21 22 76 d6 82 3f 2f 68 9d 9e a1 8f 29 cb ab b8 e0 86 e0 2b ba e3 1b 52 0d b0 43 ff 26 2e 40 4e dc 9f b5 67 53 98 eb 99 91 8d 1e 3d 85 86 c4 5b 1e a2 f9 8b 08 e2 9e a3 83 23 6d ef d2 6b 0c a3 d4 64 bb 91 75 d6 66 bb 47 bd b6 c3 fe 16 ed 69 35 e8 0e 36 9f b5 f1 78 66 9b 1a 83 16 f2 0c 7f 6a 19 f2 Data Ascii: Iy{OC{Jdh$`:=PFJcn}J1)y\|#TK9jDK~ }@R`5~xm3H?x!"v?/h)+RC&.@NgS=[#mkdufGi56xfj
2024-05-03 04:45:00 UTC	6396	IN	Data Raw: 01 7c 1f 26 bc 24 32 52 36 cf fb 67 7c f8 b9 c6 73 64 53 86 34 0c e5 b5 86 32 ed ac 0f e8 a7 35 4e 20 71 86 d3 af 5e 86 00 d9 95 1b 01 79 fa 68 54 42 9c 5e 12 b9 98 37 c3 74 48 37 68 52 87 7f 8a 8a 2b ef c4 bf 33 5c 81 58 4f cd c4 e0 a1 ad dd 82 23 5c bb 83 1a 8c 92 fc df e0 0f 79 a6 39 7c e6 e0 18 78 cc 18 1e 6c 1e bb bc 65 ac 99 be 18 ce 3e d1 d6 b9 23 a9 f6 6f e6 61 1a 80 6c 67 ea ae 60 3a 99 0a b8 19 81 04 11 f1 24 90 5d 85 79 81 d7 98 80 d8 11 f4 aa 1e 52 09 fa 43 b9 9a 15 c5 2f 60 71 e3 1e bd ac f0 ab 9f e9 13 2d 32 bd c0 c1 bc 40 f7 8c 2a 0e f5 0b 72 25 d0 22 56 7b b1 3c ed e7 99 44 d9 40 22 9a 03 19 75 0d e8 55 cf b0 ab 30 fa a4 ef 63 45 50 cd a6 63 9d 4e c5 9d 04 21 3c 10 31 66 f3 49 c5 0c ce 3e fc e1 82 cb fd 5f fd 09 20 e1 f0 57 74 72 07 01 e1 Data Ascii: \|&$2R6g\|sdS425N q^yhTB^7tH7hR+3\XO#\y9\|xle>#oalg`:$]yRC/`q-2@*r%"V{<D@"uU0cEPcN!<1fI>_ Wtr
2024-05-03 04:45:00 UTC	12792	IN	Data Raw: 1d 54 5e d7 96 be 80 35 c5 d9 5e 57 d1 e0 44 14 81 72 09 59 8a 34 fc a8 f1 04 28 ae 72 ba 2b bc 8f 8a 65 c2 39 47 7e 21 74 13 61 cf 77 08 52 8b cd 64 69 75 67 5a cf 43 1a 17 ca 36 e9 d1 9c b1 4f 1d 39 8d 31 29 74 23 c0 50 db 24 1d 4e 66 23 59 90 d0 17 68 54 90 e2 2e 9e f9 aa 5d 90 29 5c cd 5e 72 99 09 9f 2f 5d a9 c9 20 09 40 7f d3 49 52 12 fc e2 18 d6 a3 46 a6 84 c1 31 ee ed 20 15 48 b9 29 05 28 25 aa 18 29 c0 ef 23 59 75 05 97 4f 7d 94 5c 6c 77 79 b5 bb 4e d6 1f 24 f0 fc 38 1c 24 d4 73 27 8e ce 00 90 98 e0 c3 30 c8 85 c1 b8 5c 2b ff 05 f8 b6 45 94 1e f1 9d fd 04 7a 10 f2 d8 79 13 f5 6e c6 e5 01 5f 41 28 a6 b7 4a 22 1a f5 f3 4a 1d 95 7d b8 08 d1 99 96 59 a7 d3 68 ed b7 70 f0 e9 6a f5 78 05 26 72 12 3d 16 57 d1 a6 f8 1a 6d 88 2f d1 c6 ba 38 8c 56 37 c5 4e Data Ascii: T^5^WDrY4(r+e9G~!tawRdiugZC6O91)t#P$Nf#YhT.])\^r/] @IRF1 H)(%)#YuO}\lwyN$8$s'0\+Ezyn_A(J"J}Yhpjx&r=Wm/8V7N
2024-05-03 04:45:00 UTC	12792	IN	Data Raw: 15 2c 7a 47 8c f8 2b 62 6d b1 89 b1 22 d6 9b fc c4 4d c8 ee f4 8a 1b 85 6d 92 49 bb 09 db d4 fb 54 37 39 a3 ca d8 2e 82 48 e7 6a e9 75 e7 3f 49 71 42 d0 00 07 9f b6 c3 62 ae 22 fc c3 3e 43 58 ba 94 3a 97 5d 11 0e 9d f7 0e a5 4a 3a 57 d9 48 4a 4d 32 c4 d4 24 6e 4e 92 f9 1c 35 b9 3a 7b 0b d7 55 7a 4b a7 37 af 85 48 61 0e 97 bf 95 bc a5 d2 b9 e2 3e b1 7c 1d 26 52 88 7c 14 a6 b4 d5 90 5d a2 28 43 8a 4e 1e b2 84 2b 57 b6 65 7d c9 a3 b6 db 95 52 cc ea e5 85 e9 5f 64 d4 fa b0 07 5d b7 a6 7f 61 e7 65 86 e0 5c a7 7f 99 a9 54 2e 6d e9 56 30 0d 0b c9 14 44 8c 0e 64 5c 50 ce 96 39 45 0b b0 49 94 e7 ac 36 28 d7 1b 94 05 bd 9a 96 79 4c ea 71 2a 25 cc 7b a2 48 8a 47 89 da fc 60 8d fe d2 6a f8 81 4e 02 ae 2a 8a 21 0f 1b 63 a2 f6 b4 4e 15 3b dc 8b c7 65 c7 b9 84 b3 8e bc Data Ascii: ,zG+bm"MmIT79.Hju?IqBb">CX:]J:WHJM2$nN5:{UzK7Ha>\|&R\|](CN+We}R_d]ae\T.mV0Dd\P9EI6(yLq%{HG`jN!cN;e
2024-05-03 04:45:00 UTC	2836	IN	Data Raw: 7a a1 1f c2 78 6e bd f9 21 12 92 1c 7c 18 11 ba 6a b4 5b 95 7a eb c3 28 93 a5 5a 48 62 05 20 8c dc e4 9e 5b ab b4 3e d4 11 74 84 c1 15 72 8a 59 fe 9d 10 ba 80 52 39 2e 5b 51 bf 44 5b 07 e9 e7 0b 6d 7c e6 f6 f5 dc 9d 73 42 6c 74 3b d5 62 f1 9c 7f e7 34 8d 41 72 af aa 88 a6 9c 91 9b e5 bb 3a d4 9b 72 c5 ba 57 ab aa e6 72 ed ef 7c 61 ed f7 ad 7e 17 f9 65 fa 47 95 3e 7e 77 3e b4 ce 83 e9 34 98 fb 04 35 c7 f3 fe f2 9c 4a fc b3 d4 55 a2 66 be 3c 0f 42 24 3b ef a3 80 bf cb 33 3a 4c 54 38 e3 3f cb b1 77 45 bf e3 e5 a5 ef bf a1 c2 e5 f2 ca f7 70 e7 8a ff d8 fd 0f ee 04 22 58 a1 00 70 bb 0b 73 74 73 97 13 a5 33 2d 63 2d 80 31 94 fc 97 ae ea c3 e5 b2 74 3e cf c7 ad 93 c0 8f 5f 23 0f 1e ca aa 98 56 ea 2a 15 64 70 67 fe a1 27 80 02 0f 56 de 46 59 15 8d 96 81 68 89 cf Data Ascii: zxn!\|j[z(ZHb [>trYR9.[QD[m\|sBlt;b4Ar:rWr\|a~eG>~w>45JUf<B$;3:LT8?wEp"Xpsts3-c-1t>_#V*dpg'VFYh
2024-05-03 04:45:00 UTC	16384	IN	Data Raw: 7b 81 41 9d d2 4f 6d 88 08 65 16 3c 58 e9 6f ba 5a 97 06 bf 5b 44 e1 e1 14 a7 47 e1 ad a0 f0 f3 31 60 c4 26 c2 47 12 ba b3 d2 f5 3a 4d d7 9c d7 ab 54 52 0b 48 10 73 3d b7 83 df 1f b1 53 17 cc 7c b0 ac 21 2f 26 81 a0 95 31 84 37 a6 eb d9 e0 9a 16 be eb 8b 9d c3 ad 7d 2c bd 43 db a6 9b ac 1c 7c dc 30 7d f4 55 16 fe ef aa 25 22 fc 23 57 5b 2d 87 9f 2e 47 22 97 83 58 48 78 49 a7 bd 3d 62 23 58 d7 97 b1 32 68 be 7b c4 d5 89 f9 4e 78 be b3 7d 9e a7 7d 9e 9a 1f f4 9a e3 8a 55 4e 39 5c 8b e2 57 39 f9 18 22 d7 5e 11 bd 38 56 34 f2 2b 7c a6 45 33 bc 72 e4 69 71 ae f1 a9 57 60 d6 90 14 83 31 8d 97 0b 1f 72 ce 49 20 77 d4 db d3 1b a7 84 24 18 50 7c 1c fb 93 ee 65 16 11 11 f1 61 18 13 a4 9b 8b da b0 ad 05 6e 62 9f bf 82 b7 5a e6 f8 88 07 e1 1e 29 72 ff b8 6f ac c0 b9 Data Ascii: {AOme<XoZ[DG1`&G:MTRHs=S\|!/&17},C\|0}U%"#W[-.G"XHxI=b#X2h{Nx}}UN9\W9"^8V4+\|E3riqW`1rI w$P\|eanbZ)ro
2024-05-03 04:45:00 UTC	2804	IN	Data Raw: 14 af df 7c 2f 22 2b ec f6 24 b3 86 46 58 e4 d2 7d 2f c9 3b d0 b6 69 55 14 a7 01 be cd 36 bb 04 4b 94 43 dc 5d 58 c5 a8 9d 60 72 0d c6 aa d0 8e 11 13 88 aa 5e 58 90 c2 36 b0 52 bf c4 22 72 d3 35 3a 60 39 fe e1 96 23 9d 55 38 d2 04 65 03 27 a5 a9 3a 91 a6 13 e8 48 8d 5f 71 e4 cc 6e b1 f7 5d 91 5f 24 f2 0c ae f9 ea d1 46 6e 6d 24 01 53 91 35 fc f0 7c 11 a2 16 af 40 44 8c a2 57 80 ce e4 c8 38 83 2f 2a 90 34 95 85 d8 c9 da ef 1f 8d cb 54 38 aa d0 af dd b7 95 00 4a 4a a0 ea 19 09 94 4d d7 74 61 f5 5d 7e 82 ba 38 62 59 95 2c 2e 3f b0 11 36 1b 52 ad 23 eb e8 c8 ee d3 05 dc 1d ad 42 82 4e 7e 42 b3 cd 21 f9 e0 35 f8 80 48 2c f6 1c d4 01 6b 4b 25 a8 a8 d3 a8 3c d9 00 7c 22 f3 8d 68 19 f7 23 dd 2e 40 e4 ee 12 f1 98 44 73 73 d8 27 f8 a5 66 1d cd 58 b9 fc 7e 8e fe c5 Data Ascii: \|/"+$FX}/;iU6KC]X`r^X6R"r5:`9#U8e':H_qn]_$Fnm$S5\|@DW8/*4T8JJMta]~8bY,.?6R#BN~B!5H,kK%<\|"h#.@Dss'fX~
2024-05-03 04:45:00 UTC	16384	IN	Data Raw: 3a 83 bf 8f 7e e0 1c c7 4f c6 55 0b f9 7f c2 90 a6 d5 fe f1 81 23 e8 f7 d6 e7 98 c2 8d de 6f 3d 44 31 ce a4 76 14 74 6d 0c 48 27 98 8d eb c5 23 27 b6 67 a0 cf 15 0a 43 84 9a 82 b0 a3 33 a0 60 b4 19 74 48 be f3 35 e7 06 cb 64 07 4a 39 53 64 cc 91 ea 75 5b cd b7 da cf 1a 0a c6 c8 eb ca 6b 75 9d 55 96 bf 4e b0 76 5a 4f be e6 74 c4 1c af fb a4 9a 6e ce 45 f2 bb 8d ae 3e 44 e6 ab c2 b8 81 26 05 fa e1 56 a1 22 29 42 76 2b 53 66 63 53 f3 4a f1 e2 54 02 36 8e ac 73 43 20 a3 fa d1 4f f1 73 cc d1 bf 79 6f ab f5 0e bb 3e 40 51 63 45 bd 18 39 0f ef 6d b5 3a 0a b8 29 ea 51 6e 89 f6 b8 05 8b c1 a8 76 8a 9e 6d 34 cb be 95 ee b6 9f 14 37 48 ec 48 3e d7 39 ec 44 9d 4e b8 5a 13 de cd eb ac cc bb 40 99 b6 3a 15 67 97 99 75 68 c3 78 79 0d 3a f6 9a b8 03 ae e5 b5 be e6 1c 3b Data Ascii: :~OU#o=D1vtmH'#'gC3`tH5dJ9Sdu[kuUNvZOtnE>D&V")Bv+SfcSJT6sC Osyo>@QcE9m:)Qnvm47HH>9DNZ@:guhxy:;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	49979	138.199.40.58	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:00 UTC	522	OUT	GET /cs/ccpa/stub.js HTTP/1.1 Host: cdn.iubenda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:00 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:45:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-NY1-885 CDN-PullZone: 954456 CDN-Uid: a7bd0c3f-43db-400a-80e2-073f933f3c99 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=3600 ETag: W/"66335753-6dc" Last-Modified: Thu, 02 May 2024 09:05:23 GMT P3P: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml" CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 05/03/2024 04:45:00 CDN-EdgeStorageId: 885 CDN-Status: 200 CDN-RequestId: 975c21077c41b2527dba545441f2de9e CDN-Cache: BYPASS
2024-05-03 04:45:00 UTC	4114	IN	Data Raw: 31 30 30 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 74 2e 6d 3d 6e 2c 74 2e 63 3d 65 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 72 29 7b 74 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 Data Ascii: 100a!function(n){var e={};function t(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return n[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}t.m=n,t.c=e,t.d=function(n,e,r){t.o(n,e)\|\|Object.defineProperty(n,e,{configurable:!1,enumerab
2024-05-03 04:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	49982	138.199.40.58	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:01 UTC	523	OUT	GET /cs/iubenda_cs.js HTTP/1.1 Host: cdn.iubenda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:01 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:45:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-NY1-885 CDN-PullZone: 954456 CDN-Uid: a7bd0c3f-43db-400a-80e2-073f933f3c99 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=3600 ETag: W/"66335753-2dc" Last-Modified: Thu, 02 May 2024 09:05:23 GMT P3P: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml" CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 05/03/2024 04:45:01 CDN-EdgeStorageId: 885 CDN-Status: 200 CDN-RequestId: 68433475442a19847f9496038dbc2aba CDN-Cache: BYPASS
2024-05-03 04:45:01 UTC	1239	IN	Data Raw: 34 64 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 6e 3d 30 3b 63 6f 6e 73 74 20 74 3d 5b 22 62 67 22 2c 22 63 61 22 2c 22 63 73 22 2c 22 64 61 22 2c 22 64 65 22 2c 22 65 6c 22 2c 22 65 6e 22 2c 22 65 6e 2d 47 42 22 2c 22 65 73 22 2c 22 66 72 22 2c 22 69 74 22 2c 22 6e 6c 22 2c 22 70 6c 22 2c 22 70 74 22 2c 22 70 74 2d 42 52 22 2c 22 72 6f 22 2c 22 72 75 22 2c 22 73 76 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 6c 65 74 20 65 3b 65 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 69 75 62 65 6e 64 61 2e 63 6f 6d 2f 63 6f 6f 6b 69 65 5f 73 6f 6c 75 74 69 6f 6e 2f 69 75 62 65 6e 64 61 5f 63 73 2f 31 2e 36 30 2e 30 2f 63 6f 72 65 2d 22 2b 5f 69 75 62 2e 63 73 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 6c 61 Data Ascii: 4d0!function(e){"use strict";let n=0;const t=["bg","ca","cs","da","de","el","en","en-GB","es","fr","it","nl","pl","pt","pt-BR","ro","ru","sv"];function o(){let e;e="https://cdn.iubenda.com/cookie_solution/iubenda_cs/1.60.0/core-"+_iub.csConfiguration.la
2024-05-03 04:45:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	49980	142.251.40.227	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:01 UTC	833	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdO8JcUAAAAAJWQi_B27yDFuShbD2Cvq4AqcOCQ&co=aHR0cHM6Ly9zaG9ydC5pbzo0NDM.&hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH&size=invisible&cb=lffsssil4bn5 HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:01 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 03 May 2024 04:45:01 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-CdkrfLCrS1Yx3CJZ6Epy-w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-03 04:45:01 UTC	364	IN	Data Raw: 32 61 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2afa<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-05-03 04:45:01 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-05-03 04:45:01 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-05-03 04:45:01 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-05-03 04:45:01 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-05-03 04:45:01 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-05-03 04:45:01 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 57 51 63 44 70 41 63 48 6e 30 73 6a 4d 36 5a 69 56 6b 55 38 4a 77 4e 48 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 43 64 6b 72 66 4c 43 72 53 31 59 78 33 43 4a 5a 36 45 70 79 2d 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 72 65 63 61 70 74 63 68 61 2e 6e 65 74 2f Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/WQcDpAcHn0sjM6ZiVkU8JwNH/styles__ltr.css"><script nonce="CdkrfLCrS1Yx3CJZ6Epy-w" type="text/javascript">window['__recaptcha_api'] = 'https://recaptcha.net/
2024-05-03 04:45:01 UTC	1255	IN	Data Raw: 73 72 77 50 38 7a 72 48 57 7a 46 64 6a 4f 68 67 46 78 6a 76 65 6d 77 46 5f 54 41 62 64 69 52 78 54 56 58 59 30 34 30 51 4c 4f 30 35 35 49 38 6b 55 5f 7a 73 78 58 30 61 48 48 73 71 6c 58 4a 4f 38 34 51 67 6a 6e 75 32 62 4f 41 56 4b 65 51 65 6a 6f 70 6b 6a 34 58 6d 41 77 47 4e 79 4b 36 50 54 37 50 41 47 79 5f 72 30 63 6a 75 72 33 6f 72 4f 51 79 5a 76 52 53 68 55 38 63 71 54 56 73 4c 6c 78 65 30 57 79 4d 51 51 55 65 68 49 65 72 53 6f 52 6a 41 51 4b 39 62 53 47 79 44 64 49 4a 45 50 39 75 4e 35 4c 77 44 63 4d 56 70 72 48 51 41 4c 42 4d 55 2d 32 59 32 59 75 71 2d 41 43 64 55 58 77 67 6d 49 31 69 4a 44 71 5f 4d 31 46 65 44 4e 44 47 73 2d 39 71 37 4a 7a 6c 53 4e 63 32 71 61 4c 45 6e 74 57 55 47 45 66 44 6a 34 6a 4e 78 51 67 64 63 77 4d 7a 65 46 79 36 34 70 5a 36 Data Ascii: srwP8zrHWzFdjOhgFxjvemwF_TAbdiRxTVXY040QLO055I8kU_zsxX0aHHsqlXJO84Qgjnu2bOAVKeQejopkj4XmAwGNyK6PT7PAGy_r0cjur3orOQyZvRShU8cqTVsLlxe0WyMQQUehIerSoRjAQK9bSGyDdIJEP9uN5LwDcMVprHQALBMU-2Y2Yuq-ACdUXwgmI1iJDq_M1FeDNDGs-9q7JzlSNc2qaLEntWUGEfDj4jNxQgdcwMzeFy64pZ6
2024-05-03 04:45:01 UTC	1255	IN	Data Raw: 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 43 64 6b 72 66 4c 43 72 53 31 59 78 33 43 4a 5a 36 45 70 79 2d 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 30 53 32 4e 51 55 56 4e 6f 4d 6d 39 72 61 6c 70 49 61 56 6f 79 61 6b 6c 7a 63 31 4a 46 65 46 5a 58 62 7a 51 31 62 57 78 57 53 45 39 68 61 32 46 32 63 30 39 77 64 30 73 30 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 56 58 64 46 4d 44 56 4b 4d 32 67 77 56 6b 38 33 62 58 46 6d 4d 33 6c 43 54 6d 6c 49 54 55 Data Ascii: /javascript" nonce="CdkrfLCrS1Yx3CJZ6Epy-w"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy90S2NQUVNoMm9ralpIaVoyaklzc1JFeFZXbzQ1bWxWSE9ha2F2c09wd0s0Lmpz\x22,\x22\x22,\x22VXdFMDVKM2gwVk83bXFmM3lCTmlITU
2024-05-03 04:45:01 UTC	606	IN	Data Raw: 52 6a 52 58 64 50 51 7a 68 70 4d 33 4a 50 4b 30 64 53 4e 47 30 76 55 33 51 77 55 48 68 30 61 7a 4a 45 63 57 73 30 62 6b 74 50 51 30 70 75 54 44 4a 42 64 31 52 6b 55 33 67 77 4f 57 4a 6b 52 57 68 6e 57 44 52 7a 5a 33 56 4b 53 7a 4a 47 57 58 68 6c 5a 6c 4e 4e 61 45 4a 73 54 44 52 73 57 48 42 79 55 32 67 79 62 48 46 59 64 6c 52 36 55 33 67 31 4f 48 70 61 4f 44 4a 46 64 69 39 36 52 31 45 76 51 6e 4e 42 65 57 38 77 62 32 6c 6e 57 56 59 77 61 48 56 47 64 54 4d 31 4e 55 46 51 4e 33 51 33 52 33 52 6b 59 79 74 32 64 6a 5a 45 4e 6a 46 35 55 44 4e 6f 5a 47 55 35 59 54 68 50 52 56 68 4d 4b 30 4a 49 4d 48 64 47 53 56 52 42 55 6d 45 78 56 33 42 44 64 6b 64 44 54 30 64 48 65 6d 31 6e 64 56 68 77 56 46 4e 30 63 54 4a 4b 61 55 67 76 4b 32 68 73 54 6b 30 72 53 58 6c 68 63 Data Ascii: RjRXdPQzhpM3JPK0dSNG0vU3QwUHh0azJEcWs0bktPQ0puTDJBd1RkU3gwOWJkRWhnWDRzZ3VKSzJGWXhlZlNNaEJsTDRsWHByU2gybHFYdlR6U3g1OHpaODJFdi96R1EvQnNBeW8wb2lnWVYwaHVGdTM1NUFQN3Q3R3RkYyt2djZENjF5UDNoZGU5YThPRVhMK0JIMHdGSVRBUmExV3BDdkdDT0dHem1ndVhwVFN0cTJKaUgvK2hsTk0rSXlhc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	49985	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:01 UTC	385	OUT	GET /static/medium-02-b924d3f3e6b83880002b74f126d8be45.png HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:02 UTC	793	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 61401 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-efd9" Expires: Tue, 02 Jul 2024 04:44:52 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 e80aeefdda01afc3c41fc332ff42e7ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EZonGO7U6ows5r6PE-JAO5bqkJaL0gYIMvgKe54QrMGw-qFZqs4nSQ== Age: 10 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:45:02 UTC	15591	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 01 81 08 06 00 00 00 80 59 0d 24 00 00 ef a0 49 44 41 54 78 da ec 9b 4b 68 1d 65 18 86 4f 2e b5 b5 6d 34 ba 71 e1 46 74 51 05 83 52 04 57 6a 41 44 51 0a 4a 15 11 a4 56 10 29 88 ab 82 37 10 51 d4 8d 08 82 1b 51 5a f0 52 44 a8 50 2d 14 4c 8c 8a b8 11 a5 d6 12 48 6a 4b e8 25 89 44 53 da 9e a4 69 72 ce cc 19 9f 91 6f c2 30 24 26 01 a1 4d fb 3c f0 f0 fe ff 3f 97 03 59 7c df 9c ff 4c 6a 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 2b 8c 2c cb da 70 2e 45 44 e4 12 20 2f ea 61 3b 76 44 2e e5 9a f6 79 ae 6d b3 49 88 88 5c c4 2c 56 f0 ab 4f fd e1 6a 5c 13 e7 af c7 a5 7c 4e Data Ascii: PNGIHDRY$IDATxKheO.m4qFtQRWjADQJV)7QQZRDP-LHjK%DSiro0$&M<?Y\|Lj""""""""""""""""""""""""""""""""""""""""""""""""""""""""""+,p.ED /a;vD.ymI\,VOj\\|N
2024-05-03 04:45:02 UTC	399	IN	Data Raw: 40 4d 1e b4 c8 20 0f 2f 5a 28 e8 9f 03 27 81 a4 74 1b 64 84 25 e5 cb 00 46 80 7e 20 96 e3 0f 6e 18 08 c8 f1 7e 16 9a 75 12 d0 88 65 24 5f fe 49 f4 49 5f 15 c3 1e 65 ec 0f f7 3f 50 86 d6 6c 04 a7 ea 02 00 2e c8 2a 43 61 56 b7 73 89 0a a9 98 06 d6 dc bd f7 ba 96 a9 62 ae 10 13 00 f2 ff 93 be 6d 30 f4 bb 68 34 de ab bd 57 46 f5 eb 49 0f 3b 60 e4 cf 83 00 56 8b f1 97 c6 70 ac 09 20 75 33 15 b8 4e e9 90 8b 32 dd 67 28 82 c7 da a3 7d 64 8b 76 53 6d b8 83 2e a1 18 ad 62 c8 4d 4e cf 16 6e 1b a1 fa 06 b9 9b 36 a9 10 94 84 74 98 08 54 c3 b9 a0 78 00 38 c6 63 17 ab f4 d2 5e 3c 07 04 a0 c8 40 1e ab 56 81 d2 0a cc 70 91 1b 04 c5 c5 68 05 2c 44 73 36 52 f7 55 ea e9 bf 65 09 c5 4f 07 32 59 1b b0 e4 04 87 cf a4 01 9f 99 48 02 d4 b2 bd d0 ff df 65 14 e5 88 24 81 4c b1 c2 Data Ascii: @M /Z('td%F~ n~ue$_II_e?Pl.*CaVsbm0h4WFI;`Vp u3N2g(}dvSm.bMNn6tTx8c^<@Vph,Ds6RUeO2YHe$L
2024-05-03 04:45:02 UTC	16384	IN	Data Raw: af 52 79 00 83 30 ee 08 f5 28 f2 10 02 50 06 7c 18 44 c4 55 c2 6a e7 ef 98 cd 7a 00 48 00 04 85 c7 f7 e1 f3 f9 41 08 f2 58 5d cc 56 84 d1 8d fb f0 9a ec 59 a8 e6 74 05 52 7b 50 04 61 da 85 b0 53 8c a7 99 85 1c 79 71 ee 2c 3c f2 70 f9 98 78 e1 b9 4e ec 6b 95 71 b2 1d a2 2d 74 61 bd 8c d5 c3 6d 65 b0 7a b1 fe 3d 11 fd 8e 25 12 e7 e1 45 cb 0c 3a 26 3a 80 4b 4e 64 bb 10 81 c1 90 9d c2 68 ae 61 20 71 39 ed e3 4d 1d 93 eb 99 7c 23 81 7b e1 36 da e8 af a4 ec 34 50 05 cd 1b 38 e0 bf 41 76 cf 66 95 5e 69 1a cf d4 c3 f7 a8 03 c6 df cf 6d 20 20 de 06 91 05 e4 0c 54 53 48 0a c0 74 64 42 4e f6 00 54 db 68 c3 5b 00 83 ff 0b 4a 68 a1 18 95 4a ea 59 07 ef 61 37 a5 03 b7 29 d5 53 c6 c4 c1 27 86 5c 51 3f a5 d4 c0 9a 11 8a b6 1f a5 6e df 4e 6a 83 08 1c 95 cf a1 1b 72 18 7c Data Ascii: Ry0(P\|DUjzHAX]VYtR{PaSyq,<pxNkq-tamez=%E:&:KNdha q9M\|#{64P8Avf^im TSHtdBNTh[JhJYa7)S'\Q?nNjr\|
2024-05-03 04:45:02 UTC	16384	IN	Data Raw: 16 9e 38 94 0d 99 80 17 10 06 fe 1c f8 03 a0 0a b8 02 14 68 24 c1 07 8c a4 dc f6 91 d8 b2 5f b7 08 20 b7 a6 71 ff 2b 70 05 5f e6 45 ac 47 44 c8 75 8b 07 d0 0a 24 26 c0 e2 11 ac 4e 10 c9 01 ac 65 80 17 68 03 06 e4 87 50 cd d7 45 28 7e 26 76 ff e3 a1 2d 16 a4 82 b6 4a 65 ac 3f 84 17 70 c3 be 9e aa 60 fc bb 60 fc 39 83 26 69 87 81 95 5c fc b1 8a c3 bc b6 05 2a ec 52 03 12 70 82 00 02 aa f1 db 6c 90 c9 11 9a 09 52 19 23 0c 84 db 4b 21 dc ee a3 d5 ae c3 20 83 63 74 0d ef 29 04 f3 8d 60 03 1f 06 12 59 04 c0 21 1f 17 bc 90 a8 3c 86 8b d9 0c ee 07 24 15 c1 86 7b 09 a5 83 f7 ac 10 d0 33 8c 1c 0a 4c db a5 60 f5 75 a0 45 52 44 07 a4 7d 74 06 e0 8b de f2 fe 6f 2c 4d 60 72 9e c0 6f 99 03 e0 65 e7 9e 00 d2 1a 86 1e f5 44 0a 4b 87 c4 7d bb 00 dc 03 dc ec 5d c8 89 0b 00 Data Ascii: 8h$_ q+p_EGDu$&NehPE(~&v-Je?p``9&i\*RplR#K! ct)`Y!<${3L`uERD}to,M`roeDK}]
2024-05-03 04:45:02 UTC	12643	IN	Data Raw: 76 05 73 cc 39 8d e8 15 e0 90 01 84 7b cb de 38 69 3b eb 95 d6 c3 10 fe c7 e3 b9 cd d1 21 85 c6 7c 8f 34 cc 84 e9 68 8e 4b 1e e7 c2 1c 34 c5 29 0b e1 94 8c 36 5a 41 ad 16 8f 23 19 d4 a3 8e d0 49 9f 57 8a 5c 13 65 6f 4c 9c 1c 8e 73 cb b9 f8 49 b2 39 3a d1 31 13 6d 98 9c 24 2b a0 1d 2c 8c cc 45 a2 58 8e 2c 84 26 50 79 f5 b6 92 c0 b0 68 01 ab 81 bd e6 b9 ec 47 76 70 89 d5 14 e6 cf b4 6c f4 06 35 0f 9f 06 be cb d7 c2 25 22 46 f8 a2 da c0 b7 b5 c2 e8 74 5d ff 1d 60 99 0a e8 32 bb 67 29 11 ac b3 91 8e 55 10 48 6b 34 ec 54 2c 3c e0 39 02 cd 45 23 b9 15 a5 0d 12 02 c3 37 19 f7 cf 98 ff 99 33 67 32 19 cc ae bb 43 02 60 cc bd c9 00 b6 fb 02 93 28 8c 09 c9 34 7f 77 8e 8d 88 88 90 b9 73 e7 d2 c7 40 13 12 3b 82 b1 78 1b fb 1b 04 5e 43 b8 57 41 2f da c0 c1 25 9b 61 76 Data Ascii: vs9{8i;!\|4hK4)6ZA#IW\eoLsI9:1m$+,EX,&PyhGvpl5%"Ft]`2g)UHk4T,<9E#73g2C`(4ws@;x^CWA/%av

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	49987	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:01 UTC	378	OUT	GET /static/03-d26b079ea5970bce38a0e708d0cff905.svg HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:02 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 74892 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-1248c" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bf8d7cb6fca5d51158e1109ca40fe242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: EXoQJjMfTflGfS_V-e5xnSmTHlKQEDi-w10213cAOSekFzc_2DCMoQ== Age: 10 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:02 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 37 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 30 20 37 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 31 2e 33 39 31 36 20 33 39 2e 30 38 37 36 4c 35 31 2e 34 38 33 31 20 33 39 2e 32 35 34 33 43 35 31 2e 34 38 33 31 20 33 39 2e 33 35 34 33 20 35 31 2e 35 34 39 36 20 33 39 2e 33 36 32 36 20 35 31 2e 36 32 34 35 20 33 39 2e 33 32 31 43 35 31 2e 38 32 34 31 20 33 39 2e 34 37 39 33 20 35 31 2e 39 39 38 38 20 33 39 2e 32 37 39 33 20 35 32 2e 31 38 31 38 20 33 39 2e 33 38 37 36 43 35 32 2e 33 36 34 38 20 33 39 2e 34 39 36 20 35 32 2e 32 35 36 37 Data Ascii: <svg width="90" height="75" viewBox="0 0 90 75" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M51.3916 39.0876L51.4831 39.2543C51.4831 39.3543 51.5496 39.3626 51.6245 39.321C51.8241 39.4793 51.9988 39.2793 52.1818 39.3876C52.3648 39.496 52.2567
2024-05-03 04:45:02 UTC	16384	IN	Data Raw: 33 2e 31 32 37 31 20 34 37 2e 31 36 34 20 37 32 2e 38 36 39 32 20 34 37 2e 31 32 32 33 20 37 32 2e 36 32 38 20 34 37 2e 31 31 34 43 37 32 2e 33 37 30 34 20 34 37 2e 31 30 34 33 20 37 32 2e 31 31 36 38 20 34 37 2e 30 34 37 38 20 37 31 2e 38 37 39 33 20 34 36 2e 39 34 37 33 43 37 31 2e 36 38 38 20 34 36 2e 39 34 37 33 20 37 31 2e 35 37 31 36 20 34 37 2e 31 36 34 20 37 31 2e 33 33 38 36 20 34 37 2e 31 34 37 33 43 37 31 2e 31 30 35 37 20 34 37 2e 31 33 30 37 20 37 30 2e 39 31 34 34 20 34 36 2e 38 33 39 20 37 30 2e 36 33 31 36 20 34 36 2e 39 31 34 43 37 30 2e 33 34 38 38 20 34 36 2e 39 38 39 20 37 30 2e 33 33 32 31 20 34 37 2e 31 38 39 20 37 30 2e 31 38 32 34 20 34 37 2e 32 32 32 34 43 37 30 2e 30 32 38 33 20 34 37 2e 32 36 35 31 20 36 39 2e 38 38 32 32 20 34 Data Ascii: 3.1271 47.164 72.8692 47.1223 72.628 47.114C72.3704 47.1043 72.1168 47.0478 71.8793 46.9473C71.688 46.9473 71.5716 47.164 71.3386 47.1473C71.1057 47.1307 70.9144 46.839 70.6316 46.914C70.3488 46.989 70.3321 47.189 70.1824 47.2224C70.0283 47.2651 69.8822 4
2024-05-03 04:45:02 UTC	16384	IN	Data Raw: 33 35 36 35 43 37 31 2e 35 35 34 37 20 35 31 2e 34 33 31 35 20 37 31 2e 36 36 32 38 20 35 31 2e 33 35 36 35 20 37 31 2e 37 31 32 37 20 35 31 2e 33 35 36 35 56 35 31 2e 34 39 38 32 4c 37 31 2e 38 39 35 37 20 35 31 2e 35 34 38 32 43 37 31 2e 38 35 35 31 20 35 31 2e 36 36 34 37 20 37 31 2e 38 30 37 39 20 35 31 2e 37 37 38 38 20 37 31 2e 37 35 34 33 20 35 31 2e 38 38 39 39 43 37 31 2e 37 31 32 37 20 35 31 2e 39 39 38 32 20 37 31 2e 36 32 31 32 20 35 32 2e 30 39 38 33 20 37 31 2e 37 35 34 33 20 35 32 2e 31 34 38 33 43 37 31 2e 38 38 37 34 20 35 32 2e 31 39 38 33 20 37 31 2e 37 35 34 33 20 35 32 2e 32 35 36 36 20 37 31 2e 37 35 34 33 20 35 32 2e 33 31 35 43 37 31 2e 37 35 34 33 20 35 32 2e 33 37 33 33 20 37 31 2e 37 30 34 34 20 35 32 2e 34 34 20 37 31 2e 36 39 Data Ascii: 3565C71.5547 51.4315 71.6628 51.3565 71.7127 51.3565V51.4982L71.8957 51.5482C71.8551 51.6647 71.8079 51.7788 71.7543 51.8899C71.7127 51.9982 71.6212 52.0983 71.7543 52.1483C71.8874 52.1983 71.7543 52.2566 71.7543 52.315C71.7543 52.3733 71.7044 52.44 71.69
2024-05-03 04:45:02 UTC	16384	IN	Data Raw: 32 33 2e 31 38 38 20 32 35 2e 39 33 37 35 20 32 33 2e 32 30 32 33 43 32 35 2e 37 34 36 34 20 32 33 2e 31 39 30 38 20 32 35 2e 35 35 35 34 20 32 33 2e 32 32 35 31 20 32 35 2e 33 38 30 31 20 32 33 2e 33 30 32 33 43 32 35 2e 31 36 33 39 20 32 33 2e 33 38 35 36 20 32 34 2e 39 39 37 35 20 32 33 2e 32 33 35 36 20 32 34 2e 37 36 34 36 20 32 33 2e 33 36 30 36 43 32 34 2e 37 35 34 38 20 32 33 2e 34 31 30 35 20 32 34 2e 37 33 35 20 32 33 2e 34 35 37 38 20 32 34 2e 37 30 36 34 20 32 33 2e 34 39 39 38 43 32 34 2e 36 37 37 38 20 32 33 2e 35 34 31 38 20 32 34 2e 36 34 31 20 32 33 2e 35 37 37 35 20 32 34 2e 35 39 38 33 20 32 33 2e 36 30 34 37 43 32 34 2e 35 35 35 35 20 32 33 2e 36 33 32 20 32 34 2e 35 30 37 36 20 32 33 2e 36 35 30 33 20 32 34 2e 34 35 37 35 20 32 33 2e Data Ascii: 23.188 25.9375 23.2023C25.7464 23.1908 25.5554 23.2251 25.3801 23.3023C25.1639 23.3856 24.9975 23.2356 24.7646 23.3606C24.7548 23.4105 24.735 23.4578 24.7064 23.4998C24.6778 23.5418 24.641 23.5775 24.5983 23.6047C24.5555 23.632 24.5076 23.6503 24.4575 23.
2024-05-03 04:45:02 UTC	9356	IN	Data Raw: 31 2e 31 39 32 34 20 33 36 2e 30 37 30 38 20 32 31 2e 31 33 33 31 20 33 36 2e 30 32 37 36 20 32 31 2e 30 38 35 34 48 33 35 2e 39 36 31 31 4c 33 35 2e 38 36 31 32 20 32 31 2e 31 37 37 31 43 33 35 2e 37 31 39 38 20 32 31 2e 32 37 37 31 20 33 35 2e 36 36 39 39 20 32 31 2e 32 36 38 38 20 33 35 2e 36 35 33 33 20 32 31 2e 31 32 37 31 56 32 31 2e 30 31 30 34 43 33 35 2e 35 35 36 36 20 32 31 2e 30 32 33 20 33 35 2e 34 35 38 38 20 32 31 2e 30 32 33 20 33 35 2e 33 36 32 31 20 32 31 2e 30 31 30 34 43 33 35 2e 33 32 31 33 20 32 30 2e 39 39 33 32 20 33 35 2e 32 37 37 35 20 32 30 2e 39 38 34 34 20 33 35 2e 32 33 33 32 20 32 30 2e 39 38 34 34 43 33 35 2e 31 38 38 39 20 32 30 2e 39 38 34 34 20 33 35 2e 31 34 35 31 20 32 30 2e 39 39 33 32 20 33 35 2e 31 30 34 33 20 32 31 Data Ascii: 1.1924 36.0708 21.1331 36.0276 21.0854H35.9611L35.8612 21.1771C35.7198 21.2771 35.6699 21.2688 35.6533 21.1271V21.0104C35.5566 21.023 35.4588 21.023 35.3621 21.0104C35.3213 20.9932 35.2775 20.9844 35.2332 20.9844C35.1889 20.9844 35.1451 20.9932 35.1043 21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	49986	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:01 UTC	397	OUT	GET /static/universal-music-group-4923aecff27e9e6bc93fcea741271061.svg HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:02 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 16592 Connection: close Date: Fri, 03 May 2024 04:44:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-40d0" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab734ad5d81cc9d470b6176a05dd968e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JPNXB9vUSHJmBdHTNuuVBG2TpQY2KPtig0eJ5efbdXxnOsd3QzOaZA== Age: 10 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:02 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 30 20 31 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 22 20 6d 61 73 6b 2d 74 79 70 65 3d 22 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 31 30 22 20 79 3d 22 31 34 22 20 77 69 64 74 68 3d 22 32 30 33 22 20 68 65 69 67 68 74 3d 22 39 30 22 3e 0a 3c 72 65 63 74 20 78 3d 22 31 30 Data Ascii: <svg width="220" height="120" viewBox="0 0 220 120" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="10" y="14" width="203" height="90"><rect x="10
2024-05-03 04:45:02 UTC	208	IN	Data Raw: 4f 56 48 77 73 52 65 45 64 6f 7a 64 42 58 63 56 38 49 50 55 58 6a 62 36 57 33 75 6e 70 49 70 7a 78 41 72 4e 72 61 47 43 79 56 67 2f 2b 2f 4f 68 46 38 63 33 53 77 32 39 6c 68 4e 38 63 6e 37 67 75 51 6b 4d 31 35 32 63 4d 52 77 51 69 39 6e 2b 78 6b 55 70 50 6c 49 59 77 41 68 4c 4e 37 6c 6e 6e 30 6e 6c 47 38 35 59 70 70 54 70 69 56 67 33 35 47 52 2b 2f 67 35 75 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 69 41 43 5a 6a 41 35 41 6e 38 48 36 64 49 58 68 2b 43 4e 39 64 62 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 22 2f 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: OVHwsReEdozdBXcV8IPUXjb6W3unpIpzxArNraGCyVg/+/OhF8c3Sw29lhN8cn7guQkM152cMRwQi9n+xkUpPlIYwAhLN7lnn0nlG85YppTpiVg35GR+/g5uACZiACZiACZiACZiACZiACZiACZiACZiACZjA5An8H6dIXh+CN9dbAAAAAElFTkSuQmCC"/></defs></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	49988	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:01 UTC	388	OUT	GET /static/raspberry-pi-941b09e756b134ff119b7a893a3d900c.svg HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:02 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 17027 Connection: close Date: Thu, 02 May 2024 11:54:52 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-4283" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 07f7cebee7fc49278f602ad96f5f6790.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: wYlbehNUXowHXxJzVMdVtLGdGIFLzskCvy50zAJWzLQVMEIR_jNSfA== Age: 60610 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:02 UTC	15990	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 30 20 31 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 22 20 6d 61 73 6b 2d 74 79 70 65 3d 22 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 31 35 22 20 79 3d 22 33 31 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 36 32 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 20 33 31 48 36 34 2e 31 31 38 33 56 39 32 2e 37 34 36 32 48 31 35 56 33 31 5a 22 20 66 69 6c 6c 3d 22 23 32 45 32 45 32 45 22 2f Data Ascii: <svg width="260" height="120" viewBox="0 0 260 120" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="15" y="31" width="50" height="62"><path d="M15 31H64.1183V92.7462H15V31Z" fill="#2E2E2E"/
2024-05-03 04:45:02 UTC	1037	IN	Data Raw: 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 34 32 2e 32 32 32 20 35 31 2e 36 37 30 39 43 32 34 30 2e 37 31 39 20 35 31 2e 36 37 30 39 20 32 33 39 2e 34 39 39 20 35 30 2e 34 35 32 36 20 32 33 39 2e 34 39 39 20 34 38 2e 39 34 38 38 43 32 33 39 2e 34 39 39 20 34 37 2e 34 34 34 32 20 32 34 30 2e 37 31 39 20 34 36 2e 32 32 36 39 20 32 34 32 2e 32 32 32 20 34 36 2e 32 32 36 39 43 32 34 33 2e 37 32 37 20 34 36 2e 32 32 36 39 20 32 34 34 2e 39 34 36 20 34 37 2e 34 34 34 32 20 32 34 34 2e 39 34 36 20 34 38 2e 39 34 38 38 43 32 34 34 2e 39 34 36 20 35 30 2e 34 35 32 36 20 32 34 33 2e 37 32 37 20 35 31 2e 36 37 30 39 20 32 34 32 2e 32 32 32 20 35 31 2e 36 37 30 39 5a 4d 32 34 32 2e 32 32 32 Data Ascii: rule="evenodd" clip-rule="evenodd" d="M242.222 51.6709C240.719 51.6709 239.499 50.4526 239.499 48.9488C239.499 47.4442 240.719 46.2269 242.222 46.2269C243.727 46.2269 244.946 47.4442 244.946 48.9488C244.946 50.4526 243.727 51.6709 242.222 51.6709ZM242.222

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	49990	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:04 UTC	381	OUT	GET /static/stats-15e710f22b373350ce9729f5fb4b2383.svg HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:04 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 14814 Connection: close Date: Thu, 02 May 2024 11:54:53 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-39de" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 68f2eed06d7ecb02b863cacb0da2fc28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YUwyUKQh_OOqw-moQ8BilDBYPChuVjvsLjMQ1YdyO3OGXnu6RDt7qg== Age: 60611 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:04 UTC	12792	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 22 20 68 65 69 67 68 74 3d 22 33 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 2e 32 20 31 39 2e 36 48 33 63 2d 2e 36 2e 34 2d 2e 38 2e 33 2d 31 20 2e 33 48 32 76 2d 2e 32 2d 2e 32 63 2e 32 2d 2e 31 2e 33 2d 2e 32 2e 33 2d 2e 34 6c 2e 35 2d 2e 34 48 33 6c 2e 36 2d 2e 37 63 2e 37 2d 2e 37 20 31 2e 32 2d 31 2e 32 20 31 2e 39 2d 31 2e 33 6c 2e 31 2d 2e 32 2e 33 2d 2e 33 2e 35 2d 2e 35 20 32 2e 38 2d 32 2e 33 2e 37 2d 2e 34 2e 35 2d 2e 35 63 2e 32 20 30 20 2e 33 2d Data Ascii: <svg width="34" height="34" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M3.2 19.6H3c-.6.4-.8.3-1 .3H2v-.2-.2c.2-.1.3-.2.3-.4l.5-.4H3l.6-.7c.7-.7 1.2-1.2 1.9-1.3l.1-.2.3-.3.5-.5 2.8-2.3.7-.4.5-.5c.2 0 .3-
2024-05-03 04:45:04 UTC	2022	IN	Data Raw: 33 7a 6d 2d 2e 31 20 32 6c 2e 31 2d 32 68 2d 2e 33 63 2d 2e 32 2e 37 2d 2e 32 20 31 2e 33 2d 2e 31 20 32 68 2e 33 7a 6d 30 20 31 2e 33 76 2d 31 2e 32 48 31 31 76 31 2e 32 68 2e 33 7a 6d 2d 2e 33 20 30 68 2e 33 2d 2e 33 7a 6d 2e 33 20 30 48 31 31 68 2e 33 7a 6d 2d 2e 33 20 30 68 2e 33 2d 2e 33 7a 6d 2e 34 20 34 2e 36 61 32 33 20 32 33 20 30 20 30 30 2d 2e 31 2d 34 2e 36 48 31 31 63 2e 32 20 31 2e 35 2e 32 20 33 20 2e 31 20 34 2e 36 68 2e 33 7a 6d 30 20 2e 37 76 2d 2e 37 68 2d 2e 33 76 2e 37 68 2e 33 7a 6d 2d 32 2e 34 2e 32 68 32 2e 33 76 2d 2e 33 48 39 76 2e 33 7a 6d 30 20 30 68 2e 31 6c 2d 2e 32 2d 2e 33 76 2e 33 7a 6d 2d 2e 32 20 30 68 2e 31 76 2d 2e 33 68 2d 2e 32 6c 2e 31 2e 34 7a 6d 2d 2e 32 2d 2e 34 76 2e 33 68 2e 33 76 2d 2e 33 68 2d 2e 33 7a 6d 30 Data Ascii: 3zm-.1 2l.1-2h-.3c-.2.7-.2 1.3-.1 2h.3zm0 1.3v-1.2H11v1.2h.3zm-.3 0h.3-.3zm.3 0H11h.3zm-.3 0h.3-.3zm.4 4.6a23 23 0 00-.1-4.6H11c.2 1.5.2 3 .1 4.6h.3zm0 .7v-.7h-.3v.7h.3zm-2.4.2h2.3v-.3H9v.3zm0 0h.1l-.2-.3v.3zm-.2 0h.1v-.3h-.2l.1.4zm-.2-.4v.3h.3v-.3h-.3zm0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	49993	138.199.40.58	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:04 UTC	551	OUT	GET /cookie_solution/iubenda_cs/1.60.0/core-en.js HTTP/1.1 Host: cdn.iubenda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:04 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:45:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-NY1-885 CDN-PullZone: 954456 CDN-Uid: a7bd0c3f-43db-400a-80e2-073f933f3c99 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, proxy-revalidate, max-age=3600 ETag: W/"66335752-1389c" Expires: Thu, 02 May 2024 10:54:07 GMT Last-Modified: Thu, 02 May 2024 09:05:22 GMT P3P: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml" CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 05/02/2024 09:54:07 CDN-EdgeStorageId: 885 CDN-Status: 200 CDN-RequestId: ed4419fd5a30c6979efa36eb4651723a CDN-Cache: HIT
2024-05-03 04:45:04 UTC	15593	IN	Data Raw: 61 38 32 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 69 3d 69 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 69 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 Data Ascii: a820!function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}fu
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 7c 6c 62 2d 73 70 69 64 65 72 7c 6c 69 62 77 77 77 7c 4c 69 6e 67 75 65 65 20 42 6f 74 7c 6c 69 6e 6b 64 65 78 7c 6c 69 70 70 65 72 68 65 79 7c 4c 69 70 70 65 72 68 65 79 20 53 45 4f 20 53 65 72 76 69 63 65 7c 4c 69 76 65 6c 61 70 62 6f 74 7c 6c 73 73 62 6f 74 7c 6c 73 73 72 6f 63 6b 65 74 63 72 61 77 6c 65 72 7c 6c 74 78 37 31 7c 4d 61 69 6c 2e 52 55 5f 42 6f 74 7c 4d 61 75 69 42 6f 74 7c 4d 65 64 69 61 70 61 72 74 6e 65 72 73 2d 47 6f 6f 67 6c 65 7c 4d 65 67 61 49 6e 64 65 78 7c 6d 65 6d 6f 72 79 62 6f 74 7c 4d 69 63 72 6f 73 6f 66 74 50 72 65 76 69 65 77 7c 4d 4a 31 32 62 6f 74 7c 6d 6c 62 6f 74 7c 6d 73 6e 62 6f 74 7c 6d 73 72 62 6f 74 7c 4e 65 72 64 42 79 4e 61 74 75 72 65 2e 42 6f 74 7c 6e 65 72 64 79 62 6f 74 7c 6e 65 74 72 65 73 65 61 72 63 68 73 Data Ascii: \|lb-spider\|libwww\|Linguee Bot\|linkdex\|lipperhey\|Lipperhey SEO Service\|Livelapbot\|lssbot\|lssrocketcrawler\|ltx71\|Mail.RU_Bot\|MauiBot\|Mediapartners-Google\|MegaIndex\|memorybot\|MicrosoftPreview\|MJ12bot\|mlbot\|msnbot\|msrbot\|NerdByNature.Bot\|nerdybot\|netresearchs
2024-05-03 04:45:04 UTC	11071	IN	Data Raw: 79 3a 21 31 2c 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 43 61 70 74 69 6f 6e 3a 6e 75 6c 6c 2c 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 43 6f 6c 6f 72 3a 6e 75 6c 6c 2c 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 43 61 70 74 69 6f 6e 43 6f 6c 6f 72 3a 6e 75 6c 6c 2c 63 6c 6f 73 65 42 75 74 74 6f 6e 44 69 73 70 6c 61 79 3a 21 30 2c 63 6c 6f 73 65 42 75 74 74 6f 6e 43 61 70 74 69 6f 6e 3a 22 26 74 69 6d 65 73 3b 22 2c 63 6c 6f 73 65 42 75 74 74 6f 6e 52 65 6a 65 63 74 73 3a 21 31 2c 6c 6f 67 6f 3a 22 22 2c 62 72 61 6e 64 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 30 30 30 22 2c 62 72 61 6e 64 54 65 78 74 Data Ascii: y:!1,continueWithoutAcceptingButtonCaption:null,continueWithoutAcceptingButtonColor:null,continueWithoutAcceptingButtonCaptionColor:null,closeButtonDisplay:!0,closeButtonCaption:"×",closeButtonRejects:!1,logo:"",brandBackgroundColor:"#000",brandText
2024-05-03 04:45:04 UTC	5313	IN	Data Raw: 31 36 31 64 38 0d 0a 61 74 20 61 6e 79 20 74 69 6d 65 2e 5b 2f 69 66 5d 5b 69 66 20 75 73 70 72 41 70 70 6c 69 65 73 20 61 6e 64 20 68 61 73 53 65 6e 73 69 74 69 76 65 44 61 74 61 5d 5b 69 66 20 67 64 70 72 41 70 70 6c 69 65 73 20 6f 72 20 6c 67 70 64 41 70 70 6c 69 65 73 20 6f 72 20 66 61 64 70 41 70 70 6c 69 65 73 5d 5c 6e 3c 62 3e 4e 6f 74 65 20 66 6f 72 20 55 53 20 63 6f 6e 73 75 6d 65 72 73 3c 2f 62 3e 3a 20 79 5b 2f 69 66 5d 5b 69 66 20 6e 6f 74 20 67 64 70 72 41 70 70 6c 69 65 73 20 61 6e 64 20 6e 6f 74 20 6c 67 70 64 41 70 70 6c 69 65 73 20 61 6e 64 20 6e 6f 74 20 66 61 64 70 41 70 70 6c 69 65 73 5d 5c 6e 59 5b 2f 69 66 5d 6f 75 20 63 61 6e 20 67 69 76 65 20 6f 72 20 64 65 6e 79 20 79 6f 75 72 20 63 6f 6e 73 65 6e 74 20 74 6f 20 74 68 65 20 70 72 Data Ascii: 161d8at any time.[/if][if usprApplies and hasSensitiveData][if gdprApplies or lgpdApplies or fadpApplies]\n<b>Note for US consumers</b>: y[/if][if not gdprApplies and not lgpdApplies and not fadpApplies]\nY[/if]ou can give or deny your consent to the pr
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 74 61 62 6c 65 2d 6c 61 79 6f 75 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a Data Ascii: table-layout:auto!important;text-align:left!important;text-indent:0!important;text-transform:none!important;top:auto!important;unicode-bidi:normal!important;vertical-align:baseline!important;visibility:inherit!important;white-space:normal!important;width:
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 34 30 70 78 29 7b 23 69 75 62 65 6e 64 61 2d 63 73 2d 62 61 6e 6e 65 72 20 2e 69 75 62 65 6e 64 61 2d 63 73 2d 6f 70 74 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 33 39 70 78 29 7b 23 69 75 62 65 6e 64 61 2d 63 73 2d 62 61 6e 6e 65 72 20 2e 69 75 62 65 6e 64 61 2d 63 73 2d 6f 70 74 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 65 78 74 Data Ascii: ia (min-width:640px){#iubenda-cs-banner .iubenda-cs-opt-group button:not(:last-of-type){margin-right:8px!important}}@media (max-width:639px){#iubenda-cs-banner .iubenda-cs-opt-group button{padding:8px 24px!important;width:100%!important;display:block;text
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 6f 64 64 29 7e 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 62 6f 78 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 23 69 75 62 65 6e 64 61 2d 63 73 2d 62 61 6e 6e 65 72 2e 69 75 62 65 6e 64 61 2d 63 73 2d 64 65 66 61 75 6c 74 2d 66 6c 6f 61 74 69 6e 67 2e 69 75 62 65 6e 64 61 2d 63 73 2d 63 65 6e 74 65 72 2e 69 75 62 65 6e 64 61 2d 63 73 2d 62 6f 74 74 6f 6d 20 2e 69 75 62 65 6e 64 61 2d 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 74 72 6f 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 62 6f 78 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 6f 64 64 29 7e 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 74 72 6f 6c Data Ascii: :nth-last-child(odd)~.granular-control-checkbox:last-child,#iubenda-cs-banner.iubenda-cs-default-floating.iubenda-cs-center.iubenda-cs-bottom .iubenda-granular-controls-container .granular-control-checkbox:first-child:nth-last-child(odd)~.granular-control
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 61 74 5d 5b 64 61 74 61 2d 74 70 2d 66 6c 6f 61 74 3d 62 6f 74 74 6f 6d 2d 6c 65 66 74 5d 5b 64 61 74 61 2d 74 70 2d 61 6e 63 68 6f 72 65 64 5d 2c 2e 69 75 62 65 6e 64 61 2d 74 70 2d 61 6c 65 72 74 2d 62 74 6e 5b 64 61 74 61 2d 74 70 2d 66 6c 6f 61 74 5d 5b 64 61 74 61 2d 74 70 2d 66 6c 6f 61 74 3d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 5d 5b 64 61 74 61 2d 74 70 2d 61 6e 63 68 6f 72 65 64 5d 2c 2e 69 75 62 65 6e 64 61 2d 74 70 2d 62 74 6e 5b 64 61 74 61 2d 74 70 2d 66 6c 6f 61 74 5d 5b 64 61 74 61 2d 74 70 2d 66 6c 6f 61 74 3d 62 6f 74 74 6f 6d 2d 6c 65 66 74 5d 5b 64 61 74 61 2d 74 70 2d 61 6e 63 68 6f 72 65 64 5d 2c 2e 69 75 62 65 6e 64 61 2d 74 70 2d 62 74 6e 5b 64 61 74 61 2d 74 70 2d 66 6c 6f 61 74 5d 5b 64 61 74 61 2d 74 70 2d 66 6c 6f 61 74 3d 62 6f Data Ascii: at][data-tp-float=bottom-left][data-tp-anchored],.iubenda-tp-alert-btn[data-tp-float][data-tp-float=bottom-right][data-tp-anchored],.iubenda-tp-btn[data-tp-float][data-tp-float=bottom-left][data-tp-anchored],.iubenda-tp-btn[data-tp-float][data-tp-float=bo
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 65 2d 74 65 78 74 22 2c 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 43 72 65 61 74 65 64 20 77 69 74 68 5c 6e 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 27 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6c 69 6e 6b 2c 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 20 74 69 74 6c 65 3d 22 27 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6c 69 6e 6b 54 69 74 6c 65 2c 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 69 75 62 65 6e 64 61 5c 6e 20 20 20 20 20 20 20 20 3c 2f 61 3e 27 29 2c 65 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 42 61 64 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d Data Ascii: e-text",e.innerHTML='Created with\n <a href="'.concat(this.link,'" target="_blank" rel="noopener" title="').concat(this.linkTitle,'">\n iubenda\n </a>'),e}},{key:"getBadge",value:function(){var e=arguments.length>0&&void 0!==argum
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 74 68 69 73 2e 62 61 6e 6e 65 72 43 6f 6e 74 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2c 74 3d 74 68 69 73 2e 62 61 6e 6e 65 72 43 6f 6e 74 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 2b 74 68 69 73 2e 62 61 6e 6e 65 72 43 6f 6e 74 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 6e 3d 4d 61 74 68 2e 61 62 73 28 65 2d 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 61 6e 6e 65 72 43 6f 6e 74 65 6e 74 26 26 6e 3c 3d 31 30 7d 7d 2c 7b 6b 65 79 3a 22 69 73 42 61 6e 6e 65 72 53 63 72 6f 6c 6c 61 62 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 53 69 6e 67 6c 65 50 61 67 65 48 65 69 67 68 74 28 29 26 26 74 68 69 73 2e 62 61 6e 6e 65 72 43 6f 6e 74 65 6e 74 2e 73 63 72 6f 6c Data Ascii: this.bannerContent.scrollHeight,t=this.bannerContent.scrollTop+this.bannerContent.clientHeight,n=Math.abs(e-t);return this.bannerContent&&n<=10}},{key:"isBannerScrollable",value:function(){return!!this.calculateSinglePageHeight()&&this.bannerContent.scrol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	49989	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:04 UTC	381	OUT	GET /static/stats-a6d9e893096b5c669d8cc5160be1482e.svg HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:04 UTC	793	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 23058 Connection: close Date: Fri, 03 May 2024 04:44:55 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-5a12" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0ac640943c2918c03a0350f4e8b083a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JbieoDCxfhPn7WKjfVlMFjiGTtCj7RinzKIl3BKFx6ptLr7_8TYvRA== Age: 9 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 31 37 22 20 68 65 69 67 68 74 3d 22 34 38 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 72 65 63 74 20 78 3d 22 2e 38 22 20 79 3d 22 2e 38 22 20 77 69 64 74 68 3d 22 37 31 35 2e 35 22 20 68 65 69 67 68 74 3d 22 34 38 34 2e 35 22 20 72 78 3d 22 31 35 2e 33 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 3d 22 23 46 32 46 32 46 32 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 2e 38 20 31 36 43 2e 38 20 37 2e 36 20 37 2e 35 2e 37 20 31 36 20 2e 37 68 36 38 35 63 38 2e 34 20 30 20 31 35 2e 33 20 36 2e 39 20 31 35 2e 33 20 31 35 2e 33 76 32 33 2e 33 48 2e Data Ascii: <svg width="717" height="486" fill="none" xmlns="http://www.w3.org/2000/svg"><rect x=".8" y=".8" width="715.5" height="484.5" rx="15.3" fill="#fff" stroke="#F2F2F2" stroke-width="1.5"/><path d="M.8 16C.8 7.6 7.5.7 16 .7h685c8.4 0 15.3 6.9 15.3 15.3v23.3H.
2024-05-03 04:45:04 UTC	6674	IN	Data Raw: 7a 6d 30 20 32 2e 32 63 32 2e 35 20 30 20 34 2e 33 2d 31 2e 38 20 34 2e 33 2d 34 2e 33 20 30 2d 32 2e 34 2d 31 2e 39 2d 34 2e 31 2d 34 2e 33 2d 34 2e 31 61 34 2e 32 20 34 2e 32 20 30 20 30 30 2d 34 2e 33 20 34 2e 32 63 30 20 32 2e 34 20 31 2e 37 20 34 2e 32 20 34 2e 33 20 34 2e 32 7a 6d 2d 32 20 38 2e 39 68 32 2e 31 6c 31 31 2e 34 2d 31 37 2e 32 68 2d 32 2e 31 4c 33 31 39 2e 39 20 31 35 33 7a 6d 31 31 2e 35 2d 32 63 2d 31 20 30 2d 31 2e 37 2d 2e 36 2d 31 2e 37 2d 32 20 30 2d 31 2e 33 2e 37 2d 32 20 31 2e 37 2d 32 73 31 2e 36 2e 37 20 31 2e 36 20 32 2d 2e 36 20 32 2d 31 2e 36 20 32 7a 6d 30 20 32 2e 33 63 32 2e 35 20 30 20 34 2e 33 2d 31 2e 39 20 34 2e 33 2d 34 2e 33 20 30 2d 32 2e 35 2d 32 2d 34 2e 32 2d 34 2e 33 2d 34 2e 32 61 34 2e 32 20 34 2e 32 20 30 Data Ascii: zm0 2.2c2.5 0 4.3-1.8 4.3-4.3 0-2.4-1.9-4.1-4.3-4.1a4.2 4.2 0 00-4.3 4.2c0 2.4 1.7 4.2 4.3 4.2zm-2 8.9h2.1l11.4-17.2h-2.1L319.9 153zm11.5-2c-1 0-1.7-.6-1.7-2 0-1.3.7-2 1.7-2s1.6.7 1.6 2-.6 2-1.6 2zm0 2.3c2.5 0 4.3-1.9 4.3-4.3 0-2.5-2-4.2-4.3-4.2a4.2 4.2 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	49991	3.94.39.175	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:04 UTC	349	OUT	GET /changelog HTTP/1.1 Host: profile.short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:04 UTC	672	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:45:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 4715 Connection: close content-security-policy: default-src 'none'; Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer strict-transport-security: max-age=63072000; includeSubDomains; x-content-type-options: nosniff X-DNS-Prefetch-Control: off X-Download-Options: noopen x-frame-options: DENY X-Permitted-Cross-Domain-Policies: none x-xss-protection: 1; mode=block vary: Origin x-ratelimit-limit: 1000 x-ratelimit-remaining: 999 x-ratelimit-reset: 60
2024-05-03 04:45:04 UTC	4715	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 36 35 66 63 39 34 63 39 62 64 30 64 37 66 30 35 33 30 65 33 62 66 30 33 22 2c 22 63 72 65 61 74 65 64 22 3a 22 32 30 32 34 2d 30 33 2d 32 31 54 32 30 3a 31 32 3a 35 37 2e 38 32 38 5a 22 2c 22 6c 61 62 65 6c 73 22 3a 5b 5d 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 31 54 32 30 3a 31 38 3a 35 39 2e 32 33 33 5a 22 2c 22 74 69 74 6c 65 22 3a 22 50 75 62 6c 69 63 20 51 52 20 63 6f 64 65 20 67 65 6e 65 72 61 74 6f 72 20 26 20 55 54 4d 20 62 75 69 6c 64 65 72 22 2c 22 74 79 70 65 73 22 3a 5b 22 6e 65 77 22 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 66 65 65 64 62 61 63 6b 2e 73 68 6f 72 74 2e 69 6f 2f 63 68 61 6e 67 65 6c 6f 67 2f 70 75 62 6c 69 63 2d 71 72 2d 63 6f 64 65 2d 67 65 6e 65 72 61 74 6f Data Ascii: [{"id":"65fc94c9bd0d7f0530e3bf03","created":"2024-03-21T20:12:57.828Z","labels":[],"publishedAt":"2024-03-21T20:18:59.233Z","title":"Public QR code generator & UTM builder","types":["new"],"url":"https://feedback.short.io/changelog/public-qr-code-generato

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	49992	52.22.196.150	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:04 UTC	594	OUT	POST /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 482 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://short.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:04 UTC	482	OUT	Data Raw: 61 70 70 5f 69 64 3d 72 6d 66 39 35 75 37 68 26 76 3d 33 26 67 3d 33 63 66 31 39 30 39 39 63 61 63 64 63 32 31 37 61 66 35 31 35 30 39 63 62 66 36 34 63 30 65 39 32 38 65 34 61 61 34 66 26 73 3d 39 64 64 38 39 30 36 64 2d 33 39 39 64 2d 34 32 38 31 2d 39 66 30 35 2d 66 66 37 61 65 34 31 63 30 62 64 35 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 35 63 38 36 39 64 62 64 31 38 64 32 33 37 62 33 26 69 6e 74 65 72 6e 61 6c 3d 25 37 42 25 37 44 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 66 61 6c 73 65 26 70 61 67 65 5f 74 69 74 6c 65 3d 53 68 6f 72 74 2e 69 6f 25 32 30 25 45 32 25 38 30 25 39 Data Ascii: app_id=rmf95u7h&v=3&g=3cf19099cacdc217af51509cbf64c0e928e4aa4f&s=9dd8906d-399d-4281-9f05-ff7ae41c0bd5&r=&platform=web&installation_type=js-snippet&Idempotency-Key=5c869dbd18d237b3&internal=%7B%7D&is_intersection_booted=false&page_title=Short.io%20%E2%80%9
2024-05-03 04:45:04 UTC	959	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:45:04 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: max-age=0, private, must-revalidate Access-Control-Allow-Origin: https://short.io Vary: Accept,Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: a046a22c31d68421caa53d5174a190f1669f1db1 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 000deg53rilamtaa0vv0 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS ETag: W/"a7ff796b7e22ed463680e289b94399aa" X-Runtime: 0.235768 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-01a6170eca229cbe6
2024-05-03 04:45:04 UTC	4489	IN	Data Raw: 31 31 38 31 0d 0a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 53 68 6f 72 74 2e 69 6f 22 2c 22 61 75 64 69 6f 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 77 5f 70 6f 77 65 72 65 64 5f 62 79 22 3a 74 72 75 65 2c 22 74 65 61 6d 5f 69 6e 74 72 6f 22 3a 22 41 73 6b 20 75 73 20 61 6e 79 74 68 69 6e 67 2c 20 6f 72 20 73 68 61 72 65 20 79 6f 75 72 20 66 65 65 64 62 61 63 6b 2e 22 2c 22 74 65 61 6d 5f 67 72 65 65 74 69 6e 67 22 3a 22 48 69 20 74 68 65 72 65 20 f0 9f 91 8b 22 2c 22 6d 65 73 73 65 6e 67 65 72 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 62 61 63 6b 67 72 6f 75 6e 64 2d 31 22 2c 22 65 78 70 65 63 74 65 64 5f 72 65 73 70 6f 6e 73 65 5f 64 65 6c 61 79 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 5f 6b 65 79 22 3a 22 65 78 70 65 63 74 65 64 5f 72 Data Ascii: 1181{"app":{"name":"Short.io","audio_enabled":true,"show_powered_by":true,"team_intro":"Ask us anything, or share your feedback.","team_greeting":"Hi there ","messenger_background":"background-1","expected_response_delay_translation_key":"expected_r
2024-05-03 04:45:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	49996	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:04 UTC	384	OUT	GET /static/omelette-a8254318025275264ddf581532bf02ce.png HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:04 UTC	793	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 90652 Connection: close Date: Fri, 03 May 2024 04:44:56 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-1621c" Expires: Tue, 02 Jul 2024 04:44:56 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 241db89625f6ef70a00b0e19e0cfc332.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: iLPPUqyVDuVXdpeRTEpUf2eUmt2uGmxlZBiqVkVb9zjMLfy708_t2w== Age: 8 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 02 d0 08 06 00 00 00 b9 57 47 9c 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 61 b1 49 44 41 54 78 01 ec 9d 07 60 5c d5 95 f7 cf 7d 23 c9 dd 96 dc 00 83 6d 19 d3 71 37 35 21 60 03 29 90 d0 e3 6c 12 e2 02 24 6c 7a db 6c df 4d 48 b6 7d 9b 7c bb 69 5b be cd ee 86 e2 64 53 48 82 21 85 4d 42 31 a1 24 01 e3 4e 77 91 6d 3a 2e b2 dc a5 99 77 be ff 39 f7 8d 34 92 65 5b b2 47 c5 f6 ff 07 cf af dd 57 66 34 ef de ff 3b f7 dc 73 44 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 Data Ascii: PNGIHDRWGpHYs%%IR$sRGBgAMAaaIDATx`\}#mq75!`)l$lzlMH}\|i[dSH!MB1$Nwm:.w94e[GWf4;sD!B!B!B!B!B!B!B!B!B!B!B
2024-05-03 04:45:04 UTC	16384	IN	Data Raw: f1 02 f4 69 99 b8 f6 d1 10 16 e6 85 f4 08 6c 54 08 39 cc b1 81 24 f2 d2 cd fd e4 a5 3d e3 a4 af 9a 05 e9 9d d8 74 b2 44 ff b9 c4 05 a7 a0 f1 53 4d 4a 0e 5a 8a 6d b7 61 e1 d3 68 40 d7 c2 ca 71 a7 a4 85 67 d0 29 55 27 49 e1 6a 54 ce 9f 92 ee 1c 24 18 dd 47 26 e1 9e 5e 88 f7 19 aa b0 f1 15 6c 9b e6 fe cf 51 c0 5b 5c db 13 b2 4f 9c 77 71 9d ea 3a 2c 8f c5 be d7 30 1d 93 9d 2d 44 f7 0d 3f 0f eb 38 42 0e 88 c7 53 37 21 66 31 a2 5f f3 4c 79 ee 3a e5 6e b6 a9 bf d0 fa d8 02 8d 29 b1 dd 5f 57 e3 8b 78 c0 b1 ca e7 ac cb 08 ee 8b de e8 7f 13 13 d4 ea 29 c1 21 a2 f5 7e c9 25 f7 87 09 b7 fd 54 17 cf 1a 11 a6 dd f9 86 90 6e 85 3f 7a 42 0e 73 74 d9 bc f7 4a 48 47 e1 71 9e e0 b1 43 e3 a0 79 13 cb df c3 74 7d 3b 47 58 83 b7 ce a3 5a 04 fd 1a c4 f3 0c 88 e8 3b a4 29 0d 52 Data Ascii: ilT9$=tDSMJZmah@qg)U'IjT$G&^lQ[\Owq:,0-D?8BS7!f1_Ly:n)_Wx)!~%Tn?zBstJHGqCyt};GXZ;)R
2024-05-03 04:45:05 UTC	16384	IN	Data Raw: 30 40 14 db 60 7d 1f ef f3 b5 2c 0b e1 52 ac 35 ba db 62 8c d8 51 e3 ae 1e 41 6d e0 fd aa 30 f5 36 8a e7 6e 86 02 fa 68 44 c3 5b f0 ef 1f e1 af 7f 2c e6 7d f0 20 be 1d 1b ad 8b a8 b4 bb 69 3b ca fd 54 d2 64 81 e4 f4 ab 52 3e f1 6c 83 2d ec 77 f7 a0 88 0f 18 ec 8b 6b db e0 c1 73 62 50 78 7d 50 92 e4 cb 92 58 4c 4c 6d c2 3d 5c 87 ca 64 70 0c 23 6f 21 f4 bc 02 31 df 32 fe 76 09 21 84 f4 06 b6 c4 c1 ec 68 4f b5 18 0b 5a 76 77 e8 48 1b 3c 9f 7a 5b 38 3e 3b 76 5d 36 90 d0 06 0b 16 d0 ee 59 34 2c 73 df f8 bd bb 2c 86 d4 ce be ca b7 89 3c ef 83 0d ad ad 26 dd 0e 45 c8 51 86 be 70 99 0d 10 fc b0 58 40 76 0d 2b b0 65 61 36 00 a2 14 7b c3 7d 12 5b 9f 90 ca 74 36 1e e8 5a 29 17 fe 4e 6e 6f d0 72 b1 0b e6 d4 46 10 87 9f e3 1e 5e c6 dc 32 08 5e 88 97 6d 08 fc 64 34 ee Data Ascii: 0@`},R5bQAm06nhD[,} i;TdR>l-wksbPx}PXLLm=\dp#o!12v!hOZvwH<z[8>;v]6Y4,s,<&EQpX@v+ea6{}[t6Z)NnorF^2^md4
2024-05-03 04:45:05 UTC	16384	IN	Data Raw: 29 b7 bb 12 2f 40 f9 d9 8a 61 9b 53 b1 ef d3 e6 63 15 49 1a 8b be c1 df 4a 7b a9 a2 d6 e9 32 72 1c c7 71 1c e7 58 b3 99 2c f1 59 b3 91 06 f5 b6 29 07 4e 56 34 c6 b3 68 e8 5c 0d 8f 3b 35 39 f6 0d fc 33 8a a2 74 19 9f 73 cf 6e 2e 9f bb 85 9c 4e 87 27 f9 c8 51 bd 6b 0f 1e ec 5d 78 d0 cb d0 33 dc 8c 97 e6 a3 6f ce f7 73 01 04 f2 2e dc e3 72 ca f2 17 50 76 36 e1 5e 13 93 00 e9 05 28 30 cb 21 96 8b 21 94 97 60 1d bd 51 88 6c 32 b1 ae f1 3f 76 ba 05 da 71 1c c7 71 8e 25 b2 1e 6d f5 76 ac bc 85 b6 78 3d 35 9b 06 6d 6c 1a 87 a3 6f b2 8a 36 5e 8d 64 96 d9 f8 14 2c f0 7e b2 3c 68 6b 09 06 37 a7 d3 e2 02 3a 47 8f de e7 e1 db 28 c2 83 be 1b 42 78 04 c5 f1 a5 cd ba 9e 69 02 0a c3 58 ca b9 65 08 7d 10 5f af 5a bc 47 26 d1 38 fa 5a 21 12 f9 16 ee ff 0c 8e 0f 20 8b 35 6d Data Ascii: )/@aScIJ{2rqX,Y)NV4h\;593tsn.N'Qk]x3os.rPv6^(0!!`Ql2?vqq%mvx=5mlo6^d,~<hk7:G(BxiXe}_ZG&8Z! 5m
2024-05-03 04:45:05 UTC	6056	IN	Data Raw: ea 44 c9 9d 89 40 7f 8d f2 7b 03 a2 7f 53 3c 15 6b 1f c5 c6 59 ad fe 1b 1d c7 71 9c 63 8c 55 db 83 51 df 9f 43 ad 47 60 48 99 87 f6 6f 19 9a 83 65 58 5f 80 5d 1a 8e f5 2d 33 30 a9 eb 46 1c 3d 4f 71 e1 87 b9 7c ee 16 59 31 ed 34 59 76 ed 90 70 69 aa 92 7a 14 cf a5 9a 5d f7 a0 ed fc 3b 8d ee c4 63 ee d9 4d 8e 73 94 70 01 dd 51 48 c7 8f db fc 39 91 af 51 54 b3 8b 4a e2 79 d4 a3 e0 1f 31 64 b5 0d af e7 51 71 bc 46 ad 22 2e 44 65 74 75 bd f8 d2 9c 8b cf 6c 99 02 f3 f6 f3 e7 a9 45 c8 0e 3c 51 1f 84 45 fd 24 4a cb 65 21 7d ab 70 48 40 a8 62 9a 75 36 74 9c bc c9 9d 94 8a 7e 85 bf ad 3f f6 a8 d5 bd 82 98 5d 40 3b 8e e3 74 2a b8 6d 27 7e 73 3c 8a 27 cc fd 23 45 f2 0c 84 f0 7a 18 7f 5e 47 db f2 30 da 91 bf c3 f6 43 74 5c cd 46 da d7 7f 96 9d bb ab 60 23 97 df b3 d1 Data Ascii: D@{S<kYqcUQCG`HoeX_]-30F=Oq\|Y14Yvpiz];cMspQH9QTJy1dQqF".DetulE<QE$Je!}pH@bu6t~?]@;t*m'~s<'#Ez^G0Ct\F`#
2024-05-03 04:45:05 UTC	16384	IN	Data Raw: 3a 1c 99 4c 28 74 1c c7 71 ea a1 91 31 d8 2c d0 6d a9 03 2a d1 8e dc 80 7a 78 04 ee 7d 3d c6 01 2b a9 20 db 87 27 dd bd 8c a7 cc d3 70 a9 8f 52 75 f6 1b 94 c9 be 89 76 67 39 14 08 2c ce 18 29 64 4b 7c 35 d5 dc 3e 58 c3 d9 c5 cf 9b b1 c7 71 3a 30 2e a0 bb 38 b2 e8 e6 82 46 0f a6 f6 3f 45 12 ff 04 15 d8 bf a2 a2 7b 10 d6 82 5f 42 84 8e c5 55 7b 51 99 55 a0 52 3b 11 15 9a 26 1e 51 b7 8f a9 14 42 c1 ed a4 f6 a1 ac 6e 55 fa 27 59 15 9f c0 e7 53 97 95 d1 3a 83 10 eb a3 f1 99 3f 41 8e e3 38 4e e3 88 a8 b1 a1 06 f5 3e ea f6 36 d5 01 6a 4d d6 14 dc 1a d9 03 a3 9d d1 7c ca d0 30 59 31 5d e7 d3 10 8f 9f fd 24 4f 9e fb 0a 55 47 c5 94 4d dd 8e 73 22 8b d9 af 09 bd 62 18 68 d8 7c ae 4b 28 5b f0 10 39 4e 07 c7 05 74 17 87 a7 dc 5e d3 e8 b1 b1 f3 aa b9 7c ee c3 58 fb 3c Data Ascii: :L(tq1,m*zx}=+ 'pRuvg9,)dK\|5>Xq:0.8F?E{_BU{QUR;&QBnU'YS:?A8N>6jM\|0Y1]$OUGMs"bh\|K([9Nt^\|X<
2024-05-03 04:45:05 UTC	2676	IN	Data Raw: 8d 52 a0 7e da 3b c3 67 b4 18 bb 73 4d 84 e7 a2 89 18 6a 04 8f e2 20 ac 6b c5 7d c6 fe be 58 76 5b 6c e5 70 5f 74 14 f0 79 62 9d 28 a8 f1 6d 35 7e 76 b4 06 9f 73 3a 3e c3 33 26 f0 ab b3 7b 48 52 6f 50 31 cd a3 6a c6 77 50 58 48 07 e3 05 74 52 4f a2 9f 0d da 49 57 6f ac 17 1f 5b 56 dd 30 88 76 67 06 42 10 c7 3c 7a ee 6b b6 4f 93 e3 60 98 5e 96 4d eb c9 e5 73 f7 d9 89 55 bc 11 dd 81 4a 1e 71 c7 33 10 58 7f a1 b2 b2 34 8f b8 cb 27 fa 75 41 92 d1 a1 7f 94 a5 d3 57 c3 3a fb 4f 78 c6 4a 48 23 55 04 37 22 49 46 6d a2 e4 f4 12 fb 57 3b a9 51 4a 3b 6e b7 92 8e 14 85 3b 69 f1 d4 78 cb 33 b0 eb 70 f7 0d 8b ff cd 2a 84 cf 33 3f eb 74 c1 ed 94 85 e5 5b a2 6a 4a c9 f5 d4 b8 1b c7 02 7b 0f a1 ef e0 f3 9d 82 92 b2 80 8a 0a 76 51 36 bb 1b bb d5 ff 59 b3 99 a6 2d 8c 9d 25 Data Ascii: R~;gsMj k}Xv[lp_tyb(m5~vs:>3&{HRoP1jwPXHtROIWo[V0vgB<zkO`^MsUJq3X4'uAW:OxJH#U7"IFmW;QJ;n;ix3p*3?t[jJ{vQ6Y-%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	49995	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:04 UTC	650	OUT	GET /page-data/integrations/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://short.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:04 UTC	762	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 252 Connection: close Date: Fri, 03 May 2024 04:45:04 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT ETag: "662a30ac-fc" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 82139f26335f87e45d45c08d5208817a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Hk_qmnyfMWAwLp6zNsQAMihFRlQdh6kZcKDZtuvDGKb9f-f9v76JDw== X-XSS-Protection: 1; mode=block
2024-05-03 04:45:04 UTC	252	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 69 6e 74 65 67 72 61 74 69 6f 6e 73 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 32 33 35 35 37 35 30 37 39 37 22 2c 22 33 39 33 34 39 35 33 34 30 31 22 5d 2c 22 73 6c 69 63 65 73 4d 61 70 22 3a 7b 7d 7d Data Ascii: {"componentChunkName":"component---src-pages-integrations-tsx","path":"/integrations","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/integrations"}},"staticQueryHashes":["2355750797","3934953401"],"slicesMap":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	49997	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:05 UTC	383	OUT	GET /static/avocado-509e0714a39e8881beb85352538ea3b5.png HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:05 UTC	792	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 27553 Connection: close Date: Fri, 03 May 2024 04:44:56 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:16 GMT ETag: "662a3004-6ba1" Expires: Tue, 02 Jul 2024 04:44:56 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 c4d0da6268789cfda9bb5da1f3f8fc58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FzRe1pTcY3dSe5UD0uv_GVB6g5BLMIEvNTkUIiJeB8q8iQC9AX1i2w== Age: 9 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:45:05 UTC	15592	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 68 00 00 01 68 08 06 00 00 00 7a e5 61 d5 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 6b 36 49 44 41 54 78 01 ed 9d 07 60 1c f5 95 ff df 9b 59 49 ee 96 6d 30 d5 b6 dc 00 83 3b 26 47 48 00 03 c9 a5 41 80 24 4e 21 18 cb 21 47 ca 5d ea b5 dc fd 73 17 73 b9 7e 97 7e c9 5d b8 24 b8 40 72 89 13 4a 20 40 0a c1 94 00 01 e3 4e 75 93 6d 08 60 63 5b 72 97 b4 3b ef ff 7d ef 37 2b c9 c6 92 76 65 d9 d6 ae de 07 46 3b 3b 3b 33 92 77 e6 f7 e6 fd 5e 25 72 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 1c c7 71 Data Ascii: PNGIHDRhhzapHYssRGBgAMAak6IDATx`YIm0;&GHA$N!!G]ss~~]$@rJ @Num`c[r;}7+veF;;;3w^%rqqqqqqqqqqqqqqqqq
2024-05-03 04:45:05 UTC	11961	IN	Data Raw: 39 9e b8 68 33 4f ba 79 0b 4f 5c 50 f2 c2 59 29 39 01 cd e7 df ba 2b 15 b0 3b c2 06 fb d9 dc b1 7c b6 d4 7e 4c 99 e4 05 68 dc 6f 6c 33 95 72 1c e7 58 91 48 23 34 67 15 d2 0f 84 d2 ee bc 19 5a f2 dd e9 a7 ad 7e 24 6d f4 cc d1 32 48 a7 b8 b0 f3 f2 40 59 59 fb 76 ca 48 cb fe b2 7a ee 05 54 06 94 9c 80 b6 3e dd cc ff d5 62 9f 12 2b 80 b4 b7 93 c3 52 4d 9b 47 e0 a6 90 b4 c4 a1 e3 38 c7 12 d6 aa 92 b9 87 48 12 ad f7 ac 89 24 b0 3b 27 5a 0b ba ce 96 3c 12 fd 82 1a 2b 7f 04 73 66 61 c5 cd 22 39 81 a7 cc bf 8f 0e 1c 68 90 a5 b5 67 c9 8a eb 7e 42 9c 2d 8b f6 76 a5 a7 41 87 26 93 cf e1 2a 7e 95 cc 70 91 37 71 74 a2 14 27 02 7b bb 68 3a e8 10 08 75 ef b0 e2 38 c7 9e 4a 68 c6 a7 52 08 8b 5b 82 d7 86 d0 e2 8a 34 4c b6 26 dd 67 35 84 f8 fd 54 75 e0 42 b8 ff 2f 2a e8 ac Data Ascii: 9h3OyO\PY)9+;\|~Lhol3rXH#4gZ~$m2H@YYvHzT>b+RMG8H$;'Z<+sfa"9hg~B-vA&~p7qt'{h:u8JhR[4L&g5TuB/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	49999	138.199.40.58	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:05 UTC	542	OUT	GET /cookie-solution/confs/js/52677371.js HTTP/1.1 Host: cs.iubenda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:05 UTC	796	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:45:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-NY1-885 CDN-PullZone: 1019485 CDN-Uid: a7bd0c3f-43db-400a-80e2-073f933f3c99 CDN-RequestCountryCode: US Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: public, max-age=3600 ETag: W/"66334bbe-11c" Expires: Fri, 03 May 2024 03:46:30 GMT Last-Modified: Thu, 02 May 2024 08:15:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 05/03/2024 02:46:30 CDN-EdgeStorageId: 885 CDN-Status: 200 CDN-RequestId: 4962ebf2cbc90ef548e83887e94bca44 CDN-Cache: REVALIDATED
2024-05-03 04:45:05 UTC	291	IN	Data Raw: 31 31 63 0d 0a 5f 69 75 62 2e 63 73 52 43 20 3d 20 7b 20 63 6f 6e 73 41 70 69 4b 65 79 3a 20 27 62 52 35 61 77 79 5a 62 79 33 47 32 67 62 33 43 43 50 30 79 4a 4b 65 78 49 54 4f 61 43 66 4d 66 27 2c 20 63 6f 6e 73 65 6e 74 44 61 74 61 62 61 73 65 50 75 62 6c 69 63 4b 65 79 3a 20 27 4b 75 36 35 53 55 48 74 43 4c 61 66 42 37 57 6a 46 79 31 57 57 61 6c 4c 6d 55 58 52 74 35 41 45 27 20 7d 0a 5f 69 75 62 2e 63 73 45 6e 61 62 6c 65 64 20 3d 20 74 72 75 65 3b 0a 5f 69 75 62 2e 63 73 50 75 72 70 6f 73 65 73 20 3d 20 5b 34 2c 35 2c 32 2c 31 5d 3b 0a 5f 69 75 62 2e 63 70 55 70 64 20 3d 20 31 37 31 34 36 33 37 37 34 39 3b 0a 5f 69 75 62 2e 63 73 54 20 3d 20 30 2e 35 3b 0a 5f 69 75 62 2e 67 6f 6f 67 6c 65 43 6f 6e 73 65 6e 74 4d 6f 64 65 56 32 20 3d 20 74 72 75 65 3b Data Ascii: 11c_iub.csRC = { consApiKey: 'bR5awyZby3G2gb3CCP0yJKexITOaCfMf', consentDatabasePublicKey: 'Ku65SUHtCLafB7WjFy1WWalLmUXRt5AE' }_iub.csEnabled = true;_iub.csPurposes = [4,5,2,1];_iub.cpUpd = 1714637749;_iub.csT = 0.5;_iub.googleConsentModeV2 = true;
2024-05-03 04:45:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	49998	35.174.127.31	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:05 UTC	676	OUT	GET /pubsub/5-oe9Jdgva14npGIl3GGLf-jUOPZJu1Cx_cQSdJqI17Eq0KBoyEmi-f284VgTIeddbp_FdvXf5vnVrANy46fdLZkdTmNn-gCS-vfo1?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1 Host: nexus-websocket-a.intercom.io Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://short.io Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: S2AcDl5pDbvlowOELUjXuA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50000	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:05 UTC	523	OUT	GET /page-data/index/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
2024-05-03 04:45:05 UTC	772	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 260 Connection: close Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Fri, 03 May 2024 04:44:51 GMT Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 ETag: "662a30ac-104" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 38bc9c97daf30f968ccac44ef89e14e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: YuXpRUz8NtCmpLwWWbHGC20K4OSd5unikVjLOpvsxWlNwzyyEC1v3w== Age: 14 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:05 UTC	260	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 69 6e 64 65 78 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 31 32 34 32 31 36 32 32 39 39 22 2c 22 31 34 36 37 32 38 38 37 37 30 22 2c 22 32 30 34 38 31 32 36 31 31 31 22 2c 22 32 33 38 35 33 35 35 36 34 36 22 2c 22 32 35 36 32 38 31 39 31 38 37 22 5d 2c 22 73 6c 69 63 65 73 4d 61 70 Data Ascii: {"componentChunkName":"component---src-pages-index-tsx","path":"/","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/"}},"staticQueryHashes":["1242162299","1467288770","2048126111","2385355646","2562819187"],"slicesMap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50003	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:05 UTC	528	OUT	GET /page-data/enterprise/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
2024-05-03 04:45:05 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 282 Connection: close Date: Fri, 03 May 2024 04:45:00 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT ETag: "662a30ac-11a" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 cfc46590021b7df312893ffb67317bb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 2KG2GS52UcqpyjX_-dlpp_fznpxSg_36rDjfIanyVY1jljguedGZUA== Age: 5 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:05 UTC	282	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 65 6e 74 65 72 70 72 69 73 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 65 6e 74 65 72 70 72 69 73 65 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 65 6e 74 65 72 70 72 69 73 65 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 31 30 31 36 32 38 39 33 33 32 22 2c 22 32 36 39 36 38 33 39 39 37 30 22 2c 22 36 34 36 30 39 32 31 33 32 22 2c 22 36 38 36 33 35 38 38 39 38 22 2c 22 Data Ascii: {"componentChunkName":"component---src-pages-enterprise-tsx","path":"/enterprise","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/enterprise"}},"staticQueryHashes":["1016289332","2696839970","646092132","686358898","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50001	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:05 UTC	525	OUT	GET /page-data/pricing/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
2024-05-03 04:45:05 UTC	769	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 212 Connection: close Date: Fri, 03 May 2024 04:45:00 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT ETag: "662a30ac-d4" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 fa503ecd9278a874859948f3b586c782.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _Bli2rMkJrx_gC9u1XIqWyx0aTCmI-JtdkSiSfLCDgLVVcDlcqc6Fg== Age: 5 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:05 UTC	212	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 70 72 69 63 69 6e 67 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 70 72 69 63 69 6e 67 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 5d 2c 22 73 6c 69 63 65 73 4d 61 70 22 3a 7b 7d 7d Data Ascii: {"componentChunkName":"component---src-pages-pricing-tsx","path":"/pricing","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/pricing"}},"staticQueryHashes":[],"slicesMap":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50002	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:05 UTC	526	OUT	GET /page-data/features/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
2024-05-03 04:45:05 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 266 Connection: close Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Date: Fri, 03 May 2024 04:45:00 GMT Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 ETag: "662a30ac-10a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 38bc9c97daf30f968ccac44ef89e14e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RHbFG0VF14bWXKHD6JSojO7Icw7zGGs2o-Wg7xql9kl7BW5DIRpWTw== Age: 5 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:05 UTC	266	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 66 65 61 74 75 72 65 73 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 66 65 61 74 75 72 65 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 66 65 61 74 75 72 65 73 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 31 38 30 35 38 38 38 37 30 32 22 2c 22 33 31 35 31 31 31 36 39 38 31 22 2c 22 33 35 30 31 30 32 32 31 34 37 22 2c 22 34 31 31 30 34 32 32 31 31 36 22 5d 2c 22 73 6c 69 Data Ascii: {"componentChunkName":"component---src-pages-features-tsx","path":"/features","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/features"}},"staticQueryHashes":["1805888702","3151116981","3501022147","4110422116"],"sli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50006	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:05 UTC	530	OUT	GET /page-data/integrations/page-data.json HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f
2024-05-03 04:45:06 UTC	769	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 252 Connection: close Date: Fri, 03 May 2024 04:45:04 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:30:04 GMT ETag: "662a30ac-fc" Cache-Control: public, max-age 60, stale-while-revalidate 3600, stale-if-error 3600 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 1abf103face183cd8172f37e6ac30038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: N2s1f-HCU05MOytc3xdIijvpwC3eh3pAhjLqK0lllrStNvf6_aPXtg== Age: 2 X-XSS-Protection: 1; mode=block
2024-05-03 04:45:06 UTC	252	IN	Data Raw: 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 70 61 67 65 73 2d 69 6e 74 65 67 72 61 74 69 6f 6e 73 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 64 61 74 65 46 6f 72 6d 61 74 22 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 22 6f 72 69 67 69 6e 61 6c 50 61 74 68 22 3a 22 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 7d 7d 2c 22 73 74 61 74 69 63 51 75 65 72 79 48 61 73 68 65 73 22 3a 5b 22 32 33 35 35 37 35 30 37 39 37 22 2c 22 33 39 33 34 39 35 33 34 30 31 22 5d 2c 22 73 6c 69 63 65 73 4d 61 70 22 3a 7b 7d 7d Data Ascii: {"componentChunkName":"component---src-pages-integrations-tsx","path":"/integrations","result":{"pageContext":{"locale":"English","dateFormat":"MM/DD/YYYY","originalPath":"/integrations"}},"staticQueryHashes":["2355750797","3934953401"],"slicesMap":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50007	54.235.206.80	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:06 UTC	361	OUT	GET /messenger/web/ping HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:06 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Fri, 03 May 2024 04:45:06 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 00083rsgsoc87dunafg0 X-Runtime: 0.012926 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-webso [TRUNCATED] Server: nginx
2024-05-03 04:45:06 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50009	142.251.16.157	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:06 UTC	871	OUT	POST /g/collect?v=2&tid=G-JVCX6B1JPE&cid=84728328.1714711503&gtm=45je4510v878423093za200&aip=1&dma=0&gcs=G111&gcd=13r3r3n3n5&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://short.io X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkbcRcZuieg13XrjDkDuw8IkBxgvs0fJsRhK8zTzV5APMBFsZVZ6JPClaWs
2024-05-03 04:45:06 UTC	442	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://short.io Date: Fri, 03 May 2024 04:45:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50008	142.250.80.78	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:06 UTC	1304	OUT	POST /g/collect?v=2&tid=G-JVCX6B1JPE&gtm=45je4510v878423093za200&_p=1714711495438&_gaz=1&gcs=G111&gcd=13r3r3n3n5&npa=0&dma=0&gdid=dZTJkMz&cid=84728328.1714711503&ecid=576514287&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=2&sid=1714711500&sct=1&seg=0&dl=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&dt=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&en=user_engagement&ep.ga_temp_client_id=84728328.1714711503&_et=1551&tfd=18464 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://short.io X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:06 UTC	442	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://short.io Date: Fri, 03 May 2024 04:45:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50010	138.199.40.58	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:06 UTC	607	OUT	POST /write?db=hits1 HTTP/1.1 Host: hits-i.iubenda.com Connection: keep-alive Content-Length: 54 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://short.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:06 UTC	54	OUT	Data Raw: 68 69 74 73 2c 63 70 3d 35 32 36 37 37 33 37 31 2c 70 76 5f 6e 6f 63 73 3d 31 2c 70 76 5f 6e 6f 63 73 5f 6e 6f 70 63 3d 31 2c 73 66 3d 31 20 76 61 6c 75 65 3d 31 Data Ascii: hits,cp=52677371,pv_nocs=1,pv_nocs_nopc=1,sf=1 value=1
2024-05-03 04:45:06 UTC	833	IN	HTTP/1.1 204 No Content Date: Fri, 03 May 2024 04:45:06 GMT Connection: close Server: BunnyCDN-NY1-885 CDN-PullZone: 967785 CDN-Uid: a7bd0c3f-43db-400a-80e2-073f933f3c99 CDN-RequestCountryCode: US Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 1728000 Cache-Control: public, max-age=0 X-Influxdb-Build: OSS X-Influxdb-Version: v2.7.5 Strict-Transport-Security: max-age=31536000; includeSubDomains CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 204 CDN-CachedAt: 05/03/2024 04:45:06 CDN-EdgeStorageId: 885 CDN-RequestId: 11907650a9d67cc12991ffe69718d07d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50012	142.251.40.227	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:08 UTC	740	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdO8JcUAAAAAJWQi_B27yDFuShbD2Cvq4AqcOCQ&co=aHR0cHM6Ly9zaG9ydC5pbzo0NDM.&hl=en&v=WQcDpAcHn0sjM6ZiVkU8JwNH&size=invisible&cb=lffsssil4bn5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:08 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 03 May 2024 04:45:08 GMT Date: Fri, 03 May 2024 04:45:08 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-03 04:45:08 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 57 51 63 44 70 41 63 48 6e 30 73 6a 4d 36 5a 69 56 6b 55 38 4a 77 4e 48 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/WQcDpAcHn0sjM6ZiVkU8JwNH/recaptcha__en.js');
2024-05-03 04:45:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50013	142.251.40.196	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:08 UTC	660	OUT	GET /js/bg/tKcPQSh2okjZHiZ2jIssRExVWo45mlVHOakavsOpwK4.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://recaptcha.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:08 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18243 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 01 May 2024 07:59:11 GMT Expires: Thu, 01 May 2025 07:59:11 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 23 Apr 2024 17:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 161157 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:45:08 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 29 7b 69 66 28 55 3d 28 65 3d 6e 75 6c 6c 2c 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 21 55 7c 7c 21 55 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 65 3d 55 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 4e 2c 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var N=function(e){return e},R=function(e,U){if(U=(e=null,w.trustedTypes),!U\|\|!U.createPolicy)return e;try{e=U.createPolicy("bg",{createHTML:N,createScrip
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 61 74 65 53 63 72 69 70 74 28 62 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 22 2b 62 7d 7d 28 77 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 65 57 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 29 7b 72 65 74 75 72 6e 28 55 3d 50 28 65 29 2c 55 29 26 31 32 38 26 26 28 55 3d 55 26 31 32 37 7c 50 28 65 29 3c 3c 37 29 2c 55 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 3f 55 45 28 65 2c 65 2e 46 29 3a 6d 28 74 72 75 Data Ascii: ateScript(b)}:function(b){return""+b}}(w)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var eW=function(e,U){return(U=P(e),U)&128&&(U=U&127\|P(e)<<7),U},P=function(e){return e.g?UE(e,e.F):m(tru
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 58 3d 5b 5d 2c 65 2e 68 3d 5b 5d 2c 65 2e 54 3d 66 61 6c 73 65 2c 65 2e 4b 3d 76 6f 69 64 20 30 2c 65 2e 4b 5f 3d 28 65 2e 53 3d 5b 5d 2c 66 61 6c 73 65 29 2c 38 30 30 31 29 2c 65 29 2e 46 3d 28 28 65 2e 4f 3d 28 65 2e 6a 3d 65 2c 5b 5d 29 2c 65 2e 42 3d 28 65 2e 49 3d 30 2c 6e 75 6c 6c 29 2c 65 29 2e 44 3d 28 65 2e 69 41 3d 76 6f 69 64 20 30 2c 65 2e 55 3d 66 61 6c 73 65 2c 30 29 2c 65 2e 75 3d 76 6f 69 64 20 30 2c 65 2e 4a 3d 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 29 2c 65 2e 41 3d 31 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 29 2c 65 2e 56 3d 76 6f 69 64 20 30 2c 65 2e 51 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 6a 3d 62 7d 2c 28 65 2e 6c 3d 66 61 6c 73 65 2c 65 29 2e 69 3d 30 2c 28 65 2e 4e 79 3d 66 61 6c 73 Data Ascii: X=[],e.h=[],e.T=false,e.K=void 0,e.K_=(e.S=[],false),8001),e).F=((e.O=(e.j=e,[]),e.B=(e.I=0,null),e).D=(e.iA=void 0,e.U=false,0),e.u=void 0,e.J=void 0,void 0),e.A=1,window.performance\|\|{}),e.V=void 0,e.Qd=function(b){this.j=b},(e.l=false,e).i=0,(e.Ny=fals
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 30 29 3b 78 3c 64 3b 78 2b 2b 29 58 5b 78 5d 7c 7c 28 52 5b 78 5d 3d 79 28 74 29 29 3b 66 6f 72 28 74 3d 30 3b 74 3c 64 3b 74 2b 2b 29 58 5b 74 5d 26 26 28 52 5b 74 5d 3d 70 28 62 29 29 3b 66 6f 72 28 72 3d 5b 5d 3b 71 2d 2d 3b 29 72 2e 70 75 73 68 28 41 28 62 2c 70 28 62 29 29 29 3b 7a 28 62 2c 76 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 47 2c 51 2c 45 2c 54 29 7b 66 6f 72 28 51 3d 28 54 3d 28 47 3d 5b 5d 2c 5b 5d 29 2c 30 29 3b 51 3c 64 3b 51 2b 2b 29 7b 69 66 28 21 28 45 3d 52 5b 51 5d 2c 58 29 5b 51 5d 29 7b 66 6f 72 28 3b 45 3e 3d 54 2e 6c 65 6e 67 74 68 3b 29 54 2e 70 75 73 68 28 70 28 4c 29 29 3b 45 3d 54 5b 45 5d 7d 47 2e 70 75 73 68 28 45 29 7d 4c 2e 46 3d 72 57 28 4c 2c 28 4c 2e 67 3d 72 57 28 4c 2c 72 2e 73 6c 69 63 65 28 29 29 2c 47 29 29 7d 29 7d Data Ascii: 0);x<d;x++)X[x]\|\|(R[x]=y(t));for(t=0;t<d;t++)X[t]&&(R[t]=p(b));for(r=[];q--;)r.push(A(b,p(b)));z(b,v,function(L,G,Q,E,T){for(Q=(T=(G=[],[]),0);Q<d;Q++){if(!(E=R[Q],X)[Q]){for(;E>=T.length;)T.push(p(L));E=T[E]}G.push(E)}L.F=rW(L,(L.g=rW(L,r.slice()),G))})}
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 72 5d 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 32 38 30 29 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 52 2c 4b 2c 72 2c 71 2c 76 29 7b 5a 28 66 61 6c 73 65 2c 74 72 75 65 2c 52 2c 62 29 7c 7c 28 4b 3d 50 32 28 62 2e 6a 29 2c 52 3d 4b 2e 76 71 2c 72 3d 4b 2e 47 75 2c 76 3d 4b 2e 4e 2c 4b 3d 4b 2e 45 4a 2c 71 3d 76 2e 6c 65 6e 67 74 68 2c 52 3d 30 3d 3d 71 3f 6e 65 77 20 52 5b 72 5d 3a 31 3d 3d 71 3f 6e 65 77 20 52 5b 72 5d 28 76 5b 30 5d 29 3a 32 3d 3d 71 3f 6e 65 77 20 52 5b 72 5d 28 76 5b 30 5d 2c 76 5b 31 5d 29 3a 33 3d 3d 71 3f 6e 65 77 20 52 5b 72 5d 28 76 5b 30 5d 2c 76 5b 31 5d 2c 76 5b 32 5d 29 3a 34 3d 3d 71 3f 6e 65 77 20 52 5b 72 5d 28 76 5b 30 5d 2c 76 5b 31 5d 2c 76 5b 32 5d 2c 76 5b 33 5d 29 3a 32 28 29 2c 42 28 62 2c 4b 2c 52 Data Ascii: r]))})),function(){})),280),function(b,R,K,r,q,v){Z(false,true,R,b)\|\|(K=P2(b.j),R=K.vq,r=K.Gu,v=K.N,K=K.EJ,q=v.length,R=0==q?new R[r]:1==q?new R[r](v[0]):2==q?new R[r](v[0],v[1]):3==q?new R[r](v[0],v[1],v[2]):4==q?new R[r](v[0],v[1],v[2],v[3]):2(),B(b,K,R
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 3e 36 2c 62 3d 41 28 64 2c 33 33 30 29 2c 64 2e 69 41 3d 76 32 28 64 2e 4b 2c 5b 30 2c 30 2c 62 5b 31 5d 2c 62 5b 32 5d 5d 2c 64 2e 75 29 29 2c 52 5e 3d 55 2e 69 41 5b 71 26 4d 5d 29 2c 72 7c 3d 28 52 3e 3e 38 2d 28 68 7c 30 29 2d 28 4b 7c 30 29 26 28 31 3c 3c 4b 29 2d 31 29 3c 3c 28 53 7c 30 29 2d 28 4b 7c 30 29 2c 4e 2b 3d 4b 2c 53 2d 3d 4b 3b 72 65 74 75 72 6e 20 42 28 55 2c 28 65 3d 72 2c 35 30 30 29 2c 28 76 7c 30 29 2b 28 77 7c 30 29 29 2c 65 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 2c 77 2c 4e 2c 53 2c 68 29 7b 69 66 28 55 2e 68 2e 6c 65 6e 67 74 68 29 7b 28 55 2e 55 26 26 30 28 29 2c 55 29 2e 4e 79 3d 77 2c 55 2e 55 3d 74 72 75 65 3b 74 72 79 7b 53 3d 55 2e 47 28 29 2c 55 2e 57 3d 53 2c 55 2e 49 3d 53 2c 55 2e 4a 3d 30 2c 68 3d 64 57 28 55 Data Ascii: >6,b=A(d,330),d.iA=v2(d.K,[0,0,b[1],b[2]],d.u)),R^=U.iA[q&M]),r\|=(R>>8-(h\|0)-(K\|0)&(1<<K)-1)<<(S\|0)-(K\|0),N+=K,S-=K;return B(U,(e=r,500),(v\|0)+(w\|0)),e},D=function(e,U,w,N,S,h){if(U.h.length){(U.U&&0(),U).Ny=w,U.U=true;try{S=U.G(),U.W=S,U.I=S,U.J=0,h=dW(U
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 29 26 26 44 28 66 61 6c 73 65 2c 4e 2c 66 61 6c 73 65 29 7d 65 6c 73 65 20 52 3d 74 6e 28 62 2c 4e 29 3b 72 65 74 75 72 6e 20 52 7d 53 26 26 68 26 26 53 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 68 2c 4d 2c 4a 29 7d 7d 72 65 74 75 72 6e 20 4d 7d 2c 47 57 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 29 7b 28 55 2e 70 75 73 68 28 65 5b 30 5d 3c 3c 32 34 7c 65 5b 31 5d 3c 3c 31 36 7c 65 5b 32 5d 3c 3c 38 7c 65 5b 33 5d 29 2c 55 29 2e 70 75 73 68 28 65 5b 34 5d 3c 3c 32 34 7c 65 5b 35 5d 3c 3c 31 36 7c 65 5b 36 5d 3c 3c 38 7c 65 5b 37 5d 29 2c 55 2e 70 75 73 68 28 65 5b 38 5d 3c 3c 32 34 7c 65 5b 39 5d 3c 3c 31 36 7c 65 5b 31 30 5d 3c 3c 38 7c 65 5b 31 31 5d 29 7d 2c 7a 57 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 29 7b 72 65 74 75 72 6e 20 55 3d Data Ascii: )&&D(false,N,false)}else R=tn(b,N);return R}S&&h&&S.removeEventListener(h,M,J)}}return M},GW=function(e,U){(U.push(e[0]<<24\|e[1]<<16\|e[2]<<8\|e[3]),U).push(e[4]<<24\|e[5]<<16\|e[6]<<8\|e[7]),U.push(e[8]<<24\|e[9]<<16\|e[10]<<8\|e[11])},zW=function(e,U){return U=
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 55 29 7b 31 30 34 3c 55 2e 6f 2e 6c 65 6e 67 74 68 3f 46 28 55 2c 30 2c 5b 49 2c 33 36 5d 29 3a 28 55 2e 6f 2e 70 75 73 68 28 55 2e 4f 2e 73 6c 69 63 65 28 29 29 2c 55 2e 4f 5b 35 30 30 5d 3d 76 6f 69 64 20 30 2c 42 28 55 2c 35 30 30 2c 65 29 29 7d 2c 72 57 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 2c 77 29 7b 72 65 74 75 72 6e 28 28 77 3d 57 5b 65 2e 59 5d 28 65 2e 63 71 29 2c 77 29 5b 65 2e 59 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 77 29 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 55 3d 4e 7d 2c 77 7d 2c 78 49 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 29 7b 66 6f 72 28 55 3d 5b 5d 3b 65 2d 2d 3b 29 55 2e 70 75 Data Ascii: function(e,U){104<U.o.length?F(U,0,[I,36]):(U.o.push(U.O.slice()),U.O[500]=void 0,B(U,500,e))},rW=function(e,U,w){return((w=W[e.Y](e.cq),w)[e.Y]=function(){return U},w).concat=function(N){U=N},w},xI=function(e){return e},k=function(e,U){for(U=[];e--;)U.pu
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 65 6e 67 74 68 3a 55 2c 63 61 6c 6c 3a 55 2c 70 61 72 65 6e 74 3a 55 2c 72 65 70 6c 61 63 65 3a 55 2c 73 74 61 63 6b 3a 55 2c 66 6c 6f 6f 72 3a 55 2c 64 6f 63 75 6d 65 6e 74 3a 55 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 55 7d 29 7d 2c 68 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 2c 77 2c 4e 29 7b 61 28 55 2c 28 4e 3d 70 28 55 29 2c 77 3d 70 28 55 29 2c 77 29 2c 6c 28 41 28 55 2c 4e 29 2c 65 29 29 7d 2c 74 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 2c 77 2c 4e 2c 53 29 7b 69 66 28 77 3d 65 5b 30 5d 2c 77 3d 3d 70 79 29 55 2e 59 63 3d 32 35 2c 55 2e 4c 3d 74 72 75 65 2c 55 2e 50 28 65 29 3b 65 6c 73 65 20 69 66 28 77 3d 3d 63 29 7b 4e 3d 28 55 2e 73 3d 74 72 75 65 2c 65 29 5b 31 5d 3b 74 72 79 7b 53 3d 55 2e 56 7c 7c 55 2e 50 28 65 Data Ascii: ength:U,call:U,parent:U,replace:U,stack:U,floor:U,document:U,propertyIsEnumerable:U})},hn=function(e,U,w,N){a(U,(N=p(U),w=p(U),w),l(A(U,N),e))},tn=function(e,U,w,N,S){if(w=e[0],w==py)U.Yc=25,U.L=true,U.P(e);else if(w==c){N=(U.s=true,e)[1];try{S=U.V\|\|U.P(e
2024-05-03 04:45:08 UTC	1255	IN	Data Raw: 65 3d 30 2c 4e 3d 77 2e 6c 65 6e 67 74 68 3b 65 3c 4e 3b 65 2b 2b 29 55 28 77 5b 65 5d 29 7d 2c 41 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 29 7b 72 65 74 75 72 6e 20 55 5b 65 5d 3c 3c 32 34 7c 55 5b 28 65 7c 30 29 2b 31 5d 3c 3c 31 36 7c 55 5b 28 65 7c 30 29 2b 32 5d 3c 3c 38 7c 55 5b 28 65 7c 30 29 2b 33 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 2c 77 29 7b 77 5b 42 28 65 2c 55 2c 77 29 2c 6d 34 5d 3d 32 37 39 36 7d 2c 53 57 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 55 2c 77 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 55 3d 74 79 70 65 6f 66 20 65 2c 55 29 29 69 66 28 65 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 Data Ascii: e=0,N=w.length;e<N;e++)U(w[e])},An=function(e,U){return U[e]<<24\|U[(e\|0)+1]<<16\|U[(e\|0)+2]<<8\|U[(e\|0)+3]},z=function(e,U,w){w[B(e,U,w),m4]=2796},SW=function(e,U,w){if("object"==(U=typeof e,U))if(e){if(e instanceof Array)return"array";if(e instanceof Objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50016	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:09 UTC	528	OUT	OPTIONS /report/v4?s=fbt03sJUB0MakZ4szsH38FZwFvY6Hb8DsRHNkFDc%2BTm3JoHLJGC0Cq5H4g2M1RRggN3UiAK0xtLbcZU4GB1KUp2bdxJRizJhwKxqo6%2FKNmB2FgZpikIinFRN6LfKwfc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:09 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 03 May 2024 04:45:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50017	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:09 UTC	541	OUT	OPTIONS /report/v4?s=zS6boy7KXqDIg2sFJxrdZQuZfVbogqEXl3Wu1CnaOhNQQ%2BstIDQSNA20wawFSTVQswMhsnIoQeek0MownDVBgpum7S0eU%2FV%2BbVp06tGk%2BEdp7dqzMMiNUDn%2B3bNUwzjfyAU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://static.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:09 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 03 May 2024 04:45:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50018	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:09 UTC	473	OUT	POST /report/v4?s=fbt03sJUB0MakZ4szsH38FZwFvY6Hb8DsRHNkFDc%2BTm3JoHLJGC0Cq5H4g2M1RRggN3UiAK0xtLbcZU4GB1KUp2bdxJRizJhwKxqo6%2FKNmB2FgZpikIinFRN6LfKwfc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 3725 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:09 UTC	3725	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 34 38 33 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 30 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 31 30 32 2e 31 31 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 Data Ascii: [{"age":34837,"body":{"elapsed_time":404,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.16.102.112","status_code":404,"type":"http.error"},"type":"network-error","url":"https://www.canva.c
2024-05-03 04:45:09 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 03 May 2024 04:45:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50019	35.190.80.1	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:09 UTC	482	OUT	POST /report/v4?s=zS6boy7KXqDIg2sFJxrdZQuZfVbogqEXl3Wu1CnaOhNQQ%2BstIDQSNA20wawFSTVQswMhsnIoQeek0MownDVBgpum7S0eU%2FV%2BbVp06tGk%2BEdp7dqzMMiNUDn%2B3bNUwzjfyAU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 453 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:09 UTC	453	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 37 36 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 34 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 31 30 32 2e 31 31 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: [{"age":58764,"body":{"elapsed_time":541,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.canva.com/","sampling_fraction":0.01,"server_ip":"104.16.102.112","status_code":200,"type":"ok"},"type":"network-error","url":"http
2024-05-03 04:45:09 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Fri, 03 May 2024 04:45:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50023	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:11 UTC	934	OUT	GET /icons/icon-144x144.png?v=e684309adfdf6efa515a707d11a3e1f1 HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f; _ga=GA1.1.84728328.1714711503; _ga_JVCX6B1JPE=GS1.1.1714711500.1.0.1714711504.60.0.576514287; _gcl_au=1.1.1019735161.1714711509
2024-05-03 04:45:11 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 13394 Connection: close Date: Thu, 02 May 2024 19:26:10 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:00 GMT ETag: "662a2ff4-3452" Expires: Mon, 01 Jul 2024 19:26:10 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 c50e3f7de0b772d07240015272b1aff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 3k6JdzDiugk2ilBke_dEIGTe7ccRC9-Cg2ptNQJ9Vx73_YOb-w0QbQ== Age: 33541 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:45:11 UTC	13394	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 02 00 00 00 68 24 75 ef 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 7d 87 57 93 69 f3 f6 fe 37 df 6f 6d 54 a5 83 f4 de 41 50 40 50 b1 20 a0 62 45 7a ef 55 a4 08 2a a0 b4 74 42 42 ef bd 07 e9 35 d4 24 24 04 d2 7b f3 3b 4f 1e 64 75 9b 0a 24 e2 fa ce 99 c3 79 76 51 24 b9 32 73 cf 3d e5 9a df 6e 37 bf 50 82 de 91 2b f0 dc f4 e2 56 53 ee cd a6 1c ff c6 ec 6b 0d 59 be f5 19 80 62 33 7c eb b3 6e 36 bd 78 d4 51 92 32 04 2b 9d 6a 45 2f 0f 75 6f 4e e1 28 2b 4b 34 c2 36 67 8f 25 e2 8a a5 92 8f 0a 10 3e 9f 4f a5 52 57 56 56 70 38 5c 77 77 37 1a 8d 2e 2b 2b cb ca ca 7a fe fc f9 ad 5b b7 dc dc dc 4c 4c 4c 34 35 34 4f 9f 3a 7d fa d4 69 95 73 2a Data Ascii: PNGIHDRh$upHYs IDATx}Wi7omTAP@P bEzUtBB5$${;Odu$yvQ$2s=n7P+VSkYb3\|n6xQ2+jE/uoN(+K46g%>ORWVVp8\ww7.++z[LLL454O:}is

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50022	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:11 UTC	929	OUT	GET /favicon-32x32.png?v=e684309adfdf6efa515a707d11a3e1f1 HTTP/1.1 Host: short.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/?utm_source=link_not_found Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f; _ga=GA1.1.84728328.1714711503; _ga_JVCX6B1JPE=GS1.1.1714711500.1.0.1714711504.60.0.576514287; _gcl_au=1.1.1019735161.1714711509
2024-05-03 04:45:11 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1478 Connection: close Date: Thu, 25 Apr 2024 15:12:47 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:00 GMT ETag: "662a2ff4-5c6" Expires: Mon, 24 Jun 2024 15:12:47 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 cf549a03d4f209dc2ee52d1dd6cb3730.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Ne2ae0SXlUWjibVe0GbdaMTqyOtHxuFQHBk4FC31AXE3SvVBAeeUnQ== Age: 653544 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:45:11 UTC	1478	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 02 00 00 00 fc 18 ed a3 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 78 49 44 41 54 78 9c 8d 96 8d 4f 13 67 18 c0 fd 73 c4 96 b6 d7 96 b6 77 85 29 d1 5a 28 a2 2d e2 e6 88 43 3e 32 50 e3 b2 28 63 85 da 16 69 d9 e2 90 68 58 06 42 c8 6a 70 82 ed 95 b6 4e 11 83 12 f1 b3 03 e6 56 61 4e 9c d3 f8 41 01 11 28 50 68 2b b5 77 ef 72 f7 e2 d1 5e af 0b 4f 9e 5c ae bd f7 de df 3d df ef a6 d2 be 33 2c 2d bf 7e f6 40 6f e3 e7 57 4e e9 07 7f b6 8d dd 78 16 f0 c7 48 02 24 c9 ab 97 af 1c 0e c7 a1 43 87 30 14 4b e7 a7 2b 31 a5 42 ae 48 d6 4d bb 7b 4e c6 ab d6 6d d9 e9 30 14 f7 36 39 9f de 9b 0d 2f 81 0d 88 d7 eb ad a8 ac e0 6d e1 61 28 86 2a 50 36 60 8f ab 9e 51 ad cb 92 8b Data Ascii: PNGIHDR pHYsxIDATxOgsw)Z(-C>2P(cihXBjpNVaNA(Ph+wr^O\=3,-~@oWNxH$C0K+1BHM{Nm069/ma(*P6`Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50024	142.251.41.4	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:11 UTC	817	OUT	POST /pagead/landing?gcs=G111&gcd=13r3r3n3n5&rnd=2024227052.1714711509&url=https%3A%2F%2Fshort.io%2F&dma=0&npa=0&gtm=45He4510n71KRWKR2v72734998za200&auid=1019735161.1714711509 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://short.io X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:11 UTC	822	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:45:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13r3r3n3n5&rnd=2024227052.1714711509&url=https%3A%2F%2Fshort.io%2F&dma=0&npa=0&gtm=45He4510n71KRWKR2v72734998za200&auid=1019735161.1714711509 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:45:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50026	108.138.106.126	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:11 UTC	533	OUT	GET /c/hotjar-1940192.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:11 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 03 May 2024 04:45:11 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/7ac17e8c594cbfae64927e7dd92e4f98 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 cf498d1eb1eabcd3ba17659086fa3f86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 7tG_2vbNGm04sLcZuRrVnyESC0lmNGXmGQ-wuwsgxrhiDfc1vjjsbw==
2024-05-03 04:45:11 UTC	8986	IN	Data Raw: 32 33 31 32 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 39 34 30 31 39 32 2c 22 72 22 3a 30 2e 34 31 30 32 33 36 31 32 33 35 31 31 39 30 34 37 35 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f Data Ascii: 2312window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1940192,"r":0.41023612351190475,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_
2024-05-03 04:45:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50028	108.139.47.46	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:13 UTC	521	OUT	GET /vendors~app~tooltips-modern.7e0e68e9.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:14 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 166299 Connection: close Date: Fri, 03 May 2024 04:45:15 GMT Last-Modified: Thu, 02 May 2024 15:37:05 GMT ETag: "d625db79db383fdaef04243566c4afce" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: Jj38Ck5niiuqY9M14QI5zodQ0DsB0A3Z Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 043cf9310ff19c0e58a0b6e76877f570.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BChUL9UHWxJ9TFl4B9sEjaoA17aW4UYGgEw5Rk83hIaJ_Qf3J3qggQ== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-05-03 04:45:14 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd e9 73 1b 47 96 2f fa fd fd 15 14 a6 2f 1b 18 82 14 a9 cd 36 28 48 97 12 29 4b 36 b5 b4 44 d9 6e 8b 1a 4e 11 28 92 65 02 28 b8 50 20 45 8b 9c 0b ee fb be af e2 be ef fb ce 08 53 96 65 5b 5e ba dd 76 bb dd 5e 2a dd 0c c4 7c 78 11 f7 fd 09 ef 9c cc aa 42 81 84 3c 3d 1d fd 3e bc 88 6b 8b 55 99 59 b9 9c cc 3c cb ef 64 66 15 4e ff eb a9 a8 6b a2 14 e5 12 1c bc c7 c7 47 09 9e 2c 51 72 73 b2 20 7a a2 bc 2e 9e 83 24 1f cf 47 e5 f1 1e a7 28 f9 fe 83 f3 7a ff 43 16 45 97 2c 78 7d b1 6e d1 c9 4b 9e b8 57 f8 78 fe c2 ab fc 6b 71 ef f9 e2 52 6f 5c 4d b9 75 2f 25 4e 7e 24 47 fd eb e9 ff cb 9c ed 12 33 39 57 5a 8e e0 8b cb e7 33 bd 9c 23 f7 6a 8e df 93 2b 78 64 5e 72 88 ee 8c f7 7c f6 ff 3a 4b 61 e1 83 87 96 38 af df 97 63 7e f0 e0 fc Data Ascii: sG//6(H)K6DnN(e(P ESe[^v^*\|xB<=>kUY<dfNkG,Qrs z.$G(zCE,x}nKWxkqRo\Mu/%N~$G39WZ3#j+xd^r\|:Ka8c~
2024-05-03 04:45:14 UTC	127	IN	Data Raw: 40 6f 61 7a c1 d8 66 b0 76 10 34 b4 a0 2c cf 28 cb 5b f4 07 5a b4 17 e7 83 55 75 20 f6 e1 a3 b0 52 ab ac d4 29 2b 2d c1 da 19 6d 14 9a f4 51 98 7b 0a 8d 28 2b fd ca 6a 1d e2 e2 7b 00 e3 33 bd ca ca a4 b2 b2 e5 e3 41 fb 24 42 f9 45 65 65 05 8b d5 84 06 6f 18 1b 65 8f 57 4b 95 d5 0a fa 38 54 eb c8 b3 40 a6 c3 ab ac b6 2a ab a3 ca 5a 83 9e b5 57 59 1d a0 59 4b 7e 29 6d 51 4d 43 95 Data Ascii: @oazfv4,([ZUu R)+-mQ{(+j{3A$BEeeoeWK8T@*ZWYYK~)mQMC
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: 83 e7 9d be e7 d8 f5 34 65 75 59 59 5d 51 56 77 94 b5 8a 60 4d 71 a8 fb 8b e1 dd 1f 0a 31 e8 01 8c a6 4e cb 1a 88 46 2f 6d a0 34 d4 40 35 66 c6 fa af a5 29 6b f3 ca da 82 b2 b6 a6 ac 01 4a 2e 56 e7 b8 cc 60 12 2a d5 79 ac 0e 93 9b 51 1d 9a 4c 69 4b 69 cd 47 a5 cd a0 c3 fa 01 8b 32 24 ca 16 0c f3 94 f5 3d 65 a3 44 d9 a8 56 36 da 95 8d 5e 65 63 50 d9 98 50 36 76 95 cd 12 65 73 50 d9 1c 56 36 97 95 cd 03 65 ab 8c 62 d2 f2 16 0d 8d b6 1e 95 b6 22 2e 53 36 1a 94 8d 56 86 47 db 8e 4a db 40 a9 0d 64 02 58 81 bc fa c2 61 8b 86 4a 5b 8e 4a 5b 50 23 0a ca c6 bc b2 b1 ac 6c ac a3 67 57 5e 97 8d 38 67 ca 41 d5 63 c3 13 5d f7 56 f0 1e 7d 31 49 d9 6c 50 36 7b c2 96 93 fa d4 7b 17 58 bf 36 d0 8b 2e 65 73 42 d9 9c d5 fa 3e cd f9 72 b0 d1 ae a3 d2 2e e1 a3 59 65 73 43 d9 Data Ascii: 4euYY]QVw`Mq1NF/m4@5f)kJ.V`*yQLiKiG2$=eDV6^ecPP6vesPV6eb".S6VGJ@dXaJ[J[P#lgW^8gAc]V}1IlP6{{X6.esB>r.YesC
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: e7 11 30 97 c7 0f d3 2f 60 ce 27 60 4e 0a 72 f5 7d c1 97 e2 c3 21 01 6d 32 8f b6 67 02 da 14 11 6d 01 77 7c aa 1b 7c c1 8d 20 06 6d 41 37 49 2f 70 37 5f 06 a2 2d 5f 04 dd ce 71 58 0c f3 c3 09 72 68 f3 72 61 3e 8f 16 90 fc 1e 07 89 6c 9c f8 80 31 3f 2b 8e 78 80 fa 0a b9 9e 9a e1 6b 36 69 ba 9b 6e 9f ec 62 3c f5 3d 1b 47 85 fc c8 4c e0 8a 35 01 6e 52 1e 7e 00 83 a3 04 66 3f c9 cc f6 ba db e9 3b 3f e3 80 bb 3c f0 b3 f0 33 3e df 23 0e c8 14 92 3e cd e4 4b 19 92 ce 81 59 7c 8d f7 79 20 e7 d1 47 1c f4 b1 9d 94 6a 72 66 be e5 5f 72 40 3a 17 be c5 85 3f e1 47 c1 17 e6 7b 9d c1 01 bf e4 5b e7 5b 10 06 c3 f7 90 1f 15 17 be c7 0f 90 0b f3 48 7e c0 85 1f 72 61 1e a7 39 5c 38 97 0b 7f c8 f7 e1 23 01 81 1c 70 9b 4f 79 24 02 42 da 47 e9 0f 79 9c 7c ca e7 cc fe 90 ef 04 Data Ascii: 0/`'`Nr}!m2gmw\|\| mA7I/p7_-_qXrhra>l1?+xk6inb<=GL5nR~f?;?<3>#>KY\|y Gjrf_r@:?G{[[H~ra9\8#pOy$BGy\|
2024-05-03 04:45:14 UTC	2048	IN	Data Raw: 70 04 f6 32 1b af e8 72 d3 f1 b8 41 c7 c3 c6 6b b5 d3 2b 40 d4 89 82 28 3a 32 71 e8 32 a8 0b e8 0d fe f2 8a 6c 94 c6 53 d2 2f 64 50 8a 64 b3 81 da 25 b2 06 20 c6 db 28 f9 77 d0 cf 7d 86 9a b8 ab ca 8a 73 66 03 c0 39 28 dd 77 31 4a 67 93 3b 44 b3 b2 67 1f d0 71 8f 12 6e 1b 47 3b 1b a3 ac 36 46 50 d1 27 bb 38 6d b5 51 a2 6a 93 91 d1 c6 5a 86 9a 53 c8 a1 b4 c6 25 f0 d6 c2 60 9c 95 07 83 f3 03 1b dd f8 e4 8c 87 f9 38 1b b3 02 b5 67 dc da 86 80 82 ba a2 e2 ce a1 2e 25 1f 60 16 a5 d3 36 b7 4c 5f 6c 6e d6 51 b7 60 83 21 10 2d 54 ce 41 53 f7 66 85 ae 72 4f c2 43 ca 7d d5 0d 45 ce 68 a7 93 77 8e b6 f7 df 68 47 c1 fb 90 c1 b6 c5 22 d0 e9 57 ba 11 da 13 a7 c1 5e 8f 03 24 07 11 25 95 0f 05 1e 00 74 04 24 62 ee 95 b9 29 70 7a 85 ad d2 60 ab 99 ca 4f ff 6a f3 1c e4 12 Data Ascii: p2rAk+@(:2q2lS/dPd% (w}sf9(w1Jg;DgqnG;6FP'8mQjZS%`8g.%`6L_lnQ`!-TASfrOC}EhwhG"W^$%t$b)pz`Oj
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: 12 65 c2 6f d2 1c 49 4c 4a 3c ae d1 3b e4 e3 90 19 68 c5 ef a0 27 37 f7 a0 47 79 58 21 37 f7 0d 7c aa 22 f4 d0 82 1d 08 3b 6e 1e eb 94 23 6f a2 fb 06 7f 2b 11 8f 99 38 e8 a1 03 9e 1e cf 22 78 e4 66 b8 4d 76 bd d9 14 ba be 4e 61 44 ff 88 3f bb 70 de 65 ce a2 59 ac 7a 3c f6 cc 6f e7 73 b3 65 59 7a 5c bb 35 a4 eb 79 c0 45 1a 70 9e 2a 1f 30 a1 78 46 90 1a cd be 6c 76 1a 6e 42 93 d5 01 b9 b9 9e c4 cb 8e 0f 69 10 5e b0 86 20 5a c9 79 60 c5 bc bc 0b 30 6d 97 99 61 7f 98 79 8f 0b 84 6d 21 03 bb ea 36 9c 87 4e 00 08 5f 54 5d 10 ff b3 e9 be f6 1d ca 54 ec 6c 51 59 a7 ff 03 0b b2 03 7f be 21 e2 a6 60 16 04 be 27 a7 c3 a7 75 e8 3b 3b 10 f6 27 16 06 04 0c ea 65 99 f7 d9 22 cd 52 6d 0d 47 be 71 a1 ec e4 a0 75 71 59 36 c5 13 9a b2 33 d1 f1 c0 2e b8 f8 e0 c6 c5 69 ed a6 Data Ascii: eoILJ<;h'7GyX!7\|";n#o+8"xfMvNaD?peYz<oseYz\5yEp*0xFlvnBi^ Zy`0maym!6N_T]TlQY!`'u;;'e"RmGquqY63.i
2024-05-03 04:45:14 UTC	1024	IN	Data Raw: 88 aa 9b 23 20 8a 77 48 f9 10 b2 9b 9d c7 e8 1a f0 ff 1d 91 ea 2e 1d 7d eb 48 79 ad 76 bc f8 df e6 81 4f 84 49 f5 38 a9 5e 34 a3 61 f5 f1 63 6e 53 c1 9d e4 71 15 a9 9e fb a7 b2 0c 20 32 b5 e8 91 61 3d 25 35 95 a4 a6 86 d4 ac 92 9a 4d 52 b3 47 6a 7b 48 ed 20 a9 5d 26 75 33 a4 ee 00 35 c4 91 df 00 17 08 99 a4 a6 95 d4 74 90 9a 6e 52 d3 6f 5a c7 2b a7 2f 2b 8b 00 7d 65 13 9a 7e bc f1 2f b3 28 d1 49 cd 08 a9 61 c6 f5 b6 7a c0 8e bf f4 64 7c 83 d4 cc 93 9a 65 76 14 56 0b db 8c 45 1c 6b 65 0b f7 79 9f 44 7e 60 92 da 17 a4 b6 99 d4 b6 9b 51 b6 cd 22 b5 75 a4 b6 fe 75 ef 24 6e b3 20 a4 6b 28 4d a6 fc ec a8 76 d7 a1 89 49 c8 ab 96 92 da 71 d8 21 db ca e7 a4 fd 3b 05 18 44 ef 22 52 0b c3 39 24 75 15 a4 6e 88 d4 8d 23 83 ae 39 8a a2 d6 58 bb ff 08 75 1e 52 57 47 ea Data Ascii: # wH.}HyvOI8^4acnSq 2a=%5MRGj{H ]&u35tnRoZ+/+}e~/(Iazd\|evVEkeyD~`Q"uu$n k(MvIq!;D"R9$un#9XuRWG
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: be 01 e4 e5 26 79 b9 07 bf ed d5 a4 bd 96 b4 37 61 70 97 db ff f6 42 f6 76 75 c3 54 8e 97 4e 46 1b f9 3d 8a fd e0 af d1 a2 7e 32 d6 4c da 5f 90 f6 0a c8 d0 76 3c 09 20 b4 57 15 33 90 ba e6 cf ca e7 cd 7f 28 bb 55 58 54 ac 47 ac e8 c9 58 2f 69 1f 22 ed 53 a4 7d 96 b4 cf 93 f6 25 d2 be 4a da 91 9c 8a 4e c6 06 49 fb 38 08 ca 89 61 fc 33 78 3c 4f ea d0 86 58 3d 8f 83 da 45 f1 35 b9 0e c1 6a dc 4b 28 2a 69 3f 22 1d 65 a4 a3 f2 f5 dc 3c 1b 76 2f ea dd a4 a3 8e 74 d4 bf 9e 5b e4 6e a3 8b 20 22 00 59 85 26 e9 e8 24 1d bd a4 63 90 a1 a6 11 cf 59 06 d7 50 07 23 1d 63 a4 63 81 39 17 90 8e 19 d2 31 77 eb ec c5 3e fc eb 87 18 a8 6d 95 74 00 d5 4f 35 e8 78 46 41 3a 76 49 c7 3e 80 2d f0 af 09 2d 96 b1 a7 a4 b3 9a 74 36 90 ce 2e d2 69 df 20 3e 44 7f 06 d2 d9 4a 3a 3b 18 Data Ascii: &y7apBvuTNF=~2L_v< W3(UXTGX/i"S}%JNI8a3x<OX=E5jK(*i?"e<v/t[n "Y&$cYP#cc91w>mtO5xFA:vI>--t6.i >DJ:;
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: 45 c6 88 d4 82 64 93 2c ec 37 b4 34 25 12 d1 9f 72 2d d2 55 29 10 e9 51 50 22 fd b8 0d ba 79 5e 6c ba 44 75 ae ba b7 df 66 47 06 cf 53 a3 06 53 5d 6e 26 a0 34 b9 90 cc dd bf f9 e6 c1 97 cf 53 8d b0 2e 97 84 e9 78 0b 55 08 59 d3 67 b8 70 87 9e 86 a5 2e c1 26 1c 16 96 1a e0 cb cd af 6a 25 b0 a2 2e 59 1a 3a e6 db cb de de 2e f3 65 27 ac 2e f5 39 9a da 3d d5 b6 18 a0 0f ed fd b1 2f 0c c0 3d 7b af eb b3 10 00 5d d8 cb 5b 0a 31 dc 9a c0 0e 4e 4c 04 ed bd a9 2f 00 c0 c3 87 f9 59 77 f2 b2 0a 1e 66 df 2d c8 ca bb 9b 91 93 ff 30 33 f7 e1 dd dc 82 87 f7 f3 b3 1e e6 e6 3d fc 3c f7 fe c3 5f 64 e7 e4 3c bc 9d f5 f0 c3 ec bc ac 4c df 5d 28 e6 47 17 59 fb bd 53 49 c8 a1 da 2b ac fc 04 68 11 8b da 5b a1 82 62 c0 85 3d c7 97 42 31 2b 7a a9 50 75 99 a1 8d 95 d4 4b 85 b1 28 Data Ascii: Ed,74%r-U)QP"y^lDufGSS]n&4S.xUYgp.&j%.Y:.e'.9=/={][1NL/Ywf-03=<_d<L](GYSI+h[b=B1+zPuK(
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: 82 e7 f8 9f 8c d4 93 89 26 3b 78 b9 1d 4b f5 74 15 77 d9 5c 5d b0 62 b7 63 6f 75 57 8c e1 17 0c f9 6f d2 45 f0 74 37 96 bc 0d 2e d9 30 e3 1d ef 9b bc dd 7d 5d 1b 66 55 bf 7e 18 43 e6 db 66 19 ae 65 d6 ac 42 53 ca b6 99 df 90 0d 57 be 21 8b 96 60 77 7d a7 b8 c5 eb 63 ae b0 10 db bd 89 8b 64 bd 6b 2c 74 b2 f8 49 6d 1c de 77 b4 65 2c b3 ef d7 bb f9 40 e1 b7 a4 ed 25 8f 7a 4f dd 08 f0 79 e2 86 0f ed d0 c1 b0 1b 18 5e 00 e6 6c df 13 a3 85 11 95 84 0a 58 1e 58 77 8b 42 75 f4 b5 09 3e 30 86 c1 13 cf 7f d7 d7 a0 f4 3b 7c 7b 00 52 70 5f 1b c0 5f 6d 4e aa 63 09 1e e9 8b 65 f8 1f 99 e9 fd e2 26 c9 b5 0b 7d a4 d7 df 7e 73 af 72 f8 5b 6f ee 1d 6d ea 6f ee 6d 9f 00 82 21 e9 10 93 8e 20 e9 e8 4d 05 7e ea f8 51 c7 8f 7e ff f0 23 d2 8d 9e 6b e0 8e d7 9b b2 5e cc 8f 8c b0 Data Ascii: &;xKtw\]bcouWoEt7.0}]fU~CfeBSW!`w}cdk,tImwe,@%zOy^lXXwBu>0;\|{Rp__mNce&}~sr[omom! M~Q~#k^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50029	108.139.47.46	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:13 UTC	512	OUT	GET /vendors~app-modern.115fb6b0.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:14 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 21502 Connection: close Date: Fri, 03 May 2024 04:45:15 GMT Last-Modified: Thu, 02 May 2024 15:37:05 GMT ETag: "418911f0e28e7f33a5ac1fc4f3c723de" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: TGc.dFrX6IZvX4jfaI1gqoAHsttjNXti Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 aa7ca65bca4d95ba9a04dd166671496c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RQFuJXsuNB6TSSkOTw0uSi-3wPRd_L21qi3fMgSss1C5EEFLV0UX2w== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-05-03 04:45:14 UTC	8334	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd fb 7a db 46 b2 38 f8 2a 24 c6 47 01 cc 16 45 ca 96 6c 81 41 78 32 be ec 64 d6 8e fd 8b 9c cc c9 50 8c 0c 91 4d 11 63 10 60 00 50 12 43 e2 3c c0 fe b1 af b0 af b8 8f b0 55 d5 57 80 a0 2d 67 e2 ec 9e ef db f9 26 16 d1 d7 ea ee ea ea ba 75 b5 7b 1d a7 57 61 fc 6e 1e e5 dd 5b 7e b5 0c 27 1f 9e cd 57 c9 87 28 29 78 36 49 17 97 ff ca 83 4f 17 d9 6e 47 63 af bb 5c e5 73 77 34 7a fc a8 7f 32 66 9b d3 de e3 c7 7d df e5 ac 60 99 17 7c b3 e1 41 d6 4d 16 53 97 7b 6c b6 4a 26 45 94 26 2d ee 42 26 4b 58 e4 6d 6e c2 ac 95 07 ed b6 5b 74 ff 91 66 1f 78 76 70 50 74 ff 0a 3d e3 df b7 59 ba 88 72 8e 3f df cc 66 f9 24 e3 3c 79 16 26 37 61 de 90 f4 03 4f a6 3c 8b 92 eb 67 29 40 78 57 1c 3f c7 42 7f 7b f7 fa 95 c8 7f 11 f3 05 4f 8a c6 c4 ee Data Ascii: zF8*$GElAx2dPMc`PC<UW-g&u{Wan[~'W()x6IOnGc\sw4z2f}`\|AMS{lJ&E&-B&KXmn[tfxvpPt=Yr?f$<y&7aO<g)@xW?B{O
2024-05-03 04:45:14 UTC	8192	IN	Data Raw: bc f9 05 5b 0e 85 df 1b 75 87 f7 fe 2b 20 f4 25 93 ca 8d dd 45 55 d7 ee d1 57 53 e0 68 4e a8 14 06 4a eb b7 53 85 df 85 93 22 5e c3 62 29 73 28 5e a8 83 34 8e e1 77 90 83 db a9 02 5c 27 20 39 fc 7e 80 1c 5e ad 02 30 51 4d 15 16 a9 28 1f de d5 cb 53 f8 22 ff ab 4a 1d 4a ad 62 95 df 82 66 33 7e cd ef 4a e7 2b 06 73 13 c5 0d 1d 49 bd 2b 65 3b 6c 95 7d a4 cc 8f 3f bc 82 12 ab a8 61 1a 75 91 1f bf 7b ee 30 f4 b3 6a 2a 83 e9 0b 58 50 69 1c 63 00 27 cf 00 87 78 53 61 9d a9 8b af 96 cb fd c5 29 b3 65 97 c7 25 95 14 29 1c 08 3f 8d 4d e3 ea 5c 13 ff 90 a1 74 90 a0 b4 00 e4 00 36 02 e0 96 58 ad 3d 4b 14 03 9b dc 58 05 16 0c 86 06 b9 ef 20 f3 63 f5 10 81 72 dc eb 8b 34 e3 cd 85 2b a0 41 db 50 10 ca 8b 60 2d 37 8d f3 a0 f2 5a 32 0c 01 4b 38 5e 5f 6a 2e ac f2 74 61 dc Data Ascii: [u+ %EUWShNJS"^b)s(^4w\' 9~^0QM(S"JJbf3~J+sI+e;l}?au{0j*XPic'xSa)e%)?M\t6X=KX cr4+AP`-7Z2K8^_j.ta
2024-05-03 04:45:14 UTC	4976	IN	Data Raw: 6f 82 7e f7 e4 e0 60 83 e6 bf 67 f3 30 b9 e6 b2 01 6c cb 29 4b 7f 67 1c 05 8d 23 a1 55 81 3d c7 aa c0 22 70 96 d9 bb 3e a1 d0 fd 35 5b 2d e9 e5 bd 1f 18 7a 22 f8 bf 19 e2 fe 93 9e e4 f3 62 1d f3 dc ff 9e a6 fa 1a 56 fe 37 f6 13 fb 7e 8c 9c 5f ff f8 64 af 10 23 19 bf 1f 7f 24 c6 0f 24 cd 9f e9 47 cc b2 e7 f4 23 b7 58 c1 b3 27 fd b3 47 16 03 1c 59 91 6c ac 85 8f cc c2 e7 68 5f 17 ab 14 0a c3 f7 bb 9f 28 08 81 7c c4 e2 f9 6f f4 15 8b af fc 57 cf 4d 31 fc 2a 7d 3d eb 51 de 24 70 d6 a8 44 0c d9 0c 30 e7 ae 13 75 6f a3 69 31 3f 3a 3e cc d5 2f 36 87 9c 35 e4 cc 79 74 3d 2f 28 4b fd 64 53 60 5d e2 31 a6 d1 1f 62 f9 96 83 fc 36 42 bb e6 0a 0e 72 f4 05 83 f5 71 fc 65 00 a7 d9 0c 4e 33 68 4c b7 50 0e ae 32 1e 7e 18 50 31 79 18 57 4a ea 6e 2b 25 33 4c 91 05 2d a8 a1 Data Ascii: o~`g0l)Kg#U="p>5[-z"bV7~_d#$$G#X'GYlh_(\|oWM1*}=Q$pD0uoi1?:>/65yt=/(KdS`]1b6BrqeN3hLP2~P1yWJn+%3L-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50030	108.139.47.46	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:13 UTC	513	OUT	GET /app~tooltips-modern.3bf1c58b.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:14 UTC	793	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 53869 Connection: close Date: Fri, 03 May 2024 04:45:15 GMT Last-Modified: Thu, 02 May 2024 15:37:04 GMT ETag: "995b80bf99ebef9683ee5df2050392d3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: oLP_1Ba4ViYMtSeEBvAwXZ7OSlLmt5iH Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 008cd6752eb718142dfefe2f7e847982.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rduMp9yC7aEYt-HfR2pWGMFIEkWeum0nhgx_bPZdpJud_xPj33ep2A== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-05-03 04:45:14 UTC	15718	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 8b 62 db 46 92 28 fa 2b 14 36 d1 10 e3 26 cc 37 29 2a 8c 56 96 ed c4 33 7e 6d e4 bc c6 eb a3 80 44 53 84 05 02 34 00 4a 62 28 ce b7 dc 6f b9 5f 76 ab aa bb 81 c6 8b a4 93 cc ec ce b9 b3 9b b1 40 a0 df 5d 5d 5d ef 32 56 11 af 45 71 e8 4e 63 e3 b4 7e ed 05 13 db 7b 37 77 23 eb 8e 4f 96 f6 f4 e6 62 be f2 6f 5c 3f e6 e1 34 58 5c 7d 8c c6 fb 8b 3c 3c bc ff 60 5a cb 55 34 af bf 7f 3f ec f6 db 1f d8 66 d8 1f 76 87 a3 3a 67 31 0b cc f1 d7 9b c0 72 ea 31 db 9c 8f ea f0 eb c9 2a 8e 03 ff 9b 30 58 2d cf 63 18 ca 64 15 f3 ad 79 7a 6b 87 b5 70 1c d4 4f fa bd 6e d3 64 2e 3c 76 e1 b9 65 32 1f df b6 86 9d b6 c9 6c 78 1c b4 86 dd ae c9 22 78 1c f6 4f da 1d 93 79 f0 d8 e9 f4 da 27 e6 e9 34 f0 a3 b8 36 1d d7 9b 2c b2 ce d7 66 dd 98 50 77 Data Ascii: bF(+6&7)V3~mDS4Jb(o_v@]]]2VEqNc~{7w#Obo\?4X\}<<`ZU4?fv:g1r10X-cdyzkpOnd.<ve2lx"xOy'46,fPw
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: bd 43 e0 ec 00 f7 0c c7 4d ef 5a bd d3 fb 75 31 cb 8d 23 b8 1f bd ac fe 3e b3 d6 36 90 bb 73 1e a6 0e ca b0 68 f2 dd 15 5e f7 a2 dc b6 4a 03 62 5b 6f 65 96 29 b6 21 46 76 34 dd b2 d4 20 cd dc 9e 46 b9 ab 3d 83 c9 8c ff 68 36 07 dd 09 26 77 ca 22 b1 e4 c3 36 61 65 a2 2d 6b 77 06 bd 4e d5 55 5e 71 85 b7 db 27 a9 88 df 1f b7 9a cd 94 ab b4 75 41 06 dd 5f df f1 99 bc cc 37 9a 66 c8 59 49 63 57 9b 09 73 99 a7 1c 75 16 89 e5 e4 0b 1f 88 57 db 3b f7 61 6a 54 ce c3 fb 7d 2a 68 aa bf 61 de 6a f6 de 61 cb ac e0 b4 05 2f 17 6c 9e bd c5 a9 eb f7 2b 76 9d 79 ed a1 78 cf 7e e4 b3 d9 38 7a 04 7f 4f 0b e6 94 f2 c6 95 bc 4d a0 b8 10 62 1c d1 3d ae e8 f5 8e 1f 1e 1e 16 c0 33 c6 ca 32 f0 f8 38 23 9d 4c de 0b d6 f7 68 3c 85 02 58 ef ac 3e af 4f 4d b6 ac 63 a2 30 e0 01 f3 72 Data Ascii: CMZu1#>6sh^Jb[oe)!Fv4 F=h6&w"6ae-kwNU^q'uA_7fYIcWsuW;ajT}*haja/l+vyx~8zOMb=328#Lh<X>OMc0r
2024-05-03 04:45:14 UTC	12232	IN	Data Raw: 45 48 f3 8b e0 db 16 81 5b 1d 7e 44 29 11 c5 77 e5 eb 32 26 07 b8 92 ce 83 20 53 23 74 2a 63 ad 9c 93 b9 e1 be c9 fe 68 f9 af 37 68 63 84 60 49 4b 43 83 e6 c7 1a d6 84 51 26 65 73 82 cd 61 78 40 cd b7 67 59 e3 b2 5b a3 d9 66 cd ec b3 84 ac 46 8f 7b c8 33 eb ba dc a8 62 a2 c7 6b 3b 92 16 1f d5 49 1e 05 39 6a 70 92 49 0d 62 17 ad c7 81 12 de 42 71 4f df c3 d8 07 13 f2 8b 29 77 03 74 96 ae dd d2 cb 5d c1 ba 81 83 d9 69 e8 83 bb fc c3 d0 82 81 c9 52 3c 6d fc 72 4d 53 22 f3 9b d3 11 09 4d 20 5c 88 81 a2 0b 6a 08 3a ae e2 70 3e 43 37 ee 0e a4 eb a8 36 82 cc 68 3f b6 10 c3 77 5c bc bf 38 a5 46 d8 31 72 bf f2 8c c5 7c 10 fa 6d 2e 4c e8 50 12 26 62 e0 ea 5c 8c 42 2c 50 9a a7 ee 6d 0e 6c 41 f8 79 50 cc 02 da dc 48 3c 42 28 1a 9a 3d 34 b6 fa 96 53 d0 29 b6 f1 86 98 Data Ascii: EH[~D)w2& S#t*ch7hc`IKCQ&esax@gY[fF{3bk;I9jpIbBqO)wt]iR<mrMS"M \j:p>C76h?w\8F1r\|m.LP&b\B,PmlAyPH<B(=4S)
2024-05-03 04:45:14 UTC	9535	IN	Data Raw: cd 75 91 f1 b7 05 03 0a b3 4f 4f dc 3f 76 d2 31 47 8b dc 0e d3 ba 3a 96 35 f9 94 a2 a5 a6 b8 15 b5 3d ed 8e d7 b2 c4 e6 3c 66 2a 9d 87 f8 77 b9 c5 cc 9b 23 b8 f5 ec 62 d0 5f a9 77 15 0e 1d ee f5 83 62 d9 84 2b 11 58 99 fc 32 88 7a 17 17 03 5d 31 c4 cc 20 4c 46 3c 9f 65 3d e1 69 ae 2d e8 33 bf e4 ca 95 dd 54 ee f9 a0 01 f2 76 5c 4d 36 af 5e e9 c4 ea 48 e6 29 c7 87 9c 57 70 fb ce b3 57 a8 68 09 3e 7f 06 86 2a 62 74 55 ca 97 75 15 65 a3 b1 22 e3 56 a4 c1 9d 36 b3 75 50 ae 11 bb 24 aa 02 f1 a8 f9 3e 0d dc c5 f2 f2 b2 48 6e 64 11 ef 28 f6 cf 04 85 66 ee 99 41 8f e4 ba 33 ae 36 2d e6 89 33 91 22 a7 ee 79 bc d2 00 a6 54 ee b5 e2 15 47 e7 dd 41 14 29 c1 cd 84 b2 a1 2f 81 69 b9 15 98 b8 ba ab 70 5f b4 7b 87 9c d3 3b 36 f1 4c e1 85 0d 57 0e 19 0a e1 f8 53 84 c4 67 Data Ascii: uOO?v1G:5=<fw#b_wb+X2z]1 LF<e=i-3Tv\M6^H)WpWh>btUue"V6uP$>Hnd(fA36-3"yTGA)/ip_{;6LWSg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50027	108.139.47.46	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:13 UTC	504	OUT	GET /app-modern.b556ed0e.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:14 UTC	794	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 133363 Connection: close Date: Fri, 03 May 2024 04:45:15 GMT Last-Modified: Thu, 02 May 2024 15:37:04 GMT ETag: "804dc4a6c2f2d47d50b70085982c73c2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: Xj7G9dNbdzJhSrd2b.CkmkR1zB4Bzb4. Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f5b36a6d650578e8cf7b1700c37caa00.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Aregzkw7zd06I8s9faXfHF5EtCyHNh1qzABaoGxaNBfvgd19_uBv2Q== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-05-03 04:45:14 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 72 1b 49 b2 20 f8 2b 64 1e 35 1b d9 0a a6 70 21 78 01 0b c5 a6 28 a9 a4 2a a9 a4 16 a5 52 55 a9 75 a8 24 10 20 52 04 32 a1 cc 04 2f 02 61 36 cf 63 b6 63 b3 0f 63 b6 6f 6b b6 0f fb b6 cf fb be 9f 32 5f b0 9f b0 ee 1e f7 bc 80 2c 55 9d 9e d3 b3 e7 5c 4a 60 66 64 84 47 84 87 df dd c3 9b 67 7c 2d cb d3 68 90 7b fb 8d b3 49 72 1a 4e de 8c a3 2c b8 e4 a7 b3 70 70 7e 34 9e c7 e7 51 9c f3 74 90 4c 4f 3e 65 fd db 9b dc dc bc ff e0 07 b3 79 36 6e bc 7f df e9 b6 b7 3e b0 45 6b 77 bb d9 e9 35 38 cb 59 ec f7 bf 5d c4 c1 b0 91 b3 c5 c3 5e 03 fe 8a d8 05 fd 9b 2c fd fd 8b 30 5d 4b fb 71 63 77 7b af dd f1 f7 07 49 9c e5 6b 51 bf d3 66 49 bf d1 64 69 70 78 ed 37 bc d0 63 8b 3c 4c cf 78 de f3 f8 de e4 62 2f 4d 9a de 12 5e 0c a3 6c 36 Data Ascii: rI +d5p!x(*RUu$ R2/a6cccok2_,U\J`fdGg\|-h{IrN,pp~4QtLO>ey6n>Ekw58Y]^,0]Kqcw{IkQfIdipx7c<Lxb/M^l6
2024-05-03 04:45:14 UTC	128	IN	Data Raw: 4c 71 c9 f4 bd ce 68 72 7f ea bc d2 3a bd 5a f2 b6 a8 62 ea 96 30 55 31 33 94 7c 2c 1c f5 da 78 fe 37 e3 33 17 75 86 96 7d 9d 69 98 1f 58 b1 19 c8 02 87 f3 01 a7 3c 54 57 ad b6 98 3c 4e d5 31 ba cb eb 35 df e7 1f a8 5c 3c 5b 80 18 b1 b0 22 1b b9 5d 3d 54 7e 89 09 a7 58 c6 54 68 c0 a6 6d be a2 ad 2c 16 d6 c8 85 65 5a ba 20 60 58 90 4a 8d 35 0b 1f f8 ba e3 55 f6 88 df 19 b3 a0 97 24 Data Ascii: Lqhr:Zb0U13\|,x73u}iX<TW<N15\<["]=T~XThm,eZ `XJ5U$
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: eb fd cd 2e 30 8a b7 b1 2b 4b 43 0c 4a a1 73 e9 4d 41 c6 e8 3b 95 aa 17 ab cd 63 65 75 33 71 64 2c 34 9b e9 9e 95 99 d1 08 b0 13 0a 38 fe 91 c4 29 c4 b5 81 7b a5 a8 35 9d a1 73 93 76 34 6a e4 df c2 be 0c 7d 69 72 5c 43 69 4a de 59 43 66 89 19 23 52 37 b7 ad 13 53 2d 21 8e a5 cc 78 66 21 d1 c8 52 a4 2f 2c 0d f3 1a 51 13 eb 84 9c 2a 04 e5 38 f0 b7 ad 8d 8d f5 01 9c ad 53 ac 88 97 df 6f 2d 3f 96 8d b9 b7 18 9d 44 6d bc 29 5b 01 b1 82 d3 82 47 89 9f a7 d6 74 ac 15 ad 9b 51 e5 5e ad dc dd e2 46 1a 33 f1 aa ab b4 10 d7 0a 57 38 17 2f 8d 66 e2 d0 c7 b8 b2 78 95 90 7d dc e1 cd e3 70 30 6e 20 71 33 0b 41 74 76 61 4c 38 c5 9b 93 e8 82 5a bd ae 02 a0 9c 42 21 aa 2e 27 42 25 2b c7 1b 06 0d 82 f9 28 83 ab db 6b c4 b5 2a e6 dd c6 86 ed bc b3 4d dd fb c6 da 46 97 af 66 Data Ascii: .0+KCJsMA;ceu3qd,48){5sv4j}ir\CiJYCf#R7S-!xf!R/,Q8So-?Dm)[GtQ^F3W8/fx}p0n q3AtvaL8ZB!.'B%+(kMFf
2024-05-03 04:45:14 UTC	1024	IN	Data Raw: ee fc 66 ab 09 ff 1c 70 38 81 7a 16 cf fb 4d b8 97 c6 a0 b1 6d 39 1e d5 76 dd 81 37 a6 e8 1a f4 5d c2 6e 7b 8e eb 39 07 88 cd b7 f9 63 4d fc 98 eb c5 9b 4b b6 78 b3 54 3e 38 36 0d 10 a5 e3 40 a2 25 53 ce dd 03 9e 32 ac d9 68 fc 1b 3c b8 5a 1a 0f eb 23 36 9d 1e 5c 61 3a e7 51 30 ad 83 ca 79 1e f5 a1 3f 07 2b 07 9a ea ab c8 3e cf 11 99 c7 3a 0d e8 f7 0a 3a 12 6c 6e 5e bb a2 79 b3 e0 a6 2e 1a d5 c3 ea 64 f6 11 3c 15 5b 0e e3 9b 3a ac 65 1c 67 31 bc 70 e7 40 a4 3b a3 4e 68 fd 91 33 d2 6c 41 35 93 38 ca ea 3c 24 a3 23 7f 4e 82 59 38 bd ed eb 73 82 f7 4f 83 08 b4 c5 24 9c d0 b4 f0 ef f4 11 5a fa 00 7d e2 eb f2 6b fb 50 cd f5 45 98 b1 7a 3a 47 54 7e 68 5f fd 3a 09 e6 07 d7 f0 06 5d f5 87 d0 ee cb 3a fe 3e 58 c9 7e 2c 55 97 83 21 d0 c4 02 33 78 01 89 34 0e a6 6c Data Ascii: fp8zMm9v7]n{9cMKxT>86@%S2h<Z#6\a:Q0y?+>::ln^y.d<[:eg1p@;Nh3lA58<$#NY8sO$Z}kPEz:GT~h_:]:>X~,U!3x4l
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: d9 35 23 9d 87 af 36 07 26 ca 50 4a 75 79 d9 1b 9b cf 94 8c df a7 19 af 35 fd 56 cf 3d 00 fa cc a4 f4 bb e2 cb 6c 74 01 c2 5c a4 13 35 a7 c8 7b d5 b7 d2 a8 3b ce 2e f0 4c e0 5e b5 89 76 9c 27 c1 ad a8 ce dd 12 bd a9 c1 24 f3 8a 31 4d e9 c6 e9 e8 ac 9d 0e a1 22 d7 85 ae 84 1a c7 3f 64 8a 4a c3 7f 9f 0e 7a 20 ed 2d 9b 7d c1 16 9c ff ef ff f8 df fe 4f c7 5b 44 21 45 30 39 cd c9 6e ab e1 78 59 1c 23 48 29 26 b6 00 01 21 49 42 02 15 11 9c 88 72 e8 f5 75 bb 8f 90 10 9a fe b8 d9 19 ed 37 c7 ed d6 7e af bb db 1d 8f 86 8d bd 3d 6e f1 e1 3c ca fa 16 9a 8a 3a bb ac b5 0b 8b 74 34 19 35 59 63 c8 e0 cd 31 bd 08 d2 76 4b 6b ec ff fe 3f 9b 8d 6d 76 cd c6 0e f1 2c 66 53 3b 5b 7e ab d1 0c da e3 49 d0 e9 f6 3a 01 b4 96 35 db cd 4d ed 6c 61 3b 59 2b 08 7a fb ed c6 68 2f 68 Data Ascii: 5#6&PJuy5V=lt\5{;.L^v'$1M"?dJz -}O[D!E09nxY#H)&!IBru7~=n<:t45Yc1vKk?mv,fS;[~I:5Mla;Y+zh/h
2024-05-03 04:45:14 UTC	1024	IN	Data Raw: a2 dd 57 9e e8 9a cb d1 41 7e 88 4f ce 65 72 06 77 a5 5f 78 c9 f5 48 77 cd a1 62 52 69 68 6c 89 3c e6 3f 6c 1e a2 e6 57 0f 11 41 98 1d e4 4e 58 d2 bf be 74 c4 d1 45 da 93 b3 f5 84 e5 8a ac 2e d6 e7 58 38 a0 b2 40 5b 50 c1 55 d6 bf 68 f0 92 11 30 c3 ce 0e fb 76 7f ff d0 d9 df 7f e8 f4 59 15 eb fc c2 4a a9 bf b9 8b 4b 3d d2 62 a8 52 47 ff e8 0a c3 77 ab a4 aa 72 7d 73 34 60 95 2a 44 e4 92 17 eb 56 58 16 ec 86 93 8e 25 6f bd c5 95 72 bd df e4 3a f7 ac 66 3e 05 b8 5f 55 78 ab 36 ba ee 81 c5 eb a9 d5 2d 86 1a 50 c1 75 67 42 39 bd ab 5d b7 d7 a0 6d 57 51 22 52 e1 33 b6 d6 45 4f 0c 0e 27 44 e1 41 78 0f 66 68 39 3b 93 5f 45 57 c9 ad 76 d9 dd 4d e3 63 c0 71 c4 e9 97 b1 8a 3a 1b 7d 2c 47 a0 b4 5a fc 34 95 bf ed 0b 54 a4 53 d3 8b 64 db 74 23 e9 07 13 78 65 29 e7 17 Data Ascii: WA~Oerw_xHwbRihl<?lWANXtE.X8@[PUh0vYJK=bRGwr}s4`*DVX%or:f>_Ux6-PugB9]mWQ"R3EO'DAxfh9;_EWvMcq:},GZ4TSdt#xe)
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: 27 51 01 1e eb 79 cf 19 21 e1 91 df ab 3e 79 99 de d6 08 b1 fd 95 06 1d 1a 53 19 e3 49 64 30 20 8e f3 33 cb c1 5d d6 55 57 a8 a0 6a ce 5f 30 60 75 b5 7c da 11 6a c4 59 e1 b9 40 b1 e4 af ac 74 e6 93 e2 b1 96 f0 f9 f9 85 7c 5b 76 5b cd b6 eb fd 48 2e 2f 8d dd a6 72 74 61 d9 ba 9d ec cb d5 b8 77 41 6a 34 88 8f d9 9a fd 9a 0a 72 95 52 17 fd 64 b0 59 c1 98 c1 8d 67 17 09 08 34 a8 b2 4a d1 ef 15 3f 50 4a 8b d8 07 4a 44 64 87 4e c3 81 dd b4 89 1e f3 37 5b c5 60 6d b3 8e 4a 29 4f 29 cf 6d 4b 70 8c 52 da f6 34 ed 63 6d 14 89 d6 80 45 c4 9d 77 78 8e 09 3d 60 38 ff ba a6 e1 73 c9 7e 91 4c 6b e2 fc b7 4f 77 be 99 47 e7 d0 ac 94 ed 76 bc f0 dd a3 57 6f ae 1b df 7f 77 1e 1f c1 ff bd 3c fd e9 e2 f8 a7 73 b8 7a 72 82 bf bf 7b 7c 44 7f 5f 65 d3 f9 98 0a 1c 4f 8f 7f 7c f7 Data Ascii: 'Qy!>ySId0 3]UWj_0`u\|jY@t\|[v[H./rtawAj4rRdYg4J?PJJDdN7[`mJ)O)mKpR4cmEwx=`8s~LkOwGvWow<szr{\|D_eO\|
2024-05-03 04:45:14 UTC	1024	IN	Data Raw: be 42 27 74 fc 67 4e a9 5c 8c ac ad cf 30 08 5c 2e 49 b5 ae 47 cc 80 82 c9 19 fc 4c 1c 30 ca a7 80 39 40 d3 12 94 c8 6a 5b 13 19 08 de c2 02 d1 d1 09 89 d3 72 42 ed 57 86 33 86 62 07 d1 0d 8e c6 01 b3 b2 22 4c 7f 99 56 21 f4 c5 4e 74 7f ef 09 f5 0d c1 d6 88 7c 96 77 a5 1a 37 37 5a e6 a9 83 2b f5 e0 1c 6f 56 42 ac fe 75 ab 56 91 ca d7 2f 5a be b6 9a e8 49 d2 d4 2c d8 8f f8 e9 5f 62 94 ee d2 62 4a c0 c2 8c e8 d0 64 98 41 4a 35 3c 6d 89 1e d0 2c 1b 9a ba c2 d0 64 6b 0d 4d 65 e3 98 26 e3 b1 97 a1 69 2c 5f 32 87 c2 09 a9 8e d9 d2 15 d6 ba e3 fe ce bd 4c c5 06 68 69 78 4f 5f e5 3d 05 1a ca 1a 26 14 93 3e af d9 6e 41 81 82 de 2d 53 1f 66 91 f9 7e 8d e3 c2 33 0f 9d 0d 76 32 03 16 72 55 1f 33 ae d1 d3 d4 2e c3 97 b1 79 60 be 4b 62 ca 3f 2b b4 cf 9a 84 dc 1f 02 65 Data Ascii: B'tgN\0\.IGL09@j[rBW3b"LV!Nt\|w77Z+oVBuV/ZI,_bbJdAJ5<m,dkMe&i,_2LhixO_=&>nA-Sf~3v2rU3.y`Kb?+e
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: 99 57 46 13 46 2c c9 1a de 19 30 57 cd 6a c8 de 49 c6 79 7b e6 24 c6 18 81 33 24 6e ae d3 1b 4a e2 76 aa 2e 7b af e8 ea bc f4 7d fb ca 2a c0 cd 14 12 1c aa 7e c9 6b 7c e2 99 df 32 43 00 ea 10 85 4e 19 12 81 16 1c 48 d0 bf 9a 1c 27 5a 94 a1 1c 99 89 62 1b d0 29 ef ae e8 28 5d 83 25 53 8e 1f 62 70 e4 97 c8 43 a3 e3 bc 0a 37 21 1d 6f ca 5e d0 1a 42 99 99 5a b0 a0 62 e4 4d b9 f0 11 71 98 95 62 4a 87 e9 8d 86 65 ba a9 51 fe 28 dd dd 93 10 48 5b 37 e9 39 96 2f 7e 50 81 42 da ba 1a 06 83 54 aa 47 f1 03 df 66 44 33 1d e1 2c 0c 74 35 7c 2e cb e1 58 1c 0e fa 61 5c ae 23 e4 6c 4d 17 52 53 0f 4f 82 ab b8 8a 63 a1 66 ea d1 65 d0 41 b7 5c e1 85 04 cc cf d2 7f 0b b2 93 97 a5 c0 a6 3d a4 21 52 bc 91 de 2d 13 ff bb 3c 92 98 e8 55 aa 79 b1 a0 bd 4f 56 64 26 e2 4c 2b 9f 66 Data Ascii: WFF,0WjIy{$3$nJv.{}*~k\|2CNH'Zb)(]%SbpC7!o^BZbMqbJeQ(H[79/~PBTGfD3,t5\|.Xa\#lMRSOcfeA\=!R-<UyOVd&L+f
2024-05-03 04:45:14 UTC	16384	IN	Data Raw: 44 b3 2b 53 74 b0 31 f2 51 62 9b 07 9a 0e ab fa 69 02 a1 52 5c a9 59 7c 94 bb bd 6a b5 90 d2 8c f9 c3 41 67 2e 42 e3 69 20 36 bd 3d 79 4b 50 6f 1a a9 73 96 b4 61 c0 d4 b6 7a 08 35 23 c1 9e 14 49 7b af 14 68 05 26 c1 7a 9b 49 57 88 24 e6 19 e6 a5 e9 52 0d 67 5c 3b 55 92 b0 50 a4 da 6c 15 60 40 0e 70 29 67 95 59 23 74 50 2a 94 2c 6b 94 60 5d 41 f9 cf a1 a1 42 29 a6 f8 20 d5 58 8d 17 7c 76 d1 63 9b 2b 1b aa d5 03 05 3d 43 63 52 75 84 f4 36 c3 49 ac cb e8 2a cf 50 e3 b4 de ed b6 d7 61 69 24 2e 3b ad e6 c5 f4 aa 23 45 f4 09 9f 99 26 73 ee 79 9a bc 69 9b 3d ff fa 42 72 ee 11 51 ff 97 6e 84 f9 58 53 1f 9f f7 4b f4 45 df 5b 5b 9d e9 46 1e d0 84 6a 7b 00 fc 5c 52 27 cb 55 2f 1c 77 a4 54 8a e4 a1 f3 34 f5 df 19 c1 30 ca c1 ee f0 f4 3b 3d 35 96 6c 5b 77 55 1e ca 2e Data Ascii: D+St1QbiR\Y\|jAg.Bi 6=yKPosaz5#I{h&zIW$Rg\;UPl`@p)gY#tP,k`]AB) X\|vc+=CcRu6IPai$.;#E&syi=BrQnXSKE[[Fj{\R'U/wT40;=5l[wU.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50035	108.139.47.46	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:15 UTC	519	OUT	GET /launcher-discovery-modern.0d71e4ad.js HTTP/1.1 Host: js.intercomcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:15 UTC	792	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 1926 Connection: close Date: Fri, 03 May 2024 04:45:16 GMT Last-Modified: Thu, 02 May 2024 15:37:05 GMT ETag: "c8d15d2b5331fe0e09a3f74e8aa0779b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, s-maxage=7200, public Content-Encoding: gzip x-amz-version-id: 9Szn0k0A9HTll_qNEKjAiAiNWDwqCg7t Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b4d4149b3eab97748926fd7af4eba404.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: M6MxkHc7utwavg4BVVH9LG4cm0LR6Y25ufu5Cx-6NKpu70qKHewthw== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Resource-Policy: cross-origin
2024-05-03 04:45:15 UTC	1926	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 58 6d 73 db 36 12 fe 2b 0c af a7 21 53 90 a5 5e 2c 5b e4 a8 bd d4 c9 4d 3b 97 5c 32 97 b4 f9 90 c9 b8 10 09 49 88 49 82 05 40 4b 0a a3 ff 7e 0b f0 55 14 63 3b bd b3 c7 36 05 ec 1b 9e 5d ec 3e b4 99 0b 62 08 c9 69 28 cd c0 da c4 6c 85 e3 77 5b 2a dc 1d 59 65 38 bc bd de e6 e9 2d 4d 25 e1 21 4b 6e 3e 89 e5 c3 22 5f be 7c f8 68 bb 59 2e b6 d6 87 0f 8b c5 7c f2 11 15 d3 c5 78 7e e5 5b 04 51 24 ec e5 8f 85 70 b9 45 6d 24 dc c8 a2 a8 88 c8 1a e7 b1 f4 2d d8 7a 89 f3 34 dc 12 fe 9c 8a 90 dd 11 7e f8 27 c7 09 39 da c1 1d e6 86 5c 0a 6b 31 bf 98 79 36 4a e1 71 7e 39 9b 5f da 88 c1 e3 0c 96 c7 36 c2 6a 75 71 35 05 01 0e 8f 57 f3 c5 64 6a 07 21 4b 85 34 b6 4b cb 43 dc a5 97 b6 65 7a 7f 2f 18 c4 4e e5 c1 f7 82 e3 d8 eb 7c 1e 07 47 d3 Data Ascii: Xms6+!S^,[M;\2II@K~Uc;6]>bi(lw[*Ye8-M%!Kn>"_\|hY.\|x~[Q$pEm$-z4~'9\k1y6Jq~9_6juq5Wdj!K4KCez/N\|G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50034	142.251.40.162	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:15 UTC	1393	OUT	GET /pagead/viewthroughconversion/784219015/?random=1714711513345&cv=11&fst=1714711513345&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkbcRcZuieg13XrjDkDuw8IkBxgvs0fJsRhK8zTzV5APMBFsZVZ6JPClaWs
2024-05-03 04:45:16 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-03 04:45:16 UTC	552	IN	Data Raw: 61 62 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: abf(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-05-03 04:45:16 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-05-03 04:45:16 UTC	951	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 37 30 38 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 35 31 30 76 39 31 38 30 35 34 30 36 37 32 7a 38 37 32 37 33 34 39 39 38 7a 61 32 30 31 5c 78 32 36 67 63 64 5c 78 33 64 31 33 72 33 72 33 6e 33 6e 35 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 68 6f 72 74 2e 69 6f 25 32 46 25 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 6c 69 6e 6b 5f 6e 6f 74 5f 66 6f 75 6e 64 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 Data Ascii: st\x3d1714708800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be4510v9180540672z872734998za201\x26gcd\x3d13r3r3n3n5\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found\x26hn\x3dwww.goog
2024-05-03 04:45:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50032	142.251.40.162	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:15 UTC	874	OUT	GET /pagead/landing?gcs=G111&gcd=13r3r3n3n5&rnd=2024227052.1714711509&url=https%3A%2F%2Fshort.io%2F&dma=0&npa=0&gtm=45He4510n71KRWKR2v72734998za200&auid=1019735161.1714711509 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkbcRcZuieg13XrjDkDuw8IkBxgvs0fJsRhK8zTzV5APMBFsZVZ6JPClaWs
2024-05-03 04:45:16 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:45:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50033	18.164.96.46	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:16 UTC	540	OUT	GET /modules.842bcec28f9fd12bb79e.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:16 UTC	718	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226550 Connection: close Date: Thu, 02 May 2024 13:45:08 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "f2597e47a3a66162d7c40cbc0869fc34" Last-Modified: Thu, 02 May 2024 13:44:30 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5af2699243b550d789ef9dce0b522ed2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: zIiKdSuBxcn0SeCRB5CJbZzIlE3TjhzNKViMaUfALszZXK5vLQfgJA== Age: 54008
2024-05-03 04:45:16 UTC	15666	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 38 34 32 62 63 65 63 32 38 66 39 66 64 31 32 62 62 37 39 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.842bcec28f9fd12bb79e.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 6e 55 73 65 72 49 64 28 21 30 29 3b 72 65 74 75 72 6e 28 70 61 72 73 65 49 6e 74 28 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 6c 69 63 65 28 2d 31 30 29 29 7c 7c 22 22 2c 31 36 29 2b 31 29 2f 4d 61 74 68 2e 70 6f 77 28 32 2c 34 30 29 7d 2c 63 6f 6d 70 61 72 65 52 61 74 69 6f 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 2e 67 65 74 41 73 4e 75 6d 62 65 72 28 29 2a 28 74 3f 31 30 30 3a 31 29 3c 3d 65 7d 29 2c 22 69 64 65 6e 74 69 66 69 65 72 2e 63 6f 6d 70 61 72 65 52 61 74 69 6f 22 29 7d 2c 63 3d 6e 28 34 38 30 38 29 2c 75 3d 5b 22 61 66 22 2c 22 61 72 22 2c 22 62 67 22 2c 22 63 61 22 2c 22 63 73 22 2c 22 63 79 22 2c 22 64 61 22 2c 22 64 65 22 2c 22 65 6c 22 2c 22 65 6e 22 2c 22 Data Ascii: nUserId(!0);return(parseInt((null==e?void 0:e.slice(-10))\|\|"",16)+1)/Math.pow(2,40)},compareRatio:hj.tryCatch((function(e,t){return s.getAsNumber()*(t?100:1)<=e}),"identifier.compareRatio")},c=n(4808),u=["af","ar","bg","ca","cs","cy","da","de","el","en","
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 5f 6e 65 77 5f 72 65 73 70 6f 6e 73 65 26 26 68 6a 2e 65 76 65 6e 74 2e 73 69 67 6e 61 6c 28 22 70 6f 6c 6c 2e 73 65 6e 64 22 2c 7b 69 64 3a 74 2c 72 65 73 70 6f 6e 73 65 5f 69 64 3a 65 2e 70 6f 6c 6c 5f 72 65 73 70 6f 6e 73 65 5f 69 64 7d 29 2c 6e 75 6c 6c 3d 3d 69 7c 7c 69 28 65 29 7d 29 29 7d 29 2c 22 64 61 74 61 22 29 2c 74 2e 63 6f 6d 70 6c 65 74 65 50 6f 6c 6c 52 65 73 70 6f 6e 73 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 68 6a 2e 77 69 64 67 65 74 2e 70 6f 6c 6c 73 52 65 73 70 6f 6e 73 65 73 55 55 49 44 5b 74 5d 3b 6c 28 22 22 2e 63 6f 6e 63 61 74 28 65 2e 76 32 2c 22 2f 63 6c 69 65 6e 74 2f 73 69 74 65 73 2f 22 29 2e 63 6f 6e 63 61 Data Ascii: ,(function(e){e.is_new_response&&hj.event.signal("poll.send",{id:t,response_id:e.poll_response_id}),null==i\|\|i(e)}))}),"data"),t.completePollResponse=hj.tryCatch((function(t,n){var r=hj.widget.pollsResponsesUUID[t];l("".concat(e.v2,"/client/sites/").conca
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 22 5c 5c 24 31 22 29 29 2e 73 70 6c 69 74 28 2f 5c 73 2f 67 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 28 74 2e 6c 65 6e 67 74 68 3c 61 2e 6d 61 78 43 6c 61 73 73 65 73 41 6c 6c 6f 77 65 64 7c 7c 30 3d 3d 3d 61 2e 6d 61 78 43 6c 61 73 73 65 73 41 6c 6c 6f 77 65 64 29 7c 7c 68 6a 2e 68 71 2e 69 6e 41 72 72 61 79 28 65 2c 61 2e 69 67 6e 6f 72 65 43 6c 61 73 73 4c 69 73 74 29 7c 7c 67 2e 74 65 73 74 28 65 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 74 2e 70 75 73 68 28 65 29 7d 29 29 2c 74 2e 6a 6f 69 6e 28 22 20 22 29 29 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 Data Ascii: "\\$1")).split(/\s/g).forEach((function(e){!(t.length<a.maxClassesAllowed\|\|0===a.maxClassesAllowed)\|\|hj.hq.inArray(e,a.ignoreClassList)\|\|g.test(e)\|\|""===e\|\|t.push(e)})),t.join(" "))},y=function(e){return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g,"
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 6c 4d 44 35 29 2c 71 2e 65 6e 61 62 6c 65 52 65 63 6f 72 64 69 6e 67 28 7a 2e 51 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 2e 73 65 73 73 69 6f 6e 52 65 73 75 6d 65 64 22 29 29 2c 74 28 29 7d 29 29 7d 29 29 2c 4b 3d 7b 69 73 54 72 65 65 4d 69 72 72 6f 72 49 6e 69 74 69 61 6c 69 7a 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 2c 73 74 61 72 74 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 6c 2e 73 65 74 52 65 63 6f 72 64 69 6e 67 45 6e 61 62 6c 65 64 28 21 30 29 2c 42 2e 79 2e 73 65 74 28 22 61 63 74 69 76 65 22 2c 21 30 29 3b 76 61 72 20 65 3d 68 6a 2e 75 69 2e 67 65 74 57 69 6e 64 6f 77 53 69 7a 65 28 29 2c 74 3d 68 6a 2e 74 69 6d 65 2e 67 65 74 4e 6f 77 28 29 2c 6e 3d 75 2e 66 5f 2e 6e 6f 77 28 29 Data Ascii: lMD5),q.enableRecording(z.Q.get("session.sessionResumed")),t()}))})),K={isTreeMirrorInitialized:function(){return G},start:hj.tryCatch((function(){s.l.setRecordingEnabled(!0),B.y.set("active",!0);var e=hj.ui.getWindowSize(),t=hj.time.getNow(),n=u.f_.now()
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 2c 6e 7d 29 2c 22 54 72 65 65 43 68 61 6e 67 65 73 2e 67 65 74 43 68 61 6e 67 65 22 29 2c 72 2e 67 65 74 4f 6c 64 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 3f 74 2e 67 65 74 4f 6c 64 50 61 72 65 6e 74 28 29 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 29 2c 22 54 72 65 65 43 68 61 6e 67 65 73 2e 67 65 74 4f 6c 64 50 61 72 65 6e 74 22 29 2c 72 2e 67 65 74 49 73 52 65 61 63 68 61 62 6c 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 3d 72 2e 72 6f 6f 74 4e 6f 64 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 72 2e 72 65 61 63 68 61 62 6c 65 43 61 63 Data Ascii: ,n}),"TreeChanges.getChange"),r.getOldParent=hj.tryCatch((function(e){var t=r.get(e);return t?t.getOldParent():e.parentNode}),"TreeChanges.getOldParent"),r.getIsReachable=hj.tryCatch((function(e){if(e===r.rootNode)return!0;if(!e)return!1;if(r.reachableCac
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 75 74 65 43 68 61 6e 67 65 64 29 2c 69 3d 65 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 43 68 61 6e 67 65 64 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 65 29 3b 72 65 74 75 72 6e 20 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 68 6a 2e 70 72 69 76 61 63 79 2e 67 65 74 53 75 70 70 72 65 73 73 65 64 54 65 78 74 4e 6f 64 65 28 65 2c 21 31 29 2e 63 6f 6e 74 65 6e 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 76 6f 69 64 20 30 2c 6e 7d 29 29 3b 6f 2e 6f 6e 4d 75 74 61 74 69 6f 6e 28 7b 72 65 6d 6f 76 65 64 3a 74 2c 61 64 64 65 64 4f 72 4d 6f 76 65 64 3a 6e 2c 61 74 74 72 69 62 75 74 65 73 3a 72 2c 74 65 78 74 3a 69 7d 29 2c 65 2e 72 65 6d 6f 76 65 Data Ascii: uteChanged),i=e.characterDataChanged.map((function(e){var t,n=o.serializeNode(e);return n.textContent=null!==(t=hj.privacy.getSuppressedTextNode(e,!1).content)&&void 0!==t?t:void 0,n}));o.onMutation({removed:t,addedOrMoved:n,attributes:r,text:i}),e.remove
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 2e 6f 77 6e 65 72 4e 6f 64 65 7c 7c 6c 2e 6f 77 6e 65 72 48 6f 73 74 4e 6f 64 65 3b 69 66 28 28 30 2c 72 2e 6d 24 29 28 65 29 29 7b 76 61 72 20 74 3d 6c 2e 73 68 65 65 74 49 64 7c 7c 6e 75 6c 6c 3b 61 28 69 28 65 2c 73 2c 74 2c 63 29 29 7d 7d 29 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 6e 3d 21 30 29 7d 2c 74 2e 72 65 67 69 73 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 2e 70 75 73 68 28 65 29 7d 2c 74 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 26 26 28 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 52 75 6c 65 3d 65 2c 65 3d 6e 75 6c 6c 2c 6e 3d 21 31 29 2c 6f 3d 5b 5d 7d 2c 74 7d 28 29 7d 29 2c 22 68 6a 2e 64 65 6c 65 74 65 64 Data Ascii: e((function(){var e=l.ownerNode\|\|l.ownerHostNode;if((0,r.m$)(e)){var t=l.sheetId\|\|null;a(i(e,s,t,c))}}))}return n},n=!0)},t.register=function(e){o.push(e)},t.destroy=function(){e&&(CSSStyleSheet.prototype.deleteRule=e,e=null,n=!1),o=[]},t}()}),"hj.deleted
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 65 29 2e 66 6c 75 73 68 28 29 7d 29 29 7d 2c 63 6c 65 61 72 50 61 67 65 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 29 2c 75 2e 79 2e 73 65 74 28 22 70 61 67 65 43 6f 6e 74 65 6e 74 22 2c 76 6f 69 64 20 30 29 7d 2c 73 65 74 43 75 72 72 65 6e 74 50 61 67 65 56 69 73 69 74 4b 65 79 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 70 21 3d 3d 65 26 26 28 70 3d 65 2c 74 28 29 29 2c 53 2e 66 6c 75 73 68 28 29 7d 29 2c 22 64 61 74 61 22 29 2c 77 72 69 74 65 4e 65 77 46 72 61 6d 65 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 28 6e 29 2c 53 2e 77 72 69 74 65 28 65 29 2c 74 28 29 2c 53 7d 29 29 2c 77 72 69 74 65 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 Data Ascii: e).flush()}))},clearPageContent:function(){g(),u.y.set("pageContent",void 0)},setCurrentPageVisitKey:hj.tryCatch((function(e){p!==e&&(p=e,t()),S.flush()}),"data"),writeNewFrame:hj.tryCatch((function(e,n){return t(n),S.write(e),t(),S})),write:hj.tryCatch((
2024-05-03 04:45:16 UTC	16384	IN	Data Raw: 70 69 72 79 22 7d 2c 65 78 74 72 61 54 61 67 73 3a 7b 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 68 6a 2e 6d 65 74 72 69 63 73 2e 67 65 74 45 72 72 6f 72 4d 65 73 73 61 67 65 28 65 29 2c 65 72 72 6f 72 49 64 3a 74 7d 7d 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 68 6a 2e 73 74 6f 72 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 74 2e 73 65 73 73 69 6f 6e 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6e 3d 68 6a 2e 73 74 6f 72 65 2e 73 65 73 73 69 6f 6e 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 2e 63 72 65 61 74 65 64 22 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 72 2e 66 5f 2e 6e 6f 77 28 29 2b 61 3e 6e 2b 69 29 7b 76 61 72 20 6f 3d 69 2d 28 72 2e 66 5f Data Ascii: piry"},extraTags:{errorMessage:hj.metrics.getErrorMessage(e),errorId:t}})},c=function(e){try{var t;if(null===(t=hj.store)\|\|void 0===t\|\|!t.session)return!0;var n=hj.store.session.get("session.created");if("number"==typeof n&&r.f_.now()+a>n+i){var o=i-(r.f_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50038	142.250.80.2	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:16 UTC	1517	OUT	GET /td/rul/784219015?random=1714711513345&cv=11&fst=1714711513345&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkbcRcZuieg13XrjDkDuw8IkBxgvs0fJsRhK8zTzV5APMBFsZVZ6JPClaWs
2024-05-03 04:45:16 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-03 04:45:16 UTC	609	IN	Data Raw: 38 33 32 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 832<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-05-03 04:45:16 UTC	1255	IN	Data Raw: 39 32 34 34 32 31 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 39 35 33 32 38 31 30 34 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 6a 71 30 46 76 51 21 32 73 5a 6c 76 34 33 41 21 33 73 41 41 70 74 44 56 34 6e 43 77 63 2d 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 37 31 38 30 32 39 39 39 39 22 5d 2c 6e 75 6c 6c 2c 31 37 31 34 37 31 31 35 31 36 33 31 37 31 38 34 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 Data Ascii: 924421\u0026tag_eid=95328104","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sjq0FvQ!2sZlv43A!3sAAptDV4nCwc-"],"userBiddingSignals":[["718029999"],null,1714711516317184],"ads":[{"renderUrl":"https://tdsf.doub
2024-05-03 04:45:16 UTC	241	IN	Data Raw: 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: restGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></body></html>
2024-05-03 04:45:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50039	142.251.41.4	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:16 UTC	1449	OUT	GET /pagead/1p-user-list/784219015/?random=1714711513345&cv=11&fst=1714708800000&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqYDRSEX3eYOxEjKViMHizVMWip1c4RSk-T8fdf3sUExxCaHKM&random=1432778233&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://short.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:16 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:45:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50040	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:16 UTC	763	OUT	GET /icons/icon-144x144.png?v=e684309adfdf6efa515a707d11a3e1f1 HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f; _ga=GA1.1.84728328.1714711503; _ga_JVCX6B1JPE=GS1.1.1714711500.1.0.1714711504.60.0.576514287; _gcl_au=1.1.1019735161.1714711509; _uetsid=ee7ccfe0090711ef838dbfb898906ddc; _uetvid=ee7d3d30090711efab5c199ac5070e62
2024-05-03 04:45:16 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 13394 Connection: close Date: Thu, 02 May 2024 19:26:10 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:00 GMT ETag: "662a2ff4-3452" Expires: Mon, 01 Jul 2024 19:26:10 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 58a45bf3f07dfdca95ebcb7935e84994.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9VkzmY_jR7U0EGofrIZigmR0wnWol86CICXXxRjeSTUO4uYVvuoiSg== Age: 33546 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:45:16 UTC	12792	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 02 00 00 00 68 24 75 ef 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 7d 87 57 93 69 f3 f6 fe 37 df 6f 6d 54 a5 83 f4 de 41 50 40 50 b1 20 a0 62 45 7a ef 55 a4 08 2a a0 b4 74 42 42 ef bd 07 e9 35 d4 24 24 04 d2 7b f3 3b 4f 1e 64 75 9b 0a 24 e2 fa ce 99 c3 79 76 51 24 b9 32 73 cf 3d e5 9a df 6e 37 bf 50 82 de 91 2b f0 dc f4 e2 56 53 ee cd a6 1c ff c6 ec 6b 0d 59 be f5 19 80 62 33 7c eb b3 6e 36 bd 78 d4 51 92 32 04 2b 9d 6a 45 2f 0f 75 6f 4e e1 28 2b 4b 34 c2 36 67 8f 25 e2 8a a5 92 8f 0a 10 3e 9f 4f a5 52 57 56 56 70 38 5c 77 77 37 1a 8d 2e 2b 2b cb ca ca 7a fe fc f9 ad 5b b7 dc dc dc 4c 4c 4c 34 35 34 4f 9f 3a 7d fa d4 69 95 73 2a Data Ascii: PNGIHDRh$upHYs IDATx}Wi7omTAP@P bEzUtBB5$${;Odu$yvQ$2s=n7P+VSkYb3\|n6xQ2+jE/uoN(+K46g%>ORWVVp8\ww7.++z[LLL454O:}is
2024-05-03 04:45:16 UTC	602	IN	Data Raw: 2d 2e 2e 8e 8f 8f 0f 09 09 b9 71 fd 86 bb bb 3b b8 1a 5d 5f 4f ff 20 e7 b4 ef 0f 2f 1c 27 5a 8a e5 4b 04 e6 f2 e1 d1 f6 fb c8 c5 79 a0 93 6e 34 64 3f 97 b7 5e d5 2e 0d f4 6e cd 00 a4 93 74 12 89 b3 47 07 ad 4d 26 91 7e c9 5e a8 7c 5f 29 93 8b 54 2e 12 79 93 0e f8 3f c1 56 a7 b5 b5 b5 b1 b1 b1 ba ba ba 17 2f 5e 3c 7e fc d8 c7 c7 c7 d6 c6 16 cc 5f a8 ab 01 71 e0 b1 db 93 52 01 03 4d 0d a0 d6 03 78 f5 22 1d e4 33 07 b7 e5 cb aa 72 c7 6a 81 fe c0 f9 1e cc ca 50 fb fa c4 20 71 7e 7a 67 1d cf 20 01 2c e7 00 69 2f 8b 21 e0 70 00 02 43 91 04 38 ea 94 41 3d 29 93 9f 4f e0 da 73 1a 8d 46 a1 50 08 04 c2 fa fa 3a 1e 8f 5f 5c 5c 9c 9c 9c ec ed ed c5 62 b1 e5 e5 e5 19 e9 19 8f 1e 3e f2 f6 f2 b6 b1 b6 d1 d7 d3 d7 50 d7 38 7b e6 2c c8 d5 ab 08 1f a8 54 0b 03 d3 c4 e0 44 Data Ascii: -..q;]_O /'ZKyn4d?^.ntGM&~^\|_)T.y?V/^<~_qRMx"3rjP q~zg ,i/!pC8A=)OsFP:_\\b>P8{,TD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50041	18.164.96.43	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:16 UTC	758	OUT	GET /favicon-32x32.png?v=e684309adfdf6efa515a707d11a3e1f1 HTTP/1.1 Host: short.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intercom-id-rmf95u7h=d902a702-5744-4b9f-bdc3-bcd443f7de04; intercom-session-rmf95u7h=; intercom-device-id-rmf95u7h=d4d3de57-c51e-469a-b8e6-32c40b98cc2f; _ga=GA1.1.84728328.1714711503; _ga_JVCX6B1JPE=GS1.1.1714711500.1.0.1714711504.60.0.576514287; _gcl_au=1.1.1019735161.1714711509; _uetsid=ee7ccfe0090711ef838dbfb898906ddc; _uetvid=ee7d3d30090711efab5c199ac5070e62
2024-05-03 04:45:16 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1478 Connection: close Date: Thu, 25 Apr 2024 15:12:47 GMT Server: nginx Last-Modified: Thu, 25 Apr 2024 10:27:00 GMT ETag: "662a2ff4-5c6" Expires: Mon, 24 Jun 2024 15:12:47 GMT Cache-Control: max-age=5184000 Pragma: public Cache-Control: public Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 c4d0da6268789cfda9bb5da1f3f8fc58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VSBLTFNmfSXNYBcbM7IwIpKu1GbcBd-gefMcCA7x-iMVNoHcxAuBUQ== Age: 653549 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-03 04:45:16 UTC	1478	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 02 00 00 00 fc 18 ed a3 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 78 49 44 41 54 78 9c 8d 96 8d 4f 13 67 18 c0 fd 73 c4 96 b6 d7 96 b6 77 85 29 d1 5a 28 a2 2d e2 e6 88 43 3e 32 50 e3 b2 28 63 85 da 16 69 d9 e2 90 68 58 06 42 c8 6a 70 82 ed 95 b6 4e 11 83 12 f1 b3 03 e6 56 61 4e 9c d3 f8 41 01 11 28 50 68 2b b5 77 ef 72 f7 e2 d1 5e af 0b 4f 9e 5c ae bd f7 de df 3d df ef a6 d2 be 33 2c 2d bf 7e f6 40 6f e3 e7 57 4e e9 07 7f b6 8d dd 78 16 f0 c7 48 02 24 c9 ab 97 af 1c 0e c7 a1 43 87 30 14 4b e7 a7 2b 31 a5 42 ae 48 d6 4d bb 7b 4e c6 ab d6 6d d9 e9 30 14 f7 36 39 9f de 9b 0d 2f 81 0d 88 d7 eb ad a8 ac e0 6d e1 61 28 86 2a 50 36 60 8f ab 9e 51 ad cb 92 8b Data Ascii: PNGIHDR pHYsxIDATxOgsw)Z(-C>2P(cihXBjpNVaNA(Ph+wr^O\=3,-~@oWNxH$C0K+1BHM{Nm069/ma(*P6`Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50043	142.250.80.36	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:19 UTC	1221	OUT	GET /pagead/1p-user-list/784219015/?random=1714711513345&cv=11&fst=1714708800000&bg=ffffff&guid=ON&async=1&gtm=45be4510v9180540672z872734998za201&gcd=13r3r3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fshort.io%2F%3Futm_source%3Dlink_not_found&hn=www.googleadservices.com&frm=0&tiba=Short.io%20%E2%80%94%20White%20label%20URL%20Shortener.%20Create%20your%20own%20short%20branded%20URLs&did=dZTJkMz&gdid=dZTJkMz&npa=0&us_privacy=1---&pscdl=noapi&auid=1019735161.1714711509&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dtrue&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqYDRSEX3eYOxEjKViMHizVMWip1c4RSk-T8fdf3sUExxCaHKM&random=1432778233&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:20 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 03 May 2024 04:45:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-03 04:45:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50045	52.22.196.150	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:32 UTC	598	OUT	POST /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive Content-Length: 1051 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://short.io Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:32 UTC	1051	OUT	Data Raw: 61 70 70 5f 69 64 3d 72 6d 66 39 35 75 37 68 26 76 3d 33 26 67 3d 33 63 66 31 39 30 39 39 63 61 63 64 63 32 31 37 61 66 35 31 35 30 39 63 62 66 36 34 63 30 65 39 32 38 65 34 61 61 34 66 26 73 3d 39 64 64 38 39 30 36 64 2d 33 39 39 64 2d 34 32 38 31 2d 39 66 30 35 2d 66 66 37 61 65 34 31 63 30 62 64 35 26 72 3d 26 70 6c 61 74 66 6f 72 6d 3d 77 65 62 26 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 5f 74 79 70 65 3d 6a 73 2d 73 6e 69 70 70 65 74 26 49 64 65 6d 70 6f 74 65 6e 63 79 2d 4b 65 79 3d 62 62 63 32 31 63 39 33 64 64 32 37 63 36 33 62 26 69 6e 74 65 72 6e 61 6c 3d 26 69 73 5f 69 6e 74 65 72 73 65 63 74 69 6f 6e 5f 62 6f 6f 74 65 64 3d 6e 75 6c 6c 26 70 61 67 65 5f 74 69 74 6c 65 3d 53 68 6f 72 74 2e 69 6f 25 32 30 25 45 32 25 38 30 25 39 34 25 32 30 57 68 69 Data Ascii: app_id=rmf95u7h&v=3&g=3cf19099cacdc217af51509cbf64c0e928e4aa4f&s=9dd8906d-399d-4281-9f05-ff7ae41c0bd5&r=&platform=web&installation_type=js-snippet&Idempotency-Key=bbc21c93dd27c63b&internal=&is_intersection_booted=null&page_title=Short.io%20%E2%80%94%20Whi
2024-05-03 04:45:32 UTC	859	IN	HTTP/1.1 200 OK Date: Fri, 03 May 2024 04:45:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Status: 200 OK Cache-Control: no-cache Access-Control-Allow-Origin: https://short.io Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Access-Control-Expose-Headers: x-request-id X-Intercom-Version: a046a22c31d68421caa53d5174a190f1669f1db1 X-XSS-Protection: 1; mode=block X-Request-Queueing: 0 X-Request-Id: 001ueknvg3ivsatm53r0 Access-Control-Allow-Headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS X-Runtime: 0.023834 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: nginx x-ami-version: ami-01a6170eca229cbe6
2024-05-03 04:45:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50046	54.235.206.80	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-03 04:45:32 UTC	364	OUT	GET /messenger/web/metrics HTTP/1.1 Host: api-iam.intercom.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-03 04:45:32 UTC	4209	IN	HTTP/1.1 406 Not Acceptable Date: Fri, 03 May 2024 04:45:32 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 144 Connection: close Status: 406 Not Acceptable Vary: Accept-Encoding Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Request-Id: 001uc6v4mhf6f3q82prg X-Runtime: 0.011161 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; base-uri 'self'; child-src 'self' docs.google.com fast.wistia.net fast.wistia.com js.stripe.com hooks.stripe.com platform.twitter.com player.vimeo.com staticxx.facebook.com www.facebook.com web.facebook.com www.loom.com play.vidyard.com web.microsoftstream.com share.synthesia.io embed.app.guidde.com share.descript.com app.guideflow.com www.youtube.com www.youtube-nocookie.com content.jwplatform.com players.brightcove.net intercom-sheets.com app-sjqe.marketo.com app-sjst.marketo.com app-ab27.marketo.com gtm.intercom-marketing.com intercominc.typeform.com www.intercom-reporting.com insight.adsrvr.org apisandbox.zuora.com zuora.com www.zuora.com .my.connect.aws www.recaptcha.net intercom.help intercom-help.eu au.intercom.help sharepoint.com .sharepoint.com; connect-src 'self' app.intercom.com api-iam.intercom.io api-ping.intercom.io api-visitor-analytics.intercom.com nexus-websocket-a.intercom.io via.intercom.io wss://nexus-websocket-a.intercom.io nexus-europe-webso [TRUNCATED] Server: nginx
2024-05-03 04:45:32 UTC	144	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 22 6d 65 64 69 61 5f 74 79 70 65 5f 6e 6f 74 5f 61 63 63 65 70 74 61 62 6c 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 41 63 63 65 70 74 20 68 65 61 64 65 72 20 73 68 6f 75 6c 64 20 73 65 6e 64 20 61 20 6d 65 64 69 61 20 74 79 70 65 20 6f 66 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 5d 2c 22 74 79 70 65 22 3a 22 65 72 72 6f 72 2e 6c 69 73 74 22 7d Data Ascii: {"errors":[{"code":"media_type_not_acceptable","message":"The Accept header should send a media type of application/json"}],"type":"error.list"}

Target ID:	0
Start time:	06:43:50
Start date:	03/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	06:43:55
Start date:	03/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2584 --field-trial-handle=2552,i,2343868332596157846,7063458701623905572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:43:58
Start date:	03/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:44:07
Start date:	03/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5920 --field-trial-handle=2552,i,2343868332596157846,7063458701623905572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Windows Analysis Report
https://www.canva.com/design/DAGEBBzq9KM/jvjE01qRbaOyWhWyDOHDeg/view?utm_content=DAGEBBzq9KM&utm_campaign=designshare&utm_medium=link&utm_source=editor