Edit tour

Windows Analysis Report
https://bfptxt.com/5wKgd5

Overview

General Information

Sample URL:	https://bfptxt.com/5wKgd5
Analysis ID:	1466685
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2128,i,432476065494129524,13042706341455745414,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bfptxt.com/5wKgd5" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://democrats.org/act/?permalink=update-email-preferences	HTTP Parser: Form action: https://actionnetwork.org/forms/update-email-preferences/answers democrats actionnetwork
Source: https://democrats.org/act/?permalink=update-email-preferences	HTTP Parser: Form action: https://actionnetwork.org/forms/update-email-preferences/answers democrats actionnetwork
Source: https://democrats.org/terms-of-service/	HTTP Parser: Form action: https://actionnetwork.org/api/v2/forms/4f51c8cc-384d-435b-ae17-865695e8b5e8/submissions democrats actionnetwork
Source: https://democrats.org/terms-of-service/	HTTP Parser: Form action: https://actionnetwork.org/api/v2/forms/4f51c8cc-384d-435b-ae17-865695e8b5e8/submissions democrats actionnetwork
Source: https://democrats.org/terms-of-service/	HTTP Parser: Form action: https://actionnetwork.org/api/v2/forms/4f51c8cc-384d-435b-ae17-865695e8b5e8/submissions democrats actionnetwork
Source: https://democrats.org/terms-of-service/	HTTP Parser: Form action: https://actionnetwork.org/api/v2/forms/4f51c8cc-384d-435b-ae17-865695e8b5e8/submissions democrats actionnetwork
Source: https://democrats.org/terms-of-service/	HTTP Parser: Form action: https://actionnetwork.org/api/v2/forms/4f51c8cc-384d-435b-ae17-865695e8b5e8/submissions democrats actionnetwork
Source: https://democrats.org/terms-of-service/	HTTP Parser: Form action: https://actionnetwork.org/api/v2/forms/4f51c8cc-384d-435b-ae17-865695e8b5e8/submissions democrats actionnetwork

Source: https://democrats.org/terms-of-service/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-JD0JR2ZC3V&gacid=1194020864.1719991435&gtm=45je4710v891022994za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=988567100
Source: https://democrats.org/terms-of-service/	HTTP Parser: Iframe src: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=
Source: https://democrats.org/terms-of-service/	HTTP Parser: Iframe src: https://media.imi.chat/widget/centerpagepost.html
Source: https://democrats.org/terms-of-service/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-JD0JR2ZC3V&gacid=1194020864.1719991435&gtm=45je4710v891022994za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=988567100
Source: https://democrats.org/terms-of-service/	HTTP Parser: Iframe src: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=
Source: https://democrats.org/terms-of-service/	HTTP Parser: Iframe src: https://media.imi.chat/widget/centerpagepost.html
Source: https://democrats.org/terms-of-service/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-JD0JR2ZC3V&gacid=1194020864.1719991435&gtm=45je4710v891022994za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=988567100

Source: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=

HTTP Parser: Number of links: 0

Source: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5

HTTP Parser: Base64 decoded: {"sender":{"domain":"https://secure.actblue.com"},"metaData":{"windowRef":{"type":"parent","distance":0}},"reference":{"type":"raw","val":"{\"uid\":\"zoid-paypal-buttons-uid_89fd1a8ed0_mdc6mjm6mdc\",\"context\":\"iframe\",\"tag\":\"paypal-buttons\",\"chil...

Source: https://actionnetwork.org/forms/unsubscribe-4/

HTTP Parser: Title: Please don't go! does not match URL

Source: about:blank	HTTP Parser: No favicon
Source: https://secure.actblue.com/pages/p2p-240702-jbti/tracking_code?t=landing&refcode=ta_c2&refcode2w=5wKgd5&auth_token=null	HTTP Parser: No favicon
Source: https://secure.actblue.com/pages/p2p-240702-jbti/tracking_code?t=landing&refcode=ta_c2&refcode2w=5wKgd5&auth_token=null	HTTP Parser: No favicon
Source: https://www.paypal.com/smart/buttons?env=production&style.label=paypal&style.layout=vertical&style.color=gold&style.shape=rect&style.tagline=false&style.height=44&style.menuPlacement=below&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_2c8c73eb5d_mdc6mjm6mdc&buttonSize=large&customerId=&clientID=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&clientMetadataID=uid_f55323b669_mdc6mjm6mdc&commit=false&components.0=buttons&currency=USD&debug=false&disableFunding.0=credit&disableFunding.1=card&disableSetCookie=true&enableFunding.0=venmo&experiment.enableVenmo=true&experiment.venmoVaultWithoutPurchase=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjpmYWxzZSwidmF1bHRhYmxlIjpmYWxzZSwicHJvZHVjdHMiOnsicGF5SW4zIjp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheUluNCI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9LCJwYXlsYXRlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9fX0sImNhcmQiOnsi...	HTTP Parser: No favicon
Source: https://www.paypalobjects.com/muse/analytics/index.html#frameId=1512ce86-789d-49b8-8f6c-0e7755070975&propertyId=NGJ83G9Z8QXZ8-1&flow=visitor-info&variant=analytics&mrid=NGJ83G9Z8QXZ8&isMobileEnabled=true&isDesktopEnabled=true&shouldCheckCountry=true&mobileVariant=analytics&mobileFlow=visitor-info&disableSetCookie=true	HTTP Parser: No favicon
Source: https://pay.google.com/gp/p/ui/payframe?origin=https%3A%2F%2Fsecure.actblue.com&mid=	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/860973240?random=1719991417521&cv=11&fst=1719991417521&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za201zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/860973240?random=1719991417561&cv=11&fst=1719991417561&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za200zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://media.imi.chat/widget/centerpagepost.html	HTTP Parser: No favicon
Source: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=	HTTP Parser: No favicon
Source: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=	HTTP Parser: No favicon

Source: https://democrats.org/act/?permalink=update-email-preferences	HTTP Parser: No <meta name="author".. found
Source: https://democrats.org/act/?permalink=update-email-preferences	HTTP Parser: No <meta name="author".. found
Source: https://actionnetwork.org/forms/unsubscribe-4/	HTTP Parser: No <meta name="author".. found
Source: https://actionnetwork.org/forms/unsubscribe-4/	HTTP Parser: No <meta name="author".. found
Source: https://actionnetwork.org/forms/unsubscribe-4/	HTTP Parser: No <meta name="author".. found
Source: https://democrats.org/terms-of-service/	HTTP Parser: No <meta name="author".. found
Source: https://democrats.org/terms-of-service/	HTTP Parser: No <meta name="author".. found
Source: https://democrats.org/terms-of-service/	HTTP Parser: No <meta name="author".. found
Source: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=	HTTP Parser: No <meta name="author".. found

Source: https://democrats.org/act/?permalink=update-email-preferences	HTTP Parser: No <meta name="copyright".. found
Source: https://democrats.org/act/?permalink=update-email-preferences	HTTP Parser: No <meta name="copyright".. found
Source: https://actionnetwork.org/forms/unsubscribe-4/	HTTP Parser: No <meta name="copyright".. found
Source: https://actionnetwork.org/forms/unsubscribe-4/	HTTP Parser: No <meta name="copyright".. found
Source: https://actionnetwork.org/forms/unsubscribe-4/	HTTP Parser: No <meta name="copyright".. found
Source: https://democrats.org/terms-of-service/	HTTP Parser: No <meta name="copyright".. found
Source: https://democrats.org/terms-of-service/	HTTP Parser: No <meta name="copyright".. found
Source: https://democrats.org/terms-of-service/	HTTP Parser: No <meta name="copyright".. found
Source: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:49832 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /5wKgd5 HTTP/1.1Host: bfptxt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cf/assets/app-css/6a3e1dd153d5af7e8ded.css?form_app=us HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cf/assets/actblue.js HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cf/assets/app/6a3e1dd153d5af7e8ded.js?form_app=us HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: skip_prefill_check=true
Source: global traffic	HTTP traffic detected: GET /lib.min.js HTTP/1.1Host: proxy-service.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /pages/p2p-240702-jbti/tracking_code?t=landing&refcode=ta_c2&refcode2w=5wKgd5&auth_token=null HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /api/cf/auth_token HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /x/object/actblue-cyanotypes/replaced_images/branding/249406/260059c2-94ed-4236-82ad-624d031cc757-240424-JRB_KDH-Wrapper-10814a65.png HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /sdk/js?client-id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&locale=en_US&disable-funding=credit,card&intent=capture&commit=false&enable-funding=venmo HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=ncocrig&ct=0:fnthtk9&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp/p/js/pay.js HTTP/1.1Host: pay.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11154426359?random=1719991386424&cv=11&fst=1719991386424&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11154426359?random=1719991386522&cv=11&fst=1719991386522&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11154426359/?random=1719991386424&cv=11&fst=1719991386424&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/cf/auth_token HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226; _gcl_au=1.1.227088756.1719991386
Source: global traffic	HTTP traffic detected: GET /tagmanager/pptm.js?id=secure.actblue.com&t=xo&v=5.0.448&source=payments_sdk&client_id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&disableSetCookie=true&vault=false HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /smart/buttons?env=production&style.label=paypal&style.layout=vertical&style.color=gold&style.shape=rect&style.tagline=false&style.height=44&style.menuPlacement=below&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_2c8c73eb5d_mdc6mjm6mdc&buttonSize=large&customerId=&clientID=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&clientMetadataID=uid_f55323b669_mdc6mjm6mdc&commit=false&components.0=buttons&currency=USD&debug=false&disableFunding.0=credit&disableFunding.1=card&disableSetCookie=true&enableFunding.0=venmo&experiment.enableVenmo=true&experiment.venmoVaultWithoutPurchase=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjpmYWxzZSwidmF1bHRhYmxlIjpmYWxzZSwicHJvZHVjdHMiOnsicGF5SW4zIjp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheUluNCI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9LCJwYXlsYXRlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9fX0sImNhcmQiOnsiZWxpZ2libGUiOmZhbHNlLCJicmFuZGVkIjp0cnVlLCJpbnN0YWxsbWVudHMiOmZhbHNlLCJ2ZW5kb3JzIjp7InZpc2EiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sIm1hc3RlcmNhcmQiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImFtZXgiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImRpc2NvdmVyIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXVsdGFibGUiOnRydWV9LCJoaXBlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhdWx0YWJsZSI6ZmFsc2V9LCJlbG8iOnsiZWxpZ2libGUiOmZhbHNlLCJ2YXVsdGFibGUiOnRydWV9LCJqY2IiOnsiZWxpZ2libGUiOmZhbHNlLCJ2YXVsdGFibGUiOnRydWV9LCJtYWVzdHJvIjp7ImVsaWdpYmxlIjp0cnVlLCJ2YXVsdGFibGUiOnRydWV9LCJkaW5lcnMiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sImN1cCI6eyJlbGlnaWJsZSI6dHJ1ZSwidmF1bHRhYmxlIjp0cnVlfX0sImd1ZXN0RW5hYmxlZCI6ZmFsc2V9LCJ2ZW5tbyI6eyJlbGlnaWJsZSI6dHJ1ZSwidmF1bHRhYmxlIjp0cnVlfSwiaXRhdSI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJjcmVkaXQiOnsiZWxpZ2libGUiOmZhbHNlfSwiYXBwbGVwYXkiOnsiZWxpZ2libGUiOmZhbHNlfSwic2VwYSI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJpZGVhbCI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJiYW5jb250YWN0Ijp7ImVsaWdpYmxlIjpmYWxzZX0sImdpcm9wYXkiOnsiZWxpZ2libGUiOmZhbHNlfSwiZXBzIjp7ImVsaWdpYmxlIjpmYWxzZX0sInNvZm9ydCI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJteWJhbmsiOnsiZWxpZ2libGUiOmZhbHNlfSwicDI0Ijp7ImVsaWdpYmxlIjpmYWxzZX0sIndlY2hhdHBheSI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJwYXl1Ijp7ImVsaWdpYmxlIjpmYWxzZX0sImJsaWsiOnsiZWxpZ2libGUiOmZhbHNlfSwidHJ1c3RseSI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJveHhvIjp7ImVsaWdpYmxlIjpmYWxzZX0sImJvbGV0byI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJib2xldG9iYW5jYXJpbyI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJtZXJjYWRvcGFnbyI6eyJlbGlnaWJsZSI6ZmFsc2V9LCJtdWx0aWJhbmNvIjp7ImVsaWdpYmxlIjpmYWxzZX0sInNhdGlzcGF5Ijp7ImVsaWdpYmxlIjpmYWxzZX0sInBhaWR5Ijp7ImVsaWdpYmxlIjpmYWxzZX19&intent=capture&locale.lang=en&locale.country=US&hasShippingCallback=false&platform=desktop&renderedButtons.0=paypal&renderedButtons.1=venmo&sessionID=uid_f55323b669_mdc6mjm6mdc&sdkCorrelationID=f8662821d0779&sdkMeta=eyJ1cmwiOiJodHRwczovL3d3dy5wYXlwYWwuY29tL3Nkay9qcz9jbGllbnQtaWQ9QWJIbzZoQkVEbUNIdWxEaFJNa0NWazdGRGVkNXpFMS1tTm83U1F2b195eGVMdkd5bE01bUdoNUlPangwQVY5c1RIaEhEakQ0QTQ0M0R5YmImbG9jYWxlPWVuX
Source: global traffic	HTTP traffic detected: GET /signals/config/1663341264181988?v=2.9.160&r=stable&domain=secure.actblue.com&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10111714.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://secure.actblue.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp/p/ui/payframe?origin=https%3A%2F%2Fsecure.actblue.com&mid= HTTP/1.1Host: pay.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11154426359/?random=1719991386424&cv=11&fst=1719990000000&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLMjK87kHkN4ni2YeOWbadnIkhWl5BBA&random=1467784109&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11154426359/?random=1418267285&cv=11&fst=1719991386522&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECIgEBOAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=COXovtyWp_LdOiITCJasxp2riocDFRBqHgIdLNc7LDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhtodHRwczovL3NlY3VyZS5hY3RibHVlLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /js-sdk-logos/2.2.7/paypal-blue.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/object/actblue-cyanotypes/replaced_images/branding/249406/260059c2-94ed-4236-82ad-624d031cc757-240424-JRB_KDH-Wrapper-10814a65.png HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /js-sdk-logos/2.2.7/venmo-white.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /muse/muse.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ANGJ83G9Z8QXZ8-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&fltp=analytics&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991387835&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/11154426359/?random=1418267285&cv=11&fst=1719991386522&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECIgEBOAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=COXovtyWp_LdOiITCJasxp2riocDFRBqHgIdLNc7LDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhtodHRwczovL3NlY3VyZS5hY3RibHVlLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLgrlq7CFg_jfeJC8uMT1vxr-x3eGs1QP3rnKnidjfvfF6WhVm&random=3968354639 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610&google_gid=CAESEFNkMgYqH-YZOkYqe_wg1Cw&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; TDCPM=CAESFQoGZ29vZ2xlEgsIgoLY3oChiz0QBRgFKAEyCwjq3a7z9s6NPRAFQg8iDQgBEgkKBXRpZXIzEAFaB25jb2NyaWdgAXIGZ29vZ2xl
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11154426359/?random=1719991386424&cv=11&fst=1719990000000&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLMjK87kHkN4ni2YeOWbadnIkhWl5BBA&random=1467784109&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Wed%2C%2003%20Jul%202024%2007%3A23%3A09%20GMT&n=4d&.yp=10111714&f=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&e=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&enc=UTF-8&yv=1.15.1&isIframe=1 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10111714.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js-sdk-logos/2.2.7/venmo-white.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js-sdk-logos/2.2.7/paypal-blue.svg HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ANGJ83G9Z8QXZ8-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&fltp=analytics&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991387835&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/js?client-id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&locale=en_US&disable-funding=credit,card&intent=capture&commit=false&enable-funding=venmo HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.paypal.com/smart/buttons?env=production&style.label=paypal&style.layout=vertical&style.color=gold&style.shape=rect&style.tagline=false&style.height=44&style.menuPlacement=below&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_2c8c73eb5d_mdc6mjm6mdc&buttonSize=large&customerId=&clientID=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&clientMetadataID=uid_f55323b669_mdc6mjm6mdc&commit=false&components.0=buttons&currency=USD&debug=false&disableFunding.0=credit&disableFunding.1=card&disableSetCookie=true&enableFunding.0=venmo&experiment.enableVenmo=true&experiment.venmoVaultWithoutPurchase=false&flow=purchase&fundingEligibility=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
Source: global traffic	HTTP traffic detected: GET /muse/analytics/index.html HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1719991388676 HTTP/1.1Host: proxy-service.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128
Source: global traffic	HTTP traffic detected: GET /tr/?batch=1&events[0]=id%3D1663341264181988%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fsecure.actblue.com%252Fpages%252Fp2p-240702-jbti%252Ftracking_code%253Ft%253Dlanding%2526refcode%253Dta_c2%2526refcode2w%253D5wKgd5%2526auth_token%253Dnull%26rl%3Dhttps%253A%252F%252Fsecure.actblue.com%252Fdonate%252Fp2p-240702-jbti%253Frefcode%253Dta_c2%2526refcode2w%253D5wKgd5%26if%3Dtrue%26ts%3D1719991389583%26sw%3D1280%26sh%3D1024%26v%3D2.9.160%26r%3Dstable%26ec%3D0%26o%3D4126%26fbp%3Dfb.1.1719991389579.953466754384111128%26cdl%3DAPI_unavailable%26it%3D1719991387335%26coo%3Dfalse%26exp%3Df1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1663341264181988&ev=PageView&dl=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&rl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&if=true&ts=1719991389583&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1719991389579.953466754384111128&cdl=API_unavailable&it=1719991387335&coo=false&exp=f1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/11154426359/?random=1418267285&cv=11&fst=1719991386522&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECIgEBOAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=COXovtyWp_LdOiITCJasxp2riocDFRBqHgIdLNc7LDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhtodHRwczovL3NlY3VyZS5hY3RibHVlLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLgrlq7CFg_jfeJC8uMT1vxr-x3eGs1QP3rnKnidjfvfF6WhVm&random=3968354639 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Wed%2C%2003%20Jul%202024%2007%3A23%3A09%20GMT&n=4d&.yp=10111714&f=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&e=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&enc=UTF-8&yv=1.15.1&isIframe=1 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF78hGYCEK8QIUmvgLdTLE0LG3YQIzEFEgEBAQFNhmaOZtxA0iMA_eMAAA&S=AQAAAoRhpaIxCTlvUNagQiqbDtA
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&es=visitorInfoFlowStarted&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991390860&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?batch=1&events[0]=id%3D1663341264181988%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fsecure.actblue.com%252Fpages%252Fp2p-240702-jbti%252Ftracking_code%253Ft%253Dlanding%2526refcode%253Dta_c2%2526refcode2w%253D5wKgd5%2526auth_token%253Dnull%26rl%3Dhttps%253A%252F%252Fsecure.actblue.com%252Fdonate%252Fp2p-240702-jbti%253Frefcode%253Dta_c2%2526refcode2w%253D5wKgd5%26if%3Dtrue%26ts%3D1719991389583%26sw%3D1280%26sh%3D1024%26v%3D2.9.160%26r%3Dstable%26ec%3D0%26o%3D4126%26fbp%3Dfb.1.1719991389579.953466754384111128%26cdl%3DAPI_unavailable%26it%3D1719991387335%26coo%3Dfalse%26exp%3Df1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1663341264181988&ev=PageView&dl=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&rl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&if=true&ts=1719991389583&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1719991389579.953466754384111128&cdl=API_unavailable&it=1719991387335&coo=false&exp=f1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /muse/noop.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.paypalobjects.com/muse/analytics/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; TDCPM=CAESFQoGZ29vZ2xlEgsI_vKv5ODOjT0QBRIWCgdydWJpY29uEgsImJmw5ODOjT0QBRgFIAEoATILCOrdrvP2zo09EAVCDyINCAESCQoFdGllcjMQAVoHbmNvY3JpZ2ABcgdydWJpY29u
Source: global traffic	HTTP traffic detected: GET /gp/p/payment_method_manifest.json HTTP/1.1Host: pay.google.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp/p/ui/pay HTTP/1.1Host: pay.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pay.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
Source: global traffic	HTTP traffic detected: GET /ts?pgrp=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&es=visitorInfoFlowStarted&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991390860&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true HTTP/1.1Host: t.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql?GetNativeEligibility HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg02.phx; ts=vreXpYrS%3D1814599392%26vteXpYrS%3D1719993192%26vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf%26vtyp%3Dnew; ts_c=vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf
Source: global traffic	HTTP traffic detected: GET /gp/p/web_manifest.json HTTP/1.1Host: pay.google.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /muse/noop.js HTTP/1.1Host: www.paypalobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dfbcaf041-6718-4afd-b973-8f173c1ee610 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=tY-MkkqvgwINK9MX4e2QBlSoM3kZbFQNSFQub69tHdhCK1zERzo8JVLj90VL2rAU-wC1AgjJrG-B2bF4d6YNNV2Q7AX4bCD_HcZcaSNtmNs.; receive-cookie-deprecation=1; uuid2=3938742698804982171
Source: global traffic	HTTP traffic detected: GET /gp/p/ui/pay HTTP/1.1Host: pay.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
Source: global traffic	HTTP traffic detected: GET /targeting/graphql?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg02.phx; ts_c=vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf; enforce_policy=ccpa; LANG=en_US%3BUS; x-pp-s=eyJ0IjoiMTcxOTk5MTM5MzY2MCIsImwiOiIwIiwibSI6IjAifQ; tsrce=mppnodeweb; nsid=s%3A185Y2Rb5NCQLEuqVpkaahycfE_wfsvCA.M%2BL60kvt6VQUFd%2FhfdgZInAaaoLMOuuwA0ebAEVFNHw; ts=vreXpYrS%3D1814599393%26vteXpYrS%3D1719993193%26vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3938742698804982171&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; TDCPM=CAESFQoGZ29vZ2xlEgsI_vKv5ODOjT0QBRIWCgdydWJpY29uEgsImJmw5ODOjT0QBRIXCghhcHBuZXh1cxILCJT31pinnII9EAUYBSACKAEyCwjq3a7z9s6NPRAFQg8iDQgBEgkKBXRpZXIzEAFaB25jb2NyaWdgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=nLIoBAXDu12Mzlr04x2xgpmOz_gYJgd8NwYJ3gxG4kFk3pirjDzDjjaqDDKCBrD8MoJwgMeUkJJaJCrLrOgWc4h6KNmO9A1ax4GNagaRHtDaho4We9bjYQRBjlTgl5Xu7NBBKCzHV75f4QMRF29oMLhO0EetKG1HOLpRtxHtu7o
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gp/p/payment_method_manifest.json HTTP/1.1Host: pay.google.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=nLIoBAXDu12Mzlr04x2xgpmOz_gYJgd8NwYJ3gxG4kFk3pirjDzDjjaqDDKCBrD8MoJwgMeUkJJaJCrLrOgWc4h6KNmO9A1ax4GNagaRHtDaho4We9bjYQRBjlTgl5Xu7NBBKCzHV75f4QMRF29oMLhO0EetKG1HOLpRtxHtu7o
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent=&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZoT8Y9HM6tsAAEN5AM0.mQAA; CMPS=3857; CMPRO=3857
Source: global traffic	HTTP traffic detected: GET /s.js HTTP/1.1Host: cdn.sift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent=&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZoT8Y9HM6tsAAEN5AM0.mQAA; CMPS=3857; CMPRO=3857
Source: global traffic	HTTP traffic detected: GET /cf/static/actblue/favicon.ico HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=YI23M-3t5tMOLyEKZZ93EAlRPv2i2xfsKTB0ai6aSGbsk7py4HKSvtrPPODbPQFsUG_YbK_YSJbr_NF3g-1TCgDVfYZoycUsvnazQF8mRw497c9jZjoxJQPrjI06BF-dvFgNGlq3wpuvbZbk6ClpgKbZhDFGo-hXM-ErbKrqUTg
Source: global traffic	HTTP traffic detected: GET /gp/p/web_manifest.json HTTP/1.1Host: pay.google.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: l7_az=dcg02.phx; ts_c=vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf; enforce_policy=ccpa; LANG=en_US%3BUS; x-pp-s=eyJ0IjoiMTcxOTk5MTM5MzY2MCIsImwiOiIwIiwibSI6IjAifQ; tsrce=mppnodeweb; nsid=s%3A185Y2Rb5NCQLEuqVpkaahycfE_wfsvCA.M%2BL60kvt6VQUFd%2FhfdgZInAaaoLMOuuwA0ebAEVFNHw; ts=vreXpYrS%3D1814599393%26vteXpYrS%3D1719993193%26vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf%26vtyp%3Dnew
Source: global traffic	HTTP traffic detected: GET /images/151717.gif?bk=19482a20cc&tm=84&r=308450253&v=107&cs=UTF-8&h=secure.actblue.com&l=en-US&S=9310b542c4dd2dbd7e7d9c462fc9fc73&uu=cfa36a9dc525de60da3844cb1fe06c2&t=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&u=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Win32&to=240&d=60&ce=true&tp=0&ol=true&pr=Gecko&ps=20030107&vd=Google%20Inc.&vs=&hc=4&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=864980724ce0e4610faf43e7780d8361&z=z HTTP/1.1Host: hexagon-analytics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cf/static/actblue/favicon.ico HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: skip_prefill_check=true; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226; __ssid=cfa36a9dc525de60da3844cb1fe06c2
Source: global traffic	HTTP traffic detected: GET /trackables HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226; __ssid=cfa36a9dc525de60da3844cb1fe06c2
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=K_f21c1Ai1fs6JFqjyJiwJfrLTjfDBB8GJJ04OHMiJSHk5uSyT2AEAYCiE-UTN_ScacqGQSlXKL7ZdK1hSIyyUCOYXaIiX5-bg8qFKI64u8mrxnHJyYuzhjNggfdKaqQip7D22orDT9jtl4B6iE773MiKwrIW5n1KniEjtCRHk0
Source: global traffic	HTTP traffic detected: GET /images/151717.gif?bk=19482a20cc&tm=84&r=308450253&v=107&cs=UTF-8&h=secure.actblue.com&l=en-US&S=9310b542c4dd2dbd7e7d9c462fc9fc73&uu=cfa36a9dc525de60da3844cb1fe06c2&t=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&u=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Win32&to=240&d=60&ce=true&tp=0&ol=true&pr=Gecko&ps=20030107&vd=Google%20Inc.&vs=&hc=4&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=864980724ce0e4610faf43e7780d8361&z=z HTTP/1.1Host: hexagon-analytics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=j685UFCMd2v4TnMT2gnItYTtBea2XHBVn0UIzOH3FmwvHOYAKM8j1sn-0xbND9mU4LLHZH9DapbnF23I_jwXg_Lj5lRuVSeqV8PhhrP8InYOuimhWdoC4IlhTvVr_LtUOEk8r15epdKLDRRQQjkFgd-YaQcjOG4yL32sAi5yHbs
Source: global traffic	HTTP traffic detected: GET /act/?permalink=update-email-preferences HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php?action=frmpro_css&ver=6171659 HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/act/?permalink=update-email-preferencesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?m=1719250562g HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/act/?permalink=update-email-preferencesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobWhqZGpiaGQMARLwu4g== HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/act/?permalink=update-email-preferencesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/style.css?m=1717432320g HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/act/?permalink=update-email-preferencesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1717432320g HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/act/?permalink=update-email-preferencesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/080/770/original/funblue.css HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/style-embed-whitelabel-v3.css HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/080/707/original/overrides_sept22.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/v5/form/update-email-preferences?format=js&source=widget&style=full HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
Source: global traffic	HTTP traffic detected: GET /widgets/v5/form/update-email-preferences?format=js&source=widget&style=full&permalink=update-email-preferences&js_inner=true HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VT--c566da1f83acc9167194236a0aebc2a76fb1e72f
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/080/767/original/D_Logo_Horizontal_White_90.png HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/user_files/user_files/000/080/770/original/funblue.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VT--c566da1f83acc9167194236a0aebc2a76fb1e72f
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1719991400439 HTTP/1.1Host: proxy-service.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/080/767/original/D_Logo_Horizontal_White_90.png HTTP/1.1Host: actionnetwork.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery-min.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/favicon.ico HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/act/?permalink=update-email-preferencesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery-min.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/fonts/MyFonts/CheltenhamITCProBook.woff2 HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://democrats.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=32 HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/act/?permalink=update-email-preferencesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/js/can-embed.js?v=54 HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
Source: global traffic	HTTP traffic detected: GET /forms/unsubscribe-4/ HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/095/477/original/overrides_wo_rally.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--bcfb2d752fca70be99ebdfdbb8b77a7456be3e12
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=32 HTTP/1.1Host: democrats.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/js/challenge.min.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/091/295/original/page_wrapper_reelect.css HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--bcfb2d752fca70be99ebdfdbb8b77a7456be3e12
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/091/297/original/BFP_AB-Logo_Ivory.png HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--bcfb2d752fca70be99ebdfdbb8b77a7456be3e12
Source: global traffic	HTTP traffic detected: GET /css/style-embed-whitelabel-v3.css HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--bcfb2d752fca70be99ebdfdbb8b77a7456be3e12
Source: global traffic	HTTP traffic detected: GET /forms/photos/000/457/108/original/49721663391_c0cdba991d_o.jpg HTTP/1.1Host: can2-prod.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /groups/photos/000/151/140/thumb/DNC-Group-Logo-Final.png HTTP/1.1Host: can2-prod.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/js/intl-tel-input/img/flags.png HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/css/style-embed-whitelabel-v3.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--bcfb2d752fca70be99ebdfdbb8b77a7456be3e12
Source: global traffic	HTTP traffic detected: GET /widgets/v5/form/unsubscribe-4?format=js&referrer=&source=&style=full&css=whitelabel HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--bcfb2d752fca70be99ebdfdbb8b77a7456be3e12
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/091/297/original/BFP_AB-Logo_Ivory.png HTTP/1.1Host: actionnetwork.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--bcfb2d752fca70be99ebdfdbb8b77a7456be3e12
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/fonts/MercuryTextG4-Roman-Pro.otf HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://democrats.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://democrats.org/act/?permalink=update-email-preferencesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /groups/photos/000/151/140/thumb/DNC-Group-Logo-Final.png HTTP/1.1Host: can2-prod.s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/065/504/original/Decimal-Medium.otf HTTP/1.1Host: web.joebiden.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://actionnetwork.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://actionnetwork.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/v5/form/unsubscribe-4?format=js&referrer=&source=&style=full&css=whitelabel&js_inner=true HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /images/spinner8.png HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /images/logo_sm.png HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /includes/js/intl-tel-input/img/flags.png HTTP/1.1Host: actionnetwork.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js? HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /includes/js/intl-tel-input/js/utils.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /images/spinner8.png HTTP/1.1Host: actionnetwork.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /forms/photos/000/457/108/original/49721663391_c0cdba991d_o.jpg HTTP/1.1Host: can2-prod.s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo_sm.png HTTP/1.1Host: actionnetwork.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery-min.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/89d5214c8daf0f77 HTTP/1.1Host: actionnetwork.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /includes/js/jquery-min.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4; cf_clearance=NHgjJ3z78u1rGiWGe8Jt0n2QgwzeCa0IuRsk1jExIs4-1719991409-1.0.1.1-ZBBY2yyjosGnTWqM7SfZ9QNHLzquHoNDbMxGhkp5yiV3sCgLMnlr9C5MDSLlJtbC4x_82KCZio6DKfe2XNKK9A
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/dem-online-theme-extension/favicons/android-icon-192x192.png HTTP/1.1Host: joebiden.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/dem-online-theme-extension/favicons/android-icon-192x192.png HTTP/1.1Host: joebiden.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /includes/js/can-embed.js?v=54 HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4; cf_clearance=NHgjJ3z78u1rGiWGe8Jt0n2QgwzeCa0IuRsk1jExIs4-1719991409-1.0.1.1-ZBBY2yyjosGnTWqM7SfZ9QNHLzquHoNDbMxGhkp5yiV3sCgLMnlr9C5MDSLlJtbC4x_82KCZio6DKfe2XNKK9A
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /assets/bignumber-8eba026c8aa4cf7cfb7ee63abdae440e240e53a58ce00cda464c3bdc097bdb00.js HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.2.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/public-aa633f352e0cddd3463350c6f700485811a9ebbd9ebcff666d2e885ea3966dc8.css HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /assets/marketing-dd16c0d3d85b22d9582e6ec7afa5bc45cdc6e6122d98f613dfc78afca2b0b715.css HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /assets/public-d3328fba91ce8554a40cb118560e2eb7672c8a51c9a56ae1a6a629a39350ea2b.js HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /assets/packs/js/marketing.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2 HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /assets/packs/js/InitializeDownArrows.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2 HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /includes/js/challenge.min.js HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4; cf_clearance=NHgjJ3z78u1rGiWGe8Jt0n2QgwzeCa0IuRsk1jExIs4-1719991409-1.0.1.1-ZBBY2yyjosGnTWqM7SfZ9QNHLzquHoNDbMxGhkp5yiV3sCgLMnlr9C5MDSLlJtbC4x_82KCZio6DKfe2XNKK9A
Source: global traffic	HTTP traffic detected: GET /images/default_group_icon.jpg HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4; cf_clearance=NHgjJ3z78u1rGiWGe8Jt0n2QgwzeCa0IuRsk1jExIs4-1719991409-1.0.1.1-ZBBY2yyjosGnTWqM7SfZ9QNHLzquHoNDbMxGhkp5yiV3sCgLMnlr9C5MDSLlJtbC4x_82KCZio6DKfe2XNKK9A
Source: global traffic	HTTP traffic detected: GET /images/spinner8.png HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4; cf_clearance=NHgjJ3z78u1rGiWGe8Jt0n2QgwzeCa0IuRsk1jExIs4-1719991409-1.0.1.1-ZBBY2yyjosGnTWqM7SfZ9QNHLzquHoNDbMxGhkp5yiV3sCgLMnlr9C5MDSLlJtbC4x_82KCZio6DKfe2XNKK9A
Source: global traffic	HTTP traffic detected: GET /assets/packs/js/Bugsnag.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2 HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /user_files/user_files/000/065/441/original/Decimal-Semibold.otf HTTP/1.1Host: web.joebiden.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://actionnetwork.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://actionnetwork.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo_sm.png HTTP/1.1Host: actionnetwork.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://actionnetwork.org/forms/unsubscribe-4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4; cf_clearance=NHgjJ3z78u1rGiWGe8Jt0n2QgwzeCa0IuRsk1jExIs4-1719991409-1.0.1.1-ZBBY2yyjosGnTWqM7SfZ9QNHLzquHoNDbMxGhkp5yiV3sCgLMnlr9C5MDSLlJtbC4x_82KCZio6DKfe2XNKK9A
Source: global traffic	HTTP traffic detected: GET /images/default_group_icon.jpg HTTP/1.1Host: actionnetwork.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBGSSITcGFyZW50X3JlZmVyZXIGOwBGIjNodHRwczovL2FjdGlvbm5ldHdvcmsub3JnL2Zvcm1zL3Vuc3Vic2NyaWJlLTQv--331396505bf1356ac55f6c429570bb55246a90e4
Source: global traffic	HTTP traffic detected: GET /assets/packs/js/Datadog.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2 HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /assets/packs/js/applicationEntry.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2 HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/top-background-5b5936f581d63f8a41c3cbc6280ee4a8c0c92fdb227b0ab972e5fd616e2db443.jpg HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/assets/marketing-dd16c0d3d85b22d9582e6ec7afa5bc45cdc6e6122d98f613dfc78afca2b0b715.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/meet-express-lane-background-a9b7b7d4a9115ce5c05d798ff0262149f3a93fe1df66e3c2cc14a764b3cf6486.svg HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/assets/marketing-dd16c0d3d85b22d9582e6ec7afa5bc45cdc6e6122d98f613dfc78afca2b0b715.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.2.0/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure.actblue.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/layout/actblue-511088c1dd12a3bab3ea3a86a243f41939d1ab0bca208367a9635ee494ddd7eb.png HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /metrics/bignumber HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-CSRF-Token: undefinedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313208
Source: global traffic	HTTP traffic detected: GET /homepage/expresscount HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-CSRF-Token: undefinedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313208
Source: global traffic	HTTP traffic detected: GET /assets/layout/actblue-511088c1dd12a3bab3ea3a86a243f41939d1ab0bca208367a9635ee494ddd7eb.png HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313208
Source: global traffic	HTTP traffic detected: GET /assets/layout/express/express-lane-logo-beeff0c14d3c3aa9e8c4cc503a73ce8782b83170e6dc8875aff8c81b3d29f0cc.svg HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226&lock=8fc15568-44bd-416a-a8bb-d5aa287736fb
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/branded-forms-a08409bd20cae3bdc4596d318ed891f70c78869b6b2f7a642aa8427a96e8f348.svg HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
Source: global traffic	HTTP traffic detected: GET /app/449985a46708136f3d74?protocol=7&client=js&version=4.4.0&flash=false HTTP/1.1Host: ws.pusherapp.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://secure.actblue.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: mepwYBh1ZB23d0tUBdKtOw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/analytics-093f6b8fc446bb6e0878c31009b6635462dcf836828d4b63cc220fda449de9c9.svg HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313208
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/mobile-5a0d7993c13d170aa0ef0bea6b0e4edf5859af81cc9a2358c63066f6f705e532.svg HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313208
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/customer-service-9726ef725ad13da4af626b875af2ff2544c43f3aaa25d83f4134550c355f48c3.svg HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313208
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/tools-in-action-background-a5082337eee4c88635d68e1bc11d6f061c98b9ceb9e70613e0f06cf5d31a01d5.svg HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/assets/marketing-dd16c0d3d85b22d9582e6ec7afa5bc45cdc6e6122d98f613dfc78afca2b0b715.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313208
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/top-background-5b5936f581d63f8a41c3cbc6280ee4a8c0c92fdb227b0ab972e5fd616e2db443.jpg HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313983
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/meet-express-lane-background-a9b7b7d4a9115ce5c05d798ff0262149f3a93fe1df66e3c2cc14a764b3cf6486.svg HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313983
Source: global traffic	HTTP traffic detected: GET /metrics/bignumber HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313983
Source: global traffic	HTTP traffic detected: GET /homepage/expresscount HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313983
Source: global traffic	HTTP traffic detected: GET /assets/packs/js/267-551cf5a138ef9e22a324.chunk.js HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313983
Source: global traffic	HTTP traffic detected: GET /assets/packs/js/application-dc9afff59193edecdcfb.chunk.js HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313983
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/branded-forms-a08409bd20cae3bdc4596d318ed891f70c78869b6b2f7a642aa8427a96e8f348.svg HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313983
Source: global traffic	HTTP traffic detected: GET /assets/layout/express/express-lane-logo-beeff0c14d3c3aa9e8c4cc503a73ce8782b83170e6dc8875aff8c81b3d29f0cc.svg HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992313983
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/analytics-093f6b8fc446bb6e0878c31009b6635462dcf836828d4b63cc220fda449de9c9.svg HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992314499
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/mobile-5a0d7993c13d170aa0ef0bea6b0e4edf5859af81cc9a2358c63066f6f705e532.svg HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992314499
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/customer-service-9726ef725ad13da4af626b875af2ff2544c43f3aaa25d83f4134550c355f48c3.svg HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992314499
Source: global traffic	HTTP traffic detected: GET /assets/layout/home/tools-in-action-background-a5082337eee4c88635d68e1bc11d6f061c98b9ceb9e70613e0f06cf5d31a01d5.svg HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992314499
Source: global traffic	HTTP traffic detected: GET /td/rul/860973240?random=1719991417521&cv=11&fst=1719991417521&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za201zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkRdvn9GxQ0egYW39QqCdlHgGZh4V891QevcFwabbXTjCSNElIHUR_KwKUmj9c
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/860973240/?random=1719991417521&cv=11&fst=1719991417521&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za201zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkRdvn9GxQ0egYW39QqCdlHgGZh4V891QevcFwabbXTjCSNElIHUR_KwKUmj9c
Source: global traffic	HTTP traffic detected: GET /td/rul/860973240?random=1719991417561&cv=11&fst=1719991417561&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za200zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkRdvn9GxQ0egYW39QqCdlHgGZh4V891QevcFwabbXTjCSNElIHUR_KwKUmj9c
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/860973240/?random=1719991417561&cv=11&fst=1719991417561&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za200zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkRdvn9GxQ0egYW39QqCdlHgGZh4V891QevcFwabbXTjCSNElIHUR_KwKUmj9c
Source: global traffic	HTTP traffic detected: GET /timeline/v2/jsonp/1?session=MzEyMjc1ODA3&bundle=MQ%3D%3D&key=NDQ5OTg1YTQ2NzA4MTM2ZjNkNzQ%3D&lib=anM%3D&version=NC40LjA%3D&features=WyJ3cyJd&timeline=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%3D HTTP/1.1Host: stats.pusher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1719991417728 HTTP/1.1Host: proxy-service.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _ga_32S8B7ZFEL=GS1.1.1719991417.1.0.1719991417.0.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/860973240/?random=1719991417521&cv=11&fst=1719990000000&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za201zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLaMexcX9lSNS9AwPMfc2wGPWoCWUtgywhU8aFYfP5PtORl4L4&random=901266210&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/860973240/?random=1719991417561&cv=11&fst=1719990000000&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za200zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLeL-kJ00D7Big2UyqDzuPzUhCMO1M8bGDZiJK--HKm-VTHQcL&random=750995215&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
Source: global traffic	HTTP traffic detected: GET /assets/favicons/actblue/favicon-62429192865190e46d50844541a5662f8db660cae4e1d6cd607ba04e09ac3c02.ico HTTP/1.1Host: secure.actblue.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _ga_32S8B7ZFEL=GS1.1.1719991417.1.0.1719991417.0.0.0; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992314499
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/860973240/?random=1719991417521&cv=11&fst=1719990000000&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za201zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLaMexcX9lSNS9AwPMfc2wGPWoCWUtgywhU8aFYfP5PtORl4L4&random=901266210&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/860973240/?random=1719991417561&cv=11&fst=1719990000000&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za200zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLeL-kJ00D7Big2UyqDzuPzUhCMO1M8bGDZiJK--HKm-VTHQcL&random=750995215&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
Source: global traffic	HTTP traffic detected: GET /assets/favicons/actblue/favicon-62429192865190e46d50844541a5662f8db660cae4e1d6cd607ba04e09ac3c02.ico HTTP/1.1Host: secure.actblue.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _ga_32S8B7ZFEL=GS1.1.1719991417.1.0.1719991417.0.0.0; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992322552
Source: global traffic	HTTP traffic detected: GET /terms-of-service/ HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php?action=frmpro_css&ver=6171659 HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/terms-of-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/footer-logo.svg HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/terms-of-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e-202427.js HTTP/1.1Host: stats.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/footer-logo.svg HTTP/1.1Host: democrats.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/js/source.dev.js?m=1717432320g HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/terms-of-service/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/fonts/MyFonts/TradeGothicNextLTProHv.woff2 HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://democrats.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/fonts/MyFonts/TradeGothicNextLTProBdCn.woff2 HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://democrats.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/fonts/MyFonts/TradeGothicNextLTProRg.woff2 HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://democrats.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g.gif?v=ext&blog=219174945&post=466&tz=-4&srv=democrats.org&hp=vip&j=1%3A13.5&host=democrats.org&ref=&fcp=0&rand=0.5232371462636034 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/logo.svg HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/arrow-red.svg HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/error.svg HTTP/1.1Host: democrats.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics.js/v1/bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev/analytics.min.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/js/imichatinit.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://democrats.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/logo.svg HTTP/1.1Host: democrats.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/arrow-red.svg HTTP/1.1Host: democrats.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bsdstarter/assets/img/error.svg HTTP/1.1Host: democrats.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g.gif?v=ext&blog=219174945&post=466&tz=-4&srv=democrats.org&hp=vip&j=1%3A13.5&host=democrats.org&ref=&fcp=0&rand=0.5232371462636034 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/js/imichatgeneral.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-JD0JR2ZC3V&gacid=1194020864.1719991435&gtm=45je4710v891022994za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=988567100 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkRdvn9GxQ0egYW39QqCdlHgGZh4V891QevcFwabbXTjCSNElIHUR_KwKUmj9c
Source: global traffic	HTTP traffic detected: GET /widget/js/imichatinit.js HTTP/1.1Host: media.imi.chatConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/projects/bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev/settings HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://democrats.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/css/chat-widget.css?id=1719991434900 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Lk1GEoi86qgELRWyWBnWeV7dX663WNaDZQS8DKG49KOdpQzcPe8hoZxNXG6LcfWAFfcmr4mHSfVLwBTc9fEI+8tutGeAH66ahZLUFPtvZrpzvXG2Cyr9gabBPlQT
Source: global traffic	HTTP traffic detected: GET /widget/centerpagepost.html HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Lk1GEoi86qgELRWyWBnWeV7dX663WNaDZQS8DKG49KOdpQzcPe8hoZxNXG6LcfWAFfcmr4mHSfVLwBTc9fEI+8tutGeAH66ahZLUFPtvZrpzvXG2Cyr9gabBPlQT
Source: global traffic	HTTP traffic detected: GET /widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org= HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=Lk1GEoi86qgELRWyWBnWeV7dX663WNaDZQS8DKG49KOdpQzcPe8hoZxNXG6LcfWAFfcmr4mHSfVLwBTc9fEI+8tutGeAH66ahZLUFPtvZrpzvXG2Cyr9gabBPlQT
Source: global traffic	HTTP traffic detected: GET /widget/css/datepicker.css HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/css/dropzone.css HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/css/chat-widget-frame.css HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/css/momentum-ui.css HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/css/font-awesome.min.css HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/css/style.css HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /v1/projects/bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev/settings HTTP/1.1Host: cdn.segment.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/css/bootstrap-multiselect.min.css HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/css/momentum-ui-icons-rebrand.css HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/showdown.min.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/jquery.min.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/bootstrap-datepicker.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/jquery.slimscroll.min.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/imichatgeneral.js?v=28052024_1 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/survey-manager.js?v=28052024_1 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/radio-activedescendant.js? HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/post-chat-survey-manager.js?v=28052024_1 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/popper.min.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/bootstrap.min.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/bootstrap-multiselect.min.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/mqttws31.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/imiclient.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/moment.min.js?v=28052024_1 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/textcolor.min.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/js/jquery.jplayer.min.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=DukxsiMo69HLo+FdbYMI3Ui+r4oVNBBQkY8d5lt+taDtRFsG4Bj/kUoszLHA3c+a70BDcrY+Q6dU+DjIjLfaUZfHusfAf9xJ+MUvgAC1AsiSeMRVKd7XYS/zDG02
Source: global traffic	HTTP traffic detected: GET /widget/images/insignia.png HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=m/lj/99sw++2SC29O3hcOlbTofMc1DoxdKz5ugtoBzdLBPCd/JdB+EiR2+GO3uYR5BzoCf59k6va4YZTQYNbDzOmyKF7neT4cWjzhb4oWC6QB8yJFqsRHDKLiuA/
Source: global traffic	HTTP traffic detected: GET /widget/js/dropzone.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=m/lj/99sw++2SC29O3hcOlbTofMc1DoxdKz5ugtoBzdLBPCd/JdB+EiR2+GO3uYR5BzoCf59k6va4YZTQYNbDzOmyKF7neT4cWjzhb4oWC6QB8yJFqsRHDKLiuA/
Source: global traffic	HTTP traffic detected: GET /widget/js/imichatwidgetv2.js?v=28052024_1 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=7Qg46dAlrF0aTprdJsQTjVHq8rpOXsGCDW9biEVOmqAJUKq2+UY5acaV+nE1Bq9Uu1F8Vuypd98u1ZRWgEqUBdyGw2OXWXnAR6Wj69x7oebDD1dP8TX3AfgE2dj1
Source: global traffic	HTTP traffic detected: GET /widget/images/insignia.png HTTP/1.1Host: media.imi.chatConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=wyxfY2qHoHIkIudJ9FbhxmCLkfn5X3s9DEpBmJIjwcDFoiFMMWFXN6V6nbV26rW71aghuF5ipHLXgHW4q6O9iHxFh+8iM8vuxSPIAOVfhDByGSrX0k9+M5dzBx4D; AWSALBCORS=TEkx9z1Wi0UsdAO89/aLRDXU0orbYY2S3TLxkfZipJIjF8VVrIGfL2CfSS7A+KxTj7Q+SQy4kHWR0GBfbRIFhp/dnVRqis2u3/qPnjZKEBejhWQk6Q/d+ka6HrtJ
Source: global traffic	HTTP traffic detected: GET /livechats/0CD0C180-0B0D-44A8-80E6-0AFCA7B38214/settings?host=democrats.org&$callback=? HTTP/1.1Host: chat-widget.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://media.imi.chatSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://media.imi.chat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/i18n/en_US/widgetlocalization.json HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=FrsK8dDDD9T5ItIODVmRvJMZpH+aiBLeoZCepbOvcbtSq3Eq9pVBQsqNv8NiB4EB6tp6demG/tarLGTMc81GMItlwBQ6upTmEtExyw13Wg42yVYZXoWnoRvN5Igr
Source: global traffic	HTTP traffic detected: GET /livechats/0CD0C180-0B0D-44A8-80E6-0AFCA7B38214/settings?host=democrats.org&$callback=? HTTP/1.1Host: chat-widget.imi.chatConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /livechats/getemojis?groupid=1866 HTTP/1.1Host: chat-widget.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://media.imi.chatSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://media.imi.chat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/audio/mo.mp3 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=Accept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=GcQN/ibwsWiFS5beN/6a1w0wgfOOhkfeTQZKcrajS4yTVjtNyuRKtggvIqyRCJ1XeW20YOQtvu4AJNCGdPWCBGTvH0RvkQ+rkYyPga+ih0KUZEoKtkf/B+pB7vvNRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /widget/i18n/en_US/widgetlocalization.json HTTP/1.1Host: media.imi.chatConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=FrsK8dDDD9T5ItIODVmRvJMZpH+aiBLeoZCepbOvcbtSq3Eq9pVBQsqNv8NiB4EB6tp6demG/tarLGTMc81GMItlwBQ6upTmEtExyw13Wg42yVYZXoWnoRvN5Igr; AWSALBCORS=GcQN/ibwsWiFS5beN/6a1w0wgfOOhkfeTQZKcrajS4yTVjtNyuRKtggvIqyRCJ1XeW20YOQtvu4AJNCGdPWCBGTvH0RvkQ+rkYyPga+ih0KUZEoKtkf/B+pB7vvN
Source: global traffic	HTTP traffic detected: GET /widget/i18n/en_US/widgetlocalization.json HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://democrats.orgSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/45961866638542366318856090__DNC%20Logo.PNG HTTP/1.1Host: imichat-preprod-app-share.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://media.imi.chat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logevent HTTP/1.1Host: chat-widget.imi.chatConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Php8NZMkvyfO3EfqDluC7omcJPzbPXzDpAdyitV7z1OkgB8/R+LsimUNUUt1IselTOvZci7NbJoKaGXIaT9pw/zRtJwlI4n3ouAuSsWsJvE8DPD4kE9cxjW3PWZf; AWSALBCORS=Php8NZMkvyfO3EfqDluC7omcJPzbPXzDpAdyitV7z1OkgB8/R+LsimUNUUt1IselTOvZci7NbJoKaGXIaT9pw/zRtJwlI4n3ouAuSsWsJvE8DPD4kE9cxjW3PWZf
Source: global traffic	HTTP traffic detected: GET /widget/css/style.css?id=1719991448287 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=XxPh9V63TS8qSi0MdlKYJ7Gx9YFs1dAUXW17Qa/K1V2f8TyWzz7EEqCtwe4OkrYA+xwPpeaYq9uH8upKkJd/FrlD78CZkjTPFEw9MzVeSaMeq+j9KZnj0bnELeOe
Source: global traffic	HTTP traffic detected: GET /livechats/getemojis?groupid=1866 HTTP/1.1Host: chat-widget.imi.chatConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Php8NZMkvyfO3EfqDluC7omcJPzbPXzDpAdyitV7z1OkgB8/R+LsimUNUUt1IselTOvZci7NbJoKaGXIaT9pw/zRtJwlI4n3ouAuSsWsJvE8DPD4kE9cxjW3PWZf; AWSALBCORS=Php8NZMkvyfO3EfqDluC7omcJPzbPXzDpAdyitV7z1OkgB8/R+LsimUNUUt1IselTOvZci7NbJoKaGXIaT9pw/zRtJwlI4n3ouAuSsWsJvE8DPD4kE9cxjW3PWZf
Source: global traffic	HTTP traffic detected: GET /widget/css/chat-widget-frame.css?id=1719991448287 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=XxPh9V63TS8qSi0MdlKYJ7Gx9YFs1dAUXW17Qa/K1V2f8TyWzz7EEqCtwe4OkrYA+xwPpeaYq9uH8upKkJd/FrlD78CZkjTPFEw9MzVeSaMeq+j9KZnj0bnELeOe
Source: global traffic	HTTP traffic detected: GET /widget/css/previewstyle.css?id=1719991448288 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=XxPh9V63TS8qSi0MdlKYJ7Gx9YFs1dAUXW17Qa/K1V2f8TyWzz7EEqCtwe4OkrYA+xwPpeaYq9uH8upKkJd/FrlD78CZkjTPFEw9MzVeSaMeq+j9KZnj0bnELeOe
Source: global traffic	HTTP traffic detected: GET /widget/js/proactive-msg-manager.js HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://democrats.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=XxPh9V63TS8qSi0MdlKYJ7Gx9YFs1dAUXW17Qa/K1V2f8TyWzz7EEqCtwe4OkrYA+xwPpeaYq9uH8upKkJd/FrlD78CZkjTPFEw9MzVeSaMeq+j9KZnj0bnELeOe
Source: global traffic	HTTP traffic detected: GET /logos/45961866638542366318856090__DNC%20Logo.PNG HTTP/1.1Host: imichat-preprod-app-share.s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /livechats/0CD0C180-0B0D-44A8-80E6-0AFCA7B38214/proactive/settings?host=democrats.org HTTP/1.1Host: chat-widget.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://media.imi.chatSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://media.imi.chat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/fonts/icomoon.ttf?ktzfl3 HTTP/1.1Host: media.imi.chatConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://democrats.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://media.imi.chat/widget/css/chat-widget-frame.css?id=1719991448287Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_412.2.dr	String found in binary or memory: <a class="facebook" title="facebook" href="https://www.facebook.com/ActBlue"> equals www.facebook.com (Facebook)
Source: chromecache_280.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_391.2.dr	String found in binary or memory: _.Cz=function(a){this.h=_.ub([],function(b){return _.Cg(b)});this.g=_.ub("https://apps.admob.com https://arctic-ocean-116022.appspot.com https://gweb-io2016-registration.appspot.com https://3-dot-gweb-io2016-registration.appspot.com https://bus-payments-dev.googleplex.com https://gbusrides.googleplex.com https://www.editionsatplay.com https://website-dot-cl-syd-eap.appspot.com https://massage-hrd-dev.googleplex.com https://massage-hrd-stg.googleplex.com https://massage.googleplex.com https://massage-hrd.googleplex.com https://googlecommassage-hrd.appspot.com https://nik.googlegoro.com https://taylormarshall-dot-test-dot-402-bslatkin-staging.appspot.com https://402-bslatkin-staging.appspot.com https://gweb-nextregistration.appspot.com https://qa-dot-gweb-nextregistration.appspot.com https://dev-dot-gweb-nextregistration.appspot.com https://cloudnext.withgoogle.com https://defjam-staging.appspot.com https://payments-dot-defjam-staging.appspot.com https://vector-customer.googleplex.com/ https://vector-test-customer.googleplex.com/ https://vector-dev-customer.googleplex.com/ https://vector-staging-customer.googleplex.com/ https://vector-perf-customer.googleplex.com/ https://youtube-xsell-tool.googleplex.com https://youtube-xsell-tool-stg.googleplex.com https://youtube.com https://www.youtube.com https://yt-web-green.corp.youtube.com https://yt-web-release.corp.youtube.com https://checkout.youtube.com https://checkout-green-qa.youtube.com https://home.nest.com https://alpha.home.nest.com https://home.ft.nest.com https://home.qa.nestlabs.com https://major.home.qa.nestlabs.com https://home.integration.nestlabs.com https://major.home.integration.nestlabs.com https://biz.waze.com https://biz.world.waze.com https://biz-il.waze.com https://biz-beta.witools.foo https://biz-beta-row.witools.foo https://biz-beta-il.witools.foo https://biz-qa.gcp.wazestg.com https://biz.gcp.wazestg.com https://www.embark.google https://embark-preprod.corp.google.com https://embark-staging.corp.google.com https://embark-test.corp.google.com https://localdev.wazestg.com https://console.cloud.google https://payments.cloud.google https://payments-demoserver-sandbox.corp.cloud.google https://payments-sandbox.corp.cloud.google https://payments-sandbox.cloud.google https://spend.corp.google.com https://spend-preprod.corp.google.com https://spend-staging.corp.google.com https://spend-test.corp.google.com".split(" "),function(b){return _.Cg(b)}); equals www.youtube.com (Youtube)
Source: chromecache_227.2.dr, chromecache_219.2.dr, chromecache_324.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=nA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ob(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},qA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=F.YT,q=function(){LC(n)};if(p)return p.ready&&p.ready(q),b;var r=F.onYouTubeIframeAPIReady;F.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(OC(w,"iframe_api")\|\|OC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!FC&&MC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_249.2.dr	String found in binary or memory: fURL1:'//www.facebook.com/sharer.php?u=', equals www.facebook.com (Facebook)
Source: chromecache_217.2.dr, chromecache_227.2.dr, chromecache_219.2.dr	String found in binary or memory: return b}BC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_249.2.dr	String found in binary or memory: src:'//www.youtube.com/embed/%id%?autoplay=1'}, equals www.youtube.com (Youtube)
Source: chromecache_227.2.dr, chromecache_219.2.dr, chromecache_324.2.dr	String found in binary or memory: var QB=function(a,b,c,d,e){var f=Lz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Lz("fsl","nv.ids",[]):Lz("fsl","ids",[]);if(!g.length)return!0;var k=Qz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ty(k,uy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: bfptxt.com
Source: global traffic	DNS traffic detected: DNS query: secure.actblue.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: proxy-service.actblue.com
Source: global traffic	DNS traffic detected: DNS query: sessions.bugsnag.com
Source: global traffic	DNS traffic detected: DNS query: www.paypal.com
Source: global traffic	DNS traffic detected: DNS query: pay.google.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.paypalobjects.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: t.paypal.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: pay.sandbox.google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: cdn.sift.com
Source: global traffic	DNS traffic detected: DNS query: hexagon-analytics.com
Source: global traffic	DNS traffic detected: DNS query: democrats.org
Source: global traffic	DNS traffic detected: DNS query: actionnetwork.org
Source: global traffic	DNS traffic detected: DNS query: stats.wp.com
Source: global traffic	DNS traffic detected: DNS query: can2-prod.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: web.joebiden.com
Source: global traffic	DNS traffic detected: DNS query: joebiden.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: ws.pusherapp.com
Source: global traffic	DNS traffic detected: DNS query: sockjs.pusher.com
Source: global traffic	DNS traffic detected: DNS query: stats.pusher.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: cloud.typography.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: media.imi.chat
Source: global traffic	DNS traffic detected: DNS query: pixel.wp.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: chat-widget.imi.chat
Source: global traffic	DNS traffic detected: DNS query: imichat-preprod-app-share.s3.amazonaws.com

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Host: sessions.bugsnag.comConnection: keep-aliveContent-Length: 475sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0Bugsnag-Api-Key: 04c1a9de88bb73e22614162ba813a0b9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonBugsnag-Payload-Version: 1Bugsnag-Sent-At: 2024-07-03T07:23:03.939Zsec-ch-ua-platform: "Windows"Accept: */*Origin: https://secure.actblue.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure.actblue.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 27Accept-Ch: Sec-CH-UA-FullCache-Control: max-age=0, no-cache, no-store, must-revalidateContent-Type: text/html; charset=utf-8Etag: W/"1b-t3Pfl4FRsGq0mO4t1UhagLO9mUw"Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ==Paypal-Debug-Id: f6979530e889cTraceparent: 00-0000000000000000000f6979530e889c-6a133907321a810b-01DC: ccg11-origin-www-1.paypal.comAccept-Ranges: bytesVia: 1.1 varnish, 1.1 varnish, 1.1 varnishDate: Wed, 03 Jul 2024 07:23:14 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200061-IAD, cache-ewr18154-EWR, cache-ewr18154-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991395.596108,VS0,VE123Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Type: text/html; charset=utf-8Cache-Control: no-storeReferrer-Policy: strict-origin-when-cross-originSet-Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; domain=secure.actblue.com; path=/; expires=Wed, 03 Jul 2024 08:23:18 GMT; secure; HttpOnly; SameSite=LaxX-Content-Type-Options: nosniffX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Accept-Ranges: bytesDate: Wed, 03 Jul 2024 07:23:18 GMTVia: 1.1 varnishVary: Accept, Accept-EncodingX-Start: 2024-07-03 07:23:17.984Strict-Transport-Security: max-age=31536000transfer-encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 03 Jul 2024 07:23:23 GMTContent-Type: text/htmlContent-Length: 548Connection: closeVary: Accept-Encodingx-rq: jfk1 96 185 443x-cache: EXPIRED
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 07:23:29 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: hFKJ5+DxRJ+BYfqsetNm9g==$Z710j/iPInoU/AT+cs/+JA==Strict-Transport-Security: max-age=10Server: cloudflareCF-RAY: 89d52166ea7043c3-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: http://adam.co/lab/jquery/customselect/
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: http://bassistance.de/jquery-plugins/jquery-plugin-validation/
Source: chromecache_412.2.dr	String found in binary or memory: http://blog.actblue.com
Source: chromecache_372.2.dr, chromecache_415.2.dr	String found in binary or memory: http://cipa.jp/exif/1.0/
Source: chromecache_360.2.dr	String found in binary or memory: http://clients.designcrumbs.com
Source: chromecache_358.2.dr, chromecache_305.2.dr	String found in binary or memory: http://davidstutz.de/bootstrap-multiselect/)
Source: chromecache_249.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_249.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/documentation.html#options
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation
Source: chromecache_319.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_243.2.dr, chromecache_319.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_265.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_265.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_190.2.dr	String found in binary or memory: http://javascript.nwbox.com/ContentLoaded/
Source: chromecache_190.2.dr	String found in binary or memory: http://javascript.nwbox.com/ContentLoaded/MIT-LICENSE
Source: chromecache_249.2.dr	String found in binary or memory: http://jedrzejchalubek.com/)
Source: chromecache_408.2.dr, chromecache_229.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_408.2.dr, chromecache_229.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_250.2.dr	String found in binary or memory: http://momentum.design)
Source: chromecache_372.2.dr, chromecache_415.2.dr	String found in binary or memory: http://ns.camerabits.com/photomechanic/1.0/
Source: chromecache_290.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_351.2.dr	String found in binary or memory: http://rocha.la)
Source: chromecache_249.2.dr	String found in binary or memory: http://scottjehl.github.io/picturefill
Source: chromecache_243.2.dr	String found in binary or memory: http://siderite.blogspot.com/2007/04/super-fast-and-accurate-string-distance.html
Source: chromecache_408.2.dr, chromecache_229.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_243.2.dr	String found in binary or memory: http://stackoverflow.com/a/17954882/1322410)
Source: chromecache_249.2.dr	String found in binary or memory: http://stackoverflow.com/a/8955580
Source: chromecache_190.2.dr	String found in binary or memory: http://stackoverflow.com/questions/11929099/html5-canvas-drawimage-ratio-bug-ios
Source: chromecache_249.2.dr	String found in binary or memory: http://stackoverflow.com/questions/16889447/prevent-full-page-scrolling-ios
Source: chromecache_249.2.dr	String found in binary or memory: http://stackoverflow.com/questions/7264899/detect-css-transitions-using-javascript-and-without-moder
Source: chromecache_243.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#collapse
Source: chromecache_243.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#dropdowns
Source: chromecache_243.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#modals
Source: chromecache_243.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#transitions
Source: chromecache_205.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010d5b
Source: chromecache_205.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010d5c
Source: chromecache_205.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010d5d
Source: chromecache_249.2.dr	String found in binary or memory: http://w3.org/TR/2012/WD-url-20120524/#collect-url-parameters
Source: chromecache_407.2.dr, chromecache_221.2.dr	String found in binary or memory: http://widget.imichat.co
Source: chromecache_193.2.dr	String found in binary or memory: http://www.IWillVote.com
Source: chromecache_391.2.dr, chromecache_220.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_257.2.dr	String found in binary or memory: http://www.bluestatedigital.com
Source: chromecache_315.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_190.2.dr	String found in binary or memory: http://www.dropzonejs.com)
Source: chromecache_401.2.dr	String found in binary or memory: http://www.eclipse.org/legal/epl-v10.html
Source: chromecache_401.2.dr	String found in binary or memory: http://www.eclipse.org/org/documents/edl-v10.php.
Source: chromecache_342.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_249.2.dr	String found in binary or memory: http://www.mariusolbertz.de/
Source: chromecache_351.2.dr	String found in binary or memory: http://www.opensource.org/licenses/gpl-license.php)
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_351.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_216.2.dr	String found in binary or memory: http://www.typography.com/support/eula.html.http://www.typography.com/support/eula.html
Source: chromecache_216.2.dr	String found in binary or memory: http://www.typography.com/support/eula.html.http://www.typography.com/support/eula.htmlCopyright
Source: chromecache_259.2.dr	String found in binary or memory: http://www.typography.com/support/eula.html.http://www.typography.com/support/eula.htmlDecimalMedium
Source: chromecache_284.2.dr	String found in binary or memory: http://www.typography.com/support/eula.html.http://www.typography.com/support/eula.htmlDecimalSemibo
Source: chromecache_216.2.dr	String found in binary or memory: http://www.typography.com/support/eula.html.http://www.typography.com/support/eula.htmlRoman
Source: chromecache_259.2.dr	String found in binary or memory: http://www.typography.com/support/eula.html.http://www.typography.com/support/eula.htmlSimplified
Source: chromecache_284.2.dr, chromecache_259.2.dr	String found in binary or memory: http://www.typography.comDecimal
Source: chromecache_259.2.dr	String found in binary or memory: http://www.typography.comDecimalMediumH&Co:
Source: chromecache_284.2.dr	String found in binary or memory: http://www.typography.comDecimalSemiboldH&Co:
Source: chromecache_216.2.dr	String found in binary or memory: http://www.typography.comMercury
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://3-dot-gweb-io2016-registration.appspot.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://402-bslatkin-staging.appspot.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://accounts.google.com/AccountChooser
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_368.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_342.2.dr	String found in binary or memory: https://actionnetwork.org
Source: chromecache_193.2.dr	String found in binary or memory: https://actionnetwork.org/api/v2/forms/4f51c8cc-384d-435b-ae17-865695e8b5e8/submissions
Source: chromecache_338.2.dr, chromecache_274.2.dr	String found in binary or memory: https://actionnetwork.org/css/style-embed-whitelabel-v3.css
Source: chromecache_338.2.dr	String found in binary or memory: https://actionnetwork.org/forms/unsubscribe-4
Source: chromecache_338.2.dr	String found in binary or memory: https://actionnetwork.org/forms/unsubscribe-4?nowrapper=true&referrer=&source=
Source: chromecache_338.2.dr	String found in binary or memory: https://actionnetwork.org/forms/unsubscribe-4?nowrapper=true&referrer=&source=&oneclick=
Source: chromecache_274.2.dr	String found in binary or memory: https://actionnetwork.org/forms/update-email-preferences
Source: chromecache_342.2.dr	String found in binary or memory: https://actionnetwork.org/images/logo_sm.png
Source: chromecache_282.2.dr	String found in binary or memory: https://actionnetwork.org/images/select2-spinner.gif
Source: chromecache_282.2.dr	String found in binary or memory: https://actionnetwork.org/images/select2.png
Source: chromecache_282.2.dr	String found in binary or memory: https://actionnetwork.org/images/select2x2.png
Source: chromecache_342.2.dr	String found in binary or memory: https://actionnetwork.org/images/spinner8.png
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: https://actionnetwork.org/includes/js/can-embed.js?v=54
Source: chromecache_342.2.dr	String found in binary or memory: https://actionnetwork.org/includes/js/challenge.min.js
Source: chromecache_282.2.dr	String found in binary or memory: https://actionnetwork.org/includes/js/intl-tel-input/css/intlTelInput.min.css
Source: chromecache_282.2.dr	String found in binary or memory: https://actionnetwork.org/includes/js/intl-tel-input/img/flags
Source: chromecache_282.2.dr	String found in binary or memory: https://actionnetwork.org/includes/js/intl-tel-input/img/flags.png
Source: chromecache_360.2.dr	String found in binary or memory: https://actionnetwork.org/includes/js/intl-tel-input/js/utils.js
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: https://actionnetwork.org/includes/js/jquery-min.js
Source: chromecache_338.2.dr	String found in binary or memory: https://actionnetwork.org/oembed?url=https%3A%2F%2Factionnetwork.org%2Fforms%2Funsubscribe-4%2F&form
Source: chromecache_213.2.dr, chromecache_249.2.dr	String found in binary or memory: https://actionnetwork.org/user_files/user_files/000/036/884/original/rally.jpg
Source: chromecache_274.2.dr	String found in binary or memory: https://actionnetwork.org/user_files/user_files/000/080/707/original/overrides_sept22.js
Source: chromecache_274.2.dr	String found in binary or memory: https://actionnetwork.org/user_files/user_files/000/080/770/original/funblue.css
Source: chromecache_338.2.dr	String found in binary or memory: https://actionnetwork.org/user_files/user_files/000/091/295/original/page_wrapper_reelect.css
Source: chromecache_338.2.dr	String found in binary or memory: https://actionnetwork.org/user_files/user_files/000/091/297/original/BFP_AB-Logo_Ivory.png
Source: chromecache_338.2.dr	String found in binary or memory: https://actionnetwork.org/user_files/user_files/000/095/477/original/overrides_wo_rally.js
Source: chromecache_338.2.dr	String found in binary or memory: https://actionnetwork.org/widgets/v5/form/unsubscribe-4?format=js&referrer=&source=&style=full&css=w
Source: chromecache_274.2.dr	String found in binary or memory: https://actionnetwork.org/widgets/v5/form/update-email-preferences?format=js&source=widget&style=ful
Source: chromecache_324.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_338.2.dr, chromecache_274.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://alpha.home.nest.com
Source: chromecache_255.2.dr	String found in binary or memory: https://api-js.mixpanel.com
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_258.2.dr, chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://apps.admob.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://arctic-ocean-116022.appspot.com
Source: chromecache_244.2.dr	String found in binary or memory: https://assets-cdn.github.com/images/icons/emoji/octocat.png
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://biz-beta-il.witools.foo
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://biz-beta-row.witools.foo
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://biz-beta.witools.foo
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://biz-il.waze.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://biz-qa.gcp.wazestg.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://biz.gcp.wazestg.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://biz.waze.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://biz.world.waze.com
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_243.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=93506
Source: chromecache_243.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_391.2.dr	String found in binary or memory: https://bunpay.app
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://bus-payments-dev.googleplex.com
Source: chromecache_274.2.dr	String found in binary or memory: https://can2-prod.s3.amazonaws.com/forms/photos/000/457/108/normal/49721663391_c0cdba991d_o.jpg
Source: chromecache_338.2.dr	String found in binary or memory: https://can2-prod.s3.amazonaws.com/groups/default_facebook_images/000/192/750/original/240424_Social
Source: chromecache_217.2.dr, chromecache_227.2.dr, chromecache_219.2.dr, chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_255.2.dr	String found in binary or memory: https://cdn.mxpnl.com
Source: chromecache_412.2.dr	String found in binary or memory: https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
Source: chromecache_255.2.dr	String found in binary or memory: https://cdn.mxpnl.com/libs/mixpanel-recorder.min.js
Source: chromecache_193.2.dr	String found in binary or memory: https://cdn.segment.com/analytics.js/v1/
Source: chromecache_328.2.dr, chromecache_246.2.dr	String found in binary or memory: https://chat-widget.imi.chat/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://checkout-green-qa.youtube.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://checkout.youtube.com
Source: chromecache_391.2.dr	String found in binary or memory: https://clientlog.cloud.google
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://clientlog.cloud.google/log?format=json&hasfast=true
Source: chromecache_193.2.dr	String found in binary or memory: https://cloud.typography.com/6400316/6877612/css/fonts.css
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://cloudnext.withgoogle.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://console.cloud.google
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/proto/
Source: chromecache_249.2.dr	String found in binary or memory: https://css-tricks.com/snippets/jquery/fixing-load-in-ie-for-cached-images/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://defjam-staging.appspot.com
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org
Source: chromecache_274.2.dr	String found in binary or memory: https://democrats.org/
Source: chromecache_274.2.dr	String found in binary or memory: https://democrats.org/#website
Source: chromecache_274.2.dr	String found in binary or memory: https://democrats.org/?p=1006766
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/?p=466
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/?s=
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uk
Source: chromecache_274.2.dr	String found in binary or memory: https://democrats.org/act/
Source: chromecache_274.2.dr	String found in binary or memory: https://democrats.org/act/#breadcrumb
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/contact-us/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/donatebymail/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/es
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/es/terminos-de-servicio/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/news/
Source: chromecache_193.2.dr, chromecache_342.2.dr	String found in binary or memory: https://democrats.org/privacy-policy/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/submission-terms/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/take-action/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/take-action/trainings/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/take-action/work-with-us/
Source: chromecache_193.2.dr, chromecache_342.2.dr	String found in binary or memory: https://democrats.org/terms-of-service/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/terms-of-service/#breadcrumb
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/where-we-stand/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/where-we-stand/party-platform/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/where-we-stand/the-issues/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/where-we-stand/the-issues/vote/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/who-we-are/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/who-we-are/about-the-democratic-party/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/who-we-are/leadership-2-2/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/who-we-are/our-history/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/who-we-are/state-parties/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/who-we-are/what-we-do/
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/who-we-are/who-we-serve/
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-admin/admin-ajax.php?action=frmpro_css&ver=6171659
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/wp-content/themes/bsdstarter/assets/js/source.dev.js?m=1717432320g
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1717432320g
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320g
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=180
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=192
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=270
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=32
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-includes/css/dist/block-library/style.min.css?m=1719250562g
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-json/
Source: chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fdemocrats.org%2Fact%2F
Source: chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fdemocrats.org%2Fact%2F&format=
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fdemocrats.org%2Fterms-of-service%2F
Source: chromecache_274.2.dr	String found in binary or memory: https://democrats.org/wp-json/wp/v2/pages/1006766
Source: chromecache_193.2.dr	String found in binary or memory: https://democrats.org/wp-json/wp/v2/pages/466
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://dev-dot-gweb-nextregistration.appspot.com
Source: chromecache_243.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_368.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration
Source: chromecache_368.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_368.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_368.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_368.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_249.2.dr	String found in binary or memory: https://developers.google.com/mobile/articles/fast_buttons
Source: chromecache_391.2.dr	String found in binary or memory: https://dmengelt.github.io
Source: chromecache_243.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_243.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://embark-preprod.corp.google.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://embark-staging.corp.google.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://embark-test.corp.google.com
Source: chromecache_412.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:600
Source: chromecache_382.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_192.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_192.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_192.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_192.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_192.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://gbusrides.googleplex.com
Source: chromecache_211.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_244.2.dr	String found in binary or memory: https://github.com/
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: https://github.com/SlexAxton/yepnope.js/commit/89d360496dd026072302a64d23c2b795ecef31ff
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/WICG/EventListenerOptions/blob/gh-pages/explainer.md#feature-detection
Source: chromecache_243.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_305.2.dr	String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect/issues/431)
Source: chromecache_243.2.dr	String found in binary or memory: https://github.com/defunkt/jquery-pjax
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/dimsemenov/Magnific-Popup/issues/2
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/ftlabs/fastclick
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: https://github.com/jackocnr/intl-tel-input.git
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/jashkenas/underscore
Source: chromecache_408.2.dr, chromecache_229.2.dr	String found in binary or memory: https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d
Source: chromecache_408.2.dr, chromecache_229.2.dr	String found in binary or memory: https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77
Source: chromecache_408.2.dr, chromecache_229.2.dr	String found in binary or memory: https://github.com/jquery/jquery/commit/f60729f3903d17917dc351f3ac87794de379b0cc
Source: chromecache_408.2.dr, chromecache_229.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/4333/files
Source: chromecache_243.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_243.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_243.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_243.2.dr	String found in binary or memory: https://github.com/mailcheck/mailcheck
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/mathiasbynens/String.prototype.at
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/sindresorhus/query-string
Source: chromecache_190.2.dr	String found in binary or memory: https://github.com/stomita/ios-imagefile-megapixel
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_211.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_243.2.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_364.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_364.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_219.2.dr	String found in binary or memory: https://google.com
Source: chromecache_315.2.dr, chromecache_409.2.dr	String found in binary or memory: https://google.com/pay
Source: chromecache_219.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_291.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11154426359/?random
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://googlecommassage-hrd.appspot.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://gweb-io2016-registration.appspot.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://gweb-nextregistration.appspot.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://home.ft.nest.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://home.integration.nestlabs.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://home.nest.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://home.qa.nestlabs.com
Source: chromecache_243.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_243.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_243.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_243.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_243.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_243.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_243.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_243.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_315.2.dr	String found in binary or memory: https://ibfe-canary.corp
Source: chromecache_315.2.dr	String found in binary or memory: https://ibfe-canary.corp.google.com
Source: chromecache_315.2.dr	String found in binary or memory: https://ibfe-canary.corp.google.com/%
Source: chromecache_390.2.dr, chromecache_312.2.dr	String found in binary or memory: https://imichat-preprod-app-share.s3.amazonaws.com/logos/45961866638542366318856090__DNC
Source: chromecache_243.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_193.2.dr	String found in binary or memory: https://iwillvote.com/
Source: chromecache_338.2.dr	String found in binary or memory: https://joebiden.com/wp-content/plugins/dem-online-theme-extension/favicons/android-icon-192x192.png
Source: chromecache_338.2.dr	String found in binary or memory: https://joebiden.com/wp-content/uploads/2023/04/240424_SocialShare.png
Source: chromecache_243.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_243.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_243.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_391.2.dr	String found in binary or memory: https://js.stripe.com
Source: chromecache_243.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_243.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://localdev.wazestg.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://major.home.integration.nestlabs.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://major.home.qa.nestlabs.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://massage-hrd-dev.googleplex.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://massage-hrd-stg.googleplex.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://massage-hrd.googleplex.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://massage.googleplex.com
Source: chromecache_412.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css
Source: chromecache_390.2.dr, chromecache_312.2.dr	String found in binary or memory: https://media-us.imi.chat/api/v1
Source: chromecache_407.2.dr, chromecache_221.2.dr	String found in binary or memory: https://media.imi.chat/
Source: chromecache_328.2.dr, chromecache_407.2.dr, chromecache_221.2.dr, chromecache_246.2.dr	String found in binary or memory: https://media.imi.chat/widget
Source: chromecache_193.2.dr	String found in binary or memory: https://media.imi.chat/widget/js/imichatinit.js
Source: chromecache_328.2.dr, chromecache_246.2.dr	String found in binary or memory: https://media.imi.chat/widget/sheets/sheet_emojione_64_indexed_128.png
Source: chromecache_255.2.dr	String found in binary or memory: https://mixpanel.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://nik.googlegoro.com
Source: chromecache_368.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_205.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=gwo2tmd&ht=tk&f=10326.10327.10328&a=15080471&app=typekit&e=css
Source: chromecache_324.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_217.2.dr, chromecache_227.2.dr, chromecache_219.2.dr, chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_315.2.dr	String found in binary or memory: https://pay.google.com/%
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://pay.google.com/gp/p/
Source: chromecache_315.2.dr	String found in binary or memory: https://pay.google.com/gp/p/generate_gpay_btn_img
Source: chromecache_391.2.dr	String found in binary or memory: https://pay.google.com/payments/v4/js/integrator.js?ss
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://pay.google.com/ui/pay
Source: chromecache_315.2.dr	String found in binary or memory: https://pay.sandbox.google.com/gp/p/generate_gpay_btn_img
Source: chromecache_315.2.dr	String found in binary or memory: https://pay.sandbox.google.com/gp/p/payment_method_manifest.json
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://payments-demoserver-sandbox.corp.cloud.google
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://payments-dot-defjam-staging.appspot.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://payments-sandbox.cloud.google
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://payments-sandbox.corp.cloud.google
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://payments.cloud.google
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://payments.google.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js?ss
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_391.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_243.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_243.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_243.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_243.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_243.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_243.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_243.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_412.2.dr	String found in binary or memory: https://proxy-service.actblue.com
Source: chromecache_243.2.dr	String found in binary or memory: https://pusher.com/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://qa-dot-gweb-nextregistration.appspot.com
Source: chromecache_249.2.dr	String found in binary or memory: https://raw.githubusercontent.com/opensupporter/jquery-osdi/master/jquery.osdi.js
Source: chromecache_246.2.dr	String found in binary or memory: https://rtm-us.imiconnect.io
Source: chromecache_328.2.dr, chromecache_246.2.dr	String found in binary or memory: https://rtm-us.imiconnect.io/apnpweb
Source: chromecache_328.2.dr, chromecache_246.2.dr	String found in binary or memory: https://rtm-us.imiconnect.io/apnpweb/
Source: chromecache_246.2.dr	String found in binary or memory: https://rtm-us.imiconnect.io/rtmsAPI
Source: chromecache_412.2.dr	String found in binary or memory: https://s3.amazonaws.com/actblue-img/fbmetatagimg.png
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_412.2.dr	String found in binary or memory: https://secure.actblue.com
Source: chromecache_412.2.dr	String found in binary or memory: https://secure.actblue.com/
Source: chromecache_193.2.dr	String found in binary or memory: https://secure.actblue.com/donate/web-donate
Source: chromecache_412.2.dr	String found in binary or memory: https://secure.actblue.com/pending_entities/new
Source: chromecache_412.2.dr	String found in binary or memory: https://secure.actblue.com/trackables
Source: chromecache_243.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_408.2.dr, chromecache_229.2.dr	String found in binary or memory: https://snyk.io/vuln/SNYK-JS-JQUERY-569619
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://spend-preprod.corp.google.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://spend-staging.corp.google.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://spend-test.corp.google.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://spend.corp.google.com
Source: chromecache_278.2.dr, chromecache_342.2.dr	String found in binary or memory: https://stackoverflow.com/a/47614491
Source: chromecache_328.2.dr, chromecache_246.2.dr	String found in binary or memory: https://stackoverflow.com/questions/52729798/how-to-decode-utf-16-emoji-surrogate-pairs-into-uf8-8-a
Source: chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_193.2.dr	String found in binary or memory: https://stats.wp.com/e-202427.js
Source: chromecache_193.2.dr	String found in binary or memory: https://store.democrats.org/
Source: chromecache_412.2.dr	String found in binary or memory: https://support.actblue.com
Source: chromecache_319.2.dr	String found in binary or memory: https://support.actblue.com/
Source: chromecache_412.2.dr	String found in binary or memory: https://support.actblue.com/campaigns-and-organizations
Source: chromecache_412.2.dr	String found in binary or memory: https://support.actblue.com/donors-and-supporters
Source: chromecache_412.2.dr	String found in binary or memory: https://support.actblue.com/donors/contributions/how-do-i-change-or-cancel-my-recurring-contribution
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://taylormarshall-dot-test-dot-402-bslatkin-staging.appspot.com
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%stringiteratorprototype%.next
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.from
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.includes
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.indexof
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.create
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.defineproperties
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.defineproperty
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.getownpropertynames
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.getprototypeof
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.keys
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.setprototypeof
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-requireobjectcoercible
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype-
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.codepointat
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-tointeger
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-tolength
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toobject
Source: chromecache_249.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toprimitive
Source: chromecache_217.2.dr, chromecache_227.2.dr, chromecache_219.2.dr, chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_412.2.dr	String found in binary or memory: https://topaz-a.actblue.com/token
Source: chromecache_412.2.dr	String found in binary or memory: https://topaz-b.actblue.com/token
Source: chromecache_412.2.dr	String found in binary or memory: https://twitter.com/actblue
Source: chromecache_249.2.dr	String found in binary or memory: https://twitter.com/share?url=
Source: chromecache_258.2.dr, chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_243.2.dr	String found in binary or memory: https://underscorejs.org
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/2d5126/000000000000000000010d5c/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/f629be/000000000000000000010d5d/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/f629be/000000000000000000010d5d/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_205.2.dr	String found in binary or memory: https://use.typekit.net/af/f629be/000000000000000000010d5d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_193.2.dr	String found in binary or memory: https://use.typekit.net/gwo2tmd.css
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://vector-customer.googleplex.com/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://vector-dev-customer.googleplex.com/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://vector-perf-customer.googleplex.com/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://vector-staging-customer.googleplex.com/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://vector-test-customer.googleplex.com/
Source: chromecache_382.2.dr	String found in binary or memory: https://wcdev.imichat.io/css/momentum-ui-icons.min.css
Source: chromecache_382.2.dr	String found in binary or memory: https://wcdev.imichat.io/momentum/momentum.js
Source: chromecache_243.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_243.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://website-dot-cl-syd-eap.appspot.com
Source: chromecache_193.2.dr	String found in binary or memory: https://wp.com/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.editionsatplay.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.embark.google
Source: chromecache_324.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_405.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11154426359/?random
Source: chromecache_241.2.dr, chromecache_194.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/860973240/?random
Source: chromecache_219.2.dr, chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_324.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_217.2.dr, chromecache_227.2.dr, chromecache_219.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_193.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-JD0JR2ZC3V
Source: chromecache_412.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_412.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-T8S2L7B
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.gstatic.com/_/boq-payments-consumer/_/r/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendB
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-payments-consumer/_/ss/k=boq-payments-consumer.InstantbuyFrontendB
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_315.2.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg
Source: chromecache_315.2.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/dark_gpay.svg);
Source: chromecache_315.2.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/light_gpay.svg);
Source: chromecache_315.2.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/refreshedgraphicaldesign
Source: chromecache_315.2.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/refreshedgraphicaldesign/dark_gpay.svg);
Source: chromecache_393.2.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_193.2.dr	String found in binary or memory: https://www.mobilize.us/dnc/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_275.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_193.2.dr, chromecache_274.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://youtube-xsell-tool-stg.googleplex.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://youtube-xsell-tool.googleplex.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://youtube.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://yt-web-green.corp.youtube.com
Source: chromecache_276.2.dr, chromecache_391.2.dr	String found in binary or memory: https://yt-web-release.corp.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@30/410@160/53

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2128,i,432476065494129524,13042706341455745414,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bfptxt.com/5wKgd5"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2128,i,432476065494129524,13042706341455745414,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_269.2.dr, chromecache_395.2.dr	Binary or memory string: gOJyj8OEJmHlNlykGn7yi3Ag1fCbJYvHXVTDb3IoHrHhcSmiER33OBEkoSOq4SehYTqemU18NbuG
Source: chromecache_348.2.dr	Binary or memory string: 46cvz2fsJc1yBRpDgIGk31/O6Y03jNvcLOCpY15Zupg7Ny04VMCiyelOQLSOafo4oLXtEY2qW14u

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://bfptxt.com/5wKgd5	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://support.google.com	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=180	0%	Avira URL Cloud	safe
https://democrats.org/who-we-are/what-we-do/	0%	Avira URL Cloud	safe
https://github.com/mozilla/rhino/issues/346	0%	Avira URL Cloud	safe
https://democrats.org/wp-content/themes/bsdstarter/assets/fonts/MyFonts/TradeGothicNextLTProHv.woff2	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/opensupporter/jquery-osdi/master/jquery.osdi.js	0%	Avira URL Cloud	safe
https://democrats.org/wp-admin/admin-ajax.php?action=frmpro_css&ver=6171659	0%	Avira URL Cloud	safe
https://biz-qa.gcp.wazestg.com	0%	Avira URL Cloud	safe
http://blog.actblue.com	0%	Avira URL Cloud	safe
https://www.paypal.com/sdk/js?client-id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&locale=en_US&disable-funding=credit,card&intent=capture&commit=false&enable-funding=venmo	0%	Avira URL Cloud	safe
https://biz-qa.gcp.wazestg.com	0%	Virustotal		Browse
http://blog.actblue.com	0%	Virustotal		Browse
https://can2-prod.s3.amazonaws.com/forms/photos/000/457/108/normal/49721663391_c0cdba991d_o.jpg	0%	Avira URL Cloud	safe
https://gweb-nextregistration.appspot.com	0%	Avira URL Cloud	safe
https://democrats.org/#website	0%	Avira URL Cloud	safe
https://github.com/stomita/ios-imagefile-megapixel	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://github.com/mozilla/rhino/issues/346	0%	Virustotal		Browse
https://chat-widget.imi.chat/	0%	Avira URL Cloud	safe
https://www.paypal.com/tagmanager/pptm.js?id=secure.actblue.com&t=xo&v=5.0.448&source=payments_sdk&client_id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&disableSetCookie=true&vault=false	0%	Avira URL Cloud	safe
https://gweb-nextregistration.appspot.com	0%	Virustotal		Browse
https://democrats.org/#website	0%	Virustotal		Browse
https://github.com/stomita/ios-imagefile-megapixel	0%	Virustotal		Browse
https://home.ft.nest.com	0%	Avira URL Cloud	safe
https://democrats.org/wp-json/wp/v2/pages/466	0%	Avira URL Cloud	safe
https://checkout.youtube.com	0%	Avira URL Cloud	safe
https://media.imi.chat/widget/css/chat-widget.css?id=1719991434900	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://actionnetwork.org/cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js?	0%	Avira URL Cloud	safe
https://chat-widget.imi.chat/	0%	Virustotal		Browse
https://actionnetwork.org/images/select2-spinner.gif	0%	Avira URL Cloud	safe
https://use.typekit.net/gwo2tmd.css	0%	Avira URL Cloud	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Avira URL Cloud	safe
https://home.ft.nest.com	0%	Virustotal		Browse
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610	0%	Avira URL Cloud	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Virustotal		Browse
https://proxy-service.actblue.com/lib.min.js	0%	Avira URL Cloud	safe
https://checkout.youtube.com	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://democrats.org/wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1717432320g	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-string.prototype.codepointat	0%	Avira URL Cloud	safe
https://actionnetwork.org/user_files/user_files/000/095/477/original/overrides_wo_rally.js	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77	0%	Avira URL Cloud	safe
https://proxy-service.actblue.com/lib.min.js	0%	Virustotal		Browse
https://tc39.github.io/ecma262/#sec-string.prototype.codepointat	0%	Virustotal		Browse
https://democrats.org/who-we-are/who-we-serve/	0%	Avira URL Cloud	safe
http://adam.co/lab/jquery/customselect/	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE	0%	Virustotal		Browse
https://payments-demoserver-sandbox.corp.cloud.google	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77	0%	Virustotal		Browse
https://democrats.org/wp-content/themes/bsdstarter/assets/js/source.dev.js?m=1717432320g	0%	Avira URL Cloud	safe
https://media.imi.chat/widget/js/imichatgeneral.js	0%	Avira URL Cloud	safe
https://3-dot-gweb-io2016-registration.appspot.com	0%	Avira URL Cloud	safe
http://jedrzejchalubek.com/)	0%	Avira URL Cloud	safe
https://payments-demoserver-sandbox.corp.cloud.google	0%	Virustotal		Browse
https://html.spec.whatwg.org/#nonce-attributes	0%	Avira URL Cloud	safe
https://democrats.org/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobWhqZGpiaGQMARLwu4g==	0%	Avira URL Cloud	safe
https://media.imi.chat/widget/js/imichatgeneral.js	0%	Virustotal		Browse
https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object	0%	Virustotal		Browse
https://democrats.org/wp-content/themes/bsdstarter/assets/img/arrow-red.svg	0%	Avira URL Cloud	safe
https://actionnetwork.org/widgets/v5/form/unsubscribe-4?format=js&referrer=&source=&style=full&css=whitelabel&js_inner=true	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d	0%	Avira URL Cloud	safe
https://3-dot-gweb-io2016-registration.appspot.com	0%	Virustotal		Browse
http://adam.co/lab/jquery/customselect/	0%	Virustotal		Browse
http://stackoverflow.com/a/17954882/1322410)	0%	Avira URL Cloud	safe
https://nik.googlegoro.com	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3938742698804982171&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610	0%	Avira URL Cloud	safe
https://arctic-ocean-116022.appspot.com	0%	Avira URL Cloud	safe
https://actionnetwork.org/forms/update-email-preferences	0%	Avira URL Cloud	safe
http://jedrzejchalubek.com/)	0%	Virustotal		Browse
https://secure.actblue.com/api/cf/auth_token	0%	Avira URL Cloud	safe
https://media.imi.chat/widget/fonts/icomoon.ttf?ktzfl3	0%	Avira URL Cloud	safe
https://media.imi.chat/widget/js/dropzone.js	0%	Avira URL Cloud	safe
https://github.com/sindresorhus/query-string	0%	Avira URL Cloud	safe
https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=192	0%	Avira URL Cloud	safe
https://media.imi.chat/widget/i18n/en_US/widgetlocalization.json	0%	Avira URL Cloud	safe
https://bunpay.app	0%	Avira URL Cloud	safe
https://secure.actblue.com/assets/favicons/actblue/favicon-62429192865190e46d50844541a5662f8db660cae4e1d6cd607ba04e09ac3c02.ico	0%	Avira URL Cloud	safe
https://insight.adsrvr.org/track/pxl/?adv=ncocrig&ct=0:fnthtk9&fmt=3	0%	Avira URL Cloud	safe
https://github.com/dimsemenov/Magnific-Popup/issues/2	0%	Avira URL Cloud	safe
https://actionnetwork.org/includes/js/intl-tel-input/css/intlTelInput.min.css	0%	Avira URL Cloud	safe
https://media.imi.chat/widget/js/proactive-msg-manager.js	0%	Avira URL Cloud	safe
https://github.com/ftlabs/fastclick	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610	0%	Avira URL Cloud	safe
https://pay.google.com/gp/p/js/pay.js	0%	Avira URL Cloud	safe
http://typekit.com/eulas/000000000000000000010d5c	0%	Avira URL Cloud	safe
http://typekit.com/eulas/000000000000000000010d5d	0%	Avira URL Cloud	safe
https://media.imi.chat/widget/js/imichatinit.js	0%	Avira URL Cloud	safe
https://democrats.org/who-we-are/about-the-democratic-party/	0%	Avira URL Cloud	safe
http://typekit.com/eulas/000000000000000000010d5b	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stats.wp.com	192.0.76.3	true	false	unknown
paypal.map.fastly.net	151.101.2.133	true	false	unknown
pay.sandbox.google.com	66.102.1.81	true	false	unknown
paypal-dynamic.map.fastly.net	151.101.1.21	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	3.255.41.64	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
actblue.map.fastly.net	151.101.0.174	true	false	unknown
stats.g.doubleclick.net	74.125.133.157	true	false	unknown
cdn.prod.gcp.sift.com	34.96.67.224	true	false	unknown
insight.adsrvr.org	15.197.193.217	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
d296je7bbdd650.cloudfront.net	99.86.8.175	true	false	unknown
joebiden.com	192.0.66.60	true	false	unknown
cm.g.doubleclick.net	142.250.185.98	true	false	unknown
democrats.org	192.0.66.105	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com	52.43.94.187	true	false	unknown
match.adsrvr.org	35.71.131.137	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
bfptxt.com	18.66.102.66	true	false	unknown
google.com	142.250.186.46	true	false	unknown
clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com	34.193.138.130	true	false	unknown
paypal-dynamic-2.map.fastly.net	151.101.193.35	true	false	unknown
sessions.bugsnag.com	35.190.88.7	true	false	unknown
socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com	54.243.166.126	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	unknown
hexagon-analytics.com	34.102.232.42	true	false	unknown
s3-w.us-east-1.amazonaws.com	54.231.226.97	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
s3-us-west-2-w.amazonaws.com	52.218.225.155	true	false	unknown
googleads.g.doubleclick.net	216.58.206.66	true	false	unknown
cs1150.wpc.betacdn.net	192.229.221.25	true	false	unknown
play.google.com	216.58.206.78	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	unknown
pixel.wp.com	192.0.76.3	true	false	unknown
pay.google.com	173.194.76.92	true	false	unknown
td.doubleclick.net	142.250.186.66	true	false	unknown
ib.anycast.adnxs.com	37.252.171.149	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.251	true	false	unknown
ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com	44.217.82.191	true	false	unknown
actionnetwork.org	104.22.6.107	true	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	unknown
cloud.typography.com	unknown	unknown	false	unknown
stats.pusher.com	unknown	unknown	false	unknown
can2-prod.s3.amazonaws.com	unknown	unknown	false	unknown
ws.pusherapp.com	unknown	unknown	false	unknown
www.paypal.com	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
media.imi.chat	unknown	unknown	false	unknown
sockjs.pusher.com	unknown	unknown	false	unknown
secure.actblue.com	unknown	unknown	false	unknown
cdn.sift.com	unknown	unknown	false	unknown
t.paypal.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
imichat-preprod-app-share.s3.amazonaws.com	unknown	unknown	false	unknown
proxy-service.actblue.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
web.joebiden.com	unknown	unknown	false	unknown
s.yimg.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
chat-widget.imi.chat	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
www.paypalobjects.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://democrats.org/wp-content/themes/bsdstarter/assets/fonts/MyFonts/TradeGothicNextLTProHv.woff2	false	Avira URL Cloud: safe	unknown
https://democrats.org/wp-admin/admin-ajax.php?action=frmpro_css&ver=6171659	false	Avira URL Cloud: safe	unknown
https://www.paypal.com/sdk/js?client-id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&locale=en_US&disable-funding=credit,card&intent=capture&commit=false&enable-funding=venmo	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://www.paypal.com/tagmanager/pptm.js?id=secure.actblue.com&t=xo&v=5.0.448&source=payments_sdk&client_id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&disableSetCookie=true&vault=false	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/css/chat-widget.css?id=1719991434900	false	Avira URL Cloud: safe	unknown
https://actionnetwork.org/cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js?	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610	false	Avira URL Cloud: safe	unknown
https://proxy-service.actblue.com/lib.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://democrats.org/wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1717432320g	false	Avira URL Cloud: safe	unknown
https://actionnetwork.org/user_files/user_files/000/095/477/original/overrides_wo_rally.js	false	Avira URL Cloud: safe	unknown
https://democrats.org/wp-content/themes/bsdstarter/assets/js/source.dev.js?m=1717432320g	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/js/imichatgeneral.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://democrats.org/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobWhqZGpiaGQMARLwu4g==	false	Avira URL Cloud: safe	unknown
https://democrats.org/wp-content/themes/bsdstarter/assets/img/arrow-red.svg	false	Avira URL Cloud: safe	unknown
https://actionnetwork.org/widgets/v5/form/unsubscribe-4?format=js&referrer=&source=&style=full&css=whitelabel&js_inner=true	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3938742698804982171&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610	false	Avira URL Cloud: safe	unknown
https://secure.actblue.com/api/cf/auth_token	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/fonts/icomoon.ttf?ktzfl3	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/js/dropzone.js	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/i18n/en_US/widgetlocalization.json	false	Avira URL Cloud: safe	unknown
https://secure.actblue.com/assets/favicons/actblue/favicon-62429192865190e46d50844541a5662f8db660cae4e1d6cd607ba04e09ac3c02.ico	false	Avira URL Cloud: safe	unknown
https://insight.adsrvr.org/track/pxl/?adv=ncocrig&ct=0:fnthtk9&fmt=3	false	Avira URL Cloud: safe	unknown
https://secure.actblue.com/pages/p2p-240702-jbti/tracking_code?t=landing&refcode=ta_c2&refcode2w=5wKgd5&auth_token=null	false		unknown
https://media.imi.chat/widget/js/proactive-msg-manager.js	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/js/pay.js	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/js/imichatinit.js	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/analytics.js/v1/bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev/analytics.min.js	false	Avira URL Cloud: safe	unknown
https://sockjs.pusher.com/pusher/app/449985a46708136f3d74/124/4tjpvkpt/xhr_streaming?protocol=7&client=js&version=4.4.0&t=1719991416494&n=1	false	Avira URL Cloud: safe	unknown
https://hexagon-analytics.com/images/151717.gif?bk=19482a20cc&tm=84&r=308450253&v=107&cs=UTF-8&h=secure.actblue.com&l=en-US&S=9310b542c4dd2dbd7e7d9c462fc9fc73&uu=cfa36a9dc525de60da3844cb1fe06c2&t=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&u=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Win32&to=240&d=60&ce=true&tp=0&ol=true&pr=Gecko&ps=20030107&vd=Google%20Inc.&vs=&hc=4&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=864980724ce0e4610faf43e7780d8361&z=z	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610&google_tc=	false	Avira URL Cloud: safe	unknown
https://secure.actblue.com/assets/bignumber-8eba026c8aa4cf7cfb7ee63abdae440e240e53a58ce00cda464c3bdc097bdb00.js	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/css/chat-widget-frame.css	false	Avira URL Cloud: safe	unknown
https://t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&es=visitorInfoFlowStarted&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991390860&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true	false	Avira URL Cloud: safe	unknown
https://democrats.org/wp-content/themes/bsdstarter/favicon.ico	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/js/imichatgeneral.js?v=28052024_1	false	Avira URL Cloud: safe	unknown
https://media.imi.chat/widget/js/mqttws31.js	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/payment_method_manifest.json	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_249.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://raw.githubusercontent.com/opensupporter/jquery-osdi/master/jquery.osdi.js	chromecache_249.2.dr	false	Avira URL Cloud: safe	unknown
https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=180	chromecache_193.2.dr, chromecache_274.2.dr	false	Avira URL Cloud: safe	unknown
https://democrats.org/who-we-are/what-we-do/	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_276.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://biz-qa.gcp.wazestg.com	chromecache_276.2.dr, chromecache_391.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://blog.actblue.com	chromecache_412.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://can2-prod.s3.amazonaws.com/forms/photos/000/457/108/normal/49721663391_c0cdba991d_o.jpg	chromecache_274.2.dr	false	Avira URL Cloud: safe	unknown
https://gweb-nextregistration.appspot.com	chromecache_276.2.dr, chromecache_391.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://democrats.org/#website	chromecache_274.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/stomita/ios-imagefile-megapixel	chromecache_190.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://chat-widget.imi.chat/	chromecache_328.2.dr, chromecache_246.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_243.2.dr	false	URL Reputation: safe	unknown
https://home.ft.nest.com	chromecache_276.2.dr, chromecache_391.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://democrats.org/wp-json/wp/v2/pages/466	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://checkout.youtube.com	chromecache_276.2.dr, chromecache_391.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_278.2.dr, chromecache_342.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_211.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://actionnetwork.org/images/select2-spinner.gif	chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/gwo2tmd.css	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_243.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE	chromecache_364.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-string.prototype.codepointat	chromecache_249.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object	chromecache_249.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77	chromecache_408.2.dr, chromecache_229.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://democrats.org/who-we-are/who-we-serve/	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
http://adam.co/lab/jquery/customselect/	chromecache_278.2.dr, chromecache_342.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://payments-demoserver-sandbox.corp.cloud.google	chromecache_276.2.dr, chromecache_391.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://3-dot-gweb-io2016-registration.appspot.com	chromecache_276.2.dr, chromecache_391.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_258.2.dr, chromecache_276.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
http://jedrzejchalubek.com/)	chromecache_249.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#nonce-attributes	chromecache_243.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d	chromecache_408.2.dr, chromecache_229.2.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/a/17954882/1322410)	chromecache_243.2.dr	false	Avira URL Cloud: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_243.2.dr	false	URL Reputation: safe	unknown
https://nik.googlegoro.com	chromecache_276.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://arctic-ocean-116022.appspot.com	chromecache_276.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://actionnetwork.org/forms/update-email-preferences	chromecache_274.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_351.2.dr	false	URL Reputation: safe	unknown
https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=192	chromecache_193.2.dr, chromecache_274.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/sindresorhus/query-string	chromecache_249.2.dr	false	Avira URL Cloud: safe	unknown
https://bunpay.app	chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/dimsemenov/Magnific-Popup/issues/2	chromecache_249.2.dr	false	Avira URL Cloud: safe	unknown
https://actionnetwork.org/includes/js/intl-tel-input/css/intlTelInput.min.css	chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ftlabs/fastclick	chromecache_249.2.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_243.2.dr	false	URL Reputation: safe	unknown
http://typekit.com/eulas/000000000000000000010d5c	chromecache_205.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/000000000000000000010d5d	chromecache_205.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/000000000000000000010d5b	chromecache_205.2.dr	false	Avira URL Cloud: safe	unknown
https://democrats.org/who-we-are/about-the-democratic-party/	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://yt-web-release.corp.youtube.com	chromecache_276.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/defunkt/jquery-pjax	chromecache_243.2.dr	false	Avira URL Cloud: safe	unknown
https://ibfe-canary.corp.google.com	chromecache_315.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-object.defineproperties	chromecache_249.2.dr	false	Avira URL Cloud: safe	unknown
https://website-dot-cl-syd-eap.appspot.com	chromecache_276.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_243.2.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_276.2.dr, chromecache_391.2.dr	false	Avira URL Cloud: safe	unknown
http://docs.jquery.com/Plugins/Validation	chromecache_278.2.dr, chromecache_342.2.dr	false	Avira URL Cloud: safe	unknown
http://davidstutz.de/bootstrap-multiselect/)	chromecache_358.2.dr, chromecache_305.2.dr	false	Avira URL Cloud: safe	unknown
https://rtm-us.imiconnect.io/rtmsAPI	chromecache_246.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_243.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
37.252.171.149	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
151.101.0.174	actblue.map.fastly.net	United States	54113	FASTLYUS	false
54.243.166.126	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.190.88.7	sessions.bugsnag.com	United States	15169	GOOGLEUS	false
34.96.67.224	cdn.prod.gcp.sift.com	United States	15169	GOOGLEUS	false
54.231.226.97	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
192.229.221.25	cs1150.wpc.betacdn.net	United States	15133	EDGECASTUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
52.43.94.187	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
52.218.233.51	unknown	United States	16509	AMAZON-02US	false
151.101.129.21	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.0.66.60	joebiden.com	United States	2635	AUTOMATTICUS	false
172.67.7.122	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
99.86.8.175	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
34.102.232.42	hexagon-analytics.com	United States	15169	GOOGLEUS	false
142.250.186.46	google.com	United States	15169	GOOGLEUS	false
74.125.133.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
66.102.1.92	unknown	United States	15169	GOOGLEUS	false
151.101.193.35	paypal-dynamic-2.map.fastly.net	United States	54113	FASTLYUS	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
216.58.206.78	play.google.com	United States	15169	GOOGLEUS	false
35.160.4.12	unknown	United States	16509	AMAZON-02US	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
54.231.228.161	unknown	United States	16509	AMAZON-02US	false
15.197.193.217	insight.adsrvr.org	United States	7430	TANDEMUS	false
87.248.119.251	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
52.218.225.155	s3-us-west-2-w.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.129.35	unknown	United States	54113	FASTLYUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
18.66.102.66	bfptxt.com	United States	3	MIT-GATEWAYSUS	false
3.255.41.64	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
66.102.1.81	pay.sandbox.google.com	United States	15169	GOOGLEUS	false
173.194.76.92	pay.google.com	United States	15169	GOOGLEUS	false
216.58.206.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
192.0.76.3	stats.wp.com	United States	2635	AUTOMATTICUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
151.101.1.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
192.0.66.105	democrats.org	United States	2635	AUTOMATTICUS	false
34.193.138.130	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.22.6.107	actionnetwork.org	United States	13335	CLOUDFLARENETUS	false
151.101.2.133	paypal.map.fastly.net	United States	54113	FASTLYUS	false
34.252.40.201	unknown	United States	16509	AMAZON-02US	false
44.217.82.191	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.186.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.98	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466685
Start date and time:	2024-07-03 09:22:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://bfptxt.com/5wKgd5
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@30/410@160/53
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://democrats.org/act/?permalink=update-email-preferences Browse: https://actionnetwork.org/forms/unsubscribe-4/ Browse: https://secure.actblue.com/ Browse: https://democrats.org/terms-of-service/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.14, 64.233.167.84, 172.217.18.99, 34.104.35.123, 142.250.184.200, 66.102.1.84, 142.250.185.170, 142.250.186.170, 142.250.184.234, 142.250.186.138, 142.250.186.74, 142.250.185.138, 142.250.185.202, 142.250.185.74, 172.217.16.202, 216.58.206.74, 142.250.186.106, 172.217.18.10, 142.250.185.106, 172.217.23.106, 142.250.74.202, 172.217.18.106, 142.250.181.226, 216.58.212.163, 142.250.185.142, 142.250.184.227, 142.250.181.227, 69.173.144.139, 69.173.144.138, 69.173.144.165, 20.12.23.50, 2.16.164.41, 2.16.164.97, 2.16.164.131, 2.16.164.17, 2.16.164.72, 192.229.221.95, 20.242.39.171, 93.184.221.240, 142.250.186.42, 20.166.126.56, 142.250.184.202, 142.250.185.234, 216.58.206.42, 216.58.212.138, 142.250.181.234, 52.165.164.15, 172.217.16.138, 142.250.184.195, 2.19.126.225, 2.19.126.198, 23.197.116.174, 95.101.54.121, 95.101.54.129, 142.250.186.104, 142.250.185.99
Excluded domains from analysis (whitelisted): www.googleadservices.com, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, a1874.dscg1.akamai.net, clients2.google.com, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wildcard.typography.com.edgekey.net, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, p.typekit.net-stls-v3.edgesuite.n
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://secure.actblue.com/pages/p2p-240702-jbti/tracking_code?t=landing&refcode=ta_c2&refcode2w=5wKgd5&auth_token=null Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The text creates a sense of urgency by asking the user to chip in before midnight and before the July fundraising deadline.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage.","There is no login form present on the webpage that explicitly requests sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV)."]}
Title: Biden Victory Fund Donate via ActBlue OCR: We cannot win without you. Will you chip in before midnight? Joe, Kamala, and Democrats nationwide are counting on grassroots supporters like you to join us and help them finish the job. Can you chip in before our July fundraising deadline? Choose an amount: Your contribution will benefit Biden Victory Fund. 4 $10 $46 $100 $250 $1,000 $2,000 o Make it monthly! Recurring contributions help us create budgets, hire staff, and plan ahead. Checkout Have an ActBlue Express account? Sign in to give faster. Pay with card Or PayPal Pay venmo
URL: https://democrats.org/act/?permalink=update-email-preferences Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text of the webpage do not contain any elements indicating the presence of a login form.","The text of the webpage does not create a sense of urgency or interest.","There is no evidence of a CAPTCHA or anti-robot detection mechanism on the webpage."]}
Title: Act - Democrats OCR: D DEMOCRATS
URL: https://actionnetwork.org/forms/unsubscribe-4/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text do not contain any elements of a login form, as there is no request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as it does not contain phrases such as 'click here to view document', 'to view secured document click here', or 'open the link to see your invoice'.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Please don't go! OCR: BIDEN HARRIS Paid for by Biden for President
URL: https://secure.actblue.com Model: gpt-4o	```json{ "phishing_score": 1, "brands": "ActBlue", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": false, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "secure.actblue.com", "reasons": "The URL 'https://secure.actblue.com' matches the legitimate domain for ActBlue, a known fundraising platform. The page does not exhibit common phishing characteristics such as a prominent login form, captcha, or suspicious links. The content and design appear consistent with legitimate fundraising efforts for political campaigns. There is no evidence of social engineering techniques being used to mislead users."}

URL: https://democrats.org/terms-of-service/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage title 'Terms of Service - Democrats' and text 'These Terms of Service ("Terms") apply to your access to and use of the websites and other online services (collectively, the "Services") provided by the Democratic National Committee (the "DNC", "we" or "us"). By and using the you to Terms.' do not contain a login form, create a sense of urgency or contain a CAPTCHA or anti-robot detection mechanism."]}
Title: Terms of Service - Democrats OCR: WHO WE ARE WHERE WE STAND TAKE ACTION VOTE SHOP DONATE EN ESPANOL TERMS OF SERVICE Last Revised: [4/19/2021] These Terms of Service ("Terms") apply to your access to and use of the websites and other online services (collectively, the "Services") provided by the Democratic National Committee (the "DNC", "we" or "us"). By and using the you to Terms. If you do not to these Terms, do not u the We may provide additional or different terms and conditions with respect to some of the Services ("Additional Terms"). If you use any Services with Additional Terms, the Additional Terms will apply to your use of such Services. If there is any conflict between these Terms and any Additional Terms, the Additional Terms will control to the extent of such conflict. We may update these Terms from time to time. If we make any changes to these Terms, we will notify you by revising the "Last Revised" date at the top of these Terms and, in some cases, we may provide you with additional notice (such as by adding a statement to our website homepage or by sending you a notification). Unless otherwise indicated in our notice to you, any changes to these Terms will be effective immediately, and your continued use of the Services following our provision of such notice will confirm your acceptance of such changes. If you do not agree to any changes to these Terms, you must stop using the Services. If you have any questions regarding these Terms or the Services, please contact us at info@democrats.org.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3508
Entropy (8bit):	7.8968396641614325
Encrypted:	false
SSDEEP:	96:wSDZ/I09Da01l+gmkyTt6Hk8nTP96a54Afl4eE:wSDS0tKg9E05Toa5a5
MD5:	00951F5DB7791E18D9BBB1658CF13787
SHA1:	BBE6CA23755512DFE70A0C2CD0CAA071784A9A13
SHA-256:	CAD2730B34803585CC151A2ED5B259FD71C76916DB4970B77DEF5D4FA6D51743
SHA-512:	E4BE38FB243A9FBF0C6DA906F4ACF04FBEB3F2C89573DC68889A8E7E7ABAB945A5FC953BDD021561010D761B84ADA32E5C5472675A84965C96E7BF32B81A2835
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3291), with CRLF line terminators
Category:	downloaded
Size (bytes):	64740
Entropy (8bit):	4.814628615765428
Encrypted:	false
SSDEEP:	1536:iyR2+ByC66xB1mgrKsgXmthnx4VR7xdpmJ8RrtwrNrHizuBROB1gJSyllz:JRG6ZKTtxullz
MD5:	213CE436250395AD9D2A2C93F777E1C9
SHA1:	95255A9A22044D3D80E34D16B2E892915041931F
SHA-256:	D71CD2990D160189983D82DB0981FCE9B53C197D17B3D16B9D5743340F057150
SHA-512:	551D7B70FBDD764381F7035DCC57594038E04904DE0F9978D91325388DA2D7CEFBF69A2BAC9029B0A9F05B7D3E67E77F55F299D3DA5CA1859552D8BC0E3330AF
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/dropzone.js
Preview:	../.. .. * More info at [www.dropzonejs.com](http://www.dropzonejs.com).. .. Copyright (c) 2012, Matias Meno.. .. Permission is hereby granted, free of charge, to any person obtaining a copy.. * of this software and associated documentation files (the "Software"), to deal.. * in the Software without restriction, including without limitation the rights.. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell.. * copies of the Software, and to permit persons to whom the Software is.. * furnished to do so, subject to the following conditions:.. .. The above copyright notice and this permission notice shall be included in.. * all copies or substantial portions of the Software... .. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,.. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE.. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6317)
Category:	downloaded
Size (bytes):	9722
Entropy (8bit):	5.0820471165264545
Encrypted:	false
SSDEEP:	192:0rg9/qft1rxa0garF763y4oGKWXAt0wGQjMlL6h53FfJaVRYcpD6i:Qg9/qftN7uzoGzVnLYi6i
MD5:	EB340C4CDA3EB3137F4596168D9C4BA8
SHA1:	80B1D50FF84D100B0597E36D611CCC1BF6121595
SHA-256:	211812B4130F712C73D68BBEB42D0FC926B49FEB1C221334F6A13A30ACCDC68C
SHA-512:	03A1153623DE735B26180F2E3F595BDA9A8D6C456A716B866953067D1E2307FBA711539F1059C5C55F17E2E6051187D18147057BD1B9BB201A6238E16B7FC21C
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/widgets/v5/form/update-email-preferences?format=js&source=widget&style=full
Preview:	// bootstrap and load form_inner.js with correct URL arguments..// document.currentScript polyfill by Adam Miller..// MIT license..(function (document) {. var currentScript = 'currentScript';.. // If browser needs currentScript polyfill, add get currentScript() to the document object. if (!(currentScript in document)) {. Object.defineProperty(document, currentScript, {. get: function () {. // IE 8-10 support script readyState. // IE 11+ support stack trace. try {. throw new Error();. }. catch (err) {. // Find the second match for the "at" string to get file src url from stack.. // Specifically works with the format of stack traces in IE.. var i = 0,. stackDetails = (/.at [^(]$(.*):(.+):(.+)$$/ig).exec(err.stack),. scriptLocation = (stackDetails && stackDetails[1]) \|\| false,. line = (stackDetails && stackDetails[2]) \|\| false,. currentLocation = document.locat

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3440
Entropy (8bit):	5.436481096996109
Encrypted:	false
SSDEEP:	96:AOOxTlwOOxTZFZOhOOxTMOOxThVc+udOOxTSZNAOOClwOOCZFZOhOOCMOOChVc+m:Il4QnkteSflDQ8PtRST
MD5:	81E58C7DDDF58CD6E4C444BB25194271
SHA1:	570D4B0D3539F7BA64CDE466DD784AB6011444A0
SHA-256:	921A36C5CE6BB235FADAA04E0EC81CDD02509D9B49FE6B0FAB53A44B7CA01C10
SHA-512:	99D0AE7115131DA1A4F2D22063BCA14E39812E4FD3707AB713C813AF00557FB0445CA6C6FDDCC6EB44BF6B19D6FF04C689ECDB7CF801D32F4CBAE8D0493D5DA9
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Montserrat:600,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 600;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 600;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 600;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15228), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67283
Entropy (8bit):	5.393466563482955
Encrypted:	false
SSDEEP:	768:KBez8EPYSRUZdapFgDRbKnktw0KvYkrejnFNC9/pj0oWROqWRHP9/nCkol:Pz8oyapO1bdWlGnFNCLooWR4HP1Ckol
MD5:	A3EB0FE7ECB7F59F232E642DEC22ACEF
SHA1:	4FFB54ACC45BDD8D57E903BACCA1D5883FE35364
SHA-256:	AB315DD5E6A0EA60DC0F8A2114F3D4E263841B760F45B06DF40A5E484146431F
SHA-512:	48C177D8B5FEE3A64B5B997BA54154C774DB19C1631982208F06300AEE4A05182434BF21B555C706BA115561DFA754DBA64EDC70A76510349537E8E9D014FEA3
Malicious:	false
Reputation:	low
URL:	https://democrats.org/terms-of-service/
Preview:	<!DOCTYPE html>. [if lte IE 8 ]>.<html lang="en" class="no-js oldie">.<![endif]-->. [if IE 9 ]>.<html lang="en" class="no-js ie9">.<![endif]-->. [if (gt IE 9)\|!(IE)]> >.<html lang="en" class="no-js">. <![endif]-->.<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0"/>. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">.. <link rel="icon" type="image/x-icon" href="/wp-content/themes/bsdstarter/favicon.ico">.. <link rel="stylesheet" href="https://use.typekit.net/gwo2tmd.css">. <link rel="stylesheet" type="text/css" href="https://cloud.typography.com/6400316/6877612/css/fonts.css" />.. Google tag (gtag.js) -->. <script async src="https://www.googletagmanager.com/gtag/js?id=G-JD0JR2ZC3V"></script>. <script>. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}. gtag('js', new Date());.. gtag('config', 'G-JD0JR2ZC3V');. </script>. . Segment -->.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2635), with no line terminators
Category:	downloaded
Size (bytes):	2635
Entropy (8bit):	5.852776421913742
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08Ez/5dplefJG9Q56:aJd6SUtJfNrVlCWWWdtqjZIzHpf
MD5:	81AFCF2E08188F1CA9B9E064566DD8A3
SHA1:	D7E80A370796BD11B3054FE99624B3EE24D414EE
SHA-256:	FE1CE60C8A5F35EF0383C9BF13CC823AFCBA4E9B762353852C6337929589E95C
SHA-512:	F8A9F9861AC169DBC16CB0A3A64010453F2951C3A6BA5272FEFCC4CD60BF566D2E8C5079023FDC918698F48196B06FEF02A6DE8386B8A8D664E78ECD89FE6C2C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/860973240/?random=1719991417521&cv=11&fst=1719991417521&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za201zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11599)
Category:	downloaded
Size (bytes):	11644
Entropy (8bit):	5.483011415000634
Encrypted:	false
SSDEEP:	192:oRRSeo+3PErKWJvnyhpoEeAy+jqw/e9BROCm44FKABHAMwz6J6lcm7B/wlpcS:4RF8+Uit/e9is4gA9AMQr7B/wzd
MD5:	834951FBF6639DA222AC583D676FE7E7
SHA1:	E83471DA0BA3425D4D2F6460D3911298890FA588
SHA-256:	B51A446356651ADA6E617EAEEC84FCCCF9BA56BF212BB83F021F506E0D17715E
SHA-512:	6039236C22622B67D75F754D6D1960B23A2B67845B75582CC022749BBBF22651DEE748173A9133F34F7D1E44F48D2C8C9567E5FCD4A3217BD51AE312F98518A7
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/packs/js/applicationEntry.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2
Preview:	(()=>{var e={},a={};function t(c){var d=a[c];if(void 0!==d)return d.exports;var r=a[c]={id:c,loaded:!1,exports:{}};return e[c].call(r.exports,r,r.exports,t),r.loaded=!0,r.exports}t.m=e,t.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return t.d(a,{a:a}),a},(()=>{var e,a=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__;t.t=function(c,d){if(1&d&&(c=this(c)),8&d\|\|"object"==typeof c&&c&&(4&d&&c.__esModule\|\|16&d&&"function"==typeof c.then))return c;var r=Object.create(null);t.r(r);var n={};e=e\|\|[null,a({}),a([]),a(a)];for(var b=2&d&&c;"object"==typeof b&&!~e.indexOf(b);b=a(b))Object.getOwnPropertyNames(b).forEach(e=>n[e]=()=>c[e]);return n.default=()=>c,t.d(r,n),r}})(),t.d=(e,a)=>{for(var c in a)t.o(a,c)&&!t.o(e,c)&&Object.defineProperty(e,c,{enumerable:!0,get:a[c]})},t.f={},t.e=e=>Promise.all(Object.keys(t.f).reduce((a,c)=>(t.f[c](e,a),a),[])),t.u=e=>9351===e?"js/commons-7e8c7398bae50312f431.js":4230===e?"js/moment.js":"js/"+(({103:"CandidacyDeleteButton",179:"highcharts",

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	173
Entropy (8bit):	5.107629917818189
Encrypted:	false
SSDEEP:	3:wLGff7QqLHMLQoMGbLGffQRMnRw6cHjJfeWGfrcSG3BSu/Yp9ZmOaSW4I8:wLGX7LGeXY6cDp8Gk7wlq
MD5:	E02B64C3C2ABA115A3EC857035BFB39D
SHA1:	81E176FC8B9FA796A04324BA9FF719B065DA88D8
SHA-256:	F2F0140E3D28F9EA56789456B2FD2801DC3284227743280BA112BE470C7BAC85
SHA-512:	8649EB164CFC6340E6B2B0FA6E23F1174811314EE4C8772CF7CA0A5F4DAE75CD069F60B8BE7DADDEA4376889F3D8082797E4418265D78CDDD22603627F1C2136
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/packs/js/InitializeDownArrows.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2
Preview:	$(function(){$(".arrow-down").on("click",function(){return $("html, body").animate({scrollTop:$(this).offset().top}),!1})});.//# sourceMappingURL=InitializeDownArrows.js.map

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.845313797398191
Encrypted:	false
SSDEEP:	3:oZCrsm0c+yb1DnLvd:qBTE1Pd
MD5:	B700E1BCB4706954FC48BFD6D0B2B1EF
SHA1:	324D8248FC0A60D8576239CA83BAAA3CB1B982A8
SHA-256:	56C1939292C4BBA71A1854DE6CFB8D4DB6E0CEB4BC40D28F71E337292DD23DD2
SHA-512:	28FB0A26447368F8EC74C55DB4C7C5918606625A7F534E232C1F9CD3385CA3C7B9BDCE14F07893E525C2BB2228916B240486B21D318E5605E75A85E240A06527
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgn1UJ5WzaoH9RIFDe5qUokSBQ234gjGEgUNbtcpCw==?alt=proto
Preview:	CicKCw3ualKJGgQICRgBCgsNt+IIxhoECA0YAQoLDW7XKQsaBAgjGAE=

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hu:O
MD5:	D3BE928B038E9E394CC55469FBE1E4A4
SHA1:	69D68ED7BFB138A075FF85AE35BB7F3EAA1CFD60
SHA-256:	7DE98DF8592CB04A23329CE3E8990A2885EF142F4FD9160EE046351317C5A7AF
SHA-512:	868392AA1DF004A1B9545B9AC3BBAF30C70691B499BABDEC3B50C2275C64A3D8A7C85CAAD7BFAC16514A03EAD87FE57527C4BB298A33E18FB3B3D868B63A47F6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnK7mzwJSwjPRIFDSj621E=?alt=proto
Preview:	CgkKBw0o+ttRGgA=

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3266
Entropy (8bit):	3.9806441717465804
Encrypted:	false
SSDEEP:	96:xhJZR7GXTcI1Tragxthxk5lgCFKgUBqnMbNFXn8NjFVCvE:VPul5kDtzJOj4hVCvE
MD5:	B40EB3052BE49909C25DB9BF6593886E
SHA1:	D64FAB59DC418211D95697E2BFFCDFC80DCDCF5F
SHA-256:	25B02175CC0A4E36FDA24DB4B7DE40009FEB7B31F18FE3C77423A2169929B94B
SHA-512:	7BF3055F90D0600A25C5D8606C1BF1274B6373B2BD7FC98DEC584656FBCC4D9D37D77DA25AFD1CC3E762AF859560569C435A997D360742067DE8CAC4392647E6
Malicious:	false
Reputation:	low
Preview:	<svg width="101px" height="32" viewBox="0 0 101 32" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path fill="#003087" d="M 12.237 2.8 L 4.437 2.8 C 3.937 2.8 3.437 3.2 3.337 3.7 L 0.237 23.7 C 0.137 24.1 0.437 24.4 0.837 24.4 L 4.537 24.4 C 5.037 24.4 5.537 24 5.637 23.5 L 6.437 18.1 C 6.537 17.6 6.937 17.2 7.537 17.2 L 10.037 17.2 C 15.137 17.2 18.137 14.7 18.937 9.8 C 19.237 7.7 18.937 6 17.937 4.8 C 16.837 3.5 14.837 2.8 12.237 2.8 Z M 13.137 10.1 C 12.737 12.9 10.537 12.9 8.537 12.9 L 7.337 12.9 L 8.137 7.7 C 8.137 7.4 8.437 7.2 8.737 7.2 L 9.237 7.2 C 10.637 7.2 11.937 7.2 12.637 8 C 13.137 8.4 13.337 9.1 13.137 10.1 Z"></path><path fill="#003087" d="M 35.437 10 L 31.737 10 C 31.437 10 31.137 10.2 31.137 10.5 L 30.937 11.5 L 30.637 11.1 C 29.837 9.9 28.037 9.5 26.237 9.5 C 22.137 9.5 18.637 12.6 17.937 17 C 17.537 19.2 18.037 21.3 19.337 22.7 C 20.437 24 22.137 24.6 24.037 24.6 C 27.337 24.6 29.237 22.5 29.237 22.5 L 29.037 23.5 C 28.9

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2061
Entropy (8bit):	5.120203950228635
Encrypted:	false
SSDEEP:	48:NtTjQ9kDRaI2Z7uJl9uOZH6OZ8C8t2zgT3CopDOZ7Bs:09ERaI2Z7w5kCW2zgmyOZ7C
MD5:	BEDC7011BA3ABA280AF8B88E2F2665A5
SHA1:	C40E82473B3DBE4086547AFA7B0CBC6FF9C4AFD6
SHA-256:	77ED1F39DDB9650461D86973B560C6779141A330EF051C102A50EA17416FC23C
SHA-512:	BA6BF9C62644DD0E4AF744BB2BF1709B66EE7715FDBF457FBD312AF35AB10E8250416F193F28C34FF6E2042A06543987D87C600BBE84760B624B47F433442308
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/user_files/user_files/000/080/707/original/overrides_sept22.js
Preview:	$(document).ready(function() {..$(document).on('can_embed_loaded', function() { //wait for AN js embed to finish loading....$('#mobile_opt_in').hide();....$('#form-phone').change(function(){...if($(this).val()){...$('#mobile_opt_in_checkbox').attr('checked','checked');...}else{...$('#mobile_opt_in_checkbox').attr('checked',false);...}...});....// hide sms disclaimer if sms opt in not on the form...if(!$('#mobile_opt_in_checkbox').length){...$('.additional_text').hide();...}....$("#can_sidebar form ul li.core_field input").each(function(){... $this = $(this);... $this.closest('.core_field').addClass($this.attr('id')); ...});....$('.control-group label').click(function () {....$(this).parent().children().removeClass('checked');....$(this).addClass('checked');...});......$('input:checked').parent().addClass('checked'); ....$('#can_main_col > h2').insertAfter('#can_main_col > img');....$('#form-zip_code').attr('placeholder','Zip');...$('#form-zip_code.required').attr('placeholder','Zip

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5298
Entropy (8bit):	4.447365150597988
Encrypted:	false
SSDEEP:	48:W3SF2adW6Utv6KadUtW68wMGkhh1OudlUcuYgdGDnpq19Cq+IM00JHLCQHus4leA:lFPcaNOuoYgoz0979o+pn4lPVw
MD5:	88DF138AE34DBEAB77034ADF127456EF
SHA1:	FEE793906719BA70148085B485895205BE3BBD76
SHA-256:	D413E4FA09611F6E4D1FB4F78FA17F122560ECCADC07D036B9152C5FE73CBBE8
SHA-512:	C69A116A884FBBD804A11643B4757D56D0E4C9DB44C11FFD922F2A46406529F3E63EC9EF0B289D104D5C450631D3AF949C0E5D2D1D16F339A9F911B1C04E8CCB
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/centerpagepost.html
Preview:	<html>....<head>.. <style>.. body {.. position: relative;.. width: 98%;.. height: 100%;.. overflow: hidden;.. box-sizing: border-box;.. padding: 0;.. margin: 5px;.. }.... .overlay {.. position: fixed;.. top: 0;.. bottom: 0;.. right: 0;.. left: 0;.. background-color: rgba(0, 0, 0, .35);.. }.... .msgcontainer {.. position: absolute;.. max-width: 800px;.. height: 400px;.. margin: auto;.. top: 0;.. bottom: 0;.. left: 0;.. right: 0;.. background-color: #fff;.. border-radius: 4px;.. z-index: 9;.. box-sizing: border-box;.. box-shadow: 0px 2px 32px 0px rgba(0, 0, 0, 0.32);.. }.... .msgheader {.. padding: 20px;.. height: 60px;.. b

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.3098894798250535
Encrypted:	false
SSDEEP:	6:TMVBd6OjZ9mc4slzXQoxcWEwOlXgL9qhv4JWuRImBYUw9SVQygAqSGN:TMHdtLRQo3c4UuqmBYrgQynpGN
MD5:	B22F2445E2B89A2E20EEF8578E76B65D
SHA1:	E6F4D8068BD9E538D5457167264C6288DC1C80B3
SHA-256:	A9900AA05392BDC0428B753BFBEDD71D06193617B8099046FFDBBD7EFC5CD0C3
SHA-512:	EACD34A4055BBFCCCFFF8E6E48F56D73C4ED1CDE7490569967B09E17DB131F5AFDB9F542D67FECFF977DDF40CA184247911689185E01278B8A73943F54FD7EEC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns="http://www.w3.org/2000/svg" width="86" height="86">. <circle cy="43" cx="43" r="37.5" style="stroke:#0044c9;stroke-width:11;fill:#fff9ea"/>. <path d="M28.5,25.5v35h16.5a17.5,17.5 0 0,0 0,-35zM38.5,34h5a9,9 0 0,1 0,18h-5z" style="fill:#0044c9"/>.</svg>

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 183 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5468
Entropy (8bit):	7.781077683030462
Encrypted:	false
SSDEEP:	96:zSDknmWIGEhFHqfEpgXU6fS4Mbnt8IatmwW8wv7UqFSqCRj:zSDkniaEpFpNwWDojqCJ
MD5:	2D5A7A8E020FAACB9562B5AEB3F8DF62
SHA1:	65AC25FA146994584ECE05D857FB12A1812BA166
SHA-256:	5A83D57E15A55B862FA4CCBABC0A121681F95212C1D2C02A33059274A6E7CC76
SHA-512:	D1A7D5958DDD32209FF5DADF1E8AB63A0F61436B65A8924982B5147AC9AF72AFE366636725B525D8164D555581CC7F2147F79B601B2243CFA7CD07389B880E29
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/images/logo_sm.png
Preview:	.PNG........IHDR.............j.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)" xmp:CreateDate="2020-03-24T11:08:24-05:00" xmp:ModifyDate="2022-08-25T14:25:09-05:00" xmp:MetadataDate="2022-08-25T14:25:09-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:fd622c76-b918-4b00-b724-3686dc3c088a" xmpMM:DocumentID="xmp.did:fd622c76-b918-4b00-b724-3686dc3c088a" xmpMM:OriginalDocumentID="xmp.did:fd622c76-b918-4b

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (516)
Category:	downloaded
Size (bytes):	2925
Entropy (8bit):	5.259142186185547
Encrypted:	false
SSDEEP:	48:35Y2zQVA0hmtpGjxG12GbMZGxGcGbMPGCGjGbMJc7dOZ:pbzQmtAQNMvMTMJc7dOZ
MD5:	A4526DEC8F20619E45507DE20A4E31CA
SHA1:	9735CD96CEF21657B803A72A7DF648DA49437EC6
SHA-256:	001554166E7DE27BC0CF9F9C9F21194619883E3031FB64BE6557B06D28F7A2BB
SHA-512:	543AF0D2EE2F932C72A3476113BA3BDFC7B2AE2515988D1B24C04489177F937BF1960A20EE5EB419A325213AEE8F5AE511556A30EB04153F73F158CFE722345C
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/gwo2tmd.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . alternate-gothic-no-1-d:. * - http://typekit.com/eulas/000000000000000000010d5b. * alternate-gothic-no-2-d:. * - http://typekit.com/eulas/000000000000000000010d5c. * alternate-gothic-no-3-d:. * - http://typekit.com/eulas/000000000000000000010d5d. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2019-07-16 19:55:27 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=gwo2tmd&ht=tk&f=10326.10327.10328&a=15080471&app=typekit&e=css");..@font-face {.font-family:"alternate-gothic-no-1-d";.src:url("https://use.typekit.net/af/9fa845/000000000000000000010d5b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3") format("woff2"),url("https://use.typekit.net/af/9

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5482)
Category:	downloaded
Size (bytes):	61368
Entropy (8bit):	5.329448735198026
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwrlHM9Z/K01g/TZ02LKVEyKN:RIT7ms9Z/KB/j8tKN
MD5:	8D3D3180312227740CD301730C52DC5D
SHA1:	20AC8E22829455CBBD031F571D3F702FF86D83C4
SHA-256:	BAAED7A92F8B5742E3A70D2FAE7400820EE9B287C529E45504E2E5B9CF00C912
SHA-512:	C5CA4B29EEA87299D06950C30F144B04C436ECC8C65B4800C9877F9897EFD7E32115D6AE429FF0C81C4414C01CFEE271B31C38A684AAA322C6E9DF6A576BEFBA
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1663341264181988?v=2.9.160&r=stable&domain=secure.actblue.com&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	545
Entropy (8bit):	5.01846145137746
Encrypted:	false
SSDEEP:	12:tr3N3Y/KYQMgdQL/uokaSOl0yVMKT+PRME:tLNILQYL/upmVMKapME
MD5:	73A75179C959530B3D49E91A9FD99236
SHA1:	9E0C64C047332392EF94DDE8E84EE0114CED9156
SHA-256:	403F1379403CA45AC99179CB685880C2ABE02B49B7BECA37FDCDFE1850273401
SHA-512:	127FE304EAF93ADE84B5433A88782811283BD626E26FE77E50EBD4316317E75BBF9982D903315A65B0F9619993E64B9C46BE12BB8CBAB1D1C423BCDAF8D8D37B
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/img/arrow-red.svg
Preview:	<svg width="10" height="10" viewBox="0 0 10 10" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><title>Mask</title><defs><path d="M133.07 25.842l-.576-.592a.64.64 0 0 1-.013-.89l4.898-5.038a.6.6 0 0 1 .868.012l5.047 5.18c.244.25.25.65.013.891l-.56.576a.604.604 0 0 1-.878-.024l-2.982-3.207.11 7.554a.6.6 0 0 1-.604.622l-.82-.012a.644.644 0 0 1-.623-.64l-.11-7.554-2.892 3.124a.6.6 0 0 1-.878-.002z" id="a"/></defs><use fill="#E04B1A" transform="rotate(45 95.536 -145.51)" xlink:href="#a" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent=&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3670
Entropy (8bit):	4.241623208872857
Encrypted:	false
SSDEEP:	96:Thn+KI3GsRVv975VZ3U2s6d9ZtIyNakZnOb:63DVvXUs1akZnS
MD5:	53D8AA0424F17569E61FCBE3559BC5C4
SHA1:	39F4B6F9A78607310C55ABBC094F094CA3F5081A
SHA-256:	A3A509EF2413F961EC9A8B1D68355C09067414E84D374E2E8D2614D33A89D2CD
SHA-512:	83D0C44B7FB503DEDFECD785E2F91DAD80558B1D1D966568BA7AE0251CA3FC6C46B99762F68FA739C930F20EC2B96745C9354DE447F23915503245A5D02ED82F
Malicious:	false
Reputation:	low
Preview:	<svg width="101" height="32" viewBox="0 0 101 32" xmlns="http://www.w3.org/2000/svg" preserveAspectRatio="xMinYMin meet"><g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Blue" fill="#ffffff"><g id="Logo" transform="translate(0.000000, 6.000000)"><path d="M16.6660484,0.18 C17.3466626,1.3390991 17.6535069,2.53297297 17.6535069,4.04108108 C17.6535069,8.85117117 13.671346,15.0998198 10.439346,19.4875676 L3.05725952,19.4875676 L0.0966314879,1.23315315 L6.56045675,0.60036036 L8.12578201,13.5895495 C9.58835986,11.1326126 11.3932543,7.27153153 11.3932543,4.6390991 C11.3932543,3.1981982 11.1538599,2.21675676 10.7797405,1.40864865 L16.6660484,0.18 Z M24.9071592,11.6938739 C24.9071592,13.8367568 26.062718,14.6774775 27.5946678,14.6774775 C29.2629152,14.6774775 30.860218,14.2571171 32.9363097,13.1691892 L32.154346,18.6445045 C30.6915934,19.3814414 28.4119291,19.8731532 26.1991903,19.8731532 C20.5863512,19.8731532 18.5775346,16.3632432 18.5775

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	6.155113870432719
Encrypted:	false
SSDEEP:	1536:KrTzD5LpOJdschr+hvYrlCV6t1+KBo61eXJmiuNLfzZCpZNe5:WzdL0OvYZCV66KBo61eXJmFNLbyC
MD5:	737E44F5D84F55201ABDB45D1B0BC7BF
SHA1:	1FDFBDE099AC4551C351EEE69A50E6541D046779
SHA-256:	E53B79D6E7E2446AD54DAF90EE87F0DCC53C69282E53DD0867FDB6EF0530EAA8
SHA-512:	DDEEA2A30A13218FA9751F6E5560D339561F58AC56E865A4367EED0CD311FBED36391DEF53842755AB55E21DE78E0AD131B9B98D991C641F3267481C8A000E92
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 230 230".. style="enable-background:new 0 0 230 230;" xml:space="preser

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59729), with CRLF line terminators
Category:	downloaded
Size (bytes):	60016
Entropy (8bit):	5.2525095934158985
Encrypted:	false
SSDEEP:	768:0ZYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B0DV:0ZFXOCx0wNGaYkR
MD5:	7451E07CD6077783B728C0C924DA6629
SHA1:	FE104E2AB91ECD0A39DFF04E5ACA698440BC9E22
SHA-256:	4FB5913EE978BDE28ACCE2944E8139AAEDC5C22BD51F88A1FCAB174B1CC5694A
SHA-512:	C1EA2FCE2F8A0D3D2893CC6F9FECECBF16DB46D4C196DEAC69CD0BAFAC764CAC5FB2063EF390ACFB04C2F01C29D1640F3234EEFBFF5FDA12A0E5F6F851665936
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/bootstrap.min.js
Preview:	/!.. Bootstrap v4.4.1 (https://getbootstrap.com/).. * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),n.push.apply(n,i)}return n}function l(o){for(var t=1;t<argum

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55891)
Category:	downloaded
Size (bytes):	55976
Entropy (8bit):	5.178044278816669
Encrypted:	false
SSDEEP:	768:sU+hyK66RYdNMpeHviJBlBgMn4P31wSpB6dAO9ZfEUlOkltIs8cY+NLYQfF6YrtV:v2peHvwBlLaFRH6J1rCcBLzF64tiU
MD5:	83D077893C64EBC9E2495BB6661A95E2
SHA1:	9296C6D929B970D830864D654F3530CD9616EA28
SHA-256:	20029E526C0674DD1F99D02142BBF324BD8EE217CA43705FA6FE1A64BD90EE0C
SHA-512:	F5BD5F64F6BC39C0756AD2C190E3D6843206D647A33DED8D284E7F2DCD4C8653ACFF0C32DD783A8FA0DA7DAB93B07A5E7CB0B70E2588B7F3618EDB4BFD3F66C7
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/muse/muse.js
Preview:	/!. tag SEP_01_2023_01. For license information please see muse.js.LICENSE.txt /..!function(){var e={808:function(e,n,t){var r,o;!function(i){if(void 0===(o="function"==typeof(r=i)?r.call(n,t,n,e):r)\|\|(e.exports=o),!0,e.exports=i(),!!0){var a=window.Cookies,c=window.Cookies=i();c.noConflict=function(){return window.Cookies=a,c}}}((function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var r in t)n[r]=t[r]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(r){function o(){}function i(n,t,i){if("undefined"!=typeof document){"number"==typeof(i=e({path:"/"},o.defaults,i)).expires&&(i.expires=new Date(1new Date+864e5i.expires)),i.expires=i.expires?i.expires.toUTCString():"";try{var a=JSON.stringify(t);/^[\{\[]/.test(a)&&(t=a)}catch(e){}t=r.write?r.write(t,n):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).rep

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1799
Entropy (8bit):	5.196577664974342
Encrypted:	false
SSDEEP:	48:NWCbaI2Z7uJl95WOZH6OZ8Ce3Cops0o4jMOZ7BO:EwaI2Z7wrkCd30ovOZ7s
MD5:	D53F3FA7DA987C7EC96C54E818EE6766
SHA1:	10067D5222F130ACCFB640D78D47C12351534B10
SHA-256:	8C86F4AAFB051E9B36F94F3E29B2ACEE61A907B67E479638063C5B86CA52840D
SHA-512:	FC2A6CCE0FF2C61AC00B7B57F2B853DDC7A6EF2048816E435E34C6F75FE4B4179BC6D228E64CE59FE05B6CC1DC9900AAE0D5943C4EE068658978BD1AEFEFCB71
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/user_files/user_files/000/095/477/original/overrides_wo_rally.js
Preview:	$(document).ready(function() {..$('<div class="loader"></div>').insertAfter($('.can-form-area-im-on-board'));..$(document).on('can_embed_loaded', function() { //wait for AN js embed to finish loading....$('.loader').hide();...$('.control-group label').click(function () {....$(this).parent().children().removeClass('checked');....$(this).addClass('checked');...});......$('input:checked').parent().addClass('checked'); ....$('#can_main_col > h2').insertAfter('#can_main_col > img');....$('#form-zip_code').attr('placeholder','Zip');...$('#form-zip_code.required').attr('placeholder','Zip ');....//$('li.control-group input:text.required').attr("placeholder", function() { return $(this).attr("placeholder") + " " });...$('li.control-group textarea.required').attr("placeholder", function() { return $(this).attr("placeholder") + " *" });...$('.custom_fields').appendTo('.action_sidebar form > ul');..});...});..$(document).ready(function() {. $(document).on('can_embed_submitted', function( event

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	106832
Entropy (8bit):	6.102145093591149
Encrypted:	false
SSDEEP:	3072:xzdL0OvYZCV66KBo61eXJmFNLbywtCrC+Kl:VdgC130eWLOBG+E
MD5:	31A8458386627767DB68E0B3CDD84763
SHA1:	AEAB3154C358BEBBDB9A65AA6ADD571A60B2C30E
SHA-256:	76C84B76A3E1A540EFCF568D4335411C7D124CB07240B55960CC576F4CFC69F9
SHA-512:	81E90CEDF126DA0535F06C25D326BEBBDC84546E7E2FFD96F39BC079717AC84FECC355CEA65F42F27E8F0A177CADE1ED1F0F4BF66C25F8D3810C91C615BFDF23
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 230 230".. style="enable-background:new 0 0 230 230;" xml:space="preser

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	155926
Entropy (8bit):	4.807210149026071
Encrypted:	false
SSDEEP:	1536:DzmHmUmHmomHm/mHm6omHmSmHmMmHmqFe3jsuhbrI2WN6d73GKRZOdPFb+aSZk5O:QYsuhbrI2WN6FGKRZOdPF6aSZk5O
MD5:	39F20560705448A9E2D26585F2EC9EEA
SHA1:	2AFA7FABAB63D4BA68EAA4CCB98B64522E1CC055
SHA-256:	063EC813A5AD622209A0EE6F177A64CC28D6303681154DABC3DCA9A573BDF024
SHA-512:	CE09FAE40DC3E02597F71C44239D019C2CF6A89D7BD838CC45C24BB10BB0963FC3F8A0B6E47095E03FC3B1AA39F5813D2FF3DBAB3A5BAA6EA210F49908865D68
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/font-awesome.min.css
Preview:	/!.. Font Awesome Free 6.3.0 by @fontawesome - https://fontawesome.com.. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License).. * Copyright 2023 Fonticons, Inc... */...fa {.. font-family: var(--fa-style-family, "Font Awesome 6 Free");.. font-weight: var(--fa-style, 900);..}.....fa,...fa-classic,...fa-sharp,...fas,...fa-solid,...far,...fa-regular,...fab,...fa-brands {.. -moz-osx-font-smoothing: grayscale;.. -webkit-font-smoothing: antialiased;.. display: var(--fa-display, inline-block);.. font-style: normal;.. font-variant: normal;.. line-height: 1;.. text-rendering: auto;..}.....fas,...fa-classic,...fa-solid,...far,...fa-regular {.. font-family: 'Font Awesome 6 Free';..}.....fab,...fa-brands {.. font-family: 'Font Awesome 6 Brands';..}.....fa-1x {.. font-size: 1em;..}.....fa-2x {.. font-size: 2em;..}.....fa-3x {.. font-size: 3em;..}.....fa-4x {.. font-size: 4em;..}.....fa-5x {.. fon

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	127904
Entropy (8bit):	5.980718638820531
Encrypted:	false
SSDEEP:	3072:GgrthEUaXiURmtgUp1gKkuPjQ5lGgEeZEB:GgrthEFXgttgKkuPkceZk
MD5:	2297ADE8CC71C0AC323FBD8BE1072478
SHA1:	57B41D9D3099A56D6E3006B5658E3249D7381288
SHA-256:	806615ADF1B4A1525C0C020AB0E9A477D9054BF1410333FF74EB53158CB461DF
SHA-512:	ABC2862B282F5B9AD538AE9E8EB90934CAD21664C297B0E916A3B096C3E08F7E66C0C4141FB386A3225FCB7E6CA80344394DBD07C68B4E69D8EA8AA7E96BF340
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/fonts/MercuryTextG4-Roman-Pro.otf
Preview:	OTTO.......@CFF d\{.........GPOS'e.........GSUB:.4..e\...^OS/2..@....0...`cmap.;m....\|....head.r.........6hhea...........$hmtx..b...v....,kern@VU]......p.maxp..P....(....nameR..........post...2....... ......3.-..._.<...........c.....=.........+..................................................P........?.E.....................2..................P.@[........H&Co... ... .8.................}.". ..... ...........@.............@...........O.........".T...........v.................................Z.............................................................(.........+.............@...........O...........@.......................U...........s.........D...........&..........."...........&...............................................$...........$.......................V.............YCopyright (C) 1996, 2007 Hoefler & Co. http://www.typography.comMercury Text G4RomanH&Co: Mercury Text G4 Roman: 1.202Mercury Text G4 RomanVersion 1.202 ProMercuryTextG4-RomanMercury is a trademark of Hoefler &

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2202)
Category:	downloaded
Size (bytes):	256175
Entropy (8bit):	5.54253139648748
Encrypted:	false
SSDEEP:	3072:M4aiJ9iVVZLYFthf3K0YjngvLMzU467dbeOKfy4WqM0bukM4Bn:v+VV9YFD68ymTqM0qkME
MD5:	A84B39652399A43254E56111BD8E250B
SHA1:	AEA5B54ED9A9D059E643196B74BA161F8BE4630F
SHA-256:	43832E25ED24C50E8F8B529C356D6037E2E372495414D6540A54B7BE519656DB
SHA-512:	FB44249FEA09228CC4B001E2087A893A6BFD0094C07CB66F93F0BF8AA9E9753B29EC6F7908648FDDC27E0536CB19935B9DFECA4428667F98B3866C4B82B84B38
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-T8S2L7B
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementTarget","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	5.0681734165596914
Encrypted:	false
SSDEEP:	6:tnrL0UpKmc4slKZH9J69KsKMjR4JVqAhO1m:trL0OKgZHv6MxMjqzlsm
MD5:	3B950E82BF9B991ED2586D7D71A8B57D
SHA1:	AADBF6D0D4D8E5D4819C55F2E5ABEE12EFF3E7DC
SHA-256:	9288121265E1F909697B432D981EF85B3916E4B495CB7788ECA7F7B16104FF71
SHA-512:	C51D683B76F606B9857E1D263E893B53F0720565C6C8B785F5172D7CCE4A185EB1C6050F0E853D13DD598193045EABF8F543568AF1354221DC5E0B8C97F084E5
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/img/error.svg
Preview:	<svg width="14" height="13" viewBox="0 0 14 13" xmlns="http://www.w3.org/2000/svg"><title>X</title><g stroke="#EE6148" stroke-width="3" fill="none" fill-rule="evenodd"><path d="M1.815 1.742l10.37 9.516M1.815 11.258l10.37-9.516"/></g></svg>

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	266585
Entropy (8bit):	5.54136254398137
Encrypted:	false
SSDEEP:	3072:EuaiJ9iVVZLjFFhf3K0SjngvLMzU467dbeOKfy4Bin0bukMdni:l+VV9jF788ymSin0qkMI
MD5:	837645F5354EB3B39CEEA893F87B88D0
SHA1:	E15347003BC881FA4FCB4F6E152EF29A90BCD775
SHA-256:	0133B32FD4AB1960EDC6D8E0851730FE64F575EE8FED421F7F523471D71DA85C
SHA-512:	8EFCD719BD646F17592B5853EB69E8ED906B0E6C859B0703961569D6FB326B3580BF72AC0791B217F9D0143DF6607F8AF41D1F9D119164334E1DC813743B896C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-860973240&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-860973240","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3183
Entropy (8bit):	4.935278942452536
Encrypted:	false
SSDEEP:	96:bG5jves9RPVpo5NooSvSv22KKEEhi31x22KPY8ii49qRPzvGHhj:65jvesvP3o5NooSvSv22KKEEcFx22KPo
MD5:	412D411C47839DADAF1A8A3E6974221E
SHA1:	A13C9DCACC34924883FBF934A131466CDA839AF0
SHA-256:	FAC6799AF62A14BEE0F3483C1FAA88D92ED15763F1CB5E36BE2AA2E0FD98EFEC
SHA-512:	0E50014B6193498A704F013B8BAA805727AC367A4A9BD45F1A16A2BAB96ABEC9F75E7F845B4154FD9AD7BB84950E5550459B8FF91C218EEA68EB6A27E5FFE2E5
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/datepicker.css
Preview:	/!.. Datepicker for Bootstrap.. .. Copyright 2012 Stefan Petre.. * Licensed under the Apache License v2.0.. * http://www.apache.org/licenses/LICENSE-2.0.. .. /...datepicker {.. top: 0;.. left: 0;.. padding: 4px;.. margin-top: 0px;.. -webkit-border-radius:2px;.. -moz-border-radius:2px;.. border-radius: 2px;.. z-index:99999;.. min-width: 250px;..}...datepicker-dropdown{..box-shadow: 0 2px 3px 0 rgba(218,218,218,0.50);..border: 1px solid #dbdbdb;..width: 100px;....}...datepicker > div {.. display: none;..}...datepicker table {.. width: 100%;.. margin: 0;..}...datepicker td,...datepicker th {.. text-align: center;.. width: 20px;.. height: 20px;..}...datepicker td{font-size: 12px;}...datepicker th{font-size: 14px; margin-bottom:5px;}.....datepicker td.day:hover {.. background: #eeeeee;.. cursor: pointer;..}...datepicker td.day.disabled {.. color: #eeeeee;..}...datepicker td.old,...datepicker td.new {.. color: #999999;..}...datepicker td.active,...datepicker td.act

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1344), with CRLF line terminators
Category:	downloaded
Size (bytes):	46044
Entropy (8bit):	4.490052064149431
Encrypted:	false
SSDEEP:	768:uee+9HpbN7QzDc8ryCx7e3DOCX6a/G1VTnTksknWVpBOzCNAwxnUsEr:4+TyzgmlgX6a/G1VTnTksknWVpBOzCNc
MD5:	0834D3F7488D76D14F0BB0790E7603C4
SHA1:	D5E771703E398094936062C11F032542982A7FD8
SHA-256:	BAB04CC2F16E1C07D6E5ABAA859340953694C0606060AF3603B7FAFC5A526FA2
SHA-512:	8BE7F889D708B559E82C61973BCB9C6CB5CBE20E27F13528095B4836C00304D6CAA7C24A12F267C13F1436EBF5D7E9AE7B81120986CB3A508DE8D3DF0649BBD1
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/imichatinit.js
Preview:	var _domain_name;..var _attr_key;..var _IMIchat_IsValidNavigation;..var _IMIchat_callback_dic = {};..var _IMIchat_widget_lang = "en_US";..var IMIChatInit = function () {.. var buttonType = "type1";.. var domainname = "";.. var ticks = new Date().getTime();.. var fingerprint = null;.. try {.. fingerprint = localStorage.getItem("fingerprint");.. } catch (e) { }.. //var domainUrl = "http://widget.imichat.co";.. var domainUrl = "https://media.imi.chat/";.. var _skey = document.getElementById("divicw").getAttribute("data-bind");.. return {.. domainName: function () {.. return "https://media.imi.chat/widget";.. },.. init: function () {.. try {.... _IMIchat_IsValidNavigation = false;.. _attr_key = document.getElementById("divicw").getAttribute("data-bind");.... var body = document.getElementsByTagName('body')[0];.... var script = document.currentScript \|\|

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 183 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5468
Entropy (8bit):	7.781077683030462
Encrypted:	false
SSDEEP:	96:zSDknmWIGEhFHqfEpgXU6fS4Mbnt8IatmwW8wv7UqFSqCRj:zSDkniaEpFpNwWDojqCJ
MD5:	2D5A7A8E020FAACB9562B5AEB3F8DF62
SHA1:	65AC25FA146994584ECE05D857FB12A1812BA166
SHA-256:	5A83D57E15A55B862FA4CCBABC0A121681F95212C1D2C02A33059274A6E7CC76
SHA-512:	D1A7D5958DDD32209FF5DADF1E8AB63A0F61436B65A8924982B5147AC9AF72AFE366636725B525D8164D555581CC7F2147F79B601B2243CFA7CD07389B880E29
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............j.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)" xmp:CreateDate="2020-03-24T11:08:24-05:00" xmp:ModifyDate="2022-08-25T14:25:09-05:00" xmp:MetadataDate="2022-08-25T14:25:09-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:fd622c76-b918-4b00-b724-3686dc3c088a" xmpMM:DocumentID="xmp.did:fd622c76-b918-4b00-b724-3686dc3c088a" xmpMM:OriginalDocumentID="xmp.did:fd622c76-b918-4b

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.29700525152376
Encrypted:	false
SSDEEP:	6:TMVBd6OjZ9mc4slzXQoxcWEwOlXgL9qeq4JWuRImBYUw9SVQygAqSGQU:TMHdtLRQo3c4z8uqmBYrgQynpGQU
MD5:	70F2B416A889795AB166FF47A060F87E
SHA1:	C8C8D5689E29B85B99F6D19F238B61A6D19B683D
SHA-256:	F74C2BEC62735B635256FEED18227CD13FADFDA79FA128D2B712D1D4CBA43CBB
SHA-512:	886E7FD18C68ACE8A1D6A32E70B7F6B3F6C149541E5F2E88DC9422B1D18B26F666CFCF862DBAAEC55D2F2923992A095EC4E3E9646F7498FBB3A30AF971B3DCB7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns="http://www.w3.org/2000/svg" width="86" height="86">. <circle cy="43" cx="43" r="37.5" style="stroke:#00212e;stroke-width:11;fill:#fff9ea"/>. <path d="M28.5,25.5v35h16.5a17.5,17.5 0 0,0 0,-35zM38.5,34h5a9,9 0 0,1 0,18h-5z" style="fill:#00212e"/>.</svg>

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MPEG ADTS, layer III, v1, 128 kbps, 48 kHz, JntStereo
Category:	downloaded
Size (bytes):	1992
Entropy (8bit):	6.176287196075499
Encrypted:	false
SSDEEP:	24:fXedegHY0yS6vTEVRDpEUmxKsnmxqdb/3biKbj3Mcqt/x:2g0yb8RVmlnMqdb3GG7/O/x
MD5:	627C0E8B5B8EF0417ACE4D759284A51D
SHA1:	F6A50182F0717EA5F29596420259B3EC435DFFF5
SHA-256:	ABD654A8166D2B6F943FC64404EEA5EB58CCEFFE8BCDED73560B243C28532F16
SHA-512:	704DACF09ADCA843512FCFEA200C29C2D72F6BF276B2EC8DEF22C3E10213903C893790A9583655FD9EF74C911511FFBB6970686A74B162F3451A224F12C39C6F
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/audio/mo.mp3:2f7ae8ffd01cca:0
Preview:	...d................................Xing...............................999999999ggggggggg..................................................................<LAME3.98r..........4 $............8....................................................................................................................................................................................................d.....i....... .......... ..4......@.P(........Bz...[...L..g......T.2.q.2.i7Sj(4.3%)9FVN.9....d............. .......... ..4......l...C..Y.n.A;....o.)...c.$.Ab4..%..bK.. .mb.~....0..gtl....Dd<........p... .....{K......4......J}m.....n\..t.q..tZk....g....l.)..#.znS;....Z.?.K....W.nm.H...j\??....>..i....4.......j{.}......2.Y.Nwx..\d1...;[:X.....gs...td...\^..m..... ......E.m`..4.....0..._.8T.............MA.....g...&+M.....r8=......H......J.;q..1A..E..[2...9..f4XWVi[ZiU^V..k.%...M..&.$U.i.$.~.$..XV..C.......&Xg...8....IX.(...I.`!i.).....'....E..mE....Y.k".....(...=[..Oc.s0.]]....c_)&d.j.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59701)
Category:	downloaded
Size (bytes):	113381
Entropy (8bit):	4.921824878665509
Encrypted:	false
SSDEEP:	1536:MZeJKfZdlk2u5SOV+UQ37410kxJdPfrF3Ps:MZeJMTk2u5SOV+UQ37410kTd3Z3Ps
MD5:	51A8390B47AA0582CF2D9C96C5ADDEE2
SHA1:	B16A640874025D085C38119A1A02A3460F83F2DE
SHA-256:	98CECF88A23542FA047CE46EEDB650B5C5128761ED4386C0977B847094DDFA20
SHA-512:	711162AB43E59E0FF5F050CCA4278682194248A13EF2EE1F00AB276B6221E7A4DDDEB9645E8798E7F67A34F0001C8F63469F2B2C3E6D4E2519ADA30B6775E191
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-includes/css/dist/block-library/style.min.css?m=1719250562g
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (55701)
Category:	downloaded
Size (bytes):	56012
Entropy (8bit):	5.156374167879351
Encrypted:	false
SSDEEP:	768:LyRvnE6qoV8dcbmuDPPPB0TMMk/EsGrr4zfp6Nsphjhp+1iWUYBvWH+zPf9BoCM:e1rbmMPPBSPryxgsYPF4
MD5:	6CD744ADA017584B17B6BB54F16B13A8
SHA1:	456A83E8EA30B8C5DC90319E5FD0E7B1FDAD6EB1
SHA-256:	7247AB83A30FBD92BF8425ACA87DBB9F3F44C1B7FACC6F7FD80DF157EA6B5E03
SHA-512:	3523E03E7E32E2935B69623554D85BDCBA6A8FA1C832C8AF629F4B5613A816D70388806468534629E3D18C13955046F0742178B558F8BC850FFF920D086025D0
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/muse/analytics/index.html
Preview:	<html><head data-date="tag SEP_01_2023_01 Fri Sep 01 2023 16:52:24 GMT-0400 (Eastern Daylight Time)"></head><body><div id="ie-check"> [if lte IE 9]><div id="is-ie-lte-9"></div><![endif]--></div><div id="app-container"></div><script>/! For license information please see iframe.js.LICENSE.txt /.!function(){var n={20:function(n){"use strict";var e="%[a-f0-9]{2}",t=new RegExp(e,"gi"),r=new RegExp("("+e+")+","gi");function o(n,e){try{return decodeURIComponent(n.join(""))}catch(n){}if(1===n.length)return n;e=e\|\|1;var t=n.slice(0,e),r=n.slice(e);return Array.prototype.concat.call([],o(t),o(r))}function i(n){try{return decodeURIComponent(n)}catch(i){for(var e=n.match(t),r=1;r<e.length;r++)e=(n=o(e,r).join("")).match(t);return n}}n.exports=function(n){if("string"!=typeof n)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof n+"`");try{return n=n.replace(/\+/g," "),decodeURIComponent(n)}catch(e){return function(n){for(var e={"%FE%FF":"..","%FF%FE":".."}

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	266595
Entropy (8bit):	5.541356424724103
Encrypted:	false
SSDEEP:	3072:EuaiJ9iVVZLjFwhf3T0mjngvLMzU467dbeOKfy4Bin0bukMdni:l+VV9jFUX8ymSin0qkMI
MD5:	C02BD21622650877487E64E160B5EE2A
SHA1:	EB58589C9245425E0896C432BF40D2E5ECE61B95
SHA-256:	943FE284F76EC6B33FFD175AE51A73DF329F2F905CD02606BE81C188562B481A
SHA-512:	260632A57FEEE000727A69E6B41A5489060B36E48F65173D09D6E2206C915D50E70ECF4D9EC53A0BDDAAB3FFD8774F7B53D0322F745AF05691C713701FE844CB
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-860973240&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-860973240","tag_id":9},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31416, version 0.0
Category:	downloaded
Size (bytes):	31416
Entropy (8bit):	7.992983547884426
Encrypted:	true
SSDEEP:	768:hVFlaw23vyH3gQoDfJpE9s7o1WCK6yT0BL:1lXuviiTfUWx63L
MD5:	A96D1ABA5E2244061D6A696FFEC79D77
SHA1:	86D500A6B6E5113253A40A79CC58EE850759A1BF
SHA-256:	936DCAA7EAB6FD9898492F3D4A83BC153FFA7E9A40899F2FBB89F15D6EF425A8
SHA-512:	61698FB6B551694454F632578092B1781316B04D3160A2EABB84257504BE93796F39B3CA985C3D66159DA525304FD45CE4B78ABFE537FA76F1DE71B0D92199C6
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/fonts/MyFonts/TradeGothicNextLTProRg.woff2
Preview:	wOF2......z.......)...y.......z0..................8..8.`..`..:..b.."...@..%..X.6.$.....N.. ..{. ..2[I.....v.#R.zXe...C....jBB`.......~._..7........?........b....._.o..z#.U..Y......D5.#<"...Q..,...w.E.._...[...FR...[..0...f....=...6.. .....Y@...H^X.d!}.{t.+..o..`....m..Mg;...l....L......_S.._j...........>[....d.....0o.......O.J.'M.....3..u\.~.....#..m.O...E...`'N.Cv...}.6....&...1"j$..K.Z....9T5.N..O.........A.X..o.X.,.{,.m....#d..p..TD.....W..]s^$...."c...@........a...F...E.E.^...]{....UU.x.=+...a.....?.#..m.f..$j...T.R.V.R~Z...!b..T........0.nfA.k.u.7..7.U..~..f....v..w...J..^....e}..tKzAz.V...t7{.....134s......q.....{..;.v_@N.....\|.....\.............).h....`.z..%....Ws.@k...p....._.{.{L.p.S:P. v}Q%...=.]...R.....e(.R....z..@.....7os6/o..vJ)...7....J.........J'.6..p...o.U.........8.).u<g...8.........o..m..4(...DM..V ..A]5@..4uEj.F{n...J3...5.;r..&<.....h]~.$6...r.2.d..\.\...e.L.:... .r...L..O.....5..2Jk..Y.V.....$:.L.........:...E... "..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31992)
Category:	downloaded
Size (bytes):	93790
Entropy (8bit):	5.311782545927558
Encrypted:	false
SSDEEP:	1536:+JQ0SWWdgchL4CGFRmYnM9BHDoVLV7FG5VanRV69NFo2pr23EHTiOf0Ba39s29aH:Jhv4KxqSs2kuzs
MD5:	20055B8EDCFCA3754181170D13DD339C
SHA1:	27F6E5620030C1E87978D6CAB07AD87B294ECA59
SHA-256:	794ABDB5CD285CD61326CA9E2445CCA3EA26689DA5403D60C100ED9585B81E06
SHA-512:	94974F8A6FDC7A6B2FD9279A8DF4B04F5C024B3376CD96F3121D409867F6959A76D1E029F3932EC32B8AC26C532380151CED41C7C923EB0FE3510CD0BAF73E6B
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/includes/js/jquery-min.js
Preview:	/!. jQuery JavaScript Library v1.9.1 . with fixes backported for:...- CVE 2012-6708: https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d..- CVE 2015-9251: https://github.com/jquery/jquery/commit/f60729f3903d17917dc351f3ac87794de379b0cc..- CVE 2019-11358: https://github.com/jquery/jquery/pull/4333/files..- CVE 2020-11022: https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77..- CVE 2020-7656: not vulnerable per this POC: https://snyk.io/vuln/SNYK-JS-JQUERY-569619.. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. /.!function(e,t){var n,r,i=e.document,o=e.location,a=e.jQuery,s=e.$,u={},l=[],c=l.concat,f=l.push,d=l.slice,p=l.indexOf,h=u.toString,g=u.hasOwnProperty,m="1.9.1".trim,y=function(e,t){return new y.fn.init(e,t,r)},v=/[+-]?(?:\d\.\|)\d+(?:[eE][

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1824
Entropy (8bit):	4.366970038285919
Encrypted:	false
SSDEEP:	48:61bBrEvWFaHM5y4bHtzrOf1NPycREROSfzsKOW5h:8bBrngEZO1sqSzsKvh
MD5:	34A4438D65DE8B75B2E2B38081B37625
SHA1:	C40C0EB631E267E06A4B48FD1FF072B300C7457D
SHA-256:	C76F766ED128FF1C05CBAB4F53E470751B475152992A770D42273047BC1708C5
SHA-512:	67CF35910DB0970AC3C00D57A8CDBC90FCFBA9A8B95D0039EBE73E2D16AF418FAB82DE712E5DB8CC2F5A76849FC5E03F741433C8F8B96E81B9F4A0C78398D3EF
Malicious:	false
Reputation:	low
Preview:	<svg width="41" height="41" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M19.526 14.635v4.083h2.518c.6 0 1.096-.202 1.488-.605.403-.402.605-.882.605-1.437 0-.544-.202-1.018-.605-1.422-.392-.413-.888-.62-1.488-.62h-2.518zm0 5.52v4.736h-1.504V13.198h3.99c1.013 0 1.873.337 2.582 1.012.72.675 1.08 1.497 1.08 2.466 0 .991-.36 1.819-1.08 2.482-.697.665-1.559.996-2.583.996h-2.485v.001zm7.668 2.287c0 .392.166.718.499.98.332.26.722.391 1.168.391.633 0 1.196-.234 1.692-.701.497-.469.744-1.019.744-1.65-.469-.37-1.123-.555-1.962-.555-.61 0-1.12.148-1.528.442-.409.294-.613.657-.613 1.093m1.946-5.815c1.112 0 1.989.297 2.633.89.642.594.964 1.408.964 2.442v4.932h-1.439v-1.11h-.065c-.622.914-1.45 1.372-2.486 1.372-.882 0-1.621-.262-2.215-.784-.594-.523-.891-1.176-.891-1.96 0-.828.313-1.486.94-1.976s1.463-.735 2.51-.735c.892 0 1.629.163 2.206.49v-.344c0-.522-.207-.966-.621-1.33a2.132 2.132 0 00-1.455-.547c-.84 0-1.504.353-1.995 1.062l-1.324-.834c.73-1.045 1.81-1.568 3.2

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (866)
Category:	downloaded
Size (bytes):	169308
Entropy (8bit):	5.033072354571048
Encrypted:	false
SSDEEP:	768:gDatzbCW/WsW4cASiPoIGbdnGNI3Ss5X2OyGNiHS1PvtZGpUgTTT1zYEImoee9iR:catfSiUgTTT1BPIMOsqr41ajylEXz6OQ
MD5:	4BC99E0807426DE69662A3C99A802FA6
SHA1:	0CA87969DE806AD81293B182BCD7BEA3621F5DD3
SHA-256:	A816CDA8958CD037EBC9E68E1A5EBBE93EDA2D73889C83C37F238CA493243545
SHA-512:	25CBAB1CA707E3E899A6A1C71368A0F86D681444B85CDCA445FFF813D894D6F44BA54741FEF4DE370D41445A8AAC492854AE05406975BEB979C70E3D2E639ED5
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/includes/js/can-embed.js?v=54
Preview:	//global translation variable.an_javascript_translation = {..weekly: "Weekly",..monthly: "Monthly",..every_3_months: "Every 3 Months",..yearly: "Yearly",..securely_purchase_tickets: "Securely Purchase Tickets",..securely_contribute_now: "Securely Contribute Now",..securely_purchase: "Securely Purchase",..ticket_for: "Ticket For",..tickets_for: "Tickets For",..now: "Now",..securely_contribute: "Securely Contribute",..enter_amt: "Enter Amt",..other: "Other",..front_other: "Other",..this_event_is_sold_out: "This Event Is Sold Out",..street_address: "Street Address",..city: "City",..oops_you_have: "Oops! You have",..error: "error",..errors: "errors",..processing: "Processing",..your_card_has_not_been_charged_please_try_again_or: "Your card has not been charged. Please try again or",..contact_us: "contact us",..if_it_keeps_happening: "if it keeps happening",..there_was_an_error_contacting_our_payment_processor: "There was an error contacting our payment processor",..please_ensure_you_are_no

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	245966
Entropy (8bit):	6.125525588616656
Encrypted:	false
SSDEEP:	6144:QokN05GvoXfhQKrVV15g/mvURs+0+Mua6ZP2:dkNaGAXZQKrF5geks+0it2
MD5:	529E231BAF5DE5F8E80907F2C9B22CBC
SHA1:	55EDD2B2D6F44B21B30E765AD0B3F8DA61EF2C6C
SHA-256:	28CACA8C4995810757CDA9C35FBFDFE7ACAE149A9299E6088B1ED1FC4E2FF9F8
SHA-512:	EDABDFCA61BB648A2BCF03075D7351F86F9B2965D16A18DA501D7255C472EE00855903C208C510DD695785B08E8C2292F218DAB384D123B1FBAF29A9DECA2C2E
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/home/tools-in-action-background-a5082337eee4c88635d68e1bc11d6f061c98b9ceb9e70613e0f06cf5d31a01d5.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 300 126".. style="enable-background:new 0 0 300 126;" xml:space="preser

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53324), with no line terminators
Category:	downloaded
Size (bytes):	53324
Entropy (8bit):	5.450857485837432
Encrypted:	false
SSDEEP:	768:ToMKhfq4fY0Warbcvc6EsloNkUa+I2IcP/8fe4bK9mx:sM09Y0lr0c7slRqnue6r
MD5:	761502841C035AFCF6A9BDC5D0A20D11
SHA1:	69AB16BA8CA68431AB59EFF286C7ED1E520BCA30
SHA-256:	E22419E8154BE2A34A950DBB4C4C448413751C53EF02F00C6C56AF28AA2C4964
SHA-512:	8B60959C08A0B8DE929C9DDDD8284E39D74C590CAF8104F39B4A928222A13AA04C182C787C653906DCD71326E729AB563C39173C5C8223495B1B8D819D58EBFD
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/moment.min.js?v=28052024_1
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.moment=t()}(this,function(){"use strict";var e,i;function c(){return e.apply(null,arguments)}function o(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function u(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function l(e){return void 0===e}function h(e){return"number"==typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function d(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function f(e,t){var n,s=[];for(n=0;n<e.length;++n)s.push(t(e[n],n));return s}function m(e,t){return Object.prototype.hasOwnProperty.call(e,t)}function _(e,t){for(var n in t)m(t,n)&&(e[n]=t[n]);return m(t,"toString")&&(e.toString=t.toString),m(t,"valueOf")&&(e.valueOf=t.valueOf),e}function y(e,t,n,s){return Tt(e,t,n,s,!0).utc()}function g(e){return null==e._pf&&(e._pf={emp

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	75533
Entropy (8bit):	4.722085195979468
Encrypted:	false
SSDEEP:	384:MxJg0OGM2k8r1iVHz4e/AQgcd9BpwFFQ1EJZjKyWZVaHIgV3iVgpdP8DhUl6Dske:MxZOwk8pkFofV3hwAQE68FqM
MD5:	D790E7B8A6969BF9BFA84AF965B9C561
SHA1:	57A9C58811205152D154BF9CF21FF2494FE78335
SHA-256:	193E683E55CCE144B01A9A8D8E84A24D20620F96C98682F6DFDFC2F083F6408D
SHA-512:	DD8E25704A371658F28C0947BF70FC87790AFCB1706D679757E096A666311F98503D320EDB07DC5847DED2AA89AFDEE47E44036B7049D3AE4E6F36E33A11C803
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/chat-widget-frame.css
Preview:	.@charset "utf-8";....:root {.. --primary-color: #fff;.. --primary-bgcolor: #0f0f0f;.. --primary-bgcolor1: #1f1f1f;..}....@font-face {.. font-family: "CiscoSansTT Regular";.. src: url("../fonts/CiscoSansTTRegular.woff2") format("woff2"), url("../fonts/CiscoSansTTRegular.woff") format("woff");.. font-weight: 100;.. font-style: normal;..}....@font-face {.. font-family: momentum-ui-icons-rebrand;..}....@font-face {.. font-family: 'imichat-icomoon';.. src: url('../fonts/icomoon.eot?ktzfl3');.. src: url('../fonts/icomoon.eot?ktzfl3#iefix') format('embedded-opentype'), url('../fonts/icomoon.ttf?ktzfl3') format('truetype'), url('../fonts/icomoon.woff?ktzfl3') format('woff'), url('../fonts/icomoon.svg?ktzfl3#icomoon') format('svg');.. font-weight: normal;.. font-style: normal;..}.....icon {.. font-family: momentum-ui-icons-rebrand;..}....[class^="icon-"], [class*=" icon-"] {.. font-family: 'momentum-ui-icons-rebrand', 'imichat-icomoon';.. speak

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	451
Entropy (8bit):	7.0636320273410655
Encrypted:	false
SSDEEP:	12:6v/70XldMAJY8hM/ghl5SqByZVbyeQbJKslNl7JOiX:BGGYPghlBqf07jX
MD5:	C5262034A596BD87AABCD042EF6D940F
SHA1:	F6756203A877440A74F21F7EDA3C64219F7D1159
SHA-256:	4E59CBBE3D493C36D6CB80FE6D0D1D3B7098D19D33C3F9DBDA9BBBBC74B014D0
SHA-512:	B734686A4C2EEF3571C4760CA9301A66C7C3B0C34F2CA36760F739281FED00533DCA70C3F858F4AB8F1540B2C0A922F8F91A397C4FA04B58DAA2C0DBD3E4217F
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/images/spinner8.png
Preview:	.PNG........IHDR... ..........Y.D....tEXtSoftware.Adobe ImageReadyq.e<...eIDATx.b...?.@.&....q!.o... f$..P......./r.!%.$.X....&.L.(...@.....b[.. .Y...\@..)._.1....q'.......H=.....^b....7....@.....?@...........5..?.....@.JA....$...l.....(....9-,'...@..).Y...@<.).b`\|.....Z.-gB.=:.8...A....jd..(..P..A..../...Z$..R.*..: ^..r..@..-j.D..c....Pu...8Uj.8..@l...x..?@.q.....)..B ....u.og..W!.......T9..b6 >..F.n.}..\h;.p.fC......Q.Eno.....IEND.B`.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11154426359?random=1719991386424&cv=11&fst=1719991386424&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	213962
Entropy (8bit):	4.430407592216034
Encrypted:	false
SSDEEP:	3072:CtRvh53kpdcaTJNJVJCy/U6+UFWJOXCMtAd3t6ecZvDN6:CtL53kpzTHHJsDUFWJOXCMtAz6ecZvx6
MD5:	A83935FF5E6F36622A8A22ABFD535C6B
SHA1:	9C759A11B29B331043B470E0CF185A85C220F3DF
SHA-256:	68257A8AB1B1F6075457C834AC3512217DFEBB6FDC0DE4809AF8700B75B33C72
SHA-512:	C5B6449C0E5D3D8FC74EF72FFEFDADA1B66B1CA14827B3F2E1FBB5C6B1A1A75C6F5C5ED6575169483BEB15D352013C0404E2C4FB2778AE133A6AD23AA3309967
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/imiclient.js
Preview:	const JS_SDK_VERSION = "1.5.4.043";..if (typeof Function.prototype.bind === "undefined") {.. Function.prototype.bind = function (thisArg) {.. var fn = this,.. slice = Array.prototype.slice,.. args = slice.call(arguments, 1);.. return function () {.. return fn.apply(thisArg, args.concat(slice.call(arguments)));.. };.. };..}....Date.prototype.toUTCArray = function () {.. var D = this;.. return [.. D.getUTCFullYear(),.. D.getUTCMonth(),.. D.getUTCDate(),.. D.getUTCHours(),.. D.getUTCMinutes(),.. D.getUTCSeconds(),.. ];..};....Date.prototype.toISO = function () {.. var tem,.. A = this.toUTCArray(),.. i = 0;.. A[1] += 1;.. while (i++ < 7) {.. tem = A[i];.. if (tem < 10) A[i] = "0" + tem;.. }.. return A.splice(0, 3).join("-") + "T" + A.join(":");..};....function IMIClientStorage(namespace) {.. "use strict";.. var _db = {.. namespace: namespace,.. _get: function (key) {.. return localStorage.getItem(namespace + key);

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 299 x 90, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6926
Entropy (8bit):	7.810325421174035
Encrypted:	false
SSDEEP:	96:rknmWIF2dqrZkH+HzVYT5EQCw7SfwwjKKhUZIXY9SwhvCbUWd8b8ihllB+NlyMZq:rknZOke+iUSfJKgS91WdDWlf+NlFq
MD5:	ADEFF6454558869B9C1240D29EC77EDF
SHA1:	F1446C56E84A01AB3E480AC774E11E27F0EAF4DB
SHA-256:	E32B9AA0537AA96F47CFD8C3850AE44F1281CA2B85128619119E701CD2AC18E3
SHA-512:	CFBE636EFA03BA6B869EA778AB60A7BF300223B550857D55731FEA5F5E4668367C0B69F2DB637408F9977FCC164C6E7E0E42F69E75C7B5002F15A2876EE328CA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...+...Z......pd....pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.3 (Macintosh)" xmp:CreateDate="2022-09-08T11:19:42-05:00" xmp:ModifyDate="2022-09-10T14:11:51-05:00" xmp:MetadataDate="2022-09-10T14:11:51-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:19d6276f-88a4-4d11-ac41-fea3433b79d6" xmpMM:DocumentID="adobe:docid:photoshop:edc994a6-d2a1-1f46-a1df-14d16476e826" xmpMM:OriginalDocumentID="xmp.did:ef

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1654)
Category:	downloaded
Size (bytes):	245184
Entropy (8bit):	4.744455726699706
Encrypted:	false
SSDEEP:	3072:yxJ0MDz3ojrs3OwPl0n04Xl31AfO+2x1+w+Whnz6RNC7sSUrVjHoLOTpCAtQ594Z:yxJRDY9lx1+w+WwugJ
MD5:	8F3A2154B225B6257161C4DFC9B89C9C
SHA1:	16B798CBB9E22CD4E1D710A8DE7B12734551CA00
SHA-256:	ACAEFECC2A438420AE02BAA357BB498AC4ABEC71C80BA9E3C2B7079CACF256C2
SHA-512:	AE1F7CE0811E3EC97105009FEB364B2EBEDB402A63F0F250FB82550A91863E170181283CC867049BE7FF4DF64A6B0DB7719FCD33438E03F7FCCC0E61F9686A10
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/includes/js/intl-tel-input/js/utils.js
Preview:	(function(){var aa=this;function k(a){return"string"==typeof a}function m(a,b){a=a.split(".");var c=aa;a[0]in c\|\|!c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b}.function n(a,b){function c(){}c.prototype=b.prototype;a.o=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.aa=function(a,c,f){for(var d=Array(arguments.length-2),e=2;e<arguments.length;e++)d[e-2]=arguments[e];return b.prototype[c].apply(a,d)}};var p=Array.prototype.indexOf?function(a,b,c){return Array.prototype.indexOf.call(a,b,c)}:function(a,b,c){c=null==c?0:0>c?Math.max(0,a.length+c):c;if(k(a))return k(b)&&1==b.length?a.indexOf(b,c):-1;for(;c<a.length;c++)if(c in a&&a[c]===b)return c;return-1};function q(a,b){a.sort(b\|\|ba)}function ba(a,b){return a>b?1:a<b?-1:0};function ca(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};function da(a,b){this.a=a;this.h=!!b.i;this.c=b.b;this.m=b.type;this.l=!1;switch(this.c){

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	546
Entropy (8bit):	4.888262160157973
Encrypted:	false
SSDEEP:	12:Yyt1Hrf4IFFQbSJN1KSsu6exBA9QmA9abcA9FXQEBaeo4czgD+:YybLf4SJLKSHxBYQmY7YFBoV5
MD5:	B3C6248C5271142BCC44F26A08434252
SHA1:	4E2FA28E70E795AB06647A900B33DA2BBA0C29D5
SHA-256:	7CDC3DFFD7A498CD2C1DADFA79E04C5880A3D04C5FBE8AC3F6976282C5D7DB69
SHA-512:	60A65C5AB1E7938BD83979F1D8DDCD5D30D8F5C37E00F0957439B26A07C6D8FA2269A03FE6E01EBD5134197DE3B4A245347D2539E2523D941B8755BE04BD2505
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/v1/projects/bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev/settings
Preview:	{"integrations":{"Segment.io":{"apiKey":"bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev","unbundledIntegrations":[],"addBundledMetadata":true,"maybeBundledConfigIds":{},"versionSettings":{"version":"4.4.7","componentTypes":["browser"]}}},"plan":{"track":{"__default":{"enabled":true,"integrations":{}}},"identify":{"__default":{"enabled":true}},"group":{"__default":{"enabled":true}}},"edgeFunction":{},"analyticsNextEnabled":true,"middlewareSettings":{},"enabledMiddleware":{},"metrics":{"sampleRate":0.1},"legacyVideoPluginsEnabled":false,"remotePlugins":[]}

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2666), with no line terminators
Category:	downloaded
Size (bytes):	2666
Entropy (8bit):	5.860039665002737
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08Dz75AlefJG9slsH6:aJd6SUtJfNrVlCWWWdtqjZXziC3
MD5:	E0117268746208C8B312C3FFA76AAFC1
SHA1:	9B51BC2FC7D6679C20A214021604634FC3762A8B
SHA-256:	E1BD0071961FD26034C715240770AE565295C29C969F8341F32C7EAE48E498D2
SHA-512:	0356C2B5994CF770CC4251FCFFABEBCF33B495AEE8BB478D50493553141D64B5C5BC197DE8E6A5BF87C5D11BFB40E13B3610AEA333A344E0B6D0585B8BC45D0E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/860973240/?random=1719991417561&cv=11&fst=1719991417561&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za200zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (758)
Category:	downloaded
Size (bytes):	9252
Entropy (8bit):	5.500960648788926
Encrypted:	false
SSDEEP:	192:TRIwMg76UDl7wGmK520KRzBhtrc2W9LUJ3oi+YC5jixb:TRIwMgWUDl7wGm020KRjtrc2WLU1LHaM
MD5:	DE9E705AE08233ACDF6AAF203BCB9334
SHA1:	43498613E5D72789D046B26BB5AEE23A62292FDB
SHA-256:	67B3AC62AC368979F78AC120D239BDAD57798FA9A780D7B21871654D26D8E030
SHA-512:	2937A750C189D40C96F58C625BDBF700C5079A7D9FFBFE79DD080A92EC3B0B33D4675CE8B14BB3576F5969977345ADED388A86AFCCECA60AF5465C1D6C8A023C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.k9jHwLanE3c.es5.O/ck=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.sQqql_Dnewk.L.B1.O/am=MAykAQ/d=1/exm=Das5Le,_b,_tp/excm=_b,_tp,payframeview/ed=1/wt=2/ujg=1/rs=AMitfrgd7Lkd-dlMhF-qswmuBoSuLHZIdQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:siKnQd;yEQyxe:p8L0ob;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._.Nu=function(a){if(a.pb&&typeof a.pb=="function")return a.pb();if(typeof Map!=="undefined"&&a instanceof Map\|\|typeof Set!=="undefined"&&a instanceof Set)return Array.from(a.values());if(typeof a==="string")return a.split("");if(_.fa(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.ib(a)};._.Ou=function(a){if(a.cc&&typeof a.cc=="function")return a.cc();if(!a.pb\|\|typeof a.pb!="function"){if(typeof Map!=="undefined"&&a instanceof Map)return Array.from(a.keys());if(!(typeof Set!=="undefined"&&a instanceof Set)){if(_.fa(a)\|\|typeof a==="string"){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.jb(a)}}};.var Wu,Yu,fv,Zu,av,$u,dv,bv,gv;_.Pu=function(a){for(var b in a)return a[b]};_.Qu=function(a,b,c,d){d=d?d(b):b;return Object.prototype.hasOwnProperty.call(a,d)?a[d]:a[d]=c(b)};_.Ru=function(){return _.yd(

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	508978
Entropy (8bit):	5.327823802131112
Encrypted:	false
SSDEEP:	12288:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+uArbx4YTnd:HjQYmD4Y0Px+WK+978FyMhr+PfcAorbL
MD5:	CEC2EBF204B3605125823C0057AC6121
SHA1:	2D00755B3F300379AB73EBE1B5E87073F23E26E5
SHA-256:	6BBF0E58197746E8AD6DA6760FA12EC136EE16F74865487FD1C56A1DC0D39384
SHA-512:	A341ADBAF59CE517BE7AC38A31EF5B1DD7CB50D9C5EFE6EED70E4FBF8C251FC65058A2819F0BE065CA17CF5F6E463235496522DD820D3D2AF09B8EAEE39E38B3
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/public-d3328fba91ce8554a40cb118560e2eb7672c8a51c9a56ae1a6a629a39350ea2b.js
Preview:	/!. jQuery JavaScript Library v3.6.0. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2021-03-02T17:08Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return fa

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (61325), with CRLF line terminators
Category:	downloaded
Size (bytes):	75211
Entropy (8bit):	5.693882623273465
Encrypted:	false
SSDEEP:	768:tozWCs9hNpYJ9KDXfWNV2AKNwbFcMZfk0HmWE7K7vD2urUdOvQCYFCCYQclAUD3W:yiCsUcynTALsvDlAUDE8Mz+GhfDL
MD5:	4D99629395D1BEE366B2D4B406B84454
SHA1:	89E9B6399F6449977401A08426898F5D279F8DB8
SHA-256:	C794744D8D4259BFB413BE357832EDC11965F310138451182D9EC029735F0F70
SHA-512:	8C4A92CCED92576686ADED0CB3AF15883D3B86CDB13D3F12C76008909036060EB8CA9183FEF0D6C66315072CD259E1BB92A996AFFCA48ECF934EEFF006E9C595
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/showdown.min.js
Preview:	/! showdown v 2.1.0 - 21-04-2022 /..!function(){function a(e){"use strict";var r={omitExtraWLInCodeBlocks:{defaultValue:!1,describe:"Omit the default extra whiteline added to code blocks",type:"boolean"},noHeaderId:{defaultValue:!1,describe:"Turn on/off generated header id",type:"boolean"},prefixHeaderId:{defaultValue:!1,describe:"Add a prefix to the generated header ids. Passing a string will prefix that string to the header id. Setting to true will add a generic 'section-' prefix",type:"string"},rawPrefixHeaderId:{defaultValue:!1,describe:'Setting this option to true will prevent showdown from modifying the prefix. This might result in malformed IDs (if, for instance, the " char is used in the prefix)',type:"boolean"},ghCompatibleHeaderId:{defaultValue:!1,describe:"Generate header ids compatible with github style (spaces are replaced with dashes, a bunch of non alphanumeric chars are removed)",type:"boolean"},rawHeaderId:{defaultValue:!1,describe:"Remove only spaces, ' and \" from

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30982)
Category:	downloaded
Size (bytes):	31018
Entropy (8bit):	5.2470690581531505
Encrypted:	false
SSDEEP:	768:u/iEENaMtGobOJjc540Adfq6sn0XI+4cVLQkY1+4/uWLDRe4Gye7rzj0AhtLvama:fjBMfqZ0ZVEelmc+2vLK
MD5:	A7CF3741B348A0383E5BAECFFEFCDFB2
SHA1:	E3BE9D3CC12C66016429EDFDCA19B87A1FF217BB
SHA-256:	902DAE7458C96332100774586BB836E12D9D2F07A7B37AD3BEC48C1D58572EDE
SHA-512:	4C3744C54AA1F4F6C9970F9590165BE0844593A6C46B45CB6ED3E74B2E579233EE1D38267389ADA23E7BDA50B5B3C4DE1C6E555007E42331897699FE8DAF7C2F
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/cf/assets/actblue.js
Preview:	!function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="/cf/assets/",o(o.s=667)}({0:function(e,t,o){"use strict";o.r(t),o.d(t,"IFRAME_LOAD_TIMEOUT",function(

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2687), with CRLF line terminators
Category:	downloaded
Size (bytes):	37845
Entropy (8bit):	4.615599084628817
Encrypted:	false
SSDEEP:	768:MrHoYOB2ugAbH6Mxkap8bOtw/i+rLgvVaS:TrEM6ap8bOtw/i+vgvVX
MD5:	1A0DDB467076958E3D7A1272BF9FFAA5
SHA1:	6F9B8FD197A0D9BDFAE8C9CD1D6DE2C7C8209461
SHA-256:	82B84FA6AB40B9C826709C872DF5FFE912FE22EB9C94209691016F5121E4DF85
SHA-512:	73495EC8959DA40F15960171AC905D2BA64AEACF7A808E702C18ACD70E6B6AB2F57DA17BCE9162CFE19B7004DD371D23A2DC037059AFEB77E11DAF24E2AB1271
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/imichatgeneral.js?v=28052024_1
Preview:	..var imiEnvironments = {.. "target": "IMIENGANGE",.. "IMIENGANGE":.. {.. "serviceKey": "",.. "apiMT": "",.. "accessToken": "",.. "asset": {.. "appId": '',.. "appSecret": '',.. "pathConfig": {.. "assetPath": "",.. "root": "".. }.. },.. "imiclient": {.. "config": {.. "storageBucket": '',.. "apiKey": '',.. "messagingSenderId": '',.. "appId": '',.. "projectId": '',.. "measurementId": '',.. "authDomain": ''.. },.. "imipush": {.. "safariWebPushId": 'web.com.imiconnect.safariPushTest'.. },.. "authdomain": 'https://rtm-us.imiconnect.io/rtmsAPI',....."rtmsdomain": 'rtmmsg-us.imiconnect.io',....."safariRegisterURL": 'https://rtm-us.imiconnect.io/apnpweb'.. },.. "sw": {.. "config

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3266
Entropy (8bit):	3.9806441717465804
Encrypted:	false
SSDEEP:	96:xhJZR7GXTcI1Tragxthxk5lgCFKgUBqnMbNFXn8NjFVCvE:VPul5kDtzJOj4hVCvE
MD5:	B40EB3052BE49909C25DB9BF6593886E
SHA1:	D64FAB59DC418211D95697E2BFFCDFC80DCDCF5F
SHA-256:	25B02175CC0A4E36FDA24DB4B7DE40009FEB7B31F18FE3C77423A2169929B94B
SHA-512:	7BF3055F90D0600A25C5D8606C1BF1274B6373B2BD7FC98DEC584656FBCC4D9D37D77DA25AFD1CC3E762AF859560569C435A997D360742067DE8CAC4392647E6
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/js-sdk-logos/2.2.7/paypal-blue.svg
Preview:	<svg width="101px" height="32" viewBox="0 0 101 32" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path fill="#003087" d="M 12.237 2.8 L 4.437 2.8 C 3.937 2.8 3.437 3.2 3.337 3.7 L 0.237 23.7 C 0.137 24.1 0.437 24.4 0.837 24.4 L 4.537 24.4 C 5.037 24.4 5.537 24 5.637 23.5 L 6.437 18.1 C 6.537 17.6 6.937 17.2 7.537 17.2 L 10.037 17.2 C 15.137 17.2 18.137 14.7 18.937 9.8 C 19.237 7.7 18.937 6 17.937 4.8 C 16.837 3.5 14.837 2.8 12.237 2.8 Z M 13.137 10.1 C 12.737 12.9 10.537 12.9 8.537 12.9 L 7.337 12.9 L 8.137 7.7 C 8.137 7.4 8.437 7.2 8.737 7.2 L 9.237 7.2 C 10.637 7.2 11.937 7.2 12.637 8 C 13.137 8.4 13.337 9.1 13.137 10.1 Z"></path><path fill="#003087" d="M 35.437 10 L 31.737 10 C 31.437 10 31.137 10.2 31.137 10.5 L 30.937 11.5 L 30.637 11.1 C 29.837 9.9 28.037 9.5 26.237 9.5 C 22.137 9.5 18.637 12.6 17.937 17 C 17.537 19.2 18.037 21.3 19.337 22.7 C 20.437 24 22.137 24.6 24.037 24.6 C 27.337 24.6 29.237 22.5 29.237 22.5 L 29.037 23.5 C 28.9

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	159734
Entropy (8bit):	4.81719391101009
Encrypted:	false
SSDEEP:	1536:EJOc/C3cyiCmJ0lo/xXwtIL0VciElQrCGwSKmf70+k3XZXBjGUyq1asbToJbvhj:yyq1ao6
MD5:	1A8B19C75C331C3490E9552D1BD116BB
SHA1:	ECCC4D8EF9CEA69500898BFEA5C6A216B82DCAAF
SHA-256:	5ABCB9BC6BA57B844B07DC945DE2DB53DFE90F5587F0ABC7E9D88170D32C0712
SHA-512:	90654D4E3F6D00420A17709E2D6D2EE22B32F9B965FA74B7195BDCB1520976A0031AEA7ED511EE2350668424585EC25443D4AB2EC45F0729B7CE210BBABA1625
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/momentum-ui-icons-rebrand.css
Preview:	@font-face {.. font-family: "momentum-ui-icons-rebrand";.. src: url("../fonts/momentum-ui-icons-rebrand.woff2?a06ced233bf65d81a1f640bc29b14ba2") format("woff2"), url("../fonts/momentum-ui-icons-rebrand.woff?a56a162b48a98a468c168c3589b6cfcd") format("woff");.. font-weight: normal;.. font-style: normal;..}.....icon {.. position: relative;.. font-family: momentum-ui-icons-rebrand;.. speak: none;.. font-style: normal;.. font-weight: normal;.. font-variant: normal;.. text-transform: none;.. line-height: 1;.. white-space: pre;.. text-transform: none;.. direction: ltr;.. font-feature-settings: "liga" 1;.. -moz-osx-font-smoothing: grayscale;.. text-rendering: optimizeLegibility;.. font-smoothing: antialiased;..}.....icon-lg {.. font-size: 1.33333333em;.. line-height: 0.75em;.. vertical-align: -15%;..}.....icon-2x {.. font-size: 2em;..}.....icon-3x {.. font-size: 3em;..}.....icon-4x {.. font-size: 4em;..}.....icon-5x {.. font-size: 5em;..}....[class='icon'][class='_8

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7736)
Category:	downloaded
Size (bytes):	339640
Entropy (8bit):	5.157699456986708
Encrypted:	false
SSDEEP:	3072:Swc7zq/sIOewatZryvDqoaIA2B9rxzCk8VRMO5vOeOC+bbirKUPf5OdAwAWw:Nc7zZIFwzOoxBNxz18VRAbir/Pf5r
MD5:	D36C285C731ADC900B7B099942BA3566
SHA1:	1BECCD0104D503BCD8843A410140C0F2FD3DA198
SHA-256:	F393C869D4C977D3F7183AF1CFF7EB72935A172F15684AA0AA8161B58847CE3D
SHA-512:	EB685DAC3225C0EEDBBA5097964796A76DBB744F427125AD0222ACF23DF16C3B30BC4D93A26E0E07759A944BB114AAEAF8E0741FBB560E8C1D64AA2FE8589B01
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/js/source.dev.js?m=1717432320g
Preview:	'use strict';var _typeof=typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"?function(obj){return typeof obj;}:function(obj){return obj&&typeof Symbol==="function"&&obj.constructor===Symbol&&obj!==Symbol.prototype?"symbol":typeof obj;};/! Magnific Popup - v1.0.0 - 2015-01-03. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2015 Dmitry Semenov; /.;(function(factory){.if(typeof define==='function'&&define.amd){.// AMD. Register as an anonymous module..define(['jquery'],factory);.}else if((typeof exports==='undefined'?'undefined':_typeof(exports))==='object'){.// Node/CommonJS.factory(require('jquery'));.}else{.// Browser globals.factory(window.jQuery\|\|window.Zepto);.}.})(function($){../>>core/./. . * Magnific Popup Core JS file. . /.../*. Private static constants. */.var CLOSE_EVENT='Close',.BEFORE_CLOSE_EVENT='BeforeClose',.AFTER_CLOSE_EVENT='AfterClose',.BEFORE_APPEND_EVENT='BeforeAppend',.MARKUP_PARSE_EVENT='MarkupParse',.OPEN_EVENT='Open',.CHANGE_

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1473406
Entropy (8bit):	5.050621227160537
Encrypted:	false
SSDEEP:	3072:5UJMaUhOFmARKNthCbBRpX4a7MPZCJxDzVzlFEG:5UJMaZFPxl
MD5:	4CD5F7316CDAD254F9B69171BBD61102
SHA1:	E57BEECC8B6C7C9CA2855F0B719276333DCABAE7
SHA-256:	4CFC784C6B43DF08E88CAB0D7ACF7C5F06F9826BD3EF399CF03C555DE3D955DF
SHA-512:	C6DCB4FA2053BEDC288478B0D0788866EC91C37E47D3EA39F853611A057F8918D7BA81D97A06E609C8BAA2DFA1B3A852D66F25D53001A5C85F0ABD5CA8A3DFE6
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/momentum-ui.css
Preview:	/!.. @momentum-ui/core v19.9.33 (http://momentum.design).. * Cisco Momentum UI CSS Framework.. * Copyright 2013-2020 Cisco Systems, Inc... */..@font-face {.. font-family: momentum-ui-icons-imi;.. src: url(../icons/fonts/momentum-ui-icons.woff2?cfbc703607d01c4cf50ebc15ae38caea) format("woff2"), url(../icons/fonts/momentum-ui-icons.woff?9873000571ebc8c8e56660207f44248e) format("woff");.. font-weight: 400;.. font-style: normal;..}.....icon {.. position: relative;.. font-family: momentum-ui-icons-imi;.. speak: none;.. font-style: normal;.. font-weight: 400;.. font-variant: normal;.. text-transform: none;.. line-height: 1;.. white-space: pre;.. text-transform: none;.. direction: ltr;.. -webkit-font-feature-settings: "liga" 1;.. font-feature-settings: "liga" 1;.. -moz-osx-font-smoothing: grayscale;.. text-rendering: optimizeLegibility;.. font-smoothing: antialiased;..}.....icon-lg {.. font-size: 1.33333333em;.. line-height: .75em;.. vertical-align: -15%;..}

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	downloaded
Size (bytes):	87535
Entropy (8bit):	5.262801903047628
Encrypted:	false
SSDEEP:	1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:vHNwcv9VBQpLl88SMBQ47GKO
MD5:	C9A1B0AA0167C8A4DF724D18D06814A8
SHA1:	F3F468CCF735476C87E3B49E274EB3752A884607
SHA-256:	7AA6B0E08F48A0F95D8DF7EA89E4CBFE1EF3D1E8C0F7373F7F25EDFB4E4A325E
SHA-512:	05352A89084C3B747C375EEA2107B9B3C660FFB5989D48F10EE30E4ACF917DB21FA7CE56F9B385DE0FCFD0873C4C4E9D96C48F2F38E26D5CD5DD28ED792C3E06
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remov

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-JD0JR2ZC3V&gacid=1194020864.1719991435&gtm=45je4710v891022994za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=988567100
Preview:	<html></html>

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.6416041678685938
Encrypted:	false
SSDEEP:	3:TMQ+Ogn:AQg
MD5:	1228A5187B0617B0A4E95505F01DAE39
SHA1:	B66ED48843044830C12570F5A843786A3FC368FB
SHA-256:	0739B17B1053DE387D55795753300A79626787634F8C909277EFFF94D0E3F154
SHA-512:	0DDE42E5007CE4840DCDB356400347011DCD4C5E3FBC1FF04B66B173CE7BF3D88077B584FC97BCFE664706C8F6FB76410ABF8D6145394C45778D46FAC343DC7D
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/muse/noop.js
Preview:	function noop(){}.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	19744
Entropy (8bit):	5.184552025196974
Encrypted:	false
SSDEEP:	384:G9nSO4fwZ8S+ZmT94agRvFZ14L84qszOTF/JrijKJV9:PfwZ8TZmT9ovFv4L84qszOTF/JrijKJP
MD5:	E42E74D36E482AA12470E0FFD5F71B06
SHA1:	CBCCBEB4C8F0EB313A67247FEE6F36E229D8EA1D
SHA-256:	93CCBA0CDEACB4C61AA86F107308579FFD27B954D1AF72B74B6E0A52804DCEC7
SHA-512:	C23A559F0F84A4B58A433B7101B769E87739AA631E5B6E11B811561E65B1CCC124FA3C8500E409066BB6AC6BDBE942F65CE39B5597AC2F1538B699F9B1D13C86
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/style.css?id=1719991448287
Preview:	:root {...--primary-color: #fff;...--primary-bgcolor: #0f0f0f;..}....@font-face {...font-family: 'imichat-icomoon';...src: url('../fonts/icomoon.eot?ktzfl3');...src: url('../fonts/icomoon.eot?ktzfl3#iefix') format('embedded-opentype'), url('../fonts/icomoon.ttf?ktzfl3') format('truetype'), url('../fonts/icomoon.woff?ktzfl3') format('woff'), url('../fonts/icomoon.svg?ktzfl3#icomoon') format('svg');...font-weight: normal;...font-style: normal;..}....[class^="icon-"], [class=" icon-"] {.../ use !important to prevent issues with browser extensions that change fonts /.....speak: none;...font-style: normal;...font-weight: normal;...font-variant: normal;...text-transform: none;...line-height: 1;.../ Better Font Rendering =========== */...-webkit-font-smoothing: antialiased;...-moz-osx-font-smoothing: grayscale;..}.....icon-type-7:before {...content: "\e914";..}.....icon-menuicon:before {...content: "\e906";..}.....icon-menu-icon:before {...content: "\e912";...color: #fff;..}.....icon-tick

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	downloaded
Size (bytes):	55888
Entropy (8bit):	5.351228531979415
Encrypted:	false
SSDEEP:	768:l0aWa2QZ7Jj/9G9Fv61nwCyvJHGlWHXuvL7APC9hXERiGMa:CTa2QZFj/9G9Fi1AtGWWL0a9hXEk8
MD5:	FD3555E260F8448418C5885226AED36C
SHA1:	A1E0DF782F8086E7666120B07212BF46137FDBA6
SHA-256:	60F5F911FD8F366F29390166716A1977430D5472B02B6A1298C818096D7D2AAC
SHA-512:	50A4C7CE61517A1D6DD869857FA9F3C4BE598F789C5CC13614F70D3EAE8350D12873069B3B941F03DE8580E23315C325B71FF377754A199E6B5A9FEC721D47D7
Malicious:	false
Reputation:	low
URL:	https://proxy-service.actblue.com/lib.min.js
Preview:	(function() {.var l=void 0,m=!0,r=null,D=!1;.(function(){function Aa(){function a(){if(!a.Dc)la=a.Dc=m,ma=D,c.a(F,function(a){a.qc()})}function b(){try{t.documentElement.doScroll("left")}catch(d){setTimeout(b,1);return}a()}if(t.addEventListener)"complete"===t.readyState?a():t.addEventListener("DOMContentLoaded",a,D);else if(t.attachEvent){t.attachEvent("onreadystatechange",a);var d=D;try{d=n.frameElement===r}catch(f){}t.documentElement.doScroll&&d&&b()}c.Tb(n,"load",a,m)}function Ba(){x.init=function(a,b,d){if(d)return x[d]\|\|(x[d]=F[d]=S(a,.b,d),x[d].ka()),x[d];d=x;if(F.mixpanel)d=F.mixpanel;else if(a)d=S(a,b,"mixpanel"),d.ka(),F.mixpanel=d;x=d;1===ca&&(n.mixpanel=x);Ca()}}function Ca(){c.a(F,function(a,b){"mixpanel"!==b&&(x[b]=a)});x._=c}function da(a){a=c.e(a)?a:c.g(a)?{}:{days:a};return c.extend({},Da,a)}function S(a,b,d){var f,h="mixpanel"===d?x:x[d];if(h&&0===ca)f=h;else{if(h&&!c.isArray(h)){o.error("You have already initialized "+d);return}f=new e}f.kb={};f.X(a,b,d);f.people=new

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 260x260, components 3
Category:	downloaded
Size (bytes):	16716
Entropy (8bit):	7.533526864517167
Encrypted:	false
SSDEEP:	384:d1nDLCYNg7rOved6YPVzJe5hlGvUgo5K+IXh8C0yhQ+Fd2JZJD:d1iYy/W7wzJe5uUg+KXh8DyhQ+FQD
MD5:	C244BC3F6EBE6D1991DDCDF3559BC04D
SHA1:	C2B59F13A06C2327F0463C97D3BAAA4D6871F191
SHA-256:	3FA6882C5639F7524D6863DC91CFA74A45048F639DADCE6B3BEB3B7528BB7327
SHA-512:	5FDB8D48BFCD9A9C398AB6C834F397D2836BE2CC6AAC285D4C3B64E889FBFE0122E3441E55ACEEF1E387051FC1B9E98646E26677DD8D37BACD7053D574666DEB
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/images/default_group_icon.jpg
Preview:	......JFIF..............ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL...................................-appl................................................desc...P...bdscm........cprt...l...$wtpt........rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt.......0ndin...<...>chad...\|...,mmod.......(bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc............skSK.......xcaES........heIL........ptBR........itIT........huHU........ukUA........koKR........nbNO.......$csCZ.......6zhTW.......LdeDE.......XroRO.......hsvSE.......zzhCN.......LjaJP........ar..........elGR..."....ptPT........nlNL........frFR........esES.......hthTH........trTR........fiFI.......0hrHR.......@plPL.......TruRU...$...fenUS........daDK.........F.a.r.e.b.n... .L.C.D.L.C.D. .e.n. .c.o.l.o.r ..L.C.D. .............L.C.D. .C.o.l.o.r.i.d.o.L.C.D. .c.o.l.o.r.i.S.z...n.e.s. .L.C.D...>.;.L.>.@.>.2.8

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65324)
Category:	downloaded
Size (bytes):	163746
Entropy (8bit):	5.10583996483331
Encrypted:	false
SSDEEP:	1536:Jw+v5/PonJPzpXDX7ZhdI/XEf2k8GdoRBvGafUafkCf6Yugv:Jw+v5/PonJPzpXDX7ZhT+sA
MD5:	A09E62A12EBF385B499624DDD0F8BC37
SHA1:	BB0418FABBA964F7C1B75BCF8A40C373ECBAC968
SHA-256:	BED6DAC47EEFE22B067A636A678D2554FDA649192AF31EA2369CEB57A84B93BD
SHA-512:	154DAD2C8B3F30B8763524145A1B15D013872E9856E4E1786134559EC409E0146E9B5A9A1A7315446EF845388CA2997A66380FB710B7D1FDAA89A5AFE5C015DA
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320g
Preview:	@charset "UTF-8";/!.Theme Name: BSD Wordpress Starterkit.Theme URI: http://www.bluestatedigital.com.Author: Blue State Digital.Author URI: http://www.bluestatedigital.com.Description: Custom theme starter kit./@font-face{font-family:NNColroy-Bold;font-weight:700;src:url(assets/fonts/NNColroy-Bold.eot),url(assets/fonts/NNColroy-Bold.eot?#iefix) format("embedded-opentype"),url(assets/fonts/NNColroy-Bold.woff2) format("woff2"),url(assets/fonts/NNColroy-Bold.woff) format("woff")}@font-face{font-family:NNColroy-BoldItalic;font-style:italic;font-weight:700;src:url(assets/fonts/NNColroy-BoldItalic.eot),url(assets/fonts/NNColroy-BoldItalic.eot?#iefix) format("embedded-opentype"),url(assets/fonts/NNColroy-BoldItalic.woff2) format("woff2"),url(assets/fonts/NNColroy-BoldItalic.woff) format("woff")}@font-face{font-family:NNColroy-Medium;font-weight:500;src:url(assets/fonts/NNColroy-Medium.eot),url(assets/fonts/NNColroy-Medium.eot?#iefix) format("embedded-opentype"),url(assets/fonts/NNColroy-Medi

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2274)
Category:	downloaded
Size (bytes):	164564
Entropy (8bit):	5.4699764578100165
Encrypted:	false
SSDEEP:	1536:zfJipz06ag/LFah8dJry3iBTv9VZXaorC3MGs5E7J015wP6YJpSwipPKNGPUdf6q:lipjHy3a7JrC3Ts5MJy8p1iZODE6ykKY
MD5:	CF122D82A264C9436B4EF734CC8CC567
SHA1:	70CC6B1F5976CB3D2A0F3335CE465343D3ADA5DA
SHA-256:	5D5C276508E9441E5FD65BE3DE18B6A69B23B2A74023E183AF0AC17746D0C02D
SHA-512:	285F8B7AD4FF969B0690BF7ECE8A682363EC08750A9E320F474C2665B99FCDE7B6EDC8D83E0EC6B32BD367E844044CE48CA2F7878691F3F190FEB030164B078F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.k9jHwLanE3c.es5.O/am=MAykAQ/d=1/excm=_b,_tp,payframeview/ed=1/dg=0/wt=2/ujg=1/rs=AMitfrh_qUwjiQVINfi65XBOGFkroArTJQ/m=_b,_tp"
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1a40c30, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var ha,Aa,Ga,Ma,Na,Qa,Sa,Ta,Ua,Va,Wa,Za,$a,ab,cb,eb,ob,qb,Eb,Hb,Jb,Pb,Qb,Tb,Ub,$b,ec,ic,kc,mc,oc,jc,uc,Ac,Bc,Kc,Jc,Mc,Oc,Pc,Yc,jd,ld,Dd,zd,Fd,B,Id,Ld,Td,Yd,ae,be,ke,me,Be,De,Ie,Xe,Re,cf,df,ef,hf,jf,rf,vf,zf,Af,Bf,Cf,Df,Kf,Lf,Sf,Uf,Vf,Wf,Yf,ag,jg,og,aa,pg,qg,rg,tg,ug,xg,yg,Eg,Fg,Gg,Kg,Ng,Lg,Mg,Og,Pg;_.ba=function(a){return function(){return aa[a].apply(this,arguments)}};_.ca=function(a,b){return aa[a]=b};_.da=function(a){_.p.setTimeout(function(){throw a;},0)};._.ea=fun

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	3426
Entropy (8bit):	5.231978845095824
Encrypted:	false
SSDEEP:	96:c9iLJk5XpYUArOFtpd4ted4tE/EdmziLRNRjyKsutxztCTE:SiVk5Z/ArOFWLs/AnDRsE
MD5:	D631D9B4D01E91AEE8C68C664FDFC049
SHA1:	5B1A15A349C02BEB766865F0F11D05D777ECEE7B
SHA-256:	D0B03641EF0C880EE716F13E1B9304C22D50A41A14EE69DCD306D6D89112CDFD
SHA-512:	551927B33BB4FDE97BB84A9277C2EF124DBD992A9C27B13D85649F21AFB01FB3FAADAD7ED9AB01409E35B175EC4FF0B6357F60C679225B685DA2F1E0583FCB21
Malicious:	false
Reputation:	low
URL:	https://web.joebiden.com/user_files/user_files/000/065/504/original/Decimal-Medium.otf
Preview:	OTTO.......`CFF Xs...." ....DSIG.......p....GDEF.-........."GPOS......(...hGSUB..!......!.OS/28,.....P...`cmap\|..........jhead.=#........6hhea.......$...$hmtx...;...,....kernV.f....@....maxp..P....H....nameji..........post......".... ......3...._.<...........9.......q..@...............................@.@......................P..........^.......X...K...X...^...,...........................H&Co....... .8..................... .................@.............@...........G...........M...........l...........z.....................Z.......................................................................+.............@...........G...................................................................................%...........8.................................>.......................". ...........B...........^.................................$.,.........$.,...........P.........V.T.................................(..........."...........&.............4...........b...........x.........&..Copyright

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3511
Entropy (8bit):	5.038742383798734
Encrypted:	false
SSDEEP:	48:mjKddleSm/8CnYHmThunHgYyrrDfO8ixC7pWs:rddlev5nrIHgYSwxC7l
MD5:	6233E8887BD87295CBFE8A2E89555D3A
SHA1:	1AB32DAD0A9DE0EF9909F04C064EC34D844293CD
SHA-256:	8B68C940DB061BBEA0BB8A7004CA1ABF47BF18D65040211A908583213041F528
SHA-512:	97CA38885F937E8166B098D071E9413156E58A2341229780B4908B1E3E87BBEEC33B4C3A599FA11EB76D5D54A8632EEB161E3713A06DB56FC9722679F60DC024
Malicious:	false
Reputation:	low
Preview:	[{"SYMBOL":"..","DESC":"grinning face"},{"SYMBOL":"..","DESC":"grinning face with big eyes"},{"SYMBOL":"..","DESC":"grinning face with smiling eyes"},{"SYMBOL":"..","DESC":"beaming face with smiling eyes"},{"SYMBOL":"..","DESC":"grinning squinting face"},{"SYMBOL":"..","DESC":"grinning face with sweat"},{"SYMBOL":"..","DESC":"rolling on the floor laughing"},{"SYMBOL":"..","DESC":"face with tears of joy"},{"SYMBOL":"..","DESC":"slightly smiling face"},{"SYMBOL":"..","DESC":"upside-down face"},{"SYMBOL":"..","DESC":"winking face"},{"SYMBOL":"..","DESC":"smiling face with smiling eyes"},{"SYMBOL":"..","DESC":"smiling face with heart-eyes"},{"SYMBOL":"..","DESC":"face blowing a kiss"},{"SYMBOL":"..","DESC":"kissing face"},{"SYMBOL":"..","DESC":"kissing face with closed eyes"},{"SYMBOL":"..","DESC":"face savoring food"},{"SYMBOL":"..","DESC":"face with tongue"},{"SYMBOL":"..","DESC":"winking face with tongue"},{"SYMBOL":"..","DESC":"squinting face wit

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://hexagon-analytics.com/images/151717.gif?bk=19482a20cc&tm=84&r=308450253&v=107&cs=UTF-8&h=secure.actblue.com&l=en-US&S=9310b542c4dd2dbd7e7d9c462fc9fc73&uu=cfa36a9dc525de60da3844cb1fe06c2&t=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&u=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Win32&to=240&d=60&ce=true&tp=0&ol=true&pr=Gecko&ps=20030107&vd=Google%20Inc.&vs=&hc=4&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=864980724ce0e4610faf43e7780d8361&z=z
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 310483
Category:	downloaded
Size (bytes):	83202
Entropy (8bit):	7.997030038635484
Encrypted:	true
SSDEEP:	1536:gbCiFwzwC27YHUhHndv0HtSxdsxlamQ59YKANbFqgbIC866+UrbcNXVY28t1MIYw:gbtXY0Z6YrXIfbIC8BkNXVv8thV
MD5:	ABD7A27A04FADBAC025196F271FBF82F
SHA1:	F3A1C54AE098424308BC59B131D6FCCE410CA6E1
SHA-256:	96C760DC02F29253813BFDEA2EC7607A632221FFBA99703AEEECB152C2C4C239
SHA-512:	D8B23A7A78268DB48960FCECC9841FE6A66CDD7E24CCC8538D185581FE3FB06922860E2D0A24218E5F8966709D1A3E9731C0D1273E99EA3BC60953FB131B2BA4
Malicious:	false
Reputation:	low
URL:	"https://www.paypal.com/sdk/js?client-id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&locale=en_US&disable-funding=credit,card&intent=capture&commit=false&enable-funding=venmo"
Preview:	...........}...H....+.v.....s.!.a..mb....$..O..(..#..1..oU_j........Guuuuuu..d.b7.....u.../........h...~o84..e..9.6.Z...Y...>o7{..1.9>;.o.A....%.g..V.(.K.;"~DJ.?......q.QDH)X..E\..U.Z..N.Y.........&1...~.......6.?+........7.. ..W5.....Ntr......Z....8..8.a...G..k..gm.....Z.x%.+.....Q....{l....&.V.j\...WF6..c[.......u.<..FFP.L\.t.`N....{&.bFB..#..qKb+\.+h/.U.h....k[v.4'...{.....6...A/.]....no..1_...z.bi.`....2.u...D....Ue..vz~an.......1..0..&b....}.o..v..bL..6.WIzJ.6.n..'&...<.....I..=45x.,.X.b...Q...E./..}CPj.....8..$.....D...../....C.Y.8..<QgF[.%.V+...U.R.2.EL....&..........\|..F.X.+.mM3c@gd.5V.u..c.D\.%.../.D....4"... ..Qe..u].(e....3.po..{....u......+.%..8..vB]7q.v.[.m../\|...9.?....u...O.X..;.T.E..'.5..3..(X.#.v.sxsyqf....'0G..w.E._.M.0"...'._k7.".~kj.Q.C).8....?K..P)0J..X.n...E./.F..2..lDT....Qd..>o}%..:....Y.....o....W.J'E..@h.$mr.zP..{F.....B.......4......d...Ns..S,B.+..............).t.r..v..D...6....1.....\W.5lj.v.......X.&...././

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (9332)
Category:	downloaded
Size (bytes):	438288
Entropy (8bit):	4.911324096204055
Encrypted:	false
SSDEEP:	1536:1Miy12vT1e+fz9YD6lTLZycAiBX9zyACYLlV3ISGFA6OYb5VtbxR/oSqIr5lrsyA:5BvT1eO7i1/neefUVh/iR7u
MD5:	28C861DCCCBAC7D261ACC7180B95395B
SHA1:	7CAE22EB86E84D645582ABDCD1BF37055954B5C2
SHA-256:	CB91A0C40C8903B3E7385B6E634B05B298143A860DA2E2DEC25F5305F35D245E
SHA-512:	83AB087BF0E9C50BF024B312C9D6ABAA8BF1E06A756DA5E228FFEE8BE12C9F6897375BA89A890BBECAF50C2943DB9D1590A960904B948052418589591C62F8ED
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/css/style-embed-whitelabel-v3.css
Preview:	/.The Action Network Whitelabel Embed.Since Version 3.1.0.Authored by Jake Caputo..You can look, but don't touch../..gradient {. background-color: #063b54;. background-image: -webkit-gradient(linear, left top, right bottom, from(#063b54), to(#0096db));. background-image: -webkit-linear-gradient(left top, #063b54, #0096db);. background-image: -moz-linear-gradient(left top, #063b54, #0096db);. background-image: -o-linear-gradient(left top, #063b54, #0096db);. background-image: -ms-linear-gradient(left top, #063b54, #0096db);. background-image: linear-gradient(left top, #063b54, #0096db);. filter: progid:DXImageTransform.Microsoft.gradient(GradientType=1,StartColorStr='#063b54', EndColorStr='#0096db'); }../* RESET -------------------------------------------------------------------------- */..gen_wrapper {. box-sizing: border-box; }..select.wrapper_select {. width: 160px;. cursor: pointer;. letter-spacing: .25px;. color: #434343;. border: 2px solid #b0b0b0;. transition: al

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1788
Entropy (8bit):	4.357717155579518
Encrypted:	false
SSDEEP:	24:tFn8jxMizmZv9gTS/1dIxt3vW+qbDaYqMu26pp4LsOZSc9E5zyfnX0zrK/0lV8sm:mmBrEvWFaHM5y4LHFE5Ofk/ccROSfErn
MD5:	8191AFEC51483E108A2DC5F17FB0EFD0
SHA1:	75D07F097932D726A37FA35DCF340C82D794792E
SHA-256:	F383D270511912B2DA11555947CB3E6012E6375CB5F0D90493C25F6048169073
SHA-512:	65E8E8EC345492F2E349CBE831B7B0091C81589322C7DAAB2D11F704DB50CD1747514E262D0678FABAA72EE2466FEA9A79A1BDF8BA8BF7CBFDB53B08C3D8C9C9
Malicious:	false
Reputation:	low
Preview:	<svg width="41" height="17" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M19.526 2.635v4.083h2.518c.6 0 1.096-.202 1.488-.605.403-.402.605-.882.605-1.437 0-.544-.202-1.018-.605-1.422-.392-.413-.888-.62-1.488-.62h-2.518zm0 5.52v4.736h-1.504V1.198h3.99c1.013 0 1.873.337 2.582 1.012.72.675 1.08 1.497 1.08 2.466 0 .991-.36 1.819-1.08 2.482-.697.665-1.559.996-2.583.996h-2.485v.001zm7.668 2.287c0 .392.166.718.499.98.332.26.722.391 1.168.391.633 0 1.196-.234 1.692-.701.497-.469.744-1.019.744-1.65-.469-.37-1.123-.555-1.962-.555-.61 0-1.12.148-1.528.442-.409.294-.613.657-.613 1.093m1.946-5.815c1.112 0 1.989.297 2.633.89.642.594.964 1.408.964 2.442v4.932h-1.439v-1.11h-.065c-.622.914-1.45 1.372-2.486 1.372-.882 0-1.621-.262-2.215-.784-.594-.523-.891-1.176-.891-1.96 0-.828.313-1.486.94-1.976s1.463-.735 2.51-.735c.892 0 1.629.163 2.206.49v-.344c0-.522-.207-.966-.621-1.33a2.132 2.132 0 0 0-1.455-.547c-.84 0-1.504.353-1.995 1.062l-1.324-.834c.73-1.045 1.81-1.568 3.23

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21822)
Category:	downloaded
Size (bytes):	21984
Entropy (8bit):	4.754495784949266
Encrypted:	false
SSDEEP:	192:sq3P/8W+ab2edrKeTUKIErArKlcZJVrJ3ee+cR6waWm215bvfwf5DrkHUa2:Lk5yWeTUK1+KlkJ5de2UWmyTfwYUa2
MD5:	FEDA974A77EA5783B8BE673F142B7C88
SHA1:	B71D1C7C315B67C614563382D1C2A868AC14D729
SHA-256:	0FB1BBCA73646E8E2B93C82E8D8B219647B13D4B440C48E338290B9A685B8DE1
SHA-512:	E64CD0C0FF8D301C0F6BD9FE60934362DCE7BE85AF57C9C3E1C719E42F8784CF707BC9025B58FD1F341A6DEEB27490E3FA8164AED9CC76605323A602544C8220
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.2.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.2.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.2.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff?v=4.2.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.2.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.2.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{padding-left:0;margin-left:2.1

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 6 x 5
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	3.8488255736198
Encrypted:	false
SSDEEP:	3:CN+ltRPQEsJen2sSX:xvQEsJ42sSX
MD5:	E4D673A55C5656F19EF81563FB10884C
SHA1:	1F2D8ED221D39329251AD3A6FF1EDB20B7219443
SHA-256:	F3A8992ACB9AB911E0FA4AE12F4B85EF8E61008619F13EE51C7A121FF87F63B1
SHA-512:	E0B03411282A979CF772F700D9E5634B0C25C612E380AD33C0D59059B1B479D027016D5BEB148403EF185430DB35F5FAED362F36CE2C8ECAD0E6D8E30CEA97B4
Malicious:	false
Reputation:	low
URL:	https://pixel.wp.com/g.gif?v=ext&blog=219174945&post=466&tz=-4&srv=democrats.org&hp=vip&j=1%3A13.5&host=democrats.org&ref=&fcp=0&rand=0.5232371462636034
Preview:	GIF89a.............!.......,............bx..j....;

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 36364, version 0.0
Category:	downloaded
Size (bytes):	36364
Entropy (8bit):	7.992064944803376
Encrypted:	true
SSDEEP:	768:ucugSOozPjN65g48QI71UAvO0/CKWSCzuCM8Rn6/21zRrLMi9O:ugczPjExwvO0/CVuCS6cL
MD5:	7A93DA931FC0AA636A8DFFFD4A3CE89A
SHA1:	E8704976A88B8A016F941EB67820F36F5CFD209D
SHA-256:	A41440D33755620CCBB46983DFA069CF951DB95E55854E741445065C77025E3D
SHA-512:	C0C2CD0CE84359D9545C2DAE1BB4044B6403436334379D07139E1DBB15C3197A3AC2B0E6E748FBF58CB664DF8594F960A3C50BF18B2269D0EC981C48E6DF6CA0
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/fonts/MyFonts/CheltenhamITCProBook.woff2
Preview:	wOF2OTTO...............:...........................Q.......`..(.6.$..,...... .........@_5......HM.!SUU.kBp.....O...o~..?..o........q=.y?.C...?..7...f..$.ix@~CB#C...'...MD~...o......v.4)...T.\v....%.R}H<.H...w....y.4B..<.m......L..u.R..2......O......l.....UD.Hk.R..v.)HS..R...z ."F....$.X.......n..$zt.....M......R.t......iM...fY.......c..!.....`..X...)6-]HYyIy.....V.S...\|sG....Y.;\|..}...b.\t.P.M6..y.z....D.......=..\.....!.q...x@.....Tp.(......M.m..A....5..t...J.....QHq.....)i..e.k...j..8.........i.k'iz..Xr.u:B...#........s_I.....0...s.....6..}C...)..V..Q.Q.u.....=i...M.5.,..P..lI_3.u..R.\D..b. . ..B...W6.gW.{.z...A.&N......wt.:...Pz\=J.g..........uo....bD........R.../GN"......Wf.).....C..S.... ...L.H..JA..3............;....g........#......zy......S.A.P....X.C..3RA$e..,...f.\..Z....U.(.\C[Ybo.......x.!.9R..;I.<.....I..a.0..#.0...~..[./u.I.......X.M..^i$. ....t..]....e.uJ...=k...;K.=S@.....(......W.[.O.:..B.$...?F..yI......BTH..!.d.<P..Ac

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	227457
Entropy (8bit):	6.1228384703093335
Encrypted:	false
SSDEEP:	3072:paMkj1a3zzLEiGLcJNG8/SKKQj/M51HebVoFH9BKBcLEfc3NJjYrpIoGYQbEzNx:XkenEiGg3HSQVefXL+cdaZGvE/
MD5:	B4E8CA17AD0A74052F59D6F812B71D2B
SHA1:	1CFAFF3AF9A72F645DB354FC7F038BB20B13FEBE
SHA-256:	52BCCE15CF14C8B809663A40F4A26CE0BC401A26A950D40167943A81386A7DA7
SHA-512:	D96993AB59259FFC2CB324A8FB166D9DAFA2F44AAAD2CEDA6E921F1547B86228D0FFDED7A0DAF1777E7FFBD11011422B84D4F7960E3CB38B12385B4460D8F43D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 300 126".. style="enable-background:new 0 0 300 126;" xml:space="preser

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24856)
Category:	downloaded
Size (bytes):	24857
Entropy (8bit):	5.094795246902747
Encrypted:	false
SSDEEP:	192:iiomR13AkLyjpKFRYpldr7pqEXKYWFbzZLCr3UkSJ20waVo0TbQUGhuuUvhBgFPY:1R13BGiuHSF+3UF4Ao0XQUGhuug0a7R
MD5:	484C7548AD8504E2AAA0ED9B33382895
SHA1:	9CED0838B2E35A5E905ADA6E6B17F15C5DC920C4
SHA-256:	8024871CAB1CABAAB0F6555F2E5CC4604581CF21AFEBF5AFCCA37BAC09DF54B9
SHA-512:	96A94B3ADFD9FD096BF5BC32939B55C787901DF6D13B777F92D1AFAAC3F025BB6BCE18922C105543443F58951E397FF66730467BE05A8DB9FE92865EA630954A
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/marketing-dd16c0d3d85b22d9582e6ec7afa5bc45cdc6e6122d98f613dfc78afca2b0b715.css
Preview:	.actblue-bignumber .number{display:inline-block;width:.7em;text-align:center}.actblue-bignumber .number{display:inline-block;width:.7em;text-align:center}.actblue-bignumber .number{display:inline-block;width:.7em;text-align:center}.actblue-bignumber .number{display:inline-block;width:.7em;text-align:center}h1,.h1,h2,.h2,h3,.h3,h4,.h4{letter-spacing:-0.01em}h1{font-size:46px}h2{font-size:31.5px}p{font-family:-apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;font-size:20px;font-weight:400}.actions{font-size:1.2em;color:#fff;text-align:center}.actions a.btn{color:#fff}.actions .or{padding:0 1em}header.main,footer,#site-wrapper,#contentArea{margin:0pt auto;max-width:1582px;width:100%}body.homepage #contentArea,body.interior #contentArea{padding:0px}#contentArea .container-fluid{margin:0em auto;max-width:980px}#site-wrapper{overflow:hidden;background:#fff}body>section{padding-bottom:5em}.btn-large{min-width:200px}.triangle-down{border-top:25px solid #eff3f6;border-right:25px solid t

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9871
Entropy (8bit):	7.951995818736147
Encrypted:	false
SSDEEP:	192:nnCbNdAb3MmWX684DG3MrSKpudIE18MYo+8uql05q7vq4B19DSz2XM/Nfbx:AAbcuU1m69Yj8z0IvBLXMRt
MD5:	4094C83118CEB9118CD09EF71EDFF2CB
SHA1:	1DB129B2C39BF995ECC95FCADC58D9A9E31C5F60
SHA-256:	C5EC514A3255C75360F44E890C40044B0BC0F41FA4329DAE92B43BBD00BF22BF
SHA-512:	FA47E9F40D69F5F0A84FFD4FE372F14D1DEAD640290435185310380172E3657FEBB5A35E4E47C348797771B0C655B62982A1AC194994637E4CD4B2C06A20F1D3
Malicious:	false
Reputation:	low
URL:	https://joebiden.com/wp-content/plugins/dem-online-theme-extension/favicons/android-icon-192x192.png
Preview:	.PNG........IHDR.............R.l...&VIDATx..}.v.:.....`;9......}....N..$......@.v48.%a..X....j.5...........we.\......B...F!@.C....Q.P..(.(xh...<4..........B...F!@.C....Q.P..(.(xh...<4..........B...F!@.C....Q.P..(.(xh...<4..........B...F!@.C....Q.P..(.(xhT...@...k_..q...".A~)....g....}.]......~.!>G.v......@..PvcH^..gy..-wJ..#..^.#.....w.........H.<...&.!.@.....q....(_........i..Vv.s..?....."..W9.Kz..f......."..Z..D.!....h....a.0H.K.S..O....,.B..A..k...jK...1L..X.Ev...V'....".l.%...s/.O.{y..@........7K..jD......`-......`M..T..X7.....8.\|.L.Y.C.r....?...........!#....Q".,.tE........OK..O..,..-.W...Am.F....&....@..%. .>.T.....N..G...}.......,>....J..[.M. .p.E.......4..l..5...._...+.E....Mc..'R.p(.,.*..h....h.}....._.. ..<...C..,@si..nP.q....tq...y.0X/..z..........._...-V......u^/..`,fcu'..9..W..y.o{..].k<......../.#9&@.D.M...6. H.(....uEX/...-....T...,....i.. .@5.)5.F...._...G.w.m....zl....c....=....k.........C.......v..../.............

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9728), with no line terminators
Category:	downloaded
Size (bytes):	9728
Entropy (8bit):	5.588133135159845
Encrypted:	false
SSDEEP:	192:yey3gh25P3H1SP3k1QP3v1fP3Q1iP3S1+P3b1LP3Y1kP3r1VP3BO1jP3D1WP3H1t:y33gh25tSMQ1fwiO+5L4k5VsjBWdd7gy
MD5:	1A787364CAF86B802E82051ACBA29611
SHA1:	D195BA62FC4037923AC4F0149794AB731D353199
SHA-256:	40678D09467DA9272503CD7561E49F98553C2E80A6728FFFB5007DC967CA8F3D
SHA-512:	58922102AC88A29D99D0156323863B4825C82E75999F74032AAD65F667474E4687F8D5205EAEACCDCE16E45017AD2E63E1256020B0AB303853ACAF51CD229399
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/860973240?random=1719991417521&cv=11&fst=1719991417521&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za201zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":7776000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s227088756.1719991386","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s227088756.1719991386\u0026tag_eid=44800267","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1seHmwJA!2sZvujeg!3sAAptDV4Xc95f"],"userBiddingSignals":[["8648140785"],null,1719991418969264],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=160410320364\u0026cr_id=694209706785\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGH

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 172 x 172, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7255
Entropy (8bit):	7.961496297719506
Encrypted:	false
SSDEEP:	192:yAlHrRQG6boOTgRDW9K4b1apCfUQJmq5nvJpg:yOztTEEYcQJmAxK
MD5:	57638846D5A08501773E0441A6AE8ADD
SHA1:	D2399EAAAF08E492F335C33025FAA2DF47C5FB3D
SHA-256:	B55DFCEBCA4242BBF358CAB7F1A94E89B86F29D5C11FC8D141436A673E1EB141
SHA-512:	5F28E59DB7CDD80024C52689D5B9B89759ADB59848772AA8910741084094A8BD2C37348E198B645CED8C38716EA8DA635D162B3CA3EC6930BA077F7D31F6D7A5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............1G.....sBIT....\|.d.....bKGD..............IDATx..y\.U....w.A.Qs....-E@4...6..l.6k.y.....1.)...)......6..WP3E6.T.r.4w.Av....ITD....w....u_/....\|}.>.{~.\|...+.....{(.P......!H{W.].` .....s?W.5.~..J@.Fh..S.&.c..Xl..D...'....?...8...=....M...H ...A....@.D..X.;(....Qu......`o.......x.r..1...n]D..,`.R.....Q.f;e..'..p,........d......r5R."5....2.....m...t$3@.3.....$c.>b.<..QM..l.wAx......r.....v.X..>$%..lgT...{}f..\|....G...A2v.#5f....I...<...u#R>.$.lw....[X+........-..9^.W<..s..f....@..A.KI.Vk.3..}.vt.'.........ig.......q.mg..... ...j[.......8B.....F!.7.L0..F...Q..0..........e!....lw:(6.K..z.M.1..pn.N...\|..m.+..q..Rb.i.#..9.......].....%....:f.#..\|.M....@W.]qqN.\|....f;......4_..W..wf.........u#+.v..E......D...i.A.vnw..0.'g...6.X...0..$..a.+..v..HL...\.q..nZO'..$f..i.7.9.O...........9....-......._........Y..n.I#.5V..Y....v.Y%......~....&.*o.u..[.'!.<.....K....S....Sk.S]+)..Rt..3u.:YK......aOa...k....`...=.5c....8.N..nK...

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	25718
Entropy (8bit):	5.2683239626721905
Encrypted:	false
SSDEEP:	192:eXmJKWW+EZcMYS1NqjCz/JYHHTcZqRqWRXdqZsTaAWNslQCfEGHRmy4kWQcjXFKO:dEWBEZcMYS1bZE3ZdqZUaA2kWFLPfJ
MD5:	143A21C020B742773E05771F225CC373
SHA1:	2F08FE69B0E56593BEB0403C6DB14436738F6BD5
SHA-256:	60E40166650A4EE4F1EB9477679ECD25C1F75683BEA358540803D28DFED2BA44
SHA-512:	635E770A1E6BD3F48DC8DAE1F0999A30A2916C989F8EF3A6C1B116AF1076142FB4D296BD8B6B444283A64B3D0F78657839FF12AB08859CE13F75A211385F8024
Malicious:	false
Reputation:	low
URL:	https://democrats.org/act/?permalink=update-email-preferences
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">..<head>. <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v22.1 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Act - Democrats</title>..<link rel="canonical" href="https://democrats.org/act/" />..<meta property="og:locale" content="en_US" />..<meta property="og:type" content="article" />..<meta property="og:title" content="DNC Email Preference form" />..<meta property="og:description" content="Submit the form on this page to update your DNC email preferences." />..<meta property="og:url" content="https://actionnetwork.org/forms/update-email-preferences" />..<meta property="og:site_name" content="Democrats" />..<meta property="article:modified_time" content="2022-01-18T22:05:52+00:00" />..<m

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10246)
Category:	downloaded
Size (bytes):	319996
Entropy (8bit):	5.5969348114245605
Encrypted:	false
SSDEEP:	3072:aR5Y4lgjBaiJ9iVVZLQOFmhf3A02jHgvLMzU467JXDBin0bukML/tAzLm/Qhen:t4kB+VV9QOFWGEHVin0qkML/tAzLm/uY
MD5:	CD2E3F3296704733C715414C0452461A
SHA1:	163B8F1FE876E21243595E9FB7028846F2CFACDF
SHA-256:	AE4323F6EDDA4CB03B62431EB3700F2F1844E79E20BF0B31A1A2B95CC4BA6E11
SHA-512:	AC84EEF7B1122C7FCB081236AE9B49108936B2EE39AA9E52C04F6A661A4678452444EABAC69D9DB1843EE1E479B18422B19D65A3DCB85AC895EA9CA0D5A2B8FE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-JD0JR2ZC3V
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":19,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4930)
Category:	dropped
Size (bytes):	1281801
Entropy (8bit):	5.602837786563789
Encrypted:	false
SSDEEP:	24576:UV0mp23MEEKEYk9ibryRAMPCZhrCTDhElG9sD2zNk:UV0mp23MEEKEYk9ibryRAMPCZhrCTDh8
MD5:	1B91281B220AB1A913CA529640ACA45D
SHA1:	5FC2F6003951FA3226DB53BE62F69207A79A0B63
SHA-256:	30BC025A9FA15CC336BC4FFA0EFE7BC074242B49F721BA882B362A9F3B06C330
SHA-512:	FA617B33999EF0FC75B042ADA02E91B885D1E3A77AA195BE0DF53D9A88CE15FF10B59DDAB71C39495E00450B7A8D5204FC53DB2BEEE24219DB19725D570790C0
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://pay.google.com/gp/p/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><script nonce="GWHUmHIGQOgd82wfFG68Pw">window['ppConfig'] = {productName: 'InstantbuyFrontendBuyflowPayUi', deleteIsEnforced: true , sealIsEnforced: true , heartbeatRate: 0.5 , periodicReportingRateMillis: 60000.0 , disableAllReporting: false };(function(){'use strict';function k(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function m(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=m(this);function p(a,b){

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	119825
Entropy (8bit):	6.14814941728146
Encrypted:	false
SSDEEP:	3072:PSzdL0OvYZCV66KBo61eXJmFNLbywtCrC+Kl:PadgC130eWLOBG+E
MD5:	2BD1519831D76C36890A3643DD62CA6A
SHA1:	80EE1FDBF774FAC8690BEA990B33CE97BB48155E
SHA-256:	9CE0022E5A6CCDCD874A6F7BB8EA173EE49B8AA2CC6B2495061D889EE32C97FF
SHA-512:	157A693901548125738E16637BF5A1D1CBA905D15AAD3A6F6201646B54EB992927F7F8BF0550E6143298E41F9A52EC9FBB058A0F6DEE08694F7683F5EBD67E36
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 230 230".. style="enable-background:new 0 0 230 230;" xml:space="preser

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18856)
Category:	downloaded
Size (bytes):	232510
Entropy (8bit):	4.948307479084312
Encrypted:	false
SSDEEP:	3072:vvTLwmeWYqUXxL/RTVWOE1iz4ldHwqsGo4r:nPwmjYlBRTVWycQSok
MD5:	4B02AF4B0ADB17AEFF59DADD9B29E431
SHA1:	B44E154C5CC4844B5637DAFBB25E8D01319FE518
SHA-256:	CB8AA01BC11EFF92F1C2E16B70A09856AF92BC607FD9A7251444BD50D9BA86FB
SHA-512:	6B1B31583F010CA2161E9A735DA7CB6051450E92841B833736077241AF6378036EA9C4BF936C8A3A500D292747232794860828F2C697AB4AC0E2ACE4473D5A11
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/widgets/v5/form/unsubscribe-4?format=js&referrer=&source=&style=full&css=whitelabel&js_inner=true
Preview:	/yepnope1.5.x\|WTFPL\|customized with https://github.com/SlexAxton/yepnope.js/commit/89d360496dd026072302a64d23c2b795ecef31ff/.if (!window.yepnope) {. (function(a, b, c) {. function d(a) {. return "[object Function]" == o.call(a). }. function e(a) {. return "string" == typeof a. }. function f() {}. function g(a) {. return !a \|\| "loaded" == a \|\| "complete" == a \|\| "uninitialized" == a. }. function h() {. var a = p.shift();. q = 1,. a ? a.t ? m(function() {. ("c" == a.t ? B.injectCss : B.injectJs)(a.s, 0, a.a, a.x, a.e, 1). }, 0) : (a(),. h()) : q = 0. }. function i(a, c, d, e, f, i, j) {. function k(b) {. if (!o && g(l.readyState) && (u.r = o = 1,. !q && h(),. l.onload = l.onreadystatechange = null,. b)) {. "i

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	226870
Entropy (8bit):	5.452936493117246
Encrypted:	false
SSDEEP:	3072:EBLeyZWZTBUIncwuP0bteuvQ+AMPpgArl0xYu5GpJnsO:EBLeyURBU7P0bvQQGArHu5GpJnf
MD5:	072B2C3ACF701DD53DF6CE69EA15C1A7
SHA1:	9EEFC6F1A848B8F10498B7DC298AF62646465F5E
SHA-256:	63BAE03AA97278ACB1D6F7863E593999BBDC5D280D2FA5A3050F234CE5EEE850
SHA-512:	30C4CE7EFC91156E8258E89BCE6ABAD64893E3304FEA99C64AF1C46DD2CF8F57CB154CC76FF5962BEF423C321707BD53ABBDAF42805117F6FFA870E91D1DC1C5
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	19744
Entropy (8bit):	5.184552025196974
Encrypted:	false
SSDEEP:	384:G9nSO4fwZ8S+ZmT94agRvFZ14L84qszOTF/JrijKJV9:PfwZ8TZmT9ovFv4L84qszOTF/JrijKJP
MD5:	E42E74D36E482AA12470E0FFD5F71B06
SHA1:	CBCCBEB4C8F0EB313A67247FEE6F36E229D8EA1D
SHA-256:	93CCBA0CDEACB4C61AA86F107308579FFD27B954D1AF72B74B6E0A52804DCEC7
SHA-512:	C23A559F0F84A4B58A433B7101B769E87739AA631E5B6E11B811561E65B1CCC124FA3C8500E409066BB6AC6BDBE942F65CE39B5597AC2F1538B699F9B1D13C86
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/style.css
Preview:	:root {...--primary-color: #fff;...--primary-bgcolor: #0f0f0f;..}....@font-face {...font-family: 'imichat-icomoon';...src: url('../fonts/icomoon.eot?ktzfl3');...src: url('../fonts/icomoon.eot?ktzfl3#iefix') format('embedded-opentype'), url('../fonts/icomoon.ttf?ktzfl3') format('truetype'), url('../fonts/icomoon.woff?ktzfl3') format('woff'), url('../fonts/icomoon.svg?ktzfl3#icomoon') format('svg');...font-weight: normal;...font-style: normal;..}....[class^="icon-"], [class=" icon-"] {.../ use !important to prevent issues with browser extensions that change fonts /.....speak: none;...font-style: normal;...font-weight: normal;...font-variant: normal;...text-transform: none;...line-height: 1;.../ Better Font Rendering =========== */...-webkit-font-smoothing: antialiased;...-moz-osx-font-smoothing: grayscale;..}.....icon-type-7:before {...content: "\e914";..}.....icon-menuicon:before {...content: "\e906";..}.....icon-menu-icon:before {...content: "\e912";...color: #fff;..}.....icon-tick

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (9332)
Category:	downloaded
Size (bytes):	438288
Entropy (8bit):	4.911324096204055
Encrypted:	false
SSDEEP:	1536:1Miy12vT1e+fz9YD6lTLZycAiBX9zyACYLlV3ISGFA6OYb5VtbxR/oSqIr5lrsyA:5BvT1eO7i1/neefUVh/iR7u
MD5:	28C861DCCCBAC7D261ACC7180B95395B
SHA1:	7CAE22EB86E84D645582ABDCD1BF37055954B5C2
SHA-256:	CB91A0C40C8903B3E7385B6E634B05B298143A860DA2E2DEC25F5305F35D245E
SHA-512:	83AB087BF0E9C50BF024B312C9D6ABAA8BF1E06A756DA5E228FFEE8BE12C9F6897375BA89A890BBECAF50C2943DB9D1590A960904B948052418589591C62F8ED
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/css/style-embed-whitelabel-v3.css
Preview:	/.The Action Network Whitelabel Embed.Since Version 3.1.0.Authored by Jake Caputo..You can look, but don't touch../..gradient {. background-color: #063b54;. background-image: -webkit-gradient(linear, left top, right bottom, from(#063b54), to(#0096db));. background-image: -webkit-linear-gradient(left top, #063b54, #0096db);. background-image: -moz-linear-gradient(left top, #063b54, #0096db);. background-image: -o-linear-gradient(left top, #063b54, #0096db);. background-image: -ms-linear-gradient(left top, #063b54, #0096db);. background-image: linear-gradient(left top, #063b54, #0096db);. filter: progid:DXImageTransform.Microsoft.gradient(GradientType=1,StartColorStr='#063b54', EndColorStr='#0096db'); }../* RESET -------------------------------------------------------------------------- */..gen_wrapper {. box-sizing: border-box; }..select.wrapper_select {. width: 160px;. cursor: pointer;. letter-spacing: .25px;. color: #434343;. border: 2px solid #b0b0b0;. transition: al

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105530
Entropy (8bit):	5.175238542087422
Encrypted:	false
SSDEEP:	768:MLMeCBCBkGC/MFRo43esRdLyWQL9XOYOLBOODYdTeR2CjRBKF2FTm7Y/LTfFlIsc:0CBNF/E1QY2TnCjRBKFgTmytF634p2
MD5:	6B468C6CFC680A66524774A37ABB0D43
SHA1:	D311C4390AC2243C10D2E88195E53326D9A3A83C
SHA-256:	9C64585D64E8A0B76D707DAEA5AC55D9081475E5C8DDD705DEAB8EE49AD5EE23
SHA-512:	C6E3F8EA22E32E53EDED0F9FA62D2FED7B14A81564D884852AF2B602A838C90C6911D1F01516725C950BFE5AAA51881935D58717756A0E20882A1B5AC0438D9C
Malicious:	false
Reputation:	low
URL:	https://cdn.segment.com/analytics.js/v1/bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev/analytics.min.js
Preview:	!function(){var t,e,n,r,i={8878:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0});var i=r(n(325));function o(t,e){return function(){var n=this.traits(),r=this.properties?this.properties():{};return i.default(n,"address."+t)\|\|i.default(n,t)\|\|(e?i.default(n,"address."+e):null)\|\|(e?i.default(n,e):null)\|\|i.default(r,"address."+t)\|\|i.default(r,t)\|\|(e?i.default(r,"address."+e):null)\|\|(e?i.default(r,e):null)}}e.default=function(t){t.zip=o("postalCode","zip"),t.country=o("country"),t.street=o("street"),t.state=o("state"),t.city=o("city"),t.region=o("region")}},4780:function(t,e,n){"use strict";var r=this&&this.__importDefault\|\|function(t){return t&&t.__esModule?t:{default:t}};Object.defineProperty(e,"__esModule",{value:!0}),e.Alias=void 0;var i=r(n(1285)),o=n(9512);function s(t,e){o.Facade.call(this,t,e)}e.Alias=s,i.default(s,o.Facade),s.prototype.action=function(){return"alias"},s.p

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	65536
Entropy (8bit):	6.822639120158413
Encrypted:	false
SSDEEP:	1536:fNrv93+cWDtdclLePqwHjny6C0mDSCPqZWj6s:FrRWhdclpstCrGC1j6s
MD5:	22EC9F3F9AC30034FCD1DB34801086EE
SHA1:	9C8DD66A8E5AD542711D4D05F875E57392894693
SHA-256:	9F5DC5EF30BD2B9225A4898BB8BD9AA9151586362EF76DF21C82B5E472AB9436
SHA-512:	DE2C99C8E14EC95C51B715ED1003214B8C20BD9399BEF468EDC4DF91610FD9BB4305367D7257EE24173692FCFD8B43300CF2800882D2E512870D34C1DE0D71D5
Malicious:	false
Reputation:	low
URL:	https://web.joebiden.com/user_files/user_files/000/065/441/original/Decimal-Semibold.otf
Preview:	OTTO.......`CFF g.n..."8....DSIG......5.....GDEF.-........."GPOS...........GSUB..!..ix..!.OS/28E.....P...`cmap\|..........jhead.1#........6hhea.......$...$hmtx............kern.b.....(....maxp..P....H....name.Ci^........post......".... ......3....._.<...........9.......q..4...............................4.4......................P..........w.......X...K...X...^...,...........................H&Co....... .8..................... .................@.............@...........G.........!.O...........p.................................Z.......................................................................+.............@...........G.......................................................................!...........-...........@......... .......................B........... ...........".0......... .R...........r...........&...........&.........$.@.........$.@...........d.........V.h.................................(..........."...........&.&...........L...........z.....................&..Copyright

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1824
Entropy (8bit):	4.366970038285919
Encrypted:	false
SSDEEP:	48:61bBrEvWFaHM5y4bHtzrOf1NPycREROSfzsKOW5h:8bBrngEZO1sqSzsKvh
MD5:	34A4438D65DE8B75B2E2B38081B37625
SHA1:	C40C0EB631E267E06A4B48FD1FF072B300C7457D
SHA-256:	C76F766ED128FF1C05CBAB4F53E470751B475152992A770D42273047BC1708C5
SHA-512:	67CF35910DB0970AC3C00D57A8CDBC90FCFBA9A8B95D0039EBE73E2D16AF418FAB82DE712E5DB8CC2F5A76849FC5E03F741433C8F8B96E81B9F4A0C78398D3EF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/instantbuy/svg/light_square_gpay.svg
Preview:	<svg width="41" height="41" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M19.526 14.635v4.083h2.518c.6 0 1.096-.202 1.488-.605.403-.402.605-.882.605-1.437 0-.544-.202-1.018-.605-1.422-.392-.413-.888-.62-1.488-.62h-2.518zm0 5.52v4.736h-1.504V13.198h3.99c1.013 0 1.873.337 2.582 1.012.72.675 1.08 1.497 1.08 2.466 0 .991-.36 1.819-1.08 2.482-.697.665-1.559.996-2.583.996h-2.485v.001zm7.668 2.287c0 .392.166.718.499.98.332.26.722.391 1.168.391.633 0 1.196-.234 1.692-.701.497-.469.744-1.019.744-1.65-.469-.37-1.123-.555-1.962-.555-.61 0-1.12.148-1.528.442-.409.294-.613.657-.613 1.093m1.946-5.815c1.112 0 1.989.297 2.633.89.642.594.964 1.408.964 2.442v4.932h-1.439v-1.11h-.065c-.622.914-1.45 1.372-2.486 1.372-.882 0-1.621-.262-2.215-.784-.594-.523-.891-1.176-.891-1.96 0-.828.313-1.486.94-1.976s1.463-.735 2.51-.735c.892 0 1.629.163 2.206.49v-.344c0-.522-.207-.966-.621-1.33a2.132 2.132 0 00-1.455-.547c-.84 0-1.504.353-1.995 1.062l-1.324-.834c.73-1.045 1.81-1.568 3.2

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 16 colors, 4 bits/pixel, 32x32, 16 colors, 4 bits/pixel
Category:	downloaded
Size (bytes):	2734
Entropy (8bit):	2.014090789245254
Encrypted:	false
SSDEEP:	12:SQvzHfZusWaythAvp5r/EqJuVo6Bj5WJCeoHZqciDUA8SYPVMxM9molsI:SqHfyaythI/EqKo6bOho5qhwx5ls
MD5:	165FAA2E51E9573607E3A73A8ED6B531
SHA1:	6955749BC0F4CF9EC2FF7AABEC21B8369C1180B5
SHA-256:	052C79E773F8473025AC1C6B4818C0AAE15833E88B67825756075E3DDEC82323
SHA-512:	F1B46C8B89788A87C27C92539BB2B72BA65E75645B7CFB5CE10C8A8F39E8C630FE170D37F593F21F6B46E3903432657E9F3030721852CCA6022776E9C59A29E4
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/cf/static/actblue/favicon.ico
Preview:	..............(...6... ..........^...00......h...F...(....... .........................................4..O...^...m...................................................................E..dF0..K@.................ky......{.............;........@Fe .................................................................................................(... ...@.........................................+..L...n........................................................................................................................................................................................9.........c.......@........P...........F...............6.........j.....f.........:......"5.........`..e....@..........9.............j.J.DZ.0......Z...j....`..........Z....p.........PZ....P..........Z............y..Y...P.....................................................................................................................................................................................

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1788
Entropy (8bit):	4.357717155579518
Encrypted:	false
SSDEEP:	24:tFn8jxMizmZv9gTS/1dIxt3vW+qbDaYqMu26pp4LsOZSc9E5zyfnX0zrK/0lV8sm:mmBrEvWFaHM5y4LHFE5Ofk/ccROSfErn
MD5:	8191AFEC51483E108A2DC5F17FB0EFD0
SHA1:	75D07F097932D726A37FA35DCF340C82D794792E
SHA-256:	F383D270511912B2DA11555947CB3E6012E6375CB5F0D90493C25F6048169073
SHA-512:	65E8E8EC345492F2E349CBE831B7B0091C81589322C7DAAB2D11F704DB50CD1747514E262D0678FABAA72EE2466FEA9A79A1BDF8BA8BF7CBFDB53B08C3D8C9C9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/instantbuy/svg/dark_gpay.svg
Preview:	<svg width="41" height="17" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M19.526 2.635v4.083h2.518c.6 0 1.096-.202 1.488-.605.403-.402.605-.882.605-1.437 0-.544-.202-1.018-.605-1.422-.392-.413-.888-.62-1.488-.62h-2.518zm0 5.52v4.736h-1.504V1.198h3.99c1.013 0 1.873.337 2.582 1.012.72.675 1.08 1.497 1.08 2.466 0 .991-.36 1.819-1.08 2.482-.697.665-1.559.996-2.583.996h-2.485v.001zm7.668 2.287c0 .392.166.718.499.98.332.26.722.391 1.168.391.633 0 1.196-.234 1.692-.701.497-.469.744-1.019.744-1.65-.469-.37-1.123-.555-1.962-.555-.61 0-1.12.148-1.528.442-.409.294-.613.657-.613 1.093m1.946-5.815c1.112 0 1.989.297 2.633.89.642.594.964 1.408.964 2.442v4.932h-1.439v-1.11h-.065c-.622.914-1.45 1.372-2.486 1.372-.882 0-1.621-.262-2.215-.784-.594-.523-.891-1.176-.891-1.96 0-.828.313-1.486.94-1.976s1.463-.735 2.51-.735c.892 0 1.629.163 2.206.49v-.344c0-.522-.207-.966-.621-1.33a2.132 2.132 0 0 0-1.455-.547c-.84 0-1.504.353-1.995 1.062l-1.324-.834c.73-1.045 1.81-1.568 3.23

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 16 colors, 4 bits/pixel, 32x32, 16 colors, 4 bits/pixel
Category:	dropped
Size (bytes):	2734
Entropy (8bit):	2.014090789245254
Encrypted:	false
SSDEEP:	12:SQvzHfZusWaythAvp5r/EqJuVo6Bj5WJCeoHZqciDUA8SYPVMxM9molsI:SqHfyaythI/EqKo6bOho5qhwx5ls
MD5:	165FAA2E51E9573607E3A73A8ED6B531
SHA1:	6955749BC0F4CF9EC2FF7AABEC21B8369C1180B5
SHA-256:	052C79E773F8473025AC1C6B4818C0AAE15833E88B67825756075E3DDEC82323
SHA-512:	F1B46C8B89788A87C27C92539BB2B72BA65E75645B7CFB5CE10C8A8F39E8C630FE170D37F593F21F6B46E3903432657E9F3030721852CCA6022776E9C59A29E4
Malicious:	false
Reputation:	low
Preview:	..............(...6... ..........^...00......h...F...(....... .........................................4..O...^...m...................................................................E..dF0..K@.................ky......{.............;........@Fe .................................................................................................(... ...@.........................................+..L...n........................................................................................................................................................................................9.........c.......@........P...........F...............6.........j.....f.........:......"5.........`..e....@..........9.............j.J.DZ.0......Z...j....`..........Z....p.........PZ....P..........Z............y..Y...P.....................................................................................................................................................................................

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18187), with no line terminators
Category:	downloaded
Size (bytes):	18187
Entropy (8bit):	5.347759003709589
Encrypted:	false
SSDEEP:	384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud
MD5:	5C6ED25DCE803FD84288922B8928409E
SHA1:	3CCC10546AE12F160BACAC1E9E422AF091EA4A41
SHA-256:	480B06B23E574B4BF386FDE1A91145A4171F97AEB5EE800E4BE1850F29B1AD91
SHA-512:	FE9265D2E6EA4ACB7E0A87E08BEDFAF48BCBAD62BB7A86E73F9AE21C8437AF3334D2A9733C6BC47A12BBF54F97EC79271CB5300F90231614F407599D1B4C05E5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/ytc.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21084), with CRLF line terminators
Category:	downloaded
Size (bytes):	21262
Entropy (8bit):	5.2206030474515694
Encrypted:	false
SSDEEP:	384:xnMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOgp:M5sg7X/jD45eSxpOxvKD73i5vTzwL9TE
MD5:	855075C14FED65779E9226874C12D223
SHA1:	EB352E9DA7A729AB8DD14F41E8AA3C47D3A9E4DE
SHA-256:	03F5C3670A8445C0AF75A1B934BE176F6C1CDE339FBE76B1062CC51E590BCA98
SHA-512:	7CA3D85A512E71642ECED745F71FAB314BF33B70ED9250FB93CCF725D3D3DBAA971734FCC73968F66E6112303C7E41B92C0D3DB55E0596404BD923AEEDF108F1
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/popper.min.js
Preview:	/.. Copyright (C) Federico Zivolo 2019.. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT)... /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function i(e){return e&&e.referenceNode?e.referenceNode:e}function r(e){return 11===e?re:10===e?pe:re\|\|pe}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.bo

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2918), with no line terminators
Category:	downloaded
Size (bytes):	2918
Entropy (8bit):	5.926831687048535
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08y+EEweLlwY4btJG9A+9bTu:aJd6SUtJfNrVlCWWWdtqjZm+EEwU6Y4L
MD5:	D8D71958C72C35EDC572598383C1B404
SHA1:	59CE97FABAAA9516DFC1038AC0D7DB17D1732627
SHA-256:	C25EA907480749480F5F04E8CD079F067AD25953C2FC43DC72AD00ED5F908073
SHA-512:	FA69E696BD90B2DB1B66841715F7DB260069190811E558818ACC7B7CEEEB3E771A2C90C139D60171CA6F8306C45F1E615F80A559B2FEC1C7139D96480423F6B5
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/11154426359/?random=1719991386522&cv=11&fst=1719991386522&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7933), with no line terminators
Category:	downloaded
Size (bytes):	7933
Entropy (8bit):	5.760345217030676
Encrypted:	false
SSDEEP:	192:i5IwPncCrWMAo7PAlSfat7nYy9p7l2G7QGGev:iNPnp7Ao7PAlSfaYy9p7D1
MD5:	020861D093CF72603BF4451095F6DD71
SHA1:	650FD6B2D21906443DC093CD9870ABB0FFCBEC08
SHA-256:	DBE339D8A482F8A7069D64B69AEBDAE57F7FFA54DF90A0091C1642392422F335
SHA-512:	26A063BB58483E8C2B2F65D6B03B415974F2725DE1506CEEC7BEEC3640B55B0A866325B97F44FB10093F6640EEE66EDFA95E4F935726016077A27BD8DF1F8CC4
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/cdn-cgi/challenge-platform/h/g/scripts/jsd/d2a97f6b6ec9/main.js?
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(309))/1(-parseInt(U(283))/2)+parseInt(U(324))/3(-parseInt(U(292))/4)+parseInt(U(302))/5(-parseInt(U(293))/6)+parseInt(U(286))/7+-parseInt(U(334))/8(parseInt(U(271))/9)+parseInt(U(363))/10(parseInt(U(320))/11)+-parseInt(U(330))/12(-parseInt(U(310))/13),e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,863005),g=this\|\|self,h=g[V(301)],i={},i[V(347)]='o',i[V(265)]='s',i[V(289)]='u',i[V(365)]='z',i[V(307)]='n',i[V(359)]='I',j=i,g[V(279)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|D===void 0)return F;for(H=m(D),C[a0(294)][a0(357)]&&(H=H[a0(303)](C[a0(294)][a0(357)](D))),H=C[a0(269)][a0(308)]&&C[a0(276)]?C[a0(269)][a0(308)](new C[(a0(276))](H)):function(N,a1,O){for(a1=a0,N[a1(343)](),O=0;O<N[a1(332)];N[O]===N[O+1]?N[a1(346)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(337)][a0(264)](I),J=0;J<H[a0(332)];K=H[J],L=l(C,D,K),I(L)?(M=L

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12305
Entropy (8bit):	7.7748985780371695
Encrypted:	false
SSDEEP:	384:zYH28kQnKtzzpL5UoFyYj+VtZGiddqpceKWIY:MWKQA9YCVrGidopHn
MD5:	8CBEF5E73238403A0BCF8A910397EEE0
SHA1:	6CA3053DE6234097DE74140994839B0DFED15F38
SHA-256:	35E3656227CE4ACC7CDC32E49CBF70D113A6C99EE2B988040AD0C96CFA6B63D4
SHA-512:	A957EDD5C23551A59A6FFE0BF06F5E8568EF30EBDBCF21EC2DE5D7673B653EFEF64439D512823D3182CC0F1D80A0FBA1F0833310D803AD58A6F80CE9B5A7CB3F
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/user_files/user_files/000/091/297/original/BFP_AB-Logo_Ivory.png
Preview:	.PNG........IHDR...!...........].../.IDATx...mlV......01.....&T0<..._.QH;R;....T.J:y...G.W.!...M".."..M.q..i#;"]e...Jmq.w%[.!<.4.............us...n......HG.1).........U..8?f.......U......@........ .B........!................A........ .......A.B...... .!.....@........ .B........!................A........ .......A.B...... .!.....@........ .B........!................Qk.......s6v..........>?8t..={n..}...QgV7...s..l.{.^........@.T..8?f.`.....DA.^].p...".;.D.H.4......k..B ........}.G.C.4.8Y.....SQ..j......:.Y..U=.......... ...F..E..T...PeD....4.H...E...b.......Sc.C.=.-z.Q{,....s,+v.....7..mK,i....}..u.vD...\G..`p(.s....A.k....f5d.Z6..O.$t..`...[(o....[I...S.......i.`J....s..lU....R7..+.....f9}o........W....l....u...V.."-.J.G..k..O....k29..H..DT....!.M^.v.._...Y.......!...!..T...........t..a....%....f...w((..].AAO~u-........._rU.7.....~..............P...............y......ZK.\|....!......q.A.Hl\|~..S.'...\.e...]K.M...$j_..{U..s.....O.....]0qg{...U...

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2544 x 1600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1257250
Entropy (8bit):	7.9888692332835225
Encrypted:	false
SSDEEP:	24576:B1j9rpdUo6EksNFYx3Dg2MEOMZp4Yv8KjZq/Ow+9st/:BUopkssx3lRTZOErFq/T+iJ
MD5:	A9272E8166F30F235595D1EA6FB6E431
SHA1:	6DE3A800B184E6F84374C3207BCA8FB02CFA9551
SHA-256:	B0AD1C94C8D49C34EF22FA625FFC4CE241F2159A606BFFA357C9C1AEB772343E
SHA-512:	ACCE0893D7E494CA763DEA9D395FBE2CEA1EE19A590432BC2F555BE507B1D4C849D05BFD4D4845719D2935E006E7A9BAB6F035153CCE3C8B807785F7138776B1
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/x/object/actblue-cyanotypes/replaced_images/branding/249406/260059c2-94ed-4236-82ad-624d031cc757-240424-JRB_KDH-Wrapper-10814a65.png
Preview:	.PNG........IHDR.......@.....<..X....pHYs...%...%.IR$.....IDATx...[.d.}.y>..Gdf.HI...........1..V7.TeF..>..\,.$%Q.$E1A.........p.......}..@.$I.$I.$I.$I.$...?..H.$I.$I.$I.$I....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1354
Entropy (8bit):	4.704285746327343
Encrypted:	false
SSDEEP:	24:UwqwK+KoluxpvtaNbdzh0TWdywC5NUvbmVhwC1wCgw1BbZDWe0:EwWolQpFaN5KTaTvK8wR0
MD5:	6B4CD36B6442484F513BCC76842CAAC0
SHA1:	805B6EBD3C80F7ED483ECCA6241250093243DEE7
SHA-256:	171C77E95461F244CE82F90B7001978BA31F03114F047E3216B0C5AB8C8E422F
SHA-512:	649FECFAF8230E89DDB411759EE6E13E369B5ECDBE5EBC0286113CA56185C43691EF7762C4CBAA275CE25DF3ECD6F6CEC483CC44B0B8D6501D310E52592D472A
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/previewstyle.css?id=1719991448288
Preview:	.imichatmsgpreview,...imichatmsgpreview body{.. margin: 0;.. padding: 0;.. overflow: hidden;.. height: 100%;.. width: 100%;..}...imichatmsgpreview body{.. margin: 0;.. padding: 0;.. overflow: hidden;.. width: 100%; .. height: auto;.. position: absolute;.. bottom: 0px;.. right: 0;.. padding-top: 30px;.. /* max-height: 80%;.. overflow: auto; */..}...imichatmsgpreview .imichatpreview-msg-clearbtn{.. position: absolute;.. top: 0;.. right: 5px;.. cursor: pointer;.. font-family: monospace;.. font-size: 18px;.. font-weight: 800;..}...imichatmsgpreview .msg {.. color: #fff;.. font-family: sans-serif;.. max-width: 300px;.. min-width: 60px;.. width: auto;.. float: right;.. max-height: 65px;.. padding: 10px;.. font-size: 14px;.. border-radius: 4px;.. box-sizing: border-box;.. position: relative;.. margin-bottom: 8px;.. text-overflow: ellipsis;.. }.. .imichatmsgpreview .msg::after, .. .imichatmsgpreview .msg::before {..

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	245966
Entropy (8bit):	6.125525588616656
Encrypted:	false
SSDEEP:	6144:QokN05GvoXfhQKrVV15g/mvURs+0+Mua6ZP2:dkNaGAXZQKrF5geks+0it2
MD5:	529E231BAF5DE5F8E80907F2C9B22CBC
SHA1:	55EDD2B2D6F44B21B30E765AD0B3F8DA61EF2C6C
SHA-256:	28CACA8C4995810757CDA9C35FBFDFE7ACAE149A9299E6088B1ED1FC4E2FF9F8
SHA-512:	EDABDFCA61BB648A2BCF03075D7351F86F9B2965D16A18DA501D7255C472EE00855903C208C510DD695785B08E8C2292F218DAB384D123B1FBAF29A9DECA2C2E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 300 126".. style="enable-background:new 0 0 300 126;" xml:space="preser

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20190), with no line terminators
Category:	downloaded
Size (bytes):	20190
Entropy (8bit):	5.155112186348107
Encrypted:	false
SSDEEP:	192:hAQnLQ2Q2zirGE08SNZXGX8P+Chzq/EqZ3zVINhEdZW6FZIZ9I8Frk8enWpk+bKf:hMZ2z6s+Chz5qZ3zVI/EZW7k8El5p
MD5:	FF1D5F65F03EB598C97745B552258AA2
SHA1:	5EAB15095A36C7D7672D6226607FE2A39CA8D14B
SHA-256:	E7A17D448CE2DEAE2459D1ED87980C2F0F1CAE0E5FB329F93D6FA953A9081C61
SHA-512:	650E301C088CB7A1FAFABE73160BE70999259D90692AF18DCFF99624EE2DE10C9480D8195C47EA2A10B2E620A797A4A09F9A0616F97CB73DCA114765C5A6F0D0
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/cf/assets/app-css/6a3e1dd153d5af7e8ded.css?form_app=us
Preview:	.clearfix:after,.clearfix:before{display:table;content:"";line-height:0}.clearfix:after{clear:both}.input-block-level{display:block;width:100%;min-height:31px;box-sizing:border-box}.visually-hidden{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;white-space:nowrap}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;box-sizing:border-box;-moz-box-sizing:border-box}*,:after,:before{box-sizing:inherit;-moz-box-sizing:inherit}a:focus{outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px}a:active,a:hover{outline:0}img{max-width:100%;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic}button,input,select,textarea{margin:0;font-size:100%;vertical-align:middle}button,html input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer}button,input[type=button],input[type=checkbox],input[type=radio],input[type=reset],input[type=

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	451
Entropy (8bit):	7.0636320273410655
Encrypted:	false
SSDEEP:	12:6v/70XldMAJY8hM/ghl5SqByZVbyeQbJKslNl7JOiX:BGGYPghlBqf07jX
MD5:	C5262034A596BD87AABCD042EF6D940F
SHA1:	F6756203A877440A74F21F7EDA3C64219F7D1159
SHA-256:	4E59CBBE3D493C36D6CB80FE6D0D1D3B7098D19D33C3F9DBDA9BBBBC74B014D0
SHA-512:	B734686A4C2EEF3571C4760CA9301A66C7C3B0C34F2CA36760F739281FED00533DCA70C3F858F4AB8F1540B2C0A922F8F91A397C4FA04B58DAA2C0DBD3E4217F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..........Y.D....tEXtSoftware.Adobe ImageReadyq.e<...eIDATx.b...?.@.&....q!.o... f$..P......./r.!%.$.X....&.L.(...@.....b[.. .Y...\@..)._.1....q'.......H=.....^b....7....@.....?@...........5..?.....@.JA....$...l.....(....9-,'...@..).Y...@<.).b`\|.....Z.-gB.=:.8...A....jd..(..P..A..../...Z$..R.*..: ^..r..@..-j.D..c....Pu...8Uj.8..@l...x..?@.q.....)..B ....u.og..W!.......T9..b6 >..F.n.}..\h;.p.fC......Q.Eno.....IEND.B`.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3511
Entropy (8bit):	5.038742383798734
Encrypted:	false
SSDEEP:	48:mjKddleSm/8CnYHmThunHgYyrrDfO8ixC7pWs:rddlev5nrIHgYSwxC7l
MD5:	6233E8887BD87295CBFE8A2E89555D3A
SHA1:	1AB32DAD0A9DE0EF9909F04C064EC34D844293CD
SHA-256:	8B68C940DB061BBEA0BB8A7004CA1ABF47BF18D65040211A908583213041F528
SHA-512:	97CA38885F937E8166B098D071E9413156E58A2341229780B4908B1E3E87BBEEC33B4C3A599FA11EB76D5D54A8632EEB161E3713A06DB56FC9722679F60DC024
Malicious:	false
Reputation:	low
URL:	https://chat-widget.imi.chat/livechats/getemojis?groupid=1866
Preview:	[{"SYMBOL":"..","DESC":"grinning face"},{"SYMBOL":"..","DESC":"grinning face with big eyes"},{"SYMBOL":"..","DESC":"grinning face with smiling eyes"},{"SYMBOL":"..","DESC":"beaming face with smiling eyes"},{"SYMBOL":"..","DESC":"grinning squinting face"},{"SYMBOL":"..","DESC":"grinning face with sweat"},{"SYMBOL":"..","DESC":"rolling on the floor laughing"},{"SYMBOL":"..","DESC":"face with tears of joy"},{"SYMBOL":"..","DESC":"slightly smiling face"},{"SYMBOL":"..","DESC":"upside-down face"},{"SYMBOL":"..","DESC":"winking face"},{"SYMBOL":"..","DESC":"smiling face with smiling eyes"},{"SYMBOL":"..","DESC":"smiling face with heart-eyes"},{"SYMBOL":"..","DESC":"face blowing a kiss"},{"SYMBOL":"..","DESC":"kissing face"},{"SYMBOL":"..","DESC":"kissing face with closed eyes"},{"SYMBOL":"..","DESC":"face savoring food"},{"SYMBOL":"..","DESC":"face with tongue"},{"SYMBOL":"..","DESC":"winking face with tongue"},{"SYMBOL":"..","DESC":"squinting face wit

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28196, version 0.0
Category:	downloaded
Size (bytes):	28196
Entropy (8bit):	7.9920858660409495
Encrypted:	true
SSDEEP:	768:9W/xEiJv6Rq5kYjcgHjffhcVCuTslH8u+kCTcscxfKE:92CiKyJj/aVCPlcl4scdKE
MD5:	A680E4D9E59C24CBE6BBF1E85F08292E
SHA1:	8F1D195476E0F23850EB5FD1282A2B8CABEB1264
SHA-256:	9F4593E1A54CAC58B5A5505985AC73EC54D344D16095CF73FA97EA791B798191
SHA-512:	8A8329F85EFA47089A3F320F6778738088E4B984A31269E3958920A1656EAD887710267E70A33096D4310EB824A5DB5DD62658714FEAE589BEC8CB290FA9D8C8
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/fonts/MyFonts/TradeGothicNextLTProHv.woff2
Preview:	wOF2......n$.......X..m:......m...................t..8.`..`..:..b.."...\|..W.6.$.....N.. ..[. ..@.M.....^>.......1.2UU.[Bp.....?.........._..._...X..\|C..+....r..rr.6.n......J=.....[p...\p.... ...=..............l.O..........S.^..!V.......KO(5....K.B..Cxa.'...La........T........a.c8.p.t.....H.......T..M..H.eHU.......E..Rx.._..wj....\).i.:@%dI.Xe..!.I..y...(..:..<@n.8K....d.......e.(...3.,sd..........W..).._.........V.."~.$..%.%....X.....xC...bm..j.0..R....,pf.......{g..nJ..nr.o0 Gq.....,pIz.k,W)U%{4.....IL..5.+.+T..T.@.U.!.5...'........w.).[2J.Z..!J:@....c}......M.%.LI-(....6N-....F.PP...e...C...@.`(>...i.... r.....Q..+:...^...$S.........`..9;.@...........qw..j....(...{...DiDJc.....>";.......;s.h.9....9u.$Nr.......v....G...y. A.....3...#..p."....?..V2...c.......-..%...?rD9]K.+.....s..=....:.0.!.P...Bs....f.0......y...n.p..&v.q....F..A../r...(....T*...o.4.dg.d...x..\|..jn.v..a..x........=.C.z.X.B...c6...).d..BJv.\|;ZM...p......;qF....

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 65452, version 1.0
Category:	downloaded
Size (bytes):	65452
Entropy (8bit):	7.9945249526819975
Encrypted:	true
SSDEEP:	1536:WhdmBOT/dMBXSeRkzJBJlLsZrzhWaSU82n:WLmBs/dMduJBJl2nQan
MD5:	D95D6F5D5AB7CFEFD09651800B69BD54
SHA1:	7D65E0227D0D7CDC1718119CD2A7DCE0638F151C
SHA-256:	199411F659F41AACCB959BACB1B0DE30E54F244352A48C6F9894E65AE0F8A9A1
SHA-512:	E96012D2FCD5DF03C2F7385C9EE2A2932B3909659D59E32BF3155E102EAF9EB7B4B00C5806C892ACE1B8F4BDB58630FB20868AD368C771BD8D2AAD7749B7A399
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/fonts/fontawesome-webfont.woff?v=4.2.0
Preview:	wOFF............... ........................FFTM...D........g.).GDEF...`....... .-..OS/2.......>...`..zLcmap.......G......\gasp................glyf.......6....MR .head...H...1...6.f..hhea...\|.......$....hmtx......G.....$.zloca................maxp........... .V..name.......u...8L"u@post...p...2...bq..qwebf..............S..........=.......S"......"d-x.c`d``..b...`b`d`d..$Y.<...K.3.x.c`f.f........b...........\|........A.+.... ...Q.H1")Q``.....M..x...JBq...x.,.Ow-.........h.";.....O >..,..h.-.UKq...h.N...c.P.&....a.c~0CDN.g....qfO...2.v.(Fn2.(.)..n......Q8..E...$$Q.KRR.....$.R...e..B.B.q$.B.9.P.5.h..a..%.m.p2!....KXb..K.....,..IK........4...2*.........>..z_....l.y..........:...........b';.`RZ.....zS..E=...'..:.J...z.+.C....a....)...6....p.j..............x...\|T..0~.9w.}..-..d&.&.$....a'......... ...P.....V.ZQ..}.b.V.w.....n~.b[.U[.?[!s.?...$$.}....{.>..y..<.....#6....q..$rP.F.5...m......)..C\.i....N\|J.su.qHH.&\.1.l..2....T.J..~$>.\....w$O.(W..9.w.yw<,.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1105)
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	5.201544373515382
Encrypted:	false
SSDEEP:	24:WILQf5Gp7+TUsz5Ew09E25rWF1FID1ZqMWna+RPAQOjyJp3+uxVHgu/5sI1:FUGp7AFZ09XrCPIZqXnpPAXjEVZF
MD5:	98741259BF0478B35ED22768E2084191
SHA1:	614E91782A8AE01D28DD72028C328A6C23E07DAF
SHA-256:	2E0BEDCA23DE7AE87ED0B6BD76759B826D7CBFE4DE1ADD8204858B26FB806881
SHA-512:	81B169B2E8077AA70A22BD291FC99F1388EA36F5FA9518E67AC28AFED143CB7B9C8BBBA4852625938614D8B6546EF85B31A40F80901D3974E6E4A47807475983
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/includes/js/challenge.min.js
Preview:	/* browser_challenge/static/challenge.min.js */."use strict";function Challenge(a){var b=async function(){const b=await fetch(a+"/challenge.json");return(await b.json()).challenge};var c=function(a,b,c){var d,e,f;var g=0;for(var h=0;h<c.length;++h){e=c[h];d=e[0];f=b[e[2]];if(f(a,d))g+=1}return g};var d=async function(a,b){const d=a[0];const e=a[1];const f=eval(a[2]);const g=new TextEncoder("utf-8");const h=await window.crypto.subtle.importKey("raw",g.encode(d),{name:"HMAC",hash:{name:"SHA-512"}},false,["sign"]);async function i(a){const b=await window.crypto.subtle.sign("HMAC",h,g.encode(""+a));return Array.prototype.map.call(new Uint8Array(b),function(a){return a.toString(16).padStart(2,"0")}).join("")}var j=0;var k=0;var l,m;var o=[];while(j<100000\|\|k==0){m=await i(j);l=c(m,f,e);if(l>k){o.push(j);if(b)b(o);k=l}++j}return o};var e=async function(a,c){var e;if(c)e=c;else e=await b();var f=document.createElement("input");f.name="ch_challenge";f.value=e[0];f.type="hidden";var g=document.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21329)
Category:	downloaded
Size (bytes):	21595
Entropy (8bit):	4.95582433802382
Encrypted:	false
SSDEEP:	384:KaAZpaAZKaAZgaIpxffl2E7J54S1Od54g8DalnD7:KaAZpaAZKaAZgaIpx3lIeOdeg8DalnD7
MD5:	1CBE4F059984320D4D3F8093F449A0B0
SHA1:	6977C4C47D19EB85E289DEC748B76AB5CDE97458
SHA-256:	3984D88A20DF11E4DBD21DC175FFFE31B0163FA564AD3F43DFFC1D66C2DED111
SHA-512:	B28D2DD6A6369B663A342D2C1672D1EC13F183EB66CF040255BFBDABB60D27185A4476CA4FFD1E1A0CF157BCEC4B313A1E3D34C81D56E524582D1BB004A4FE49
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/user_files/user_files/000/091/295/original/page_wrapper_reelect.css
Preview:	@font-face{font-family:decimal semibold;src:url(https://web.joebiden.com/user_files/user_files/000/065/441/original/Decimal-Semibold.otf) format("opentype")}@font-face{font-family:decimal medium;src:url(https://web.joebiden.com/user_files/user_files/000/065/504/original/Decimal-Medium.otf) format("opentype")}body,.gen_wrapper,#gen_header{background-color:#fef9ec!important}@media(max-width:783px){body>.gen_wrapper{padding-top:0!important}}body>#gen_header>.gen_wrapper>img{width:180px!important}#paidforby{border:1px solid;padding:10px;text-align:center;max-width:600px;color:#08388b!important;clear:both;margin-top:15px}.can_embed #can_embed_form input[type=text],.can_embed #can_embed_form input[type=email],.can_embed #can_embed_form input[type=number],.can_embed #can_embed_form textarea,.can_embed #can_embed_form .can_select,.can_embed #can_embed_form select option{border-radius:0!important;padding-left:20px;margin-bottom:10px;border:1px solid #08388b!important;height:50px;font-family:dec

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (322), with CRLF line terminators
Category:	downloaded
Size (bytes):	70863
Entropy (8bit):	4.139416626542632
Encrypted:	false
SSDEEP:	768:4wnn8iqZ4OnOWJlHglueZU/pUL/e2TCeIFx/AtrY9fJSvRq/sp:xn3Q2ue0PJe2/AhC0p
MD5:	82F16D31E80C0293BBD75CFF9E5A8CF7
SHA1:	3E035025F6D7B235B6DB8E2964006D57969DCCFF
SHA-256:	E833EC7EFC1A95E622DBEBF69B2750F460E508BEFA05269C8F8CE633830E8635
SHA-512:	C88C5D2415A34501028E0D73E2C784777A4ED6E5C7BA8CDD780102F70C8E7D7C2AA472A63BD9169EE1E1D8DDD9CF738B1E231E11D02EF9697724A1D551D7702D
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/bootstrap-multiselect.min.js
Preview:	/*.. Bootstrap Multiselect (http://davidstutz.de/bootstrap-multiselect/).. .. Apache License, Version 2.0:.. * Copyright (c) 2012 - 2018 David Stutz.. .. Licensed under the Apache License, Version 2.0 (the "License"); you may not.. * use this file except in compliance with the License. You may obtain a.. * copy of the License at http://www.apache.org/licenses/LICENSE-2.0.. .. Unless required by applicable law or agreed to in writing, software.. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT.. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the.. * License for the specific language governing permissions and limitations.. * under the License... .. BSD 3-Clause License:.. * Copyright (c) 2012 - 2018 David Stutz.. * All rights reserved... .. Redistribution and use in source and binary forms, with or without.. * modification, are permitted provided that the following conditions are met:.. * - Redistributions of source

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.6416041678685938
Encrypted:	false
SSDEEP:	3:TMQ+Ogn:AQg
MD5:	1228A5187B0617B0A4E95505F01DAE39
SHA1:	B66ED48843044830C12570F5A843786A3FC368FB
SHA-256:	0739B17B1053DE387D55795753300A79626787634F8C909277EFFF94D0E3F154
SHA-512:	0DDE42E5007CE4840DCDB356400347011DCD4C5E3FBC1FF04B66B173CE7BF3D88077B584FC97BCFE664706C8F6FB76410ABF8D6145394C45778D46FAC343DC7D
Malicious:	false
Reputation:	low
Preview:	function noop(){}.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1515)
Category:	downloaded
Size (bytes):	38268
Entropy (8bit):	5.474852445414496
Encrypted:	false
SSDEEP:	768:RJ2+gNMcRO2c6qnCv2UiwxkP/A2ZiQfLsgQGBGnvcUR/9Xc1rDqG5dRu6+mo9hAI:DgTVvXhS9ZiQfADGBElNaays
MD5:	FAA47723D45AA0E450E2EF88E9762F13
SHA1:	DFEDFA7E18A2965C3B081708AA26944D0C78BCB2
SHA-256:	0F703996BFA2A8BD1D3D4B2C5953AA14B11DF9424557DA7D460F8F4F84A5963B
SHA-512:	4E50492879D6741B6A0120A4B959EA33EFEDCC0243074EB124B6C00CEAF90870BF4CF3B84C111CA249B166E0920A762968A2C16C0601D5D558F942F127B20C6E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.k9jHwLanE3c.es5.O/ck=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.sQqql_Dnewk.L.B1.O/am=MAykAQ/d=1/exm=Das5Le,FCpbqb,WhJNk,Wt6vjf,_b,_tp,hhhU8/excm=_b,_tp,payframeview/ed=1/wt=2/ujg=1/rs=AMitfrgd7Lkd-dlMhF-qswmuBoSuLHZIdQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:siKnQd;yEQyxe:p8L0ob;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe,lwddkf,EFQ78c"
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._.sx=function(a){var b=0,c;for(c in a)b++;return b};._.tx=function(a){var b=Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^_.eh()).toString(36);a.j.set("zx",b)};var ux=function(a,b){this.o=a;this.v=b;if(!c){var c=new _.Su("//www.google.com/images/cleardot.gif");_.tx(c)}this.B=c};_.l=ux.prototype;_.l.Vj=1E4;_.l.He=!1;_.l.Xh=0;_.l.ug=null;_.l.aj=null;_.l.setTimeout=function(a){this.Vj=a};_.l.start=function(){if(this.He)throw Error("cb");this.He=!0;this.Xh=0;vx(this)};_.l.stop=function(){wx(this);this.He=!1};.var vx=function(a){a.Xh++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Mn((0,_.F)(a.Xf,a,!1),0):(a.j=new Image,a.j.onload=(0,_.F)(a.fr,a),a.j.onerror=(0,_.F)(a.er,a),a.j.onabort=(0,_.F)(a.dr,a),a.ug=_.Mn(a.gr,a.Vj,a),a.j.src=String(a.B))};_.l=ux.prototype;_.l.fr=function(){

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12305
Entropy (8bit):	7.7748985780371695
Encrypted:	false
SSDEEP:	384:zYH28kQnKtzzpL5UoFyYj+VtZGiddqpceKWIY:MWKQA9YCVrGidopHn
MD5:	8CBEF5E73238403A0BCF8A910397EEE0
SHA1:	6CA3053DE6234097DE74140994839B0DFED15F38
SHA-256:	35E3656227CE4ACC7CDC32E49CBF70D113A6C99EE2B988040AD0C96CFA6B63D4
SHA-512:	A957EDD5C23551A59A6FFE0BF06F5E8568EF30EBDBCF21EC2DE5D7673B653EFEF64439D512823D3182CC0F1D80A0FBA1F0833310D803AD58A6F80CE9B5A7CB3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...!...........].../.IDATx...mlV......01.....&T0<..._.QH;R;....T.J:y...G.W.!...M".."..M.q..i#;"]e...Jmq.w%[.!<.4.............us...n......HG.1).........U..8?f.......U......@........ .B........!................A........ .......A.B...... .!.....@........ .B........!................A........ .......A.B...... .!.....@........ .B........!................Qk.......s6v..........>?8t..={n..}...QgV7...s..l.{.^........@.T..8?f.`.....DA.^].p...".;.D.H.4......k..B ........}.G.C.4.8Y.....SQ..j......:.Y..U=.......... ...F..E..T...PeD....4.H...E...b.......Sc.C.=.-z.Q{,....s,+v.....7..mK,i....}..u.vD...\G..`p(.s....A.k....f5d.Z6..O.$t..`...[(o....[I...S.......i.`J....s..lU....R7..+.....f9}o........W....l....u...V.."-.J.G..k..O....k29..H..DT....!.M^.v.._...Y.......!...!..T...........t..a....%....f...w((..].AAO~u-........._rU.7.....~..............P...............y......ZK.\|....!......q.A.Hl\|~..S.'...\.e...]K.M...$j_..{U..s.....O.....]0qg{...U...

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16194
Entropy (8bit):	4.217632040815441
Encrypted:	false
SSDEEP:	384:PoiLXvHJSxIGbngjpsDYY9TE5DCqb7wf+:AiLXvHIIGbng9AYY9TE5DCsj
MD5:	C873E9FFFA27B1F388B1064D877F409F
SHA1:	9A86340314D46110CA5FEACBA85A739B2B636D98
SHA-256:	B2510AD2F6C7438C1B7405D8A6D406EAD71283C505B36C2B6BC301DFB17A5FB7
SHA-512:	06B1FD0CC1C3779CC24479DD231FDC0499454FB9BD45DF23C504D7C36258046565BFE6188CE595BF2B2B8D6721CC997CFFA116D65F9066A9329B320E3756DD59
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/proactive-msg-manager.js
Preview:	if (localStorage.getItem('executed_proactive_ids') === null) {.. localStorage.setItem('executed_proactive_ids', JSON.stringify([]));..}..var dat_now_iso = new Date().toISOString();..if (localStorage.getItem('customer_first_seen') === null) {.. localStorage.setItem('customer_first_seen', Date.parse(dat_now_iso.substring(0, dat_now_iso.length - 1)));..}..localStorage.setItem('customer_last_seen', Date.parse(dat_now_iso.substring(0, dat_now_iso.length - 1)));....var enable_console_write = false;..var _pro_settings;..var _interval_id;..var _ip_stack_data = JSON.parse(localStorage.getItem("style_" + document.getElementById("divicw").getAttribute("data-bind") + "_" + window.location.hostname)).ip_stack_data;..var _customer_prop = {.. "Page URL": location.href,.. "UTM source": proactive_queryString('utm_source'),.. "UTM medium": proactive_queryString('utm_medium'),.. "UTM campaign": proactive_queryString('utm_campaign'),.. "UTM content": proactive_queryString('utm_content

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	106040
Entropy (8bit):	6.091471642755104
Encrypted:	false
SSDEEP:	3072:czdL0OvYZCV66KBo61eXJmFNLbywtCrC+Kl:cdgC130eWLOBG+E
MD5:	3742A14031CD10D090A409EAA5E9D537
SHA1:	41F066AEB435A0D73C6455F82A355144E5F195C3
SHA-256:	A18C337AAF0D5D2F9742F0EA6DDECA8149B3A445E33593AB7A83BD922376B4EF
SHA-512:	E689A54181169DAB33DBC32142EEE396D4D68AFC792D7B4D1B8043B427B6C5BFF5F8E62D3576C20CEDDF63010C221066395E80DACA87CCB2A536E4296BFFF110
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/home/analytics-093f6b8fc446bb6e0878c31009b6635462dcf836828d4b63cc220fda449de9c9.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 230 230".. style="enable-background:new 0 0 230 230;" xml:space="preser

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1446
Entropy (8bit):	5.067572570571567
Encrypted:	false
SSDEEP:	24:YSxnWXhp1dAgz7X4lFC7ZuJmOe2wHD4HNkI+gNtN3eCkuyCEb/G7JhCdazY:YStQhILCumt9WNk5gBVyZbcOWY
MD5:	25C8BCF95F567572136FA8B570048E57
SHA1:	9FB0E77ACE5F4A095C2CAC4A27D86DA313D8C52B
SHA-256:	906C9D89C8CE8EC211862C4831C3A8798F2D882D2A0D21196FAE55CCE11502EA
SHA-512:	DF787032ECEA7B8D9ABAC07FED2693CBF9C3014F05184BB775AD2FEF78E56B9EACA34E8E27AE00E0E7FC8DED36071E208F207A05D579D883F3D72AC69F54DF06
Malicious:	false
Reputation:	low
Preview:	{"website_id":4842,"appid":"DE17101053","clientkey":"0WOZrww6","enable_proactive":true,"button_shape":"type3","button_color":"","headertext":"IMImobile","bylinetext":"How can we help you?","buttontext":"Get Started","widgetcolor":"#c6d5f2","isemojienable":true,"isattachmentenabled":false,"showprevhist":1,"name":"Team DNC","site_url":null,"wt_type":1,"wt_type_enabled":false,"text_color":"","logo_path":"https://imichat-preprod-app-share.s3.amazonaws.com/logos/45961866638542366318856090__DNC Logo.PNG","visble_on_wh":false,"widget_visible_type":0,"outofoffice":"","agent_avail":1,"isbackgroundenable":null,"isforceturnoff":null,"forceturnoff_hide":null,"forceturnoff_message":"","blacklisted_i_ps":null,"prechat_welcome_txt":"","survey_fields":[],"ip_stack_data":{"ip":"Jv8GqZ2sUIjyPXwDcSOnOrhpFQ4VbYQgrAoNZVpznufMtN1rdDO5iuTeewY1T7Xf"},"settings_refresh_timeout":1,"groupid":1866,"transcript_request":1,"play_sound_notification":1,"qualify_contact_type":3,"quick_reply_fields":[],"show_quickreply_

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=gwo2tmd&ht=tk&f=10326.10327.10328&a=15080471&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 299 x 90, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6926
Entropy (8bit):	7.810325421174035
Encrypted:	false
SSDEEP:	96:rknmWIF2dqrZkH+HzVYT5EQCw7SfwwjKKhUZIXY9SwhvCbUWd8b8ihllB+NlyMZq:rknZOke+iUSfJKgS91WdDWlf+NlFq
MD5:	ADEFF6454558869B9C1240D29EC77EDF
SHA1:	F1446C56E84A01AB3E480AC774E11E27F0EAF4DB
SHA-256:	E32B9AA0537AA96F47CFD8C3850AE44F1281CA2B85128619119E701CD2AC18E3
SHA-512:	CFBE636EFA03BA6B869EA778AB60A7BF300223B550857D55731FEA5F5E4668367C0B69F2DB637408F9977FCC164C6E7E0E42F69E75C7B5002F15A2876EE328CA
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/user_files/user_files/000/080/767/original/D_Logo_Horizontal_White_90.png
Preview:	.PNG........IHDR...+...Z......pd....pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.3 (Macintosh)" xmp:CreateDate="2022-09-08T11:19:42-05:00" xmp:ModifyDate="2022-09-10T14:11:51-05:00" xmp:MetadataDate="2022-09-10T14:11:51-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:19d6276f-88a4-4d11-ac41-fea3433b79d6" xmpMM:DocumentID="adobe:docid:photoshop:edc994a6-d2a1-1f46-a1df-14d16476e826" xmpMM:OriginalDocumentID="xmp.did:ef

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3015)
Category:	downloaded
Size (bytes):	132466
Entropy (8bit):	5.605552800819704
Encrypted:	false
SSDEEP:	3072:uSeSzLbTUsTY0hvpuiD9qwLr7iXuLDIIkz:2SzvLhvpZ9NnWCIIkz
MD5:	2079990CB9BE0DFC0838B49AC8C2C12A
SHA1:	6C5F65113625D0F6F8A57851190EC90B1F47CD1F
SHA-256:	EE904C0746288DD071D2EF7C5C55A4E9308656FAC8E512FB7F2617D108404FF1
SHA-512:	1019040936ED976DE997C6F65F382D7852933D7F0103753B37A02322730524909A3313A3614D284E0F83E0BCC90F03C8969B1DA183A56E1E6406C4C6E05CB8CC
Malicious:	false
Reputation:	low
URL:	https://pay.google.com/gp/p/js/pay.js
Preview:	(function(){window['denylistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [-718583466,-651407173,1501053020,1270931793,1878965203,1359979311,-1556396599,-929820290,-1993966558,969369487];}).call(this);(function(){window['whitelistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [1432838318];}).call(this);(function(){window['denylistedMerchentIdsHashedValueListForGpayButtonWithCardInfo'] = [1260893,211376492,-383338062,621213554,-1574521140,318272649];}).call(this);(function(){window['denylistedMerchantIdsHashedValueListForGpayButtonVariant'] = [];}).call(this);(function(){window['allowlistedMerchantDomainsForBnplDynamicButton'] = [1605359444,876441467,-888714055,-1854751591,1770304976,217951089,1158429213,949802706,-1274801837,472748591,1204828669,1166688988,271310681,587727802,-1217994575,718428304,-1760474810,-1663395690,1305463045,-793915326,-1306525966];}).call(this);(function(){window['dynamicGpayButtonVariant'] = "GPAY_BUTTON_VARIANT_TYPE_NONE";}).call(this);(functio

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5820
Entropy (8bit):	4.449696971646956
Encrypted:	false
SSDEEP:	96:Ty6vLhsHGQv1eqVWYDht179qntPZaqUHZAqmY5Kr51JHaCmXt1hB1:T/LhsH9AY9YFYg4
MD5:	FEF38535DE4344FB45421EDF95036316
SHA1:	E05D2AAB68BDBB9A931618FB3A217DF5186DDF5B
SHA-256:	27F13B7042ED9FD650FAAFB5C66A97AA888A5A0E70B1EB1DF03F3E2D07867AC7
SHA-512:	1C57E48A9786F9C8CA68D7BC53FE8AA16FFF6B8EDC53276FC8D12461CCF4CB56BCF78A7F6F28C7862065D513654D9B743A7D18F10C122AC559FB828B7321A82F
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/radio-activedescendant.js?
Preview:	/.. This content is licensed according to the W3C Software License at.. * https://www.w3.org/Consortium/Legal/2015/copyright-software-and-document.. .. File: radio-activedescendant.js.. .. Desc: Radio group widget using aria-activedescendant that implements ARIA Authoring Practices.. */....'use strict';....class RadioGroupActiveDescendant {.. constructor(groupNode) {.. this.groupNode = groupNode;.... this.radioButtons = [];.... this.firstRadioButton = null;.. this.lastRadioButton = null;.... this.groupNode.addEventListener('keydown', this.handleKeydown.bind(this));.. this.groupNode.addEventListener('focus', this.handleFocus.bind(this));.. this.groupNode.addEventListener('blur', this.handleBlur.bind(this));.... // initialize.. if (!this.groupNode.getAttribute('role')) {.. this.groupNode.setAttribute('role', 'radiogroup');.. }.... var rbs = this.groupNode.querySelectorAll('[role=

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1105)
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	5.201544373515382
Encrypted:	false
SSDEEP:	24:WILQf5Gp7+TUsz5Ew09E25rWF1FID1ZqMWna+RPAQOjyJp3+uxVHgu/5sI1:FUGp7AFZ09XrCPIZqXnpPAXjEVZF
MD5:	98741259BF0478B35ED22768E2084191
SHA1:	614E91782A8AE01D28DD72028C328A6C23E07DAF
SHA-256:	2E0BEDCA23DE7AE87ED0B6BD76759B826D7CBFE4DE1ADD8204858B26FB806881
SHA-512:	81B169B2E8077AA70A22BD291FC99F1388EA36F5FA9518E67AC28AFED143CB7B9C8BBBA4852625938614D8B6546EF85B31A40F80901D3974E6E4A47807475983
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/includes/js/challenge.min.js
Preview:	/* browser_challenge/static/challenge.min.js */."use strict";function Challenge(a){var b=async function(){const b=await fetch(a+"/challenge.json");return(await b.json()).challenge};var c=function(a,b,c){var d,e,f;var g=0;for(var h=0;h<c.length;++h){e=c[h];d=e[0];f=b[e[2]];if(f(a,d))g+=1}return g};var d=async function(a,b){const d=a[0];const e=a[1];const f=eval(a[2]);const g=new TextEncoder("utf-8");const h=await window.crypto.subtle.importKey("raw",g.encode(d),{name:"HMAC",hash:{name:"SHA-512"}},false,["sign"]);async function i(a){const b=await window.crypto.subtle.sign("HMAC",h,g.encode(""+a));return Array.prototype.map.call(new Uint8Array(b),function(a){return a.toString(16).padStart(2,"0")}).join("")}var j=0;var k=0;var l,m;var o=[];while(j<100000\|\|k==0){m=await i(j);l=c(m,f,e);if(l>k){o.push(j);if(b)b(o);k=l}++j}return o};var e=async function(a,c){var e;if(c)e=c;else e=await b();var f=document.createElement("input");f.name="ch_challenge";f.value=e[0];f.type="hidden";var g=document.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/config/10111714.json
Preview:	{}

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1825793
Entropy (8bit):	5.532601239384262
Encrypted:	false
SSDEEP:	12288:gkWdiXHozDVzBDAyeQUPDqI5zSKUUHdizHY1LEZc:grs4zDVzneQUrqI5vUwEZc
MD5:	262F73B932A2A14EE54EECB18FEE3A24
SHA1:	CB6723FFA41772BFBF5671C9FB050DFE220CC138
SHA-256:	B42303F10CA10F71806C9ACFE6E062309481BFB45F96B9DBDCE3A3D64E45042B
SHA-512:	31596C0317CDD1C5E9C3AE5F513BF42C31A56C088F7EB51FB70B52FE9AF3A798109BF519F8BCA8F40702924AD6759E8A5686CDB9050F82FB07D0F595C642F11E
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/cf/assets/app/6a3e1dd153d5af7e8ded.js?form_app=us
Preview:	!function(e){function t(t){for(var n,o,a=t[0],i=t[1],c=0,l=[];c<a.length;c++)o=a[c],Object.prototype.hasOwnProperty.call(r,o)&&r[o]&&l.push(r[o][0]),r[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(s&&s(t);l.length;)l.shift()()}var n={},r={13:0};function o(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var a=new Promise(function(t,o){n=r[e]=[t,o]});t.push(n[2]=a);var i,c=document.createElement("script");c.charset="utf-8",c.timeout=120,o.nc&&c.setAttribute("nonce",o.nc),c.src=function(e){return o.p+""+({0:"list-admin-1~listAdmin",1:"vendors~list-admin-1~listAdmin",2:"receipt-1~thanks-1",4:"list-admin-1",5:"vendors~list-admin-1",6:"entry-mode-1",7:"listAdmin",8:"passcode-form-1",9:"receipt-1",10:"thanks-1",11:"vendors~listAdmin"}[e]\|\|e)+"/"+{0:"05fe15e1e4af1cf3fcd5",1:"131c11bea02a904e9293",2:"c4633e6657004015396b",3:"1f7e

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3508
Entropy (8bit):	7.8968396641614325
Encrypted:	false
SSDEEP:	96:wSDZ/I09Da01l+gmkyTt6Hk8nTP96a54Afl4eE:wSDS0tKg9E05Toa5a5
MD5:	00951F5DB7791E18D9BBB1658CF13787
SHA1:	BBE6CA23755512DFE70A0C2CD0CAA071784A9A13
SHA-256:	CAD2730B34803585CC151A2ED5B259FD71C76916DB4970B77DEF5D4FA6D51743
SHA-512:	E4BE38FB243A9FBF0C6DA906F4ACF04FBEB3F2C89573DC68889A8E7E7ABAB945A5FC953BDD021561010D761B84ADA32E5C5472675A84965C96E7BF32B81A2835
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/images/insignia.png
Preview:	.PNG........IHDR.............;0......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x947, components 3
Category:	downloaded
Size (bytes):	207581
Entropy (8bit):	7.97942371701164
Encrypted:	false
SSDEEP:	6144:1AOno/h5buLaZmeizqxDu5I1HJtB7gYhTIRt8XAbAcVtNL:Bo/hRuLaZDUE7Brhk8wXnZ
MD5:	FF9B6747557A45EBA1DCF1679404AAFD
SHA1:	983D0C5E82A67D97F155B41101CA0192880FE6E2
SHA-256:	77EE362404D9544B6068A8C601B73C39FD29049C8AD08B11BB98985B5DCCE61D
SHA-512:	E153B85D042AB953947B66650A7C5413B1BB267FD890215BFF95C063007CE9B14EEBED94C68180300FC88DE6BA35C0E820F0371B8C86A0A3A257CF5EA1597F54
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/home/top-background-5b5936f581d63f8a41c3cbc6280ee4a8c0c92fdb227b0ab972e5fd616e2db443.jpg
Preview:	......JFIF........................................................................................................................................................@..".................................................... .y.[`.r.{..S&.M....Z..Ju...?.V..3..k(Y..+\g.#Mt..,...JL."$..(.L...7.../].&F.../_.u.k.. ] ...=.BSfmk...VE']...Nt.......Z....Nq..v6..B....Wz..j...r..b...6.l....F.T.[...\.Z.HbP....a...egl.F...Z..#.Ie...k...-..t.V8.J..Z...9.$.uK.^..hX.JLYX,...D.2b....?q..@.-2.........z.....l.b.\.....-N....m..G.>Y...i...6QY...<.JW0...7..;.n.......5UA.U.bC)......z...wZ.z...........ZH.0.3...{...O,..,[ng:....-..e#..b......6..Y%m...0YZ.Jb.V.$D..$D....q..i.6..lhc...u.6...)\|v.>.a.i"pG..f.?@X..h.;..{C.mc.}...AnN.4M..t5.NUp.v.3........[.z...b.Z.#...k.33.F.s.qZ..^c...+...+rR.`..#;.qpx.Jd.IL..e.I...7..b.NY#..#..YD...+]u..N.`..M....i..7.#\.m..v.&g ....b........F...i..h...\..-..9....8.C...c.....cE...5GER55`..E*....r.H...EG.......?.A..=...W.^z...J.`.w..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2544 x 1600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1257250
Entropy (8bit):	7.9888692332835225
Encrypted:	false
SSDEEP:	24576:B1j9rpdUo6EksNFYx3Dg2MEOMZp4Yv8KjZq/Ow+9st/:BUopkssx3lRTZOErFq/T+iJ
MD5:	A9272E8166F30F235595D1EA6FB6E431
SHA1:	6DE3A800B184E6F84374C3207BCA8FB02CFA9551
SHA-256:	B0AD1C94C8D49C34EF22FA625FFC4CE241F2159A606BFFA357C9C1AEB772343E
SHA-512:	ACCE0893D7E494CA763DEA9D395FBE2CEA1EE19A590432BC2F555BE507B1D4C849D05BFD4D4845719D2935E006E7A9BAB6F035153CCE3C8B807785F7138776B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.....<..X....pHYs...%...%.IR$.....IDATx...[.d.}.y>..Gdf.HI...........1..V7.TeF..>..\,.$%Q.$E1A.........p.......}..@.$I.$I.$I.$I.$...?..H.$I.$I.$I.$I....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I.$I.....O.$I.$I.$I

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.0681734165596914
Encrypted:	false
SSDEEP:	6:tnrL0UpKmc4slKZH9J69KsKMjR4JVqAhO1m:trL0OKgZHv6MxMjqzlsm
MD5:	3B950E82BF9B991ED2586D7D71A8B57D
SHA1:	AADBF6D0D4D8E5D4819C55F2E5ABEE12EFF3E7DC
SHA-256:	9288121265E1F909697B432D981EF85B3916E4B495CB7788ECA7F7B16104FF71
SHA-512:	C51D683B76F606B9857E1D263E893B53F0720565C6C8B785F5172D7CCE4A185EB1C6050F0E853D13DD598193045EABF8F543568AF1354221DC5E0B8C97F084E5
Malicious:	false
Reputation:	low
Preview:	<svg width="14" height="13" viewBox="0 0 14 13" xmlns="http://www.w3.org/2000/svg"><title>X</title><g stroke="#EE6148" stroke-width="3" fill="none" fill-rule="evenodd"><path d="M1.815 1.742l10.37 9.516M1.815 11.258l10.37-9.516"/></g></svg>

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	314007
Entropy (8bit):	5.565220207262035
Encrypted:	false
SSDEEP:	3072:6W44gTxaiJ9iVVZLQOF/hf3K0PjHgvLMzU467JXDBin0bukM3M/AAcLm/qHi:54nx+VV9QOF5NEHVin0qkMc/AAcLm/qC
MD5:	E369EE7FD70B8422AE4EBD7F78B30BFE
SHA1:	29D27BFB24B7C4757F157D3EDB565EC55EA15352
SHA-256:	323ACC8AED8ED88C2ACAC957A67169E2D2287656680C283B72E55AD3FFDC7E64
SHA-512:	71C2F0097A2B672DC06634823672C71ADA08BB56B36BC633776255F1795FD7E6EE28995170B86683F6DDF4731E35401D81D43045E6B0E43AC54CB6106A5D6473
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-SQ4QER7ZE7&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8953)
Category:	downloaded
Size (bytes):	281003
Entropy (8bit):	5.609479636725685
Encrypted:	false
SSDEEP:	3072:WZvO8aiJ9iVVZLQOFhhf3R0kjHgvLMzU4676XDWqM0bukM4/hLm/QhJi:0m8+VV9QOFPZE4qqM0qkM4/hLm/uU
MD5:	A5713DBCB9B3592E50193CA04A8630D2
SHA1:	49B6506704AADB4B2F3CF48981177876FEA91B85
SHA-256:	CA2E706A960751E225DF61A912D610D2A1DF925B2ADF0F7CA8707F111B2883B7
SHA-512:	57BDCC960A6FF1412FBB202C8B682198FF96C47ADA5F814A7303241D0DF56595B8DD2815D88AAD284AF0373380CC4FD0A15965E98329B5C6676ED1E3E07F0690
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-32S8B7ZFEL&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","^static\\.seders\\.website$","^news\\.grets\\.store$","^rida\\.tokyo$"],"tag_id":14},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastN

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5631
Entropy (8bit):	4.980183460696329
Encrypted:	false
SSDEEP:	96:SdwRBGNBavs9r+OLeoEAngH3Vbaxwlb7fibqx9lFJ9999nad6ASnvn:9GPSOqrGOvbubUn9999a8vn
MD5:	5B095DE58C2A1506EDF36DF84C5DFCC9
SHA1:	C7A02DB71D6005C41AB2BD052C907EA94E416904
SHA-256:	53D524F0E6DA2BEDA925DFDBF39EF0F86AC028D675CF6711242E01922897645E
SHA-512:	48BFACFF3F6596A68430A40DD95FA2B2EEEF779FB32B4EF3FCBF43C159DDB6B6BF1B6CC007216364007E44519A73846EC970D076E367937B05A4241D73BFEF73
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/chat-widget.css?id=1719991434900
Preview:	@charset "utf-8";..#divicw .main-chat-cont {.. position: fixed;.. top: auto;.. z-index: 9999999999;.. height: calc(100% - 100px);.. max-height: 680px;.. width: 350px;.. right: 25px;.. bottom: 85px;.. transform: none!important;.. -webkit-transform:none!important;.. transition: none!important;..}..#divicw .main-chat-cont.chatmobile{.. display: block;.. width: 100%;.. height: 100%;.. max-height: 100%;.. top: 0;.. right: 0;.. bottom: 0;.. left: 0;.. margin: 0;.. padding: 0;..}..#divicw .main-chat-cont.chatmobile .main-chat-cont-sub{.. width: 100%;.. height: 100%;.. max-height: 100%;.. top: 0;.. right: 0;.. bottom: 0;.. left: 0;.. margin: 0;.. padding: 0;..}..#divicw .main-chat-cont .main-chat-cont-sub {.. height: 98%;.. width: 100%;.. border-radius: 16px;.. overflow: hidden;.. box-shadow: 1px 5px 14px rgba(0, 0, 0, 0.31);.. border: 0px solid #d1d1d1;.. z-index: 99999999999;.. background-color: #f8f8f8;..}..#divicw * {.. -webkit-box-sizing: border-box;

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 6 x 5
Category:	dropped
Size (bytes):	50
Entropy (8bit):	3.8488255736198
Encrypted:	false
SSDEEP:	3:CN+ltRPQEsJen2sSX:xvQEsJ42sSX
MD5:	E4D673A55C5656F19EF81563FB10884C
SHA1:	1F2D8ED221D39329251AD3A6FF1EDB20B7219443
SHA-256:	F3A8992ACB9AB911E0FA4AE12F4B85EF8E61008619F13EE51C7A121FF87F63B1
SHA-512:	E0B03411282A979CF772F700D9E5634B0C25C612E380AD33C0D59059B1B479D027016D5BEB148403EF185430DB35F5FAED362F36CE2C8ECAD0E6D8E30CEA97B4
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,............bx..j....;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2687), with CRLF line terminators
Category:	downloaded
Size (bytes):	37845
Entropy (8bit):	4.615599084628817
Encrypted:	false
SSDEEP:	768:MrHoYOB2ugAbH6Mxkap8bOtw/i+rLgvVaS:TrEM6ap8bOtw/i+vgvVX
MD5:	1A0DDB467076958E3D7A1272BF9FFAA5
SHA1:	6F9B8FD197A0D9BDFAE8C9CD1D6DE2C7C8209461
SHA-256:	82B84FA6AB40B9C826709C872DF5FFE912FE22EB9C94209691016F5121E4DF85
SHA-512:	73495EC8959DA40F15960171AC905D2BA64AEACF7A808E702C18ACD70E6B6AB2F57DA17BCE9162CFE19B7004DD371D23A2DC037059AFEB77E11DAF24E2AB1271
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/imichatgeneral.js
Preview:	..var imiEnvironments = {.. "target": "IMIENGANGE",.. "IMIENGANGE":.. {.. "serviceKey": "",.. "apiMT": "",.. "accessToken": "",.. "asset": {.. "appId": '',.. "appSecret": '',.. "pathConfig": {.. "assetPath": "",.. "root": "".. }.. },.. "imiclient": {.. "config": {.. "storageBucket": '',.. "apiKey": '',.. "messagingSenderId": '',.. "appId": '',.. "projectId": '',.. "measurementId": '',.. "authDomain": ''.. },.. "imipush": {.. "safariWebPushId": 'web.com.imiconnect.safariPushTest'.. },.. "authdomain": 'https://rtm-us.imiconnect.io/rtmsAPI',....."rtmsdomain": 'rtmmsg-us.imiconnect.io',....."safariRegisterURL": 'https://rtm-us.imiconnect.io/apnpweb'.. },.. "sw": {.. "config

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 260x260, components 3
Category:	dropped
Size (bytes):	16716
Entropy (8bit):	7.533526864517167
Encrypted:	false
SSDEEP:	384:d1nDLCYNg7rOved6YPVzJe5hlGvUgo5K+IXh8C0yhQ+Fd2JZJD:d1iYy/W7wzJe5uUg+KXh8DyhQ+FQD
MD5:	C244BC3F6EBE6D1991DDCDF3559BC04D
SHA1:	C2B59F13A06C2327F0463C97D3BAAA4D6871F191
SHA-256:	3FA6882C5639F7524D6863DC91CFA74A45048F639DADCE6B3BEB3B7528BB7327
SHA-512:	5FDB8D48BFCD9A9C398AB6C834F397D2836BE2CC6AAC285D4C3B64E889FBFE0122E3441E55ACEEF1E387051FC1B9E98646E26677DD8D37BACD7053D574666DEB
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL...................................-appl................................................desc...P...bdscm........cprt...l...$wtpt........rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt.......0ndin...<...>chad...\|...,mmod.......(bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc............skSK.......xcaES........heIL........ptBR........itIT........huHU........ukUA........koKR........nbNO.......$csCZ.......6zhTW.......LdeDE.......XroRO.......hsvSE.......zzhCN.......LjaJP........ar..........elGR..."....ptPT........nlNL........frFR........esES.......hthTH........trTR........fiFI.......0hrHR.......@plPL.......TruRU...$...fenUS........daDK.........F.a.r.e.b.n... .L.C.D.L.C.D. .e.n. .c.o.l.o.r ..L.C.D. .............L.C.D. .C.o.l.o.r.i.d.o.L.C.D. .c.o.l.o.r.i.S.z...n.e.s. .L.C.D...>.;.L.>.@.>.2.8

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35225), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	37273
Entropy (8bit):	5.444745644338983
Encrypted:	false
SSDEEP:	768:xU6WU6yerGpV2uweoAfADsi7sL5P9IEXlCU:xU6WU6ye4MuweoqiY3
MD5:	83F1B1F110A1CB72D86C46D6812C0819
SHA1:	49DEC3CE3FCABC1561F207B396544117707B0B61
SHA-256:	EEC9215C76C4F07272D817BF1DEAF073BDD1976FD7EF0AB63A55CE9652CC1669
SHA-512:	B6AD3826F86496A000E419A9F4D3380DACA21A21009D8C93606C89BCB7B593E3A75A5BC8C569EA354BE280D1D5F21B1D5652CF09F75CCBD37729AC9618F1E0D7
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/packs/js/Datadog.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2
Preview:	(()=>{"use strict";var e={68605:(e,t,n)=>{n.d(t,{fy:()=>eJ});/! **************************************************************************..Copyright (c) Microsoft Corporation.....Permission to use, copy, modify, and/or distribute this software for any..purpose with or without fee is hereby granted.....THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH..REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY..AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,..INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM..LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR..OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR..PERFORMANCE OF THIS SOFTWARE...*************************************************************************** */var r,o,i,a,s,u,c,l,f,d,p,h,v,g,y,m,b,w,E,x,k,S,T,O=function(){return(O=Object.assign\|\|function(e){for(var t,n=1,r=argu

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.688229306645872
Encrypted:	false
SSDEEP:	3:PLRCkurGtD2OiW2YY:TturXMY
MD5:	E3CBEF354FD1F422D6AB57FCC90C8685
SHA1:	5D43EEF4D7BFD0467A50052D4FB89AE30D69E936
SHA-256:	CEE084DE42F96676F008C00EDE69E6889114F66543394F9D3A3B6DAFB48C7096
SHA-512:	1CAB30F2F1F0DA5C177C87F9E4F5376006CBC00C59B2049107D91FB41BAC31FF8D66B5B1EB11F623189B9E8761D4BFB50EA50AB0C59506DAB06A71BA868787AB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkCnFP1aEItfhIFDZc9UHASBQ37-RgbEhcJf0iCAGpMIlUSBQ2XPVBwEgUN-_kYGw==?alt=proto
Preview:	ChIKBw2XPVBwGgAKBw37+RgbGgAKEgoHDZc9UHAaAAoHDfv5GBsaAA==

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	546
Entropy (8bit):	4.888262160157973
Encrypted:	false
SSDEEP:	12:Yyt1Hrf4IFFQbSJN1KSsu6exBA9QmA9abcA9FXQEBaeo4czgD+:YybLf4SJLKSHxBYQmY7YFBoV5
MD5:	B3C6248C5271142BCC44F26A08434252
SHA1:	4E2FA28E70E795AB06647A900B33DA2BBA0C29D5
SHA-256:	7CDC3DFFD7A498CD2C1DADFA79E04C5880A3D04C5FBE8AC3F6976282C5D7DB69
SHA-512:	60A65C5AB1E7938BD83979F1D8DDCD5D30D8F5C37E00F0957439B26A07C6D8FA2269A03FE6E01EBD5134197DE3B4A245347D2539E2523D941B8755BE04BD2505
Malicious:	false
Reputation:	low
Preview:	{"integrations":{"Segment.io":{"apiKey":"bXLNQaISG3nV1RsFePE5MJ9GHnQrU3Ev","unbundledIntegrations":[],"addBundledMetadata":true,"maybeBundledConfigIds":{},"versionSettings":{"version":"4.4.7","componentTypes":["browser"]}}},"plan":{"track":{"__default":{"enabled":true,"integrations":{}}},"identify":{"__default":{"enabled":true}},"group":{"__default":{"enabled":true}}},"edgeFunction":{},"analyticsNextEnabled":true,"middlewareSettings":{},"enabledMiddleware":{},"metrics":{"sampleRate":0.1},"legacyVideoPluginsEnabled":false,"remotePlugins":[]}

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32025)
Category:	downloaded
Size (bytes):	84345
Entropy (8bit):	5.366447824180109
Encrypted:	false
SSDEEP:	1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ
MD5:	F9C7AFD05729F10F55B689F36BB20172
SHA1:	43DC554608DF885A59DDEECE1598C6ACE434D747
SHA-256:	F16AB224BB962910558715C82F58C10C3ED20F153DDFAA199029F141B5B0255C
SHA-512:	3DCAE1FF6E98C64E3586BE3EB14DD486C51F7D4E9FA1B8F9A628BE4FBB6A9AB562F31F9B50E16D2E0C72B942BDBE84EEE8E0EF87FA730DB1428B199A59D88232
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1717432320g
Preview:	/! jQuery v2.1.4 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	451
Entropy (8bit):	7.0636320273410655
Encrypted:	false
SSDEEP:	12:6v/70XldMAJY8hM/ghl5SqByZVbyeQbJKslNl7JOiX:BGGYPghlBqf07jX
MD5:	C5262034A596BD87AABCD042EF6D940F
SHA1:	F6756203A877440A74F21F7EDA3C64219F7D1159
SHA-256:	4E59CBBE3D493C36D6CB80FE6D0D1D3B7098D19D33C3F9DBDA9BBBBC74B014D0
SHA-512:	B734686A4C2EEF3571C4760CA9301A66C7C3B0C34F2CA36760F739281FED00533DCA70C3F858F4AB8F1540B2C0A922F8F91A397C4FA04B58DAA2C0DBD3E4217F
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/images/spinner8.png
Preview:	.PNG........IHDR... ..........Y.D....tEXtSoftware.Adobe ImageReadyq.e<...eIDATx.b...?.@.&....q!.o... f$..P......./r.!%.$.X....&.L.(...@.....b[.. .Y...\@..)._.1....q'.......H=.....^b....7....@.....?@...........5..?.....@.JA....$...l.....(....9-,'...@..).Y...@<.).b`\|.....Z.-gB.=:.8...A....jd..(..P..A..../...Z$..R.*..: ^..r..@..-j.D..c....Pu...8Uj.8..@l...x..?@.q.....)..B ....u.og..W!.......T9..b6 >..F.n.}..\h;.p.fC......Q.Eno.....IEND.B`.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon
Category:	downloaded
Size (bytes):	5524
Entropy (8bit):	6.207790912582904
Encrypted:	false
SSDEEP:	96:zCQrGciljclZBkeKsf7DuAv2Vgunrwt8aCxkS7ugxQGLnGsmMVZGo0SSkwsHHlP5:m06jITf7DuAv2Vxr68aCkAnvYSSAHHlx
MD5:	E1C00918D159783C4A81747C53EEEC95
SHA1:	99F3AFBDC9B7C327F7509A3C73E1D1008748F794
SHA-256:	BA486D0032676C871F52ACDD66733833C0902F0B7ABD0CA0F1E5E47702A1C54F
SHA-512:	AB27230D0E65D99B2E252769B124C84610094462462555581AB7F6A550F077DD4240F4B45C0A44248DB627C26AFEF2B0ED7CC06A370B37FD31D63AC1050BC2AD
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/fonts/icomoon.ttf?ktzfl3
Preview:	...........0OS/2...3.......`cmap.V........Tgasp.......p....glyf.e.....x...`head..2........6hhea...).......$hmtx[......4...dloca+.0........4maxp.$......... name.J..........post.......t... ...........................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79.............w....7.............%.......bb.............D...&"....#"&'..5467.6......."'&47.64'&"......27.6&'............3267.64'........M++M.. ...+x./.+...=....X.......!!!]!..7.;:.8..$%%$$\23\#.....C..... ..N+*N...+.//x+.....<..X.......!^!!!..7.;;.7..$\23\$#&&#.....................).7.W.u...!"....3!2654&.!"....3!2654&7!"....3!2654&3#"....;.2654&.!".....3!2.....3267>.=.3265.4&#...+.54&#"...'..#!"&5.463!2......8.........x.......Y...P.N.........\|!....!...f...AA..h............p.AA.B'.p......#....''..".'......................................dA....A...........A....A.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	112158
Entropy (8bit):	6.147803526953724
Encrypted:	false
SSDEEP:	3072:WzdL0OvYZCV66KBo61eXJmFNLbywtCrC+Kl:GdgC130eWLOBG+E
MD5:	A4D2794C23E055B7B250568E3F9EF3D1
SHA1:	18A6F3613109CC27B886A22E049070411F8A11E9
SHA-256:	D4E08311CE2B914A8DEF27A5A6F715B44EAD2F852A41DC6EE49C908F6E346EBC
SHA-512:	B04380C5EECEC1502256D82DE7BDB3D2C7E24F0ECD1F817F86A3A01CD3D27F1CF3AD23926A8D0F061599AD1AB261EFA2937EE8AB73DB350C1C64FC8C947FA49B
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/home/branded-forms-a08409bd20cae3bdc4596d318ed891f70c78869b6b2f7a642aa8427a96e8f348.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 230 230".. style="enable-background:new 0 0 230 230;" xml:space="preser

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (945), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	6974
Entropy (8bit):	5.357639403978987
Encrypted:	false
SSDEEP:	192:uu7/Nro7XqH9kGpGgKbw6fGRgVw8JKsKf/nx/k:ROaPYPbw6fGGVIrnnx/k
MD5:	4CCE1CAF31C30A1F48D38DDCC62C6BCD
SHA1:	BE54AAF14B35DFD7B43863E2FB504486639133FC
SHA-256:	726D15927233B88681888CB561C591FD4BA9728FC1D29EF5D534F7444B0FA567
SHA-512:	3EB780793AE59969BFAF894366EE840F92E34156377A34203635B97FD19E1CBB90CFA7DA85D849D30B8D0B6B2D9D9184B0267D7083C6E56641125E554C480684
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/forms/unsubscribe-4/
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">.<head>..<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta property="og:image" content="https://joebiden.com/wp-content/uploads/2023/04/240424_SocialShare.png">.<link rel="icon" type="image/png" sizes="192x192" href="https://joebiden.com/wp-content/plugins/dem-online-theme-extension/favicons/android-icon-192x192.png">.<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>.<script type="text/javascript" src="https://actionnetwork.org/user_files/user_files/000/095/477/original/overrides_wo_rally.js"></script>.<link href="https://actionnetwork.org/user_files/user_files/000/091/295/original/page_wrapper_reelect.css" rel="stylesheet" type="text/css" />.<style type

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23701), with no line terminators
Category:	downloaded
Size (bytes):	23701
Entropy (8bit):	5.240699120372144
Encrypted:	false
SSDEEP:	384:TG4KFw2+Khh0f9DlVRIotOqFNL78pNg3a9yJMEvzrkdZX2MgCo4B4if+f:T4w2LhGVDlVOoMqFZba9Gxv/kjx9e
MD5:	E15C8505A4134E92908BBB077B07B5A8
SHA1:	9EA209E12C76FCAAD031EB6550815FC415960AFD
SHA-256:	26AAF1BA67A640C182DDA3B400D2F37D00AA210A274E6A32BAF7BE8D3B9B4F3C
SHA-512:	288BC6F5F4FEC7549A3398694DDADC4FA20E0499423CCBCA415F4995AE15BF9739B63F3680F544C419C78A13D00FABED8D8D3D5FD31EE703B827B969FCD1940B
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/bootstrap-datepicker.js
Preview:	!function(t){var e=t(window);function i(){return new Date(Date.UTC.apply(Date,arguments))}var a=function(e,i){this._process_options(i),this.element=t(e),this.isInline=!1,this.isInput=this.element.is("input"),this.component=!!this.element.is(".date")&&this.element.find(".add-on, .btn"),this.hasInput=this.component&&this.element.find("input").length,this.component&&0===this.component.length&&(this.component=!1),this.picker=t(d.template),this._buildEvents(),this._attachEvents(),this.isInline?this.picker.addClass("datepicker-inline").appendTo(this.element):this.picker.addClass("datepicker-dropdown dropdown-menu"),this.o.rtl&&(this.picker.addClass("datepicker-rtl"),this.picker.find(".prev i, .next i").toggleClass("icon-arrow-left icon-arrow-right")),this.viewMode=this.o.startView,this.o.calendarWeeks&&this.picker.find("tfoot th.today").attr("colspan",function(t,e){return parseInt(e)+1}),this._allow_update=!1,this.setStartDate(this._o.startDate),this.setEndDate(this._o.endDate),this.setDaysO

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11154426359?random=1719991386522&cv=11&fst=1719991386522&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	4450
Entropy (8bit):	4.848903936588722
Encrypted:	false
SSDEEP:	96:P8gJNKd/CeFsjxwa6hUUcT7Nwjrt8CDrrtkvIEU/LyFiXuQfNptafQh7nmeUi1/b:P8gJWCqs1wa6hUUcT7NwjrqCztkvIEAd
MD5:	2DAE25EE810C612BD686CCA88D4B70FF
SHA1:	77C319B21C6B8DD49D41CEA572763506F93E553C
SHA-256:	E210BF9C625DAD6D31BACF068948496AE43C418CA3D1EB9686B262BD920ED92A
SHA-512:	2FB5DFFE0799E7B27A410D1C7022631D527DCE9D9390ACBF78B4E26AAA9F0E87683CABA10B900BDAF8A01655FD9038CE72825B7058749DE4C48D110B1F430DDB
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/bignumber-8eba026c8aa4cf7cfb7ee63abdae440e240e53a58ce00cda464c3bdc097bdb00.js
Preview:	/* global $, Pusher, setInterval, clearInterval */..(function () {..window.BigNumber = {. // Parameters controlling animation. tau: 10000, // Time constant on approaching correctness. minInterval: 100, // Minimum interval (msec) between updates. maxInterval: 440, // Maximum interval (msec) between updates. minTick: 1, // Minimum update amount. initialAmountSource: '/metrics/bignumber',.. init: function (element, key, stream, theEvent, opts) {. BigNumber.element = element;. BigNumber.currentInterval = BigNumber.minInterval;. if (opts) {. $.extend(BigNumber, opts);. }.. BigNumber.element.removeClass('empty');.. BigNumber.subscribeToPusherStream(key, stream, theEvent);. BigNumber.loadInitialAmount();. },.. subscribeToPusherStream: function (key, stream, theEvent) {. new Pusher(key).subscribe(stream).bind(theEvent, BigNumber.update);. },.. loadInitialAmount: function () {. $.getJSON(this.initialAmountSource, this.handleInit

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23121)
Category:	downloaded
Size (bytes):	236799
Entropy (8bit):	4.960814908825533
Encrypted:	false
SSDEEP:	3072:vX9LwmeWYqUXxL/RTVWOE1iz4ldHwqsGo4r:vVwmjYlBRTVWycQSok
MD5:	17872D6465929AF750695248B3AC4B78
SHA1:	74D51F869186F694B323EB7E5B8EE7EBCE57CC7B
SHA-256:	B61FE3411116393B562F90BC1BF23403DFB9708F6EE3C946C5D57A1093A244A2
SHA-512:	90BC7128576EA53A04AD03F55F81EEC73256FB8FA6F766C4F37E5C3190C38A351DA83F931711EFF69BA5764400C168802954B16F8BBBE42079526FE42854E597
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/widgets/v5/form/update-email-preferences?format=js&source=widget&style=full&permalink=update-email-preferences&js_inner=true
Preview:	/yepnope1.5.x\|WTFPL\|customized with https://github.com/SlexAxton/yepnope.js/commit/89d360496dd026072302a64d23c2b795ecef31ff/.if (!window.yepnope) {. (function(a, b, c) {. function d(a) {. return "[object Function]" == o.call(a). }. function e(a) {. return "string" == typeof a. }. function f() {}. function g(a) {. return !a \|\| "loaded" == a \|\| "complete" == a \|\| "uninitialized" == a. }. function h() {. var a = p.shift();. q = 1,. a ? a.t ? m(function() {. ("c" == a.t ? B.injectCss : B.injectJs)(a.s, 0, a.a, a.x, a.e, 1). }, 0) : (a(),. h()) : q = 0. }. function i(a, c, d, e, f, i, j) {. function k(b) {. if (!o && g(l.readyState) && (u.r = o = 1,. !q && h(),. l.onload = l.onreadystatechange = null,. b)) {. "i

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3494
Entropy (8bit):	7.877958940013607
Encrypted:	false
SSDEEP:	96:GyP1OOYPpWPy920sdoioFBYOYRe/YaljxiDPo:GCgL9+iNlaax
MD5:	1D0D0E2D43FE392ED5EAF9C52C0F6305
SHA1:	3F63C37E7C32EEEA933142EC335952222DCDF2C3
SHA-256:	7B068460A3E75449EF35D3B9C968A573591245AAB2CD8EBD373B6A1F444A909A
SHA-512:	88A7D0C94B0E39E4C19EE4F7E5740549926EB566B9CE57BC8436674C2120F90F74FB6DEDB2D7DF7C179581B45E5C60AEE2A07E6CAB1E407339F7B24B38EF66EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......7........IDATx..i.\U....Y2.$3.0!.$&,.4.......pAQTV..r_...r).@..B.P...B..@.(........$...I.!....d2.d....{nrm..9.....kj..w{....H. A....$H. A....$H. A...\|..}....e..k.9...8.hjB..h....\`..?....q.E.........`.\|....i*BJHB.0....0...........z...D...^.../..........P...4...1.X........"...8....I........#.)Hi8!ED......8.X.>)..Q`."..g....4....."c.p....t..d.j.)`..'...^`......."b.RG..g..!.Qo..1..~......RwBBd....>.Hi....@...~...x......b.hAv.......GL.......vC}..n..2..+.K.S............5'....2:..._......!........ ..B..4......I.f.PKRjN.!c:ROW..Wq.....Qp.8...-v#B&..i..8...A.C/.yo.@..-.i........._.r2&...?.?..F$.(.R.i`&0.X...S..(..{._.W".&.........E.dL.T.].mH"v"I..y`.\|.Q....w".\#...l.+.../...2..J..He...".[..X..p .,..\.H..8..p.....o).%!..P..r.).j~.I.`..>....V.(.S.y.KK?....`...y'.<p/p9......;...N......\|..$.........E......w...........%.j..K..\|...x...G.,.....

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	320
Entropy (8bit):	5.3098894798250535
Encrypted:	false
SSDEEP:	6:TMVBd6OjZ9mc4slzXQoxcWEwOlXgL9qhv4JWuRImBYUw9SVQygAqSGN:TMHdtLRQo3c4UuqmBYrgQynpGN
MD5:	B22F2445E2B89A2E20EEF8578E76B65D
SHA1:	E6F4D8068BD9E538D5457167264C6288DC1C80B3
SHA-256:	A9900AA05392BDC0428B753BFBEDD71D06193617B8099046FFDBBD7EFC5CD0C3
SHA-512:	EACD34A4055BBFCCCFFF8E6E48F56D73C4ED1CDE7490569967B09E17DB131F5AFDB9F542D67FECFF977DDF40CA184247911689185E01278B8A73943F54FD7EEC
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/img/logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns="http://www.w3.org/2000/svg" width="86" height="86">. <circle cy="43" cx="43" r="37.5" style="stroke:#0044c9;stroke-width:11;fill:#fff9ea"/>. <path d="M28.5,25.5v35h16.5a17.5,17.5 0 0,0 0,-35zM38.5,34h5a9,9 0 0,1 0,18h-5z" style="fill:#0044c9"/>.</svg>

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9728), with no line terminators
Category:	downloaded
Size (bytes):	9728
Entropy (8bit):	5.5880717224512075
Encrypted:	false
SSDEEP:	192:yey3ghi5P3H1SP3k1QP3v1fP3Q1iP3S1+P3b1LP3Y1kP3r1VP3BO1jP3D1WP3H1t:y33ghi5tSMQ1fwiO+5L4k5VsjBWdd7gy
MD5:	E20817170A54C9F3D6E43C49B0DFD7B5
SHA1:	D637E5CD3EFBA6917C3E5736AC8566F9981CBFC1
SHA-256:	05C994728D3551180BFF99471997D1107CA3895F9E9E8E5FC1D5C994ACCBD3CB
SHA-512:	69303C33D1F4B1406BA8060120B1EB5DD97E123F0AF8B00C7051A6E32961B9044DAD97CFC0444C26BD4F34916EC75FA2967BAFB95DBF4565BC86BA03B84B8A45
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/860973240?random=1719991417561&cv=11&fst=1719991417561&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9166786404z89118101539za200zb9118101539&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2F&hn=www.googleadservices.com&frm=0&tiba=ActBlue%20%E2%80%94%20Billions%20raised%20online%20since%202004&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":7776000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s227088756.1719991386","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s227088756.1719991386\u0026tag_eid=44800267","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1seHmwJA!2sZvujeg!3sAAptDV4Xc95f"],"userBiddingSignals":[["8648140785"],null,1719991418969026],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=160410320364\u0026cr_id=694209706785\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGH

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	55458
Entropy (8bit):	6.127720963068963
Encrypted:	false
SSDEEP:	768:Wq1dqQNy07XIYO+n13M9uvKvbPBofgMfMPB9VBX/yybYjNxN6E9ICuwc79H4Gv4:hb7X7DtrKvjOX83vALCJhL4
MD5:	BDE8E3C9D2F8CD45D6485C43093E4ABD
SHA1:	FE3EF28EF8B6DFD8FBF3C07096D076C68B1EC026
SHA-256:	349D837B95CA9A88ED82BADBF2B6483D5D538BAD9719813DC773B1382E29BB14
SHA-512:	B91339D966C65F2456A839674778DBD257FB43F5788902418033D86A4EAF5B6F2B1BA2C25131CD054ABBACF7B7791EAB640E47A746D63724C1BDAAF79190DD88
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="a" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 226 27".. style="enable-background:new 0 0 226 27;" xml:space="preserve">.<st

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7370), with no line terminators
Category:	downloaded
Size (bytes):	7370
Entropy (8bit):	5.1650574096414665
Encrypted:	false
SSDEEP:	192:SZlmgfr24Se6MpTXapkyN8jcpypscqDciqtiPh71:SZlnrUwXapkyN8jcpyioyh71
MD5:	12DF00D326D9D7CA84BA60C0ECA1F7DB
SHA1:	BC2AF6354BDBE334C94B8A33D26357C5C3156925
SHA-256:	5BADD609A51EDE5BAB5B89534FC3011A4DD1AB487CC7081D7CF38479BCBAB855
SHA-512:	9B4E38E6B3BD0AD3A494E62C56CF1C59E52272FB77D86D7A46A1F873078FF154CDA9BCFD8A5983EA1C980F3D92CDD597A9728A03658E13951F773A2299F96429
Malicious:	false
Reputation:	low
URL:	https://stats.wp.com/e-202427.js
Preview:	window.wpcom=window.wpcom\|\|{};window._stq=window._stq\|\|[];function st_go(t){window._stq.push(["view",t])};function linktracker_init(t,e){window._stq.push(["clickTrackerInit",t,e])};window.wpcom.stats=function(){var t=function(){var t,n;var o=function(t,e,n){if("function"===typeof t.addEventListener){t.addEventListener(e,n)}else if("object"===typeof t.attachEvent){t.attachEvent("on"+e,n)}};var i=function(t){if("object"===typeof t&&t.target){return t.target}else{return window.event.srcElement}};var r=function(t){var n=0;if("object"===typeof InstallTrigger)n=100;if(7===e())n=100;d(i(t),n)};var a=function(t){d(i(t),0)};var f=function(t){var e=document.location;if(e.host===t.host)return true;if(""===t.host)return true;if(e.protocol===t.protocol&&e.host===t.hostname){if("http:"===e.protocol&&e.host+":80"===t.host)return true;if("https:"===e.protocol&&e.host+":443"===t.host)return true};return false};var d=function(e,o){try{if("object"!==typeof e)return;while("A"!==e.nodeName){if("undefined"=

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	119825
Entropy (8bit):	6.14814941728146
Encrypted:	false
SSDEEP:	3072:PSzdL0OvYZCV66KBo61eXJmFNLbywtCrC+Kl:PadgC130eWLOBG+E
MD5:	2BD1519831D76C36890A3643DD62CA6A
SHA1:	80EE1FDBF774FAC8690BEA990B33CE97BB48155E
SHA-256:	9CE0022E5A6CCDCD874A6F7BB8EA173EE49B8AA2CC6B2495061D889EE32C97FF
SHA-512:	157A693901548125738E16637BF5A1D1CBA905D15AAD3A6F6201646B54EB992927F7F8BF0550E6143298E41F9A52EC9FBB058A0F6DEE08694F7683F5EBD67E36
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/home/customer-service-9726ef725ad13da4af626b875af2ff2544c43f3aaa25d83f4134550c355f48c3.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 230 230".. style="enable-background:new 0 0 230 230;" xml:space="preser

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.2639334294856344
Encrypted:	false
SSDEEP:	3:U0ZmDK:U/W
MD5:	F130FD70BD4CFA88CACD6D9B4C8C0F19
SHA1:	4D544020A9776F0767F2940605898E55A1ED1407
SHA-256:	F2E53E56C4C3F42D0F7654DDEDFA5CB642A4C2A6389435C6E4AE65FBFAFD9F12
SHA-512:	3CC43854BB510E8B7F02AB7A564DED6E6904D60F11A42ADAF34289CB3B8193F8BB0D64B282886AF2404710BFEB5B3780D8F3B92FC0FC421DE86BB94D7DDDA8BA
Malicious:	false
Reputation:	low
URL:	https://cloud.typography.com/6400316/6877612/css/fonts.css
Preview:	/* DEACTIVATED */

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x947, components 3
Category:	dropped
Size (bytes):	207581
Entropy (8bit):	7.97942371701164
Encrypted:	false
SSDEEP:	6144:1AOno/h5buLaZmeizqxDu5I1HJtB7gYhTIRt8XAbAcVtNL:Bo/hRuLaZDUE7Brhk8wXnZ
MD5:	FF9B6747557A45EBA1DCF1679404AAFD
SHA1:	983D0C5E82A67D97F155B41101CA0192880FE6E2
SHA-256:	77EE362404D9544B6068A8C601B73C39FD29049C8AD08B11BB98985B5DCCE61D
SHA-512:	E153B85D042AB953947B66650A7C5413B1BB267FD890215BFF95C063007CE9B14EEBED94C68180300FC88DE6BA35C0E820F0371B8C86A0A3A257CF5EA1597F54
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................................................................................................................................@..".................................................... .y.[`.r.{..S&.M....Z..Ju...?.V..3..k(Y..+\g.#Mt..,...JL."$..(.L...7.../].&F.../_.u.k.. ] ...=.BSfmk...VE']...Nt.......Z....Nq..v6..B....Wz..j...r..b...6.l....F.T.[...\.Z.HbP....a...egl.F...Z..#.Ie...k...-..t.V8.J..Z...9.$.uK.^..hX.JLYX,...D.2b....?q..@.-2.........z.....l.b.\.....-N....m..G.>Y...i...6QY...<.JW0...7..;.n.......5UA.U.bC)......z...wZ.z...........ZH.0.3...{...O,..,[ng:....-..e#..b......6..Y%m...0YZ.Jb.V.$D..$D....q..i.6..lhc...u.6...)\|v.>.a.i"pG..f.?@X..h.;..{C.mc.}...AnN.4M..t5.NUp.v.3........[.z...b.Z.#...k.33.F.s.qZ..^c...+...+rR.`..#;.qpx.Jd.IL..e.I...7..b.NY#..#..YD...+]u..N.`..M....i..7.#\.m..v.&g ....b........F...i..h...\..-..9....8.C...c.....cE...5GER55`..E*....r.H...EG.......?.A..=...W.^z...J.`.w..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (531), with CRLF line terminators
Category:	downloaded
Size (bytes):	4739
Entropy (8bit):	5.320800689268016
Encrypted:	false
SSDEEP:	96:mFH3EtP6JwcWJT69kdbEfSU2JP+3OcssHyCQ8Shdj:A3YP6JwcAT69QtKQp
MD5:	13672635828A7010898A49C71A99FFCE
SHA1:	5237E887925827283EE2426504066D281690E7CA
SHA-256:	2221317B9E2D487BDE03DA54BA3B092CEDAA5BEE1418618823E8D71740F2FB3C
SHA-512:	3324BC067911B72946747082CC9E0D080C98EF2AF8A46D656E02FED1CD7BE74A253C162AEC345E32EAD6D4803D52F6ED644B728590A94856A12357790753010B
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/jquery.slimscroll.min.js
Preview:	/! Copyright (c) 2011 Piotr Rochala (http://rocha.la).. Dual licensed under the MIT (http://www.opensource.org/licenses/mit-license.php).. * and GPL (http://www.opensource.org/licenses/gpl-license.php) licenses... .. Version: 1.3.8.. .. /..(function(e){e.fn.extend({slimScroll:function(f){var a=e.extend({width:"auto",height:"250px",size:"7px",color:"#000",position:"right",distance:"1px",start:"top",opacity:.4,alwaysVisible:!1,disableFadeOut:!1,railVisible:!1,railColor:"#333",railOpacity:.2,railDraggable:!0,railClass:"slimScrollRail",barClass:"slimScrollBar",wrapperClass:"slimScrollDiv",allowPageScroll:!1,wheelStep:20,touchScrollStep:200,borderRadius:"7px",railBorderRadius:"7px"},f);this.each(function(){function v(d){if(r){d=d\|\|window.event;..var c=0;d.wheelDelta&&(c=-d.wheelDelta/120);d.detail&&(c=d.detail/3);e(d.target\|\|d.srcTarget\|\|d.srcElement).closest("."+a.wrapperClass).is(b.parent())&&n(c,!0);d.preventDefault&&!k&&d.preventDefault();k\|\|(d.returnValue=!1)}}function n(d,g,e)

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 310483
Category:	downloaded
Size (bytes):	83202
Entropy (8bit):	7.997030038635484
Encrypted:	true
SSDEEP:	1536:gbCiFwzwC27YHUhHndv0HtSxdsxlamQ59YKANbFqgbIC866+UrbcNXVY28t1MIYw:gbtXY0Z6YrXIfbIC8BkNXVv8thV
MD5:	ABD7A27A04FADBAC025196F271FBF82F
SHA1:	F3A1C54AE098424308BC59B131D6FCCE410CA6E1
SHA-256:	96C760DC02F29253813BFDEA2EC7607A632221FFBA99703AEEECB152C2C4C239
SHA-512:	D8B23A7A78268DB48960FCECC9841FE6A66CDD7E24CCC8538D185581FE3FB06922860E2D0A24218E5F8966709D1A3E9731C0D1273E99EA3BC60953FB131B2BA4
Malicious:	false
Reputation:	low
URL:	"https://www.paypal.com/sdk/js?client-id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&locale=en_US&disable-funding=credit,card&intent=capture&commit=false&enable-funding=venmo"
Preview:	...........}...H....+.v.....s.!.a..mb....$..O..(..#..1..oU_j........Guuuuuu..d.b7.....u.../........h...~o84..e..9.6.Z...Y...>o7{..1.9>;.o.A....%.g..V.(.K.;"~DJ.?......q.QDH)X..E\..U.Z..N.Y.........&1...~.......6.?+........7.. ..W5.....Ntr......Z....8..8.a...G..k..gm.....Z.x%.+.....Q....{l....&.V.j\...WF6..c[.......u.<..FFP.L\.t.`N....{&.bFB..#..qKb+\.+h/.U.h....k[v.4'...{.....6...A/.]....no..1_...z.bi.`....2.u...D....Ue..vz~an.......1..0..&b....}.o..v..bL..6.WIzJ.6.n..'&...<.....I..=45x.,.X.b...Q...E./..}CPj.....8..$.....D...../....C.Y.8..<QgF[.%.V+...U.R.2.EL....&..........\|..F.X.+.mM3c@gd.5V.u..c.D\.%.../.D....4"... ..Qe..u].(e....3.po..{....u......+.%..8..vB]7q.v.[.m../\|...9.?....u...O.X..;.T.E..'.5..3..(X.#.v.sxsyqf....'0G..w.E._.M.0"...'._k7.".~kj.Q.C).8....?K..P)0J..X.n...E./.F..2..lDT....Qd..>o}%..:....Y.....o....W.J'E..@h.$mr.zP..{F.....B.......4......d...Ns..S,B.+..............).t.r..v..D...6....1.....\W.5lj.v.......X.&...././

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	331
Entropy (8bit):	5.075164537576564
Encrypted:	false
SSDEEP:	6:9dzMRPI7OcrGeX9qKLh2fRren5IRAkLmmxVHpqkUBXleUV7BL:9dzMRPI71oih2ZDLHXJqhBhX
MD5:	25610ED8EC7610016C85933CABB0931E
SHA1:	16BEFB4C4C1E7907AC456DCB5A1FD2E92B29C651
SHA-256:	32D2E1DDEB4FB694AF43894075A427FFB560D56F6FBA22172E0253B50B37446A
SHA-512:	72230B74F81DB7B282831C4CDC60D9CB28FECA7B8F4EE5A63D0213221B760C59E67F91179644CD397BA1672FE289A2500CA33F76CB7FC2E7A78AC9993B7E3064
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/packs/js/marketing.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2
Preview:	(()=>{"use strict";let e={init:function(){$("#refresh").on("click",function(){$.ajax({url:"/marketing_team/purge",type:"POST"}).always(e)});function e(){window.setTimeout(window.location.reload(),3e3),alert("New content is being loaded.")}}};$(function(){e.init(),$.defaultExpandables()})})();.//# sourceMappingURL=marketing.js.map

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	320
Entropy (8bit):	5.29700525152376
Encrypted:	false
SSDEEP:	6:TMVBd6OjZ9mc4slzXQoxcWEwOlXgL9qeq4JWuRImBYUw9SVQygAqSGQU:TMHdtLRQo3c4z8uqmBYrgQynpGQU
MD5:	70F2B416A889795AB166FF47A060F87E
SHA1:	C8C8D5689E29B85B99F6D19F238B61A6D19B683D
SHA-256:	F74C2BEC62735B635256FEED18227CD13FADFDA79FA128D2B712D1D4CBA43CBB
SHA-512:	886E7FD18C68ACE8A1D6A32E70B7F6B3F6C149541E5F2E88DC9422B1D18B26F666CFCF862DBAAEC55D2F2923992A095EC4E3E9646F7498FBB3A30AF971B3DCB7
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/img/footer-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns="http://www.w3.org/2000/svg" width="86" height="86">. <circle cy="43" cx="43" r="37.5" style="stroke:#00212e;stroke-width:11;fill:#fff9ea"/>. <path d="M28.5,25.5v35h16.5a17.5,17.5 0 0,0 0,-35zM38.5,34h5a9,9 0 0,1 0,18h-5z" style="fill:#00212e"/>.</svg>

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30972, version 0.0
Category:	downloaded
Size (bytes):	30972
Entropy (8bit):	7.993664696025544
Encrypted:	true
SSDEEP:	768:2L+UGFwyyDM+0RbHCNkPkCBZSa4oQT+/Bvh:pFLyDM+0RbHCSPkCYNe5h
MD5:	2753D1661A5B37EE01916E85EE4E0C6E
SHA1:	BC5C0048F20E3B6AB336DDDF0AF49E8566A6E092
SHA-256:	1E47471F79DE6E036FB773F40AFC411E2B8CF47B181FF6A687DBB285779B7687
SHA-512:	10921DA6CEB4EB633C1A29FDF6C48990BAF049FC1E6814AFBF1588793CEBB1D890CC08514FDB5CE2DCC7C0CA8525AD5184C78055C56FC746669211FA282EA233
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/themes/bsdstarter/assets/fonts/MyFonts/TradeGothicNextLTProBdCn.woff2
Preview:	wOF2......x.......+...x.......xt..................@..8.`..`..:..b.."...\..q..X.6.$.....N.. ..y. ...[..q.=i.x........2UUU.&.w... .._..w..._............b....W..o....+....PWUE.....MU.dg.t.y..S. ..t.c.DPG..R>.........i.@.g.W.......'23.)BHd....... iw.$..H...4.)...>.... .t.;Z.39.. /C..)....2..M......d.K+/....@.0.AJv..6Uc...h...{_N.dy...D/..Zj[...}.%.....g...3..^..d.}..l......T/.la$wN...`....%.......K`Ql.d...X.#.,..)!!..A......X.-...G....7.......$.dIv..j..IT..==Y...a.q.{.....Q..$7...I..OR.8.2.-.$C....AmVU.(.d..B..Q..g9...~'.o3Y3N<.............. <.x'..ul+W.<:....M..~G.z..H....Y.....W.\|.m..T.@....s.ps....Z.......R..p.......y__>...s..ME[...U.........r..,@..A..4.........T{...G.b..9..?..........}......_o.....v.R{.R..ZzA.z3... .9L.C.I..).D./ ..n..B(..r.;..e.z..k..\t..oJW.J._6...t...rh..9.('..?-i..N.fy..p.....+].. <g.Z..8H.3..$....3.FV....R..d.!.H. !...5...k.j...6...L.g...CW....m\|.i.H..@.......^..l....L.!....i.-}...\...'9aI. ..!]...Z.).ld......3...w..C

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	10586
Entropy (8bit):	4.628263078042368
Encrypted:	false
SSDEEP:	192:Ccos1g43VNymktymoXX3+UfSeAm9IRNt50Ky+6RgCL:X5/ymoymo39fnIAV5FL
MD5:	9A4579A6D1B99E1A98B1028E459D9FFF
SHA1:	55D444A68504F302EFF8C5BB0B612EDF2F0B6A57
SHA-256:	4DC9D1EE77F4A03C3458250C209EB6DBC86ACB4389B5500644B66EACDFDE336D
SHA-512:	B95AD83240E1F5CCE4A2E50B3BCC19F05A053BD4096C3EDAE1D7E25AF8423009908D18A45785FB391E6A05192A8E99865F41868C56E057EDD5542E4ECEB32446
Malicious:	false
Reputation:	low
Preview:	.{.. "sendmessage_placeholder_text": {.. "value": "Send a message",.. "comment": "placeholder text for send message textbox".. },.. "sendmessage_ariallabel_text": {.. "value": "Write a reply",.. "comment": "arail label text for send message textbox".. },.. "chat_button_tooltip": {.. "value": "Chat button",.. "comment": "tooltip for Chat button".. },.. "back_button": {.. "value": "Back",.. "comment": "Hamburger menu item text for 'back' ".. },.. "endchat_button": {.. "value": "End chat",.. "comment": "Hamburger menu item text for 'End of chat'".. },.. "endchat_popuup_end_button": {.. "value": "End",.. "comment": "button text for 'end' button in endchat popup".. },.. "endchat_popuup_cancel_button": {.. "value": "Cancel",.. "comment": "button text for 'cancel' button in endchat popup".. },.. "chattranscript_button": {.. "value": "Email transcript",.. "comment": "Hamburger menu item text for 'Send chat transcript to your

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4095), with CRLF line terminators
Category:	downloaded
Size (bytes):	6449
Entropy (8bit):	5.160648002363062
Encrypted:	false
SSDEEP:	192:4wcVWe2gzS3S3iQbEfqOOfCOToO3SPiXksO:4wcVD2488i9fqOCCUowS/
MD5:	7BE839006C49E5C8A6929A8522B21DEC
SHA1:	BE8642BC55B8572F791B4B57633621F45CDE0AF2
SHA-256:	4626A3A9B7C995A40D2E8AB6A1647A1CC7548EE8474D594501BDC2F0B67CF12E
SHA-512:	81C54FC13C712A95571D6A43FF8EFD28FEC6D5CB12EDA0F48DA2D626D595D29AD1ACE1026075E45A3CA54B66289B7A2664AEFFCE6B0EF182259EF3DB52ECA1A2
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/bootstrap-multiselect.min.css
Preview:	/*.. Bootstrap Multiselect (http://davidstutz.de/bootstrap-multiselect/).. .. Apache License, Version 2.0:.. * Copyright (c) 2012 - 2022 David Stutz.. .. Licensed under the Apache License, Version 2.0 (the "License"); you may not.. * use this file except in compliance with the License. You may obtain a.. * copy of the License at http://www.apache.org/licenses/LICENSE-2.0.. .. Unless required by applicable law or agreed to in writing, software.. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT.. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the.. * License for the specific language governing permissions and limitations.. * under the License... .. BSD 3-Clause License:.. * Copyright (c) 2012 - 2022 David Stutz.. * All rights reserved... .. Redistribution and use in source and binary forms, with or without.. * modification, are permitted provided that the following conditions are met:.. * - Redistributions of source

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (47355)
Category:	downloaded
Size (bytes):	183251
Entropy (8bit):	5.115904539817527
Encrypted:	false
SSDEEP:	1536:Q4cMp6+R4MiuyDxDbAV1CwV+MBe0DECyVbMNevnkT1EtBEhIq:fU2
MD5:	181D2A560B2D9EB4B015D883369DC95B
SHA1:	C04593C6D1C4496A4792EE67F0679733DA99CBB2
SHA-256:	CBBB080DE5709744A1818D5168E8097FE09F206BE0C0C68D0EC4AD13AECEC147
SHA-512:	3AD3A5648B4456F88536A747273DA3BD89DC6BF0BAC1F875643C68F857716FB14BC8626D32371FF06A28232C886407ECA299122E730E5E37054E66879FDF13D1
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/public-aa633f352e0cddd3463350c6f700485811a9ebbd9ebcff666d2e885ea3966dc8.css
Preview:	..actblue-bignumber .number{display:inline-block;width:.7em;text-align:center}.actblue-bignumber .number{display:inline-block;width:.7em;text-align:center}.focusShadow,#directory-container a.search-filter:focus,a:focus,.bp-input--focus,.bp-input-wrapper:focus-within,body.auth-form #auth-form-pane #auth-form-wrapper .controls:focus-within{box-shadow:0 0 0 1px #00a9e0;outline:none}#show_contents .wrap{padding:1rem 1.5rem}#show_contents #donateWrap h2{color:#fff}#show_contents #donateWrap h4{color:#1c2345}#show_contents #titleWrap{background:#00a9e0;color:#ffffff;border-top-left-radius:4px;border-top-right-radius:4px;font-size:18px;font-weight:500;min-height:40px}#show_contents #titleWrap a{color:#ffffff}#show_contents #summaryWrap{min-height:100px;font-size:1.25em}#show_contents #summaryWrap p{line-height:1.4em}#show_contents .stats-wrap{min-height:3rem;padding:1.5rem 1rem 1.25rem;border:1px solid #00a9e0;background:#d9f2fb;border-top-left-radius:0;border-top-right-radius:0;color:#1c23

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (866)
Category:	downloaded
Size (bytes):	169308
Entropy (8bit):	5.033072354571048
Encrypted:	false
SSDEEP:	768:gDatzbCW/WsW4cASiPoIGbdnGNI3Ss5X2OyGNiHS1PvtZGpUgTTT1zYEImoee9iR:catfSiUgTTT1BPIMOsqr41ajylEXz6OQ
MD5:	4BC99E0807426DE69662A3C99A802FA6
SHA1:	0CA87969DE806AD81293B182BCD7BEA3621F5DD3
SHA-256:	A816CDA8958CD037EBC9E68E1A5EBBE93EDA2D73889C83C37F238CA493243545
SHA-512:	25CBAB1CA707E3E899A6A1C71368A0F86D681444B85CDCA445FFF813D894D6F44BA54741FEF4DE370D41445A8AAC492854AE05406975BEB979C70E3D2E639ED5
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/includes/js/can-embed.js?v=54
Preview:	//global translation variable.an_javascript_translation = {..weekly: "Weekly",..monthly: "Monthly",..every_3_months: "Every 3 Months",..yearly: "Yearly",..securely_purchase_tickets: "Securely Purchase Tickets",..securely_contribute_now: "Securely Contribute Now",..securely_purchase: "Securely Purchase",..ticket_for: "Ticket For",..tickets_for: "Tickets For",..now: "Now",..securely_contribute: "Securely Contribute",..enter_amt: "Enter Amt",..other: "Other",..front_other: "Other",..this_event_is_sold_out: "This Event Is Sold Out",..street_address: "Street Address",..city: "City",..oops_you_have: "Oops! You have",..error: "error",..errors: "errors",..processing: "Processing",..your_card_has_not_been_charged_please_try_again_or: "Your card has not been charged. Please try again or",..contact_us: "contact us",..if_it_keeps_happening: "if it keeps happening",..there_was_an_error_contacting_our_payment_processor: "There was an error contacting our payment processor",..please_ensure_you_are_no

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	5.004260165303858
Encrypted:	false
SSDEEP:	3:hmdihyCna+87zPUgEL6ANUXi0ANkcHPVH1PAJZOkP:hmdisCna77TUgf4UXXAbtHQMkP
MD5:	241819E4F0C72BD28120E1B1A9EBD93F
SHA1:	9A77F03BD1D9511FDA8E0502DC6F332ABC38C7D6
SHA-256:	15B7F1D467E314EEA9FFEEFC7490DE3CD74D61E68C71A93542208FBDBB8FB244
SHA-512:	1C7CF88D1EA0034223AE706AF0C51F1E9416033524AF25A04604316B8EF9BACF2FBB0EB803D7D1CABAD3037FD2D3D5C4F7A09950DACC5770567FBC9E70E0AE54
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwnQ4x93nVteNhIFDROtucYSBQ1MDEPIEgUN-MrTURIFDbX6PB4SBQ3qOlyfEgUNi0pyYA==?alt=proto
Preview:	Ck4KCw0TrbnGGgQIAxgBCgsNTAxDyBoECAUYAQoLDfjK01EaBAgJGAEKCw21+jweGgQIDhgBCgsN6jpcnxoECCMYAQoLDYtKcmAaBAgkGAE=

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10586
Entropy (8bit):	4.628263078042368
Encrypted:	false
SSDEEP:	192:Ccos1g43VNymktymoXX3+UfSeAm9IRNt50Ky+6RgCL:X5/ymoymo39fnIAV5FL
MD5:	9A4579A6D1B99E1A98B1028E459D9FFF
SHA1:	55D444A68504F302EFF8C5BB0B612EDF2F0B6A57
SHA-256:	4DC9D1EE77F4A03C3458250C209EB6DBC86ACB4389B5500644B66EACDFDE336D
SHA-512:	B95AD83240E1F5CCE4A2E50B3BCC19F05A053BD4096C3EDAE1D7E25AF8423009908D18A45785FB391E6A05192A8E99865F41868C56E057EDD5542E4ECEB32446
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/i18n/en_US/widgetlocalization.json
Preview:	.{.. "sendmessage_placeholder_text": {.. "value": "Send a message",.. "comment": "placeholder text for send message textbox".. },.. "sendmessage_ariallabel_text": {.. "value": "Write a reply",.. "comment": "arail label text for send message textbox".. },.. "chat_button_tooltip": {.. "value": "Chat button",.. "comment": "tooltip for Chat button".. },.. "back_button": {.. "value": "Back",.. "comment": "Hamburger menu item text for 'back' ".. },.. "endchat_button": {.. "value": "End chat",.. "comment": "Hamburger menu item text for 'End of chat'".. },.. "endchat_popuup_end_button": {.. "value": "End",.. "comment": "button text for 'end' button in endchat popup".. },.. "endchat_popuup_cancel_button": {.. "value": "Cancel",.. "comment": "button text for 'cancel' button in endchat popup".. },.. "chattranscript_button": {.. "value": "Email transcript",.. "comment": "Hamburger menu item text for 'Send chat transcript to your

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.880930402149349
Encrypted:	false
SSDEEP:	3:OmRrihyCna+87zeV5EL6aCRVVH1PAJZOkP:OmdisCna778fJR/HQMkP
MD5:	DCF5A271A33934D89070499A6E86244E
SHA1:	1E0F34F90DA4E8394FA36608D4D5483695D4FCE4
SHA-256:	9BF5209D21D8225DC7275B199819C4F9320EF7A9E74A6BC68C2AC53BD1A47DEB
SHA-512:	951C3A33A498A3D52321F818C97778E73A1F1DBEFA4BA28E153275419AE55B5EF7026914A383BF5AEFDCD0DE8E928C074928FACDC58F2402B58A6F7B8157DA64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn1IL4AoXnu2BIFDROtucYSBQ1MDEPIEgUN-MrTURIFDeo6XJ8SBQ2LSnJg?alt=proto
Preview:	CkgKCw0TrbnGGgQIAxgBCgsNTAxDyBoECAUYAQoSDfjK01EaBAgJGAEaBQiaARgCCgsN6jpcnxoECCMYAQoLDYtKcmAaBAgkGAE=

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52103), with NEL line terminators
Category:	downloaded
Size (bytes):	229376
Entropy (8bit):	5.427753840986339
Encrypted:	false
SSDEEP:	3072:x1Z34AdC3bmkvZofrbJ+xhZVziKGc1wgn:xLoAWbmlfrVyVziRxgn
MD5:	EC937176B195953727880B920759DD97
SHA1:	D4224B597B742FEE6AE7C08BB941D76096F6BCE4
SHA-256:	1F41FD4B8CE9B5A3FB41005655E1CFCCDC9796CD824F947273076F17F1ADA09F
SHA-512:	280B063C0D877918E0FD5A670F546ED9DCAA18F68D9A85B078053BA508DBDB2006F7C2C2DCD04CA867E66A00536AC1C502F60A509A661B7866CE474E85E4B549
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/packs/js/267-551cf5a138ef9e22a324.chunk.js
Preview:	(self.webpackChunkindigo=self.webpackChunkindigo\|\|[]).push([[267],{19662:(e,t,r)=>{var n=r(17854),o=r(60614),a=r(66330),i=n.TypeError;e.exports=function(e){if(o(e))return e;throw i(a(e)+" is not a function")}},39483:(e,t,r)=>{var n=r(17854),o=r(4411),a=r(66330),i=n.TypeError;e.exports=function(e){if(o(e))return e;throw i(a(e)+" is not a constructor")}},96077:(e,t,r)=>{var n=r(17854),o=r(60614),a=n.String,i=n.TypeError;e.exports=function(e){if("object"==typeof e\|\|o(e))return e;throw i("Can't set "+a(e)+" as a prototype")}},51223:(e,t,r)=>{var n=r(5112),o=r(70030),a=r(3070),i=n("unscopables"),u=Array.prototype;void 0==u[i]&&a.f(u,i,{configurable:!0,value:o(null)}),e.exports=function(e){u[i][e]=!0}},31530:(e,t,r)=>{"use strict";var n=r(28710).charAt;e.exports=function(e,t,r){return t+(r?n(e,t).length:1)}},25787:(e,t,r)=>{var n=r(17854),o=r(47976),a=n.TypeError;e.exports=function(e,t){if(o(t,e))return e;throw a("Incorrect invocation")}},19670:(e,t,r)=>{var n=r(17854),o=r(70111),a=n.String,

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3670
Entropy (8bit):	4.241623208872857
Encrypted:	false
SSDEEP:	96:Thn+KI3GsRVv975VZ3U2s6d9ZtIyNakZnOb:63DVvXUs1akZnS
MD5:	53D8AA0424F17569E61FCBE3559BC5C4
SHA1:	39F4B6F9A78607310C55ABBC094F094CA3F5081A
SHA-256:	A3A509EF2413F961EC9A8B1D68355C09067414E84D374E2E8D2614D33A89D2CD
SHA-512:	83D0C44B7FB503DEDFECD785E2F91DAD80558B1D1D966568BA7AE0251CA3FC6C46B99762F68FA739C930F20EC2B96745C9354DE447F23915503245A5D02ED82F
Malicious:	false
Reputation:	low
URL:	https://www.paypalobjects.com/js-sdk-logos/2.2.7/venmo-white.svg
Preview:	<svg width="101" height="32" viewBox="0 0 101 32" xmlns="http://www.w3.org/2000/svg" preserveAspectRatio="xMinYMin meet"><g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Blue" fill="#ffffff"><g id="Logo" transform="translate(0.000000, 6.000000)"><path d="M16.6660484,0.18 C17.3466626,1.3390991 17.6535069,2.53297297 17.6535069,4.04108108 C17.6535069,8.85117117 13.671346,15.0998198 10.439346,19.4875676 L3.05725952,19.4875676 L0.0966314879,1.23315315 L6.56045675,0.60036036 L8.12578201,13.5895495 C9.58835986,11.1326126 11.3932543,7.27153153 11.3932543,4.6390991 C11.3932543,3.1981982 11.1538599,2.21675676 10.7797405,1.40864865 L16.6660484,0.18 Z M24.9071592,11.6938739 C24.9071592,13.8367568 26.062718,14.6774775 27.5946678,14.6774775 C29.2629152,14.6774775 30.860218,14.2571171 32.9363097,13.1691892 L32.154346,18.6445045 C30.6915934,19.3814414 28.4119291,19.8731532 26.1991903,19.8731532 C20.5863512,19.8731532 18.5775346,16.3632432 18.5775

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2003%20Jul%202024%2007%3A23%3A09%20GMT&n=4d&.yp=10111714&f=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&e=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&enc=UTF-8&yv=1.15.1&isIframe=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9871
Entropy (8bit):	7.951995818736147
Encrypted:	false
SSDEEP:	192:nnCbNdAb3MmWX684DG3MrSKpudIE18MYo+8uql05q7vq4B19DSz2XM/Nfbx:AAbcuU1m69Yj8z0IvBLXMRt
MD5:	4094C83118CEB9118CD09EF71EDFF2CB
SHA1:	1DB129B2C39BF995ECC95FCADC58D9A9E31C5F60
SHA-256:	C5EC514A3255C75360F44E890C40044B0BC0F41FA4329DAE92B43BBD00BF22BF
SHA-512:	FA47E9F40D69F5F0A84FFD4FE372F14D1DEAD640290435185310380172E3657FEBB5A35E4E47C348797771B0C655B62982A1AC194994637E4CD4B2C06A20F1D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R.l...&VIDATx..}.v.:.....`;9......}....N..$......@.v48.%a..X....j.5...........we.\......B...F!@.C....Q.P..(.(xh...<4..........B...F!@.C....Q.P..(.(xh...<4..........B...F!@.C....Q.P..(.(xh...<4..........B...F!@.C....Q.P..(.(xhT...@...k_..q...".A~)....g....}.]......~.!>G.v......@..PvcH^..gy..-wJ..#..^.#.....w.........H.<...&.!.@.....q....(_........i..Vv.s..?....."..W9.Kz..f......."..Z..D.!....h....a.0H.K.S..O....,.B..A..k...jK...1L..X.Ev...V'....".l.%...s/.O.{y..@........7K..jD......`-......`M..T..X7.....8.\|.L.Y.C.r....?...........!#....Q".,.tE........OK..O..,..-.W...Am.F....&....@..%. .>.T.....N..G...}.......,>....J..[.M. .p.E.......4..l..5...._...+.E....Mc..'R.p(.,.*..h....h.}....._.. ..<...C..,@si..nP.q....tq...y.0X/..z..........._...-V......u^/..`,fcu'..9..W..y.o{..].k<......../.#9&@.D.M...6. H.(....uEX/...-....T...,....i.. .@5.)5.F...._...G.w.m....zl....c....=....k.........C.......v..../.............

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3117)
Category:	downloaded
Size (bytes):	224243
Entropy (8bit):	5.538300484718575
Encrypted:	false
SSDEEP:	6144:fNZaQxT5mpwyKfrb5Hcimaaz2IuCMXHVVx:foSyKfBHpHaCIuCMXTx
MD5:	1D9971C09BAC4CE0D89E9C9864580A9B
SHA1:	780D93200C4BE79B501A43C3D67173AAEDD63F64
SHA-256:	636A01135995D6B2438D508DD9BCEFD64DE59ABDEB5D7D6D8452F16518330DDF
SHA-512:	5BEFDB16870A4EFB44A8406BF154EE2B88162A668F4C45F2E91C8B6E00F5703835E72EBF7D53028AB2BCE6A5831EDD9DD10E75729D8C22CFA3477A11388D4105
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x244000, 0x38, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpser09975", last modified: Mon Mar 11 09:26:42 2024, max compression, original size modulo 2^32 63247
Category:	downloaded
Size (bytes):	20557
Entropy (8bit):	7.990369504801419
Encrypted:	true
SSDEEP:	384:EDCh1yLaSYsSb2fsBXGRnuMHaDhM4w6z6yLt49CS8Ky0eyxVurW/q2JPs7a9DhpU:aHYp2UBynuMHITtDbyx4rW/xtUa6
MD5:	489C51CFAAABB9E46CDCD9805F9CB5E7
SHA1:	A8818AE30BE3F8A30F4F9336495E724D82668E6B
SHA-256:	56A2655B7173CC431D286B14B6836B54CF2B2EB7CEE176B92087D6496AB6E94B
SHA-512:	0BCE3C4C57E970A240AE1B0551A4BFB8A5FE972F291A7F232F9FEECAF5D2A7CF25660ECCBD76B322BBC2D4B4BD671064BD4CD9510B942D2CA71F665E37429A04
Malicious:	false
Reputation:	low
URL:	https://cdn.sift.com/s.js
Preview:	....R..e..tmpser09975..}i{.F..w...;..f..xH.[.W..x.=...]....@......K...V..4.RJ2..;........^U.o..l..Q.[.Au.^.{....~./....c...r2...r~.:.xZ..TM.6m....fut_.k0.W./.Q=...p2...:...M.7vVwp.^...B/XD...>.6.pq...Wo..q.Tooo..p1c.}c...z.....R.T.......<....hZ.4]z..&..#\....}........pv..g../...g.r...0...g&....0z..~..Q.\T'A.>.......UP]J. .r...h.....E=0f..3.s...cJ.`....A.3.z. ......6A..G...[....C....uV.lB...?.~.nX..U....6;-.u.......A..6........Dk..j6....;Z...I.O7#../.f.`.....:\.WQ...ru..\.N._..r.....M...~..l..n..r=.J.t.U.<X...>.pv..T.....Q.........j.R......x.T..\5...\. .r...lZ-..`..u.h..+....W.....~..q....!.o.\|.T..8.~/..{...M45...(.i...ZO.\|.52e.L...>ac.x[.!.zH...:.7.Eu....\}....\|..n&.q#..$.z ...VX.3.....dO..S..9"..x.6.?W.o.."sw.)..Sj.\...}.u:...}..i..6...4-..6..(.a.ML..-..._.M.......k.P..Ql.^.E4..1...........:.7."^b...!.Y.~.^n..M.X.i.r.U.....4.mAF....9...a......m.U.f=I8')..L....a....4..(.}J...h5.c.h.....~..?8......./...0...%..aQ.u'r.-m.P59#9^.yzE....b...T...

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	75533
Entropy (8bit):	4.722085195979468
Encrypted:	false
SSDEEP:	384:MxJg0OGM2k8r1iVHz4e/AQgcd9BpwFFQ1EJZjKyWZVaHIgV3iVgpdP8DhUl6Dske:MxZOwk8pkFofV3hwAQE68FqM
MD5:	D790E7B8A6969BF9BFA84AF965B9C561
SHA1:	57A9C58811205152D154BF9CF21FF2494FE78335
SHA-256:	193E683E55CCE144B01A9A8D8E84A24D20620F96C98682F6DFDFC2F083F6408D
SHA-512:	DD8E25704A371658F28C0947BF70FC87790AFCB1706D679757E096A666311F98503D320EDB07DC5847DED2AA89AFDEE47E44036B7049D3AE4E6F36E33A11C803
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/chat-widget-frame.css?id=1719991448287
Preview:	.@charset "utf-8";....:root {.. --primary-color: #fff;.. --primary-bgcolor: #0f0f0f;.. --primary-bgcolor1: #1f1f1f;..}....@font-face {.. font-family: "CiscoSansTT Regular";.. src: url("../fonts/CiscoSansTTRegular.woff2") format("woff2"), url("../fonts/CiscoSansTTRegular.woff") format("woff");.. font-weight: 100;.. font-style: normal;..}....@font-face {.. font-family: momentum-ui-icons-rebrand;..}....@font-face {.. font-family: 'imichat-icomoon';.. src: url('../fonts/icomoon.eot?ktzfl3');.. src: url('../fonts/icomoon.eot?ktzfl3#iefix') format('embedded-opentype'), url('../fonts/icomoon.ttf?ktzfl3') format('truetype'), url('../fonts/icomoon.woff?ktzfl3') format('woff'), url('../fonts/icomoon.svg?ktzfl3#icomoon') format('svg');.. font-weight: normal;.. font-style: normal;..}.....icon {.. font-family: momentum-ui-icons-rebrand;..}....[class^="icon-"], [class*=" icon-"] {.. font-family: 'momentum-ui-icons-rebrand', 'imichat-icomoon';.. speak

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3414)
Category:	downloaded
Size (bytes):	3450
Entropy (8bit):	5.3186099678475305
Encrypted:	false
SSDEEP:	48:xDFqukfyE2pChs8VmAy6yQB+mlK+GdEU1UpUmFN2v9TebB5yFtskEqZ3MJqqnW+x:fkfyfCyHZQFGi0wX3TBokwtqWAgx1HcR
MD5:	AA53A358C3ED5EB5295650361714FBFC
SHA1:	B24330DD0B2451256FBA3EFAF33655332F1BBD6D
SHA-256:	DBDAD2E736698BFCACDF54B4969C6E02944316C13583E908F1E03964423962EB
SHA-512:	E5F8131286E1759ADF480A3B957238C00E4CEAF92D173F1A62778D4E69FF4C6123039CD6FCD33137F3C8F9A2516AA01D1E841C93B3CDDE7E981C71AFAD379AAB
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/packs/js/Bugsnag.js?9c5ec46dab89499c5e56f59fa6579ed202b1dce2
Preview:	(()=>{"use strict";var n={57721:(n,e,r)=>{var o,t=r(54954),i=r.n(t),a=["$","BigNumber","CreatePageEvent","Highcharts","jQuery","jquery","ListNameChecker","SharedContribution"],c=["debounceInputField","commify","init","track"],d={commify:["Indigo.formatting"],debounceInputField:["Indigo.uiHelpers"],init:["Indigo.EntityMigrationCTA","Indigo.OauthSignin","Indigo.TwoFactorCTA","Indigo.EntityDownloads","Indigo.ShareBranding"],track:["Indigo.Mixpanel"]},u=function(){if(o)return o;var n={};return a.forEach(function(e){var r="".concat(e," is not defined");n[r]=r,n["ReferenceError: ".concat(e," is not defined")]=r,n["Can't find variable: ".concat(e)]=r,n["ReferenceError: Can't find variable: ".concat(e)]=r}),c.forEach(function(e){var r="Cannot read property '".concat(e,"' of undefined");n[r]=r,n["Uncaught TypeError: Cannot read property '".concat(e,"' of undefined")]=r,n["Cannot read properties of undefined (reading '".concat(e,"')")]=r,d[e].forEach(function(o){n["can't access property \"".conc

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, description=Photo by Adam Schultz / Biden for President, manufacturer=SONY, model=ILCE-9, xresolution=216, yresolution=224, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 9.1 (Macintosh), datetime=2020:03:13 17:25:17], baseline, precision 8, 6000x4000, components 3
Category:	downloaded
Size (bytes):	2255269
Entropy (8bit):	7.839056416374827
Encrypted:	false
SSDEEP:	24576:Vlxk0OXvTeWf/I1Wksk8C7IpsLRV8fgWIz7WeaFecKj4OXDhv7JGczkTtJ0Rjdnq:vkfHPkl8C7qst6HpOZ7Rzet2zRq
MD5:	7131FD7A1C4054E73EFE0EE5A8E04593
SHA1:	A7A5E3A91D3D0627516B79A4225E39593BB60CF8
SHA-256:	2700F76C350268AF0AAF58F6F4A6CA95D5588F7356250C70E68A5D3F629CC5B9
SHA-512:	020EC58F100943D71489EDB82748FA13E9B863694EF4A31DB2A3626E9CC156624C4367F95A60162A3418991B80C9B67C4D888A1245D58F9947DE32DCFD5CD07E
Malicious:	false
Reputation:	low
URL:	https://can2-prod.s3.amazonaws.com/forms/photos/000/457/108/original/49721663391_c0cdba991d_o.jpg
Preview:	.....4Exif..II*...........,.......................................................(...........1...2.......2...........;...................<...i.......J...%...............Photo by Adam Schultz / Biden for President.SONY..ILCE-9..,.......,.......Adobe Photoshop Lightroom Classic 9.1 (Macintosh).2020:03:13 17:25:17.Adam Schultz..Adam Schultz..'.........$...........,..."...........'...........0...........2...................0231........4...........H...........\...........d...........l...........t...........\|...........................................................................................................................................................................................................................................................................1...........2...........4.......................#.......2020:03:09 19:06:46.2020:03:09 19:06:46.-04:00..-05:00..-05:00...t.@B............................................I.......I.............03385705..........^.............

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22878), with no line terminators
Category:	downloaded
Size (bytes):	22878
Entropy (8bit):	4.960366006516522
Encrypted:	false
SSDEEP:	384:maAZDaAZ3aAZgaIp3flz57CHdF4KZOdl4ggDwhKDM:maAZDaAZ3aAZgaIpvlBgOdiggDwhKDM
MD5:	E7252CD4D00EE23B67DEF5A8F8179550
SHA1:	5C80D9A01EBBE47AB863718E456EAB91E4C17C06
SHA-256:	2B5E180354B0AC86A7AFE7AE74A6CE45703EE1B2ACC7081103EEBA52124BC39C
SHA-512:	F959E0741B0BA4D1AC9250EE2682BBB2C49684029846CE8BB4E59D88AED476BB40C85E53EB86D233F37E0564BDD36906BD88CE29C2AF6FCFC9F02ADAFDBDB0A4
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/user_files/user_files/000/080/770/original/funblue.css
Preview:	@font-face{font-family:mercury;src:url(https://actionnetwork.org/user_files/user_files/000/080/768/original/MercuryTextG4-Roman-Pro.otf) format("opentype")}@font-face{font-family:cheltenham;src:url(https://democrats.org/wp-content/themes/bsdstarter/assets/fonts/MyFonts/CheltenhamITCProBook.woff2) format("opentype")}body,.gen_wrapper,#gen_header{background-color:#0044c9!important}body>.gen_wrapper{clear:both}@media(max-width:783px){body>.gen_wrapper{padding:0!important}}.gen_wrapper{padding:20px 20px 0!important}body>#gen_header>.gen_wrapper>img{width:180px!important;float:left!important}@media(max-width:783px){body>#gen_header>.gen_wrapper>img{float:none!important}}body>#gen_header h1.gen_name{border:0;font:0/0 a;text-shadow:none;color:transparent;background-image:url(https://actionnetwork.org/user_files/user_files/000/080/767/original/D_Logo_Horizontal_White_90.png);width:299px;height:60px;background-repeat:no-repeat;background-size:contain}#paidforby{border:1px solid;padding:10px;tex

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1259
Entropy (8bit):	6.603844824379986
Encrypted:	false
SSDEEP:	24:hchxTwVZPH5rFfmRhihc8Su4KGfajCTVMLjHE3zVbHmyl+dZe/bm:hcHuRHrfyYUOHE3z1Hmy07e/bm
MD5:	AB1C6CAD18229D8C780F749565747FC8
SHA1:	C9B441778CC051A5302D349890A0E163CC8C32BD
SHA-256:	BACA4208B0E8C609FD5A04731C5309123FBE0C517B054748A93382394E79E3FC
SHA-512:	81959938FB61B991B3401D06A659C4E517C0EF0BF25828A569A97E1A03E0A365CF2768DA8CFF72B54C3EC4444104CDF0BCA5D084E788A14FDE229FA530895773
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......PLTEGpL.Cx.Cy.Cx.Cx.Cx.@v.Dy.Cx.Cx.3f.Cx.Cx.@x.Ez.Cx.Cy.@..Cz.@u.Av.Cx.Dw.Cx.;v.Cx.Cx.Bx.Eu.Bw.Dx.Cy.Dx.Bz.Aw.Cw.Cx.@..Cx.Bs.L..Lf.Dw.Dx.Bw.UU.I..U..Dw.Cy.Cx.Cx.Bx.B{.9q.Cx.Dy.I..Dx.Ft.Bw.Cx.Cx.Cx.Cx.Cw.Dx.Dw.Bx.Cx.Dx.Cx.Bv.Cw.Bx.Ct.Cx.Cx.Dy.By.Cw.Cx.Cy.Cx....@y.Dw.@p.Ay.Cx.Bx.Cx.Bw.Cx.Cy.F{.Cx.Cy.Gx.Bw.Bx.<x.Cw.Cx.Bx.Cy.Ft.Dx.Cw.Cx.@s.Cw.Cw.Cy.Bw.Dx.Dx.Bx.Cy.U..Cy.Cx.Bx.Cx.Cy.Cx.Cx.Bw.Bx.Bq.Dx.Cx.Cw.Ft.Cw.Cy.Im.3f.Cw.Cy.Cw.Cx.Cy.Bx.Cw....Bw.By.Ay.Ey.Cw.Cy.Cx.Cx.Bx.Bx.Dx.Cw.Dx.F..Cw.Dx.Cy.@..Cy.Dx.Dx.Cx......tRNS....yH.R.... 0[....'.......%.1..2/.......G"............D......-...6o....p.....(^.7.dsI._..n$Mw.\.........@...&..W...t....X!v....z.......JN.r...Q..q..g.....9q....IDAT8.mS.[.A..B.i$!.. ].w.H.E..t.4.....6....bA......w....0....vwvw...i/t...M..w..l..(..,3Y.r.1....Ye=..?...Gu[........Iw........+..e"W....iR....>..3.s.<....7.O]R..2..\|..fm..:.U.@..?._od..W."u6......"3.r../...X.....C.....3.p....H...j..B...$..= .#.Clf.&@.....

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	704
Entropy (8bit):	7.6141718648016665
Encrypted:	false
SSDEEP:	12:JWMYNOI85ttKgflYAYGwsbFo0KcbZY3pMtVXCLcgT8A+h7WPFZxRUaElWna:J8cIotVflYAYGvFtbZY3aKLt8noPFZxw
MD5:	7D8F2152B0F238FC24A319B81F8669AD
SHA1:	D47A4943C9523610C32328A29A4D30BB51003B0E
SHA-256:	E5276C8CDA16431A8D0D0BB439D6EE1B1A9248198C38C470EFBAAEA192173164
SHA-512:	3590904E00C43B1380253C9D08522BB1009D1E340CCBAD9711E38E6122C5DCC3C069FFABC44A88D9C62B4D44B5CD6CD59641FC511228605BE38AEF532F7F4D26
Malicious:	false
Reputation:	low
URL:	https://democrats.org/wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=32
Preview:	RIFF....WEBPVP8L..../....?.&.$G.>....G..w+A..H.$%{.?4$<.P.B..a#I.r.?g... 5."L.......Eat..Q..{\. .....pH..&).........e..O~..IJj..4.......XHH...."BI@@...&...t[8.@....EQ<..j..J"..H...2$..!..b(...c.N.(I(....%...,....0..N.\|..r.^=s.)..}.....D....V\|............!.mcovl.m.nc..j.m.......<BD.'@&....?89...=.%...br.....C,.W.6...%...\|...X..ZZD..C..!6....8......+.....t...U..sC5@..,:.....\|..:..9`/P...J..6~+..3(...E.v.w.....~.U......x...2.../.1.j.hy...KR.P3...~....2`...iNNk.._.7.x..YP#.*)..8..&.E..a.....k.....s@......$..=.....}...V......l9.x'K......m....2....5.l.JJ/5.{...{.G)v...C.....S%}.h.a%...$._...2.p.`..AQ..;.)..>..,..b.%..ME...Yoz.1...v.5..8.u(..U._..7.W.....\|....~....A&.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	155010
Entropy (8bit):	5.291737099792811
Encrypted:	false
SSDEEP:	3072:Djtvh74bjQTL8bENT48X4xnNDVSkr16LbMr:Vvh74bjQTL8bENT48XonNZSkr1obMr
MD5:	92075E2B7D75B41D82262A7E241A5CCA
SHA1:	F290168415910133886D2DD76817CBDDB4ADA9C1
SHA-256:	605953734BA4355465BA0A1E32A3E9E243F43348733E890ABA375AF9724BCA36
SHA-512:	90E5D5D2169AFF97CEC966CB2403E4F9957476B942A87513BB7312BCD5F08B71AA406C250AFF4E2638B47757B7F865E8E7EBD902FE6570C27060AB6CF8C3C842
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/imichatwidgetv2.js?v=28052024_1
Preview:	var _proactive_settings,_widget_settings,_attr_key,_enable_pci_complaince,lightness1,lightness2,lightness3,lightness4,lightness,saturation,hue,chatSessionThreads=[],closed_thread_list=[],_cur_proactive_id=0,_style_storage_key="",_nxt_refrsh_key="",chatclosedThreads=[],_cur_chatid=0,_warning_icon="<i class='icon icon-warning-bold warning-icon'></i>",_markdown=new showdown.Converter({underline:!0,strikethrough:!0,openLinksInNewWindow:!0,simpleLineBreaks:!0,simplifiedAutoLink:!0,emoji:!1,ellipsis:!1}),host_url="",LoadSessionChats=function(a){IMILiveChat.getChatThreadSessions();JSON.parse(localStorage.getItem(_style_storage_key));null!=chatSessionThreads&&0<chatSessionThreads.length?($("#chatthreads").html(""),$("#chatthreads").html('<div class="convwindowloader"><img src="images/wcindicator.gif"></div>'),IMILiveChat.fetchThreadList(function(){if($("#chatthreads").html(""),0==$("#chat").is(":visible")){var e=chatSessionThreads.filter(function(e){return e.threadid===IMILiveChat.getCurrentTh

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70857
Entropy (8bit):	7.993208981606479
Encrypted:	true
SSDEEP:	1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr
MD5:	416250F60D785A2E02F17E054D2E4E44
SHA1:	21572C9751E5A3DC20395BEFA0FCB349C32C4811
SHA-256:	0A012CF808A24573168308916092D2D4BD3F2B4AF8E16B59167013CC77ACEE55
SHA-512:	CF1E7ACF47464F00D206E9149475E22B8EA5A31727FA16344CD151384D850B83ECE5E9ABE4AC62861DBA0DC3D3410955611D94665B60E2FAA0C3D7A3D7C88404
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/includes/js/intl-tel-input/img/flags.png
Preview:	.PNG........IHDR.....................IDATx..u.]....{.s..{F..!N..K...B...EZ...B...w..!..Ml2...G...3.IF....o.Cg2..}...Yk=[.x.].p.X........... ........;..-.lN..R.H..I..!.@).u.:..>...M...Rx.{8...0.4t.r...2]Q..\6]5.=.@Y.]..............f].g.Wz..Z..E.>-..8.... !.B$.VIA..+....a)..-v........I..xSk..C..z..g.s'.f.I..t.N..R.u... -K.n.E.ve.;m..7....i.#.....&.._A......f_.]....."n..!..zbn.N>..S..o^...p...'..<...+.....(...b@#.h`...}.1}\.s.}....=.O...K....7..9...m.....d.. $.....).....%I.9....B.........._K....P`.7..~=...l.....y..2.(.J..8.+YW.....}.T..wJ.t~9...w...........N...>...dTA.....DL.g=p..}6..6oZ.....w..-8k...8.+....a[p..3y.. ;x.57;.^tT.. .(........v.....u.1#.<..x..`.....&....&{...o.....J[...kJ.i.B...U.H.:.^x....!.~c.J..6.n..~M.\|...........l.l..@H..J.r....).....&..(.....>^n?...(......U..F...'Vn?.;.[....[........../.^~...T.9zx.w\|R...>*.......B.]w..5bk:B%...RC....W..h.!J.%`U..0.....3a2.nvg.].....+....>..b..x.`T..{\i..n..._](L.Y.]....p.cG

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	244298
Entropy (8bit):	5.542141430978526
Encrypted:	false
SSDEEP:	3072:cgaiJ9iVVZLyFshf3K0ljngvLMzU467dbeOKfy4WqM0bukMZn:f+VV9yFoz8ymTqM0qkM5
MD5:	E1F15C1ED68E817188242518FA787E42
SHA1:	57642F6726550F60EE9466FDE448A3AB2FC94F92
SHA-256:	EE798FE76FFC5632E6C4BFC86A77DD0B1635ABAAB122BC27C1B46C6D68B67A84
SHA-512:	CCF3D4078EDB55AD6CF759356B3DE42B5671FE944CE95DF04073ED6FCF26F355C56E852CC68F9C23207A6DB912999C2CBC65C4262F7B87D43705D889D51272A5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-11154426359
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-11154426359","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":3,"vtp_instanceDestinationId":"AW-11154426359","tag_id":9},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-11154426359","tag_id":7},{"function":"__rep","vtp_containerId":"AW-11154426359","vtp_remoteConfig":["map","enhanced_conversions",["map","OInWCOy815kYEPeT7MYp",["map","enhanced_conversions_mode","off","enhanced_conversions_automatic_settings",["map"]],"WLn

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 62, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11986
Entropy (8bit):	7.97046683795637
Encrypted:	false
SSDEEP:	192:I5LI+PsFBftNrVD9PoG2K3Ctppo0XBM2/7viTpQTqqK9QS+nkN/udfiHNNWMupTD:A075tXZPoLftU0CYKTpQNKmxYoiHNAeE
MD5:	8D9A0FB373DED6577BE98A953BFC1EF0
SHA1:	54A2D50FE3B8FA5E286AA398785E17214E0CC44C
SHA-256:	35F59BF8C17973197E38D214EF27E2A090055D2223954391BBC3CFF31ED67C8A
SHA-512:	E1627BE0B553D42B75CA08C170686FEBA079810621BFFBADA2828CC83DA7D2C67906CD8D2C63DF85806DA8E7492D26643F345C231DA2B2F4F4503D7A27DEEEA2
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/actblue-511088c1dd12a3bab3ea3a86a243f41939d1ab0bca208367a9635ee494ddd7eb.png
Preview:	.PNG........IHDR...,...>.......&Q....sRGB....... .IDATx^.}..]U..Z..2..L.I..$....$..P.....^..."...\..GDAE.\..xA..BB..P. ....I/..d2......o.f..9..}.!..~.y.3........a4\|...'c.0B. .r..n<.%_."..?.>.E..EU....Rk..=....2>..uv.2.de...B.~.\&[X^..$.........:..>.......x%.;..0`eb...;>.:.....9<....N-..nW..+.;...j....Br.t5..J.i.AB\I.#...$DCG.A...Ez....oJP..%"...<.._....^.....T..=.m.`.Tp...rQ.......YV.Bz.6#-...F..).zN.HX..{M..y..V..s6=.....r.[bp.\|d.IL..aAEZ....7oc..6.-a......7.!.BG.M...%..O....<.T.l..!..K...VlF..o.r.. !."..E.P-..w...7.p.....8...6..0`y.....\}..,.(..(.j..t.a,$.H`B.f.BGVO@(\7,e......F/.AX.'a!BL,*b.q.Mf......@....%[.1a..r.......C..K..M,....f........n.zz.s...Y.C..6............J....Nn0.^..........}..p.G.....W.....>F.......7..G.....RL.hv.\|...C.X}.@X.-z.a,...XD..y.h.....O.v.&&..a.:......`..".72Pq.>...Z..=.a...=.>..\|v..^NPO.>Go.$.V.T..Y...I.XFV....._D....n......l.....E.WQ..< .O....P.....P5.....w..N.a.K..+X...HXI......q....._....$.a.Jw7.E...`.w..G.t..J...x....aI...=..

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	55458
Entropy (8bit):	6.127720963068963
Encrypted:	false
SSDEEP:	768:Wq1dqQNy07XIYO+n13M9uvKvbPBofgMfMPB9VBX/yybYjNxN6E9ICuwc79H4Gv4:hb7X7DtrKvjOX83vALCJhL4
MD5:	BDE8E3C9D2F8CD45D6485C43093E4ABD
SHA1:	FE3EF28EF8B6DFD8FBF3C07096D076C68B1EC026
SHA-256:	349D837B95CA9A88ED82BADBF2B6483D5D538BAD9719813DC773B1382E29BB14
SHA-512:	B91339D966C65F2456A839674778DBD257FB43F5788902418033D86A4EAF5B6F2B1BA2C25131CD054ABBACF7B7791EAB640E47A746D63724C1BDAAF79190DD88
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/express/express-lane-logo-beeff0c14d3c3aa9e8c4cc503a73ce8782b83170e6dc8875aff8c81b3d29f0cc.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="a" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 226 27".. style="enable-background:new 0 0 226 27;" xml:space="preserve">.<st

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	28947
Entropy (8bit):	4.417297063299305
Encrypted:	false
SSDEEP:	192:xLIiKe4B6rNL9np7EurARS0rc3ZhEaD9+9AuIKMO4s0pslpxb4dsu2xn3hBZ:yil4ErNL9nZEutOi9+9ARpsBbWU
MD5:	065408C2C22D9080E5BFCBD24DA8FB9F
SHA1:	0EBD51934EB0F27FFB45BCB1C1FE47990A27B9FB
SHA-256:	05F6A474BF2AAE000A3C4BFA9213B9ABB2E24F94CE498718B8767C0A9011BC3B
SHA-512:	9C67CCD43A841D0A1B59FC636A75F5088C295847C7AFA1E36B5F18BD0473D2B80C36668A4A97B14FEA08C5177819F2F02B1ABDC5CCC2BCF4AABCCC6614339F3B
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/widgetloader.html?docwidth=1280&id=0CD0C180-0B0D-44A8-80E6-0AFCA7B38214&org=
Preview:	<html>....<head>.. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=1">.. <title>Chat Widget: Connect with you customer using our Chat feature</title>.. <link rel="stylesheet" href="css/datepicker.css" />.. <link rel="stylesheet" href="css/dropzone.css">.. <link rel="stylesheet" href="css/wdt-emoji-bundle.css">-->.. <link rel="stylesheet" href="css/chat-widget-frame.css">.. <link rel="stylesheet" href="css/momentum-ui.css">.. <link rel="stylesheet" href="css/bootstrap.min.css">-->.. <link rel="stylesheet" href="css/font-awesome.min.css">.. <link rel="stylesheet" href="css/style.css">.. <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700" rel="stylesheet">-->.. <link rel="stylesheet" href="css/bootstrap-multiselect.min.css" />.. <script src="js/showdown.min.js"></script>.. <script src="js/jquery.min.js"></script>.. <script src="js/bootstrap-datepicker.js"></script>

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	545
Entropy (8bit):	5.01846145137746
Encrypted:	false
SSDEEP:	12:tr3N3Y/KYQMgdQL/uokaSOl0yVMKT+PRME:tLNILQYL/upmVMKapME
MD5:	73A75179C959530B3D49E91A9FD99236
SHA1:	9E0C64C047332392EF94DDE8E84EE0114CED9156
SHA-256:	403F1379403CA45AC99179CB685880C2ABE02B49B7BECA37FDCDFE1850273401
SHA-512:	127FE304EAF93ADE84B5433A88782811283BD626E26FE77E50EBD4316317E75BBF9982D903315A65B0F9619993E64B9C46BE12BB8CBAB1D1C423BCDAF8D8D37B
Malicious:	false
Reputation:	low
Preview:	<svg width="10" height="10" viewBox="0 0 10 10" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><title>Mask</title><defs><path d="M133.07 25.842l-.576-.592a.64.64 0 0 1-.013-.89l4.898-5.038a.6.6 0 0 1 .868.012l5.047 5.18c.244.25.25.65.013.891l-.56.576a.604.604 0 0 1-.878-.024l-2.982-3.207.11 7.554a.6.6 0 0 1-.604.622l-.82-.012a.644.644 0 0 1-.623-.64l-.11-7.554-2.892 3.124a.6.6 0 0 1-.878-.002z" id="a"/></defs><use fill="#E04B1A" transform="rotate(45 95.536 -145.51)" xlink:href="#a" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6317)
Category:	downloaded
Size (bytes):	9711
Entropy (8bit):	5.083245388895882
Encrypted:	false
SSDEEP:	192:0rg9/qft1rxa0garF763y4oGKWXAt0wGQjMlL6h53FfJaVRYcpw6i:Qg9/qftN7uzoGzVnLYn6i
MD5:	1AED70150C3EE6C9480C354B79CCFAC5
SHA1:	5438618B8532AB2D5AAC56C291AB2219594E0B1F
SHA-256:	A2C1B9A3CD5EAD999BB03587706C636A835BC571BD4324F65150AAA4F2759BCD
SHA-512:	06842131767732DC8083BC6997E11372F2A3DBB76D7AF4612FF2C1714FDBEF94580ED644F4F88690301D256448CC370074B025EF083F2B954694FA7D0FED8D24
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/widgets/v5/form/unsubscribe-4?format=js&referrer=&source=&style=full&css=whitelabel
Preview:	// bootstrap and load form_inner.js with correct URL arguments..// document.currentScript polyfill by Adam Miller..// MIT license..(function (document) {. var currentScript = 'currentScript';.. // If browser needs currentScript polyfill, add get currentScript() to the document object. if (!(currentScript in document)) {. Object.defineProperty(document, currentScript, {. get: function () {. // IE 8-10 support script readyState. // IE 11+ support stack trace. try {. throw new Error();. }. catch (err) {. // Find the second match for the "at" string to get file src url from stack.. // Specifically works with the format of stack traces in IE.. var i = 0,. stackDetails = (/.at [^(]$(.*):(.+):(.+)$$/ig).exec(err.stack),. scriptLocation = (stackDetails && stackDetails[1]) \|\| false,. line = (stackDetails && stackDetails[2]) \|\| false,. currentLocation = document.locat

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	37495
Entropy (8bit):	4.863080678753549
Encrypted:	false
SSDEEP:	384:a7BexgBacHcW5FnBHW2+YPXj4LggkSh+CUyetctt8TkSnHALetcttH+T1BhJeTeb:rI93nJlDxfpXeHijBa7nKjwhRlv2/9l
MD5:	F3FD031159AA841807D608F0231EA4E9
SHA1:	F6F3BFCA5C06804E2B26FAD9F5833E6F52693A16
SHA-256:	F623B9BDA931E9119CF801507D6A9BE623635D6FCDDD1367741F112A58F4C20D
SHA-512:	75FE71143E3095340EDA742E6AAF6E713A388633007CEC7A8371493460389D5E4589AE7FD52347ABF40CCF6B0C4238398F6F318378A4534EED232119FD22978B
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/survey-manager.js?v=28052024_1
Preview:	var _survey_fields;..var _active_field;..var _is_active_field_conditional = false;..var _survey_fields_data = [];..var _current_field_index = 0;..var _survey_idle_timeout_sec = 10;..var _option_snippet = '<option value="{0}">{1}</option>';..var _survey_filled_form_data = [];..var _warning_icon = "<i class='icon icon-warning-bold warning-icon'></i>";..var _error_prechat_requied_field = "Please provide {0}";..var _error_prechat_date = "Please provide valid {0}";..var _error_prechat_email = "Please provide valid {0}";..var _error_prechat_decimal = "Please provide valid {0}";..var _msg_delivery_status_recieved = "Received";..var _default_select_option_text = "select";....var _pre_survey_exp_details = '<div class="chat_message_wrapper chat_message_left keyboardkeyevent" id = "divwctext" tabindex="0">' +.. '<ul class="chat_message">' +.. '<li class="systemicon" style="display:none">S' +.. '<p>{3}<span class="dttime">{2}</span> <span class="drreceipt"></span></p></li>' +.. '<li cl

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3494
Entropy (8bit):	7.877958940013607
Encrypted:	false
SSDEEP:	96:GyP1OOYPpWPy920sdoioFBYOYRe/YaljxiDPo:GCgL9+iNlaax
MD5:	1D0D0E2D43FE392ED5EAF9C52C0F6305
SHA1:	3F63C37E7C32EEEA933142EC335952222DCDF2C3
SHA-256:	7B068460A3E75449EF35D3B9C968A573591245AAB2CD8EBD373B6A1F444A909A
SHA-512:	88A7D0C94B0E39E4C19EE4F7E5740549926EB566B9CE57BC8436674C2120F90F74FB6DEDB2D7DF7C179581B45E5C60AEE2A07E6CAB1E407339F7B24B38EF66EA
Malicious:	false
Reputation:	low
URL:	https://can2-prod.s3.amazonaws.com/groups/photos/000/151/140/thumb/DNC-Group-Logo-Final.png
Preview:	.PNG........IHDR...d...d.....p.T....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......7........IDATx..i.\U....Y2.$3.0!.$&,.4.......pAQTV..r_...r).@..B.P...B..@.(........$...I.!....d2.d....{nrm..9.....kj..w{....H. A....$H. A....$H. A...\|..}....e..k.9...8.hjB..h....\`..?....q.E.........`.\|....i*BJHB.0....0...........z...D...^.../..........P...4...1.X........"...8....I........#.)Hi8!ED......8.X.>)..Q`."..g....4....."c.p....t..d.j.)`..'...^`......."b.RG..g..!.Qo..1..~......RwBBd....>.Hi....@...~...x......b.hAv.......GL.......vC}..n..2..+.K.S............5'....2:..._......!........ ..B..4......I.f.PKRjN.!c:ROW..Wq.....Qp.8...-v#B&..i..8...A.C/.yo.@..-.i........._.r2&...?.?..F$.(.R.i`&0.X...S..(..{._.W".&.........E.dL.T.].mH"v"I..y`.\|.Q....w".\#...l.+.../...2..J..He...".[..X..p .,..\.H..8..p.....o).%!..P..r.).j~.I.`..>....V.(.S.y.KK?....`...y'.<p/p9......;...N......\|..$.........E......w...........%.j..K..\|...x...G.,.....

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	106832
Entropy (8bit):	6.102145093591149
Encrypted:	false
SSDEEP:	3072:xzdL0OvYZCV66KBo61eXJmFNLbywtCrC+Kl:VdgC130eWLOBG+E
MD5:	31A8458386627767DB68E0B3CDD84763
SHA1:	AEAB3154C358BEBBDB9A65AA6ADD571A60B2C30E
SHA-256:	76C84B76A3E1A540EFCF568D4335411C7D124CB07240B55960CC576F4CFC69F9
SHA-512:	81E90CEDF126DA0535F06C25D326BEBBDC84546E7E2FFD96F39BC079717AC84FECC355CEA65F42F27E8F0A177CADE1ED1F0F4BF66C25F8D3810C91C615BFDF23
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/home/mobile-5a0d7993c13d170aa0ef0bea6b0e4edf5859af81cc9a2358c63066f6f705e532.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 230 230".. style="enable-background:new 0 0 230 230;" xml:space="preser

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19897)
Category:	downloaded
Size (bytes):	19964
Entropy (8bit):	4.965981573549527
Encrypted:	false
SSDEEP:	192:ZffbODmPe7mAY3zTZHc/Cc8CJwncvxBRbzS6Pq3XY7u2nXsi9TZ863M30dQPPT13:xjO2EHkXWcTtCsZd
MD5:	4996D56C1939E417CCC5BBD06E596B31
SHA1:	AF57973EDBD007955A39A05AC004F5556314CC65
SHA-256:	FBAC3B878911F37B7967DB662F77F889C21D1EAAEB14ED156657EE09407EF0F8
SHA-512:	A575A26D6C25FA9AD52BA0145A38C79A4FC8B4155815AF621DE4122D96D7FF0B24C1EEFEE9CCFD2EA77BF7909FC8E9F0C2711A1310B91BF03BFDC737668EDBF1
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/packs/js/application-dc9afff59193edecdcfb.chunk.js
Preview:	"use strict";(self.webpackChunkindigo=self.webpackChunkindigo\|\|[]).push([[1034],{35186:(e,n,t)=>{t.r(n),t(82526),t(41817),t(72443),t(92401),t(8722),t(32165),t(69007),t(16066),t(83510),t(41840),t(6982),t(32159),t(96649),t(39341),t(60543),t(21703),t(96647),t(9170),t(32120),t(52262),t(92222),t(50545),t(26541),t(43290),t(57327),t(69826),t(34553),t(84944),t(86535),t(89554),t(91038),t(26699),t(82772),t(79753),t(66992),t(69600),t(94986),t(21249),t(26572),t(85827),t(96644),t(65069),t(47042),t(5212),t(2707),t(38706),t(40561),t(33792),t(99244),t(18264),t(76938),t(39575),t(16716),t(43016),t(3843),t(81801),t(9550),t(28733),t(5735),t(96078),t(83710),t(62130),t(24812),t(4855),t(68309),t(35837),t(38862),t(73706),t(51532),t(24298),t(82376),t(73181),t(23484),t(2388),t(88621),t(60403),t(84755),t(25438),t(90332),t(40658),t(40197),t(44914),t(52420),t(60160),t(60970),t(10408),t(73689),t(30941),t(93299),t(35192),t(33161),t(44048),t(78285),t(44363),t(55994),t(61874),t(9494),t(31354),t(56977),t(55147),t(19601

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4903)
Category:	downloaded
Size (bytes):	14790
Entropy (8bit):	5.714389645498087
Encrypted:	false
SSDEEP:	384:5GefdGoKEyhSERv+Yue82AeELmd1ijcbFkAIJARfqxiQFFJ/N48NJ0CC:Vs5EyhBRvpu4YaH8aHTRzQFFJ/N48j4
MD5:	F319F8F4C11B072A08C56130ABF29824
SHA1:	3A75266F594EE421E36AB4C89708414CEC7A59D0
SHA-256:	CF2C6F4074318E372491BEDE314D8A7964738E173147733B5A78870EBA9D2872
SHA-512:	B6DEBA819DB8DD247A714E04C63AB7983CAB9FCCA16B8C36510343C8D21E1D64D10E7C495C4BE57B6E8E88FD2B69E007C4398B9C264294CBCC973F45D2D52373
Malicious:	false
Reputation:	low
URL:	https://pay.google.com/gp/p/ui/payframe?origin=https%3A%2F%2Fsecure.actblue.com&mid=
Preview:	<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://pay.google.com/gp/p/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://pay.google.com/ui/payframe"><meta name="viewport" content="initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"><link rel="preconnect" href="https://pay.google.com"><link rel="preconnect" href="https://pay.sandbox.google.com"><script data-id="_gd" nonce="hzNyvCWEZekkE15Zrtht7g">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/","/business/console","/business/console/","/c/w","/c/w/","/campaign","/campaign/","/diwali","/diwali/","/g4b","/g4b/","/gp/a","/gp/a/","/gp/m","/gp/m/","/gp/t","/gp/t/","/gp/v","/gp/v/","/gp/w","/gp/w/","/gp/wallet","/gp/wallet/","/gp/wc","/gp/wc/","/invite","/invite/","/pay","/pay/","/payground","/payground/","/payments/apis-secure/ui2","/payments/apis-secure/ui2/","/spot","/spot/","/vgw","/vgw/","/vp/w","/vp/w/"

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1446
Entropy (8bit):	5.067572570571567
Encrypted:	false
SSDEEP:	24:YSxnWXhp1dAgz7X4lFC7ZuJmOe2wHD4HNkI+gNtN3eCkuyCEb/G7JhCdazY:YStQhILCumt9WNk5gBVyZbcOWY
MD5:	25C8BCF95F567572136FA8B570048E57
SHA1:	9FB0E77ACE5F4A095C2CAC4A27D86DA313D8C52B
SHA-256:	906C9D89C8CE8EC211862C4831C3A8798F2D882D2A0D21196FAE55CCE11502EA
SHA-512:	DF787032ECEA7B8D9ABAC07FED2693CBF9C3014F05184BB775AD2FEF78E56B9EACA34E8E27AE00E0E7FC8DED36071E208F207A05D579D883F3D72AC69F54DF06
Malicious:	false
Reputation:	low
URL:	https://chat-widget.imi.chat/livechats/0CD0C180-0B0D-44A8-80E6-0AFCA7B38214/settings?host=democrats.org&$callback=?
Preview:	{"website_id":4842,"appid":"DE17101053","clientkey":"0WOZrww6","enable_proactive":true,"button_shape":"type3","button_color":"","headertext":"IMImobile","bylinetext":"How can we help you?","buttontext":"Get Started","widgetcolor":"#c6d5f2","isemojienable":true,"isattachmentenabled":false,"showprevhist":1,"name":"Team DNC","site_url":null,"wt_type":1,"wt_type_enabled":false,"text_color":"","logo_path":"https://imichat-preprod-app-share.s3.amazonaws.com/logos/45961866638542366318856090__DNC Logo.PNG","visble_on_wh":false,"widget_visible_type":0,"outofoffice":"","agent_avail":1,"isbackgroundenable":null,"isforceturnoff":null,"forceturnoff_hide":null,"forceturnoff_message":"","blacklisted_i_ps":null,"prechat_welcome_txt":"","survey_fields":[],"ip_stack_data":{"ip":"Jv8GqZ2sUIjyPXwDcSOnOrhpFQ4VbYQgrAoNZVpznufMtN1rdDO5iuTeewY1T7Xf"},"settings_refresh_timeout":1,"groupid":1866,"transcript_request":1,"play_sound_notification":1,"qualify_contact_type":3,"quick_reply_fields":[],"show_quickreply_

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4930)
Category:	downloaded
Size (bytes):	1281801
Entropy (8bit):	5.602761182088076
Encrypted:	false
SSDEEP:	24576:oV08p23MHEKEYk9ibryRAMjCZgrCTDhElG9sD2zNj:oV08p23MHEKEYk9ibryRAMjCZgrCTDhr
MD5:	AE46C6C7B86FA37B23FC5C14EB180534
SHA1:	92B6A433F9894F46B003FA9CD945439DA80C6135
SHA-256:	CE26EFFB29FE52F8C3CA8D61C48D90C33A78F2D2794B794322A75DA8F6A797B6
SHA-512:	290F6022B758995DC0D064F66FF4746975E00EAE45F27DABCE82C83DFB18D420E4F593BA8773AEF43B99C5C9C790CA074A09C7E29A3690A3B18AC767D2EA88EF
Malicious:	false
Reputation:	low
URL:	https://pay.google.com/gp/p/ui/pay
Preview:	<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://pay.google.com/gp/p/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><script nonce="AUfONeiSzTXyS8xaB6HXpA">window['ppConfig'] = {productName: 'InstantbuyFrontendBuyflowPayUi', deleteIsEnforced: true , sealIsEnforced: true , heartbeatRate: 0.5 , periodicReportingRateMillis: 60000.0 , disableAllReporting: false };(function(){'use strict';function k(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function m(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=m(this);function p(a,b){

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	106040
Entropy (8bit):	6.091471642755104
Encrypted:	false
SSDEEP:	3072:czdL0OvYZCV66KBo61eXJmFNLbywtCrC+Kl:cdgC130eWLOBG+E
MD5:	3742A14031CD10D090A409EAA5E9D537
SHA1:	41F066AEB435A0D73C6455F82A355144E5F195C3
SHA-256:	A18C337AAF0D5D2F9742F0EA6DDECA8149B3A445E33593AB7A83BD922376B4EF
SHA-512:	E689A54181169DAB33DBC32142EEE396D4D68AFC792D7B4D1B8043B427B6C5BFF5F8E62D3576C20CEDDF63010C221066395E80DACA87CCB2A536E4296BFFF110
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 230 230".. style="enable-background:new 0 0 230 230;" xml:space="preser

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (787), with CRLF line terminators
Category:	downloaded
Size (bytes):	1122
Entropy (8bit):	5.5335509985124585
Encrypted:	false
SSDEEP:	24:3QeJuL+eNXkPGbkGbG5TdmhBOBgopTMj+Zdbe3TkHHYNCqjqWBXSs65l8:3Qew3eGbkGb4UAOofdRXqjq0D65K
MD5:	A3995E8FAA9BA80EF17642398D07BDF8
SHA1:	3437BC38DE6D4AEF1381251ED3121E520D06C350
SHA-256:	AE10181C66599FC4D3EFAF03DE0334C11FF4D89397D998AC23428CCED28CBE94
SHA-512:	4DC1ED56CDB666238FAA78CE05DC0C42EA22C3CF54A918BA0D998E5EEFD506B31B3CC88129C8E5E070522FFF234E68EF6F7AF46CAC0932F56025A8ECA33029CC
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/textcolor.min.js
Preview:	/*.. Minified by jsDelivr using Terser v3.14.1... * Original file: /npm/textcolor@1.0.2/textcolor.js.. * .. * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files.. /..!function(){var e=function(t){return t instanceof e?t:this instanceof e?void 0:new e(t)};function t(e){return.213e[0]+.715e[1]+.072e[2]>127.5?"#000000":"#ffffff"}"undefined"!=typeof exports?("undefined"!=typeof module&&module.exports&&(exports=module.exports=e),exports.TEXTColor=e):this.TEXTColor=e,e.findTextColor=function(e){const n=/^#([0-9a-fA-f]{3}\|[0-9a-fA-f]{6})$/;var r=e;if(/^(rgb\|RGB)/.test(r))return t(r.replace(/(?:$\|$\|rgb\|RGB)*/g,"").split(","));if(n.test(r)){var o=e.toLowerCase();if(o&&n.test(o)){if(4===o.length){for(var f="#",i=1;i<4;i+=1)f+=o.slice(i,i+1).concat(o.slice(i,i+1));o=f}var s=[];for(i=1;i<7;i+=2)s.push(parseInt("0x"+o.slice(i,i+2)));return t(s)}return!1}return!1},"function"==typeof define&&define.amd&&define("color-js",[

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10586
Entropy (8bit):	4.628263078042368
Encrypted:	false
SSDEEP:	192:Ccos1g43VNymktymoXX3+UfSeAm9IRNt50Ky+6RgCL:X5/ymoymo39fnIAV5FL
MD5:	9A4579A6D1B99E1A98B1028E459D9FFF
SHA1:	55D444A68504F302EFF8C5BB0B612EDF2F0B6A57
SHA-256:	4DC9D1EE77F4A03C3458250C209EB6DBC86ACB4389B5500644B66EACDFDE336D
SHA-512:	B95AD83240E1F5CCE4A2E50B3BCC19F05A053BD4096C3EDAE1D7E25AF8423009908D18A45785FB391E6A05192A8E99865F41868C56E057EDD5542E4ECEB32446
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/i18n/en_US/widgetlocalization.json
Preview:	.{.. "sendmessage_placeholder_text": {.. "value": "Send a message",.. "comment": "placeholder text for send message textbox".. },.. "sendmessage_ariallabel_text": {.. "value": "Write a reply",.. "comment": "arail label text for send message textbox".. },.. "chat_button_tooltip": {.. "value": "Chat button",.. "comment": "tooltip for Chat button".. },.. "back_button": {.. "value": "Back",.. "comment": "Hamburger menu item text for 'back' ".. },.. "endchat_button": {.. "value": "End chat",.. "comment": "Hamburger menu item text for 'End of chat'".. },.. "endchat_popuup_end_button": {.. "value": "End",.. "comment": "button text for 'end' button in endchat popup".. },.. "endchat_popuup_cancel_button": {.. "value": "Cancel",.. "comment": "button text for 'cancel' button in endchat popup".. },.. "chattranscript_button": {.. "value": "Email transcript",.. "comment": "Hamburger menu item text for 'Send chat transcript to your

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	227457
Entropy (8bit):	6.1228384703093335
Encrypted:	false
SSDEEP:	3072:paMkj1a3zzLEiGLcJNG8/SKKQj/M51HebVoFH9BKBcLEfc3NJjYrpIoGYQbEzNx:XkenEiGg3HSQVefXL+cdaZGvE/
MD5:	B4E8CA17AD0A74052F59D6F812B71D2B
SHA1:	1CFAFF3AF9A72F645DB354FC7F038BB20B13FEBE
SHA-256:	52BCCE15CF14C8B809663A40F4A26CE0BC401A26A950D40167943A81386A7DA7
SHA-512:	D96993AB59259FFC2CB324A8FB166D9DAFA2F44AAAD2CEDA6E921F1547B86228D0FFDED7A0DAF1777E7FFBD11011422B84D4F7960E3CB38B12385B4460D8F43D
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/layout/home/meet-express-lane-background-a9b7b7d4a9115ce5c05d798ff0262149f3a93fe1df66e3c2cc14a764b3cf6486.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="Layer_1" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 300 126".. style="enable-background:new 0 0 300 126;" xml:space="preser

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1824
Entropy (8bit):	4.366970038285919
Encrypted:	false
SSDEEP:	48:61bBrEvWFaHM5y4bHtzrOf1NPycREROSfzsKOW5h:8bBrngEZO1sqSzsKvh
MD5:	34A4438D65DE8B75B2E2B38081B37625
SHA1:	C40C0EB631E267E06A4B48FD1FF072B300C7457D
SHA-256:	C76F766ED128FF1C05CBAB4F53E470751B475152992A770D42273047BC1708C5
SHA-512:	67CF35910DB0970AC3C00D57A8CDBC90FCFBA9A8B95D0039EBE73E2D16AF418FAB82DE712E5DB8CC2F5A76849FC5E03F741433C8F8B96E81B9F4A0C78398D3EF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/instantbuy/svg/light_square_gpay.svg
Preview:	<svg width="41" height="41" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M19.526 14.635v4.083h2.518c.6 0 1.096-.202 1.488-.605.403-.402.605-.882.605-1.437 0-.544-.202-1.018-.605-1.422-.392-.413-.888-.62-1.488-.62h-2.518zm0 5.52v4.736h-1.504V13.198h3.99c1.013 0 1.873.337 2.582 1.012.72.675 1.08 1.497 1.08 2.466 0 .991-.36 1.819-1.08 2.482-.697.665-1.559.996-2.583.996h-2.485v.001zm7.668 2.287c0 .392.166.718.499.98.332.26.722.391 1.168.391.633 0 1.196-.234 1.692-.701.497-.469.744-1.019.744-1.65-.469-.37-1.123-.555-1.962-.555-.61 0-1.12.148-1.528.442-.409.294-.613.657-.613 1.093m1.946-5.815c1.112 0 1.989.297 2.633.89.642.594.964 1.408.964 2.442v4.932h-1.439v-1.11h-.065c-.622.914-1.45 1.372-2.486 1.372-.882 0-1.621-.262-2.215-.784-.594-.523-.891-1.176-.891-1.96 0-.828.313-1.486.94-1.976s1.463-.735 2.51-.735c.892 0 1.629.163 2.206.49v-.344c0-.522-.207-.966-.621-1.33a2.132 2.132 0 00-1.455-.547c-.84 0-1.504.353-1.995 1.062l-1.324-.834c.73-1.045 1.81-1.568 3.2

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG 2000 image
Category:	downloaded
Size (bytes):	60952
Entropy (8bit):	5.21588556140369
Encrypted:	false
SSDEEP:	1536:TRFShjBiZ85K5fXTpz3LCQENNKMwUa0ejoBqVMEbq:GIxcNNRwWBs5e
MD5:	BA801C6AEC8B168C557810CB5D9F0C9D
SHA1:	39481871F8B4B57738E723823A82115727BA7478
SHA-256:	EB350D90B94CE0051190C62A83F781CA9C1747A3C853F67ED35DBEBD88E3DAAF
SHA-512:	C5F998B075037CA024EE340E305D4146E46EB0703D7485F90AABEDDFE54E9217F017C6BEFDC4F93629B2BDCCD918511DD0A1A4D2E1AC1A5F9517632962AE7B6C
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/jquery.jplayer.min.js
Preview:	/! jPlayer 2.9.2 for jQuery ~ (c) 2009-2014 Happyworm Ltd ~ MIT License /..!function(a,b){"function"==typeof define&&define.amd?define(["jquery"],b):b("object"==typeof exports?require("jquery"):a.jQuery?a.jQuery:a.Zepto)}(this,function(a,b){a.fn.jPlayer=function(c){var d="jPlayer",e="string"==typeof c,f=Array.prototype.slice.call(arguments,1),g=this;return c=!e&&f.length?a.extend.apply(null,[!0,c].concat(f)):c,e&&"_"===c.charAt(0)?g:(this.each(e?function(){var e=a(this).data(d),h=e&&a.isFunction(e[c])?e[c].apply(e,f):e;return h!==e&&h!==b?(g=h,!1):void 0}:function(){var b=a(this).data(d);b?b.option(c\|\|{}):a(this).data(d,new a.jPlayer(c,this))}),g)},a.jPlayer=function(b,c){if(arguments.length){this.element=a(c),this.options=a.extend(!0,{},this.options,b);var d=this;this.element.bind("remove.jPlayer",function(){d.destroy()}),this._init()}},"function"!=typeof a.fn.stop&&(a.fn.stop=function(){}),a.jPlayer.emulateMethods="load play pause",a.jPlayer.emulateStatus="src readyState networkSta

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 183 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5468
Entropy (8bit):	7.781077683030462
Encrypted:	false
SSDEEP:	96:zSDknmWIGEhFHqfEpgXU6fS4Mbnt8IatmwW8wv7UqFSqCRj:zSDkniaEpFpNwWDojqCJ
MD5:	2D5A7A8E020FAACB9562B5AEB3F8DF62
SHA1:	65AC25FA146994584ECE05D857FB12A1812BA166
SHA-256:	5A83D57E15A55B862FA4CCBABC0A121681F95212C1D2C02A33059274A6E7CC76
SHA-512:	D1A7D5958DDD32209FF5DADF1E8AB63A0F61436B65A8924982B5147AC9AF72AFE366636725B525D8164D555581CC7F2147F79B601B2243CFA7CD07389B880E29
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/images/logo_sm.png
Preview:	.PNG........IHDR.............j.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5b4, 2022/05/09-08:25:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Macintosh)" xmp:CreateDate="2020-03-24T11:08:24-05:00" xmp:ModifyDate="2022-08-25T14:25:09-05:00" xmp:MetadataDate="2022-08-25T14:25:09-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:fd622c76-b918-4b00-b724-3686dc3c088a" xmpMM:DocumentID="xmp.did:fd622c76-b918-4b00-b724-3686dc3c088a" xmpMM:OriginalDocumentID="xmp.did:fd622c76-b918-4b

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (327), with CRLF line terminators
Category:	downloaded
Size (bytes):	43727
Entropy (8bit):	4.749234695870106
Encrypted:	false
SSDEEP:	768:4W3U/Y2bCe+NoEpdMtrT1CPBB9/7zB+El:4W3cbCeBEzl+El
MD5:	3C0AA90A1E9958DCB333BE90ABF5DC34
SHA1:	8A93DEA97BF8373000F8965D0F4FD2216052092B
SHA-256:	1228F95E6BD6870C0BC184CEEB655BFBE0D5D9FFCB53D55A5D2D1F1911BCB6D3
SHA-512:	2925C7D736D4DEFFE01C1AFC94A967857F7524F201AED0CFBCDE82ECD81D6D993C77AB27161CDCBA9B5D747449A18F26CE091CC90BC1717F17A6AE97A941B071
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/post-chat-survey-manager.js?v=28052024_1
Preview:	var _post_chat_survey_meta = {.. api_domain: IMIGeneral.profileUrl(),.. container_id: 'icwdivcarea',.. api_get_survey: 'post_chat_surveys/{0}',.. api_submit_survey: 'post_chat_surveys/{0}?hist_id={1}',.. api_skip_survey: 'post_chat_surveys/{0}/skip?hist_id={1}',.. show_survey_prompt: true..}....if (_post_chat_survey_meta.api_domain.charAt(_post_chat_survey_meta.api_domain.length - 1) == '/') {.. _post_chat_survey_meta.api_domain = _post_chat_survey_meta.api_domain.substr(0, _post_chat_survey_meta.api_domain.length - 1);..}....var _post_chat_survey_params = {.. tab_index: 1..}....var _take_survey_prompt = '';....var _survey_col = [];..var _msg_delivery_status_recieved = "Received";..var _survey_submitted_button_text = "Survey Submitted";..var _proactive_poupup_close_button = "Close";..var _lbl_required_field_option = "Required field. Please select one";..var _lbl_required_field = "Required field";....var _chat_sur_cont = {.. line_separator: '<div class="clearf

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13883)
Category:	downloaded
Size (bytes):	13926
Entropy (8bit):	5.227591090828148
Encrypted:	false
SSDEEP:	192:AEV2inKboFI2gI51neUQstd51npnU4e0k+7iGkqV3I4a1051a6CYFgwRGgdr:Gsrwi5at+7iGh3I4aa51fV4gdr
MD5:	7BDFB6E3FBFC31434B6B13B8AC528B80
SHA1:	815C9C31143ED47D783795C698CD8A043039F104
SHA-256:	FECD6B60BA3FF2020BA2CB8544BC10EDC69A33695151B6EE027E68FC78888CD6
SHA-512:	674030F2BA8FAB2D8355A52F487BC50921877B7BAB4459A45A5EBE1B7304F42FBBDECFA88C286E513E215C685410957C862C98BEBB7E4C55E5272B6A55DDE5AC
Malicious:	false
Reputation:	low
URL:	https://www.paypal.com/tagmanager/pptm.js?id=secure.actblue.com&t=xo&v=5.0.448&source=payments_sdk&client_id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&disableSetCookie=true&vault=false
Preview:	!function(e){var i={},t=[{id:"analytics-xo",triggers:[],run:function(r,o){t.q=[],t.pptmTrack=function(e,t,n){try{n=n\|\|{},delete(t=t\|\|{}).userType,o.track(e,o.objectAssign(t,{pageType:o.get("analytics-id"),sub_component:"smartincentive",item:o.get("pptm:containerId"),mrid:o.get("pptm:merchantId"),context:o.get("pptm:context")}),o.objectAssign({disableSetCookie:o.get("pptm:context").disableSetCookie},n))}catch(e){o.log({t:"error",msg:"Messaging track failed",stack:e.stack})}},t.log=o.log;var e={PaypalOffersObject:"ppq",ppq:t};function t(){t.q.push(arguments)}r.PaypalOffersObject=r.PaypalOffersObject\|\|e.PaypalOffersObject,r.ppq=r.ppq\|\|e.ppq;var e="production"===(e=o.get("pptm:env"))?"https://www.paypalobjects.com/muse":"development"===e?"https://localhost.paypal.com/muse":"https://www.paypalobjects.com/muse/stage",n=e+"/muse.js",i=(e=e,o.get("pptm:env"),e+"/analytics/index.html");function a(){var e=o.get("pptm:merchantId"),t=o.get("analytics-id");r.ppq("init",t),r.ppq("showExperience",i,"

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	82873
Entropy (8bit):	5.184690587865888
Encrypted:	false
SSDEEP:	768:55M21RCb19DeBUjFjQ0ElJD4k7ANGhuUI34Dn51TuM8R2nsfivYT3/zU:jIHeBUjFjQ0ELz0H4Dn51qMA2tcLU
MD5:	210DD28E1DF7E31A1DB44A350524245F
SHA1:	57A4FC43AEEB4EC25DE09475F8F703F2A10EB0AE
SHA-256:	887AE7F10B903EBA55B2E83ECB992DF1D8FDAE1A273F2CCC6E3263383DBF6AD7
SHA-512:	4595808276A6D22AEA91A6D3EB7B1BD19BE6FDCB1F9DD8066BD504AFE7B1189631D8A07EDBA717940AC0BDA6F343450341F88E6D9462C756E61D76214203A6B8
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/js/mqttws31.js
Preview:	/******************************************************************************.. Copyright (c) 2013 IBM Corp... .. All rights reserved. This program and the accompanying materials.. * are made available under the terms of the Eclipse Public License v1.0.. * and Eclipse Distribution License v1.0 which accompany this distribution. .. .. The Eclipse Public License is available at .. * http://www.eclipse.org/legal/epl-v10.html.. * and the Eclipse Distribution License is available at .. * http://www.eclipse.org/org/documents/edl-v10.php... .. Contributors:.. * Andrew Banks - initial API and implementation and initial documentation.. *****************************************************************************/......// Only expose a single object name in the global namespace...// Everything must go through this module. Global Paho.MQTT module..// only has a single public function, client, which returns..// a Paho.MQTT client object given connection details... ../.. *

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 16 colors, 4 bits/pixel, 32x32, 16 colors, 4 bits/pixel
Category:	dropped
Size (bytes):	2734
Entropy (8bit):	2.014090789245254
Encrypted:	false
SSDEEP:	12:SQvzHfZusWaythAvp5r/EqJuVo6Bj5WJCeoHZqciDUA8SYPVMxM9molsI:SqHfyaythI/EqKo6bOho5qhwx5ls
MD5:	165FAA2E51E9573607E3A73A8ED6B531
SHA1:	6955749BC0F4CF9EC2FF7AABEC21B8369C1180B5
SHA-256:	052C79E773F8473025AC1C6B4818C0AAE15833E88B67825756075E3DDEC82323
SHA-512:	F1B46C8B89788A87C27C92539BB2B72BA65E75645B7CFB5CE10C8A8F39E8C630FE170D37F593F21F6B46E3903432657E9F3030721852CCA6022776E9C59A29E4
Malicious:	false
Reputation:	low
Preview:	..............(...6... ..........^...00......h...F...(....... .........................................4..O...^...m...................................................................E..dF0..K@.................ky......{.............;........@Fe .................................................................................................(... ...@.........................................+..L...n........................................................................................................................................................................................9.........c.......@........P...........F...............6.........j.....f.........:......"5.........`..e....@..........9.............j.J.DZ.0......Z...j....`..........Z....p.........PZ....P..........Z............y..Y...P.....................................................................................................................................................................................

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 16 colors, 4 bits/pixel, 32x32, 16 colors, 4 bits/pixel
Category:	downloaded
Size (bytes):	2734
Entropy (8bit):	2.014090789245254
Encrypted:	false
SSDEEP:	12:SQvzHfZusWaythAvp5r/EqJuVo6Bj5WJCeoHZqciDUA8SYPVMxM9molsI:SqHfyaythI/EqKo6bOho5qhwx5ls
MD5:	165FAA2E51E9573607E3A73A8ED6B531
SHA1:	6955749BC0F4CF9EC2FF7AABEC21B8369C1180B5
SHA-256:	052C79E773F8473025AC1C6B4818C0AAE15833E88B67825756075E3DDEC82323
SHA-512:	F1B46C8B89788A87C27C92539BB2B72BA65E75645B7CFB5CE10C8A8F39E8C630FE170D37F593F21F6B46E3903432657E9F3030721852CCA6022776E9C59A29E4
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/assets/favicons/actblue/favicon-62429192865190e46d50844541a5662f8db660cae4e1d6cd607ba04e09ac3c02.ico
Preview:	..............(...6... ..........^...00......h...F...(....... .........................................4..O...^...m...................................................................E..dF0..K@.................ky......{.............;........@Fe .................................................................................................(... ...@.........................................+..L...n........................................................................................................................................................................................9.........c.......@........P...........F...............6.........j.....f.........:......"5.........`..e....@..........9.............j.J.DZ.0......Z...j....`..........Z....p.........PZ....P..........Z............y..Y...P.....................................................................................................................................................................................

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.0836169753972325
Encrypted:	false
SSDEEP:	3:PLRCkuI:TtuI
MD5:	0E4CEC582306AF35C6165BA51FC76CA7
SHA1:	A3603EDB5A34A11FF2D0A9BC3C99F00203E2D426
SHA-256:	3AE68507EEAB8377D992CAAF1D9A67A6484BD946E1A49E2AB606265B3FD5E329
SHA-512:	3B14D54CB712F0A0339ADFE6EFA722EF7062F8DD23444039DF5742074E181E31E19497BF97BF3F76D5AE929F0B1A0AD28A545F5DA04798B4CF4D09519A8A749E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwl_SIIAakwiVRIFDZc9UHASBQ37-Rgb?alt=proto
Preview:	ChIKBw2XPVBwGgAKBw37+RgbGgA=

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2686), with no line terminators
Category:	downloaded
Size (bytes):	2686
Entropy (8bit):	5.843174068076041
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08ZboLlwvt8G9sxk6:aJd6SUtJfNrVlCWWWdtqjZFbK6i
MD5:	ADEA73AE71209CCF7C92768AAD68BADB
SHA1:	C967C610E40F1FB0CE8691DF007F087A5AAFEDDA
SHA-256:	5466728E8B1F8164FB8ED7ADDA8A9D10EF9F0F5D97ECAACEB207BD10E3838B3C
SHA-512:	1E94343BE1BDB75128194528E46AA713859A6BF80AAE69D5183B879EA28A21B271C652DBECB6FC2F8E0A3815F504364136EC35078BF58FFC54E531327CFFB02A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11154426359/?random=1719991386424&cv=11&fst=1719991386424&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 172 x 172, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7255
Entropy (8bit):	7.961496297719506
Encrypted:	false
SSDEEP:	192:yAlHrRQG6boOTgRDW9K4b1apCfUQJmq5nvJpg:yOztTEEYcQJmAxK
MD5:	57638846D5A08501773E0441A6AE8ADD
SHA1:	D2399EAAAF08E492F335C33025FAA2DF47C5FB3D
SHA-256:	B55DFCEBCA4242BBF358CAB7F1A94E89B86F29D5C11FC8D141436A673E1EB141
SHA-512:	5F28E59DB7CDD80024C52689D5B9B89759ADB59848772AA8910741084094A8BD2C37348E198B645CED8C38716EA8DA635D162B3CA3EC6930BA077F7D31F6D7A5
Malicious:	false
Reputation:	low
URL:	https://imichat-preprod-app-share.s3.amazonaws.com/logos/45961866638542366318856090__DNC%20Logo.PNG
Preview:	.PNG........IHDR..............1G.....sBIT....\|.d.....bKGD..............IDATx..y\.U....w.A.Qs....-E@4...6..l.6k.y.....1.)...)......6..WP3E6.T.r.4w.Av....ITD....w....u_/....\|}.>.{~.\|...+.....{(.P......!H{W.].` .....s?W.5.~..J@.Fh..S.&.c..Xl..D...'....?...8...=....M...H ...A....@.D..X.;(....Qu......`o.......x.r..1...n]D..,`.R.....Q.f;e..'..p,........d......r5R."5....2.....m...t$3@.3.....$c.>b.<..QM..l.wAx......r.....v.X..>$%..lgT...{}f..\|....G...A2v.#5f....I...<...u#R>.$.lw....[X+........-..9^.W<..s..f....@..A.KI.Vk.3..}.vt.'.........ig.......q.mg..... ...j[.......8B.....F!.7.L0..F...Q..0..........e!....lw:(6.K..z.M.1..pn.N...\|..m.+..q..Rb.i.#..9.......].....%....:f.#..\|.M....@W.]qqN.\|....f;......4_..W..wf.........u#+.v..E......D...i.A.vnw..0.'g...6.X...0..$..a.+..v..HL...\.q..nZO'..$f..i.7.9.O...........9....-......._........Y..n.I#.5V..Y....v.Y%......~....&.*o.u..[.'!.<.....K....S....Sk.S]+)..Rt..3u.:YK......aOa...k....`...=.5c....8.N..nK...

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1344), with CRLF line terminators
Category:	dropped
Size (bytes):	46044
Entropy (8bit):	4.490052064149431
Encrypted:	false
SSDEEP:	768:uee+9HpbN7QzDc8ryCx7e3DOCX6a/G1VTnTksknWVpBOzCNAwxnUsEr:4+TyzgmlgX6a/G1VTnTksknWVpBOzCNc
MD5:	0834D3F7488D76D14F0BB0790E7603C4
SHA1:	D5E771703E398094936062C11F032542982A7FD8
SHA-256:	BAB04CC2F16E1C07D6E5ABAA859340953694C0606060AF3603B7FAFC5A526FA2
SHA-512:	8BE7F889D708B559E82C61973BCB9C6CB5CBE20E27F13528095B4836C00304D6CAA7C24A12F267C13F1436EBF5D7E9AE7B81120986CB3A508DE8D3DF0649BBD1
Malicious:	false
Reputation:	low
Preview:	var _domain_name;..var _attr_key;..var _IMIchat_IsValidNavigation;..var _IMIchat_callback_dic = {};..var _IMIchat_widget_lang = "en_US";..var IMIChatInit = function () {.. var buttonType = "type1";.. var domainname = "";.. var ticks = new Date().getTime();.. var fingerprint = null;.. try {.. fingerprint = localStorage.getItem("fingerprint");.. } catch (e) { }.. //var domainUrl = "http://widget.imichat.co";.. var domainUrl = "https://media.imi.chat/";.. var _skey = document.getElementById("divicw").getAttribute("data-bind");.. return {.. domainName: function () {.. return "https://media.imi.chat/widget";.. },.. init: function () {.. try {.... _IMIchat_IsValidNavigation = false;.. _attr_key = document.getElementById("divicw").getAttribute("data-bind");.... var body = document.getElementsByTagName('body')[0];.... var script = document.currentScript \|\|

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31992)
Category:	downloaded
Size (bytes):	93790
Entropy (8bit):	5.311782545927558
Encrypted:	false
SSDEEP:	1536:+JQ0SWWdgchL4CGFRmYnM9BHDoVLV7FG5VanRV69NFo2pr23EHTiOf0Ba39s29aH:Jhv4KxqSs2kuzs
MD5:	20055B8EDCFCA3754181170D13DD339C
SHA1:	27F6E5620030C1E87978D6CAB07AD87B294ECA59
SHA-256:	794ABDB5CD285CD61326CA9E2445CCA3EA26689DA5403D60C100ED9585B81E06
SHA-512:	94974F8A6FDC7A6B2FD9279A8DF4B04F5C024B3376CD96F3121D409867F6959A76D1E029F3932EC32B8AC26C532380151CED41C7C923EB0FE3510CD0BAF73E6B
Malicious:	false
Reputation:	low
URL:	https://actionnetwork.org/includes/js/jquery-min.js
Preview:	/!. jQuery JavaScript Library v1.9.1 . with fixes backported for:...- CVE 2012-6708: https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d..- CVE 2015-9251: https://github.com/jquery/jquery/commit/f60729f3903d17917dc351f3ac87794de379b0cc..- CVE 2019-11358: https://github.com/jquery/jquery/pull/4333/files..- CVE 2020-11022: https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77..- CVE 2020-7656: not vulnerable per this POC: https://snyk.io/vuln/SNYK-JS-JQUERY-569619.. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. /.!function(e,t){var n,r,i=e.document,o=e.location,a=e.jQuery,s=e.$,u={},l=[],c=l.concat,f=l.push,d=l.slice,p=l.indexOf,h=u.toString,g=u.hasOwnProperty,m="1.9.1".trim,y=function(e,t){return new y.fn.init(e,t,r)},v=/[+-]?(?:\d\.\|)\d+(?:[eE][

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1388)
Category:	downloaded
Size (bytes):	78759
Entropy (8bit):	5.589563776029722
Encrypted:	false
SSDEEP:	768:ZitfwLxqeZaAP2wwb5qo9AsQcmufvkrW6s12QshD3B1FAt/Om2ayfhFiCJY/XlEu:tlo/jeZZCdqBay8DTFOFL8yyQe5P1
MD5:	C6D4AEFC383099600FCA88D965979E67
SHA1:	0FE5257B23F1055DC6856897CA46A4B48A9F5E12
SHA-256:	96F56A4533EAD46B09442C9F227148580D25AA80B2A6A509F2AA044C2587E430
SHA-512:	E133B96449F0B917D5741D2AA76B7ED5846151FC40409B91AACE74AE5B53AE048D93818177A93C1285143196020F48263EEA63340424D9BBE704F9EB06FDD5F1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.k9jHwLanE3c.es5.O/ck=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.sQqql_Dnewk.L.B1.O/am=MAykAQ/d=1/exm=_b,_tp/excm=_b,_tp,payframeview/ed=1/wt=2/ujg=1/rs=AMitfrgd7Lkd-dlMhF-qswmuBoSuLHZIdQ/ee=EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;oGtAuc:sOXFj;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:siKnQd;yEQyxe:p8L0ob;yxTchf:KUM7Z/m=Das5Le"
Preview:	"use strict";this.default_InstantbuyFrontendBuyflowPayframeUi=this.default_InstantbuyFrontendBuyflowPayframeUi\|\|{};(function(_){var window=this;.try{._.tB=function(a){_.Jn.call(this);this.o=a\|\|window;this.B=_.yn(this.o,"resize",this.C,!1,this);this.j=_.Oi(this.o\|\|window)};_.I(_.tB,_.Jn);_.tB.prototype.getSize=function(){return this.j?this.j.clone():null};_.tB.prototype.ea=function(){_.tB.Na.ea.call(this);this.B&&(_.Hn(this.B),this.B=null);this.j=this.o=null};_.tB.prototype.C=function(){var a=_.Oi(this.o\|\|window);_.Di(a,this.j)\|\|(this.j=a,_.Ln(this,"resize"))};._.t("n73qwf");.var vB;_.uB=function(a){a=a.j;return a.parentWindow\|\|a.defaultView};vB=function(a){_.Jn.call(this);this.B=a?_.uB(a):window;this.F=this.B.devicePixelRatio>=1.5?2:1;this.o=(0,_.F)(this.G,this);this.C=null;(this.j=this.B.matchMedia?this.B.matchMedia("(min-resolution: 1.5dppx), (-webkit-min-device-pixel-ratio: 1.5)"):null)&&typeof this.j.addListener!=="function"&&typeof this.j.addEventListener!=="function"&&(this.j=nul

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70857
Entropy (8bit):	7.993208981606479
Encrypted:	true
SSDEEP:	1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr
MD5:	416250F60D785A2E02F17E054D2E4E44
SHA1:	21572C9751E5A3DC20395BEFA0FCB349C32C4811
SHA-256:	0A012CF808A24573168308916092D2D4BD3F2B4AF8E16B59167013CC77ACEE55
SHA-512:	CF1E7ACF47464F00D206E9149475E22B8EA5A31727FA16344CD151384D850B83ECE5E9ABE4AC62861DBA0DC3D3410955611D94665B60E2FAA0C3D7A3D7C88404
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx..u.]....{.s..{F..!N..K...B...EZ...B...w..!..Ml2...G...3.IF....o.Cg2..}...Yk=[.x.].p.X........... ........;..-.lN..R.H..I..!.@).u.:..>...M...Rx.{8...0.4t.r...2]Q..\6]5.=.@Y.]..............f].g.Wz..Z..E.>-..8.... !.B$.VIA..+....a)..-v........I..xSk..C..z..g.s'.f.I..t.N..R.u... -K.n.E.ve.;m..7....i.#.....&.._A......f_.]....."n..!..zbn.N>..S..o^...p...'..<...+.....(...b@#.h`...}.1}\.s.}....=.O...K....7..9...m.....d.. $.....).....%I.9....B.........._K....P`.7..~=...l.....y..2.(.J..8.+YW.....}.T..wJ.t~9...w...........N...>...dTA.....DL.g=p..}6..6oZ.....w..-8k...8.+....a[p..3y.. ;x.57;.^tT.. .(........v.....u.1#.<..x..`.....&....&{...o.....J[...kJ.i.B...U.H.:.^x....!.~c.J..6.n..~M.\|...........l.l..@H..J.r....).....&..(.....>^n?...(......U..F...'Vn?.;.[....[........../.^~...T.9zx.w\|R...>*.......B.]w..5bk:B%...RC....W..h.!J.%`U..0.....3a2.nvg.].....+....>..b..x.`T..{\i..n..._](L.Y.]....p.cG

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 62, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11986
Entropy (8bit):	7.97046683795637
Encrypted:	false
SSDEEP:	192:I5LI+PsFBftNrVD9PoG2K3Ctppo0XBM2/7viTpQTqqK9QS+nkN/udfiHNNWMupTD:A075tXZPoLftU0CYKTpQNKmxYoiHNAeE
MD5:	8D9A0FB373DED6577BE98A953BFC1EF0
SHA1:	54A2D50FE3B8FA5E286AA398785E17214E0CC44C
SHA-256:	35F59BF8C17973197E38D214EF27E2A090055D2223954391BBC3CFF31ED67C8A
SHA-512:	E1627BE0B553D42B75CA08C170686FEBA079810621BFFBADA2828CC83DA7D2C67906CD8D2C63DF85806DA8E7492D26643F345C231DA2B2F4F4503D7A27DEEEA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...>.......&Q....sRGB....... .IDATx^.}..]U..Z..2..L.I..$....$..P.....^..."...\..GDAE.\..xA..BB..P. ....I/..d2......o.f..9..}.!..~.y.3........a4\|...'c.0B. .r..n<.%_."..?.>.E..EU....Rk..=....2>..uv.2.de...B.~.\&[X^..$.........:..>.......x%.;..0`eb...;>.:.....9<....N-..nW..+.;...j....Br.t5..J.i.AB\I.#...$DCG.A...Ez....oJP..%"...<.._....^.....T..=.m.`.Tp...rQ.......YV.Bz.6#-...F..).zN.HX..{M..y..V..s6=.....r.[bp.\|d.IL..aAEZ....7oc..6.-a......7.!.BG.M...%..O....<.T.l..!..K...VlF..o.r.. !."..E.P-..w...7.p.....8...6..0`y.....\}..,.(..(.j..t.a,$.H`B.f.BGVO@(\7,e......F/.AX.'a!BL,*b.q.Mf......@....%[.1a..r.......C..K..M,....f........n.zz.s...Y.C..6............J....Nn0.^..........}..p.G.....W.....>F.......7..G.....RL.hv.\|...C.X}.@X.-z.a,...XD..y.h.....O.v.&&..a.:......`..".72Pq.>...Z..=.a...=.>..\|v..^NPO.>Go.$.V.T..Y...I.XFV....._D....n......l.....E.WQ..< .O....P.....P5.....w..N.a.K..+X...HXI......q....._....$.a.Jw7.E...`.w..G.t..J...x....aI...=..

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (964)
Category:	downloaded
Size (bytes):	17554
Entropy (8bit):	5.075902715060184
Encrypted:	false
SSDEEP:	192:kE0zjo0KA2zDGmsuDGU4GduAB2KIagdIVpqSf5NxbTAAYcIsd4OSSRJbBDgFvnbH:krzcZA2fMU2KIPWUhcz/SSDbtu/lF
MD5:	4883A6BF4F72AD76038984DEFAE73529
SHA1:	344ED5D12EE34357CA9193DD91F93457FA577489
SHA-256:	C275FF24DEF12AFCB516BB8CC78CA0DA6B8311BBB4EB41FD1FE48BC1C49809FE
SHA-512:	149E16981D70C2E29EF2C20BAC854437F39D81A939142E529B2CC89D5F8CD90AF420BD7A84666CE6E2FE4C2891BF2BB1800F34A56C891D2483059CC932B14E11
Malicious:	false
Reputation:	low
URL:	https://secure.actblue.com/
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">. <head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>. <link href='https://fonts.googleapis.com/css?family=Montserrat:600,700' rel='stylesheet' type='text/css'>..<link href="https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css" rel="stylesheet">.. <title>ActBlue — Billions raised online since 2004</title>. <meta name="viewport" content="width=device-width, initial-scale=1.0"/>.<link rel='canonical' href='https://secure.actblue.com/'>.<meta name="msapplication-config" content="none">.<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-T8S2L7B');.</sc

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15521), with no line terminators
Category:	downloaded
Size (bytes):	15521
Entropy (8bit):	5.012863695997015
Encrypted:	false
SSDEEP:	192:xtLsVmeDXD2ZnvgZenzA5KdXSMpNO96hDIzL79V1QVSD1CNxn6fR31MueVkw:izDSnvuenzA0NBhDInSwh31iD
MD5:	7BF3EFD430A9A0592C41552968D38FF7
SHA1:	2E85EA74DC08DFABB4855E4A087535A335B442F2
SHA-256:	3D2C10CF69410C10177FC6E56937D05151B182841FA6AEE36F651D587D91FBB8
SHA-512:	D14D336CFF98CC43764F6CE40F772D565E00E22B2B6DAFC23C1D0BB4D816AE8ED44D6A350AB0D9174342A1214E59D22F85ACD03CF82836EDC18634943AAC5123
Malicious:	false
Reputation:	low
URL:	https://democrats.org/_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobWhqZGpiaGQMARLwu4g==
Preview:	.mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial,serif;position:relative;text-align:left;text-indent:0;vertical-align:top}.mejs-container,.mejs-container *{box-sizing:border-box}.mejs-container video::-webkit-media-controls,.mejs-container video::-webkit-media-controls-panel,.mejs-container video::-webkit-media-controls-panel-container,.mejs-container video::-webkit-media-controls-start-playback-button{-webkit-appearance:none;display:none!important}.mejs-fill-container,.mejs-fill-container .mejs-container{height:100%;width:100%}.mejs-fill-container{background:0 0;margin:0 auto;overflow:hidden;position:relative}.mejs-container:focus{outline:none}.mejs-iframe-overlay{height:100%;position:absolute;width:100%}.mejs-embed,.mejs-embed body{background:#000;height:100%;margin:0;overflow:hid

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10181), with no line terminators
Category:	downloaded
Size (bytes):	10181
Entropy (8bit):	5.0048379992882195
Encrypted:	false
SSDEEP:	96:YywlywnywVY2YCY+WyFnVY1cbfE89fj0FE/kBtbeJf8XNp/G2W9p7OUG7/OSSt:8WyFVE+fngFak/beJf8XNp/gO/bSt
MD5:	7AE62BFDBC276D6353FA956DF1267B50
SHA1:	C0AED366ED3241D45A0CF6B2019833637C417BB4
SHA-256:	C419168A94FC1A1E16C2C0AC0FFDCEB3D186261C02966C65B712CA565763C4BC
SHA-512:	967F9345CF6BCEFB6CCD669170AF18F3C32380580C15E71C003D75350C0CB08FE7432E4A277CF69D300E31DA82EB2772B215B5794DEA44964E7025A5F5E92757
Malicious:	false
Reputation:	low
URL:	https://media.imi.chat/widget/css/dropzone.css
Preview:	@-webkit-keyframes passing-through{0%{opacity:0;-webkit-transform:translateY(40px);-moz-transform:translateY(40px);-ms-transform:translateY(40px);-o-transform:translateY(40px);transform:translateY(40px)}30%,70%{opacity:1;-webkit-transform:translateY(0);-moz-transform:translateY(0);-ms-transform:translateY(0);-o-transform:translateY(0);transform:translateY(0)}100%{opacity:0;-webkit-transform:translateY(-40px);-moz-transform:translateY(-40px);-ms-transform:translateY(-40px);-o-transform:translateY(-40px);transform:translateY(-40px)}}@-moz-keyframes passing-through{0%{opacity:0;-webkit-transform:translateY(40px);-moz-transform:translateY(40px);-ms-transform:translateY(40px);-o-transform:translateY(40px);transform:translateY(40px)}30%,70%{opacity:1;-webkit-transform:translateY(0);-moz-transform:translateY(0);-ms-transform:translateY(0);-o-transform:translateY(0);transform:translateY(0)}100%{opacity:0;-webkit-transform:translateY(-40px);-moz-transform:translateY(-40px);-ms-transform:transla

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, description=Photo by Adam Schultz / Biden for President, manufacturer=SONY, model=ILCE-9, xresolution=216, yresolution=224, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 9.1 (Macintosh), datetime=2020:03:13 17:25:17], baseline, precision 8, 6000x4000, components 3
Category:	dropped
Size (bytes):	2255269
Entropy (8bit):	7.839056416374827
Encrypted:	false
SSDEEP:	24576:Vlxk0OXvTeWf/I1Wksk8C7IpsLRV8fgWIz7WeaFecKj4OXDhv7JGczkTtJ0Rjdnq:vkfHPkl8C7qst6HpOZ7Rzet2zRq
MD5:	7131FD7A1C4054E73EFE0EE5A8E04593
SHA1:	A7A5E3A91D3D0627516B79A4225E39593BB60CF8
SHA-256:	2700F76C350268AF0AAF58F6F4A6CA95D5588F7356250C70E68A5D3F629CC5B9
SHA-512:	020EC58F100943D71489EDB82748FA13E9B863694EF4A31DB2A3626E9CC156624C4367F95A60162A3418991B80C9B67C4D888A1245D58F9947DE32DCFD5CD07E
Malicious:	false
Reputation:	low
Preview:	.....4Exif..II*...........,.......................................................(...........1...2.......2...........;...................<...i.......J...%...............Photo by Adam Schultz / Biden for President.SONY..ILCE-9..,.......,.......Adobe Photoshop Lightroom Classic 9.1 (Macintosh).2020:03:13 17:25:17.Adam Schultz..Adam Schultz..'.........$...........,..."...........'...........0...........2...................0231........4...........H...........\...........d...........l...........t...........\|...........................................................................................................................................................................................................................................................................1...........2...........4.......................#.......2020:03:09 19:06:46.2020:03:09 19:06:46.-04:00..-05:00..-05:00...t.@B............................................I.......I.............03385705..........^.............

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 09:22:51.560739994 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 09:22:59.672224998 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:22:59.672280073 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:22:59.672354937 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:22:59.672570944 CEST	49736	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:22:59.672579050 CEST	443	49736	18.66.102.66	192.168.2.4
Jul 3, 2024 09:22:59.672637939 CEST	49736	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:22:59.672811985 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:22:59.672826052 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:22:59.672950029 CEST	49736	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:22:59.672960043 CEST	443	49736	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.590780020 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.590801954 CEST	443	49736	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.591315985 CEST	49736	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.591341019 CEST	443	49736	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.591357946 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.591366053 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.592382908 CEST	443	49736	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.592389107 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.592452049 CEST	49736	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.593508959 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.593601942 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.593667984 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.593792915 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.593926907 CEST	49736	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.593985081 CEST	443	49736	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.636547089 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.639192104 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.639192104 CEST	49736	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.639215946 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.639230967 CEST	443	49736	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:00.687401056 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:00.687401056 CEST	49736	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:01.009222031 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:01.009488106 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:01.009543896 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:01.009871960 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:01.009871960 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:01.009887934 CEST	443	49735	18.66.102.66	192.168.2.4
Jul 3, 2024 09:23:01.009936094 CEST	49735	443	192.168.2.4	18.66.102.66
Jul 3, 2024 09:23:01.030530930 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.030565977 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.030647039 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.030865908 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.030880928 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.172097921 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 09:23:01.608247995 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.611361980 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.611381054 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.612865925 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.612946033 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.614372015 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.614449024 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.614703894 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.614710093 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.655276060 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.730839014 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.731007099 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.731061935 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.731067896 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.731081009 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.731184006 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.731228113 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.731235027 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.731276989 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.731381893 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.738214016 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.738270044 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.738272905 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.738281965 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.738318920 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.738352060 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.738423109 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.738465071 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.738471031 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.792253971 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.821506023 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.821770906 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.821810007 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.821839094 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.821849108 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.821881056 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.821995974 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.822002888 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.822042942 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.822491884 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.822578907 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.822621107 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.822624922 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.823389053 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.823435068 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.823438883 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.823482037 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.823525906 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.823535919 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.832655907 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.832710981 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.832736969 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.832742929 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.832788944 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.832792044 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.832803965 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.832839012 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.832847118 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.832947969 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.832989931 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.832994938 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.833039045 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.833081961 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.833086014 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.833143950 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.833188057 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.833197117 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.833203077 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.833242893 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.838859081 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.838901997 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.838968992 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.839476109 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.839494944 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.912851095 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.912971020 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913016081 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913026094 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.913033962 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913084984 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.913089037 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913142920 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913187981 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.913192987 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913235903 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913274050 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.913280964 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913311958 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.913364887 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.913846970 CEST	49739	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.913856983 CEST	443	49739	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.919703007 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.919717073 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.919786930 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.920170069 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.920185089 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.920979023 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.920988083 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:01.921047926 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.921433926 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:01.921446085 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.325331926 CEST	49743	443	192.168.2.4	142.250.186.68
Jul 3, 2024 09:23:02.325371027 CEST	443	49743	142.250.186.68	192.168.2.4
Jul 3, 2024 09:23:02.325458050 CEST	49743	443	192.168.2.4	142.250.186.68
Jul 3, 2024 09:23:02.325978994 CEST	49743	443	192.168.2.4	142.250.186.68
Jul 3, 2024 09:23:02.326018095 CEST	443	49743	142.250.186.68	192.168.2.4
Jul 3, 2024 09:23:02.396259069 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.396698952 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.396713972 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.397090912 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.397603035 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.397664070 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.398060083 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.444499016 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.478238106 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.478485107 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.478503942 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.479571104 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.479631901 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.480767965 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.480833054 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.480994940 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.481003046 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.481210947 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.481693983 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.481704950 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.482175112 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.483144045 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.483218908 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.483320951 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.512655973 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.512782097 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.512821913 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.512824059 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.512836933 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.512873888 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.512881041 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.512931108 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.512969017 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.512978077 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.520261049 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.520313025 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.520322084 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.520916939 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.520958900 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.520972013 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.520979881 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.521015882 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.521020889 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.524502993 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.525459051 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.561069012 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.593425035 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.593755960 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.593792915 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.593813896 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.593822956 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.593861103 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.593868971 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.594357014 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.594389915 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.594399929 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.594407082 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.594441891 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.594988108 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.598480940 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.598510981 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.598522902 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.598530054 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.598566055 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.601591110 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.601670027 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.601716042 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.601716042 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.601728916 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.601767063 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.601775885 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.601803064 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.601845026 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.602797031 CEST	49740	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.602811098 CEST	443	49740	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.604068041 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.604182005 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.604227066 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.604235888 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.604294062 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.604341984 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.604342937 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.604357004 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.604398012 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.604408979 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.607434988 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.608355045 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.608401060 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.608406067 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.608457088 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.608501911 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.608505964 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.608783960 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.608827114 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.608830929 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.652988911 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.653070927 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.681324959 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.681405067 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.681442022 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.681452990 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.681462049 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.681497097 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.681504011 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.681540012 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.681581020 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.681587934 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.682120085 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.682161093 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.682168007 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.682218075 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.682255983 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.682260990 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.682312012 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.682357073 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.692987919 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.693177938 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.693236113 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.693240881 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.693339109 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.693378925 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.693383932 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.693497896 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.693552017 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.693556070 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.697268963 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.697315931 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.697335005 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.697341919 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.697360992 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.697397947 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.697422028 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.697619915 CEST	49742	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.697628975 CEST	443	49742	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.763475895 CEST	49744	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.763506889 CEST	443	49744	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.763562918 CEST	49744	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.763819933 CEST	49744	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.763832092 CEST	443	49744	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.781713009 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.781765938 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.781795025 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.781800985 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.781832933 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.781851053 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.783267021 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.783298969 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.783329010 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.783334970 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.783371925 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.784423113 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.784444094 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.784497023 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.784501076 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.784569979 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.786807060 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.786848068 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.786883116 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.786886930 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.786931038 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.786946058 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.795933962 CEST	49745	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.795978069 CEST	443	49745	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.796039104 CEST	49745	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.797441006 CEST	49745	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.797454119 CEST	443	49745	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.870234013 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.870275974 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.870354891 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.870381117 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.870395899 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.870424032 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.870930910 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.870953083 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.870987892 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.870992899 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.871047974 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.871387959 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.871409893 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.871443033 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.871448040 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.871473074 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.871483088 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.871839046 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.871879101 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.871922970 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.871927977 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.871954918 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.871974945 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.875123978 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.875144958 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.875226021 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.875231981 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.875459909 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.875869989 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.875890970 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.875942945 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.875947952 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.875983000 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.876002073 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.918467999 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.918488979 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.918534040 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.918541908 CEST	443	49741	151.101.0.174	192.168.2.4
Jul 3, 2024 09:23:02.918577909 CEST	49741	443	192.168.2.4	151.101.0.174
Jul 3, 2024 09:23:02.918596983 CEST	49741	443	192.168.2.4	151.101.0.174

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 09:22:59.613230944 CEST	192.168.2.4	1.1.1.1	0x4898	Standard query (0)	bfptxt.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:22:59.613502026 CEST	192.168.2.4	1.1.1.1	0x3850	Standard query (0)	bfptxt.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:01.012352943 CEST	192.168.2.4	1.1.1.1	0x7cc8	Standard query (0)	secure.actblue.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:01.012509108 CEST	192.168.2.4	1.1.1.1	0x8bd6	Standard query (0)	secure.actblue.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:02.294254065 CEST	192.168.2.4	1.1.1.1	0xd70b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:02.295001030 CEST	192.168.2.4	1.1.1.1	0x4c01	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:02.762528896 CEST	192.168.2.4	1.1.1.1	0xb104	Standard query (0)	proxy-service.actblue.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:02.762667894 CEST	192.168.2.4	1.1.1.1	0x91e2	Standard query (0)	proxy-service.actblue.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:04.375730991 CEST	192.168.2.4	1.1.1.1	0x687	Standard query (0)	sessions.bugsnag.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:04.377801895 CEST	192.168.2.4	1.1.1.1	0x833a	Standard query (0)	sessions.bugsnag.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:06.267759085 CEST	192.168.2.4	1.1.1.1	0x5815	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.267971992 CEST	192.168.2.4	1.1.1.1	0xf52a	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:06.268665075 CEST	192.168.2.4	1.1.1.1	0xfca8	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.268790960 CEST	192.168.2.4	1.1.1.1	0x8a2f	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:06.269239902 CEST	192.168.2.4	1.1.1.1	0x1bbf	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.269978046 CEST	192.168.2.4	1.1.1.1	0x9817	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Jul 3, 2024 09:23:06.283427000 CEST	192.168.2.4	1.1.1.1	0x3a73	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.283562899 CEST	192.168.2.4	1.1.1.1	0x5779	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:06.660608053 CEST	192.168.2.4	1.1.1.1	0x87f7	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.660820961 CEST	192.168.2.4	1.1.1.1	0x50c3	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:06.974575043 CEST	192.168.2.4	1.1.1.1	0x3da4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.974886894 CEST	192.168.2.4	1.1.1.1	0x925e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:06.975295067 CEST	192.168.2.4	1.1.1.1	0xef23	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.975467920 CEST	192.168.2.4	1.1.1.1	0xe013	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:07.181155920 CEST	192.168.2.4	1.1.1.1	0xb1b4	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.181293964 CEST	192.168.2.4	1.1.1.1	0xf53	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:07.384193897 CEST	192.168.2.4	1.1.1.1	0x7851	Standard query (0)	secure.actblue.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.384645939 CEST	192.168.2.4	1.1.1.1	0x64d7	Standard query (0)	secure.actblue.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:07.680747986 CEST	192.168.2.4	1.1.1.1	0xbff1	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.680960894 CEST	192.168.2.4	1.1.1.1	0x2371	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:07.681765079 CEST	192.168.2.4	1.1.1.1	0xf3af	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.682013988 CEST	192.168.2.4	1.1.1.1	0xc390	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:07.726387024 CEST	192.168.2.4	1.1.1.1	0x448d	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.726761103 CEST	192.168.2.4	1.1.1.1	0x6c65	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:07.785085917 CEST	192.168.2.4	1.1.1.1	0xfc83	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.785234928 CEST	192.168.2.4	1.1.1.1	0xc603	Standard query (0)	google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:08.027159929 CEST	192.168.2.4	1.1.1.1	0x4dd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:08.027360916 CEST	192.168.2.4	1.1.1.1	0xbc47	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:08.149632931 CEST	192.168.2.4	1.1.1.1	0xb86c	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:08.149832964 CEST	192.168.2.4	1.1.1.1	0xe9cd	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.487863064 CEST	192.168.2.4	1.1.1.1	0xc43e	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.488329887 CEST	192.168.2.4	1.1.1.1	0xf5ff	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.489649057 CEST	192.168.2.4	1.1.1.1	0x22bc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.490014076 CEST	192.168.2.4	1.1.1.1	0x8016	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.511940956 CEST	192.168.2.4	1.1.1.1	0xda4f	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.512089014 CEST	192.168.2.4	1.1.1.1	0xa99d	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.520153999 CEST	192.168.2.4	1.1.1.1	0xb82b	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.520625114 CEST	192.168.2.4	1.1.1.1	0x2a8d	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.531205893 CEST	192.168.2.4	1.1.1.1	0xf5bd	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.531567097 CEST	192.168.2.4	1.1.1.1	0xe280	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.668488979 CEST	192.168.2.4	1.1.1.1	0xaa7c	Standard query (0)	www.paypalobjects.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.669173956 CEST	192.168.2.4	1.1.1.1	0xdd55	Standard query (0)	www.paypalobjects.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.697644949 CEST	192.168.2.4	1.1.1.1	0x4981	Standard query (0)	pay.sandbox.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.698016882 CEST	192.168.2.4	1.1.1.1	0x745a	Standard query (0)	pay.sandbox.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.912671089 CEST	192.168.2.4	1.1.1.1	0x9b34	Standard query (0)	t.paypal.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.913053989 CEST	192.168.2.4	1.1.1.1	0x2dab	Standard query (0)	t.paypal.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.933851957 CEST	192.168.2.4	1.1.1.1	0x53bf	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.934102058 CEST	192.168.2.4	1.1.1.1	0xa4bb	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:09.980767012 CEST	192.168.2.4	1.1.1.1	0xa4c6	Standard query (0)	proxy-service.actblue.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.981453896 CEST	192.168.2.4	1.1.1.1	0xb4bc	Standard query (0)	proxy-service.actblue.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:10.218406916 CEST	192.168.2.4	1.1.1.1	0x756b	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.218553066 CEST	192.168.2.4	1.1.1.1	0xc31a	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:10.410890102 CEST	192.168.2.4	1.1.1.1	0x8c05	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.411134005 CEST	192.168.2.4	1.1.1.1	0x3c68	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:10.426074028 CEST	192.168.2.4	1.1.1.1	0x2fa3	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.426209927 CEST	192.168.2.4	1.1.1.1	0xe664	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:11.192071915 CEST	192.168.2.4	1.1.1.1	0x8b44	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:11.192512035 CEST	192.168.2.4	1.1.1.1	0x1ff8	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:11.979264021 CEST	192.168.2.4	1.1.1.1	0xf857	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:11.979531050 CEST	192.168.2.4	1.1.1.1	0xbe2e	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:12.311887026 CEST	192.168.2.4	1.1.1.1	0x39e0	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.312052011 CEST	192.168.2.4	1.1.1.1	0xfb25	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:12.469887018 CEST	192.168.2.4	1.1.1.1	0xeeef	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.470206022 CEST	192.168.2.4	1.1.1.1	0xdc10	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:13.696489096 CEST	192.168.2.4	1.1.1.1	0x4a3c	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:13.696739912 CEST	192.168.2.4	1.1.1.1	0x1f12	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:14.260862112 CEST	192.168.2.4	1.1.1.1	0x1eeb	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:14.261059999 CEST	192.168.2.4	1.1.1.1	0xcbfc	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:14.979491949 CEST	192.168.2.4	1.1.1.1	0xd0f1	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:14.979662895 CEST	192.168.2.4	1.1.1.1	0xa4c7	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:16.225083113 CEST	192.168.2.4	1.1.1.1	0x3cd8	Standard query (0)	cdn.sift.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:16.225245953 CEST	192.168.2.4	1.1.1.1	0xa547	Standard query (0)	cdn.sift.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:16.239583015 CEST	192.168.2.4	1.1.1.1	0x5f03	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:16.239583015 CEST	192.168.2.4	1.1.1.1	0xcbf3	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:16.978724003 CEST	192.168.2.4	1.1.1.1	0xee9b	Standard query (0)	hexagon-analytics.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:16.978862047 CEST	192.168.2.4	1.1.1.1	0x6a0b	Standard query (0)	hexagon-analytics.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:17.673321009 CEST	192.168.2.4	1.1.1.1	0x2cc0	Standard query (0)	hexagon-analytics.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:17.673615932 CEST	192.168.2.4	1.1.1.1	0x4fa2	Standard query (0)	hexagon-analytics.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:17.862591028 CEST	192.168.2.4	1.1.1.1	0x9240	Standard query (0)	hexagon-analytics.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:17.862783909 CEST	192.168.2.4	1.1.1.1	0xc022	Standard query (0)	hexagon-analytics.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:18.910960913 CEST	192.168.2.4	1.1.1.1	0x49da	Standard query (0)	democrats.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:18.911130905 CEST	192.168.2.4	1.1.1.1	0x4142	Standard query (0)	democrats.org	65	IN (0x0001)	false
Jul 3, 2024 09:23:20.189956903 CEST	192.168.2.4	1.1.1.1	0xf48f	Standard query (0)	actionnetwork.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:20.190474033 CEST	192.168.2.4	1.1.1.1	0xeb73	Standard query (0)	actionnetwork.org	65	IN (0x0001)	false
Jul 3, 2024 09:23:20.196404934 CEST	192.168.2.4	1.1.1.1	0xe47b	Standard query (0)	stats.wp.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:20.197257996 CEST	192.168.2.4	1.1.1.1	0x26a9	Standard query (0)	stats.wp.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:22.573821068 CEST	192.168.2.4	1.1.1.1	0x7c1	Standard query (0)	actionnetwork.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:22.574295998 CEST	192.168.2.4	1.1.1.1	0x9848	Standard query (0)	actionnetwork.org	65	IN (0x0001)	false
Jul 3, 2024 09:23:24.957638025 CEST	192.168.2.4	1.1.1.1	0x63c5	Standard query (0)	actionnetwork.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:24.957897902 CEST	192.168.2.4	1.1.1.1	0x515d	Standard query (0)	actionnetwork.org	65	IN (0x0001)	false
Jul 3, 2024 09:23:25.356055975 CEST	192.168.2.4	1.1.1.1	0x9cb1	Standard query (0)	democrats.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.356323004 CEST	192.168.2.4	1.1.1.1	0x14d5	Standard query (0)	democrats.org	65	IN (0x0001)	false
Jul 3, 2024 09:23:25.663784027 CEST	192.168.2.4	1.1.1.1	0xbbab	Standard query (0)	can2-prod.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.664171934 CEST	192.168.2.4	1.1.1.1	0x9d66	Standard query (0)	can2-prod.s3.amazonaws.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:26.443365097 CEST	192.168.2.4	1.1.1.1	0xef	Standard query (0)	can2-prod.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:26.443365097 CEST	192.168.2.4	1.1.1.1	0x4d5f	Standard query (0)	can2-prod.s3.amazonaws.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:27.220463037 CEST	192.168.2.4	1.1.1.1	0xae87	Standard query (0)	web.joebiden.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:27.220963955 CEST	192.168.2.4	1.1.1.1	0xdd4	Standard query (0)	web.joebiden.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:29.391103983 CEST	192.168.2.4	1.1.1.1	0x3c81	Standard query (0)	joebiden.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:29.391262054 CEST	192.168.2.4	1.1.1.1	0xf72b	Standard query (0)	joebiden.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:31.011190891 CEST	192.168.2.4	1.1.1.1	0xf1af	Standard query (0)	joebiden.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:31.011668921 CEST	192.168.2.4	1.1.1.1	0x5a2d	Standard query (0)	joebiden.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:31.787642002 CEST	192.168.2.4	1.1.1.1	0xd4af	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:31.787926912 CEST	192.168.2.4	1.1.1.1	0x26f3	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:33.787395000 CEST	192.168.2.4	1.1.1.1	0x6c21	Standard query (0)	ws.pusherapp.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.787619114 CEST	192.168.2.4	1.1.1.1	0xdf0b	Standard query (0)	ws.pusherapp.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:36.808811903 CEST	192.168.2.4	1.1.1.1	0x6dd7	Standard query (0)	sockjs.pusher.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:36.809346914 CEST	192.168.2.4	1.1.1.1	0x867f	Standard query (0)	sockjs.pusher.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:38.381571054 CEST	192.168.2.4	1.1.1.1	0x6c19	Standard query (0)	stats.pusher.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:38.381759882 CEST	192.168.2.4	1.1.1.1	0xb140	Standard query (0)	stats.pusher.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:51.714009047 CEST	192.168.2.4	1.1.1.1	0x6cb2	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:51.714163065 CEST	192.168.2.4	1.1.1.1	0x2e5	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:51.714795113 CEST	192.168.2.4	1.1.1.1	0x681e	Standard query (0)	cloud.typography.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:51.714912891 CEST	192.168.2.4	1.1.1.1	0xaf26	Standard query (0)	cloud.typography.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:52.877146006 CEST	192.168.2.4	1.1.1.1	0x1747	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:52.877460957 CEST	192.168.2.4	1.1.1.1	0x348e	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:53.909363985 CEST	192.168.2.4	1.1.1.1	0xbdd3	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:53.909501076 CEST	192.168.2.4	1.1.1.1	0xe572	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:53.955866098 CEST	192.168.2.4	1.1.1.1	0x667c	Standard query (0)	media.imi.chat	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:53.955866098 CEST	192.168.2.4	1.1.1.1	0x5b81	Standard query (0)	media.imi.chat	65	IN (0x0001)	false
Jul 3, 2024 09:23:53.957050085 CEST	192.168.2.4	1.1.1.1	0x2e87	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:53.957345009 CEST	192.168.2.4	1.1.1.1	0x227d	Standard query (0)	pixel.wp.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:54.573616028 CEST	192.168.2.4	1.1.1.1	0xa6bb	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:54.573970079 CEST	192.168.2.4	1.1.1.1	0xe414	Standard query (0)	pixel.wp.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:54.921343088 CEST	192.168.2.4	1.1.1.1	0x6c1c	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:54.921555042 CEST	192.168.2.4	1.1.1.1	0xa71	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:54.922317982 CEST	192.168.2.4	1.1.1.1	0xe9da	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:54.922688961 CEST	192.168.2.4	1.1.1.1	0xd520	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:54.932127953 CEST	192.168.2.4	1.1.1.1	0xe225	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:54.932378054 CEST	192.168.2.4	1.1.1.1	0xe518	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:55.200022936 CEST	192.168.2.4	1.1.1.1	0x4d83	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.200328112 CEST	192.168.2.4	1.1.1.1	0x475d	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 3, 2024 09:23:55.200448036 CEST	192.168.2.4	1.1.1.1	0xc427	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.200988054 CEST	192.168.2.4	1.1.1.1	0x72d0	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 09:23:55.216911077 CEST	192.168.2.4	1.1.1.1	0x6b17	Standard query (0)	media.imi.chat	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.217056990 CEST	192.168.2.4	1.1.1.1	0x70cb	Standard query (0)	media.imi.chat	65	IN (0x0001)	false
Jul 3, 2024 09:23:56.476880074 CEST	192.168.2.4	1.1.1.1	0x95d9	Standard query (0)	media.imi.chat	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:56.478661060 CEST	192.168.2.4	1.1.1.1	0x1216	Standard query (0)	media.imi.chat	65	IN (0x0001)	false
Jul 3, 2024 09:23:57.547383070 CEST	192.168.2.4	1.1.1.1	0xaca7	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:57.547560930 CEST	192.168.2.4	1.1.1.1	0xef8d	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Jul 3, 2024 09:24:03.491177082 CEST	192.168.2.4	1.1.1.1	0x8ec5	Standard query (0)	chat-widget.imi.chat	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:03.491379023 CEST	192.168.2.4	1.1.1.1	0x66cf	Standard query (0)	chat-widget.imi.chat	65	IN (0x0001)	false
Jul 3, 2024 09:24:05.373423100 CEST	192.168.2.4	1.1.1.1	0x65a3	Standard query (0)	chat-widget.imi.chat	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:05.376388073 CEST	192.168.2.4	1.1.1.1	0xb924	Standard query (0)	chat-widget.imi.chat	65	IN (0x0001)	false
Jul 3, 2024 09:24:07.701383114 CEST	192.168.2.4	1.1.1.1	0xcccd	Standard query (0)	imichat-preprod-app-share.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.701538086 CEST	192.168.2.4	1.1.1.1	0xb642	Standard query (0)	imichat-preprod-app-share.s3.amazonaws.com	65	IN (0x0001)	false
Jul 3, 2024 09:24:09.259645939 CEST	192.168.2.4	1.1.1.1	0x8e5	Standard query (0)	imichat-preprod-app-share.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.260454893 CEST	192.168.2.4	1.1.1.1	0xbb1f	Standard query (0)	imichat-preprod-app-share.s3.amazonaws.com	65	IN (0x0001)	false
Jul 3, 2024 09:24:12.734853983 CEST	192.168.2.4	1.1.1.1	0x60cc	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:12.734972954 CEST	192.168.2.4	1.1.1.1	0x4fb5	Standard query (0)	www.paypal.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 09:22:59.668020964 CEST	1.1.1.1	192.168.2.4	0x4898	No error (0)	bfptxt.com		18.66.102.66	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:22:59.668020964 CEST	1.1.1.1	192.168.2.4	0x4898	No error (0)	bfptxt.com		18.66.102.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:22:59.668020964 CEST	1.1.1.1	192.168.2.4	0x4898	No error (0)	bfptxt.com		18.66.102.128	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:22:59.668020964 CEST	1.1.1.1	192.168.2.4	0x4898	No error (0)	bfptxt.com		18.66.102.109	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:01.021485090 CEST	1.1.1.1	192.168.2.4	0x7cc8	No error (0)	secure.actblue.com	actblue.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:01.021485090 CEST	1.1.1.1	192.168.2.4	0x7cc8	No error (0)	actblue.map.fastly.net		151.101.0.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:01.021485090 CEST	1.1.1.1	192.168.2.4	0x7cc8	No error (0)	actblue.map.fastly.net		151.101.64.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:01.021485090 CEST	1.1.1.1	192.168.2.4	0x7cc8	No error (0)	actblue.map.fastly.net		151.101.128.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:01.021485090 CEST	1.1.1.1	192.168.2.4	0x7cc8	No error (0)	actblue.map.fastly.net		151.101.192.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:01.038944960 CEST	1.1.1.1	192.168.2.4	0x8bd6	No error (0)	secure.actblue.com	actblue.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:02.301301003 CEST	1.1.1.1	192.168.2.4	0xd70b	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:02.302907944 CEST	1.1.1.1	192.168.2.4	0x4c01	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 09:23:02.789124012 CEST	1.1.1.1	192.168.2.4	0xb104	No error (0)	proxy-service.actblue.com	actblue.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:02.789124012 CEST	1.1.1.1	192.168.2.4	0xb104	No error (0)	actblue.map.fastly.net		151.101.0.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:02.789124012 CEST	1.1.1.1	192.168.2.4	0xb104	No error (0)	actblue.map.fastly.net		151.101.64.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:02.789124012 CEST	1.1.1.1	192.168.2.4	0xb104	No error (0)	actblue.map.fastly.net		151.101.128.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:02.789124012 CEST	1.1.1.1	192.168.2.4	0xb104	No error (0)	actblue.map.fastly.net		151.101.192.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:02.790252924 CEST	1.1.1.1	192.168.2.4	0x91e2	No error (0)	proxy-service.actblue.com	actblue.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:04.382735014 CEST	1.1.1.1	192.168.2.4	0x687	No error (0)	sessions.bugsnag.com		35.190.88.7	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.274776936 CEST	1.1.1.1	192.168.2.4	0x5815	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:06.274776936 CEST	1.1.1.1	192.168.2.4	0x5815	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:06.274776936 CEST	1.1.1.1	192.168.2.4	0x5815	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.274776936 CEST	1.1.1.1	192.168.2.4	0x5815	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.274776936 CEST	1.1.1.1	192.168.2.4	0x5815	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.274776936 CEST	1.1.1.1	192.168.2.4	0x5815	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.274910927 CEST	1.1.1.1	192.168.2.4	0xf52a	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:06.274910927 CEST	1.1.1.1	192.168.2.4	0xf52a	No error (0)	www.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:06.275506973 CEST	1.1.1.1	192.168.2.4	0xfca8	No error (0)	pay.google.com		173.194.76.92	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.276360989 CEST	1.1.1.1	192.168.2.4	0x1bbf	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.276360989 CEST	1.1.1.1	192.168.2.4	0x1bbf	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.276360989 CEST	1.1.1.1	192.168.2.4	0x1bbf	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.276360989 CEST	1.1.1.1	192.168.2.4	0x1bbf	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.290690899 CEST	1.1.1.1	192.168.2.4	0x3a73	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:06.290690899 CEST	1.1.1.1	192.168.2.4	0x3a73	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.293591022 CEST	1.1.1.1	192.168.2.4	0x5779	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:06.667850971 CEST	1.1.1.1	192.168.2.4	0x87f7	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:06.667850971 CEST	1.1.1.1	192.168.2.4	0x87f7	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.667850971 CEST	1.1.1.1	192.168.2.4	0x87f7	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.667866945 CEST	1.1.1.1	192.168.2.4	0x50c3	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:06.981868029 CEST	1.1.1.1	192.168.2.4	0x3da4	No error (0)	googleads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:06.982144117 CEST	1.1.1.1	192.168.2.4	0x925e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 09:23:06.982264996 CEST	1.1.1.1	192.168.2.4	0xef23	No error (0)	td.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.189987898 CEST	1.1.1.1	192.168.2.4	0xb1b4	No error (0)	cm.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.403501034 CEST	1.1.1.1	192.168.2.4	0x7851	No error (0)	secure.actblue.com	actblue.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.403501034 CEST	1.1.1.1	192.168.2.4	0x7851	No error (0)	actblue.map.fastly.net		151.101.0.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.403501034 CEST	1.1.1.1	192.168.2.4	0x7851	No error (0)	actblue.map.fastly.net		151.101.64.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.403501034 CEST	1.1.1.1	192.168.2.4	0x7851	No error (0)	actblue.map.fastly.net		151.101.128.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.403501034 CEST	1.1.1.1	192.168.2.4	0x7851	No error (0)	actblue.map.fastly.net		151.101.192.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.412870884 CEST	1.1.1.1	192.168.2.4	0x64d7	No error (0)	secure.actblue.com	actblue.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690278053 CEST	1.1.1.1	192.168.2.4	0xf3af	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690278053 CEST	1.1.1.1	192.168.2.4	0xf3af	No error (0)	ppo.glb.paypal.com	paypal.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690278053 CEST	1.1.1.1	192.168.2.4	0xf3af	No error (0)	paypal.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690278053 CEST	1.1.1.1	192.168.2.4	0xf3af	No error (0)	paypal.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690278053 CEST	1.1.1.1	192.168.2.4	0xf3af	No error (0)	paypal.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690278053 CEST	1.1.1.1	192.168.2.4	0xf3af	No error (0)	paypal.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690310955 CEST	1.1.1.1	192.168.2.4	0x2371	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690310955 CEST	1.1.1.1	192.168.2.4	0x2371	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690320969 CEST	1.1.1.1	192.168.2.4	0xc390	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690320969 CEST	1.1.1.1	192.168.2.4	0xc390	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690361977 CEST	1.1.1.1	192.168.2.4	0xbff1	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690361977 CEST	1.1.1.1	192.168.2.4	0xbff1	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690361977 CEST	1.1.1.1	192.168.2.4	0xbff1	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690361977 CEST	1.1.1.1	192.168.2.4	0xbff1	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690361977 CEST	1.1.1.1	192.168.2.4	0xbff1	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.690361977 CEST	1.1.1.1	192.168.2.4	0xbff1	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.735328913 CEST	1.1.1.1	192.168.2.4	0x448d	No error (0)	pay.google.com		66.102.1.92	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:07.792088032 CEST	1.1.1.1	192.168.2.4	0xc603	No error (0)	google.com			65	IN (0x0001)	false
Jul 3, 2024 09:23:07.792187929 CEST	1.1.1.1	192.168.2.4	0xfc83	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:08.034142971 CEST	1.1.1.1	192.168.2.4	0x4dd	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:08.034493923 CEST	1.1.1.1	192.168.2.4	0xbc47	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 09:23:08.156512976 CEST	1.1.1.1	192.168.2.4	0xb86c	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:08.156512976 CEST	1.1.1.1	192.168.2.4	0xb86c	No error (0)	t.glb.paypal.com	paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:08.156512976 CEST	1.1.1.1	192.168.2.4	0xb86c	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:08.156512976 CEST	1.1.1.1	192.168.2.4	0xb86c	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:08.156512976 CEST	1.1.1.1	192.168.2.4	0xb86c	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:08.156512976 CEST	1.1.1.1	192.168.2.4	0xb86c	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:08.156553984 CEST	1.1.1.1	192.168.2.4	0xe9cd	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:08.156553984 CEST	1.1.1.1	192.168.2.4	0xe9cd	No error (0)	t.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.494963884 CEST	1.1.1.1	192.168.2.4	0xf5ff	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.494963884 CEST	1.1.1.1	192.168.2.4	0xf5ff	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.495582104 CEST	1.1.1.1	192.168.2.4	0xc43e	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.495582104 CEST	1.1.1.1	192.168.2.4	0xc43e	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.495582104 CEST	1.1.1.1	192.168.2.4	0xc43e	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.496787071 CEST	1.1.1.1	192.168.2.4	0x22bc	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.497598886 CEST	1.1.1.1	192.168.2.4	0x8016	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 09:23:09.519047976 CEST	1.1.1.1	192.168.2.4	0xda4f	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.519047976 CEST	1.1.1.1	192.168.2.4	0xda4f	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.519047976 CEST	1.1.1.1	192.168.2.4	0xda4f	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.519047976 CEST	1.1.1.1	192.168.2.4	0xda4f	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.527035952 CEST	1.1.1.1	192.168.2.4	0xb82b	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.527035952 CEST	1.1.1.1	192.168.2.4	0xb82b	No error (0)	spdc-global.pbp.gysm.yahoodns.net		3.255.41.64	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.527035952 CEST	1.1.1.1	192.168.2.4	0xb82b	No error (0)	spdc-global.pbp.gysm.yahoodns.net		34.252.40.201	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.528800011 CEST	1.1.1.1	192.168.2.4	0x2a8d	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.538572073 CEST	1.1.1.1	192.168.2.4	0xe280	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.539015055 CEST	1.1.1.1	192.168.2.4	0xf5bd	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.539015055 CEST	1.1.1.1	192.168.2.4	0xf5bd	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.539015055 CEST	1.1.1.1	192.168.2.4	0xf5bd	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.675199032 CEST	1.1.1.1	192.168.2.4	0xaa7c	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.675199032 CEST	1.1.1.1	192.168.2.4	0xaa7c	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.675199032 CEST	1.1.1.1	192.168.2.4	0xaa7c	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.678900003 CEST	1.1.1.1	192.168.2.4	0xdd55	No error (0)	www.paypalobjects.com	ppo.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.678900003 CEST	1.1.1.1	192.168.2.4	0xdd55	No error (0)	ppo.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.705360889 CEST	1.1.1.1	192.168.2.4	0x4981	No error (0)	pay.sandbox.google.com		66.102.1.81	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.919563055 CEST	1.1.1.1	192.168.2.4	0x9b34	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.919563055 CEST	1.1.1.1	192.168.2.4	0x9b34	No error (0)	t.glb.paypal.com	paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.919563055 CEST	1.1.1.1	192.168.2.4	0x9b34	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.129.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.919563055 CEST	1.1.1.1	192.168.2.4	0x9b34	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.65.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.919563055 CEST	1.1.1.1	192.168.2.4	0x9b34	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.1.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.919563055 CEST	1.1.1.1	192.168.2.4	0x9b34	No error (0)	paypal-dynamic-2.map.fastly.net		151.101.193.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.920806885 CEST	1.1.1.1	192.168.2.4	0x2dab	No error (0)	t.paypal.com	t.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.920806885 CEST	1.1.1.1	192.168.2.4	0x2dab	No error (0)	t.glb.paypal.com	paypal-dynamic-2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.940527916 CEST	1.1.1.1	192.168.2.4	0x53bf	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:09.940527916 CEST	1.1.1.1	192.168.2.4	0x53bf	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:09.940989971 CEST	1.1.1.1	192.168.2.4	0xa4bb	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:10.008405924 CEST	1.1.1.1	192.168.2.4	0xa4c6	No error (0)	proxy-service.actblue.com	actblue.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:10.008405924 CEST	1.1.1.1	192.168.2.4	0xa4c6	No error (0)	actblue.map.fastly.net		151.101.0.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.008405924 CEST	1.1.1.1	192.168.2.4	0xa4c6	No error (0)	actblue.map.fastly.net		151.101.64.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.008405924 CEST	1.1.1.1	192.168.2.4	0xa4c6	No error (0)	actblue.map.fastly.net		151.101.128.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.008405924 CEST	1.1.1.1	192.168.2.4	0xa4c6	No error (0)	actblue.map.fastly.net		151.101.192.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.008630037 CEST	1.1.1.1	192.168.2.4	0xb4bc	No error (0)	proxy-service.actblue.com	actblue.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:10.225245953 CEST	1.1.1.1	192.168.2.4	0xc31a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:10.225367069 CEST	1.1.1.1	192.168.2.4	0x756b	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:10.418591022 CEST	1.1.1.1	192.168.2.4	0x8c05	No error (0)	pay.google.com		173.194.76.92	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.432977915 CEST	1.1.1.1	192.168.2.4	0x2fa3	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:10.432977915 CEST	1.1.1.1	192.168.2.4	0x2fa3	No error (0)	spdc-global.pbp.gysm.yahoodns.net		34.252.40.201	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.432977915 CEST	1.1.1.1	192.168.2.4	0x2fa3	No error (0)	spdc-global.pbp.gysm.yahoodns.net		3.255.41.64	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:10.433128119 CEST	1.1.1.1	192.168.2.4	0xe664	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:11.310008049 CEST	1.1.1.1	192.168.2.4	0x1ff8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:11.310240984 CEST	1.1.1.1	192.168.2.4	0x8b44	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:11.310240984 CEST	1.1.1.1	192.168.2.4	0x8b44	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:11.986808062 CEST	1.1.1.1	192.168.2.4	0xf857	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:11.986808062 CEST	1.1.1.1	192.168.2.4	0xf857	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:11.986808062 CEST	1.1.1.1	192.168.2.4	0xf857	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:11.986808062 CEST	1.1.1.1	192.168.2.4	0xf857	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:11.986808062 CEST	1.1.1.1	192.168.2.4	0xf857	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:11.986808062 CEST	1.1.1.1	192.168.2.4	0xf857	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:11.988797903 CEST	1.1.1.1	192.168.2.4	0xbe2e	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:11.988797903 CEST	1.1.1.1	192.168.2.4	0xbe2e	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:12.319047928 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:12.319047928 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.319047928 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.319047928 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.319047928 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.319047928 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.319047928 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.319047928 CEST	1.1.1.1	192.168.2.4	0x39e0	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:12.479589939 CEST	1.1.1.1	192.168.2.4	0xeeef	No error (0)	play.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:13.704674959 CEST	1.1.1.1	192.168.2.4	0x4a3c	No error (0)	pay.google.com		66.102.1.92	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:14.268043041 CEST	1.1.1.1	192.168.2.4	0x1eeb	No error (0)	play.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:14.986785889 CEST	1.1.1.1	192.168.2.4	0xa4c7	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jul 3, 2024 09:23:14.986799002 CEST	1.1.1.1	192.168.2.4	0xd0f1	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:14.986799002 CEST	1.1.1.1	192.168.2.4	0xd0f1	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:15.170455933 CEST	1.1.1.1	192.168.2.4	0x5c7a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:15.170455933 CEST	1.1.1.1	192.168.2.4	0x5c7a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:16.232814074 CEST	1.1.1.1	192.168.2.4	0xa547	No error (0)	cdn.sift.com	cdn.prod.gcp.sift.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:16.232903004 CEST	1.1.1.1	192.168.2.4	0x3cd8	No error (0)	cdn.sift.com	cdn.prod.gcp.sift.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:16.232903004 CEST	1.1.1.1	192.168.2.4	0x3cd8	No error (0)	cdn.prod.gcp.sift.com		34.96.67.224	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:16.246510983 CEST	1.1.1.1	192.168.2.4	0x5f03	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:16.246510983 CEST	1.1.1.1	192.168.2.4	0x5f03	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:16.247311115 CEST	1.1.1.1	192.168.2.4	0xcbf3	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jul 3, 2024 09:23:16.987579107 CEST	1.1.1.1	192.168.2.4	0xee9b	No error (0)	hexagon-analytics.com		34.102.232.42	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:17.942565918 CEST	1.1.1.1	192.168.2.4	0x2cc0	No error (0)	hexagon-analytics.com		34.102.232.42	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:17.943984985 CEST	1.1.1.1	192.168.2.4	0x9240	No error (0)	hexagon-analytics.com		34.102.232.42	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:18.931971073 CEST	1.1.1.1	192.168.2.4	0x49da	No error (0)	democrats.org		192.0.66.105	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:20.197302103 CEST	1.1.1.1	192.168.2.4	0xf48f	No error (0)	actionnetwork.org		104.22.6.107	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:20.197302103 CEST	1.1.1.1	192.168.2.4	0xf48f	No error (0)	actionnetwork.org		172.67.7.122	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:20.197302103 CEST	1.1.1.1	192.168.2.4	0xf48f	No error (0)	actionnetwork.org		104.22.7.107	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:20.200128078 CEST	1.1.1.1	192.168.2.4	0xeb73	No error (0)	actionnetwork.org			65	IN (0x0001)	false
Jul 3, 2024 09:23:20.203408957 CEST	1.1.1.1	192.168.2.4	0xe47b	No error (0)	stats.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:22.583740950 CEST	1.1.1.1	192.168.2.4	0x7c1	No error (0)	actionnetwork.org		172.67.7.122	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:22.583740950 CEST	1.1.1.1	192.168.2.4	0x7c1	No error (0)	actionnetwork.org		104.22.7.107	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:22.583740950 CEST	1.1.1.1	192.168.2.4	0x7c1	No error (0)	actionnetwork.org		104.22.6.107	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:22.585920095 CEST	1.1.1.1	192.168.2.4	0x9848	No error (0)	actionnetwork.org			65	IN (0x0001)	false
Jul 3, 2024 09:23:24.965763092 CEST	1.1.1.1	192.168.2.4	0x63c5	No error (0)	actionnetwork.org		172.67.7.122	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:24.965763092 CEST	1.1.1.1	192.168.2.4	0x63c5	No error (0)	actionnetwork.org		104.22.7.107	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:24.965763092 CEST	1.1.1.1	192.168.2.4	0x63c5	No error (0)	actionnetwork.org		104.22.6.107	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:24.968729973 CEST	1.1.1.1	192.168.2.4	0x515d	No error (0)	actionnetwork.org			65	IN (0x0001)	false
Jul 3, 2024 09:23:25.378984928 CEST	1.1.1.1	192.168.2.4	0x9cb1	No error (0)	democrats.org		192.0.66.105	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	can2-prod.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.226.97	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.212.209	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.115.241	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.201.137	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.29.169	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.168.49	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.37.33	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.685647964 CEST	1.1.1.1	192.168.2.4	0xbbab	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.2.81	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:25.686151981 CEST	1.1.1.1	192.168.2.4	0x9d66	No error (0)	can2-prod.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:25.686151981 CEST	1.1.1.1	192.168.2.4	0x9d66	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:26.464001894 CEST	1.1.1.1	192.168.2.4	0x4d5f	No error (0)	can2-prod.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:26.464001894 CEST	1.1.1.1	192.168.2.4	0x4d5f	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	can2-prod.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.228.161	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.16.11	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.15.12	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.103.105	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.27.245	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.86.203	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.250.108	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:26.465436935 CEST	1.1.1.1	192.168.2.4	0xef	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.40.161	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:27.248209000 CEST	1.1.1.1	192.168.2.4	0xdd4	No error (0)	web.joebiden.com	actionnetwork.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:27.248209000 CEST	1.1.1.1	192.168.2.4	0xdd4	No error (0)	actionnetwork.org			65	IN (0x0001)	false
Jul 3, 2024 09:23:27.255820990 CEST	1.1.1.1	192.168.2.4	0xae87	No error (0)	web.joebiden.com	actionnetwork.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:27.255820990 CEST	1.1.1.1	192.168.2.4	0xae87	No error (0)	actionnetwork.org		104.22.6.107	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:27.255820990 CEST	1.1.1.1	192.168.2.4	0xae87	No error (0)	actionnetwork.org		104.22.7.107	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:27.255820990 CEST	1.1.1.1	192.168.2.4	0xae87	No error (0)	actionnetwork.org		172.67.7.122	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:29.417424917 CEST	1.1.1.1	192.168.2.4	0x3c81	No error (0)	joebiden.com		192.0.66.60	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:31.028922081 CEST	1.1.1.1	192.168.2.4	0xf1af	No error (0)	joebiden.com		192.0.66.60	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:31.797055006 CEST	1.1.1.1	192.168.2.4	0xd4af	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:31.797055006 CEST	1.1.1.1	192.168.2.4	0xd4af	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:31.797065020 CEST	1.1.1.1	192.168.2.4	0x26f3	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	ws.pusherapp.com	ws-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	ws-mt1.pusher.com	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		54.243.166.126	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		44.220.127.67	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		44.205.42.17	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		3.221.180.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		23.21.60.56	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		34.233.2.51	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		44.220.113.60	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.795701027 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		44.221.138.152	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:33.836146116 CEST	1.1.1.1	192.168.2.4	0xdf0b	No error (0)	ws.pusherapp.com	ws-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:33.836146116 CEST	1.1.1.1	192.168.2.4	0xdf0b	No error (0)	ws-mt1.pusher.com	socket-mt1-ingress-1987402783.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:36.816205025 CEST	1.1.1.1	192.168.2.4	0x867f	No error (0)	sockjs.pusher.com	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:36.816577911 CEST	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	sockjs.pusher.com	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:36.816577911 CEST	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		44.217.82.191	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:36.816577911 CEST	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		52.55.106.120	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:36.816577911 CEST	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ingress-sticky-haproxy-mt1-912d8b7308f82d6c.elb.us-east-1.amazonaws.com		34.201.239.212	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:38.388883114 CEST	1.1.1.1	192.168.2.4	0x6c19	No error (0)	stats.pusher.com	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:38.388883114 CEST	1.1.1.1	192.168.2.4	0x6c19	No error (0)	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		34.193.138.130	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:38.388883114 CEST	1.1.1.1	192.168.2.4	0x6c19	No error (0)	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		44.194.116.116	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:38.389834881 CEST	1.1.1.1	192.168.2.4	0xb140	No error (0)	stats.pusher.com	clientstats1-dummy-server-lb-398743415.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:47.499360085 CEST	1.1.1.1	192.168.2.4	0x5236	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:47.499360085 CEST	1.1.1.1	192.168.2.4	0x5236	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:51.720977068 CEST	1.1.1.1	192.168.2.4	0x2e5	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:51.721729040 CEST	1.1.1.1	192.168.2.4	0x6cb2	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:51.722472906 CEST	1.1.1.1	192.168.2.4	0xaf26	No error (0)	cloud.typography.com	wildcard.typography.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:51.724149942 CEST	1.1.1.1	192.168.2.4	0x681e	No error (0)	cloud.typography.com	wildcard.typography.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:52.884383917 CEST	1.1.1.1	192.168.2.4	0x1747	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:52.884852886 CEST	1.1.1.1	192.168.2.4	0x348e	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:53.916290998 CEST	1.1.1.1	192.168.2.4	0xbdd3	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:53.916290998 CEST	1.1.1.1	192.168.2.4	0xbdd3	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:53.924427986 CEST	1.1.1.1	192.168.2.4	0xe572	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:53.963036060 CEST	1.1.1.1	192.168.2.4	0x5b81	No error (0)	media.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:53.964101076 CEST	1.1.1.1	192.168.2.4	0x2e87	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:54.011291981 CEST	1.1.1.1	192.168.2.4	0x667c	No error (0)	media.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:54.011291981 CEST	1.1.1.1	192.168.2.4	0x667c	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		52.43.94.187	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:54.011291981 CEST	1.1.1.1	192.168.2.4	0x667c	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		35.160.4.12	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:54.580322027 CEST	1.1.1.1	192.168.2.4	0xa6bb	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.202408075 CEST	1.1.1.1	192.168.2.4	0xa71	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:55.202790976 CEST	1.1.1.1	192.168.2.4	0xe9da	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.202790976 CEST	1.1.1.1	192.168.2.4	0xe9da	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.202790976 CEST	1.1.1.1	192.168.2.4	0xe9da	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.202790976 CEST	1.1.1.1	192.168.2.4	0xe9da	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.202917099 CEST	1.1.1.1	192.168.2.4	0xe225	No error (0)	td.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.203144073 CEST	1.1.1.1	192.168.2.4	0x6c1c	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:55.203144073 CEST	1.1.1.1	192.168.2.4	0x6c1c	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.203144073 CEST	1.1.1.1	192.168.2.4	0x6c1c	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.203144073 CEST	1.1.1.1	192.168.2.4	0x6c1c	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.203144073 CEST	1.1.1.1	192.168.2.4	0x6c1c	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207509041 CEST	1.1.1.1	192.168.2.4	0x4d83	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207509041 CEST	1.1.1.1	192.168.2.4	0x4d83	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207509041 CEST	1.1.1.1	192.168.2.4	0x4d83	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207509041 CEST	1.1.1.1	192.168.2.4	0x4d83	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207509041 CEST	1.1.1.1	192.168.2.4	0x4d83	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207604885 CEST	1.1.1.1	192.168.2.4	0xc427	No error (0)	stats.g.doubleclick.net		74.125.206.156	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207604885 CEST	1.1.1.1	192.168.2.4	0xc427	No error (0)	stats.g.doubleclick.net		74.125.206.155	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207604885 CEST	1.1.1.1	192.168.2.4	0xc427	No error (0)	stats.g.doubleclick.net		74.125.206.154	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207604885 CEST	1.1.1.1	192.168.2.4	0xc427	No error (0)	stats.g.doubleclick.net		74.125.206.157	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.207640886 CEST	1.1.1.1	192.168.2.4	0x475d	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:55.455636024 CEST	1.1.1.1	192.168.2.4	0x70cb	No error (0)	media.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:55.465468884 CEST	1.1.1.1	192.168.2.4	0x6b17	No error (0)	media.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:55.465468884 CEST	1.1.1.1	192.168.2.4	0x6b17	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		35.160.4.12	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:55.465468884 CEST	1.1.1.1	192.168.2.4	0x6b17	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		52.43.94.187	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:56.507436991 CEST	1.1.1.1	192.168.2.4	0x95d9	No error (0)	media.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:56.507436991 CEST	1.1.1.1	192.168.2.4	0x95d9	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		35.160.4.12	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:56.507436991 CEST	1.1.1.1	192.168.2.4	0x95d9	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		52.43.94.187	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:56.508292913 CEST	1.1.1.1	192.168.2.4	0x1216	No error (0)	media.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:57.554742098 CEST	1.1.1.1	192.168.2.4	0xaca7	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:23:57.554742098 CEST	1.1.1.1	192.168.2.4	0xaca7	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:23:57.554997921 CEST	1.1.1.1	192.168.2.4	0xef8d	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:03.499164104 CEST	1.1.1.1	192.168.2.4	0x8ec5	No error (0)	chat-widget.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:03.499164104 CEST	1.1.1.1	192.168.2.4	0x8ec5	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		35.160.4.12	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:03.499164104 CEST	1.1.1.1	192.168.2.4	0x8ec5	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		52.43.94.187	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:03.529203892 CEST	1.1.1.1	192.168.2.4	0x66cf	No error (0)	chat-widget.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:05.384085894 CEST	1.1.1.1	192.168.2.4	0xb924	No error (0)	chat-widget.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:05.393129110 CEST	1.1.1.1	192.168.2.4	0x65a3	No error (0)	chat-widget.imi.chat	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:05.393129110 CEST	1.1.1.1	192.168.2.4	0x65a3	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		35.160.4.12	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:05.393129110 CEST	1.1.1.1	192.168.2.4	0x65a3	No error (0)	fe-imi-chat-1381938630.us-west-2.elb.amazonaws.com		52.43.94.187	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	imichat-preprod-app-share.s3.amazonaws.com	s3-us-west-2-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	s3-us-west-2-w.amazonaws.com		52.218.225.155	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.132.161	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	s3-us-west-2-w.amazonaws.com		52.218.180.139	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.130.65	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.224.161	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.243.25	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	s3-us-west-2-w.amazonaws.com		52.218.251.3	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.721316099 CEST	1.1.1.1	192.168.2.4	0xcccd	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.242.105	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:07.731687069 CEST	1.1.1.1	192.168.2.4	0xb642	No error (0)	imichat-preprod-app-share.s3.amazonaws.com	s3-us-west-2-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:08.049324989 CEST	1.1.1.1	192.168.2.4	0x107f	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:08.049324989 CEST	1.1.1.1	192.168.2.4	0x107f	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	imichat-preprod-app-share.s3.amazonaws.com	s3-us-west-2-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	s3-us-west-2-w.amazonaws.com		52.218.233.51	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.155.129	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.187.169	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.196.89	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	s3-us-west-2-w.amazonaws.com		52.218.178.91	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.129.49	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.229.241	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.269643068 CEST	1.1.1.1	192.168.2.4	0x8e5	No error (0)	s3-us-west-2-w.amazonaws.com		52.92.138.225	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:09.277828932 CEST	1.1.1.1	192.168.2.4	0xbb1f	No error (0)	imichat-preprod-app-share.s3.amazonaws.com	s3-us-west-2-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:12.742592096 CEST	1.1.1.1	192.168.2.4	0x60cc	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:12.742592096 CEST	1.1.1.1	192.168.2.4	0x60cc	No error (0)	www.glb.paypal.com	cs1150.wpc.betacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:12.742592096 CEST	1.1.1.1	192.168.2.4	0x60cc	No error (0)	cs1150.wpc.betacdn.net		192.229.221.25	A (IP address)	IN (0x0001)	false
Jul 3, 2024 09:24:12.743657112 CEST	1.1.1.1	192.168.2.4	0x4fb5	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 09:24:12.743657112 CEST	1.1.1.1	192.168.2.4	0x4fb5	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	18.66.102.66	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:00 UTC	659	OUT	GET /5wKgd5 HTTP/1.1 Host: bfptxt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:01 UTC	418	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Wed, 03 Jul 2024 07:23:00 GMT Location: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 X-Cache: Miss from cloudfront Via: 1.1 f4137273db9ae377298b8f8daf5b93f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: fIcdFSLwFVJBfmo1jm2miL81O2s07Iq6pF1Dk-ux6m4cPZr0vx8XWA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:01 UTC	714	OUT	GET /donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 HTTP/1.1 Host: secure.actblue.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:01 UTC	1120	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61892 Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1719959003&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=YgjmMMmdtG6mEQOKT2xkckAQolMfVdlB4JxIND8Vu78%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1719959003&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=YgjmMMmdtG6mEQOKT2xkckAQolMfVdlB4JxIND8Vu78%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Content-Security-Policy: frame-ancestors 'none'; report-uri /system/csp_reports Content-Type: text/html; charset=utf-8 Etag: W/"f1c4-N1LrzBFzI3xYotQg3wW9JFFMcOo" X-Form-App: kittens! [Server: node: us] X-Frame-Options: sameorigin Via: 1.1 vegur, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 32378 Date: Wed, 03 Jul 2024 07:23:01 GMT Vary: Accept-Encoding Set-Cookie: skip_prefill_check=true; Secure X-Start: 2024-07-03 07:23:01.663 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 63 74 42 6c 75 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>ActBlue</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="width=device-width, initia
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 30 63 35 2d 39 33 36 65 66 64 37 61 30 66 30 61 2d 32 33 30 34 32 35 5f 41 42 5f 31 32 30 30 78 36 33 30 2d 36 30 33 38 33 39 33 61 2e 70 6e 67 22 0a 20 20 20 20 20 20 64 61 74 61 2d 72 65 61 63 74 2d 68 65 6c 6d 65 74 3d 22 74 72 75 65 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 44 6f 6e 61 74 65 20 74 6f 20 72 65 65 6c 65 63 74 20 4a 6f 65 20 42 69 64 65 6e 20 61 6e 64 20 4b 61 6d 61 6c 61 20 48 61 72 72 69 73 22 0a 20 20 20 20 20 20 64 61 74 61 2d 72 65 61 63 74 2d 68 65 6c 6d 65 74 3d 22 74 72 75 65 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d Data Ascii: 0c5-936efd7a0f0a-230425_AB_1200x630-6038393a.png" data-react-helmet="true" /> <meta property="og:title" content="Donate to reelect Joe Biden and Kamala Harris" data-react-helmet="true" /> <meta property="og:site_nam
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 6e 64 6f 77 2e 43 46 5f 43 4f 4e 46 49 47 20 3d 20 7b 22 65 6e 76 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 37 31 39 38 35 39 30 39 34 22 2c 22 62 61 73 65 55 52 49 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 22 2c 22 5f 64 65 70 72 65 63 61 74 65 64 5f 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 22 2c 22 72 65 67 69 6f 6e 22 3a 22 75 73 22 2c 22 67 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 22 3a 7b 22 69 64 22 3a 22 55 41 2d 31 35 39 36 39 36 2d 31 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 22 7d 2c 22 67 6f 6f 67 6c 65 43 6c 69 65 6e 74 49 64 22 3a 22 35 38 36 38 35 31 34 32 30 39 35 36 2d 38 70 37 6d 73 6c Data Ascii: ndow.CF_CONFIG = {"env":"production","version":"1719859094","baseURI":"https://secure.actblue.com","_deprecated_cookieDomain":".actblue.com","region":"us","googleAnalytics":{"id":"UA-159696-1","domain":".actblue.com"},"googleClientId":"586851420956-8p7msl
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 67 5f 64 69 73 70 6c 61 79 5f 74 79 70 65 22 3a 22 72 61 64 69 6f 22 2c 22 72 65 63 75 72 72 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 22 6d 6f 6e 74 68 6c 79 22 2c 22 72 65 63 75 72 72 69 6e 67 5f 75 70 73 65 6c 6c 5f 61 73 6b 22 3a 22 5c 75 30 30 33 43 70 5c 75 30 30 33 45 41 20 6d 6f 6e 74 68 6c 79 20 64 6f 6e 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 42 69 64 65 6e 2d 48 61 72 72 69 73 20 63 61 6d 70 61 69 67 6e 20 77 69 6c 6c 20 73 75 70 70 6f 72 74 20 73 74 72 61 74 65 67 69 63 20 69 6e 76 65 73 74 6d 65 6e 74 73 20 69 6e 20 6d 65 73 73 61 67 69 6e 67 20 61 6e 64 20 6f 72 67 61 6e 69 7a 69 6e 67 20 61 63 72 6f 73 73 20 74 68 65 20 6e 61 74 69 6f 6e 20 74 68 61 74 20 4a 6f 65 20 61 6e 64 20 4b 61 6d 61 6c 61 20 61 72 65 20 72 65 6c 79 69 6e 67 20 6f 6e Data Ascii: g_display_type":"radio","recurring_interval":"monthly","recurring_upsell_ask":"\u003Cp\u003EA monthly donation to the Biden-Harris campaign will support strategic investments in messaging and organizing across the nation that Joe and Kamala are relying on
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 73 68 6f 77 5f 74 69 70 5f 61 73 6b 3f 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 73 5f 65 6d 70 6c 6f 79 65 72 3f 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 73 5f 65 6d 70 6c 6f 79 65 72 5f 61 64 64 72 65 73 73 3f 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 73 5f 65 6c 69 67 69 62 69 6c 69 74 79 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 3f 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 73 5f 63 76 76 3f 22 3a 66 61 6c 73 65 2c 22 73 68 61 72 65 5f 63 6f 6e 74 65 6e 74 22 3a 7b 22 6d 65 74 61 5f 74 69 74 6c 65 22 3a 22 44 6f 6e 61 74 65 20 74 6f 20 72 65 65 6c 65 63 74 20 4a 6f 65 20 42 69 64 65 6e 20 61 6e 64 20 4b 61 6d 61 6c 61 20 48 61 72 72 69 73 22 2c 22 6d 65 74 61 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 69 74 63 68 20 69 6e 20 74 6f Data Ascii: show_tip_ask?":true,"requires_employer?":true,"requires_employer_address?":false,"requires_eligibility_confirmation?":false,"requires_cvv?":false,"share_content":{"meta_title":"Donate to reelect Joe Biden and Kamala Harris","meta_description":"Pitch in to
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 6f 20 6d 65 20 62 79 20 61 6e 6f 74 68 65 72 20 70 65 72 73 6f 6e 20 6f 72 20 65 6e 74 69 74 79 20 66 6f 72 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 6d 61 6b 69 6e 67 20 74 68 69 73 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 2e 22 2c 22 49 20 61 6d 20 61 74 20 6c 65 61 73 74 20 65 69 67 68 74 65 65 6e 20 79 65 61 72 73 20 6f 6c 64 2e 22 2c 22 49 20 61 6d 20 6e 6f 74 20 61 20 66 65 64 65 72 61 6c 20 63 6f 6e 74 72 61 63 74 6f 72 2e 22 2c 22 49 20 61 6d 20 6d 61 6b 69 6e 67 20 74 68 69 73 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 20 77 69 74 68 20 6d 79 20 6f 77 6e 20 70 65 72 73 6f 6e 61 6c 20 63 72 65 64 69 74 20 63 61 72 64 20 61 6e 64 20 6e 6f 74 20 77 69 74 68 20 61 20 63 6f 72 70 6f 72 61 74 65 20 6f 72 20 62 75 73 69 6e 65 73 73 20 63 72 65 64 69 74 Data Ascii: o me by another person or entity for the purpose of making this contribution.","I am at least eighteen years old.","I am not a federal contractor.","I am making this contribution with my own personal credit card and not with a corporate or business credit
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 33 45 4a 6f 65 2c 20 4b 61 6d 61 6c 61 2c 20 61 6e 64 20 44 65 6d 6f 63 72 61 74 73 20 6e 61 74 69 6f 6e 77 69 64 65 20 61 72 65 20 63 6f 75 6e 74 69 6e 67 20 6f 6e 20 67 72 61 73 73 72 6f 6f 74 73 20 73 75 70 70 6f 72 74 65 72 73 20 6c 69 6b 65 20 79 6f 75 20 74 6f 20 6a 6f 69 6e 20 75 73 20 61 6e 64 20 68 65 6c 70 20 74 68 65 6d 20 66 69 6e 69 73 68 20 74 68 65 20 6a 6f 62 2e 20 5c 75 30 30 33 43 73 74 72 6f 6e 67 5c 75 30 30 33 45 43 61 6e 20 79 6f 75 20 63 68 69 70 20 69 6e 20 62 65 66 6f 72 65 20 6f 75 72 20 4a 75 6c 79 20 66 75 6e 64 72 61 69 73 69 6e 67 20 64 65 61 64 6c 69 6e 65 3f 5c 75 30 30 33 43 5c 75 30 30 32 46 73 74 72 6f 6e 67 5c 75 30 30 33 45 5c 75 30 30 33 43 5c 75 30 30 32 46 70 5c 75 30 30 33 45 5c 75 30 30 33 43 5c 75 30 30 32 46 70 Data Ascii: 3EJoe, Kamala, and Democrats nationwide are counting on grassroots supporters like you to join us and help them finish the job. \u003Cstrong\u003ECan you chip in before our July fundraising deadline?\u003C\u002Fstrong\u003E\u003C\u002Fp\u003E\u003C\u002Fp
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 6e 64 22 2c 22 67 72 6f 75 70 69 6e 67 22 3a 22 66 65 64 65 72 61 6c 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 68 61 6e 64 6c 65 22 3a 22 22 2c 22 75 72 6c 5f 77 65 62 73 69 74 65 22 3a 6e 75 6c 6c 2c 22 74 77 69 74 74 65 72 5f 68 61 6e 64 6c 65 22 3a 22 22 2c 22 64 6f 6e 61 74 65 22 3a 74 72 75 65 2c 22 64 69 73 70 6c 61 79 5f 70 72 65 74 74 79 5f 6c 6f 63 61 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 65 6e 74 69 74 79 5f 63 6f 6e 76 65 72 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 74 68 61 6e 6b 79 6f 75 2e 6a 6f 65 62 69 64 65 6e 2e 63 6f 6d 5c 75 30 30 32 46 63 6f 6e 76 65 72 74 5c 75 30 30 32 46 70 32 70 2d 32 34 30 37 30 32 2d 6a 62 74 69 22 7d 2c 22 61 62 5f 74 65 73 74 22 3a 7b 7d 2c 22 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 Data Ascii: nd","grouping":"federal","facebook_handle":"","url_website":null,"twitter_handle":"","donate":true,"display_pretty_location":null,"entity_convert_url":"https:\u002F\u002Fthankyou.joebiden.com\u002Fconvert\u002Fp2p-240702-jbti"},"ab_test":{},"custom_fields
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 20 4e 4a 2c 20 4e 4d 2c 20 4e 56 2c 20 4e 59 2c 20 4f 48 2c 20 4f 4b 2c 20 4f 52 2c 20 50 41 2c 20 52 49 2c 20 53 43 2c 20 53 44 2c 20 54 4e 2c 20 54 58 2c 20 55 54 2c 20 56 41 2c 20 56 54 2c 20 57 41 2c 20 57 49 2c 20 57 56 2c 20 61 6e 64 20 57 59 2e 20 41 6e 79 20 61 64 64 69 74 69 6f 6e 61 6c 20 66 75 6e 64 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 44 4e 43 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 61 70 70 6c 69 63 61 62 6c 65 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 20 6c 69 6d 69 74 73 2e 20 41 20 63 6f 6e 74 72 69 62 75 74 6f 72 20 6d 61 79 20 64 65 73 69 67 6e 61 74 65 20 74 68 65 69 72 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 72 74 69 63 69 70 61 6e 74 20 Data Ascii: NJ, NM, NV, NY, OH, OK, OR, PA, RI, SC, SD, TN, TX, UT, VA, VT, WA, WI, WV, and WY. Any additional funds will be allocated to the DNC, subject to applicable contribution limits. A contributor may designate their contribution for a particular participant
2024-07-03 07:23:01 UTC	1379	IN	Data Raw: 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 5c 22 5c 75 30 30 33 45 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 5c 75 30 30 33 43 5c 75 30 30 32 46 61 5c 75 30 30 33 45 20 61 6e 64 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 6a 6f 65 62 69 64 65 6e 2e 63 6f 6d 5c 75 30 30 32 46 74 65 72 6d 73 2d 6f 66 2d 73 65 72 76 69 63 65 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 5c 22 5c 75 30 30 33 45 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 20 28 42 46 50 29 5c 75 30 30 33 43 5c 75 30 30 32 46 61 5c 75 30 30 33 45 20 61 6e 64 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 75 30 30 Data Ascii: et=\"_blank\" rel=\"noopener\"\u003EPrivacy Policy\u003C\u002Fa\u003E and \u003Ca href=\"https:\u002F\u002Fjoebiden.com\u002Fterms-of-service\" target=\"_blank\" rel=\"noopener\"\u003ETerms of Service (BFP)\u003C\u002Fa\u003E and \u003Ca href=\"https:\u00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:02 UTC	642	OUT	GET /cf/assets/app-css/6a3e1dd153d5af7e8ded.css?form_app=us HTTP/1.1 Host: secure.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:02 UTC	985	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20190 Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1719961052&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=itbBgglffqI4anprQJxuYtmsfVo1qtQiZIkscD6SCvo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1719961052&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=itbBgglffqI4anprQJxuYtmsfVo1qtQiZIkscD6SCvo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: max-age=31557600, must-revalidate Content-Type: text/css; charset=UTF-8 Etag: W/"4ede-1906f98e710" Last-Modified: Mon, 01 Jul 2024 18:40:10 GMT Via: 1.1 vegur, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 30330 Date: Wed, 03 Jul 2024 07:23:02 GMT Vary: Accept-Encoding Set-Cookie: skip_prefill_check=true; Secure X-Start: 2024-07-03 07:23:02.447 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 69 6e 70 75 74 2d 62 6c 6f 63 6b 2d 6c 65 76 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 31 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 76 69 73 75 61 6c 6c 79 2d 68 69 64 64 65 6e 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 30 20 30 20 30 20 30 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c Data Ascii: .clearfix:after,.clearfix:before{display:table;content:"";line-height:0}.clearfix:after{clear:both}.input-block-level{display:block;width:100%;min-height:31px;box-sizing:border-box}.visually-hidden{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overfl
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 74 65 72 2c 2e 72 6f 77 2d 66 6c 75 69 64 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 72 6f 77 2d 66 6c 75 69 64 20 5b 63 6c 61 73 73 2a 3d 73 70 61 6e 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 31 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 2e 31 32 37 36 35 39 35 37 34 35 25 7d 2e 72 6f 77 2d 66 6c 75 69 64 20 5b 63 6c 61 73 73 2a 3d 73 70 61 6e 5d 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 Data Ascii: ter,.row-fluid:before{display:table;content:"";line-height:0}.row-fluid:after{clear:both}.row-fluid [class=span]{display:block;width:100%;min-height:31px;box-sizing:border-box;float:left;margin-left:2.1276595745%}.row-fluid [class=span]:first-child{marg
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 63 32 33 34 35 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 62 64 66 65 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 36 65 39 65 64 2c 23 63 38 63 66 64 38 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 30 20 30 2c 30 Data Ascii: e-height:1.25;text-align:center;vertical-align:middle;cursor:pointer;color:#1c2345;text-shadow:0 1px 1px hsla(0,0%,100%,.75);background-color:#dbdfe5;background-image:-moz-linear-gradient(top,#e6e9ed,#c8cfd8);background-image:-webkit-gradient(linear,0 0,0
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 63 6c 61 73 73 5e 3d 69 63 6f 6e 2d 5d 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 70 78 7d 2e 62 74 6e 2d 6d 69 6e 69 7b 70 61 64 64 69 6e 67 3a 2e 31 32 35 72 65 6d 20 2e 37 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 38 37 35 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 7b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 2d 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 31 63 32 33 34 35 2c 23 31 63 32 33 34 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 30 20 30 2c 30 20 31 30 Data Ascii: class^=icon-]{margin-top:-1px}.btn-mini{padding:.125rem .75rem;font-size:.6875em;border-radius:0}.btn-primary{text-shadow:0 -1px 0 rgba(0,0,0,.25);background-image:-moz-linear-gradient(top,#1c2345,#1c2345);background-image:-webkit-gradient(linear,0 0,0 10
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 64 6f 77 3a 30 20 2d 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 35 30 34 62 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 35 66 35 62 2c 23 62 64 33 36 32 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 30 20 30 2c 30 20 31 30 30 25 2c 66 72 6f 6d 28 23 65 65 35 66 35 62 29 2c 74 6f 28 23 62 64 33 36 32 66 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 35 66 35 62 2c 23 62 64 33 36 32 66 29 3b 62 Data Ascii: dow:0 -1px 0 rgba(0,0,0,.25);background-color:#dc504b;background-image:-moz-linear-gradient(top,#ee5f5b,#bd362f);background-image:-webkit-gradient(linear,0 0,0 100%,from(#ee5f5b),to(#bd362f));background-image:-webkit-linear-gradient(top,#ee5f5b,#bd362f);b
2024-07-03 07:23:02 UTC	102	IN	Data Raw: 3b 6f 70 61 63 69 74 79 3a 2e 38 7d 40 6b 65 79 66 72 61 6d 65 73 20 6d 62 64 66 61 64 65 7b 30 25 7b 6f 70 61 63 69 74 79 3a 2e 32 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 7d 2e 6d 6f 64 61 6c 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 31 30 25 3b 6c 65 66 74 3a 35 30 25 3b 7a 2d 69 Data Ascii: ;opacity:.8}@keyframes mbdfade{0%{opacity:.2}to{opacity:.8}}.modal{position:fixed;top:10%;left:50%;z-i
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 6e 64 65 78 3a 31 30 35 30 3b 77 69 64 74 68 3a 35 36 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 38 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 70 78 20 36 70 78 20 72 67 62 61 28 32 38 2c 33 35 2c 36 39 2c 2e 30 38 29 2c 30 20 36 70 78 20 38 70 78 20 72 67 62 61 28 32 38 2c 33 35 2c 36 39 2c 2e 31 32 29 7d 2e 6d 6f 64 61 6c 2e 6d 66 61 64 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6d 62 64 66 61 Data Ascii: ndex:1050;width:560px;margin-left:-280px;background-color:#fff;border:1px solid #999;border:1px solid rgba(0,0,0,.3);background-clip:padding-box;outline:none;box-shadow:0 4px 6px rgba(28,35,69,.08),0 6px 8px rgba(28,35,69,.12)}.modal.mfade{animation:mbdfa
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 20 2e 62 74 6e 2b 2e 62 74 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 68 6f 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 37 39 70 78 29 7b 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 30 70 78 7d 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 Data Ascii: e;content:"";line-height:0}.modal-footer:after{clear:both}.modal-footer .btn+.btn{margin-left:5px;margin-bottom:0}.hide{display:none}.show{display:block}@media(min-width:768px)and (max-width:979px){.row{margin-left:-20px}.row:after,.row:before{display:tab
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 6e 74 61 6c 20 2e 63 6f 6e 74 72 6f 6c 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 69 73 74 2c 2e 6d 6f 64 61 6c 20 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 69 73 74 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 6d 6f 64 61 6c 7b 74 6f 70 3a 31 30 70 78 3b 6c 65 66 74 3a 31 30 70 78 3b 72 69 67 68 74 3a 31 30 70 78 7d 2e 6d 6f 64 61 6c 2d 68 65 61 64 65 72 20 2e 63 6c 6f 73 65 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 30 70 78 7d 7d 23 6a 73 2d 63 66 5f 61 73 6b 20 6c 69 2b 6c 69 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 7d 23 6a 73 2d 63 66 5f 61 73 6b 20 23 63 6f 6e 74 72 69 62 75 74 69 6f 6e Data Ascii: ntal .controls{margin-left:0}.form-horizontal .control-list,.modal .form-horizontal .control-list{padding-top:0}.modal{top:10px;left:10px;right:10px}.modal-header .close{padding:10px;margin:-10px}}#js-cf_ask li+li{margin-top:.5rem}#js-cf_ask #contribution
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 65 20 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 20 2e 63 6f 6e 74 72 6f 6c 73 20 2e 68 61 6c 66 2e 68 61 6c 66 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 25 7d 62 6f 64 79 2e 63 6f 6e 74 72 69 62 75 74 65 20 2e 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 62 6f 64 79 2e 63 6f 6e 74 72 69 62 75 74 65 20 2e 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 2c 62 6f 64 79 2e 63 6f 6e 74 72 69 62 75 74 65 20 2e 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 73 65 6c 65 63 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 62 6f 64 79 2e 63 6f 6e 74 72 69 62 75 74 65 20 2e 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 2e Data Ascii: e .control-group .controls .half.half-left{margin-right:2%}body.contribute .input-container{position:relative;float:left;width:100%}body.contribute .input-container input,body.contribute .input-container select{width:100%}body.contribute .input-container.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:02 UTC	594	OUT	GET /cf/assets/actblue.js HTTP/1.1 Host: secure.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:02 UTC	1006	IN	HTTP/1.1 200 OK Connection: close Content-Length: 31018 Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1719959140&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=7TCvsaE%2BRcq8VI240notN8uOn%2BQf3XEkFt%2F7aA2rEW0%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1719959140&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=7TCvsaE%2BRcq8VI240notN8uOn%2BQf3XEkFt%2F7aA2rEW0%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: max-age=600, must-revalidate Content-Type: application/javascript; charset=UTF-8 Etag: W/"792a-1906f976070" Last-Modified: Mon, 01 Jul 2024 18:38:30 GMT Via: 1.1 vegur, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 32242 Date: Wed, 03 Jul 2024 07:23:02 GMT Vary: Accept-Encoding Set-Cookie: skip_prefill_check=true; Secure X-Start: 2024-07-03 07:23:02.529 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=fun
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6e 3d 6e 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 6e 29 7d 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 6c 28 4f 62 6a 65 63 74 28 6f 29 2c 21 30 29 2e 66 6f 72 45 61 63 Data Ascii: .getOwnPropertySymbols(e);t&&(n=n.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),o.push.apply(o,n)}return o}function d(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{};t%2?l(Object(o),!0).forEac
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 22 2c 68 3d 65 3d 3e 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 72 65 64 75 63 65 28 28 74 2c 6f 29 3d 3e 28 65 5b 6f 5d 26 26 28 74 5b 6f 5d 3d 65 5b 6f 5d 29 2c 74 29 2c 7b 7d 29 3b 6c 65 74 20 67 3d 30 3b 63 6f 6e 73 74 20 5f 3d 28 29 3d 3e 22 41 42 22 2b 28 67 2b 3d 31 29 2c 79 3d 28 29 3d 3e 67 3d 30 2c 77 3d 65 3d 3e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 21 30 3d 3d 3d 65 3f 7b 6d 6f 63 6b 52 65 71 75 65 73 74 73 3a 21 30 7d 3a 76 6f 69 64 20 30 3a 65 2c 54 3d 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 68 28 7b 65 6d 62 65 64 49 64 3a 65 2e 5f 5f 61 62 45 6d 62 65 64 49 64 2c 68 65 69 67 68 74 3a 6e 75 6c 6c 21 3d 3d 28 74 3d 65 2e 67 Data Ascii: ="https://secure.actblue.com",h=e=>Object.keys(e).reduce((t,o)=>(e[o]&&(t[o]=e[o]),t),{});let g=0;const _=()=>"AB"+(g+=1),y=()=>g=0,w=e=>"boolean"==typeof e?!0===e?{mockRequests:!0}:void 0:e,T=e=>{var t;return h({embedId:e.__abEmbedId,height:null!==(t=e.g
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 68 72 65 66 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 61 64 64 6f 6e 73 3a 52 7d 2c 73 74 79 6c 65 3a 5f 2c 73 74 79 6c 65 53 68 65 65 74 48 72 65 66 3a 79 2c 76 65 72 62 3a 41 2c 63 6f 6c 6f 72 3a 49 2c 62 61 72 43 6f 6c 6f 72 3a 6b 2c 67 6f 61 6c 41 6d 6f 75 6e 74 3a 45 2c 67 6f 61 6c 4b 69 6e 64 3a 43 2c 73 74 72 65 74 63 68 47 6f 61 6c 73 3a 4f 2c 77 69 64 74 68 3a 53 2c 70 72 65 73 65 74 52 61 69 73 65 64 41 6d 6f 75 6e 74 3a 4c 2c 70 72 65 73 65 74 52 61 69 73 65 64 43 6f 75 6e 74 3a 78 2c 67 6f 61 6c 54 69 74 6c 65 3a 6a 2c 63 68 65 63 6b 6f 75 74 49 64 3a 48 2c 73 74 6f 72 65 48 61 73 68 3a 50 7d 3b 74 72 79 7b 76 61 72 20 24 3b 63 6f 6e 73 74 20 74 3d 22 69 66 72 61 6d 65 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f Data Ascii: href:window.location.href,addons:R},style:_,styleSheetHref:y,verb:A,color:I,barColor:k,goalAmount:E,goalKind:C,stretchGoals:O,width:S,presetRaisedAmount:L,presetRaisedCount:x,goalTitle:j,checkoutId:H,storeHash:P};try{var $;const t="iframe"===e.nodeName.to
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 72 6c 61 79 29 26 26 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2c 61 63 74 42 6c 75 65 49 6e 74 65 72 66 61 63 65 3a 61 7d 29 2e 74 68 65 6e 28 74 3d 3e 28 65 2e 5f 5f 61 62 4c 61 73 74 43 6f 6e 74 72 69 62 75 74 69 6f 6e 3d 74 2c 74 29 29 3b 69 66 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 76 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 26 26 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 70 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 29 72 65 74 75 72 6e 20 67 3b 69 66 28 65 2e 5f 5f 61 62 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 6e 2c 65 2e 5f 5f 61 62 44 6f 6e 6f 72 44 61 74 61 3d 72 2c 76 26 26 21 65 2e 5f 5f 61 62 54 69 6d 65 6f 75 74 29 72 65 74 75 72 6e 20 41 28 65 2c 61 29 2c 67 3b 63 6f 6e 73 74 20 79 3d 45 Data Ascii: rlay)&&void 0!==b&&b,actBlueInterface:a}).then(t=>(e.__abLastContribution=t,t));if(JSON.stringify(v)===JSON.stringify(n)&&JSON.stringify(p)===JSON.stringify(r))return g;if(e.__abConfiguration=n,e.__abDonorData=r,v&&!e.__abTimeout)return A(e,a),g;const y=E
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 6d 22 3a 22 67 6f 61 6c 5f 74 72 61 63 6b 65 72 22 3d 3d 3d 75 3f 22 47 6f 61 6c 20 54 72 61 63 6b 65 72 22 3a 61 28 75 29 7d 60 2c 62 3d 60 24 7b 64 6f 63 75 6d 65 6e 74 2e 68 61 73 53 74 6f 72 61 67 65 41 63 63 65 73 73 3f 22 61 6c 6c 6f 77 2d 73 74 6f 72 61 67 65 2d 61 63 63 65 73 73 2d 62 79 2d 75 73 65 72 2d 61 63 74 69 76 61 74 69 6f 6e 20 22 3a 22 22 7d 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 60 2c 6d 3d 42 6f 6f 6c 65 61 6e 28 21 6f 2e 73 61 6e 64 62 6f 78 7c 7c 6f 2e 73 61 6e 64 62 6f 78 2e 63 6f 6e 74 61 69 6e 73 26 26 62 2e 73 70 6c 69 74 28 22 20 22 29 2e 6d 61 70 28 65 3d 3e 21 6f 2e 73 61 6e 64 62 6f 78 2e 63 6f 6e Data Ascii: m":"goal_tracker"===u?"Goal Tracker":a(u)}`,b=`${document.hasStorageAccess?"allow-storage-access-by-user-activation ":""}allow-scripts allow-same-origin allow-forms allow-popups`,m=Boolean(!o.sandbox\|\|o.sandbox.contains&&b.split(" ").map(e=>!o.sandbox.con
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 62 2d 74 6f 6b 65 6e 22 29 3b 65 2e 5f 5f 61 62 45 72 72 6f 72 65 64 54 6f 6b 65 6e 3d 72 2c 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 63 28 22 65 72 72 6f 72 22 2c 7b 64 65 74 61 69 6c 3a 7b 6d 65 73 73 61 67 65 3a 6f 2c 74 61 72 67 65 74 3a 65 2c 65 6d 62 65 64 49 64 3a 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 5f 5f 61 62 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 6d 62 65 64 49 64 2c 65 72 72 6f 72 65 64 54 6f 6b 65 6e 3a 72 7d 7d 29 29 2c 22 61 63 74 62 6c 75 65 5f 6d 6f 64 61 6c 22 3d 3d 3d 65 2e 69 64 3f 50 28 74 29 3a 53 28 65 29 7d 3b 6c 65 74 20 78 3b 63 6f 6e 73 74 20 6a 3d 65 3d 3e 28 78 7c 7c 28 28 78 3d 64 Data Ascii: etAttribute("data-ab-token");e.__abErroredToken=r,t.dispatchEvent(new c("error",{detail:{message:o,target:e,embedId:null===(n=e.__abConfiguration)\|\|void 0===n?void 0:n.embedId,erroredToken:r}})),"actblue_modal"===e.id?P(t):S(e)};let x;const j=e=>(x\|\|((x=d
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 67 75 72 61 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 6d 62 65 64 49 64 7d 2c 6f 2e 5f 5f 61 62 4c 61 73 74 43 6f 6e 74 72 69 62 75 74 69 6f 6e 3f 7b 63 6f 6e 74 72 69 62 75 74 65 64 3a 21 30 2c 63 6f 6e 74 72 69 62 75 74 69 6f 6e 3a 6f 2e 5f 5f 61 62 4c 61 73 74 43 6f 6e 74 72 69 62 75 74 69 6f 6e 7d 3a 7b 63 6f 6e 74 72 69 62 75 74 65 64 3a 21 31 7d 29 7d 29 29 2c 53 28 6f 29 2c 6f 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 2c 4d 3d 65 3d 3e 65 2e 72 65 70 6c 61 63 65 28 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 2c 65 3d 3e 65 5b 31 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 Data Ascii: guration)\|\|void 0===t?void 0:t.embedId},o.__abLastContribution?{contributed:!0,contribution:o.__abLastContribution}:{contributed:!1})})),S(o),o.style.display="none",o.parentNode&&o.parentNode.removeChild(o)},M=e=>e.replace(/-([a-z])/g,e=>e[1].toUpperCase(
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 7b 65 6d 62 65 64 49 64 3a 72 2c 68 65 69 67 68 74 3a 69 2c 6c 6f 63 61 6c 65 3a 61 2c 70 72 65 66 69 6c 6c 54 6f 6b 65 6e 3a 6c 2c 70 72 65 76 69 65 77 3a 64 2c 70 75 62 6c 69 63 54 6f 6b 65 6e 3a 75 2c 72 65 66 63 6f 64 65 73 3a 63 2c 73 74 79 6c 65 53 68 65 65 74 48 72 65 66 3a 73 2c 63 68 65 63 6b 6f 75 74 49 64 3a 66 2c 73 74 6f 72 65 48 61 73 68 3a 62 7d 3d 74 3b 49 28 65 2c 22 62 69 67 63 6f 6d 6d 65 72 63 65 22 2c 75 2c 7b 65 6d 62 65 64 49 64 3a 72 2c 68 65 69 67 68 74 3a 69 2c 6c 6f 63 61 6c 65 3a 61 2c 70 72 65 66 69 6c 6c 54 6f 6b 65 6e 3a 6c 2c 70 72 65 76 69 65 77 3a 64 2c 72 65 66 63 6f 64 65 73 3a 63 2c 73 74 79 6c 65 53 68 65 65 74 48 72 65 66 3a 73 2c 63 68 65 63 6b 6f 75 74 49 64 3a 66 2c 73 74 6f 72 65 48 61 73 68 3a 62 7d 2c 6f 2c 6e Data Ascii: {embedId:r,height:i,locale:a,prefillToken:l,preview:d,publicToken:u,refcodes:c,styleSheetHref:s,checkoutId:f,storeHash:b}=t;I(e,"bigcommerce",u,{embedId:r,height:i,locale:a,prefillToken:l,preview:d,refcodes:c,styleSheetHref:s,checkoutId:f,storeHash:b},o,n
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 3a 76 6f 69 64 20 30 3b 28 28 65 2c 74 2c 6f 2c 6e 29 3d 3e 7b 6c 65 74 7b 61 6d 6f 75 6e 74 73 3a 72 2c 65 6d 62 65 64 49 64 3a 69 2c 65 78 70 72 65 73 73 3a 61 2c 6c 6f 63 61 6c 65 3a 6c 2c 70 72 65 76 69 65 77 3a 64 2c 70 75 62 6c 69 63 54 6f 6b 65 6e 3a 75 2c 72 65 63 75 72 72 69 6e 67 3a 63 2c 72 65 66 63 6f 64 65 73 3a 73 2c 73 74 79 6c 65 3a 66 2c 73 74 79 6c 65 53 68 65 65 74 48 72 65 66 3a 62 2c 76 65 72 62 3a 6d 7d 3d 74 3b 49 28 65 2c 22 62 75 74 74 6f 6e 22 2c 75 2c 7b 61 6d 6f 75 6e 74 73 3a 72 2c 65 6d 62 65 64 49 64 3a 69 2c 65 78 70 72 65 73 73 3a 61 2c 6c 6f 63 61 6c 65 3a 6c 2c 70 72 65 76 69 65 77 3a 64 2c 72 65 63 75 72 72 69 6e 67 3a 63 2c 72 65 66 63 6f 64 65 73 3a 73 2c 73 74 79 6c 65 3a 66 2c 73 74 79 6c 65 53 68 65 65 74 48 72 65 Data Ascii: :void 0;((e,t,o,n)=>{let{amounts:r,embedId:i,express:a,locale:l,preview:d,publicToken:u,recurring:c,refcodes:s,style:f,styleSheetHref:b,verb:m}=t;I(e,"button",u,{amounts:r,embedId:i,express:a,locale:l,preview:d,recurring:c,refcodes:s,style:f,styleSheetHre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:02 UTC	623	OUT	GET /cf/assets/app/6a3e1dd153d5af7e8ded.js?form_app=us HTTP/1.1 Host: secure.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:02 UTC	1003	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1825793 Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1719959146&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=g86VW7MFwfbVrqpIFAeY9LDIJHk1bAu48yjakSJa538%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1719959146&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=g86VW7MFwfbVrqpIFAeY9LDIJHk1bAu48yjakSJa538%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: max-age=31557600, must-revalidate Content-Type: application/javascript; charset=UTF-8 Etag: W/"1bdc01-1906f98e710" Last-Modified: Mon, 01 Jul 2024 18:40:10 GMT Via: 1.1 vegur, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 32236 Date: Wed, 03 Jul 2024 07:23:02 GMT Vary: Accept-Encoding Set-Cookie: skip_prefill_check=true; Secure X-Start: 2024-07-03 07:23:02.532 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 61 3d 74 5b 30 5d 2c 69 3d 74 5b 31 5d 2c 63 3d 30 2c 6c 3d 5b 5d 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6f 3d 61 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6f 29 26 26 72 5b 6f 5d 26 26 6c 2e 70 75 73 68 28 72 5b 6f 5d 5b 30 5d 29 2c 72 5b 6f 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6e 29 26 26 28 65 5b 6e 5d 3d 69 5b 6e 5d 29 3b 66 6f 72 28 73 26 26 73 28 74 29 3b 6c 2e 6c 65 6e 67 74 68 3b 29 6c 2e 73 68 69 66 74 28 29 28 29 Data Ascii: !function(e){function t(t){for(var n,o,a=t[0],i=t[1],c=0,l=[];c<a.length;c++)o=a[c],Object.prototype.hasOwnProperty.call(r,o)&&r[o]&&l.push(r[o][0]),r[o]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(s&&s(t);l.length;)l.shift()()
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 73 73 69 6e 67 22 3a 74 2e 74 79 70 65 29 2c 61 3d 74 26 26 74 2e 74 61 72 67 65 74 26 26 74 2e 74 61 72 67 65 74 2e 73 72 63 3b 73 2e 6d 65 73 73 61 67 65 3d 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 65 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 6f 2b 22 3a 20 22 2b 61 2b 22 29 22 2c 73 2e 6e 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 73 2e 74 79 70 65 3d 6f 2c 73 2e 72 65 71 75 65 73 74 3d 61 2c 6e 5b 31 5d 28 73 29 7d 72 5b 65 5d 3d 76 6f 69 64 20 30 7d 7d 3b 76 61 72 20 6c 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 63 7d 29 7d 2c 31 32 65 34 29 3b 63 2e 6f 6e 65 72 72 6f 72 3d 63 2e 6f 6e 6c 6f 61 64 3d 69 2c 64 6f 63 75 Data Ascii: ssing":t.type),a=t&&t.target&&t.target.src;s.message="Loading chunk "+e+" failed.\n("+o+": "+a+")",s.name="ChunkLoadError",s.type=o,s.request=a,n[1](s)}r[e]=void 0}};var l=setTimeout(function(){i({type:"timeout",target:c})},12e4);c.onerror=c.onload=i,docu
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 74 75 72 6e 20 42 65 7d 29 2c 6e 2e 64 28 74 2c 22 53 74 79 6c 65 53 68 65 65 74 43 6f 6e 73 75 6d 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 58 7d 29 2c 6e 2e 64 28 74 2c 22 53 74 79 6c 65 53 68 65 65 74 43 6f 6e 74 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 7d 29 2c 6e 2e 64 28 74 2c 22 53 74 79 6c 65 53 68 65 65 74 4d 61 6e 61 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 65 7d 29 2c 6e 2e 64 28 74 2c 22 54 68 65 6d 65 43 6f 6e 73 75 6d 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 65 7d 29 2c 6e 2e 64 28 74 2c 22 54 68 65 6d 65 43 6f 6e 74 65 78 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 65 7d 29 2c 6e 2e 64 28 74 2c 22 54 68 65 Data Ascii: turn Be}),n.d(t,"StyleSheetConsumer",function(){return X}),n.d(t,"StyleSheetContext",function(){return J}),n.d(t,"StyleSheetManager",function(){return oe}),n.d(t,"ThemeConsumer",function(){return Te}),n.d(t,"ThemeContext",function(){return Pe}),n.d(t,"The
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 21 3d 3d 65 26 26 28 65 2e 65 6e 76 2e 52 45 41 43 54 5f 41 50 50 5f 53 43 5f 41 54 54 52 7c 7c 65 2e 65 6e 76 2e 53 43 5f 41 54 54 52 29 7c 7c 22 64 61 74 61 2d 73 74 79 6c 65 64 22 2c 77 3d 22 35 2e 32 2e 30 22 2c 6a 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 22 48 54 4d 4c 45 6c 65 6d 65 6e 74 22 69 6e 20 77 69 6e 64 6f 77 2c 43 3d 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 53 43 5f 44 49 53 41 42 4c 45 5f 53 50 45 45 44 59 26 26 53 43 5f 44 49 53 41 42 4c 45 5f 53 50 45 45 44 59 7c 7c 76 6f 69 64 20 30 21 3d 3d 65 26 26 28 65 2e 65 6e 76 2e 52 45 41 43 54 5f 41 50 50 5f 53 43 5f 44 49 53 41 42 4c 45 5f 53 50 45 45 44 59 7c 7c 65 2e 65 6e 76 2e 53 43 5f 44 49 53 41 42 4c 45 5f 53 50 45 45 44 59 29 Data Ascii: !==e&&(e.env.REACT_APP_SC_ATTR\|\|e.env.SC_ATTR)\|\|"data-styled",w="5.2.0",j="undefined"!=typeof window&&"HTMLElement"in window,C="boolean"==typeof SC_DISABLE_SPEEDY&&SC_DISABLE_SPEEDY\|\|void 0!==e&&(e.env.REACT_APP_SC_DISABLE_SPEEDY\|\|e.env.SC_DISABLE_SPEEDY)
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 73 68 65 65 74 2e 63 73 73 52 75 6c 65 73 5b 65 5d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 63 73 73 54 65 78 74 3f 74 2e 63 73 73 54 65 78 74 3a 22 22 7d 2c 65 7d 28 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 4c 28 65 29 3b 74 68 69 73 2e 6e 6f 64 65 73 3d 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 30 7d 76 61 72 20 74 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 69 6e 73 65 72 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3c 3d 74 68 69 73 2e 6c 65 6e 67 74 68 26 26 65 3e 3d 30 29 7b 76 61 72 20 6e 3d Data Ascii: sheet.cssRules[e];return void 0!==t&&"string"==typeof t.cssText?t.cssText:""},e}(),P=function(){function e(e){var t=this.element=L(e);this.nodes=t.childNodes,this.length=0}var t=e.prototype;return t.insertRule=function(e,t){if(e<=this.length&&e>=0){var n=
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 2b 29 7d 2c 74 2e 63 6c 65 61 72 47 72 6f 75 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3c 74 68 69 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 67 72 6f 75 70 53 69 7a 65 73 5b 65 5d 2c 6e 3d 74 68 69 73 2e 69 6e 64 65 78 4f 66 47 72 6f 75 70 28 65 29 2c 72 3d 6e 2b 74 3b 74 68 69 73 2e 67 72 6f 75 70 53 69 7a 65 73 5b 65 5d 3d 30 3b 66 6f 72 28 76 61 72 20 6f 3d 6e 3b 6f 3c 72 3b 6f 2b 2b 29 74 68 69 73 2e 74 61 67 2e 64 65 6c 65 74 65 52 75 6c 65 28 6e 29 7d 7d 2c 74 2e 67 65 74 47 72 6f 75 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 65 3e 3d 74 68 69 73 2e 6c 65 6e 67 74 68 7c 7c 30 3d 3d 3d 74 68 69 73 2e 67 72 6f 75 70 53 69 7a 65 73 5b 65 5d 29 72 65 74 75 72 6e 20 74 3b 66 6f 72 28 76 Data Ascii: +)},t.clearGroup=function(e){if(e<this.length){var t=this.groupSizes[e],n=this.indexOfGroup(e),r=n+t;this.groupSizes[e]=0;for(var o=n;o<r;o++)this.tag.deleteRule(n)}},t.getGroup=function(e){var t="";if(e>=this.length\|\|0===this.groupSizes[e])return t;for(v
2024-07-03 07:23:02 UTC	674	IN	Data Raw: 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 29 7d 7d 28 74 68 69 73 29 29 7d 65 2e 72 65 67 69 73 74 65 72 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 52 28 65 29 7d 3b 76 61 72 20 74 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 72 65 63 6f 6e 73 74 72 75 63 74 57 69 74 68 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 30 29 2c 6e 65 77 20 65 28 66 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 7b 7d 2c 74 29 2c 74 68 69 73 2e 67 73 2c 6e 26 26 74 68 69 73 2e 6e 61 6d 65 73 7c 7c 76 6f 69 64 20 30 29 7d 2c 74 2e 61 6c 6c 6f 63 61 74 65 47 53 49 6e 73 74 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: .removeChild(o))}}(this))}e.registerId=function(e){return R(e)};var t=e.prototype;return t.reconstructWithOptions=function(t,n){return void 0===n&&(n=!0),new e(f({},this.options,{},t),this.gs,n&&this.names\|\|void 0)},t.allocateGSInstance=function(e){return
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 28 65 2c 74 29 2c 74 68 69 73 2e 67 65 74 54 61 67 28 29 2e 69 6e 73 65 72 74 52 75 6c 65 73 28 52 28 65 29 2c 6e 29 7d 2c 74 2e 63 6c 65 61 72 4e 61 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6e 61 6d 65 73 2e 68 61 73 28 65 29 26 26 74 68 69 73 2e 6e 61 6d 65 73 2e 67 65 74 28 65 29 2e 63 6c 65 61 72 28 29 7d 2c 74 2e 63 6c 65 61 72 52 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 67 65 74 54 61 67 28 29 2e 63 6c 65 61 72 47 72 6f 75 70 28 52 28 65 29 29 2c 74 68 69 73 2e 63 6c 65 61 72 4e 61 6d 65 73 28 65 29 7d 2c 74 2e 63 6c 65 61 72 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 61 Data Ascii: ules=function(e,t,n){this.registerName(e,t),this.getTag().insertRules(R(e),n)},t.clearNames=function(e){this.names.has(e)&&this.names.get(e).clear()},t.clearRules=function(e){this.getTag().clearGroup(R(e)),this.clearNames(e)},t.clearTag=function(){this.ta
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 61 2b 22 20 7b 20 22 2b 73 2b 22 20 7d 22 3a 73 3b 72 65 74 75 72 6e 20 74 3d 63 2c 6e 3d 61 2c 72 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 22 2b 6e 2b 22 5c 5c 62 22 2c 22 67 22 29 2c 6f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5c 5c 22 2b 6e 2b 22 5c 5c 62 29 7b 32 2c 7d 22 29 2c 64 28 69 7c 7c 21 61 3f 22 22 3a 61 2c 6c 29 7d 72 65 74 75 72 6e 20 64 2e 75 73 65 28 5b 5d 2e 63 6f 6e 63 61 74 28 75 2c 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 32 3d 3d 3d 65 26 26 6f 2e 6c 65 6e 67 74 68 26 26 6f 5b 30 5d 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 6e 29 3e 30 26 26 28 6f 5b 30 5d 3d 6f 5b 30 5d 2e 72 65 70 6c 61 63 65 28 72 2c 6d 29 29 7d 2c 66 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 2d 32 3d 3d 3d 65 29 7b 76 61 72 20 74 3d 70 3b 72 65 Data Ascii: a+" { "+s+" }":s;return t=c,n=a,r=new RegExp("\\"+n+"\\b","g"),o=new RegExp("(\\"+n+"\\b){2,}"),d(i\|\|!a?"":a,l)}return d.use([].concat(u,[function(e,t,o){2===e&&o.length&&o[0].lastIndexOf(n)>0&&(o[0]=o[0].replace(r,m))},f,function(e){if(-2===e){var t=p;re
2024-07-03 07:23:02 UTC	1379	IN	Data Raw: 29 29 7d 2c 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 28 31 32 2c 53 74 72 69 6e 67 28 6e 2e 6e 61 6d 65 29 29 7d 2c 74 68 69 73 2e 6e 61 6d 65 3d 65 2c 74 68 69 73 2e 69 64 3d 22 73 63 2d 6b 65 79 66 72 61 6d 65 73 2d 22 2b 65 2c 74 68 69 73 2e 72 75 6c 65 73 3d 74 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 74 65 29 2c 74 68 69 73 2e 6e 61 6d 65 2b 65 2e 68 61 73 68 7d 2c 65 7d 28 29 2c 69 65 3d 2f 28 5b 41 2d 5a 5d 29 2f 2c 63 65 3d 6e 65 77 20 52 65 67 45 78 70 28 69 65 2c 22 67 22 29 2c 73 65 3d 2f 5e 6d 73 2d 2f 2c 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ))},this.toString=function(){return S(12,String(n.name))},this.name=e,this.id="sc-keyframes-"+e,this.rules=t}return e.prototype.getName=function(e){return void 0===e&&(e=te),this.name+e.hash},e}(),ie=/([A-Z])/,ce=new RegExp(ie,"g"),se=/^ms-/,le=function(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:03 UTC	720	OUT	GET /donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 HTTP/1.1 Host: secure.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: skip_prefill_check=true
2024-07-03 07:23:03 UTC	1120	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61892 Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1719959003&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=YgjmMMmdtG6mEQOKT2xkckAQolMfVdlB4JxIND8Vu78%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1719959003&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=YgjmMMmdtG6mEQOKT2xkckAQolMfVdlB4JxIND8Vu78%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Content-Security-Policy: frame-ancestors 'none'; report-uri /system/csp_reports Content-Type: text/html; charset=utf-8 Etag: W/"f1c4-N1LrzBFzI3xYotQg3wW9JFFMcOo" X-Form-App: kittens! [Server: node: us] X-Frame-Options: sameorigin Via: 1.1 vegur, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:03 GMT Age: 32380 Vary: Accept-Encoding Set-Cookie: skip_prefill_check=true; Secure X-Start: 2024-07-03 07:23:03.367 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 63 74 42 6c 75 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>ActBlue</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="width=device-width, initia
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 30 63 35 2d 39 33 36 65 66 64 37 61 30 66 30 61 2d 32 33 30 34 32 35 5f 41 42 5f 31 32 30 30 78 36 33 30 2d 36 30 33 38 33 39 33 61 2e 70 6e 67 22 0a 20 20 20 20 20 20 64 61 74 61 2d 72 65 61 63 74 2d 68 65 6c 6d 65 74 3d 22 74 72 75 65 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 44 6f 6e 61 74 65 20 74 6f 20 72 65 65 6c 65 63 74 20 4a 6f 65 20 42 69 64 65 6e 20 61 6e 64 20 4b 61 6d 61 6c 61 20 48 61 72 72 69 73 22 0a 20 20 20 20 20 20 64 61 74 61 2d 72 65 61 63 74 2d 68 65 6c 6d 65 74 3d 22 74 72 75 65 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d Data Ascii: 0c5-936efd7a0f0a-230425_AB_1200x630-6038393a.png" data-react-helmet="true" /> <meta property="og:title" content="Donate to reelect Joe Biden and Kamala Harris" data-react-helmet="true" /> <meta property="og:site_nam
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 6e 64 6f 77 2e 43 46 5f 43 4f 4e 46 49 47 20 3d 20 7b 22 65 6e 76 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 37 31 39 38 35 39 30 39 34 22 2c 22 62 61 73 65 55 52 49 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 22 2c 22 5f 64 65 70 72 65 63 61 74 65 64 5f 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 22 2c 22 72 65 67 69 6f 6e 22 3a 22 75 73 22 2c 22 67 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 22 3a 7b 22 69 64 22 3a 22 55 41 2d 31 35 39 36 39 36 2d 31 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 22 7d 2c 22 67 6f 6f 67 6c 65 43 6c 69 65 6e 74 49 64 22 3a 22 35 38 36 38 35 31 34 32 30 39 35 36 2d 38 70 37 6d 73 6c Data Ascii: ndow.CF_CONFIG = {"env":"production","version":"1719859094","baseURI":"https://secure.actblue.com","_deprecated_cookieDomain":".actblue.com","region":"us","googleAnalytics":{"id":"UA-159696-1","domain":".actblue.com"},"googleClientId":"586851420956-8p7msl
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 67 5f 64 69 73 70 6c 61 79 5f 74 79 70 65 22 3a 22 72 61 64 69 6f 22 2c 22 72 65 63 75 72 72 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 22 6d 6f 6e 74 68 6c 79 22 2c 22 72 65 63 75 72 72 69 6e 67 5f 75 70 73 65 6c 6c 5f 61 73 6b 22 3a 22 5c 75 30 30 33 43 70 5c 75 30 30 33 45 41 20 6d 6f 6e 74 68 6c 79 20 64 6f 6e 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 42 69 64 65 6e 2d 48 61 72 72 69 73 20 63 61 6d 70 61 69 67 6e 20 77 69 6c 6c 20 73 75 70 70 6f 72 74 20 73 74 72 61 74 65 67 69 63 20 69 6e 76 65 73 74 6d 65 6e 74 73 20 69 6e 20 6d 65 73 73 61 67 69 6e 67 20 61 6e 64 20 6f 72 67 61 6e 69 7a 69 6e 67 20 61 63 72 6f 73 73 20 74 68 65 20 6e 61 74 69 6f 6e 20 74 68 61 74 20 4a 6f 65 20 61 6e 64 20 4b 61 6d 61 6c 61 20 61 72 65 20 72 65 6c 79 69 6e 67 20 6f 6e Data Ascii: g_display_type":"radio","recurring_interval":"monthly","recurring_upsell_ask":"\u003Cp\u003EA monthly donation to the Biden-Harris campaign will support strategic investments in messaging and organizing across the nation that Joe and Kamala are relying on
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 73 68 6f 77 5f 74 69 70 5f 61 73 6b 3f 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 73 5f 65 6d 70 6c 6f 79 65 72 3f 22 3a 74 72 75 65 2c 22 72 65 71 75 69 72 65 73 5f 65 6d 70 6c 6f 79 65 72 5f 61 64 64 72 65 73 73 3f 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 73 5f 65 6c 69 67 69 62 69 6c 69 74 79 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 3f 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 73 5f 63 76 76 3f 22 3a 66 61 6c 73 65 2c 22 73 68 61 72 65 5f 63 6f 6e 74 65 6e 74 22 3a 7b 22 6d 65 74 61 5f 74 69 74 6c 65 22 3a 22 44 6f 6e 61 74 65 20 74 6f 20 72 65 65 6c 65 63 74 20 4a 6f 65 20 42 69 64 65 6e 20 61 6e 64 20 4b 61 6d 61 6c 61 20 48 61 72 72 69 73 22 2c 22 6d 65 74 61 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 69 74 63 68 20 69 6e 20 74 6f Data Ascii: show_tip_ask?":true,"requires_employer?":true,"requires_employer_address?":false,"requires_eligibility_confirmation?":false,"requires_cvv?":false,"share_content":{"meta_title":"Donate to reelect Joe Biden and Kamala Harris","meta_description":"Pitch in to
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 6f 20 6d 65 20 62 79 20 61 6e 6f 74 68 65 72 20 70 65 72 73 6f 6e 20 6f 72 20 65 6e 74 69 74 79 20 66 6f 72 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 6d 61 6b 69 6e 67 20 74 68 69 73 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 2e 22 2c 22 49 20 61 6d 20 61 74 20 6c 65 61 73 74 20 65 69 67 68 74 65 65 6e 20 79 65 61 72 73 20 6f 6c 64 2e 22 2c 22 49 20 61 6d 20 6e 6f 74 20 61 20 66 65 64 65 72 61 6c 20 63 6f 6e 74 72 61 63 74 6f 72 2e 22 2c 22 49 20 61 6d 20 6d 61 6b 69 6e 67 20 74 68 69 73 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 20 77 69 74 68 20 6d 79 20 6f 77 6e 20 70 65 72 73 6f 6e 61 6c 20 63 72 65 64 69 74 20 63 61 72 64 20 61 6e 64 20 6e 6f 74 20 77 69 74 68 20 61 20 63 6f 72 70 6f 72 61 74 65 20 6f 72 20 62 75 73 69 6e 65 73 73 20 63 72 65 64 69 74 Data Ascii: o me by another person or entity for the purpose of making this contribution.","I am at least eighteen years old.","I am not a federal contractor.","I am making this contribution with my own personal credit card and not with a corporate or business credit
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 33 45 4a 6f 65 2c 20 4b 61 6d 61 6c 61 2c 20 61 6e 64 20 44 65 6d 6f 63 72 61 74 73 20 6e 61 74 69 6f 6e 77 69 64 65 20 61 72 65 20 63 6f 75 6e 74 69 6e 67 20 6f 6e 20 67 72 61 73 73 72 6f 6f 74 73 20 73 75 70 70 6f 72 74 65 72 73 20 6c 69 6b 65 20 79 6f 75 20 74 6f 20 6a 6f 69 6e 20 75 73 20 61 6e 64 20 68 65 6c 70 20 74 68 65 6d 20 66 69 6e 69 73 68 20 74 68 65 20 6a 6f 62 2e 20 5c 75 30 30 33 43 73 74 72 6f 6e 67 5c 75 30 30 33 45 43 61 6e 20 79 6f 75 20 63 68 69 70 20 69 6e 20 62 65 66 6f 72 65 20 6f 75 72 20 4a 75 6c 79 20 66 75 6e 64 72 61 69 73 69 6e 67 20 64 65 61 64 6c 69 6e 65 3f 5c 75 30 30 33 43 5c 75 30 30 32 46 73 74 72 6f 6e 67 5c 75 30 30 33 45 5c 75 30 30 33 43 5c 75 30 30 32 46 70 5c 75 30 30 33 45 5c 75 30 30 33 43 5c 75 30 30 32 46 70 Data Ascii: 3EJoe, Kamala, and Democrats nationwide are counting on grassroots supporters like you to join us and help them finish the job. \u003Cstrong\u003ECan you chip in before our July fundraising deadline?\u003C\u002Fstrong\u003E\u003C\u002Fp\u003E\u003C\u002Fp
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 6e 64 22 2c 22 67 72 6f 75 70 69 6e 67 22 3a 22 66 65 64 65 72 61 6c 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 68 61 6e 64 6c 65 22 3a 22 22 2c 22 75 72 6c 5f 77 65 62 73 69 74 65 22 3a 6e 75 6c 6c 2c 22 74 77 69 74 74 65 72 5f 68 61 6e 64 6c 65 22 3a 22 22 2c 22 64 6f 6e 61 74 65 22 3a 74 72 75 65 2c 22 64 69 73 70 6c 61 79 5f 70 72 65 74 74 79 5f 6c 6f 63 61 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 65 6e 74 69 74 79 5f 63 6f 6e 76 65 72 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 74 68 61 6e 6b 79 6f 75 2e 6a 6f 65 62 69 64 65 6e 2e 63 6f 6d 5c 75 30 30 32 46 63 6f 6e 76 65 72 74 5c 75 30 30 32 46 70 32 70 2d 32 34 30 37 30 32 2d 6a 62 74 69 22 7d 2c 22 61 62 5f 74 65 73 74 22 3a 7b 7d 2c 22 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 Data Ascii: nd","grouping":"federal","facebook_handle":"","url_website":null,"twitter_handle":"","donate":true,"display_pretty_location":null,"entity_convert_url":"https:\u002F\u002Fthankyou.joebiden.com\u002Fconvert\u002Fp2p-240702-jbti"},"ab_test":{},"custom_fields
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 20 4e 4a 2c 20 4e 4d 2c 20 4e 56 2c 20 4e 59 2c 20 4f 48 2c 20 4f 4b 2c 20 4f 52 2c 20 50 41 2c 20 52 49 2c 20 53 43 2c 20 53 44 2c 20 54 4e 2c 20 54 58 2c 20 55 54 2c 20 56 41 2c 20 56 54 2c 20 57 41 2c 20 57 49 2c 20 57 56 2c 20 61 6e 64 20 57 59 2e 20 41 6e 79 20 61 64 64 69 74 69 6f 6e 61 6c 20 66 75 6e 64 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 44 4e 43 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 61 70 70 6c 69 63 61 62 6c 65 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 20 6c 69 6d 69 74 73 2e 20 41 20 63 6f 6e 74 72 69 62 75 74 6f 72 20 6d 61 79 20 64 65 73 69 67 6e 61 74 65 20 74 68 65 69 72 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 72 74 69 63 69 70 61 6e 74 20 Data Ascii: NJ, NM, NV, NY, OH, OK, OR, PA, RI, SC, SD, TN, TX, UT, VA, VT, WA, WI, WV, and WY. Any additional funds will be allocated to the DNC, subject to applicable contribution limits. A contributor may designate their contribution for a particular participant
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 5c 22 5c 75 30 30 33 45 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 5c 75 30 30 33 43 5c 75 30 30 32 46 61 5c 75 30 30 33 45 20 61 6e 64 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 6a 6f 65 62 69 64 65 6e 2e 63 6f 6d 5c 75 30 30 32 46 74 65 72 6d 73 2d 6f 66 2d 73 65 72 76 69 63 65 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 5c 22 5c 75 30 30 33 45 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 20 28 42 46 50 29 5c 75 30 30 33 43 5c 75 30 30 32 46 61 5c 75 30 30 33 45 20 61 6e 64 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 75 30 30 Data Ascii: et=\"_blank\" rel=\"noopener\"\u003EPrivacy Policy\u003C\u002Fa\u003E and \u003Ca href=\"https:\u002F\u002Fjoebiden.com\u002Fterms-of-service\" target=\"_blank\" rel=\"noopener\"\u003ETerms of Service (BFP)\u003C\u002Fa\u003E and \u003Ca href=\"https:\u00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:03 UTC	536	OUT	GET /lib.min.js HTTP/1.1 Host: proxy-service.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:03 UTC	843	IN	HTTP/1.1 200 OK Connection: close Content-Length: 55888 Cache-Control: public,max-age=600 Expires: Wed, 03 Jul 2024 07:33:03 GMT Last-Modified: Fri, 21 Jun 2024 22:06:07 GMT ETag: W/"264255e7eaaa8cfa38c236557516b1d2" x-goog-generation: 1719007567436070 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 18820 Content-Type: text/javascript x-goog-hash: crc32c=lF4D6Q== x-goog-hash: md5=JkJV5+qqjPo4wjZVdRax0g== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: ACJd0NpUlmHlhu4TnXeYV3i_btbgZSZvA5YkwFG7DxkIGIZGUf6BifFiH0uOPNKCie00XZMexPYBScS2aA Accept-Ranges: bytes Age: 0 Date: Wed, 03 Jul 2024 07:23:03 GMT Via: 1.1 varnish Vary: Accept-Encoding
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6d 3d 21 30 2c 72 3d 6e 75 6c 6c 2c 44 3d 21 31 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 41 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 69 66 28 21 61 2e 44 63 29 6c 61 3d 61 2e 44 63 3d 6d 2c 6d 61 3d 44 2c 63 2e 61 28 46 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 71 63 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 72 79 7b 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 64 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 31 29 3b 72 65 74 75 72 6e 7d 61 28 29 7d 69 66 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 22 63 6f 6d 70 6c 65 74 65 22 Data Ascii: (function() {var l=void 0,m=!0,r=null,D=!1;(function(){function Aa(){function a(){if(!a.Dc)la=a.Dc=m,ma=D,c.a(F,function(a){a.qc()})}function b(){try{t.documentElement.doScroll("left")}catch(d){setTimeout(b,1);return}a()}if(t.addEventListener)"complete"
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 6d 65 3a 22 6d 70 5f 22 2b 61 2e 74 6f 6b 65 6e 2b 22 5f 6d 69 78 70 61 6e 65 6c 22 3b 76 61 72 20 62 3d 61 2e 70 65 72 73 69 73 74 65 6e 63 65 3b 69 66 28 22 63 6f 6f 6b 69 65 22 21 3d 3d 62 26 26 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 21 3d 3d 62 29 6f 2e 41 28 22 55 6e 6b 6e 6f 77 6e 20 70 65 72 73 69 73 74 65 6e 63 65 20 74 79 70 65 20 22 2b 62 2b 22 3b 20 66 61 6c 6c 69 6e 67 20 62 61 63 6b 20 74 6f 20 63 6f 6f 6b 69 65 22 29 2c 62 3d 61 2e 70 65 72 73 69 73 74 65 6e 63 65 3d 22 63 6f 6f 6b 69 65 22 3b 74 68 69 73 2e 6a 3d 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3d 3d 3d 0a 62 26 26 63 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 61 28 29 3f 63 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3a 63 2e 63 6f 6f 6b 69 65 3b 74 68 69 73 2e 6c 6f 61 64 28 29 Data Ascii: me:"mp_"+a.token+"_mixpanel";var b=a.persistence;if("cookie"!==b&&"localStorage"!==b)o.A("Unknown persistence type "+b+"; falling back to cookie"),b=a.persistence="cookie";this.j="localStorage"===b&&c.localStorage.sa()?c.localStorage:c.cookie;this.load()
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 3d 3d 72 26 26 21 62 29 72 65 74 75 72 6e 20 66 61 3b 76 61 72 20 64 3d 6d 3b 74 72 79 7b 76 61 72 20 61 3d 61 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2c 63 3d 22 5f 5f 6d 70 6c 73 73 5f 22 2b 65 61 28 38 29 3b 61 2e 73 65 74 49 74 65 6d 28 63 2c 22 78 79 7a 22 29 3b 22 78 79 7a 22 21 3d 3d 61 2e 67 65 74 49 74 65 6d 28 63 29 26 26 28 64 3d 44 29 3b 61 2e 72 65 6d 6f 76 65 49 74 65 6d 28 63 29 7d 63 61 74 63 68 28 68 29 7b 64 3d 44 7d 72 65 74 75 72 6e 20 66 61 3d 64 7d 66 75 6e 63 74 69 6f 6e 20 67 61 28 61 29 7b 72 65 74 75 72 6e 7b 6c 6f 67 3a 68 61 28 6f 2e 6c 6f 67 2c 61 29 2c 65 72 72 6f 72 3a 68 61 28 6f 2e 65 72 72 6f 72 2c 61 29 2c 41 3a 68 61 28 6f 2e 41 2c 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 2c 62 29 7b 72 Data Ascii: ==r&&!b)return fa;var d=m;try{var a=a\|\|window.localStorage,c="__mplss_"+ea(8);a.setItem(c,"xyz");"xyz"!==a.getItem(c)&&(d=D);a.removeItem(c)}catch(h){d=D}return fa=d}function ga(a){return{log:ha(o.log,a),error:ha(o.error,a),A:ha(o.A,a)}}function ha(a,b){r
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 20 73 61 28 61 2c 62 2c 64 29 7b 21 63 2e 57 61 28 62 29 7c 7c 21 62 2e 6c 65 6e 67 74 68 3f 6f 2e 65 72 72 6f 72 28 22 67 64 70 72 2e 22 2b 28 61 3f 22 6f 70 74 49 6e 22 3a 22 6f 70 74 4f 75 74 22 29 2b 22 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 6e 20 69 6e 76 61 6c 69 64 20 74 6f 6b 65 6e 22 29 3a 28 64 3d 64 7c 7c 7b 7d 2c 56 28 64 29 2e 73 65 74 28 57 28 62 2c 64 29 2c 61 3f 31 3a 30 2c 63 2e 4a 62 28 64 2e 77 62 29 3f 64 2e 77 62 3a 72 2c 21 21 64 2e 78 62 2c 21 21 64 2e 59 63 2c 21 21 64 2e 41 63 2c 64 2e 76 62 29 2c 64 2e 6f 26 26 61 26 26 64 2e 6f 28 64 2e 70 64 7c 7c 22 24 6f 70 74 5f 69 6e 22 2c 64 2e 71 64 2c 7b 73 65 6e 64 5f 69 6d 6d 65 64 69 61 74 65 6c 79 3a 6d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 2c 62 29 7b 72 65 74 75 72 Data Ascii: sa(a,b,d){!c.Wa(b)\|\|!b.length?o.error("gdpr."+(a?"optIn":"optOut")+" called with an invalid token"):(d=d\|\|{},V(d).set(W(b,d),a?1:0,c.Jb(d.wb)?d.wb:r,!!d.xb,!!d.Yc,!!d.Ac,d.vb),d.o&&a&&d.o(d.pd\|\|"$opt_in",d.qd,{send_immediately:m}))}function ia(a,b){retur
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 77 61 72 6e 2e 61 70 70 6c 79 28 79 2c 61 29 7d 63 61 74 63 68 28 62 29 7b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 79 2e 77 61 72 6e 28 61 29 7d 29 7d 7d 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 4a 26 26 21 63 2e 67 28 79 29 26 26 79 29 7b 76 61 72 20 61 3d 5b 22 4d 69 78 70 61 6e 65 6c 20 65 72 72 6f 72 3a 22 5d 2e 63 6f 6e 63 61 74 28 63 2e 4f 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 0a 74 72 79 7b 79 2e 65 72 72 6f 72 2e 61 70 70 6c 79 28 79 2c 61 29 7d 63 61 74 63 68 28 62 29 7b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 79 2e 65 72 72 6f 72 28 61 29 7d 29 7d 7d 7d 2c 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 63 2e 67 28 79 29 26 26 79 29 7b 76 61 72 20 61 3d 5b 22 4d 69 78 70 61 6e 65 6c 20 65 Data Ascii: warn.apply(y,a)}catch(b){c.a(a,function(a){y.warn(a)})}}},error:function(){if(J&&!c.g(y)&&y){var a=["Mixpanel error:"].concat(c.O(arguments));try{y.error.apply(y,a)}catch(b){c.a(a,function(a){y.error(a)})}}},A:function(){if(!c.g(y)&&y){var a=["Mixpanel e
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 61 72 20 66 3d 5b 5d 3b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 70 75 73 68 28 62 2e 63 61 6c 6c 28 64 2c 61 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 3b 63 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 69 66 28 61 3d 3d 3d 72 29 72 65 74 75 72 6e 20 62 3b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 5b 62 2e 6c 65 6e 67 74 68 5d 3d 63 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 63 2e 79 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 69 66 28 61 3d 3d 3d 72 29 72 65 74 75 72 6e 20 62 3b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 5b 62 2e 6c 65 6e 67 74 68 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 63 2e 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 Data Ascii: ar f=[];c.a(a,function(a){f.push(b.call(d,a))});return f};c.keys=function(a){var b=[];if(a===r)return b;c.a(a,function(a,c){b[b.length]=c});return b};c.yd=function(a){var b=[];if(a===r)return b;c.a(a,function(a){b[b.length]=a});return b};c.Ta=function(a,b
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 2e 73 6c 69 63 65 28 30 2c 62 29 3a 63 2e 69 73 41 72 72 61 79 28 61 29 3f 28 64 3d 5b 5d 2c 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 2e 70 75 73 68 28 63 2e 74 72 75 6e 63 61 74 65 28 61 2c 62 29 29 7d 29 29 3a 63 2e 65 28 61 29 3f 28 64 3d 7b 7d 2c 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 68 29 7b 64 5b 68 5d 3d 63 2e 74 72 75 6e 63 61 74 65 28 61 2c 62 29 7d 29 29 3a 64 3d 61 3b 72 65 74 75 72 6e 20 64 7d 3b 63 2e 68 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 63 29 7b 76 61 72 20 67 3d 22 22 2c 76 3d 30 2c 69 3d 76 3d 22 22 2c 69 3d 30 2c 65 3d 67 2c 70 3d 5b 5d 2c 73 3d 63 5b 61 5d 3b 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 Data Ascii: .slice(0,b):c.isArray(a)?(d=[],c.a(a,function(a){d.push(c.truncate(a,b))})):c.e(a)?(d={},c.a(a,function(a,h){d[h]=c.truncate(a,b)})):d=a;return d};c.ha=function(){return function(a){function b(a,c){var g="",v=0,i=v="",i=0,e=g,p=[],s=c[a];s&&"object"===typ
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 68 28 22 6c 22 29 2c 68 28 22 6c 22 29 2c 72 7d 67 28 27 55 6e 65 78 70 65 63 74 65 64 20 22 27 2b 69 2b 27 22 27 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 66 6f 72 28 3b 69 26 26 22 20 22 3e 3d 69 3b 29 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 61 2c 62 2c 64 3d 22 22 2c 66 3b 69 66 28 27 22 27 3d 3d 3d 0a 69 29 66 6f 72 28 3b 68 28 29 3b 29 7b 69 66 28 27 22 27 3d 3d 3d 69 29 72 65 74 75 72 6e 20 68 28 29 2c 64 3b 69 66 28 22 5c 5c 22 3d 3d 3d 69 29 69 66 28 68 28 29 2c 22 75 22 3d 3d 3d 69 29 7b 66 6f 72 28 62 3d 66 3d 30 3b 34 3e 62 3b 62 2b 3d 31 29 7b 61 3d 70 61 72 73 65 49 6e 74 28 68 28 29 2c 31 36 29 3b 69 66 28 21 69 73 46 69 6e 69 74 65 28 61 29 29 62 72 65 61 6b 3b 66 3d 31 36 2a 66 2b 61 7d 64 2b 3d 53 74 72 69 6e 67 Data Ascii: h("l"),h("l"),r}g('Unexpected "'+i+'"')}function b(){for(;i&&" ">=i;)h()}function c(){var a,b,d="",f;if('"'===i)for(;h();){if('"'===i)return h(),d;if("\\"===i)if(h(),"u"===i){for(b=f=0;4>b;b+=1){a=parseInt(h(),16);if(!isFinite(a))break;f=16*f+a}d+=String
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 69 6f 6e 28 61 29 7b 70 3d 61 3b 65 3d 30 3b 69 3d 22 20 22 3b 61 3d 73 28 29 3b 62 28 29 3b 69 26 26 67 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 22 29 3b 72 65 74 75 72 6e 20 61 7d 7d 28 29 3b 63 2e 79 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 64 2c 66 2c 68 2c 67 3d 30 2c 65 3d 30 2c 69 3d 22 22 2c 69 3d 5b 5d 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 63 2e 78 64 28 61 29 3b 64 6f 20 62 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 67 2b 2b 29 2c 64 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 67 2b 2b 29 2c 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 67 2b 2b 29 2c 68 3d 62 3c 3c 31 36 7c 64 3c 3c 38 7c 66 2c 62 3d 68 3e 3e 31 38 26 36 33 2c 64 3d 68 3e 3e 31 32 26 36 33 2c 66 3d 68 3e 3e 36 26 36 33 2c 68 26 3d 36 33 2c 69 5b Data Ascii: ion(a){p=a;e=0;i=" ";a=s();b();i&&g("Syntax error");return a}}();c.yc=function(a){var b,d,f,h,g=0,e=0,i="",i=[];if(!a)return a;a=c.xd(a);do b=a.charCodeAt(g++),d=a.charCodeAt(g++),f=a.charCodeAt(g++),h=b<<16\|d<<8\|f,b=h>>18&63,d=h>>12&63,f=h>>6&63,h&=63,i[
2024-07-03 07:23:03 UTC	1379	IN	Data Raw: 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 65 6c 73 65 20 66 6f 72 28 62 3d 30 3b 61 3d 3d 31 2a 6e 65 77 20 44 61 74 65 3b 29 62 2b 2b 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 62 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 28 5a 2e 68 65 69 67 68 74 2a 5a 2e 77 69 64 74 68 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 72 65 74 75 72 6e 20 62 28 29 2b 22 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c 22 22 29 2b 22 2d 22 2b 61 28 29 2b 22 2d 22 2b 63 2b 22 2d 22 2b 62 28 29 7d 7d 28 29 3b 76 61 72 20 79 61 3d 22 61 68 72 65 66 73 62 6f 74 2c 61 Data Ascii: formance.now();else for(b=0;a==1new Date;)b++;return a.toString(16)+Math.floor(b).toString(16)}return function(){var c=(Z.heightZ.width).toString(16);return b()+"-"+Math.random().toString(16).replace(".","")+"-"+a()+"-"+c+"-"+b()}}();var ya="ahrefsbot,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:04 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 07:23:04 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=117960 Date: Wed, 03 Jul 2024 07:23:04 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	35.190.88.7	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:05 UTC	567	OUT	OPTIONS / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: bugsnag-api-key,bugsnag-payload-version,bugsnag-sent-at,content-type Origin: https://secure.actblue.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:05 UTC	408	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, Content-Type, Accept, Authorization, User-Agent, Referer, X-Forwarded-For, Bugsnag-Api-Key, Bugsnag-Payload-Version, Bugsnag-Sent-At Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Date: Wed, 03 Jul 2024 07:23:05 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:05 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 07:23:05 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=117969 Date: Wed, 03 Jul 2024 07:23:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 07:23:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:05 UTC	1579	OUT	GET /pages/p2p-240702-jbti/tracking_code?t=landing&refcode=ta_c2&refcode2w=5wKgd5&auth_token=null HTTP/1.1 Host: secure.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
2024-07-03 07:23:05 UTC	589	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1862 Content-Type: text/html; charset=utf-8 Cache-Control: no-store Etag: W/"ffc8dd3d7b304ffab8ed8e54fac5272a" Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: ALLOWALL X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow X-Xss-Protection: 0 Accept-Ranges: bytes Age: 0 Date: Wed, 03 Jul 2024 07:23:05 GMT Via: 1.1 varnish Vary: Accept-Encoding X-Start: 2024-07-03 07:23:05.697 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:05 UTC	1379	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 76 61 72 20 43 6f 6e 74 72 69 62 75 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 2e 67 6f 6e 20 26 26 20 67 6f 6e 2e 63 6f 6e 74 72 69 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <script type="text/javascript"> var Contribution = window.gon && gon.contri
2024-07-03 07:23:05 UTC	483	IN	Data Raw: 68 27 3a 20 27 3c 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 3e 27 7d 7d 29 3b 76 61 72 20 73 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3b 73 2e 73 72 63 3d 72 3b 73 2e 61 73 79 6e 63 3d 74 72 75 65 3b 73 2e 6f 6e 6c 6f 61 64 3d 73 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 79 2c 72 73 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 2c 63 3d 77 5b 75 5d 3b 69 66 28 72 73 26 26 72 73 21 3d 22 63 6f 6d 70 6c 65 74 65 22 26 26 72 73 21 3d 22 6c 6f 61 64 65 64 22 29 7b 72 65 74 75 72 6e 7d 74 72 79 7b 79 3d 59 41 48 4f 4f 2e 79 77 61 2e 49 31 33 4e 2e 66 69 72 65 42 65 61 63 6f 6e 3b 77 5b 75 5d 3d 5b 5d 3b 77 5b 75 5d 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 79 28 5b 70 5d 29 Data Ascii: h': '<phone_number>'}});var s=d.createElement(t);s.src=r;s.async=true;s.onload=s.onreadystatechange=function(){var y,rs=this.readyState,c=w[u];if(rs&&rs!="complete"&&rs!="loaded"){return}try{y=YAHOO.ywa.I13N.fireBeacon;w[u]=[];w[u].push=function(p){y([p])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:05 UTC	1337	OUT	GET /api/cf/auth_token HTTP/1.1 Host: secure.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
2024-07-03 07:23:05 UTC	737	IN	HTTP/1.1 200 OK Connection: close Content-Length: 102 Content-Type: application/json; charset=utf-8 Cache-Control: private, no-store Etag: W/"c5e197bf0c0d7952d46a1f8a48579366" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; domain=secure.actblue.com; path=/; expires=Wed, 03 Jul 2024 08:23:05 GMT; secure; HttpOnly; SameSite=Lax X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:05 GMT Via: 1.1 varnish Vary: Accept, Accept-Encoding X-Start: 2024-07-03 07:23:05.714 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:05 UTC	102	IN	Data Raw: 7b 22 61 75 74 68 54 6f 6b 65 6e 22 3a 22 54 52 70 33 45 62 4f 69 49 4b 6f 4e 32 6a 49 4e 59 74 6d 6d 6c 6a 38 61 62 74 64 73 58 64 6a 33 56 31 6d 42 67 79 46 2d 7a 46 5f 53 30 76 63 46 6d 63 48 72 74 30 4e 78 72 42 78 36 66 7a 6b 38 39 73 63 54 2d 66 6f 45 62 68 79 34 55 68 70 77 45 35 45 59 75 51 22 7d Data Ascii: {"authToken":"TRp3EbOiIKoN2jINYtmmlj8abtdsXdj3V1mBgyF-zF_S0vcFmcHrt0NxrBx6fzk89scT-foEbhy4UhpwE5EYuQ"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:05 UTC	1516	OUT	GET /x/object/actblue-cyanotypes/replaced_images/branding/249406/260059c2-94ed-4236-82ad-624d031cc757-240424-JRB_KDH-Wrapper-10814a65.png HTTP/1.1 Host: secure.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
2024-07-03 07:23:05 UTC	737	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1257250 x-amz-id-2: Ir59t20LOvH4nkhl31e7FsZtfJDOQofcYxDXIZhHPNhtOdAtg7GIY0sh6a2yk2B8L1gZhXJOGHs= x-amz-request-id: 3XGR8ZV8F8TXK03K x-amz-replication-status: COMPLETED Last-Modified: Mon, 24 Apr 2023 13:40:57 GMT ETag: "a9272e8166f30f235595d1ea6fb6e431" x-amz-server-side-encryption: AES256 Content-Disposition: attachment; filename="260059c2-94ed-4236-82ad-624d031cc757-240424-JRB_KDH-Wrapper.png" x-amz-version-id: 8taWg2TSIW2VyHk4IYIcTOuJSpVkZRXG Content-Type: image/png cache-control: max-age=2678405 Accept-Ranges: bytes Age: 2078 Date: Wed, 03 Jul 2024 07:23:05 GMT Via: 1.1 varnish X-Start: 2024-07-03 07:23:05.729 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:05 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 f0 00 00 06 40 08 06 00 00 00 3c 02 f1 58 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 80 00 49 44 41 54 78 da ec fd 5b 93 64 d9 7d 9e 79 3e eb b4 b7 bb 47 64 66 15 48 49 1c a9 a7 fb fb 7f a0 9e 9b b1 99 31 1b eb 9e 56 37 01 54 65 46 84 fb 3e ac c3 5c 2c af 24 25 51 dd 24 45 31 41 e2 f9 99 01 a8 ac a8 88 f0 70 f7 c0 05 f0 d8 fb 0f 7d ff fd 40 92 24 49 92 24 49 92 24 49 92 24 49 92 24 fd b3 8a 3f fa 01 48 92 24 49 92 24 49 92 24 49 92 24 49 92 f4 e7 c8 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 Data Ascii: PNGIHDR@<XpHYs%%IR$IDATx[d}y>GdfHI1V7TeF>\,$%Q$E1Ap}@$I$I$I$I$?H$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$
2024-07-03 07:23:05 UTC	16384	IN	Data Raw: 24 cd a5 b3 c7 c6 be 6d 8c 01 31 17 c6 88 d4 01 61 db d9 be fd c2 b9 7f 50 d6 0b d7 97 57 3a d0 ce 93 d1 e7 09 cf e7 b0 1c fd ac d4 36 cf ce c6 52 18 61 50 72 e1 f5 f3 67 8e 63 65 7b 3c a0 9e 84 98 49 29 12 19 b4 31 e8 63 50 7b 27 c7 79 da b5 b5 46 6f 9d d6 76 da 71 30 52 24 a7 4c af 8d a3 35 7a 1f a4 92 b9 5c 6f 5c 5f 6e e4 9c 67 c4 d7 2b a1 37 52 ca 90 13 33 ce 82 94 0b 1d 18 81 79 ca 34 14 7a 7f 70 1e 07 cb ba cc cf 6f 9d 08 c4 b2 90 52 e4 38 76 6a 3d 69 0c 7a 00 72 22 a5 42 c9 89 63 ff 6d a5 0e f6 c7 9d 63 df 09 31 50 cf 13 9e e7 59 73 cc 9c ad 52 8f 4a 5e 4e 06 33 0a 2c b9 40 cc 9c 7d 9e 66 2d a5 10 c2 98 f1 1a cc 53 bd c7 36 43 b2 b2 d0 8e c4 63 db 78 7f 7f 27 3e 23 ac 6d 7b 70 1e 3b 1f f7 37 42 88 7c f9 fc 13 bd 57 1e db 1b 1f df ee bc bc bc f0 f9 Data Ascii: $m1aPW:6RaPrgce{<I)1cP{'yFovq0R$L5z\o\_ng+7R3y4zpoR8vj=izr"Bcmc1PYsRJ^N3,@}f-S6Ccx'>#m{p;7B\|W
2024-07-03 07:23:05 UTC	16384	IN	Data Raw: 8e 0f e3 68 ce 7d c4 39 6a 12 72 89 89 dd d6 1d bf 38 c3 a2 02 58 6f 4e 2e 4a 4a e9 14 36 0d 3b 25 c0 c7 bd 93 53 5c 2f 23 ea 8c db 7d 70 11 48 8b a2 2a d4 6b 14 2d fb 08 69 b1 1c 31 e3 6c 79 4c 6f 00 00 80 00 49 44 41 54 9b 35 84 cd 24 89 cf 9f 1b a5 c4 64 b1 f5 c1 e7 1f 7b 08 93 35 ae 2f 2e dc 1f 83 ba 28 a9 19 fb 3e 10 84 5c a2 74 98 35 2a 88 fb 61 24 57 ee db e0 38 ce 82 9e dd b9 3c 67 72 cd 64 89 49 64 69 89 31 9c af af 0f da b1 f3 eb 3f f9 35 eb 6d e5 72 bb 84 88 c9 67 b6 d7 3b bd 1f e4 52 29 b9 40 16 7a eb 1c 76 47 cc 90 eb 60 b4 86 8b 92 97 42 a9 05 86 90 72 a2 f4 4c b7 8d d7 d7 17 4a 4a 2c cb ca eb e3 ce 71 6c 31 f9 fb f5 e0 f5 f3 27 1e 5f 3e f3 fc e1 03 ef 7f fd 2b 6e 1f be a3 f5 c6 97 4f 1f f9 fc fd 8f f4 fd e0 f6 ee 89 cb f5 12 9f 91 c9 64 32 Data Ascii: h}9jr8XoN.JJ6;%S\/#}pHk-i1lyLoIDAT5$d{5/.(>\t5a$W8<grdIdi1?5mrg;R)@zvG`BrLJJ,ql1'_>+nOd2
2024-07-03 07:23:05 UTC	16384	IN	Data Raw: 3c f2 fc ee 8e 9b c3 4c cb 17 02 c6 94 02 6f 5e 6f 0e 41 76 46 f4 e1 cd 09 11 61 b9 39 32 cf 0b 5b ad 9c 4e 67 ee 1f 1e b8 5c ce dc bd 58 39 1e 6f 39 1c 6f 99 0f 07 44 84 c7 87 07 1e 1f ee 29 db c6 dd b3 3b 3e f5 99 cf 72 7f 7f cf 7a 3e 93 52 e4 e6 d9 33 cc 8c fb d7 af 78 78 7c a4 d5 c2 7a 59 09 31 f0 de a7 3e 45 4c 63 d9 6d 64 64 64 64 64 64 64 64 64 64 e4 8f 9f 61 e0 1b 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 f9 09 c9 db f0 9e aa fe c9 be 76 c1 eb 73 45 d0 10 10 0d c4 10 98 a6 09 2b c6 77 7f ff 03 be f4 6b bf c9 77 3f f8 84 7c ca dc 2e 5e 51 6b dd de 15 83 b0 cc 4a 35 37 76 59 13 e6 49 51 73 40 cc cc ed 7b ad 19 b5 fa 7f 5b 83 14 84 d2 60 ad c6 f1 a0 2c 87 e0 10 5f 37 e6 cd b3 1b e9 bc 5a d5 01 31 f3 d6 4f e6 39 30 cf 42 88 6e 0c f3 3a Data Ascii: <Lo^oAvFa92[Ng\X9o9oD);>rz>R3xx\|zY1>ELcmddddddddddavsE+wkw?\|.^QkJ57vYIQs@{[`,_7Z1O90Bn:
2024-07-03 07:23:05 UTC	16384	IN	Data Raw: 1f fe f0 35 ff e5 df f8 32 ff ce 7f f4 ab 54 33 7e fe 9f 7a 9f e3 32 31 32 32 32 32 f2 d3 9f 01 f0 8d 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c 8c fc 94 c7 cc d8 d6 95 97 df ff 3e 5f fd 8d 2f f1 ad 2f 7e 1b 1e 3e 6a 67 49 00 00 80 00 49 44 41 54 56 aa f8 22 68 13 38 4e 91 9b 29 10 22 98 08 4b 54 6e 0e e1 0a 82 5d 2a bc 39 fb a2 23 06 d2 dc fe 66 18 da 60 bd 18 97 ad 51 ab 91 ba 3d 2e 05 e5 66 89 4c 93 32 2d 4a 9c f4 5a 61 a6 11 d2 21 40 87 b7 34 e8 b5 8e ad 56 5f 8a dd 2d 62 b5 83 62 f3 a2 4c 53 60 9e 03 34 f3 3a d5 e6 46 17 4d 42 15 ed 16 36 5f 78 af b5 5d a1 ba 34 39 7c 37 25 c5 5c 1f c8 34 05 52 54 68 bd 6e b5 43 7a 53 0c 0e 17 5a 87 0d a3 5b 00 a7 25 90 ab 71 b9 b8 69 70 87 78 6a b5 5e 39 eb d0 9e e0 55 a4 db d6 88 51 59 e6 08 57 e8 6f af Data Ascii: 52T3~z212222>_//~>jgIIDATV"h8N)"KTn]*9#f`Q=.fL2-JZa!@4V_-bbLS`4:FMB6_x]49\|7%\4RThnCzSZ[%qipxj^9UQYWo
2024-07-03 07:23:05 UTC	16384	IN	Data Raw: 93 03 a9 dd 41 df 79 9e 68 bd f3 ad 6f 7f 87 69 9e f8 f4 07 7e d0 4d 8a e2 d7 9c 1e 16 be 23 7f 0c d3 5a e7 17 7e f9 77 f8 73 7f fe 3f e6 c7 ff da af b0 95 f6 5d c0 d6 0e 22 ed 75 af b0 cb d2 ec 0e 24 ed 95 b9 82 10 c5 5f af d3 a8 28 3d a9 d7 b5 ef 06 e1 1d 76 aa 6f ea 5d f7 ad 08 ea 75 e1 e2 ef 0f 02 5c cc ee b5 a1 fb fe ec 51 5e ab 49 05 af 19 bf d7 d2 0e 90 0f 06 00 36 fe ec df 7b 0b 00 76 5e eb 79 03 0e d8 e9 fe 08 13 12 8c fd df 0d 70 4a 19 b0 5a 07 f2 d8 87 bd 66 77 af 1c 0e fb f3 0d f0 6c c7 ea 1a 3b 9c e6 47 55 87 e9 30 0e 80 fe 6a 46 d6 d7 1a 5b f0 3a f4 ad 1b 51 07 6c bd c3 7b f7 f1 83 d2 8d 62 1d 64 00 96 aa 4c ea 20 65 69 9d 6a 7e 7f 14 45 bd da 58 de 56 e5 0a c5 3a c5 7c 1b 5b ef a8 70 1f 87 dd a2 97 04 1e 63 1c b5 b0 42 e9 c6 c7 56 07 00 e7 Data Ascii: Ayhoi~M#Z~ws?]"u$_(=vo]u\Q^I6{v^ypJZfwl;GU0jF[:Ql{bdL eij~EXV:\|[pcBV
2024-07-03 07:23:05 UTC	16384	IN	Data Raw: 9d 38 e0 bc 5a 1b d2 1a 65 bd 52 ab 83 74 62 1d 11 45 a7 85 94 27 44 8c ad 6e b4 de 21 25 52 f2 aa de d6 1c 5e 13 51 86 08 87 10 13 84 8c 04 07 df 52 54 ac 17 7a 5b e9 b5 a0 21 13 a7 05 95 00 cd 7c 6e 69 c0 c4 c6 f2 bc db 72 34 fa fc ea a5 50 d6 95 18 a2 db e5 d8 58 9c 00 00 80 00 49 44 41 54 1f 2f 17 c0 90 61 e4 79 5b 9d ec f5 83 8d ed 76 a1 95 cd cd 80 21 90 e2 84 c6 ec 46 bf 94 49 39 39 d4 a9 81 10 13 a5 6f 94 ba 12 24 92 52 a6 35 3f 18 bf de 60 1d db 12 64 d8 fc bc e2 57 55 bc a2 b7 78 4d ec ab a9 ca 50 35 6a 29 a3 b2 d9 61 30 89 81 de 3a bd 3b 28 16 54 b9 ad 37 b6 b5 38 58 16 dc e0 d3 6a 1d d6 24 3f ef cb 72 22 a5 48 eb 8d 18 dc 22 b4 6e 85 a0 91 65 59 50 75 18 74 9a e6 51 b1 e7 70 62 8c d1 21 be b6 51 6b 63 ce 99 29 39 24 58 77 68 32 8c 7a e6 01 3a Data Ascii: 8ZeRtbE'Dn!%R^QRTz[!\|nir4PXIDAT/ay[v!FI99o$R5?`dWUxMP5j)a0:;(T78Xj$?r"H"neYPutQpb!Qkc)9$Xwh2z:
2024-07-03 07:23:06 UTC	16384	IN	Data Raw: 87 30 dc 2a e7 27 70 18 5d d3 6b 59 07 88 e8 f0 db 94 67 24 b8 31 31 e7 34 ae dd ee 40 72 08 5e 37 3b c0 5a 11 43 44 89 31 72 79 7e 26 e6 c8 ba 2c 94 7b 71 60 57 94 2e 6e 00 0b 1a 49 69 22 c4 c8 3c cf f4 56 59 ee 77 a6 14 99 07 e8 07 46 9e 66 62 48 a4 9c 38 9d ce c4 18 08 1a 59 96 95 5a 1a f3 3c 83 04 3a 9d 9c 7d 5f 97 65 a5 95 82 d5 ca 52 56 10 45 63 02 eb dc ae af a4 79 22 cf 27 ba 99 c3 b0 65 e5 e5 d3 0b 65 5d 10 55 f2 94 c9 79 22 a8 43 81 e0 55 e2 5e 27 ec f0 65 08 91 3c 25 6a af a8 0a a7 9c 91 9c fc 58 76 05 35 42 8a e4 29 ef b6 a9 23 47 fe 4a f9 e7 ff 8f ff 1e ff c4 ff fa 5f f3 eb 1f bf 2e e3 f8 f2 c0 06 c1 a9 ca 5e 8b ba 81 68 51 95 34 60 a6 ad 44 d4 cd ae e2 15 e1 a3 6a 54 11 0a 0e 3b d5 be d9 f4 36 13 9d 83 3b 26 c3 c0 35 6a 45 9b 39 44 df ba ed Data Ascii: 0*'p]kYg$114@r^7;ZCD1ry~&,{q`W.nIi"<VYwFfbH8YZ<:}_eRVEcy"'ee]Uy"CU^'e<%jXv5B)#GJ_.^hQ4`DjT;6;&5jE9D
2024-07-03 07:23:06 UTC	16384	IN	Data Raw: 01 8d b5 1a e7 14 f8 d6 53 e4 c3 73 64 4a c2 75 71 78 2e 2b bc 2e c6 29 0a 3f fb 9b 2b c1 e0 34 e9 0e e8 fd d4 fb c4 ad 1a 9f 3f b9 b9 ef 92 95 a5 19 1f c6 b6 cf 93 f2 3a 9e b9 83 ba 9d fa 7b 1f 22 5a e0 ab 9b f1 da 6c 37 7a ea 38 61 dc 6d ec f7 1c c1 a8 a3 72 3b 8b f0 5b df ff c8 df f5 47 fe 7a bd c1 65 00 00 80 00 49 44 41 54 00 3f f5 bd cf 7e bc 37 d5 23 47 8e 1c f9 31 e5 00 f8 8e 1c 39 72 e4 c8 91 23 47 8e 1c 39 72 e4 c8 91 23 47 8e 1c 39 72 e4 c7 98 db cb 95 5f fd b3 3f cf 6f ff ea f7 dd 64 37 ea 5b 7b 37 72 12 de 7f 96 76 50 ae 55 23 65 25 46 41 a2 9b 44 72 72 73 ca ed da 59 d6 4e 0c 42 ce ca bb a7 c8 f3 93 43 24 bd 40 5d bd 06 17 c4 ed 75 22 83 57 f2 09 c4 da 8c 65 f1 aa da f9 14 e9 1d ee d7 c6 7a 6f b4 e6 db 92 b2 4f 1c 86 20 c3 c2 27 c3 2c e6 26 Data Ascii: SsdJuqx.+.)?+4?:{"Zl7z8amr;[GzeIDAT?~7#G19r#G9r#G9r_?od7[{7rvPU#e%FADrrsYNBC$@]u"WezoO ',&
2024-07-03 07:23:06 UTC	16384	IN	Data Raw: fc a5 ef fd 98 7f f8 3f ff 1f 39 bf 93 ce 9c 39 f3 47 22 27 c0 77 e6 cc 99 33 67 ce 9c 39 73 e6 cc 99 33 67 ce 9c 39 73 e6 cc 99 33 3f e3 dc 6f 37 be ff 1b bf c5 4f be f7 fb 6c 9f aa db dc 06 0c d0 fe 98 dc 1c 98 2d 64 af b0 53 ac fe f6 fd 87 8c 76 50 9f d8 bd df 0d 9e c9 65 af a5 0a 4c 53 62 5a 0c 66 5b b7 6a d5 a0 d1 ea c4 ea 6a 7f 0f 21 58 7d ee 1b 7b 9c 55 e7 2a b7 7b a7 0f 28 39 10 f2 31 cb 4c c9 81 77 ef f2 03 e2 0b 81 94 84 32 19 70 d2 5a 25 96 4c 99 66 52 8c ac eb 8a 8e 8e 04 87 f6 5a a7 d6 4a c9 b6 6c 00 31 27 7a ab 56 a9 2a bb 95 46 ac 4e 16 83 7e ca 3c 13 52 a2 f5 61 e6 b5 20 b4 56 69 cd ea 2a 47 6b 74 01 ed 06 eb 0d af 54 db eb 55 47 b3 7a d9 79 ca 36 61 d8 dd 7c b6 0e 72 b2 3a b3 75 33 a0 6a 97 b7 d4 aa 84 68 a0 63 af 9d 5a 95 18 0d 26 8c 59 Data Ascii: ?99G"'w3g9s3g9s3?o7Ol-dSvPeLSbZf[jj!X}{U{(91Lw2pZ%LfRZJl1'zVFN~<Ra Vi*GktTUGzy6a\|r:u3jhcZ&Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	35.190.88.7	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:05 UTC	730	OUT	POST / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Content-Length: 475 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Bugsnag-Api-Key: 04c1a9de88bb73e22614162ba813a0b9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Bugsnag-Payload-Version: 1 Bugsnag-Sent-At: 2024-07-03T07:23:03.939Z sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure.actblue.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:05 UTC	475	OUT	Data Raw: 7b 22 6e 6f 74 69 66 69 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 42 75 67 73 6e 61 67 20 4a 61 76 61 53 63 72 69 70 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 32 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 75 67 73 6e 61 67 2f 62 75 67 73 6e 61 67 2d 6a 73 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e Data Ascii: {"notifier":{"name":"Bugsnag JavaScript","version":"7.2.1","url":"https://github.com/bugsnag/bugsnag-js"},"device":{"locale":"en-US","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.
2024-07-03 07:23:06 UTC	299	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Origin: * Bugsnag-Session-Uuid: 10d3606a-d491-42f8-adf0-2c201f4628b5 Content-Type: application/json Date: Wed, 03 Jul 2024 07:23:05 GMT Content-Length: 21 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:06 UTC	21	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 61 63 63 65 70 74 65 64 22 7d Data Ascii: {"status":"accepted"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	35.190.88.7	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:06 UTC	730	OUT	POST / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Content-Length: 475 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Bugsnag-Api-Key: 04c1a9de88bb73e22614162ba813a0b9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Bugsnag-Payload-Version: 1 Bugsnag-Sent-At: 2024-07-03T07:23:05.544Z sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure.actblue.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:06 UTC	475	OUT	Data Raw: 7b 22 6e 6f 74 69 66 69 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 42 75 67 73 6e 61 67 20 4a 61 76 61 53 63 72 69 70 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 32 2e 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 75 67 73 6e 61 67 2f 62 75 67 73 6e 61 67 2d 6a 73 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e Data Ascii: {"notifier":{"name":"Bugsnag JavaScript","version":"7.2.1","url":"https://github.com/bugsnag/bugsnag-js"},"device":{"locale":"en-US","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.
2024-07-03 07:23:06 UTC	299	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Origin: * Bugsnag-Session-Uuid: 4a257bde-1b87-45e0-9f99-06350dcafede Content-Type: application/json Date: Wed, 03 Jul 2024 07:23:06 GMT Content-Length: 21 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:06 UTC	21	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 61 63 63 65 70 74 65 64 22 7d Data Ascii: {"status":"accepted"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	151.101.1.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:06 UTC	703	OUT	GET /sdk/js?client-id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&locale=en_US&disable-funding=credit,card&intent=capture&commit=false&enable-funding=venmo HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:07 UTC	1276	IN	HTTP/1.1 200 OK Connection: close Content-Length: 83202 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server-Timing Cache-Control: public, max-age=3600, s-maxage=10800 Content-Encoding: gzip Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; script-src 'nonce-YWI+6S6ehxHUVbBvnUfYXC4qddtbmUTP9N3xBSmJMdcfr2Bu' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'nonce-YWI+6S6ehxHUVbBvnUfYXC4qddtbmUTP9N3xBSmJMdcfr2Bu' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/javascript; charset=utf-8 Disable-Set-Cookie: true Etag: W/"14502-86HFSuCYQkMIvFmxMdb8zkEMpuE"
2024-07-03 07:23:07 UTC	1390	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc 7d e9 7f da 48 93 f0 f7 fd 2b b0 76 1e af 14 0b 8c 73 cc 21 a2 61 b1 8d 6d 62 83 19 83 e3 24 0e cb 4f 86 c6 28 16 12 23 09 1f 31 fc ef 6f 55 5f 6a 1d e0 cc cc f3 ee 87 9d c3 80 d4 47 75 75 75 75 75 75 1d fa 64 e1 8f 62 37 f0 f5 e7 e1 f0 a8 75 d1 eb 0f 2f 9a 9d c3 e6 c5 b0 f9 a9 db bc 68 b5 9b 9d 7e 6f 38 34 e1 e5 65 e7 b0 d5 39 1e 36 cf 5a c7 ad fd d6 59 ab ff 99 3e 6f 37 7b bd c6 31 be 39 3e 3b df 6f 9c 41 e9 95 f1 fc 1f 25 f8 67 f7 d5 56 e9 28 08 4b 9e 3b 22 7e 44 4a ae 3f 09 c2 99 83 dd 95 e6 1e 71 e0 51 44 48 29 58 c4 f3 45 5c f9 16 55 ce 5a 07 cd 4e af 59 89 1f e3 d2 ab dd ff d8 92 c0 f9 26 31 9e a1 b2 7e ef 84 a5 18 1a 2a 11 c3 bf 8e 07 36 81 3f 2b fd c1 f5 c7 c1 83 99 14 37 9e b1 20 b1 9f 57 35 f1 b0 14 eb a1 f1 ec Data Ascii: }H+vs!amb$O(#1oU_jGuuuuuudb7u/h~o84e96ZY>o7{19>;oA%gV(K;"~DJ?qQDH)XE\UZNY&1~*6?+7 W5
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: df fd 97 7e 5d 2d ff d6 28 1f 0d 9e 5f af 8c dd 5b 53 2f da 82 4a 6c 33 a8 4c c2 60 76 00 3c f2 00 9a d4 b5 ea a3 b6 43 90 3d 19 3b 1a 32 2a 33 0b 3f e5 73 3b f7 95 89 eb 91 1d ad ae ed 3c f1 82 14 7d 07 81 1f 03 38 1a 6c d2 0f f5 87 8a f2 c8 6e 5a 80 4a c4 7f 6f 4a 08 cc 4c 14 f5 e1 ad dd 34 6f 00 4b a3 ba 9c b2 29 71 c6 15 17 84 db 30 de 27 40 d5 44 7f 30 d3 2f 47 b8 1e 70 7d 44 40 41 86 95 7e 09 f8 04 52 66 4b e6 01 d6 0b f1 60 f1 22 21 ed ec 08 91 31 50 a4 83 89 51 b0 e0 d9 1a 8f f5 df 40 ec 84 8f 3d 03 d6 54 8e 1d 86 75 60 85 15 17 b6 42 e4 84 56 58 d3 41 8e 90 8b 33 ac 78 01 6c e9 d1 72 f9 bc 32 2a 43 a0 59 81 87 fc e6 eb 22 03 a6 45 a2 28 ff 1a d6 4a 48 0b 30 9c a4 ca c8 8d 08 98 90 0b bb c1 86 b1 fc fa 7f 68 2c 7b d5 ff 4b 83 d9 fb bf 34 98 d7 ff Data Ascii: ~]-(_[S/Jl3L`v<C=;23?s;<}8lnZJoJL4oK)q0'@D0/Gp}D@A~RfK`"!1PQ@=Tu`BVXA3xlr2CY"E(JH0h,{K4
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: ba 03 0e 53 3c c2 54 49 90 d6 8f 60 c5 17 53 84 5a b2 eb 3c a1 5c 7c e4 12 6f 5c 0c 42 4f 2d de 06 26 55 3c ff a9 52 c1 d8 f1 8a e7 5d 2d d6 02 b1 1c f6 38 2a 97 17 2f 0b b5 f4 1f 17 78 8b 51 bc 2a d4 72 1f 71 a7 2c 5e b9 6a 31 8e f5 3e 99 cd 91 01 16 cf 6a 0a 53 c1 7c 31 3f 9f 13 bf 19 86 41 58 58 be a5 96 87 91 05 0f 2d aa 32 2a 2c dc 56 0b 03 7b 1e 91 0d 85 f7 d5 c2 9c 41 34 bc 62 1c 1f aa 65 d7 f3 9c cb 82 26 0b 0b fe 19 09 e2 75 04 f1 3a ac a2 03 7c 72 0a f2 d0 61 30 83 a3 50 8f c0 86 59 0c fe 95 ec 0b aa c0 96 15 5f 04 37 41 31 1d 7f 93 bd 2d 52 37 b1 9e b4 7a c1 bb 1d db f6 0d 61 6d 51 4b cc 16 9e 57 a6 2b ec 57 ee c8 53 84 f7 ae 78 79 1a da d5 5a f8 de 15 37 99 e1 ce 8e 41 2a b0 9a c9 e3 f9 44 8f 6d 17 6d 9c 7e b7 ab cb a5 1e a0 99 14 da 4a c9 db Data Ascii: S<TI`SZ<\\|o\BO-&U<R]-8/xQrq,^j1>jS\|1?AXX-2,V{A4be&u:\|ra0PY_7A1-R7zamQKW+WSxyZ7ADmm~J
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: 78 f7 44 37 56 09 d5 74 a1 4a 6f c7 56 96 fb 05 3e 29 db 7b 26 b4 46 bb 3b 52 2d 4b 64 31 c5 52 1c 49 92 da f0 a3 d5 2e ef 44 58 7d 9a fc 21 a2 25 f3 90 e0 49 f7 c4 c1 53 45 fa 05 b5 e9 cf 17 4d 3d 99 d2 7a 61 94 7a 88 32 2b a2 0e 2d d5 d5 e7 40 15 a3 bb 0c 40 1c ca ad bd 0c 84 e2 41 0a 3a f1 50 f6 0a 98 f7 55 8b 76 28 e0 e2 1f 07 ed 49 01 a7 35 5c 88 7e da a2 d7 a9 13 39 05 be 61 e9 01 9a 9c c6 70 d4 5c 19 66 41 41 84 87 96 73 b1 5c 48 cb 19 59 d2 c0 d9 32 e9 c0 94 51 e0 0e 83 cf 1d ea f6 52 57 07 ac c7 86 e5 6e 6f ab 85 43 20 07 ee cb 90 b0 d0 c4 f4 9f 57 b4 33 b6 c9 29 2c 2e 97 29 1c 1a 8a 6b 00 d2 05 72 26 23 86 ed f8 a1 84 57 6a 54 c3 a1 6b 07 0e 10 51 10 97 78 23 28 58 20 eb 81 95 1b 4f 4b 0e bc 99 92 50 3c d4 e4 79 39 33 7b 29 8a f1 d3 54 00 18 c0 Data Ascii: xD7VtJoV>){&F;R-Kd1RI.DX}!%ISEM=zaz2+-@@A:PUv(I5\~9ap\fAAs\HY2QRWnoC W3),.)kr&#WjTkQx#(X OKP<y93{)T
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: 54 be 86 5f 7d 2d 01 a3 bd 5e 39 ce f4 6f 88 76 f4 66 c2 d2 4c b9 30 0a bc 44 d5 b4 cf 17 e6 da ba 78 ed cd ae ff 65 bc 05 e5 19 25 d5 58 d7 76 77 35 03 7d c2 e9 b1 42 60 52 cc 7d 3b a5 6f 3f 7c 19 62 cd b9 81 89 b6 10 8f fb a9 ba 97 2f 40 6b 70 e5 ab cf fd b0 31 32 04 fb b6 95 18 14 94 c4 b3 e4 f0 a1 68 e3 fe 7c a1 0b 58 4d 97 54 fb 00 3d c9 f6 80 99 f9 24 2c 6c ef 44 e8 84 f3 aa c5 02 45 ff 15 d5 8b 14 76 5d 13 d8 17 b3 49 37 30 b2 49 0d e2 8c b9 12 b6 24 ea f0 15 1d db 6d ae 5d dd 8a 7f ac 01 41 39 4c fe d7 d0 c2 de 52 15 ab ec 09 90 01 7d 9d cc 9f f4 c8 43 a4 c9 50 1e db db 27 ba 51 bf 02 ce 6c f1 b2 50 73 c5 f7 81 ca 34 88 62 0a 5b f0 63 b0 61 79 45 36 de 41 6a dc 51 ac 3a be bd 88 d4 2b 05 38 d4 c7 2b 14 be bd 4d 2b a9 34 2f b8 b2 86 cf 2c 0d 84 24 Data Ascii: T_}-^9ovfL0Dxe%Xvw5}B`R};o?\|b/@kp12h\|XMT=$,lDEv]I70I$m]A9LR}CP'QlPs4b[cayE6AjQ:+8+M+4/,$
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: 86 f8 9e 9e 50 d9 86 0b 45 5b 46 76 cf 2e 32 99 2a 50 48 fd cd d6 ff b2 75 d9 5f 6c 9f 16 88 88 37 51 c4 d1 bf d5 06 db ea fe 69 2b 20 86 fc b3 26 b4 e1 70 e1 7b ee 1d f1 9e 86 54 39 3f 1c 52 b6 51 19 0e 47 61 10 45 43 76 48 1c 2e 62 d7 8b 86 0c 83 c3 11 ba 82 0d 87 3f 20 c5 51 77 1b e1 ec 87 f1 55 31 04 2b 60 4f 7c 97 da 01 1a 7b f5 87 ce bb 91 90 6f be 2b 6b 03 0f c1 6c c3 e4 02 42 66 6b 90 91 dc fe 5c 90 f0 a9 47 0d 8f 83 b0 01 94 26 34 9d 1b 25 79 26 5f 85 69 79 2a f7 40 3d a1 a8 42 fc 58 40 fc e3 aa 0a c1 3f 2f 85 35 bb 38 05 d0 d1 4b 81 8c 11 11 1f b2 a1 36 99 79 97 8d f7 48 cd cf 98 f0 ac 1b 85 d2 c2 e4 df 2b bd 62 13 73 df 9c fa 6b 8c 05 13 a3 31 2a 52 a9 b6 78 0f c4 b9 c3 2b 10 f5 19 ba 57 e5 6d 02 d3 8f 68 43 40 df bc fe 50 db d1 f7 c8 6f af da Data Ascii: PE[Fv.2PHu_l7Qi+ &p{T9?RQGaECvH.b? QwU1+`O\|{o+klBfk\G&4%y&_iy@=BX@?/58K6yH+bsk1*Rx+WmhC@Po
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: ac 32 c4 0c 60 85 2a 13 26 5e 00 a0 a5 f4 0a af 84 a2 84 52 da 8e 06 1d c0 3a a0 26 c2 87 c0 d6 70 a4 ad de b9 d0 a0 73 5c ee ed 99 7b bf 25 44 a3 f5 35 53 ab 68 29 3a fd 1f a7 fc bd 51 fe 02 8b 80 d3 13 34 74 16 3c 90 f0 c0 a1 9a 1c 39 f2 c7 bc 08 92 f1 9b 4d 5f 74 d7 fe 0d 65 99 b3 ab 28 cb 7e e5 67 b0 13 f0 57 a5 09 c6 b7 56 a7 ab e3 a7 ed d1 4a 19 c5 bf b0 8f 16 3b 66 f1 f2 2f 58 19 a4 ae cd c8 2c 70 bf 93 6b 6d 27 b3 3d cf 7d 7b ee 33 9b ca a9 6f f2 f0 3e c0 25 39 6f de 52 38 fb 0b 7b 2f 1f 60 cb 87 ad 09 b6 50 de 80 90 ef e7 be d8 38 05 0b a7 61 0f 44 3b 3b 9a a5 ed 20 bd 9a 73 5f 2a 03 30 d3 13 1c 04 76 b4 81 66 3d a0 f9 28 cd ba 92 3a 7b e7 ba 6f 88 2d 97 ae 13 11 71 0d f7 c0 52 b9 5c 1a f1 f5 03 fb ff 02 c4 77 34 07 e2 98 d1 54 b7 df 46 42 ec cf Data Ascii: 2`&^R:&ps\{%D5Sh):Q4t<9M_te(~gWVJ;f/X,pkm'=}{3o>%9oR8{/`P8aD;; s_0vf=(:{o-qR\w4TFB
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: 30 79 73 a2 f9 cc 66 52 5e d3 11 db 33 52 3d f1 9a 46 6d 43 de ec 8c ee d6 cc e7 d1 ce 0b df 48 69 e2 5e 2f b9 35 a2 f4 17 62 00 85 14 11 c4 a9 6a 26 2d 15 af 56 0a b2 3f 28 b3 96 d5 3c 24 a5 7e 52 b7 8a 0c c6 30 6f 9b 21 91 86 0a 5f 61 fb c6 46 be ce f6 2d 1b d2 f0 0f 79 a9 48 7b cb 46 2a f3 55 9d fa 9a 3b 82 9c 07 0f c9 99 74 6c 61 eb b8 51 6f a1 e1 75 7a 3f d2 a8 33 ab b8 f1 52 85 6f 9f 28 24 99 39 9d 68 9a 61 e6 a9 54 31 0d 56 5d df 4d c5 9d 1d 64 e3 4f 68 4c 1b a6 b8 33 37 c3 ae c7 3b 5a 45 db 09 2d cc 5f 07 b5 c4 3e 69 06 62 ce f5 3f f0 c8 b7 5c a6 fb 76 a9 51 30 1e 20 75 17 20 06 ce 60 ba 8a 73 7b c8 0e 91 c0 ef 92 d8 cb 68 81 e9 4b eb 2b 0c 09 6d 7a 29 28 99 25 7d 6e f3 16 07 08 e1 05 a4 d5 60 38 8b ff 9d e1 48 46 3b 62 b2 85 a7 8f e4 88 16 ab bc Data Ascii: 0ysfR^3R=FmCHi^/5bj&-V?(<$~R0o!_aF-yH{F*U;tlaQouz?3Ro($9haT1V]MdOhL37;ZE-_>ib?\vQ0 u `s{hK+mz)(%}n`8HF;b
2024-07-03 07:23:07 UTC	1378	IN	Data Raw: 44 02 a4 2b a0 08 6b b4 92 1b d1 c8 36 4f 34 ff a4 10 f3 e0 d0 0a 32 fd 38 20 cc de 80 3c ba 18 ef 46 58 fd e3 9a 45 b1 0b b6 a2 82 63 91 ce e1 31 ea 3a 8d da 46 51 47 8f 00 b2 12 9c 72 2d 84 ac ae 67 9f 9b ff 1c 48 39 89 86 b9 57 a5 a2 54 b7 f8 f4 96 17 de 38 c2 96 cb 91 82 36 5f 17 1c 68 dd b8 0b ab a5 47 86 8b 96 6a de 39 48 1c 97 e7 c4 ec af 3d f9 bc 64 6f c0 4e 3e 79 a1 df 21 8a b4 ff a8 6e eb 36 90 2e c1 2d dc 60 5e 62 e7 fe a5 8f d2 a8 29 c2 ac a3 92 a7 be 67 c5 74 f7 a7 c7 27 37 79 13 d4 35 cd 62 b6 1d 34 59 a4 b9 40 a1 80 66 90 44 a5 33 6c e7 d5 1a 1a 37 70 e6 17 2c 60 ec 57 58 b0 3e b2 95 8b 9f fc fb b2 63 ec be 36 76 f8 73 96 0e f5 93 95 fa c9 7a 84 c6 0b 9b 52 cb b0 c6 e0 44 bf c8 80 72 42 21 ad 7b 6b 61 61 05 ca 8b 3c 30 9f 33 c0 b0 41 43 fb Data Ascii: D+k6O428 <FXEc1:FQGr-gH9WT86_hGj9H=doN>y!n6.-`^b)gt'7y5b4Y@fD3l7p,`WX>c6vszRDrB!{kaa<03AC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	157.240.252.13	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:06 UTC	539	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:07 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' 'unsafe-eval' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-07-03 07:23:07 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-07-03 07:23:07 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-07-03 07:23:07 UTC	14606	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-07-03 07:23:07 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 73 65 6c 65 63 74 6f 72 3b 62 3d 64 28 62 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 3f 7b 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3a 62 2c 73 65 6c 65 63 74 6f 72 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 69 66 28 Data Ascii: unction h(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.parameter_type;a=a.selector;b=d(b);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=null&&a!=null?{parameter_type:b,selector:a}:null}function j(a){if(
2024-07-03 07:23:07 UTC	16384	IN	Data Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 64 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 65 3d 64 2e 63 6f 6e 66 69 67 4c 6f 61 64 65 64 2c 6b 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 69 72 Data Ascii: sOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsEventValidation"),c=f.getFbeventsModules("SignalsFBEventsConfigStore"),d=f.getFbeventsModules("SignalsFBEventsEvents"),e=d.configLoaded,k=f.getFbeventsModules("SignalsFBEventsFir
2024-07-03 07:23:07 UTC	16384	IN	Data Raw: 61 66 65 50 69 78 65 6c 2c 6a 3d 67 2e 75 6e 73 61 66 65 54 61 72 67 65 74 2c 6b 3d 65 28 68 2c 63 29 2c 6c 3d 6a 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 62 28 6a 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6b 21 3d 6e 75 6c 6c 26 26 6c 21 3d 6e 75 6c 6c 3f 5b 7b 70 69 78 65 6c 3a 6b 2c 74 61 72 67 65 74 3a 6c 7d 5d 3a 6e 75 6c 6c 7d 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 67 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 54 69 6d 69 6e 67 73 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 Data Ascii: afePixel,j=g.unsafeTarget,k=e(h,c),l=j instanceof Node?b(j):null;return k!=null&&l!=null?[{pixel:k,target:l}]:null}l.exports=new a(g)})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGetTimingsEvent",function(){return function(g,h
2024-07-03 07:23:07 UTC	1777	IN	Data Raw: 61 67 72 61 6d 2e 63 6f 6d 2f 74 72 2f 22 2c 41 45 4d 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 61 67 67 72 65 67 61 74 65 64 2d 65 76 65 6e 74 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2f 22 2c 47 50 53 5f 45 4e 44 50 4f 49 4e 54 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 73 61 6e 64 62 6f 78 2f 70 69 78 65 6c 2f 72 65 67 69 73 74 65 72 2f 74 72 69 67 67 65 72 2f 22 7d 3b 6a 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c Data Ascii: agram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/"};j.exports=a})();return j.exports}(a,b,c,d)});f.ensureModuleRegistered("Signal
2024-07-03 07:23:07 UTC	14607	IN	Data Raw: 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 21 31 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 66 3d 65 3d 3d 21 30 26 26 64 2e 69 73 4f 70 74 65 64 4f 75 74 28 61 2c 63 29 3b 66 7c 7c 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 30 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 74 4f 75 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 62 28 74 68 69 73 2e 5f 67 65 74 4f 70 74 73 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 64 2e 5f 73 65 74 4f 70 74 28 61 2c 62 2c 21 31 29 7d Data Ascii: uments.length>2&&arguments[2]!==void 0?arguments[2]:!1;b(this._getOpts(c),function(b){var f=e==!0&&d.isOptedOut(a,c);f\|\|d._setOpt(a,b,!0)});return this}},{key:"optOut",value:function(a,c){var d=this;b(this._getOpts(c),function(b){return d._setOpt(a,b,!1)}
2024-07-03 07:23:07 UTC	16384	IN	Data Raw: 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 62 2e 42 41 54 43 48 49 4e 47 5f 45 58 50 45 52 49 4d 45 4e 54 3b 62 2e 53 45 4e 44 5f 58 48 52 5f 45 58 50 45 52 49 4d 45 4e 54 3b 67 2e 74 6f 70 21 3d 3d 67 3b 66 75 6e 63 74 69 6f 6e 20 72 28 62 29 7b 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 61 28 7b 7d 2c 62 2e 63 75 73 74 6f 6d 44 61 74 61 29 3b 62 2e 74 69 6d 65 73 74 61 6d 70 3d 6e 65 77 20 44 61 74 65 28 29 2e 76 61 6c 75 65 4f 66 28 29 3b 76 61 72 20 66 3d 6e 75 6c 6c 3b 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 21 3d 6e 75 6c 6c 26 26 28 66 3d 62 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 67 65 74 28 22 65 69 64 22 29 29 3b 69 66 28 66 Data Ascii: f.getFbeventsModules("SignalsFBEventsExperimentNames");b.BATCHING_EXPERIMENT;b.SEND_XHR_EXPERIMENT;g.top!==g;function r(b){b.customData=a({},b.customData);b.timestamp=new Date().valueOf();var f=null;b.customParams!=null&&(f=b.customParams.get("eid"));if(f
2024-07-03 07:23:07 UTC	16384	IN	Data Raw: 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 7c 7c 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 64 28 61 29 3d 3d 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 72 65 74 75 72 6e 20 66 28 61 29 3d 3d 3d 21 30 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 69 66 28 6a 28 61 29 3d 3d 3d Data Ascii: a==="number"\|\|typeof a==="string"&&/^\d+$/.test(a)}function f(a){return a!=null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&d(a)===!1}function j(a){return f(a)===!0&&Object.prototype.toString.call(a)==="[object Object]"}function k(a){if(j(a)===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	15.197.193.217	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:06 UTC	621	OUT	GET /track/pxl/?adv=ncocrig&ct=0:fnthtk9&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:07 UTC	689	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 07:23:07 GMT Content-Length: 0 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 set-cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; expires=Thu, 03 Jul 2025 07:23:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIgoLY3oChiz0QBRgFKAEyCwjq3a7z9s6NPRAFQg8iDQgBEgkKBXRpZXIzEAFaB25jb2NyaWdgAXIGZ29vZ2xl; expires=Thu, 03 Jul 2025 07:23:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	173.194.76.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:07 UTC	627	OUT	GET /gp/p/js/pay.js HTTP/1.1 Host: pay.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:07 UTC	2275	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Expires: Wed, 03 Jul 2024 07:23:07 GMT Date: Wed, 03 Jul 2024 07:23:07 GMT Cache-Control: private, max-age=600 P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-kPFKwuZzJUUKjlkpz3bdTA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendHttp/cspreport Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/gp/p/_/InstantbuyFrontendHttp/web-reports?context=eJzjitHikmJw1ZBiWF4qxVBRK8WwZKYUg2fNTabOPTeZJL6-ZNIA4sPR01md0mewBgGxT_0M1hggbr15jnUqEM8NOM8annmeNenfedYiIP7IcZF1ScRF1kOJF1mFeDhu_5i8hU1gx_OPbYxK2kn5hfGZecUliXklSaWVaUX5eSWpeSnFqUVlqUXxRgZGJgbmBkZ6BibxBQYAq9g7yw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88; expires=Thu, 02-Jan-2025 07:23:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 37 66 66 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 27 64 65 6e 79 6c 69 73 74 65 64 44 6f 6d 61 69 6e 73 48 61 73 68 65 64 56 61 6c 75 65 4c 69 73 74 46 6f 72 47 70 61 79 42 75 74 74 6f 6e 57 69 74 68 43 61 72 64 49 6e 66 6f 27 5d 20 3d 20 5b 2d 37 31 38 35 38 33 34 36 36 2c 2d 36 35 31 34 30 37 31 37 33 2c 31 35 30 31 30 35 33 30 32 30 2c 31 32 37 30 39 33 31 37 39 33 2c 31 38 37 38 39 36 35 32 30 33 2c 31 33 35 39 39 37 39 33 31 31 2c 2d 31 35 35 36 33 39 36 35 39 39 2c 2d 39 32 39 38 32 30 32 39 30 2c 2d 31 39 39 33 39 36 36 35 35 38 2c 39 36 39 33 36 39 34 38 37 5d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 27 77 68 69 74 65 6c 69 73 74 65 64 44 6f 6d 61 69 6e 73 48 61 Data Ascii: 7ff2(function(){window['denylistedDomainsHashedValueListForGpayButtonWithCardInfo'] = [-718583466,-651407173,1501053020,1270931793,1878965203,1359979311,-1556396599,-929820290,-1993966558,969369487];}).call(this);(function(){window['whitelistedDomainsHa
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 65 6e 74 52 65 71 75 65 73 74 22 5d 2c 63 3d 77 69 6e 64 6f 77 7c 7c 61 3b 62 5b 30 5d 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 62 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 62 2e 6c 65 6e 67 74 68 26 26 28 64 3d 62 2e 73 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 21 30 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 Data Ascii: entRequest"],c=window\|\|a;b[0]in c\|\|typeof c.execScript=="undefined"\|\|c.execScript("var "+b[0]);for(var d;b.length&&(d=b.shift());)b.length?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=!0;}).call(this);(function(){/* Copyright The Closure Librar
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 62 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 62 2e 6c 65 6e 67 74 68 26 26 28 64 3d 62 2e 73 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 21 30 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 Data Ascii: peof c.execScript=="undefined"\|\|c.execScript("var "+b[0]);for(var d;b.length&&(d=b.shift());)b.length?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=!0;}).call(this);(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier:
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 69 6e 20 63 7c 7c 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 62 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 62 2e 6c 65 6e 67 74 68 26 26 28 64 3d 62 2e 73 68 69 66 74 28 29 29 3b 29 62 2e 6c 65 6e 67 74 68 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 21 30 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e Data Ascii: in c\|\|typeof c.execScript=="undefined"\|\|c.execScript("var "+b[0]);for(var d;b.length&&(d=b.shift());)b.length?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=!0;}).call(this);(function(){/* Copyright The Closure Library Authors. SPDX-License-Iden
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 71 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 62 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 0a 76 61 72 20 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 74 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 Data Ascii: t(" "),c=0;c<b.length;c++){var d=q[b[c]];typeof d==="function"&&typeof d.prototype[a]!="function"&&ba(d.prototype,a,{configurable:!0,writable:!0,value:function(){return fa(aa(this))}})}return a},"es6");var fa=function(a){a={next:a};a[t(r.Symbol,"iterator
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 0a 21 31 7d 68 3f 74 68 69 73 2e 73 63 28 67 29 3a 74 68 69 73 2e 41 62 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 6b 62 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 78 63 28 68 2c 67 29 3a 74 68 69 73 2e 41 62 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b Data Ascii: (typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.sc(g):this.Ab(g)}};e.prototype.sc=function(g){var h=void 0;try{h=g.then}catch(k){this.kb(k);return}typeof h=="function"?this.xc(h,g):this.Ab(g)};e.prototype.k
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 74 75 72 6e 20 68 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 67 21 3d 3d 6e 75 6c 6c 7c 7c 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6b 3d 6e 65 77 20 61 28 5b 5b 67 2c 32 5d 2c 5b 68 2c 33 5d 5d 29 3b 69 66 28 6b 2e 67 65 74 28 67 29 21 3d 32 7c 7c 6b 2e 67 65 74 28 68 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6b 2e 64 65 6c 65 74 65 28 67 29 3b 6b 2e 73 65 74 28 68 2c 34 29 3b 72 65 74 75 72 6e 21 6b 2e 68 61 73 28 67 29 26 26 6b 2e 67 65 74 28 68 29 3d 3d 34 7d 63 61 74 63 68 28 6c 29 7b 72 65 74 Data Ascii: turn h==="object"&&g!==null\|\|h==="function"}if(function(){if(!a\|\|!Object.seal)return!1;try{var g=Object.seal({}),h=Object.seal({}),k=new a([[g,2],[h,3]]);if(k.get(g)!=2\|\|k.get(h)!=3)return!1;k.delete(g);k.set(h,4);return!k.has(g)&&k.get(h)==4}catch(l){ret
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3b 21 28 6e 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6e 3d 0a 6e 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6e 5b 31 5d 2c 6e 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 74 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d Data Ascii: function(){return e(this,function(h){return h.value})};c.prototype.forEach=function(h,k){for(var l=this.entries(),n;!(n=l.next()).done;)n=n.value,h.call(k,n[1],n[0],this)};c.prototype[t(r.Symbol,"iterator")]=c.prototype.entries;var d=function(h,k){var l=
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 28 74 68 69 73 2b 22 22 29 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 21 3d 3d 2d 31 7d 7d 2c 22 65 73 36 22 29 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 79 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 63 Data Ascii: gument to String.prototype.includes must not be a regular expression");return(this+"").indexOf(b,c\|\|0)!==-1}},"es6");/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var y=this\|\|self,ra=function(a,b){a=a.split(".");var c
2024-07-03 07:23:07 UTC	2275	IN	Data Raw: 6e 74 73 2c 32 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 75 61 28 61 29 7c 7c 43 61 28 22 45 78 70 65 63 74 65 64 20 6f 62 6a 65 63 74 20 62 75 74 20 67 6f 74 20 25 73 3a 20 25 73 2e 22 2c 5b 73 61 28 61 29 2c 61 5d 2c 62 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 29 7d 3b 76 61 72 20 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 52 62 3d 61 3d 3d 3d 47 61 26 26 62 7c 7c 22 22 3b 74 68 69 73 2e 57 62 3d 48 61 7d 3b 49 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 52 62 7d 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: nts,2));return a},Fa=function(a,b,c){ua(a)\|\|Ca("Expected object but got %s: %s.",[sa(a),a],b,Array.prototype.slice.call(arguments,2))};var Ia=function(a,b){this.Rb=a===Ga&&b\|\|"";this.Wb=Ha};Ia.prototype.toString=function(){return this.Rb};var A=function(a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49761	87.248.119.251	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:07 UTC	521	OUT	GET /wi/ytc.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:07 UTC	946	IN	HTTP/1.1 200 OK x-amz-id-2: 0hT3hEMhA5GM7KLeI4rRlMhqXuol0JnxBVD9yMl+it0o/hkT/u4T4XOZdbkqwMTbXq+/QwkT7Ro= x-amz-request-id: 61ZN0CP988QR4WKN Date: Wed, 03 Jul 2024 06:30:21 GMT Last-Modified: Mon, 26 Jun 2023 09:26:35 GMT x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle" ETag: "5c6ed25dce803fd84288922b8928409e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=3600 x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 18187 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 3167 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 41 74 28 61 29 29 3e 3d 35 36 33 32 30 26 26 6f 3c 3d 35 37 33 34 33 29 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 33 39 2c 72 5b 6e 2b 3d 31 5d 3d 31 39 31 2c 72 5b 6e 2b 3d 31 5d 3d 31 38 39 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 61 2b 3d 31 2c 28 69 3d 31 30 32 34 2a 28 69 2d 35 35 32 39 36 29 2b 6f 2d 35 36 33 32 30 2b 36 35 35 33 36 29 3e 36 35 35 33 35 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 34 30 7c 69 3e 3e 3e 31 38 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 31 32 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 36 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 36 33 26 69 3b 63 6f 6e 74 69 6e 75 65 7d 7d 69 3c 3d 31 32 37 3f 72 5b 6e 2b 3d 31 5d 3d 30 7c 69 3a 69 3c 3d 32 30 34 37 3f 28 72 5b 6e 2b 3d 31 5d 3d 31 39 32 7c 69 3e 3e 3e 36 2c 72 Data Ascii: At(a))>=56320&&o<=57343)){r[n+=1]=239,r[n+=1]=191,r[n+=1]=189;continue}if(a+=1,(i=1024*(i-55296)+o-56320+65536)>65535){r[n+=1]=240\|i>>>18,r[n+=1]=128\|i>>>12&63,r[n+=1]=128\|i>>>6&63,r[n+=1]=128\|63&i;continue}}i<=127?r[n+=1]=0\|i:i<=2047?(r[n+=1]=192\|i>>>6,r
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 7b 69 66 28 21 74 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 66 72 6f 6d 3a 20 77 68 65 6e 20 70 72 6f 76 69 64 65 64 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 66 6f 72 28 76 61 72 20 73 2c 75 3d 72 28 69 2e 6c 65 6e 67 74 68 29 2c 64 3d 74 28 6e 29 3f 4f 62 6a 65 63 74 28 6e 65 77 20 6e 28 75 29 29 3a 6e 65 77 20 41 72 72 61 79 28 75 29 2c 63 3d 30 3b 63 3c 75 3b 29 73 3d 69 5b 63 5d 2c 64 5b 63 5d 3d 61 3f 76 Data Ascii: arguments[1]:void 0;if(void 0!==a){if(!t(a))throw new TypeError("Array.from: when provided, the second argument must be a function");arguments.length>2&&(o=arguments[2])}for(var s,u=r(i.length),d=t(n)?Object(new n(u)):new Array(u),c=0;c<u;)s=i[c],d[c]=a?v
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 63 68 28 65 29 7b 7d 69 66 28 6e 3d 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 62 72 65 61 6b 3b 6e 3d 6e 2e 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 74 7d 28 74 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 76 6f 69 64 20 76 28 65 29 3b 76 61 72 20 6f 3d 7b 7d 2c 61 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 3b 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3d 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 77 69 6e 64 6f 77 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 7b 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 61 2c 76 65 72 73 69 6f 6e 3a 69 2c 63 61 6c 6c 49 64 3a 72 7d 7d 3b 6e 5b 72 5d 3d 6f 2c 6c 28 74 2c 73 2c 22 2a 22 29 Data Ascii: ch(e){}if(n===window.top)break;n=n.parent}return t}(t);if(!i)return void v(e);var o={},a=Math.random()+"";"__tcfapiLocator"===t?function(e,t,n,r){window[e]=function(e,i,o,a){var s={__tcfapiCall:{command:e,parameter:a,version:i,callId:r}};n[r]=o,l(t,s,"*")
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 6e 67 3a 6e 2e 75 73 70 53 74 72 69 6e 67 2c 69 73 4f 61 74 68 46 69 72 73 74 50 61 72 74 79 3a 6e 2e 69 73 4f 61 74 68 46 69 72 73 74 50 61 72 74 79 7d 2c 21 30 29 3a 65 28 76 6f 69 64 20 30 2c 21 31 29 7d 29 29 29 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3b 6d 28 22 5f 5f 74 63 66 61 70 69 22 2c 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 2c 22 5f 5f 74 63 66 61 70 69 43 61 6c 6c 22 2c 22 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 3f 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3f 28 68 28 65 29 2c 76 28 22 5f 5f 74 63 66 61 70 69 22 29 29 3a 67 28 29 7d 2c 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 6f 69 64 20 30 2c 21 Data Ascii: ng:n.uspString,isOathFirstParty:n.isOathFirstParty},!0):e(void 0,!1)})))},y=function(){var e,t;m("__tcfapi","__tcfapiLocator","__tcfapiCall","__tcfapiReturn"),window.__tcfapi?(e=function(e,t){t?(h(e),v("__tcfapi")):g()},t=setTimeout((function(){e(void 0,!
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 3a 22 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 2d 4a 61 6e 2d 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 22 2c 6e 3d 65 2e 6e 61 6d 65 2b 22 3d 22 2b 65 2e 76 61 6c 75 65 2b 74 2b 22 3b 20 70 61 74 68 3d 22 2b 65 2e 70 61 74 68 2b 28 22 22 21 3d 3d 65 2e 64 6f 6d 61 69 6e 3f 22 3b 20 64 6f 6d 61 69 6e 3d 2e 22 2b 65 2e 64 6f 6d 61 69 6e 3a 22 22 29 2b 22 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 7d 28 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 74 2c 65 78 70 69 72 79 4f 66 66 73 65 74 3a 6e 2c 64 6f 6d 61 69 6e 3a 61 28 29 2c 70 61 74 68 3a 22 2f 22 7d 29 3b 76 61 72 20 72 3d 7b 69 64 3a 74 2c 74 69 6d 65 73 74 61 6d 70 3a 28 6e 65 77 20 44 Data Ascii: .toGMTString():"; expires=Thu, 01-Jan-1970 00:00:01 GMT",n=e.name+"="+e.value+t+"; path="+e.path+(""!==e.domain?"; domain=."+e.domain:"")+"; SameSite=Lax",document.cookie=n}({name:e,value:t,expiryOffset:n,domain:a(),path:"/"});var r={id:t,timestamp:(new D
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 29 7d 7d 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 67 65 2e 70 6c 61 69 6e 41 75 69 64 73 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 66 72 6f 6d 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 5b 74 5d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 7d 29 29 3b 67 65 2e 68 61 73 68 65 64 41 75 69 64 73 5b 6e 5d 3d 72 2e 6a 6f 69 6e 28 22 22 29 2c 74 2b 2b 7d 67 65 2e 61 75 69 64 73 41 72 65 48 61 73 68 65 64 3d 21 30 2c 79 65 28 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 Data Ascii: )}}var H=function(e){var t=0;for(var n in ge.plainAuids){var r=Array.from(new Uint8Array(e[t])).map((function(e){return e.toString(16).padStart(2,"0")}));ge.hashedAuids[n]=r.join(""),t++}ge.auidsAreHashed=!0,ye()},M=function(e,t){var n=function(n){t.push(
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 3b 72 65 74 75 72 6e 28 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 7c 7c 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2e 73 75 62 74 6c 65 2e 64 69 67 65 73 74 28 22 53 48 41 2d 32 35 36 22 2c 74 29 7d 3b 76 61 72 20 56 2c 7a 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 69 2f 63 6f 6e 66 69 67 2f 22 2b 65 2b 22 2e 6a 73 6f 6e 22 3b 74 2e 6f 70 65 6e 28 22 47 45 54 22 2c 6e 2c 21 30 29 2c 74 2e 74 69 6d 65 6f 75 74 3d 32 65 33 2c 74 2e 6f 6e 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 71 2d 2d 2c 79 65 28 29 7d 2c 74 2e 73 65 6e 64 28 29 2c 74 2e Data Ascii: ;return(window.crypto\|\|window.msCrypto).subtle.digest("SHA-256",t)};var V,z=!1;function Y(e){if(void 0!==e){var t=new XMLHttpRequest,n="https://s.yimg.com/wi/config/"+e+".json";t.open("GET",n,!0),t.timeout=2e3,t.ontimeout=function(e){q--,ye()},t.send(),t.
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 6d 61 69 6c 26 26 28 74 2e 75 73 65 72 45 6d 61 69 6c 3d 67 65 2e 65 6d 61 69 6c 73 5b 74 2e 70 69 78 65 6c 49 64 5d 29 2c 74 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 26 26 28 49 65 28 74 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 29 7c 7c 64 65 6c 65 74 65 20 74 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 29 7d 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 6e 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 2c 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 5a 28 74 29 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 5b 72 5d 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 6e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 3b Data Ascii: mail&&(t.userEmail=ge.emails[t.pixelId]),t.userHashedEmail&&(Ie(t.userHashedEmail)\|\|delete t.userHashedEmail)}var $=function(e,t){var n=function(n){t.push(n.target.result),t.length===e.length&&Z(t)};for(var r in e)e[r].oncomplete=n},Z=function(e){var t=0;
2024-07-03 07:23:07 UTC	1300	IN	Data Raw: 6f 6d 70 6f 6e 65 6e 74 28 70 61 72 73 65 49 6e 74 28 74 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 36 30 2c 31 30 29 2b 28 74 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3c 74 2e 79 77 61 53 74 61 6e 64 61 72 64 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 3f 22 64 22 3a 22 22 29 29 29 2c 65 2e 6a 6f 69 6e 28 22 22 29 7d 28 29 29 2c 72 2e 6a 6f 69 6e 28 22 22 29 7d 76 61 72 20 72 65 3d 5b 7b 6e 61 6d 65 3a 22 74 65 61 6c 69 75 6d 22 2c 69 6e 74 65 72 66 61 63 65 3a 22 75 74 61 67 5f 64 61 74 61 22 7d 2c 7b 6e 61 6d 65 3a 22 67 74 6d 22 2c 69 6e 74 65 72 66 61 63 65 3a 22 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 22 7d 2c 7b 6e 61 6d 65 3a 22 61 64 6f 62 65 22 2c 69 6e 74 65 72 66 61 63 65 3a 22 5f 73 61 74 65 Data Ascii: omponent(parseInt(t.getTimezoneOffset()/60,10)+(t.getTimezoneOffset()<t.ywaStandardTimezoneOffset?"d":""))),e.join("")}()),r.join("")}var re=[{name:"tealium",interface:"utag_data"},{name:"gtm",interface:"google_tag_manager"},{name:"adobe",interface:"_sate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49765	142.250.186.66	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:07 UTC	1391	OUT	GET /td/rul/11154426359?random=1719991386424&cv=11&fst=1719991386424&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:07 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 07:23:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 03-Jul-2024 07:38:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:07 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-03 07:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49764	142.250.186.66	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:07 UTC	1453	OUT	GET /td/rul/11154426359?random=1719991386522&cv=11&fst=1719991386522&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:07 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 07:23:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 03-Jul-2024 07:38:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:07 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-03 07:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	216.58.206.66	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:07 UTC	1267	OUT	GET /pagead/viewthroughconversion/11154426359/?random=1719991386424&cv=11&fst=1719991386424&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:07 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 07:23:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 03-Jul-2024 07:38:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:07 UTC	548	IN	Data Raw: 61 37 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a7e(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-03 07:23:07 UTC	1390	IN	Data Raw: 20 67 3f 21 21 74 26 26 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 Data Ascii: g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("E
2024-07-03 07:23:07 UTC	755	IN	Data Raw: 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 74 61 67 5f 65 78 70 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 65 63 75 72 65 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 25 32 46 64 6f 6e 61 74 65 25 32 46 70 32 70 2d 32 34 30 37 30 32 2d 6a 62 74 69 25 33 46 72 65 66 63 6f 64 65 25 33 44 74 61 5f 63 32 25 32 36 72 65 66 63 6f 64 65 32 77 25 33 44 35 77 4b 67 64 35 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 42 69 64 65 6e 25 32 30 56 69 63 74 6f 72 79 25 32 30 46 75 6e 64 25 32 30 25 45 32 25 Data Ascii: 1\x26dma\x3d0\x26tag_exp\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dBiden%20Victory%20Fund%20%E2%
2024-07-03 07:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49767	142.250.185.98	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:07 UTC	757	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:08 UTC	936	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610&google_tc= Date: Wed, 03 Jul 2024 07:23:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 442 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 03-Jul-2024 07:38:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:08 UTC	442	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 73 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm=&google_sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49768	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:07 UTC	1189	OUT	GET /api/cf/auth_token HTTP/1.1 Host: secure.actblue.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226; _gcl_au=1.1.227088756.1719991386
2024-07-03 07:23:08 UTC	737	IN	HTTP/1.1 200 OK Connection: close Content-Length: 102 Content-Type: application/json; charset=utf-8 Cache-Control: private, no-store Etag: W/"e9c00aa204c14925bb55795292241fd6" Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; domain=secure.actblue.com; path=/; expires=Wed, 03 Jul 2024 08:23:08 GMT; secure; HttpOnly; SameSite=Lax X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:08 GMT Via: 1.1 varnish Vary: Accept, Accept-Encoding X-Start: 2024-07-03 07:23:07.937 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:08 UTC	102	IN	Data Raw: 7b 22 61 75 74 68 54 6f 6b 65 6e 22 3a 22 6b 5a 78 4b 59 51 33 34 7a 49 58 76 31 49 67 61 43 47 47 6e 68 38 64 4f 6f 52 76 61 73 68 6f 34 58 74 67 62 4f 72 74 72 58 4f 51 4f 56 4d 70 31 4a 35 73 48 6d 4b 46 5f 46 67 73 51 78 7a 67 74 44 70 50 63 4e 55 7a 72 72 4e 4f 78 30 34 44 4a 69 59 53 49 41 67 22 7d Data Ascii: {"authToken":"kZxKYQ34zIXv1IgaCGGnh8dOoRvasho4XtgbOrtrXOQOVMp1J5sHmKF_FgsQxzgtDpPcNUzrrNOx04DJiYSIAg"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49769	151.101.1.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:08 UTC	716	OUT	GET /tagmanager/pptm.js?id=secure.actblue.com&t=xo&v=5.0.448&source=payments_sdk&client_id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&disableSetCookie=true&vault=false HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:08 UTC	1162	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13926 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: public, max-age=3600 Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-mtTKVYG6yl8o29/g3ro+fDJY39H4+wemreXOy3uVisqa44In' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; img-src * data:; object-src 'none'; font-src 'self' https://.paypalobjects.com https://.paypal.com; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://nexus.ensighten.com https://.google-analytics.com 'unsafe-inline' https://.qualtrics.com; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com; Content-Type: application/x-javascript; charset=utf-8 Etag: W/"3666-gVycMRQ+1H14N5XGmM2KBDA58QQ"
2024-07-03 07:23:08 UTC	1287	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 7b 7d 2c 74 3d 5b 7b 69 64 3a 22 61 6e 61 6c 79 74 69 63 73 2d 78 6f 22 2c 74 72 69 67 67 65 72 73 3a 5b 5d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 74 2e 71 3d 5b 5d 2c 74 2e 70 70 74 6d 54 72 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 72 79 7b 6e 3d 6e 7c 7c 7b 7d 2c 64 65 6c 65 74 65 28 74 3d 74 7c 7c 7b 7d 29 2e 75 73 65 72 54 79 70 65 2c 6f 2e 74 72 61 63 6b 28 65 2c 6f 2e 6f 62 6a 65 63 74 41 73 73 69 67 6e 28 74 2c 7b 70 61 67 65 54 79 70 65 3a 6f 2e 67 65 74 28 22 61 6e 61 6c 79 74 69 63 73 2d 69 64 22 29 2c 73 75 62 5f 63 6f 6d 70 6f 6e 65 6e 74 3a 22 73 6d 61 72 74 69 6e 63 65 6e 74 69 76 65 22 2c 69 74 65 6d 3a 6f 2e 67 65 74 28 22 70 70 74 6d 3a 63 6f Data Ascii: !function(e){var i={},t=[{id:"analytics-xo",triggers:[],run:function(r,o){t.q=[],t.pptmTrack=function(e,t,n){try{n=n\|\|{},delete(t=t\|\|{}).userType,o.track(e,o.objectAssign(t,{pageType:o.get("analytics-id"),sub_component:"smartincentive",item:o.get("pptm:co
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 29 72 65 74 75 72 6e 20 31 7d 7d 28 29 3f 6f 2e 69 6e 73 65 72 74 45 78 74 65 72 6e 61 6c 53 63 72 69 70 74 28 6e 2c 61 29 3a 61 28 29 2c 6f 2e 74 72 61 63 6b 28 22 70 61 67 65 56 69 65 77 22 2c 7b 66 6c 74 70 3a 22 61 6e 61 6c 79 74 69 63 73 22 2c 73 75 62 5f 63 6f 6d 70 6f 6e 65 6e 74 3a 22 61 6e 61 6c 79 74 69 63 73 22 2c 66 6c 61 67 5f 63 6f 6e 73 75 6d 65 3a 22 79 65 73 22 2c 73 75 62 66 65 61 74 75 72 65 31 3a 22 61 6e 61 6c 79 74 69 63 73 2d 78 6f 22 2c 70 61 67 65 54 79 70 65 3a 6f 2e 67 65 74 28 22 61 6e 61 6c 79 74 69 63 73 2d 69 64 22 29 2c 69 74 65 6d 3a 6f 2e 67 65 74 28 22 70 70 74 6d 3a 63 6f 6e 74 61 69 6e 65 72 49 64 22 29 2c 6d 72 69 64 3a 6f 2e 67 65 74 28 22 70 70 74 6d 3a 6d 65 72 63 68 61 6e 74 49 64 22 29 2c 63 6f 6e 74 65 78 74 3a Data Ascii: )return 1}}()?o.insertExternalScript(n,a):a(),o.track("pageView",{fltp:"analytics",sub_component:"analytics",flag_consume:"yes",subfeature1:"analytics-xo",pageType:o.get("analytics-id"),item:o.get("pptm:containerId"),mrid:o.get("pptm:merchantId"),context:
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 65 7d 6e 3d 69 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6f 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 28 6f 5b 74 5d 5b 31 5d 5b 65 5d 7c 7c 65 29 7d 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 72 2c 6f 2c 69 2c 61 29 7d 72 65 74 75 72 6e 20 69 5b 74 5d 2e 65 78 70 6f 72 74 73 7d 66 6f 72 28 76 61 72 20 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 2c 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 63 28 61 5b 65 5d 29 3b 72 65 74 75 72 6e 20 63 7d 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 Data Ascii: )).code="MODULE_NOT_FOUND",e}n=i[t]={exports:{}},o[t][0].call(n.exports,function(e){return c(o[t][1][e]\|\|e)},n,n.exports,r,o,i,a)}return i[t].exports}for(var s="function"==typeof require&&require,e=0;e<a.length;e++)c(a[e]);return c}({1:[function(e,t,n){fu
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 64 69 72 65 63 74 6f 72 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 64 69 72 65 63 74 6f 72 22 2c 6d 65 64 69 61 70 6c 61 79 65 72 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 6c 61 79 65 72 32 22 2c 70 64 66 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 66 22 2c 71 75 69 63 6b 74 69 6d 65 3a 22 76 69 64 65 6f 2f 71 75 69 63 6b 74 69 6d 65 22 2c 72 65 61 6c 3a 22 61 75 64 69 6f 2f 78 2d 70 6e 2d 72 65 61 6c 61 75 64 69 6f 2d 70 6c 75 67 69 6e 22 7d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 3b 69 66 28 74 26 26 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 28 74 3d 74 5b 65 5d 29 26 26 Data Ascii: =function(){return{director:"application/x-director",mediaplayer:"application/x-mplayer2",pdf:"application/pdf",quicktime:"video/quicktime",real:"audio/x-pn-realaudio-plugin"}},v=function(e){var t=window.navigator.mimeTypes;if(t&&t.length)return(t=t[e])&&
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 69 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 6f 28 69 29 29 26 26 28 69 3d 65 28 29 29 7d 2c 7b 22 2e 2f 70 70 74 6d 22 3a 36 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7b 75 72 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 22 2f 22 3d 3d 3d 28 65 3d 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 22 23 22 29 5b 30 5d 29 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3f 65 2e 73 75 62 73 74 72 28 30 2c 65 2e 6c 65 6e 67 74 68 2d 31 29 3a 65 7d 2c 68 6f 73 74 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 6c 6f 63 61 74 69 6f Data Ascii: ;"object"===(void 0===i?"undefined":o(i))&&(i=e())},{"./pptm":6}],3:[function(e,t,n){t.exports=function(t){return{url:function(){var e;return"/"===(e=t.location.href.split("#")[0])[e.length-1]?e.substr(0,e.length-1):e},hostname:function(){return t.locatio
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 72 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 Data Ascii: unction"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},o="function"==typeof Symbol&&"symbol"===r(Symbol.iterator)?function(e){return void 0===e?"undefined":r(e)}:function(e){return e&&"function"==typeof Symbol&&e.construc
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 72 20 6e 3d 21 31 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 2b 2b 72 29 22 73 6e 69 70 70 65 74 52 75 6e 22 3d 3d 3d 74 5b 72 5d 2e 65 76 65 6e 74 26 26 28 6e 3d 21 30 29 3b 6e 7c 7c 74 2e 70 75 73 68 28 65 29 7d 65 6c 73 65 20 74 3d 5b 65 5d 3b 72 65 74 75 72 6e 20 74 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 21 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 7c 7c 65 5b 6e 5d 2e 74 72 69 67 67 65 72 73 26 26 65 5b 6e 5d 2e 74 72 69 67 67 65 72 73 2e 6c 65 6e 67 74 68 7c 7c 28 65 5b 6e 5d 2e 74 72 69 67 67 65 72 73 3d 5b 74 5d 29 7d 2c 62 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 5e 70 70 Data Ascii: r n=!1,r=0;r<t.length;++r)"snippetRun"===t[r].event&&(n=!0);n\|\|t.push(e)}else t=[e];return t},y=function(e,t){for(var n in e)!e.hasOwnProperty(n)\|\|e[n].triggers&&e[n].triggers.length\|\|(e[n].triggers=[t])},b={get:function(t,n){return function(e){return/^pp
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 22 73 6e 69 70 70 65 74 52 75 6e 22 7d 2c 79 28 61 2e 74 61 67 73 2c 74 29 2c 61 2e 6c 6f 67 3d 75 28 61 2e 76 61 72 69 61 62 6c 65 73 2e 6c 6f 67 53 65 72 76 65 72 29 2c 61 2e 6f 6e 3d 77 28 65 2c 61 29 2c 61 2e 62 75 69 6c 74 69 6e 56 61 72 73 3d 70 28 65 29 2c 61 2e 73 68 6f 75 6c 64 54 61 67 54 72 69 67 67 65 72 3d 67 2e 63 72 65 61 74 65 53 68 6f 75 6c 64 54 61 67 54 72 69 67 67 65 72 28 61 2e 74 72 69 67 67 65 72 73 2c 61 2e 62 75 69 6c 74 69 6e 56 61 72 73 29 2c 61 2e 70 72 6f 63 65 73 73 45 76 65 6e 74 73 3d 64 28 61 29 2c 61 2e 74 72 69 67 67 65 72 54 61 67 73 3d 6d 28 65 2c 61 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 61 2e 6c 6f 67 28 22 60 70 70 74 6d 2e 69 6e 69 74 60 20 63 61 6c 6c 65 64 20 77 69 74 68 20 75 6e 64 65 66 69 6e 65 64 20 60 74 61 Data Ascii: "snippetRun"},y(a.tags,t),a.log=u(a.variables.logServer),a.on=w(e,a),a.builtinVars=p(e),a.shouldTagTrigger=g.createShouldTagTrigger(a.triggers,a.builtinVars),a.processEvents=d(a),a.triggerTags=m(e,a),void 0===n?a.log("`pptm.init` called with undefined `ta
2024-07-03 07:23:08 UTC	1378	IN	Data Raw: 62 5f 63 6f 6d 70 6f 6e 65 6e 74 2c 73 3a 65 2e 73 2c 69 74 65 6d 3a 65 2e 69 74 65 6d 2c 66 6c 74 70 3a 65 2e 66 6c 74 70 2c 6c 69 6e 6b 3a 65 2e 6c 69 6e 6b 2c 65 73 3a 65 2e 66 6c 61 76 6f 72 2c 63 75 73 74 3a 65 2e 63 75 73 74 2c 6d 72 69 64 3a 65 2e 6d 72 69 64 2c 65 72 70 67 3a 65 2e 65 72 70 67 2c 65 72 72 6f 72 5f 63 6f 64 65 3a 65 2e 65 72 72 6f 72 5f 63 6f 64 65 2c 78 65 3a 65 2e 78 65 2c 78 74 3a 65 2e 78 74 2c 71 65 3a 65 2e 71 65 2c 71 74 3a 65 2e 71 74 2c 63 6f 64 65 3a 65 2e 63 6f 6e 74 65 78 74 2e 62 6e 5f 63 6f 64 65 2c 70 61 72 74 6e 65 72 5f 6e 61 6d 65 3a 65 2e 63 6f 6e 74 65 78 74 2e 70 61 72 74 6e 65 72 5f 6e 61 6d 65 2c 66 6c 61 67 5f 63 6f 6e 73 75 6d 65 3a 65 2e 66 6c 61 67 5f 63 6f 6e 73 75 6d 65 2c 70 74 3a 65 2e 70 74 7c 7c 73 Data Ascii: b_component,s:e.s,item:e.item,fltp:e.fltp,link:e.link,es:e.flavor,cust:e.cust,mrid:e.mrid,erpg:e.erpg,error_code:e.error_code,xe:e.xe,xt:e.xt,qe:e.qe,qt:e.qt,code:e.context.bn_code,partner_name:e.context.partner_name,flag_consume:e.flag_consume,pt:e.pt\|\|s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	3977	OUT	GET /smart/buttons?env=production&style.label=paypal&style.layout=vertical&style.color=gold&style.shape=rect&style.tagline=false&style.height=44&style.menuPlacement=below&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_2c8c73eb5d_mdc6mjm6mdc&buttonSize=large&customerId=&clientID=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&clientMetadataID=uid_f55323b669_mdc6mjm6mdc&commit=false&components.0=buttons&currency=USD&debug=false&disableFunding.0=credit&disableFunding.1=card&disableSetCookie=true&enableFunding.0=venmo&experiment.enableVenmo=true&experiment.venmoVaultWithoutPurchase=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjpmYWxzZSwidmF1bHRhYmxlIjpmYWxzZSwicHJvZHVjdHMiOnsicGF5SW4zIjp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheUluNCI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9LCJwYXlsYXRlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9fX0sImNhcmQiOnsiZWxpZ2libGUiOmZhbH [TRUNCATED] Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:09 UTC	1353	IN	HTTP/1.1 200 OK Connection: close Content-Length: 476669 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Disposition: inline Content-Security-Policy: form-action 'self' https://.paypal.com https://.cardinalcommerce.com; default-src 'self' https://.paypal.com https://.paypalobjects.com; connect-src 'self' https://.paypal.com: https://.paypalobjects.com https://.googleapis.com https://.firebaseio.com wss://.firebaseio.com https://api2.amplitude.com http://127.0.0.1:* https://.qualtrics.com; frame-src 'self' https://.paypal.com:* https://.paypalobjects.com https://.cardinalcommerce.com https://.venmo.com https://.firebaseapp.com https://.qualtrics.com; script-src 'self' https://.paypal.com:* https://.paypalobjects.com 'unsafe-inline' https://apis.google.com; style-src 'self' https://.paypal.com:* https://.paypalobjects.com 'unsafe-inline'; font-src 'self' https://.paypal.com https://.paypalobjects.com data:; object-src 'none'; img-src https: data:; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
2024-07-03 07:23:09 UTC	1318	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 37 34 35 66 64 2d 32 61 57 57 53 65 6c 30 34 5a 47 77 4c 6a 57 42 2b 59 50 76 32 45 63 34 5a 48 49 22 0d 0a 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c Data Ascii: Content-Type: text/html; charset=utf-8Etag: W/"745fd-2aWWSel04ZGwLjWB+YPv2Ec4ZHI"Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNl
2024-07-03 07:23:09 UTC	140	IN	Data Raw: 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 22 74 72 61 63 65 70 61 72 65 6e 74 3b 64 65 73 63 3d 22 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 35 39 35 38 30 35 66 65 37 65 36 62 2d 64 39 66 31 30 30 37 33 65 35 63 36 39 62 31 32 2d 30 31 22 22 3b 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3b 64 65 73 63 3d 22 22 2c 78 2d 63 64 6e 3b 64 65 73 63 3d 22 66 61 73 74 6c 79 22 0d 0a 0d 0a Data Ascii: Server-Timing: "traceparent;desc="00-0000000000000000000f595805fe7e6b-d9f10073e5c69b12-01"";content-encoding;desc="",x-cdn;desc="fastly"
2024-07-03 07:23:09 UTC	1378	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 65 69 67 68 74 2d 31 30 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 62 75 74 74 6f 6e 73 2d 72 65 73 Data Ascii: <!DOCTYPE html> <html class="height-100"> <head> <script nonce=""> if (window.performance && performance.mark) { performance.mark('buttons-res
2024-07-03 07:23:09 UTC	1378	IN	Data Raw: 3a 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 75 74 74 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 22 20 72 6f 6c 65 Data Ascii: ::after { outline: none !important; box-shadow: none !important; } </style> <div id="buttons-container" class="buttons-container" role
2024-07-03 07:23:09 UTC	1378	IN	Data Raw: 4c 69 62 65 72 61 74 69 6f 6e 20 53 61 6e 73 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 62 Data Ascii: Liberation Sans", sans-serif; text-transform: none; font-weight: 500; font-smoothing: antialiased; z-index: 0; font-size: 0; width: 100%; box-sizing: border-box; } .paypal-button { b
2024-07-03 07:23:09 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 74 61 67 6c 69 6e 65 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e Data Ascii: text-align: left; } .paypal-button-tagline { max-width: 100%; font-size: initial; font-weight: normal; display: block; text-align: center; width: auto; } .paypal-button .paypal-button
2024-07-03 07:23:09 UTC	1378	IN	Data Raw: 61 6c 2d 62 75 74 74 6f 6e 2d 77 61 6c 6c 65 74 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 77 61 6c 6c 65 74 2d 6d 65 6e 75 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 0a 0a 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 62 6c 61 63 6b 20 7b 0a 20 20 Data Ascii: al-button-wallet.paypal-button-wallet-menu .paypal-button { border-top-right-radius: 4px; border-bottom-right-radius: 4px; width: 100%; } } .paypal-button.paypal-button-text-color-black {
2024-07-03 07:23:09 UTC	1378	IN	Data Raw: 6e 68 65 72 69 74 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 35 72 65 6d 20 23 30 30 30 30 61 36 3b 0a 20 20 20 20 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 7d 0a 0a 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 6c 75 65 2c 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 72 6f 77 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 62 6c 75 65 20 2e 6d 65 6e 75 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 37 30 62 61 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 5b 64 61 74 61 Data Ascii: nherit; box-shadow: 0 0 0 0.5rem #0000a6; pointer-events: none; } .paypal-button.paypal-button-color-blue, .paypal-button-row.paypal-button-color-blue .menu-button { background: #0070ba; } .paypal-button[data
2024-07-03 07:23:09 UTC	1378	IN	Data Raw: 2d 63 6f 6c 6f 72 2d 64 65 66 61 75 6c 74 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 43 32 45 32 46 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 66 75 6e 64 69 6e 67 2d 73 6f 75 72 63 65 3d 6d 65 72 63 61 64 6f 70 61 67 6f 5d 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 64 65 66 61 75 6c 74 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 44 32 36 34 37 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 66 75 6e 64 69 6e 67 2d 73 6f 75 72 63 65 3d 6d 75 6c 74 69 62 61 6e 63 6f 5d 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 64 65 66 61 75 6c 74 20 7b 0a 20 20 20 Data Ascii: -color-default { background: #2C2E2F; } .paypal-button[data-funding-source=mercadopago].paypal-button-color-default { background: #1D2647; } .paypal-button[data-funding-source=multibanco].paypal-button-color-default {
2024-07-03 07:23:09 UTC	158	IN	Data Raw: 64 65 66 61 75 6c 74 3a 68 6f 76 65 72 2c 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 66 75 6e 64 69 6e 67 2d 73 6f 75 72 63 65 3d 62 6f 6c 65 74 6f 5d 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 64 65 66 61 75 6c 74 3a 68 6f 76 65 72 2c 0a 20 20 20 20 2e 70 61 79 70 61 6c 2d 62 75 74 74 6f 6e 5b 64 61 74 61 2d 66 75 6e 64 69 6e 67 2d 73 6f 75 72 63 65 3d 62 6f 6c 65 74 6f 62 61 6e 63 61 72 69 6f 5d 2e 70 61 79 70 61 6c Data Ascii: default:hover, .paypal-button[data-funding-source=boleto].paypal-button-color-default:hover, .paypal-button[data-funding-source=boletobancario].paypal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49770	157.240.252.13	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	1328	OUT	GET /signals/config/1663341264181988?v=2.9.160&r=stable&domain=secure.actblue.com&hme=733c3732ec767f7a62e7787aff967e6d19b1e13e533937876f2e15efe07bf678&ex_m=67%2C113%2C100%2C104%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C160%2C163%2C175%2C171%2C172%2C174%2C28%2C94%2C50%2C73%2C173%2C155%2C158%2C168%2C169%2C176%2C122%2C39%2C33%2C134%2C14%2C48%2C181%2C180%2C124%2C17%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C101%2C103%2C37%2C102%2C29%2C25%2C156%2C159%2C131%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C98%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C34%2C80%2C2%2C35%2C60%2C40%2C99%2C43%2C75%2C65%2C105%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C106 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:09 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' 'unsafe-eval' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-07-03 07:23:09 UTC	1731	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-heigh
2024-07-03 07:23:09 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-07-03 07:23:09 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-07-03 07:23:09 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-07-03 07:23:09 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-07-03 07:23:09 UTC	310	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-07-03 07:23:09 UTC	1500	IN	Data Raw: 69 6e 63 72 65 6d 65 6e 74 41 6e 64 47 65 74 28 6f 29 3b 69 66 28 6f 3e 64 7c 7c 6e 3d 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 6f 3d 63 28 6e 2c 66 26 26 6c 21 3d 6e 75 6c 6c 29 3b 6e 3d 69 28 6f 2c 32 29 3b 6f 3d 6e 5b 30 5d 3b 6e 3d 6e 5b 31 5d 3b 6f 21 3d 6e 75 6c 6c 26 26 6b 2e 70 75 73 68 28 6f 29 3b 6c 3d 62 28 6c 2c 6e 29 7d 7d 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 7d 6c 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 61 67 65 46 65 61 74 75 72 Data Ascii: incrementAndGet(o);if(o>d\|\|n===g)continue;o=c(n,f&&l!=null);n=i(o,2);o=n[0];n=n[1];o!=null&&k.push(o);l=b(l,n)}}return{formFieldFeatures:k,userData:l}}l.exports=g})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsExtractPageFeatur
2024-07-03 07:23:09 UTC	1500	IN	Data Raw: 6c 3a 61 28 7b 7d 2c 66 2c 7b 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 64 6f 6d 61 69 6e 22 7d 29 3b 69 66 28 63 3d 3d 3d 22 2e 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 66 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 3d 3d 3d 62 2d 31 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 6c 61 73 74 44 6f 74 49 6e 64 65 78 3a 62 7d 29 3b 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 65 2e 74 65 73 74 28 63 29 3d 3d 3d 21 31 7c 7c 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 75 73 65 72 22 26 26 64 2e 74 65 73 74 28 63 29 3d 3d 3d 21 31 3f 66 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 3d 3d 3d 62 2d 31 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 65 Data Ascii: l:a({},f,{userOrDomain:"domain"});if(c===".")return f.userOrDomain==="domain"&&f.lastDotIndex===b-1?null:a({},f,{lastDotIndex:b});return f.userOrDomain==="domain"&&e.test(c)===!1\|\|f.userOrDomain==="user"&&d.test(c)===!1?f.lastDotIndex===b-1?null:a({},f,{e
2024-07-03 07:23:09 UTC	1500	IN	Data Raw: 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 2c 7b 6b 65 79 3a 22 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 62 3d 41 72 72 61 79 28 61 29 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 62 5b 63 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 76 61 72 20 64 3d 74 68 69 73 2e 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 3b 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3d 62 3b 72 65 74 75 72 6e 20 64 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 62 7d 28 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 Data Ascii: urn!0;return!1}},{key:"passesThrottle",value:function(){for(var a=arguments.length,b=Array(a),c=0;c<a;c++)b[c]=arguments[c];var d=this._passesThrottleImpl.apply(this,b);this._lastTime=Date.now();this._lastArgs=b;return d}}]);return b}();k.exports=b})();re
2024-07-03 07:23:09 UTC	1500	IN	Data Raw: 21 3d 6e 75 6c 6c 29 7b 69 66 28 70 28 65 29 29 72 65 74 75 72 6e 3b 69 66 28 21 42 2e 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 28 65 29 29 72 65 74 75 72 6e 3b 63 3d 62 2e 67 65 74 4f 70 74 65 64 49 6e 50 69 78 65 6c 73 28 22 49 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 29 3b 79 28 63 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 66 3d 61 2e 67 65 74 28 63 2e 69 64 2c 22 69 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 29 2c 67 3d 21 31 3b 66 21 3d 6e 75 6c 6c 26 26 66 2e 64 69 73 61 62 6c 65 52 65 73 74 72 69 63 74 65 64 44 61 74 61 21 3d 6e 75 6c 6c 26 26 28 67 3d 66 2e 64 69 73 61 62 6c 65 52 65 73 74 72 69 63 74 65 64 44 61 74 61 29 3b 66 3d 45 28 63 2e 69 64 2c 66 29 3b 66 3d 73 28 65 2c 66 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e Data Ascii: !=null){if(p(e))return;if(!B.passesThrottle(e))return;c=b.getOptedInPixels("InferredEvents");y(c,function(c){var f=a.get(c.id,"inferredEvents"),g=!1;f!=null&&f.disableRestrictedData!=null&&(g=f.disableRestrictedData);f=E(c.id,f);f=s(e,f);if(f==null)return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49778	87.248.119.251	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	567	OUT	GET /wi/config/10111714.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure.actblue.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:09 UTC	744	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: 1KA1B5MB5V1YCWXR x-amz-id-2: MmE955GNA8OqOJodHmGx9tZZIH44GiUbUDqEnJYgsRq0NXFZGmkuw+xHQhPRm/Q0T+C+9R/pBWc= Content-Type: application/json Date: Wed, 03 Jul 2024 07:17:37 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Content-Length: 2 Age: 332 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-07-03 07:23:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49774	66.102.1.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	1026	OUT	GET /gp/p/ui/payframe?origin=https%3A%2F%2Fsecure.actblue.com&mid= HTTP/1.1 Host: pay.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:09 UTC	2159	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Expires: Wed, 03 Jul 2024 07:23:09 GMT Date: Wed, 03 Jul 2024 07:23:09 GMT Cache-Control: private, max-age=3600 Origin-Trial: AssDE6uDpaVUq9mb8HyrCnDR4hxNa3P1PQl8E0huFRpGw4MFWswRwyuk1E68LufiBFMulCrRk3VCexIRW39eYwoAAABMeyJvcmlnaW4iOiJodHRwczovL3BheS5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5fQ== Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-hzNyvCWEZekkE15Zrtht7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendBuyflowPayframeUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendBuyflowPayframeUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendBuyflowPayframeUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site reporting-endpoints: default="/gp/p/_/InstantbuyFrontendBuyflowPayframeUi/web-reports?context=eJzjitHikmJw1ZBiWF4qxVBRK8WwZKYUg2fNTabOPTeZJL6-ZNIA4sPR01md0mewBgGxT_0M1hggbr15jnUqEM8NOM8annmeNenfedYiIP7IcZF1ScRF1kOJF1mFeDju_pi8hU1gQcu7JiYl7aT8wvjMvOKSxLySpNLKtKL8vJLUvJTi1KKy1KJ4IwMjEwNzAyM9A5P4AgMAk4c7TA" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:09 UTC	2159	IN	Data Raw: 33 39 63 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 70 2f 70 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 69 2f 70 61 79 66 72 61 6d 65 22 3e 3c 6d 65 74 61 20 Data Ascii: 39c6<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://pay.google.com/gp/p/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://pay.google.com/ui/payframe"><meta
2024-07-03 07:23:09 UTC	2159	IN	Data Raw: 4d 39 75 4e 44 64 5c 22 5d 2c 5b 34 35 35 33 32 35 36 39 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 45 66 4e 76 76 5c 22 5d 2c 5b 34 35 34 35 34 32 31 38 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 63 4f 32 33 44 65 5c 22 5d 2c 5b 34 35 36 31 33 36 38 31 2c 39 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 52 44 4f 79 6d 62 5c 22 5d 2c 5b 34 35 34 35 34 32 32 36 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 53 73 6f 44 70 66 5c 22 5d 2c 5b 34 35 34 35 34 32 32 31 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 6e 77 30 76 63 65 5c 22 5d 2c 5b 34 35 36 31 39 34 32 39 2c 6e Data Ascii: M9uNDd\"],[45532569,null,true,null,null,null,\"EfNvv\"],[45454218,null,false,null,null,null,\"cO23De\"],[45613681,95,null,null,null,null,\"RDOymb\"],[45454226,null,false,null,null,null,\"SsoDpf\"],[45454221,null,true,null,null,null,\"nw0vce\"],[45619429,n
2024-07-03 07:23:09 UTC	2159	IN	Data Raw: 3a 22 25 2e 40 2e 5d 22 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 7a 4e 79 76 43 57 45 5a 65 6b 6b 45 31 35 5a 72 74 68 74 37 67 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2c 64 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6c 3d 6b 28 29 3b 61 2e 63 63 5f 6c 61 74 65 6e 63 79 5f 73 74 61 72 74 5f 74 69 6d 65 3d 64 26 26 64 2e 6e 6f 77 3f 30 3a 64 26 26 64 2e 74 69 6d 69 6e 67 26 26 64 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3f 64 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 6c 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 72 65 74 75 72 6e 20 64 26 26 64 2e 6e 6f 77 3f 64 2e 6e 6f 77 28 29 3a Data Ascii: :"%.@.]"};</script><script nonce="hzNyvCWEZekkE15Zrtht7g">(function(){'use strict';var a=window,d=a.performance,l=k();a.cc_latency_start_time=d&&d.now?0:d&&d.timing&&d.timing.navigationStart?d.timing.navigationStart:l;function k(){return d&&d.now?d.now():
2024-07-03 07:23:09 UTC	2159	IN	Data Raw: 75 79 66 6c 6f 77 50 61 79 66 72 61 6d 65 55 69 2e 73 51 71 71 6c 5f 44 6e 65 77 6b 2e 4c 2e 42 31 2e 4f 2f 61 6d 3d 4d 41 79 6b 41 51 2f 64 3d 31 2f 65 64 3d 31 2f 72 73 3d 41 4d 69 74 66 72 6a 7a 76 6e 72 69 67 4a 61 37 43 73 48 37 5f 64 31 79 45 57 4f 38 4f 52 65 4b 6d 77 2f 6d 3d 70 61 79 66 72 61 6d 65 76 69 65 77 2c 5f 62 2c 5f 74 70 22 20 6e 6f 6e 63 65 3d 22 43 6b 6a 76 39 64 79 63 43 51 31 33 34 52 58 79 43 56 52 36 32 67 22 3e 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 45 54 53 44 7b 63 6f 6e 74 61 69 6e 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 55 62 69 38 5a 7b 63 6f 6e 74 61 69 6e 3a 6c 61 79 6f 75 74 20 73 74 79 6c 65 7d 73 65 6e 74 Data Ascii: uyflowPayframeUi.sQqql_Dnewk.L.B1.O/am=MAykAQ/d=1/ed=1/rs=AMitfrjzvnrigJa7CsH7_d1yEWO8OReKmw/m=payframeview,_b,_tp" nonce="Ckjv9dycCQ134RXyCVR62g">c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:none}c-wiz.Ubi8Z{contain:layout style}sent
2024-07-03 07:23:09 UTC	2159	IN	Data Raw: 3d 6e 75 6c 6c 3f 30 3a 62 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 71 28 74 68 69 73 2c 74 68 69 73 2e 67 5b 61 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 2f 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 69 3d 5b 5d 7d 75 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 26 26 28 74 68 69 73 2e 67 2e 73 74 79 6c 65 2e 63 Data Ascii: =null?0:b.length){for(a=0;a<this.g.length;a++)q(this,this.g[a]);this.g=null}};var t=typeof navigator!=="undefined"&&/iPhone\|iPad\|iPod/.test(navigator.userAgent);function u(a){this.g=a;this.i=[]}u.prototype.addEventListener=function(a,b){t&&(this.g.style.c
2024-07-03 07:23:09 UTC	2159	IN	Data Raw: 61 6d 65 55 69 2e 65 6e 5f 55 53 2e 6b 39 6a 48 77 4c 61 6e 45 33 63 2e 65 73 35 2e 4f 2f 61 6d 3d 4d 41 79 6b 41 51 2f 64 3d 31 2f 65 78 63 6d 3d 5f 62 2c 5f 74 70 2c 70 61 79 66 72 61 6d 65 76 69 65 77 2f 65 64 3d 31 2f 64 67 3d 30 2f 77 74 3d 32 2f 75 6a 67 3d 31 2f 72 73 3d 41 4d 69 74 66 72 68 5f 71 55 77 6a 69 51 56 49 4e 66 69 36 35 58 42 4f 47 46 6b 72 6f 41 72 54 4a 51 2f 6d 3d 5f 62 2c 5f 74 70 22 20 61 73 79 6e 63 20 69 64 3d 22 62 61 73 65 2d 6a 73 22 20 66 65 74 63 68 70 72 69 6f 72 69 74 79 3d 22 68 69 67 68 22 20 6e 6f 6e 63 65 3d 22 68 7a 4e 79 76 43 57 45 5a 65 6b 6b 45 31 35 5a 72 74 68 74 37 67 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 68 7a 4e 79 76 43 57 45 5a 65 6b 6b 45 31 35 5a 72 74 68 74 37 67 Data Ascii: ameUi.en_US.k9jHwLanE3c.es5.O/am=MAykAQ/d=1/excm=_b,_tp,payframeview/ed=1/dg=0/wt=2/ujg=1/rs=AMitfrh_qUwjiQVINfi65XBOGFkroArTJQ/m=_b,_tp" async id="base-js" fetchpriority="high" nonce="hzNyvCWEZekkE15Zrtht7g"></script><script nonce="hzNyvCWEZekkE15Zrtht7g
2024-07-03 07:23:09 UTC	1844	IN	Data Raw: 68 72 6f 77 20 62 2e 6d 65 73 73 61 67 65 3d 61 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 69 64 22 29 3f 62 2e 6d 65 73 73 61 67 65 2b 22 5c 6e 72 65 63 6f 72 64 49 73 41 62 6f 76 65 46 6f 6c 64 20 65 72 72 6f 72 20 66 6f 72 20 64 65 66 65 72 20 69 6e 6c 69 6e 65 64 20 69 6d 61 67 65 22 3a 62 2e 6d 65 73 73 61 67 65 2b 28 22 5c 6e 72 65 63 6f 72 64 49 73 41 62 6f 76 65 46 6f 6c 64 20 65 72 72 6f 72 20 66 6f 72 20 69 6d 67 20 65 6c 65 6d 65 6e 74 20 77 69 74 68 20 3c 73 72 63 3a 20 22 2b 61 2e 73 72 63 2b 22 3e 22 29 2c 62 3b 7d 7d 29 3b 69 66 28 64 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 63 2e 6f 6e 61 66 74 28 66 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 69 6e 69 74 41 66 74 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 Data Ascii: hrow b.message=a.hasAttribute("data-iid")?b.message+"\nrecordIsAboveFold error for defer inlined image":b.message+("\nrecordIsAboveFold error for img element with <src: "+a.src+">"),b;}});if(d.length===0)c.onaft(f)};}).call(this);initAft()</script><scrip
2024-07-03 07:23:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49779	142.250.185.132	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	1584	OUT	GET /pagead/1p-user-list/11154426359/?random=1719991386424&cv=11&fst=1719990000000&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLMjK87kHkN4ni2YeOWbadnIkhWl5BBA&random=1467784109&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:09 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 07:23:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49781	142.250.185.98	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	810	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=ZmJjYWYwNDEtNjcxOC00YWZkLWI5NzMtOGYxNzNjMWVlNjEw&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-03 07:23:09 UTC	1060	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610&google_gid=CAESEFNkMgYqH-YZOkYqe_wg1Cw&google_cver=1 Date: Wed, 03 Jul 2024 07:23:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkRdvn9GxQ0egYW39QqCdlHgGZh4V891QevcFwabbXTjCSNElIHUR_KwKUmj9c; expires=Fri, 03-Jul-2026 07:23:09 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:09 UTC	330	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_
2024-07-03 07:23:09 UTC	56	IN	Data Raw: 59 71 65 5f 77 67 31 43 77 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: Yqe_wg1Cw&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49780	216.58.206.66	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	1634	OUT	GET /pagead/viewthroughconversion/11154426359/?random=1418267285&cv=11&fst=1719991386522&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECIgEBOAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=COXovtyWp_LdOiITCJasxp2riocDFRBqHgIdLNc7LDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhtodHRwczovL3NlY3VyZS5hY3RibHVlLmNvbS8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-03 07:23:09 UTC	1917	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 07:23:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/11154426359/?random=1418267285&cv=11&fst=1719991386522&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECIgEBOAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=COXovtyWp_LdOiITCJasxp2riocDFRBqHgIdLNc7LDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhtodHRwczovL3NlY3VyZS5hY3RibHVlLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLgrlq7CFg_jfeJC8uMT1vxr-x3eGs1QP3rnKnidjfvfF6WhVm&random=396835463 [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmOMCeROoDpC9K1jtd0w7KG2_HtvhN1zMsWIQn2JxAEC-kidKdzpdcSUwRA; expires=Fri, 03-Jul-2026 07:23:09 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49776	142.250.186.46	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	334	OUT	HEAD /pay HTTP/1.1 Host: google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:09 UTC	445	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/pay Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: sffe Content-Length: 223 X-XSS-Protection: 0 Date: Wed, 03 Jul 2024 07:16:01 GMT Expires: Wed, 03 Jul 2024 07:46:01 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 428 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49772	151.101.2.133	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	579	OUT	GET /js-sdk-logos/2.2.7/paypal-blue.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:09 UTC	805	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3266 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Etag: "642c9aab-cc2" Last-Modified: Tue, 04 Apr 2023 21:46:19 GMT Paypal-Debug-Id: 618717e986792 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000618717e986792-cea80e4f81990761-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:09 GMT X-Served-By: cache-dfw-kdal2120095-DFW, cache-ewr18131-EWR X-Cache: HIT, MISS X-Cache-Hits: 192, 0 X-Timer: S1719991389.366486,VS0,VE37 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * Strict-Transport-Security: max-age=31557600
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 31 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 31 20 33 32 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 26 23 78 32 46 3b 26 23 78 32 46 3b 77 77 77 2e 77 33 2e 6f 72 67 26 23 78 32 46 3b 32 30 30 30 26 23 78 32 46 3b 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 33 30 38 37 22 20 64 3d 22 4d 20 31 32 2e 32 33 37 20 32 2e 38 20 4c 20 34 2e 34 33 37 20 32 2e 38 20 43 20 33 2e 39 33 37 20 32 2e 38 20 33 2e 34 33 37 20 33 2e 32 20 33 2e 33 33 37 20 33 2e 37 20 4c 20 30 2e 32 33 37 20 32 33 2e 37 20 43 20 30 2e 31 33 37 20 32 34 2e 31 20 30 2e 34 33 37 Data Ascii: <svg width="101px" height="32" viewBox="0 0 101 32" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path fill="#003087" d="M 12.237 2.8 L 4.437 2.8 C 3.937 2.8 3.437 3.2 3.337 3.7 L 0.237 23.7 C 0.137 24.1 0.437
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 70 61 74 68 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 33 30 38 37 22 20 64 3d 22 4d 20 35 35 2e 33 33 37 20 31 30 20 4c 20 35 31 2e 36 33 37 20 31 30 20 43 20 35 31 2e 32 33 37 20 31 30 20 35 30 2e 39 33 37 20 31 30 2e 32 20 35 30 2e 37 33 37 20 31 30 2e 35 20 4c 20 34 35 2e 35 33 37 20 31 38 2e 31 20 4c 20 34 33 2e 33 33 37 20 31 30 2e 38 20 43 20 34 33 2e 32 33 37 20 31 30 2e 33 20 34 32 2e 37 33 37 20 31 30 20 34 32 2e 33 33 37 20 31 30 20 4c 20 33 38 2e 36 33 37 20 31 30 20 43 20 33 38 2e 32 33 37 20 31 30 20 33 37 2e 38 33 37 20 31 30 2e 34 20 33 38 2e 30 33 37 20 31 30 2e 39 20 4c 20 34 32 2e 31 33 37 20 32 33 20 4c 20 33 38 2e 32 33 37 20 32 38 2e 34 20 43 20 33 37 2e 39 33 37 20 32 38 2e 38 20 33 38 2e 32 33 37 20 32 39 2e 34 20 33 38 2e 37 Data Ascii: path><path fill="#003087" d="M 55.337 10 L 51.637 10 C 51.237 10 50.937 10.2 50.737 10.5 L 45.537 18.1 L 43.337 10.8 C 43.237 10.3 42.737 10 42.337 10 L 38.637 10 C 38.237 10 37.837 10.4 38.037 10.9 L 42.137 23 L 38.237 28.4 C 37.937 28.8 38.237 29.4 38.7
2024-07-03 07:23:09 UTC	508	IN	Data Raw: 20 31 30 20 5a 20 4d 20 38 35 2e 37 33 37 20 31 37 2e 32 20 43 20 38 35 2e 33 33 37 20 31 39 2e 33 20 38 33 2e 37 33 37 20 32 30 2e 38 20 38 31 2e 35 33 37 20 32 30 2e 38 20 43 20 38 30 2e 34 33 37 20 32 30 2e 38 20 37 39 2e 36 33 37 20 32 30 2e 35 20 37 39 2e 30 33 37 20 31 39 2e 38 20 43 20 37 38 2e 34 33 37 20 31 39 2e 31 20 37 38 2e 32 33 37 20 31 38 2e 32 20 37 38 2e 34 33 37 20 31 37 2e 32 20 43 20 37 38 2e 37 33 37 20 31 35 2e 31 20 38 30 2e 35 33 37 20 31 33 2e 36 20 38 32 2e 36 33 37 20 31 33 2e 36 20 43 20 38 33 2e 37 33 37 20 31 33 2e 36 20 38 34 2e 35 33 37 20 31 34 20 38 35 2e 31 33 37 20 31 34 2e 36 20 43 20 38 35 2e 37 33 37 20 31 35 2e 33 20 38 35 2e 39 33 37 20 31 36 2e 32 20 38 35 2e 37 33 37 20 31 37 2e 32 20 5a 22 3e 3c 2f 70 61 74 68 Data Ascii: 10 Z M 85.737 17.2 C 85.337 19.3 83.737 20.8 81.537 20.8 C 80.437 20.8 79.637 20.5 79.037 19.8 C 78.437 19.1 78.237 18.2 78.437 17.2 C 78.737 15.1 80.537 13.6 82.637 13.6 C 83.737 13.6 84.537 14 85.137 14.6 C 85.737 15.3 85.937 16.2 85.737 17.2 Z"></path

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49777	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	1304	OUT	GET /x/object/actblue-cyanotypes/replaced_images/branding/249406/260059c2-94ed-4236-82ad-624d031cc757-240424-JRB_KDH-Wrapper-10814a65.png HTTP/1.1 Host: secure.actblue.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
2024-07-03 07:23:09 UTC	737	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1257250 x-amz-id-2: vQGRd1aYf5jCKbX88y+7AlEysb278JqRkfZp5VuSPTYfQMqgWBZfxLAEgVM3uTWD9GzcdWc15mo= x-amz-request-id: 5ZZR8KBWAKEXD6DB x-amz-replication-status: COMPLETED Last-Modified: Mon, 24 Apr 2023 13:40:57 GMT ETag: "a9272e8166f30f235595d1ea6fb6e431" x-amz-server-side-encryption: AES256 Content-Disposition: attachment; filename="260059c2-94ed-4236-82ad-624d031cc757-240424-JRB_KDH-Wrapper.png" x-amz-version-id: 8taWg2TSIW2VyHk4IYIcTOuJSpVkZRXG Content-Type: image/png cache-control: max-age=2678405 Accept-Ranges: bytes Age: 2302 Date: Wed, 03 Jul 2024 07:23:09 GMT Via: 1.1 varnish X-Start: 2024-07-03 07:23:09.368 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 f0 00 00 06 40 08 06 00 00 00 3c 02 f1 58 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 80 00 49 44 41 54 78 da ec fd 5b 93 64 d9 7d 9e 79 3e eb b4 b7 bb 47 64 66 15 48 49 1c a9 a7 fb fb 7f a0 9e 9b b1 99 31 1b eb 9e 56 37 01 54 65 46 84 fb 3e ac c3 5c 2c af 24 25 51 dd 24 45 31 41 e2 f9 99 01 a8 ac a8 88 f0 70 f7 c0 05 f0 d8 fb 0f 7d ff fd 40 92 24 49 92 24 49 92 24 49 92 24 49 92 24 fd b3 8a 3f fa 01 48 92 24 49 92 24 49 92 24 49 92 24 49 92 f4 e7 c8 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 Data Ascii: PNGIHDR@<XpHYs%%IR$IDATx[d}y>GdfHI1V7TeF>\,$%Q$E1Ap}@$I$I$I$I$?H$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 a4 1f c0 80 4f 92 24 49 92 24 49 92 24 49 92 24 49 92 Data Ascii: $IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$IO$I$I$I$I
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: a3 c3 c7 fb 83 97 d7 4f 04 12 fb b6 f3 f1 f6 ce 9e 22 6d 34 5e 3f 7f 62 59 2f a4 b4 50 7b 63 3b 1e 44 06 21 47 62 28 a4 10 49 01 46 6b ec 8f 07 ad 7e 63 bd bd 70 b9 45 e2 25 11 52 61 8c 93 d6 4e 68 0d e8 c0 3c dd 9b 72 a4 e4 4c 4c f1 6f 4e ef fe 89 fa cf df 0b 7f ea ef 0d 49 92 24 49 92 fe 54 19 f0 49 92 24 49 92 24 49 92 fe ab 42 08 cf 30 6e fc e8 87 f2 5f f8 ed 31 b5 d6 39 cf 93 7d 3b 78 7f df e8 3d d2 6b e7 dc ef 3c 5e 36 ae d7 1b 21 26 72 5e 89 64 d6 eb 2b 25 5f e9 a3 53 cf 9d 10 03 61 c0 e3 e3 0d 88 8c 10 78 6c 1f ac a5 d1 eb ce 9a 12 21 07 46 08 9c ad 91 80 1c a0 a4 42 24 30 46 65 c4 41 4c 83 d1 06 bd 55 18 81 76 56 ea b6 d3 6a a3 d5 ca e3 fd 83 65 5d 89 b9 d0 47 a5 d7 93 f3 d8 68 67 e5 6c 8d 00 5c 5f 2e 5c 5f ae ac eb 4a ce 69 9e dd e5 39 82 38 6f Data Ascii: O"m4^?bY/P{c;D!Gb(IFk~cpE%RaNh<rLLoNI$ITI$I$IB0n_19};x=k<^6!&r^d+%_Saxl!FB$0FeALUvVje]Ghgl\_.\_Ji98o
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: f8 f5 ed 9d 5a 77 3e bf de f8 f2 f9 27 7e fa dd cf 9c ad 32 c2 e0 af fe ea df f0 e9 f3 8d c7 fd c1 75 bd 72 c9 85 d6 1a f7 fb 9d 6d 0b f4 da 68 ad 31 7a 67 d0 d9 8e 83 cb 65 25 85 48 5e 0a cb ba 72 b9 5e b8 5e 57 72 29 df 43 c6 10 02 21 c6 ef 27 81 25 49 92 24 49 fa d7 2c f4 fd f7 e3 47 3f 08 49 92 24 49 92 24 49 d2 bf 1e 63 cc ff d9 79 b6 57 ff b8 00 6b 3c 97 f5 5a 6b b4 36 a8 e7 e0 7e 7f f0 d8 ce ef a1 57 ef 8d 94 12 25 97 b9 82 77 56 46 1f e4 94 20 04 5a ab f4 00 25 67 52 4c f0 3c 23 3b 80 d1 2b db 76 e7 dc 4f c2 e8 30 3a 23 44 62 ce 73 81 ee 71 a7 1e 3b 91 41 4c 0b eb f5 46 c8 89 14 80 d6 e8 23 b0 ef 3b 10 58 6e 37 2e b7 1b 63 0c ce 7d 63 df ee 8c 5a 89 29 71 7c 7c f0 f8 fa 2b c4 c8 e7 9f 7f 26 e4 42 6b 83 65 5d 29 97 75 3e 96 01 29 26 46 8c 6c db c6 Data Ascii: Zw>'~2urmh1zge%H^r^^Wr)C!'%I$I,G?I$I$IcyWk<Zk6~W%wVF Z%gRL<#;+vO0:#Dbsq;ALF#;Xn7.c}cZ)q\|\|+&Bke])u>)&Fl
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 1c 07 db e3 83 92 e6 1a 60 3d e7 b9 e2 7d df 79 7b 7f 67 5d 16 ca b2 10 42 60 df 1e 5c 6f 17 5a 1f f4 3e 88 71 9e 2c de 1f 3b 29 cd f8 6e f4 e7 73 d4 1a 84 30 23 bf 9c c9 cb 4a 5a 0a 65 c9 d0 03 f4 46 eb f3 f9 1f 67 e3 fd ed 8d fb 76 27 e5 4c 59 0a 31 24 6a ad e4 5c a8 ad 72 9c 95 cb ed 4a 0c 8d 35 67 6e af 9f b8 be de 08 04 ca 5a b8 be dc 28 eb 42 ce 79 9e fa 0d 10 08 73 19 d0 b0 4f 92 24 49 92 f4 27 c6 05 3e 49 92 24 49 92 24 49 d2 7f b3 19 c6 01 a4 7f f0 e7 8e 31 e6 ba 5b ed d4 06 ad 07 60 21 97 c6 18 9d 90 e0 3c 4e ea b1 73 ff 78 70 6c 1b b4 57 96 f5 42 0c 91 25 67 ce 7a b2 3f 3e e8 7d 50 d6 cb 8c d3 9e 27 58 09 70 9e 3b a3 55 ea b9 53 6b 67 59 56 42 6f f4 7a d0 5b 23 e4 3c 97 f1 5a a3 b6 36 23 44 02 81 4e 2e 09 18 d4 7a d2 7b 23 c4 30 ff 15 02 ed 3c Data Ascii: `=}y{g]B`\oZ>q,;)ns0#JZeFgv'LY1$j\rJ5gnZ(BysO$I'>I$I$I1[`!<NsxplWB%gz?>}P'Xp;USkgYVBoz[#<Z6#DN.z{#0<
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: a3 ee fb f3 cf 81 de 1a 83 41 8c f1 b7 1f 88 fc 5c bb 1b bd 12 47 27 a7 42 4c 85 da 1a fb f9 20 d2 66 0c d6 a1 b7 46 6f 95 d1 1a e9 b9 da d6 9e cf 41 27 d0 67 81 47 a3 d3 9f 07 78 5b 6d 33 78 e4 b7 8b b4 81 d1 66 5c b7 5e d6 b9 5f 38 02 63 0c da 59 a9 fb c6 68 8d fd 9e c8 cb 42 88 61 ae f1 ed f3 74 f0 3c 35 3c 97 ff ae 9f 5f 59 ae 2f f3 47 19 89 00 f4 76 52 4f e8 6d b0 ef 1f f4 5a 49 29 b1 ae 17 fe cd 5f bd 10 62 a2 ac 17 62 0c ec c7 09 8f 07 91 01 21 41 ec c4 92 79 f9 f4 89 72 b9 90 53 e2 d3 eb 2b 9f 7f fe 99 db e5 02 61 f0 f1 71 9f 67 6a 6f 17 96 f5 4a 8e 89 5e e7 6b d4 5a a3 9e 8d d6 2a f7 c7 83 fd f1 80 56 39 f6 83 b3 35 d6 cb 3a 97 01 eb 0c 1e 01 da e8 a4 5c a0 9e 84 10 b8 de 5e b9 5e 6e a4 3c 5f a3 4f cb 42 67 ae 04 d6 5a b9 3f 3e 88 21 71 59 16 6a Data Ascii: A\G'BL fFoA'gGx[m3xf\^_8cYhBat<5<_Y/GvROmZI)_bb!AyrS+aqgjoJ^kZ*V95:\^^n<_OBgZ?>!qYj
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: c2 e5 72 23 04 a8 47 a5 8f c1 60 cc 65 bf 14 e7 5a 5f 6f 84 10 09 01 62 0a c0 a0 8f c1 92 33 65 59 78 dc ef 9c db ce 68 9d 58 0a 63 0c 52 4a 7c f9 fc 99 31 06 6f df de 78 fb f6 8d f3 dc e7 69 dd 0e ad b7 b9 3e f8 7c 7e af b7 1b eb ba f2 d3 97 2f f4 5e 09 29 30 06 5c 2e 17 7a ef fc f2 c7 5f 78 dc ef 84 10 38 8e 83 f7 f7 37 42 80 d1 1a 31 26 4a 2e c4 3c bf e7 7e 9e 7c fb fa 2b 6f df de a8 f5 e4 d3 eb 2b b9 ac 9c bd 51 eb ce f6 f6 e0 76 7b e1 7a b9 41 08 6c 8f 07 b5 56 d6 cb 42 ad 8d b3 56 f6 e3 e0 92 33 29 26 7a ad f4 d6 08 31 52 9f e7 8c 2f eb 8d db cb 0b 67 3d 78 ff f6 95 63 3f c8 4b 21 86 f9 7a c7 14 e7 73 d9 3b 39 25 ca 65 21 85 cc 18 f3 14 30 01 42 9c cf 53 2a 99 b2 2e 94 92 49 29 12 9e e7 96 25 49 92 24 49 fa bb 18 f0 49 92 24 49 92 24 49 92 fe bb 18 Data Ascii: r#G`eZ_ob3eYxhXcRJ\|1oxi>\|~/^)0\.z_x87B1&J.<~\|+o+Qv{zAlVBV3)&z1R/g=xc?K!zs;9%e!0BS*.I)%I$II$I$I
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 30 7a a3 b5 19 84 ed db 4e 08 73 a9 ae f6 93 b6 77 8e da 28 65 21 90 18 fd a4 d7 f9 1c d5 73 ae 17 c6 18 be 9f ea bd ac 17 46 87 6d bb 73 1e 07 cb 92 29 29 72 c4 30 d7 e4 62 e4 ac f3 04 f1 a7 cf 9f f9 cb bf f8 1d 29 26 de 3f 3e d8 b7 07 31 04 fe e2 2f 7f c7 eb cb 27 3e 7d fe c4 18 f3 31 c5 18 38 ce 9d e3 38 39 8e 9d d6 0e fa d9 d9 8f 73 ae 0b a6 4c 8c 69 be a7 7a 67 7b 3c 88 31 b2 94 cc 7e c2 e3 f1 20 8c c1 f5 7a 23 c6 0c 09 68 9d 7d af f4 11 c8 a5 90 c6 20 e7 4c 5a 32 d7 75 a5 e4 42 ca f3 f4 f1 e8 03 46 a0 d6 93 73 3f b9 ac 85 5c f2 7c 7d 47 a7 b5 0a 63 d0 47 a3 d6 ca 63 db 48 11 72 49 a4 10 e7 3a 24 81 7e 9e c4 65 7d 9e cb 9d ef 39 9e af d3 65 bd d0 ca e0 dc 13 fb 78 50 8f 83 fd f1 ce fd ed 4e 29 85 b4 24 72 c9 2c 97 85 18 13 81 48 ca 99 bc 64 4a 49 f3 Data Ascii: 0zNsw(e!sFms))r0b)&?>1/'>}1889sLizg{<1~ z#h} LZ2uBFs?\\|}GcGcHrI:$~e}9exPN)$r,HdJI
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: d3 63 10 4b a6 b7 41 0c 0d fa a0 8d 4a 6f 27 ad 55 8e fd a0 3e 1a d7 65 a5 ac eb 8c 9e 06 84 31 03 c2 5e ef c4 4f 69 06 7d 31 50 f2 c2 ed f6 32 d7 02 eb 41 ab 27 c7 71 70 86 b9 ae d7 8f 83 d1 2b 23 40 cc 99 d1 e1 3c eb 0c 04 03 8c 36 28 b1 13 63 62 f4 ce b9 ef df 43 ab c1 78 9e 10 3e 58 97 0b 10 18 cf 38 31 97 c2 98 33 82 f4 de e8 31 d2 7b a7 f7 83 98 13 97 eb 0b cb e5 c6 e3 e3 9d e3 7e 27 11 18 f5 24 06 08 31 30 da 7c fe 78 ae 14 f6 5e 9f 1f 8b 2c 97 0b eb f5 85 31 1a f5 dc 28 69 9e c5 ed 84 e7 f7 4e 1c fb c6 59 37 c6 68 f4 e7 79 e4 5a 2b 63 0c 72 4a a4 54 08 bd 42 0f 74 06 fb b1 33 06 5c 2f 57 d6 cb ca 65 bd d0 eb c9 b7 6f df 18 df e6 cf 19 06 a4 9c 88 71 06 95 bd 55 62 ef f4 76 52 e9 6c fb ce a8 8d 18 23 ad ee 0c 02 ad 77 f6 e3 e0 38 e7 32 de 08 91 01 Data Ascii: cKAJo'U>e1^Oi}1P2A'qp+#@<6(cbCx>X8131{~'$10\|x^,1(iNY7hyZ+crJTBt3\/WeoqUbvRl#w82
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: f9 3a 85 01 a5 14 72 59 18 e7 49 6f ed f9 1a 1c f3 eb c0 f3 39 8a 2c eb ca f5 7a 65 84 c0 3d cc 00 93 f0 37 cb 7f cb 65 65 8c c0 fe d8 67 30 38 60 7b 7b 27 44 58 2f 17 ea e5 4a 59 1a cb b2 50 d6 95 5c 12 f4 4e eb 83 98 3a 31 45 60 fc b3 ac dd 85 10 e8 7d fe 9e cc b3 c2 70 1e 95 30 20 a6 19 18 4a 92 24 49 92 fe af 19 f0 49 92 24 49 92 24 49 92 fe ab 7e 3b 99 7b 6e 07 db 63 a3 1f 07 ad cf bf d7 6b 65 b4 19 92 05 e6 ba 5d 29 eb 5c 94 23 10 52 22 12 68 ad d2 6b a5 f7 ca b9 35 ea 71 90 43 98 4b 76 21 12 63 a0 51 21 c2 7a bd 7e 3f 0f ba e4 48 60 70 6c 3b bd 0f fa 18 d4 56 e9 81 19 f8 f5 c6 a8 6d ae 90 01 ad 55 da 68 33 24 23 cc 20 2d 25 ee 8f 0f f6 6d 23 30 e8 eb fa fd 9c eb d9 12 25 cf b5 b9 76 9e f4 56 c9 4b 7e ae 0d 8e 67 5b 15 18 40 cc cb 5c 7a ab 15 7a 23 Data Ascii: :rYIo9,ze=7eeg08`{{'DX/JYP\N:1E`}p0 J$II$I$I~;{ncke])\#R"hk5qCKv!cQ!z~?H`pl;VmUh3$# -%m#0%vVK~g[@\zz#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49771	151.101.2.133	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	579	OUT	GET /js-sdk-logos/2.2.7/venmo-white.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:09 UTC	802	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3670 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Etag: "642c9aac-e56" Last-Modified: Tue, 04 Apr 2023 21:46:20 GMT Paypal-Debug-Id: 37a1b26f62110 Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-000000000000000000037a1b26f62110-2a86f67bf7560943-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:09 GMT X-Served-By: cache-dfw-kdfw8210170-DFW, cache-ewr18139-EWR X-Cache: HIT, HIT X-Cache-Hits: 32, 0 X-Timer: S1719991389.369947,VS0,VE2 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff ACCESS-CONTROL-ALLOW-ORIGIN: * Strict-Transport-Security: max-age=31557600
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 31 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 31 20 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 26 23 78 32 46 3b 26 23 78 32 46 3b 77 77 77 2e 77 33 2e 6f 72 67 26 23 78 32 46 3b 32 30 30 30 26 23 78 32 46 3b 73 76 67 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 67 20 69 64 3d 22 42 6c 75 65 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 3c 67 20 69 64 3d 22 4c Data Ascii: <svg width="101" height="32" viewBox="0 0 101 32" xmlns="http://www.w3.org/2000/svg" preserveAspectRatio="xMinYMin meet"><g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Blue" fill="#ffffff"><g id="L
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 37 37 32 33 31 38 2c 34 2e 36 33 39 30 39 39 31 20 32 35 2e 32 31 33 38 32 38 37 2c 36 2e 31 31 32 32 35 32 32 35 20 32 35 2e 30 34 33 34 35 36 37 2c 38 2e 32 31 38 31 39 38 32 20 5a 20 4d 35 33 2e 30 31 38 37 30 39 33 2c 34 2e 34 36 33 36 30 33 36 20 43 35 33 2e 30 31 38 37 30 39 33 2c 35 2e 31 36 35 35 38 35 35 39 20 35 32 2e 39 31 35 34 33 37 37 2c 36 2e 31 38 33 37 38 33 37 38 20 35 32 2e 38 31 32 36 39 30 33 2c 36 2e 38 34 39 31 38 39 31 39 20 4c 35 30 2e 38 37 33 30 37 30 39 2c 31 39 2e 34 38 37 33 38 37 34 20 4c 34 34 2e 35 37 39 30 39 33 34 2c 31 39 2e 34 38 37 33 38 37 34 20 4c 34 36 2e 33 34 38 33 34 30 38 2c 37 2e 39 30 32 31 36 32 31 36 20 43 34 36 2e 33 38 31 38 39 31 2c 37 2e 35 38 37 39 32 37 39 33 20 34 36 2e 34 38 34 39 38 37 39 2c 36 2e Data Ascii: 772318,4.6390991 25.2138287,6.11225225 25.0434567,8.2181982 Z M53.0187093,4.4636036 C53.0187093,5.16558559 52.9154377,6.18378378 52.8126903,6.84918919 L50.8730709,19.4873874 L44.5790934,19.4873874 L46.3483408,7.90216216 C46.381891,7.58792793 46.4849879,6.
2024-07-03 07:23:09 UTC	912	IN	Data Raw: 35 2e 35 35 31 35 33 31 35 33 20 36 32 2e 39 35 38 38 32 31 38 2c 35 2e 39 33 37 32 39 37 33 20 36 32 2e 34 31 34 35 30 35 32 2c 36 2e 32 31 38 39 31 38 39 32 20 4c 36 30 2e 34 30 36 32 31 32 38 2c 31 39 2e 34 38 37 37 34 37 37 20 4c 35 34 2e 30 37 38 38 35 39 39 2c 31 39 2e 34 38 37 37 34 37 37 20 4c 35 36 2e 39 37 30 31 31 35 39 2c 30 2e 35 36 36 31 32 36 31 32 36 20 4c 36 32 2e 33 38 31 33 30 34 35 2c 30 2e 35 36 36 31 32 36 31 32 36 20 4c 36 32 2e 35 35 31 33 32 37 2c 32 2e 31 34 35 37 36 35 37 37 20 43 36 33 2e 38 31 30 31 35 37 34 2c 31 2e 31 39 39 30 39 39 31 20 36 35 2e 35 31 30 35 35 37 31 2c 30 2e 32 35 30 30 39 30 30 39 20 36 37 2e 37 39 30 30 34 36 37 2c 30 2e 32 35 30 30 39 30 30 39 20 43 36 39 2e 37 36 33 37 34 30 35 2c 30 2e 32 34 39 33 36 Data Ascii: 5.55153153 62.9588218,5.9372973 62.4145052,6.21891892 L60.4062128,19.4877477 L54.0788599,19.4877477 L56.9701159,0.566126126 L62.3813045,0.566126126 L62.551327,2.14576577 C63.8101574,1.1990991 65.5105571,0.25009009 67.7900467,0.25009009 C69.7637405,0.24936

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49782	151.101.2.133	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	535	OUT	GET /muse/muse.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:09 UTC	790	IN	HTTP/1.1 200 OK Connection: close Content-Length: 55976 Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: application/javascript Etag: "64f25363-daa8" Last-Modified: Fri, 01 Sep 2023 21:10:59 GMT Paypal-Debug-Id: bb51ed7b52b6d Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000bb51ed7b52b6d-10d64920f53320fe-01 DC: ccg11-origin-www-1.paypal.com Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:09 GMT X-Served-By: cache-dfw-kdfw8210120-DFW, cache-nyc-kteb1890098-NYC X-Cache: HIT, HIT X-Cache-Hits: 2569, 0 X-Timer: S1719991389.375716,VS0,VE1 Vary: Accept-Encoding, Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31557600
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 2f 2a 21 0a 20 74 61 67 20 53 45 50 5f 30 31 5f 32 30 32 33 5f 30 31 0a 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 75 73 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 38 30 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 69 29 3f 72 2e 63 61 6c 6c 28 6e 2c 74 2c 6e 2c 65 29 3a 72 29 7c 7c 28 65 2e 65 78 70 6f 72 74 73 3d 6f 29 2c 21 30 2c 65 2e 65 78 70 6f 72 74 73 3d 69 28 29 2c 21 21 30 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 43 6f 6f Data Ascii: /! tag SEP_01_2023_01 For license information please see muse.js.LICENSE.txt /!function(){var e={808:function(e,n,t){var r,o;!function(i){if(void 0===(o="function"==typeof(r=i)?r.call(n,t,n,e):r)\|\|(e.exports=o),!0,e.exports=i(),!!0){var a=window.Coo
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 2e 63 68 61 72 41 74 28 30 29 7c 7c 28 75 3d 75 2e 73 6c 69 63 65 28 31 2c 2d 31 29 29 3b 74 72 79 7b 76 61 72 20 73 3d 6e 28 63 5b 30 5d 29 3b 69 66 28 75 3d 28 72 2e 72 65 61 64 7c 7c 72 29 28 75 2c 73 29 7c 7c 6e 28 75 29 2c 74 29 74 72 79 7b 75 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 75 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 6f 5b 73 5d 3d 75 2c 65 3d 3d 3d 73 29 62 72 65 61 6b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 65 3f 6f 5b 65 5d 3a 6f 7d 7d 72 65 74 75 72 6e 20 6f 2e 73 65 74 3d 69 2c 6f 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 21 31 29 7d 2c 6f 2e 67 65 74 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 21 30 29 7d 2c 6f 2e 72 65 6d 6f 76 65 3d 66 Data Ascii: .charAt(0)\|\|(u=u.slice(1,-1));try{var s=n(c[0]);if(u=(r.read\|\|r)(u,s)\|\|n(u),t)try{u=JSON.parse(u)}catch(e){}if(o[s]=u,e===s)break}catch(e){}}return e?o[e]:o}}return o.set=i,o.get=function(e){return a(e,!1)},o.getJSON=function(e){return a(e,!0)},o.remove=f
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 22 50 72 6f 6d 69 73 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 29 29 2c 74 2e 64 28 6e 2c 22 54 59 50 45 53 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 50 72 6f 78 79 57 69 6e 64 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 73 65 74 75 70 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 64 65 73 74 72 6f 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 73 65 72 69 61 6c 69 7a 65 4d 65 73 73 61 67 65 22 Data Ascii: {}.toString.call(e)}t.r(n),t.d(n,"Promise",(function(){return W})),t.d(n,"TYPES",(function(){return He})),t.d(n,"ProxyWindow",(function(){return Pe})),t.d(n,"setup",(function(){return Je})),t.d(n,"destroy",(function(){return Ue})),t.d(n,"serializeMessage"
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 3d 3d 65 26 26 28 65 3d 77 69 6e 64 6f 77 29 3b 76 61 72 20 6e 3d 73 28 65 29 3b 72 65 74 75 72 6e 20 6e 26 26 65 2e 6d 6f 63 6b 44 6f 6d 61 69 6e 26 26 30 3d 3d 3d 65 2e 6d 6f 63 6b 44 6f 6d 61 69 6e 2e 69 6e 64 65 78 4f 66 28 22 6d 6f 63 6b 3a 22 29 3f 65 2e 6d 6f 63 6b 44 6f 6d 61 69 6e 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 69 66 28 65 3d 3d 3d 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 22 6c 6f 63 61 74 69 6f 6e 22 29 3b 69 66 28 6e 26 26 21 31 3d 3d 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 29 72 65 74 75 72 6e 21 31 Data Ascii: ==e&&(e=window);var n=s(e);return n&&e.mockDomain&&0===e.mockDomain.indexOf("mock:")?e.mockDomain:n}function d(e){if(!function(e){try{if(e===window)return!0}catch(e){}try{var n=Object.getOwnPropertyDescriptor(e,"location");if(n&&!1===n.enumerable)return!1
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 7d 28 70 2c 65 29 3b 69 66 28 2d 31 21 3d 3d 74 29 7b 76 61 72 20 72 3d 6d 5b 74 5d 3b 69 66 28 72 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6e 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 69 66 28 6e 26 26 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 3b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 21 3d 3d 74 3b 29 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 74 2e 68 6f 73 74 7c 7c 21 6e 2e Data Ascii: }(p,e);if(-1!==t){var r=m[t];if(r&&function(e){if(!e.contentWindow)return!0;if(!e.parentNode)return!0;var n=e.ownerDocument;if(n&&n.documentElement&&!n.documentElement.contains(e)){for(var t=e;t.parentNode&&t.parentNode!==t;)t=t.parentNode;if(!t.host\|\|!n.
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 74 72 79 7b 65 2e 63 6c 6f 73 65 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 74 72 79 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 50 72 6f 6d 69 73 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 57 69 6e 64 6f 77 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 77 69 6e 64 6f 77 2e 57 69 6e 64 6f 77 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 Data Ascii: eturn!1}function _(e){try{e.close()}catch(e){}}function P(e){try{if(!e)return!1;if("undefined"!=typeof Promise&&e instanceof Promise)return!0;if("undefined"!=typeof window&&"function"==typeof window.Window&&e instanceof window.Window)return!1;if("undefine
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 69 66 28 74 68 69 73 2e 72 65 73 6f 6c 76 65 64 7c 7c 74 68 69 73 2e 72 65 6a 65 63 74 65 64 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 50 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 20 6e 6f 74 20 72 65 6a 65 63 74 20 70 72 6f 6d 69 73 65 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 70 72 6f 6d 69 73 65 22 29 3b 69 66 28 21 65 29 7b 76 61 72 20 74 3d 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 3b 65 3d 6e 65 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 72 65 6a 65 63 74 20 74 6f 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 Data Ascii: (e){var n=this;if(this.resolved\|\|this.rejected)return this;if(P(e))throw new Error("Can not reject promise with another promise");if(!e){var t=e&&"function"==typeof e.toString?e.toString():{}.toString.call(e);e=new Error("Expected reject to be called with
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 70 65 6f 66 20 6e 26 26 21 6e 2e 63 61 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 74 68 65 6e 20 65 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 20 66 6f 72 20 73 75 63 63 65 73 73 20 68 61 6e 64 6c 65 72 22 29 3b 69 66 28 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 21 74 2e 63 61 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 74 68 65 6e 20 65 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 20 66 6f 72 20 65 72 72 6f 72 20 68 61 6e 64 6c 65 72 22 29 3b 76 61 72 20 72 3d 6e 65 77 20 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 2e 70 75 73 68 28 7b 70 72 6f 6d 69 73 65 3a 72 2c 6f 6e 53 75 63 63 65 73 73 3a 6e 2c Data Ascii: peof n&&!n.call)throw new Error("Promise.then expected a function for success handler");if(t&&"function"!=typeof t&&!t.call)throw new Error("Promise.then expected a function for error handler");var r=new e;return this.handlers.push({promise:r,onSuccess:n,
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 69 2e 72 65 6a 65 63 74 28 65 29 7d 29 29 7d 2c 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 63 3d 6e 5b 61 5d 3b 69 66 28 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 7b 69 66 28 63 2e 72 65 73 6f 6c 76 65 64 29 7b 6f 5b 61 5d 3d 63 2e 76 61 6c 75 65 2c 72 2d 3d 31 3b 63 6f 6e 74 69 6e 75 65 7d 7d 65 6c 73 65 20 69 66 28 21 50 28 63 29 29 7b 6f 5b 61 5d 3d 63 2c 72 2d 3d 31 3b 63 6f 6e 74 69 6e 75 65 7d 69 28 61 2c 65 2e 72 65 73 6f 6c 76 65 28 63 29 2c 74 29 7d 72 65 74 75 72 6e 20 30 3d 3d 3d 72 26 26 74 2e 72 65 73 6f 6c 76 65 28 6f 29 2c 74 7d 2c 65 2e 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 2c 72 3d 5b 5d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 2e Data Ascii: tion(e){i.reject(e)}))},a=0;a<n.length;a++){var c=n[a];if(c instanceof e){if(c.resolved){o[a]=c.value,r-=1;continue}}else if(!P(c)){o[a]=c,r-=1;continue}i(a,e.resolve(c),t)}return 0===r&&t.resolve(o),t},e.hash=function(n){var t={},r=[],o=function(e){if(n.
2024-07-03 07:23:09 UTC	1379	IN	Data Raw: 74 76 61 6c 75 65 5f 5f 22 3d 3d 3d 65 2e 67 65 74 28 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 74 72 79 7b 74 68 69 73 2e 77 65 61 6b 6d 61 70 3d 6e 65 77 20 57 65 61 6b 4d 61 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 68 69 73 2e 6b 65 79 73 3d 5b 5d 2c 74 68 69 73 2e 76 61 6c 75 65 73 3d 5b 5d 7d 76 61 72 20 6e 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 5f 63 6c 65 61 6e 75 70 43 6c 6f 73 65 64 57 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 77 65 61 6b 6d 61 70 2c 6e 3d 74 68 69 73 2e 6b 65 79 73 2c 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 6e 5b 74 5d 3b 69 66 28 62 28 72 29 26 26 76 28 72 29 29 7b 69 66 28 65 Data Ascii: tvalue__"===e.get(n)}catch(e){return!1}}())try{this.weakmap=new WeakMap}catch(e){}this.keys=[],this.values=[]}var n=e.prototype;return n._cleanupClosedWindows=function(){for(var e=this.weakmap,n=this.keys,t=0;t<n.length;t++){var r=n[t];if(b(r)&&v(r)){if(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49783	151.101.193.35	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	1240	OUT	GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ANGJ83G9Z8QXZ8-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&fltp=analytics&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991387835&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:09 UTC	921	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 5662b3f4aaa57 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Wed, 03 Jul 2024 07:23:09 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 5662b3f4aaa57 Pragma: no-cache Traceparent: 00-00000000000000000005662b3f4aaa57-c77ad1ef336ce2be-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:09 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100131-IAD, cache-ewr18156-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1719991390.715400,VS0,VE73 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000005662b3f4aaa57-43ab8b87a68c2ef2-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-07-03 07:23:09 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-07-03 07:23:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-07-03 07:23:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-03 07:23:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49789	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:09 UTC	1354	OUT	POST /track/?verbose=1&ip=1&_=1719991388676 HTTP/1.1 Host: proxy-service.actblue.com Connection: keep-alive Content-Length: 8965 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://secure.actblue.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _gcl_au=1.1.227088756.1719991386
2024-07-03 07:23:09 UTC	8965	OUT	Data Raw: 64 61 74 61 3d 57 77 6f 67 49 43 41 67 65 79 4a 6c 64 6d 56 75 64 43 49 36 49 43 4a 44 52 6a 6f 67 5a 32 39 76 5a 32 78 6c 49 48 42 68 65 54 6f 67 59 58 5a 68 61 57 78 68 59 6d 78 6c 49 69 77 69 63 48 4a 76 63 47 56 79 64 47 6c 6c 63 79 49 36 49 48 73 69 4a 47 39 7a 49 6a 6f 67 49 6c 64 70 62 6d 52 76 64 33 4d 69 4c 43 49 6b 59 6e 4a 76 64 33 4e 6c 63 69 49 36 49 43 4a 44 61 48 4a 76 62 57 55 69 4c 43 49 6b 59 33 56 79 63 6d 56 75 64 46 39 31 63 6d 77 69 4f 69 41 69 61 48 52 30 63 48 4d 36 4c 79 39 7a 5a 57 4e 31 63 6d 55 75 59 57 4e 30 59 6d 78 31 5a 53 35 6a 62 32 30 76 5a 47 39 75 59 58 52 6c 4c 33 41 79 63 43 30 79 4e 44 41 33 4d 44 49 74 61 6d 4a 30 61 54 39 79 5a 57 5a 6a 62 32 52 6c 50 58 52 68 58 32 4d 79 4a 6e 4a 6c 5a 6d 4e 76 5a 47 55 79 64 7a Data Ascii: data=WwogICAgeyJldmVudCI6ICJDRjogZ29vZ2xlIHBheTogYXZhaWxhYmxlIiwicHJvcGVydGllcyI6IHsiJG9zIjogIldpbmRvd3MiLCIkYnJvd3NlciI6ICJDaHJvbWUiLCIkY3VycmVudF91cmwiOiAiaHR0cHM6Ly9zZWN1cmUuYWN0Ymx1ZS5jb20vZG9uYXRlL3AycC0yNDA3MDItamJ0aT9yZWZjb2RlPXRhX2MyJnJlZmNvZGUydz
2024-07-03 07:23:09 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://secure.actblue.com Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Via: 1.1 google, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:09 GMT
2024-07-03 07:23:09 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49791	142.250.185.132	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	1854	OUT	GET /pagead/1p-conversion/11154426359/?random=1418267285&cv=11&fst=1719991386522&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECIgEBOAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=COXovtyWp_LdOiITCJasxp2riocDFRBqHgIdLNc7LDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhtodHRwczovL3NlY3VyZS5hY3RibHVlLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLgrlq7CFg_jfeJC8uMT1vxr-x3eGs1QP3rnKnidjfvfF6WhVm&random=3968354639 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:10 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 07:23:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49796	35.71.131.137	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	885	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610&google_gid=CAESEFNkMgYqH-YZOkYqe_wg1Cw&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; TDCPM=CAESFQoGZ29vZ2xlEgsIgoLY3oChiz0QBRgFKAEyCwjq3a7z9s6NPRAFQg8iDQgBEgkKBXRpZXIzEAFaB25jb2NyaWdgAXIGZ29vZ2xl
2024-07-03 07:23:10 UTC	712	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 07:23:10 GMT Content-Length: 409 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=fbcaf041-6718-4afd-b973-8f173c1ee610&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon set-cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; expires=Thu, 03 Jul 2025 07:23:10 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI_vKv5ODOjT0QBRIWCgdydWJpY29uEgsImJmw5ODOjT0QBRgFIAEoATILCOrdrvP2zo09EAVCDyINCAESCQoFdGllcjMQAVoHbmNvY3JpZ2ABcgdydWJpY29u; expires=Thu, 03 Jul 2025 07:23:10 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-07-03 07:23:10 UTC	409	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 66 62 63 61 66 30 34 31 2d 36 37 31 38 2d 34 61 66 64 2d 62 39 37 33 2d 38 66 31 37 33 63 31 65 65 36 31 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 26 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 72 75 62 69 63 6f 6e 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=fbcaf041-6718-4afd-b973-8f173c1ee610&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon">https://pixel.rubiconproject.com/tap.ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49794	142.250.184.228	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	1346	OUT	GET /pagead/1p-user-list/11154426359/?random=1719991386424&cv=11&fst=1719990000000&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLMjK87kHkN4ni2YeOWbadnIkhWl5BBA&random=1467784109&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:10 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 07:23:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49795	142.250.186.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	338	OUT	HEAD /pay HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	338	IN	HTTP/1.1 302 Found Location: https://pay.google.com/about/redirect/ Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 03 Jul 2024 07:23:10 GMT Server: sffe Content-Length: 235 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49797	3.255.41.64	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	945	OUT	GET /sp.pl?a=10000&d=Wed%2C%2003%20Jul%202024%2007%3A23%3A09%20GMT&n=4d&.yp=10111714&f=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&e=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&enc=UTF-8&yv=1.15.1&isIframe=1 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	937	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:10 GMT Expires: Wed, 03 Jul 2024 07:23:10 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.121 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.121) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBF78hGYCEK8QIUmvgLdTLE0LG3YQIzEFEgEBAQFNhmaOZtxA0iMA_eMAAA&S=AQAAAoRhpaIxCTlvUNagQiqbDtA; Expires=Thu, 3 Jul 2025 13:23:10 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-07-03 07:23:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49799	87.248.119.251	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	357	OUT	GET /wi/config/10111714.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	618	IN	HTTP/1.1 200 OK x-amz-request-id: XG57DJR5ZS7279Z0 x-amz-id-2: UOb6cFo/6PHKwoiG8rvZvqzS9rWR1b1FTmcHWR4AVPExVaJCEej8rYxZJmvm2mBTUrqPuyW5qiiw6SjglKDFEYiv2sOOjzH0 Content-Type: application/json Date: Wed, 03 Jul 2024 07:23:10 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Cache-Control: public,max-age=3600 Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-07-03 07:23:10 UTC	3	IN	Data Raw: 32 0d 0a Data Ascii: 2
2024-07-03 07:23:10 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}
2024-07-03 07:23:10 UTC	5	IN	Data Raw: 0d 0a 30 0d 0a Data Ascii: 0
2024-07-03 07:23:10 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49792	192.229.221.25	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	379	OUT	GET /js-sdk-logos/2.2.7/venmo-white.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	705	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Date: Wed, 03 Jul 2024 07:23:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"642c9aac-e56" Expires: Wed, 03 Jul 2024 08:23:10 GMT Last-Modified: Tue, 04 Apr 2023 21:46:20 GMT Paypal-Debug-Id: d39e341060568 Server: ECAcc (lhd/35A6) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000d39e341060568-3ffe6fb6554cf58e-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3670 Connection: close
2024-07-03 07:23:10 UTC	3670	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 31 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 31 20 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 26 23 78 32 46 3b 26 23 78 32 46 3b 77 77 77 2e 77 33 2e 6f 72 67 26 23 78 32 46 3b 32 30 30 30 26 23 78 32 46 3b 73 76 67 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 3c 67 20 69 64 3d 22 50 61 67 65 2d 31 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 67 20 69 64 3d 22 42 6c 75 65 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 3c 67 20 69 64 3d 22 4c Data Ascii: <svg width="101" height="32" viewBox="0 0 101 32" xmlns="http://www.w3.org/2000/svg" preserveAspectRatio="xMinYMin meet"><g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Blue" fill="#ffffff"><g id="L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	192.229.221.25	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	379	OUT	GET /js-sdk-logos/2.2.7/paypal-blue.svg HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	705	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: image/svg+xml Date: Wed, 03 Jul 2024 07:23:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: W/"642c9aab-cc2" Expires: Wed, 03 Jul 2024 08:23:10 GMT Last-Modified: Tue, 04 Apr 2023 21:46:19 GMT Paypal-Debug-Id: e0953c7feefe8 Server: ECAcc (lhd/3598) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e0953c7feefe8-86f3c87ec4d932d9-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 3266 Connection: close
2024-07-03 07:23:10 UTC	3266	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 31 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 31 20 33 32 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 26 23 78 32 46 3b 26 23 78 32 46 3b 77 77 77 2e 77 33 2e 6f 72 67 26 23 78 32 46 3b 32 30 30 30 26 23 78 32 46 3b 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 33 30 38 37 22 20 64 3d 22 4d 20 31 32 2e 32 33 37 20 32 2e 38 20 4c 20 34 2e 34 33 37 20 32 2e 38 20 43 20 33 2e 39 33 37 20 32 2e 38 20 33 2e 34 33 37 20 33 2e 32 20 33 2e 33 33 37 20 33 2e 37 20 4c 20 30 2e 32 33 37 20 32 33 2e 37 20 43 20 30 2e 31 33 37 20 32 34 2e 31 20 30 2e 34 33 37 Data Ascii: <svg width="101px" height="32" viewBox="0 0 101 32" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path fill="#003087" d="M 12.237 2.8 L 4.437 2.8 C 3.937 2.8 3.437 3.2 3.337 3.7 L 0.237 23.7 C 0.137 24.1 0.437

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49804	151.101.129.35	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	1002	OUT	GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ANGJ83G9Z8QXZ8-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&fltp=analytics&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991387835&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	928	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: fe83f4934fb3d Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Wed, 03 Jul 2024 07:23:10 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: fe83f4934fb3d Pragma: no-cache Traceparent: 00-0000000000000000000fe83f4934fb3d-a8c6833f723f5bee-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:10 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100131-IAD, cache-nyc-kteb1890046-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1719991390.435700,VS0,VE73 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000fe83f4934fb3d-9cbf29477e80d4e8-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-07-03 07:23:10 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-07-03 07:23:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-07-03 07:23:10 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49807	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	3998	OUT	GET /sdk/js?client-id=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&locale=en_US&disable-funding=credit,card&intent=capture&commit=false&enable-funding=venmo HTTP/1.1 Host: www.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.paypal.com/smart/buttons?env=production&style.label=paypal&style.layout=vertical&style.color=gold&style.shape=rect&style.tagline=false&style.height=44&style.menuPlacement=below&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_2c8c73eb5d_mdc6mjm6mdc&buttonSize=large&customerId=&clientID=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&clientMetadataID=uid_f55323b669_mdc6mjm6mdc&commit=false&components.0=buttons&currency=USD&debug=false&disableFunding.0=credit&disableFunding.1=card&disableSetCookie=true&enableFunding.0=venmo&experiment.enableVenmo=true&experiment.venmoVaultWithoutPurchase=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjpmYWxzZSwidmF1bHRhYmxlIjpmYWxzZSwicHJvZHVjdHMiOnsicGF5SW4zIjp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheUluNCI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9LCJwYXlsYXRlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9fX0sImN [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	1276	IN	HTTP/1.1 200 OK Connection: close Content-Length: 83202 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server-Timing Cache-Control: public, max-age=3600, s-maxage=10800 Content-Encoding: gzip Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; script-src 'nonce-YWI+6S6ehxHUVbBvnUfYXC4qddtbmUTP9N3xBSmJMdcfr2Bu' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; style-src 'nonce-YWI+6S6ehxHUVbBvnUfYXC4qddtbmUTP9N3xBSmJMdcfr2Bu' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/javascript; charset=utf-8 Disable-Set-Cookie: true Etag: W/"14502-86HFSuCYQkMIvFmxMdb8zkEMpuE"
2024-07-03 07:23:10 UTC	1388	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc 7d e9 7f da 48 93 f0 f7 fd 2b b0 76 1e af 14 0b 8c 73 cc 21 a2 61 b1 8d 6d 62 83 19 83 e3 24 0e cb 4f 86 c6 28 16 12 23 09 1f 31 fc ef 6f 55 5f 6a 1d e0 cc cc f3 ee 87 9d c3 80 d4 47 75 75 75 75 75 75 1d fa 64 e1 8f 62 37 f0 f5 e7 e1 f0 a8 75 d1 eb 0f 2f 9a 9d c3 e6 c5 b0 f9 a9 db bc 68 b5 9b 9d 7e 6f 38 34 e1 e5 65 e7 b0 d5 39 1e 36 cf 5a c7 ad fd d6 59 ab ff 99 3e 6f 37 7b bd c6 31 be 39 3e 3b df 6f 9c 41 e9 95 f1 fc 1f 25 f8 67 f7 d5 56 e9 28 08 4b 9e 3b 22 7e 44 4a ae 3f 09 c2 99 83 dd 95 e6 1e 71 e0 51 44 48 29 58 c4 f3 45 5c f9 16 55 ce 5a 07 cd 4e af 59 89 1f e3 d2 ab dd ff d8 92 c0 f9 26 31 9e a1 b2 7e ef 84 a5 18 1a 2a 11 c3 bf 8e 07 36 81 3f 2b fd c1 f5 c7 c1 83 99 14 37 9e b1 20 b1 9f 57 35 f1 b0 14 eb a1 f1 ec Data Ascii: }H+vs!amb$O(#1oU_jGuuuuuudb7u/h~o84e96ZY>o7{19>;oA%gV(K;"~DJ?qQDH)XE\UZNY&1~*6?+7 W5
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: df fd 97 7e 5d 2d ff d6 28 1f 0d 9e 5f af 8c dd 5b 53 2f da 82 4a 6c 33 a8 4c c2 60 76 00 3c f2 00 9a d4 b5 ea a3 b6 43 90 3d 19 3b 1a 32 2a 33 0b 3f e5 73 3b f7 95 89 eb 91 1d ad ae ed 3c f1 82 14 7d 07 81 1f 03 38 1a 6c d2 0f f5 87 8a f2 c8 6e 5a 80 4a c4 7f 6f 4a 08 cc 4c 14 f5 e1 ad dd 34 6f 00 4b a3 ba 9c b2 29 71 c6 15 17 84 db 30 de 27 40 d5 44 7f 30 d3 2f 47 b8 1e 70 7d 44 40 41 86 95 7e 09 f8 04 52 66 4b e6 01 d6 0b f1 60 f1 22 21 ed ec 08 91 31 50 a4 83 89 51 b0 e0 d9 1a 8f f5 df 40 ec 84 8f 3d 03 d6 54 8e 1d 86 75 60 85 15 17 b6 42 e4 84 56 58 d3 41 8e 90 8b 33 ac 78 01 6c e9 d1 72 f9 bc 32 2a 43 a0 59 81 87 fc e6 eb 22 03 a6 45 a2 28 ff 1a d6 4a 48 0b 30 9c a4 ca c8 8d 08 98 90 0b bb c1 86 b1 fc fa 7f 68 2c 7b d5 ff 4b 83 d9 fb bf 34 98 d7 ff Data Ascii: ~]-(_[S/Jl3L`v<C=;23?s;<}8lnZJoJL4oK)q0'@D0/Gp}D@A~RfK`"!1PQ@=Tu`BVXA3xlr2CY"E(JH0h,{K4
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: ba 03 0e 53 3c c2 54 49 90 d6 8f 60 c5 17 53 84 5a b2 eb 3c a1 5c 7c e4 12 6f 5c 0c 42 4f 2d de 06 26 55 3c ff a9 52 c1 d8 f1 8a e7 5d 2d d6 02 b1 1c f6 38 2a 97 17 2f 0b b5 f4 1f 17 78 8b 51 bc 2a d4 72 1f 71 a7 2c 5e b9 6a 31 8e f5 3e 99 cd 91 01 16 cf 6a 0a 53 c1 7c 31 3f 9f 13 bf 19 86 41 58 58 be a5 96 87 91 05 0f 2d aa 32 2a 2c dc 56 0b 03 7b 1e 91 0d 85 f7 d5 c2 9c 41 34 bc 62 1c 1f aa 65 d7 f3 9c cb 82 26 0b 0b fe 19 09 e2 75 04 f1 3a ac a2 03 7c 72 0a f2 d0 61 30 83 a3 50 8f c0 86 59 0c fe 95 ec 0b aa c0 96 15 5f 04 37 41 31 1d 7f 93 bd 2d 52 37 b1 9e b4 7a c1 bb 1d db f6 0d 61 6d 51 4b cc 16 9e 57 a6 2b ec 57 ee c8 53 84 f7 ae 78 79 1a da d5 5a f8 de 15 37 99 e1 ce 8e 41 2a b0 9a c9 e3 f9 44 8f 6d 17 6d 9c 7e b7 ab cb a5 1e a0 99 14 da 4a c9 db Data Ascii: S<TI`SZ<\\|o\BO-&U<R]-8/xQrq,^j1>jS\|1?AXX-2,V{A4be&u:\|ra0PY_7A1-R7zamQKW+WSxyZ7ADmm~J
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: 78 f7 44 37 56 09 d5 74 a1 4a 6f c7 56 96 fb 05 3e 29 db 7b 26 b4 46 bb 3b 52 2d 4b 64 31 c5 52 1c 49 92 da f0 a3 d5 2e ef 44 58 7d 9a fc 21 a2 25 f3 90 e0 49 f7 c4 c1 53 45 fa 05 b5 e9 cf 17 4d 3d 99 d2 7a 61 94 7a 88 32 2b a2 0e 2d d5 d5 e7 40 15 a3 bb 0c 40 1c ca ad bd 0c 84 e2 41 0a 3a f1 50 f6 0a 98 f7 55 8b 76 28 e0 e2 1f 07 ed 49 01 a7 35 5c 88 7e da a2 d7 a9 13 39 05 be 61 e9 01 9a 9c c6 70 d4 5c 19 66 41 41 84 87 96 73 b1 5c 48 cb 19 59 d2 c0 d9 32 e9 c0 94 51 e0 0e 83 cf 1d ea f6 52 57 07 ac c7 86 e5 6e 6f ab 85 43 20 07 ee cb 90 b0 d0 c4 f4 9f 57 b4 33 b6 c9 29 2c 2e 97 29 1c 1a 8a 6b 00 d2 05 72 26 23 86 ed f8 a1 84 57 6a 54 c3 a1 6b 07 0e 10 51 10 97 78 23 28 58 20 eb 81 95 1b 4f 4b 0e bc 99 92 50 3c d4 e4 79 39 33 7b 29 8a f1 d3 54 00 18 c0 Data Ascii: xD7VtJoV>){&F;R-Kd1RI.DX}!%ISEM=zaz2+-@@A:PUv(I5\~9ap\fAAs\HY2QRWnoC W3),.)kr&#WjTkQx#(X OKP<y93{)T
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: 54 be 86 5f 7d 2d 01 a3 bd 5e 39 ce f4 6f 88 76 f4 66 c2 d2 4c b9 30 0a bc 44 d5 b4 cf 17 e6 da ba 78 ed cd ae ff 65 bc 05 e5 19 25 d5 58 d7 76 77 35 03 7d c2 e9 b1 42 60 52 cc 7d 3b a5 6f 3f 7c 19 62 cd b9 81 89 b6 10 8f fb a9 ba 97 2f 40 6b 70 e5 ab cf fd b0 31 32 04 fb b6 95 18 14 94 c4 b3 e4 f0 a1 68 e3 fe 7c a1 0b 58 4d 97 54 fb 00 3d c9 f6 80 99 f9 24 2c 6c ef 44 e8 84 f3 aa c5 02 45 ff 15 d5 8b 14 76 5d 13 d8 17 b3 49 37 30 b2 49 0d e2 8c b9 12 b6 24 ea f0 15 1d db 6d ae 5d dd 8a 7f ac 01 41 39 4c fe d7 d0 c2 de 52 15 ab ec 09 90 01 7d 9d cc 9f f4 c8 43 a4 c9 50 1e db db 27 ba 51 bf 02 ce 6c f1 b2 50 73 c5 f7 81 ca 34 88 62 0a 5b f0 63 b0 61 79 45 36 de 41 6a dc 51 ac 3a be bd 88 d4 2b 05 38 d4 c7 2b 14 be bd 4d 2b a9 34 2f b8 b2 86 cf 2c 0d 84 24 Data Ascii: T_}-^9ovfL0Dxe%Xvw5}B`R};o?\|b/@kp12h\|XMT=$,lDEv]I70I$m]A9LR}CP'QlPs4b[cayE6AjQ:+8+M+4/,$
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: 86 f8 9e 9e 50 d9 86 0b 45 5b 46 76 cf 2e 32 99 2a 50 48 fd cd d6 ff b2 75 d9 5f 6c 9f 16 88 88 37 51 c4 d1 bf d5 06 db ea fe 69 2b 20 86 fc b3 26 b4 e1 70 e1 7b ee 1d f1 9e 86 54 39 3f 1c 52 b6 51 19 0e 47 61 10 45 43 76 48 1c 2e 62 d7 8b 86 0c 83 c3 11 ba 82 0d 87 3f 20 c5 51 77 1b e1 ec 87 f1 55 31 04 2b 60 4f 7c 97 da 01 1a 7b f5 87 ce bb 91 90 6f be 2b 6b 03 0f c1 6c c3 e4 02 42 66 6b 90 91 dc fe 5c 90 f0 a9 47 0d 8f 83 b0 01 94 26 34 9d 1b 25 79 26 5f 85 69 79 2a f7 40 3d a1 a8 42 fc 58 40 fc e3 aa 0a c1 3f 2f 85 35 bb 38 05 d0 d1 4b 81 8c 11 11 1f b2 a1 36 99 79 97 8d f7 48 cd cf 98 f0 ac 1b 85 d2 c2 e4 df 2b bd 62 13 73 df 9c fa 6b 8c 05 13 a3 31 2a 52 a9 b6 78 0f c4 b9 c3 2b 10 f5 19 ba 57 e5 6d 02 d3 8f 68 43 40 df bc fe 50 db d1 f7 c8 6f af da Data Ascii: PE[Fv.2PHu_l7Qi+ &p{T9?RQGaECvH.b? QwU1+`O\|{o+klBfk\G&4%y&_iy@=BX@?/58K6yH+bsk1*Rx+WmhC@Po
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: ac 32 c4 0c 60 85 2a 13 26 5e 00 a0 a5 f4 0a af 84 a2 84 52 da 8e 06 1d c0 3a a0 26 c2 87 c0 d6 70 a4 ad de b9 d0 a0 73 5c ee ed 99 7b bf 25 44 a3 f5 35 53 ab 68 29 3a fd 1f a7 fc bd 51 fe 02 8b 80 d3 13 34 74 16 3c 90 f0 c0 a1 9a 1c 39 f2 c7 bc 08 92 f1 9b 4d 5f 74 d7 fe 0d 65 99 b3 ab 28 cb 7e e5 67 b0 13 f0 57 a5 09 c6 b7 56 a7 ab e3 a7 ed d1 4a 19 c5 bf b0 8f 16 3b 66 f1 f2 2f 58 19 a4 ae cd c8 2c 70 bf 93 6b 6d 27 b3 3d cf 7d 7b ee 33 9b ca a9 6f f2 f0 3e c0 25 39 6f de 52 38 fb 0b 7b 2f 1f 60 cb 87 ad 09 b6 50 de 80 90 ef e7 be d8 38 05 0b a7 61 0f 44 3b 3b 9a a5 ed 20 bd 9a 73 5f 2a 03 30 d3 13 1c 04 76 b4 81 66 3d a0 f9 28 cd ba 92 3a 7b e7 ba 6f 88 2d 97 ae 13 11 71 0d f7 c0 52 b9 5c 1a f1 f5 03 fb ff 02 c4 77 34 07 e2 98 d1 54 b7 df 46 42 ec cf Data Ascii: 2`&^R:&ps\{%D5Sh):Q4t<9M_te(~gWVJ;f/X,pkm'=}{3o>%9oR8{/`P8aD;; s_0vf=(:{o-qR\w4TFB
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: 30 79 73 a2 f9 cc 66 52 5e d3 11 db 33 52 3d f1 9a 46 6d 43 de ec 8c ee d6 cc e7 d1 ce 0b df 48 69 e2 5e 2f b9 35 a2 f4 17 62 00 85 14 11 c4 a9 6a 26 2d 15 af 56 0a b2 3f 28 b3 96 d5 3c 24 a5 7e 52 b7 8a 0c c6 30 6f 9b 21 91 86 0a 5f 61 fb c6 46 be ce f6 2d 1b d2 f0 0f 79 a9 48 7b cb 46 2a f3 55 9d fa 9a 3b 82 9c 07 0f c9 99 74 6c 61 eb b8 51 6f a1 e1 75 7a 3f d2 a8 33 ab b8 f1 52 85 6f 9f 28 24 99 39 9d 68 9a 61 e6 a9 54 31 0d 56 5d df 4d c5 9d 1d 64 e3 4f 68 4c 1b a6 b8 33 37 c3 ae c7 3b 5a 45 db 09 2d cc 5f 07 b5 c4 3e 69 06 62 ce f5 3f f0 c8 b7 5c a6 fb 76 a9 51 30 1e 20 75 17 20 06 ce 60 ba 8a 73 7b c8 0e 91 c0 ef 92 d8 cb 68 81 e9 4b eb 2b 0c 09 6d 7a 29 28 99 25 7d 6e f3 16 07 08 e1 05 a4 d5 60 38 8b ff 9d e1 48 46 3b 62 b2 85 a7 8f e4 88 16 ab bc Data Ascii: 0ysfR^3R=FmCHi^/5bj&-V?(<$~R0o!_aF-yH{F*U;tlaQouz?3Ro($9haT1V]MdOhL37;ZE-_>ib?\vQ0 u `s{hK+mz)(%}n`8HF;b
2024-07-03 07:23:10 UTC	1378	IN	Data Raw: 44 02 a4 2b a0 08 6b b4 92 1b d1 c8 36 4f 34 ff a4 10 f3 e0 d0 0a 32 fd 38 20 cc de 80 3c ba 18 ef 46 58 fd e3 9a 45 b1 0b b6 a2 82 63 91 ce e1 31 ea 3a 8d da 46 51 47 8f 00 b2 12 9c 72 2d 84 ac ae 67 9f 9b ff 1c 48 39 89 86 b9 57 a5 a2 54 b7 f8 f4 96 17 de 38 c2 96 cb 91 82 36 5f 17 1c 68 dd b8 0b ab a5 47 86 8b 96 6a de 39 48 1c 97 e7 c4 ec af 3d f9 bc 64 6f c0 4e 3e 79 a1 df 21 8a b4 ff a8 6e eb 36 90 2e c1 2d dc 60 5e 62 e7 fe a5 8f d2 a8 29 c2 ac a3 92 a7 be 67 c5 74 f7 a7 c7 27 37 79 13 d4 35 cd 62 b6 1d 34 59 a4 b9 40 a1 80 66 90 44 a5 33 6c e7 d5 1a 1a 37 70 e6 17 2c 60 ec 57 58 b0 3e b2 95 8b 9f fc fb b2 63 ec be 36 76 f8 73 96 0e f5 93 95 fa c9 7a 84 c6 0b 9b 52 cb b0 c6 e0 44 bf c8 80 72 42 21 ad 7b 6b 61 61 05 ca 8b 3c 30 9f 33 c0 b0 41 43 fb Data Ascii: D+k6O428 <FXEc1:FQGr-gH9WT86_hGj9H=doN>y!n6.-`^b)gt'7y5b4Y@fD3l7p,`WX>c6vszRDrB!{kaa<03AC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49800	192.229.221.25	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	711	OUT	GET /muse/analytics/index.html HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	680	IN	HTTP/1.1 200 OK Cache-Control: s-maxage=31536000, public,max-age=3600 Content-Type: text/html Date: Wed, 03 Jul 2024 07:23:10 GMT DC: ccg11-origin-www-1.paypal.com Etag: "64f25363-dacc+gzip+ident" Expires: Wed, 03 Jul 2024 08:23:10 GMT Last-Modified: Fri, 01 Sep 2023 21:10:59 GMT Paypal-Debug-Id: f1b23341c247c Server: ECAcc (lhd/3585) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000f1b23341c247c-2b366c754d07898c-01 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff Content-Length: 56012 Connection: close
2024-07-03 07:23:10 UTC	16383	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 20 64 61 74 61 2d 64 61 74 65 3d 22 74 61 67 20 53 45 50 5f 30 31 5f 32 30 32 33 5f 30 31 20 20 46 72 69 20 53 65 70 20 30 31 20 32 30 32 33 20 31 36 3a 35 32 3a 32 34 20 47 4d 54 2d 30 34 30 30 20 28 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 29 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 69 65 2d 63 68 65 63 6b 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 39 5d 3e 3c 64 69 76 20 69 64 3d 22 69 73 2d 69 65 2d 6c 74 65 2d 39 22 3e 3c 2f 64 69 76 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 61 70 70 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 Data Ascii: <html><head data-date="tag SEP_01_2023_01 Fri Sep 01 2023 16:52:24 GMT-0400 (Eastern Daylight Time)"></head><body><div id="ie-check">...[if lte IE 9]><div id="is-ie-lte-9"></div><![endif]--></div><div id="app-container"></div><script>/*! For license inf
2024-07-03 07:23:10 UTC	1	IN	Data Raw: 6d Data Ascii: m
2024-07-03 07:23:10 UTC	16383	IN	Data Raw: 65 2c 6e 2e 6e 61 6d 65 3d 65 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 6e 2e 5f 5f 6e 61 6d 65 5f 5f 3d 6e 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 65 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 28 29 7b 76 61 72 20 6e 3d 22 30 31 32 33 34 35 36 37 38 39 61 62 63 64 65 66 22 3b 72 65 74 75 72 6e 22 75 69 64 5f 22 2b 22 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 2e 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 63 68 61 72 41 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 6e 2e 6c 65 6e 67 74 68 29 29 7d 29 29 2b 22 5f 22 2b 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 74 6f 61 29 72 65 74 75 72 6e 20 62 74 6f 61 Data Ascii: e,n.name=e}catch(n){}return n.__name__=n.displayName=e,n}function R(){var n="0123456789abcdef";return"uid_"+"xxxxxxxxxx".replace(/./g,(function(){return n.charAt(Math.floor(Math.random()*n.length))}))+"_"+function(n){if("function"==typeof btoa)return btoa
2024-07-03 07:23:10 UTC	16383	IN	Data Raw: 53 65 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 62 75 66 66 65 72 3d 72 2e 62 75 66 66 65 72 7c 7c 5b 5d 2c 72 2e 62 75 66 66 65 72 2e 70 75 73 68 28 74 29 2c 72 2e 66 6c 75 73 68 3d 72 2e 66 6c 75 73 68 7c 7c 41 2e 66 6c 75 73 68 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6d 28 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 57 69 6e 64 6f 77 20 69 73 20 63 6c 6f 73 65 64 22 29 3b 76 61 72 20 74 2c 61 3d 50 6e 28 6e 2c 65 2c 28 28 74 3d 7b 7d 29 2e 5f 5f 70 6f 73 74 5f 72 6f 62 6f 74 5f 31 30 5f 30 5f 34 34 5f 5f 3d 72 2e 62 75 66 66 65 72 7c 7c 5b 5d 2c 74 29 2c 7b 6f 6e 3a 6f 2c 73 65 6e 64 3a 69 7d 29 3b 64 65 6c 65 74 65 20 72 2e 62 75 66 66 65 Data Ascii: Set(n,(function(){return{}}));return r.buffer=r.buffer\|\|[],r.buffer.push(t),r.flush=r.flush\|\|A.flush().then((function(){if(m(n))throw new Error("Window is closed");var t,a=Pn(n,e,((t={}).__post_robot_10_0_44__=r.buffer\|\|[],t),{on:o,send:i});delete r.buffe
2024-07-03 07:23:10 UTC	6862	IN	Data Raw: 31 3a 30 29 2c 61 3d 31 3b 61 3c 74 3b 61 2b 2b 29 6f 5b 61 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 72 28 65 3f 6f 3a 6f 5b 30 5d 29 7d 7d 29 29 2c 6e 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 74 5d 2e 63 6f 6e 63 61 74 28 6f 29 29 7d 29 29 7d 7d 28 66 2e 67 65 74 42 72 6f 77 73 65 72 44 69 6d 65 6e 73 69 6f 6e 73 29 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 7c 7c 7b 7d 2c 65 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 7c 7c 31 2c 74 3d 76 28 6e 2e 77 69 64 74 68 2a 65 29 2c 72 3d 76 28 6e 2e 68 65 69 67 68 74 2a 65 29 3b 69 66 28 39 30 3d 3d 3d 4d 61 74 68 2e 61 62 73 28 77 69 6e 64 6f 77 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 29 29 7b 76 61 72 20 6f 3d 74 3b Data Ascii: 1:0),a=1;a<t;a++)o[a-1]=arguments[a];r(e?o:o[0])}})),n.call.apply(n,[t].concat(o))}))}}(f.getBrowserDimensions),y=function(){var n=window.screen\|\|{},e=window.devicePixelRatio\|\|1,t=v(n.widthe),r=v(n.heighte);if(90===Math.abs(window.orientation)){var o=t;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49808	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	1203	OUT	GET /track/?verbose=1&ip=1&_=1719991388676 HTTP/1.1 Host: proxy-service.actblue.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128
2024-07-03 07:23:10 UTC	527	IN	HTTP/1.1 200 OK Connection: close Content-Length: 45 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Via: 1.1 google, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:10 GMT
2024-07-03 07:23:10 UTC	45	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 64 61 74 61 2c 20 6d 69 73 73 69 6e 67 20 6f 72 20 65 6d 70 74 79 22 2c 22 73 74 61 74 75 73 22 3a 30 7d Data Ascii: {"error":"data, missing or empty","status":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49806	157.240.253.35	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	1172	OUT	GET /tr/?batch=1&events[0]=id%3D1663341264181988%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fsecure.actblue.com%252Fpages%252Fp2p-240702-jbti%252Ftracking_code%253Ft%253Dlanding%2526refcode%253Dta_c2%2526refcode2w%253D5wKgd5%2526auth_token%253Dnull%26rl%3Dhttps%253A%252F%252Fsecure.actblue.com%252Fdonate%252Fp2p-240702-jbti%253Frefcode%253Dta_c2%2526refcode2w%253D5wKgd5%26if%3Dtrue%26ts%3D1719991389583%26sw%3D1280%26sh%3D1024%26v%3D2.9.160%26r%3Dstable%26ec%3D0%26o%3D4126%26fbp%3Dfb.1.1719991389579.953466754384111128%26cdl%3DAPI_unavailable%26it%3D1719991387335%26coo%3Dfalse%26exp%3Df1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:10 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 07:23:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49805	157.240.253.35	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	1157	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1663341264181988&ev=PageView&dl=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&rl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&if=true&ts=1719991389583&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1719991389579.953466754384111128&cdl=API_unavailable&it=1719991387335&coo=false&exp=f1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:11 UTC	1265	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x458049c1b7b5c1f5","source_keys":["1","2"]},{"key_piece":"0xa91a9097bac1f45b","source_keys":["1","2"]}],"aggregatable_values":{"1":1}} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387306770751486731", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387306770751486731"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 07:23:11 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 07:23:11 UTC	1786	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo
2024-07-03 07:23:11 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-07-03 07:23:11 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49810	142.250.184.228	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:10 UTC	1616	OUT	GET /pagead/1p-conversion/11154426359/?random=1418267285&cv=11&fst=1719991386522&bg=ffffff&guid=ON&async=1&gtm=45be4710v9115732004za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&label=OInWCOy815kYEPeT7MYp&hn=www.googleadservices.com&frm=0&tiba=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&gtm_ee=1&npa=0&pscdl=noapi&auid=227088756.1719991386&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECIgEBOAFAAUoVdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=COXovtyWp_LdOiITCJasxp2riocDFRBqHgIdLNc7LDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhtodHRwczovL3NlY3VyZS5hY3RibHVlLmNvbS8&is_vtc=1&cid=CAQSKQDaQooLgrlq7CFg_jfeJC8uMT1vxr-x3eGs1QP3rnKnidjfvfF6WhVm&random=3968354639 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:11 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 03 Jul 2024 07:23:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49811	173.194.76.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	350	OUT	HEAD /about/redirect/ HTTP/1.1 Host: pay.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:11 UTC	1196	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Length: 292 Content-Security-Policy: script-src 'nonce-r2xrRu1aIcY21Bb7tUqDtg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/pay_google; base-uri 'none' Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/pay_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="uxe-owners-acl/pay_google" Report-To: {"group":"uxe-owners-acl/pay_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/pay_google"}]} Date: Wed, 03 Jul 2024 07:23:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 12 Mar 2024 05:08:00 GMT X-Content-Type-Options: nosniff Link: <https://pay.google.com/gp/p/payment_method_manifest.json>; rel="payment-method-manifest" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49812	34.252.40.201	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	814	OUT	GET /sp.pl?a=10000&d=Wed%2C%2003%20Jul%202024%2007%3A23%3A09%20GMT&n=4d&.yp=10111714&f=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&e=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&enc=UTF-8&yv=1.15.1&isIframe=1 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBF78hGYCEK8QIUmvgLdTLE0LG3YQIzEFEgEBAQFNhmaOZtxA0iMA_eMAAA&S=AQAAAoRhpaIxCTlvUNagQiqbDtA
2024-07-03 07:23:11 UTC	951	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:11 GMT Expires: Wed, 03 Jul 2024 07:23:11 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS/9.1.10.121 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.121) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBF78hGYCEK8QIUmvgLdTLE0LG3YQIzEFEgEBAQFNhmaOZtxA0iMA_eMAAA&S=AQAAAoRhpaIxCTlvUNagQiqbDtA; Expires=Thu, 3 Jul 2025 13:23:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49816	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	3996	OUT	POST /graphql?GetNativeEligibility HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 2160 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" disable-set-cookie: true sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json x-app-name: smart-payment-buttons accept: application/json sec-ch-ua-platform: "Windows" Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/smart/buttons?env=production&style.label=paypal&style.layout=vertical&style.color=gold&style.shape=rect&style.tagline=false&style.height=44&style.menuPlacement=below&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_2c8c73eb5d_mdc6mjm6mdc&buttonSize=large&customerId=&clientID=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&clientMetadataID=uid_f55323b669_mdc6mjm6mdc&commit=false&components.0=buttons&currency=USD&debug=false&disableFunding.0=credit&disableFunding.1=card&disableSetCookie=true&enableFunding.0=venmo&experiment.enableVenmo=true&experiment.venmoVaultWithoutPurchase=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjpmYWxzZSwidmF1bHRhYmxlIjpmYWxzZSwicHJvZHVjdHMiOnsicGF5SW4zIjp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheUluNCI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9LCJwYXlsYXRlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9fX0sImN [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:11 UTC	2160	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 71 75 65 72 79 20 47 65 74 4e 61 74 69 76 65 45 6c 69 67 69 62 69 6c 69 74 79 28 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 76 61 75 6c 74 20 3a 20 42 6f 6f 6c 65 61 6e 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 68 69 70 70 69 6e 67 43 61 6c 6c 62 61 63 6b 45 6e 61 62 6c 65 64 20 3a 20 42 6f 6f 6c 65 61 6e 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 6d 65 72 63 68 61 6e 74 49 44 20 3a 20 53 74 72 69 6e 67 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 63 6c 69 65 6e 74 49 44 20 3a 20 53 74 72 69 6e 67 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 62 75 79 65 72 43 6f 75 6e 74 72 79 20 3a 20 53 74 72 69 6e 67 Data Ascii: {"query":"\n query GetNativeEligibility(\n $vault : Boolean,\n $shippingCallbackEnabled : Boolean,\n $merchantID : String,\n $clientID : String,\n $buyerCountry : String
2024-07-03 07:23:12 UTC	1267	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1647 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.paypal.com Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline'; script-src 'nonce-PrC/sksU4TZ/cvHPuN7TAzTeosNFsf/81FJtdH2kcaBMPo3l' 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com; img-src 'self' data: https://c.paypal.com; object-src 'none'; font-src 'self' https://.paypal.com https://.paypalobjects.com; frame-src 'self' https://.paypalobjects.com https://.paypal.com https://.qualtrics.com; connect-src 'self' 'unsafe-inline' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; base-uri 'self' https://.paypal.com; form-action 'self' https://.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp Content-Type: application/json; charset=utf-8 Etag: W/"66f-w99EmJgsiHgmqxpj6z3BIU0S0Q8"
2024-07-03 07:23:12 UTC	1368	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-07-03 07:23:12 UTC	1215	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6d 6f 62 69 6c 65 53 44 4b 45 6c 69 67 69 62 69 6c 69 74 79 22 3a 7b 22 70 61 79 70 61 6c 22 3a 7b 22 65 6c 69 67 69 62 69 6c 69 74 79 22 3a 74 72 75 65 2c 22 69 6e 65 6c 69 67 69 62 69 6c 69 74 79 52 65 61 73 6f 6e 22 3a 22 22 7d 2c 22 76 65 6e 6d 6f 22 3a 7b 22 65 6c 69 67 69 62 69 6c 69 74 79 22 3a 74 72 75 65 2c 22 69 6e 65 6c 69 67 69 62 69 6c 69 74 79 52 65 61 73 6f 6e 22 3a 22 22 7d 7d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 74 72 61 63 69 6e 67 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 30 33 54 30 37 3a 32 33 3a 31 31 2e 38 38 30 5a 22 2c 22 65 6e 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 30 33 54 30 37 3a 32 33 3a 31 32 2e 30 31 30 5a Data Ascii: {"data":{"mobileSDKEligibility":{"paypal":{"eligibility":true,"ineligibilityReason":""},"venmo":{"eligibility":true,"ineligibilityReason":""}}},"extensions":{"tracing":{"version":1,"startTime":"2024-07-03T07:23:11.880Z","endTime":"2024-07-03T07:23:12.010Z
2024-07-03 07:23:12 UTC	432	IN	Data Raw: 6e 22 3a 39 34 33 7d 2c 7b 22 70 61 74 68 22 3a 5b 22 6d 6f 62 69 6c 65 53 44 4b 45 6c 69 67 69 62 69 6c 69 74 79 22 2c 22 76 65 6e 6d 6f 22 2c 22 65 6c 69 67 69 62 69 6c 69 74 79 22 5d 2c 22 70 61 72 65 6e 74 54 79 70 65 22 3a 22 49 6e 74 65 67 72 61 74 69 6f 6e 53 44 4b 45 6c 69 67 69 62 69 6c 69 74 79 22 2c 22 66 69 65 6c 64 4e 61 6d 65 22 3a 22 65 6c 69 67 69 62 69 6c 69 74 79 22 2c 22 72 65 74 75 72 6e 54 79 70 65 22 3a 22 42 6f 6f 6c 65 61 6e 21 22 2c 22 73 74 61 72 74 4f 66 66 73 65 74 22 3a 31 32 39 31 36 33 37 32 38 2c 22 64 75 72 61 74 69 6f 6e 22 3a 36 33 34 7d 2c 7b 22 70 61 74 68 22 3a 5b 22 6d 6f 62 69 6c 65 53 44 4b 45 6c 69 67 69 62 69 6c 69 74 79 22 2c 22 76 65 6e 6d 6f 22 2c 22 69 6e 65 6c 69 67 69 62 69 6c 69 74 79 52 65 61 73 6f 6e 22 Data Ascii: n":943},{"path":["mobileSDKEligibility","venmo","eligibility"],"parentType":"IntegrationSDKEligibility","fieldName":"eligibility","returnType":"Boolean!","startOffset":129163728,"duration":634},{"path":["mobileSDKEligibility","venmo","ineligibilityReason"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49813	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	3957	OUT	POST /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 1878 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/smart/buttons?env=production&style.label=paypal&style.layout=vertical&style.color=gold&style.shape=rect&style.tagline=false&style.height=44&style.menuPlacement=below&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_2c8c73eb5d_mdc6mjm6mdc&buttonSize=large&customerId=&clientID=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&clientMetadataID=uid_f55323b669_mdc6mjm6mdc&commit=false&components.0=buttons&currency=USD&debug=false&disableFunding.0=credit&disableFunding.1=card&disableSetCookie=true&enableFunding.0=venmo&experiment.enableVenmo=true&experiment.venmoVaultWithoutPurchase=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjpmYWxzZSwidmF1bHRhYmxlIjpmYWxzZSwicHJvZHVjdHMiOnsicGF5SW4zIjp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheUluNCI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9LCJwYXlsYXRlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9fX0sImN [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:11 UTC	1878	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 6c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 65 76 65 6e 74 22 3a 22 70 61 79 70 61 6c 5f 6a 73 5f 73 64 6b 5f 76 35 5f 69 6e 69 74 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 75 69 64 41 74 74 72 69 62 75 74 65 22 3a 22 70 72 65 73 65 6e 74 22 2c 22 6c 6f 61 64 54 69 6d 65 22 3a 37 38 37 2c 22 63 61 63 68 65 54 79 70 65 22 3a 22 73 64 6b 5f 63 6c 69 65 6e 74 5f 63 61 63 68 65 5f 6d 69 73 73 22 2c 22 6a 73 53 64 6b 4c 69 62 72 61 72 79 22 3a 22 6e 6f 6e 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 53 6f 75 72 63 65 22 3a 22 6e 6f 6e 65 22 2c 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 31 37 31 Data Ascii: {"events":[{"level":"info","event":"paypal_js_sdk_v5_init","payload":{"uidAttribute":"present","loadTime":787,"cacheType":"sdk_client_cache_miss","jsSdkLibrary":"none","locale":"en_US","integrationSource":"none","localStorageEnabled":true,"timestamp":"171
2024-07-03 07:23:11 UTC	1368	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1016 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.paypal.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Etag: W/"3f8-qCQWoQ10gGBk0xtkkmWSzp/8/+E" Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f7866132ff6da Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f7866132ff6da-0a8e4d0111e98372-01 X-Content-Type-Options: nosniff DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:11 GMT
2024-07-03 07:23:11 UTC	342	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 30 38 36 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 33 36 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 33 36 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 33 39 32 2e 38 31 37 31 38 32 2c 56 53 30 2c 56 45 31 31 31 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kiad7000086-IAD, cache-nyc-kteb1890036-NYC, cache-nyc-kteb1890036-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991392.817182,VS0,VE111
2024-07-03 07:23:11 UTC	1016	IN	Data Raw: 7b 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 73 22 2c 22 72 65 73 6f 75 72 63 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 7d 2c 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 64 61 74 65 22 3a 22 4a 75 6c 20 33 2c 20 32 30 32 34 Data Ascii: {"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/js","cssBaseUrl":"https://www.paypalobjects.com/css","templateBaseUrl":"https://www.paypalobjects.com/templates","resourceBaseUrl":"https://www.paypalobjects.com"},"pageInfo":{"date":"Jul 3, 2024

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49819	151.101.193.35	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	1220	OUT	GET /ts?pgrp=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&es=visitorInfoFlowStarted&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991390860&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true HTTP/1.1 Host: t.paypal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:11 UTC	921	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: 4210d8e23882d Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Wed, 03 Jul 2024 07:23:11 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: 4210d8e23882d Pragma: no-cache Traceparent: 00-00000000000000000004210d8e23882d-e647de6903489f90-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:11 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kiad7000103-IAD, cache-ewr18145-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1719991392.817649,VS0,VE96 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-00000000000000000004210d8e23882d-e35dbf20b8fdff27-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-07-03 07:23:11 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-07-03 07:23:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-07-03 07:23:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-03 07:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49814	151.101.1.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	555	OUT	OPTIONS /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://secure.actblue.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:11 UTC	1340	IN	HTTP/1.1 200 OK Connection: close Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: https://secure.actblue.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f7866138a0618 Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f7866138a0618-126ef097938e40b3-01 X-Content-Type-Options: nosniff DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:11 GMT
2024-07-03 07:23:11 UTC	333	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 6a 79 6f 37 31 30 30 30 38 37 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 31 38 31 34 37 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 31 38 31 34 37 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 33 39 32 2e 38 32 37 30 36 37 2c 56 53 30 2c 56 45 31 30 36 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kjyo7100087-IAD, cache-ewr18147-EWR, cache-ewr18147-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991392.827067,VS0,VE106Server-Timing
2024-07-03 07:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49815	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	3944	OUT	POST /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 3860 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.paypal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypal.com/smart/buttons?env=production&style.label=paypal&style.layout=vertical&style.color=gold&style.shape=rect&style.tagline=false&style.height=44&style.menuPlacement=below&allowBillingPayments=true&applePaySupport=false&buttonSessionID=uid_2c8c73eb5d_mdc6mjm6mdc&buttonSize=large&customerId=&clientID=AbHo6hBEDmCHulDhRMkCVk7FDed5zE1-mNo7SQvo_yxeLvGylM5mGh5IOjx0AV9sTHhHDjD4A443Dybb&clientMetadataID=uid_f55323b669_mdc6mjm6mdc&commit=false&components.0=buttons&currency=USD&debug=false&disableFunding.0=credit&disableFunding.1=card&disableSetCookie=true&enableFunding.0=venmo&experiment.enableVenmo=true&experiment.venmoVaultWithoutPurchase=false&flow=purchase&fundingEligibility=eyJwYXlwYWwiOnsiZWxpZ2libGUiOnRydWUsInZhdWx0YWJsZSI6dHJ1ZX0sInBheWxhdGVyIjp7ImVsaWdpYmxlIjpmYWxzZSwidmF1bHRhYmxlIjpmYWxzZSwicHJvZHVjdHMiOnsicGF5SW4zIjp7ImVsaWdpYmxlIjpmYWxzZSwidmFyaWFudCI6bnVsbH0sInBheUluNCI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9LCJwYXlsYXRlciI6eyJlbGlnaWJsZSI6ZmFsc2UsInZhcmlhbnQiOm51bGx9fX0sImN [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:11 UTC	3860	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 6c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 65 76 65 6e 74 22 3a 22 73 70 62 5f 69 6e 69 74 69 61 6c 69 7a 65 5f 62 75 74 74 6f 6e 73 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 67 6f 6c 64 22 2c 22 6c 61 62 65 6c 22 3a 22 70 61 79 70 61 6c 22 2c 22 6c 61 79 6f 75 74 22 3a 22 76 65 72 74 69 63 61 6c 22 2c 22 64 65 76 69 63 65 22 3a 22 6e 6f 6e 5f 6e 61 74 69 76 65 22 2c 22 73 68 61 70 65 22 3a 22 72 65 63 74 22 2c 22 66 75 6e 64 69 6e 67 49 6e 73 74 72 75 6d 65 6e 74 73 22 3a 22 70 61 79 70 61 6c 2c 76 65 6e 6d 6f 22 2c 22 66 75 6e 64 69 6e 67 49 6e 73 74 72 75 6d 65 6e 74 73 43 6f 75 6e 74 22 3a 22 32 22 2c 22 6d 65 72 63 68 61 6e 74 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 Data Ascii: {"events":[{"level":"info","event":"spb_initialize_buttons","payload":{"color":"gold","label":"paypal","layout":"vertical","device":"non_native","shape":"rect","fundingInstruments":"paypal,venmo","fundingInstrumentsCount":"2","merchantDomain":"https://sec
2024-07-03 07:23:12 UTC	1368	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1018 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.paypal.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Etag: W/"3fa-bdJPWGulk2dlZuCd/Oeiimn6c70" Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f786613d8a368 Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f786613d8a368-ee0dddf6283ac8cd-01 X-Content-Type-Options: nosniff DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:11 GMT
2024-07-03 07:23:12 UTC	328	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 6a 79 6f 37 31 30 30 31 36 37 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 31 38 31 38 30 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 31 38 31 38 30 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 33 39 32 2e 38 33 38 39 35 38 2c 56 53 30 2c 56 45 31 33 35 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kjyo7100167-IAD, cache-ewr18180-EWR, cache-ewr18180-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991392.838958,VS0,VE135Vary: Accept-
2024-07-03 07:23:12 UTC	1018	IN	Data Raw: 7b 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 73 22 2c 22 72 65 73 6f 75 72 63 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 7d 2c 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 64 61 74 65 22 3a 22 4a 75 6c 20 33 2c 20 32 30 32 34 Data Ascii: {"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/js","cssBaseUrl":"https://www.paypalobjects.com/css","templateBaseUrl":"https://www.paypalobjects.com/templates","resourceBaseUrl":"https://www.paypalobjects.com"},"pageInfo":{"date":"Jul 3, 2024

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49820	157.240.253.35	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	934	OUT	GET /tr/?batch=1&events[0]=id%3D1663341264181988%26ev%3DPageView%26dl%3Dhttps%253A%252F%252Fsecure.actblue.com%252Fpages%252Fp2p-240702-jbti%252Ftracking_code%253Ft%253Dlanding%2526refcode%253Dta_c2%2526refcode2w%253D5wKgd5%2526auth_token%253Dnull%26rl%3Dhttps%253A%252F%252Fsecure.actblue.com%252Fdonate%252Fp2p-240702-jbti%253Frefcode%253Dta_c2%2526refcode2w%253D5wKgd5%26if%3Dtrue%26ts%3D1719991389583%26sw%3D1280%26sh%3D1024%26v%3D2.9.160%26r%3Dstable%26ec%3D0%26o%3D4126%26fbp%3Dfb.1.1719991389579.953466754384111128%26cdl%3DAPI_unavailable%26it%3D1719991387335%26coo%3Dfalse%26exp%3Df1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:12 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 03 Jul 2024 07:23:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49821	157.240.253.35	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:11 UTC	841	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1663341264181988&ev=PageView&dl=https%3A%2F%2Fsecure.actblue.com%2Fpages%2Fp2p-240702-jbti%2Ftracking_code%3Ft%3Dlanding%26refcode%3Dta_c2%26refcode2w%3D5wKgd5%26auth_token%3Dnull&rl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&if=true&ts=1719991389583&sw=1280&sh=1024&v=2.9.160&r=stable&ec=0&o=4126&fbp=fb.1.1719991389579.953466754384111128&cdl=API_unavailable&it=1719991387335&coo=false&exp=f1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:12 UTC	952	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7387306779297382361", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7387306779297382361"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-07-03 07:23:12 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-07-03 07:23:12 UTC	1819	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 61 74 74 65 72 79 3d 28 73 65 6c 66 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewpo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49818	192.229.221.25	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:12 UTC	560	OUT	GET /muse/noop.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypalobjects.com/muse/analytics/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:12 UTC	723	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: s-maxage=31536000 Cache-Control: public,max-age=3600 Content-Type: application/javascript Date: Wed, 03 Jul 2024 07:23:12 GMT DC: ccg11-origin-www-1.paypal.com Etag: "60271cd0-12" Expires: Wed, 03 Jul 2024 07:23:11 GMT Last-Modified: Sat, 13 Feb 2021 00:26:56 GMT Paypal-Debug-Id: 0f896da12bcc1 Server: ECAcc (dac/9C70) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-00000000000000000000f896da12bcc1-0777710648610f1f-01 Vary: Accept-Encoding Vary: Accept-Encoding X-Content-Type-Options: nosniff Content-Length: 18 Connection: close
2024-07-03 07:23:12 UTC	18	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6e 6f 6f 70 28 29 7b 7d 0a Data Ascii: function noop(){}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49823	35.71.131.137	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:12 UTC	801	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; TDCPM=CAESFQoGZ29vZ2xlEgsI_vKv5ODOjT0QBRIWCgdydWJpY29uEgsImJmw5ODOjT0QBRgFIAEoATILCOrdrvP2zo09EAVCDyINCAESCQoFdGllcjMQAVoHbmNvY3JpZ2ABcgdydWJpY29u
2024-07-03 07:23:12 UTC	714	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 07:23:12 GMT Content-Length: 341 Connection: close server: Kestrel location: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 set-cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; expires=Thu, 03 Jul 2025 07:23:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI_vKv5ODOjT0QBRIWCgdydWJpY29uEgsImJmw5ODOjT0QBRIXCghhcHBuZXh1cxILCJT31pinnII9EAUYBSACKAEyCwjq3a7z9s6NPRAFQg8iDQgBEgkKBXRpZXIzEAFaB25jb2NyaWdgAXIIYXBwbmV4dXM.; expires=Thu, 03 Jul 2025 07:23:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-07-03 07:23:12 UTC	341	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 32 66 61 70 70 6e 65 78 75 73 25 33 66 74 74 64 25 33 64 31 25 32 36 61 6e 69 64 25 33 64 25 32 34 55 49 44 26 74 74 64 5f 74 64 69 64 3d 66 62 63 61 66 30 34 31 2d 36 37 31 38 2d 34 61 66 64 2d 62 39 37 33 2d 38 66 31 37 33 63 31 65 65 36 31 30 22 3e 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 Data Ascii: Redirecting to: <a href="https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610">https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49822	173.194.76.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:12 UTC	368	OUT	GET /gp/p/payment_method_manifest.json HTTP/1.1 Host: pay.google.com Connection: keep-alive Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:12 UTC	2373	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jul 2024 07:23:12 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-mVFeV476TtVdjZkFVVWOWA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/gp/p/_/InstantbuyFrontendBuyflowHttp/web-reports?context=eJzjitHikmLw05BiWF4qxVBRK8WwZKYUg2fNTabOPTeZJL6-ZNIA4sPR01md0mewBgGxT_0M1hggbr15jnUqEM8NOM8annmeNenfedYiIP7IcZF1ScRF1kOJF1mFeDge_Ji8hU3gxMMbrxmVtJPyC-Mz84pLEvNKkkor04ry80pS81KKU4vKUovijQyMTAzMDYz0DEziCwwAwfA8Lw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=515=B2idft2tXoHAgdAks4Yz5X4EH835EZIZ12M5InZuRuqIxeXC1ybQ27bQgVyd0bh2XqqS9GlEwTAwsNH8j7fNTNK3T7CdzTknkgZHkXG-45Tw_FL2SQ8zk3nzuCyi9X_3tz0xQiR77lQRn_TORtiCzwnXYIcQsqWGAAipDWL4t0g; expires=Thu, 02-Jan-2025 07:23:12 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:12 UTC	138	IN	Data Raw: 38 34 0d 0a 0a 7b 0a 20 20 22 64 65 66 61 75 6c 74 5f 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 20 5b 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 70 2f 70 2f 77 65 62 5f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 5d 2c 0a 20 20 22 73 75 70 70 6f 72 74 65 64 5f 6f 72 69 67 69 6e 73 22 3a 20 5b 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 5d 0a 7d 0a 0d 0a Data Ascii: 84{ "default_applications": ["https://pay.google.com/gp/p/web_manifest.json"], "supported_origins": ["https://pay.google.com"]}
2024-07-03 07:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49803	66.102.1.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:12 UTC	806	OUT	GET /gp/p/ui/pay HTTP/1.1 Host: pay.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:12 UTC	2095	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: DENY x-ua-compatible: IE=edge Expires: Wed, 03 Jul 2024 07:23:12 GMT Date: Wed, 03 Jul 2024 07:23:12 GMT Cache-Control: private, max-age=3600 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: unsafe-none Content-Security-Policy: script-src 'report-sample' 'nonce-AUfONeiSzTXyS8xaB6HXpA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendBuyflowPayUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://sandbox.google.com https://payments.google.com https://payments.sandbox.google.com https://pay.google.com https://pay.sandbox.google.com;report-uri /_/InstantbuyFrontendBuyflowPayUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendBuyflowPayUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/gp/p/_/InstantbuyFrontendBuyflowPayUi/web-reports?context=eJzjitHikmJw1ZBiWF4qxVBRK8WwZKYUg2fNTabOPTeZJL6-ZNIA4sPR01md0mewBgGxT_0M1hggbr15jnUqEM8NOM8annmeNenfedYiIP7IcZF1ScRF1kOJF1mFeDge_Ji8hU1gQ2NbC5OSdlJ-YXxmXnFJYl5JUmllWlF-XklqXkpxalFZalG8kYGRiYG5gZGegUl8gQEAg5o69g" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 35 66 30 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 70 2f 70 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 55 66 4f 4e 65 69 53 7a 54 58 79 53 38 78 61 42 36 48 58 70 41 22 3e 77 69 6e 64 6f 77 5b 27 70 70 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 70 72 6f 64 75 63 74 4e 61 Data Ascii: 5f0b<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://pay.google.com/gp/p/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><script nonce="AUfONeiSzTXyS8xaB6HXpA">window['ppConfig'] = {productNa
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 7b 61 28 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 70 72 6f 74 6f 2f 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 29 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 61 3b 69 66 28 28 61 3d 77 69 6e 64 6f 77 2e 70 70 43 6f 6e 66 69 67 29 3d 3d 6e 75 6c 6c 3f 30 3a 61 2e 64 69 73 61 62 6c 65 41 6c 6c 52 65 70 6f 72 74 69 6e 67 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 62 2c 63 2c 64 2c 65 3b 72 65 74 75 72 6e 28 65 3d 28 62 3d 77 69 6e 64 6f 77 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 28 63 3d 62 2e 6e 61 76 69 67 61 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 28 64 3d 63 2e Data Ascii: {a("https://csp.withgoogle.com/csp/proto/"+encodeURIComponent(b),JSON.stringify(c))}function t(){var a;if((a=window.ppConfig)==null?0:a.disableAllReporting)return function(){};var b,c,d,e;return(e=(b=window)==null?void 0:(c=b.navigator)==null?void 0:(d=c.
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 21 3d 6e 75 6c 6c 3f 68 3a 22 75 6e 6b 6e 6f 77 6e 22 2c 72 65 70 6f 72 74 3a 7b 62 6c 6f 63 6b 65 72 73 3a 64 7d 7d 29 7d 7d 3b 76 61 72 20 4e 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 4f 3d 74 28 29 2c 50 3d 77 69 6e 64 6f 77 2e 70 70 43 6f 6e 66 69 67 3b 50 26 26 28 50 2e 64 69 73 61 62 6c 65 41 6c 6c 52 65 70 6f 72 74 69 6e 67 7c 7c 50 2e 64 65 6c 65 74 65 49 73 45 6e 66 6f 72 63 65 64 26 26 50 2e 73 65 61 6c 49 73 45 6e 66 6f 72 63 65 64 7c 7c 4e 3c 50 2e 68 65 61 72 74 62 65 61 74 52 61 74 65 26 26 72 28 4f 2c 50 2e 70 72 6f 64 75 63 74 4e 61 6d 65 2c 7b 6f 72 69 67 69 6e 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2c 74 79 70 65 3a 22 48 45 41 52 54 42 45 41 54 Data Ascii: dow.location.origin)!=null?h:"unknown",report:{blockers:d}})}};var N=Math.random(),O=t(),P=window.ppConfig;P&&(P.disableAllReporting\|\|P.deleteIsEnforced&&P.sealIsEnforced\|\|N<P.heartbeatRate&&r(O,P.productName,{origin:window.location.origin,type:"HEARTBEAT
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 22 4c 6f 51 76 37 65 22 3a 74 72 75 65 2c 22 4d 54 37 66 39 62 22 3a 5b 5d 2c 22 4d 55 45 36 4e 65 22 3a 22 49 6e 73 74 61 6e 74 62 75 79 46 72 6f 6e 74 65 6e 64 42 75 79 66 6c 6f 77 50 61 79 55 69 22 2c 22 51 72 74 78 4b 22 3a 22 22 2c 22 52 56 63 75 7a 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 53 30 36 47 72 62 22 3a 22 22 2c 22 53 36 6c 5a 6c 22 3a 31 31 36 37 39 39 37 34 37 2c 22 54 53 44 74 56 22 3a 22 25 2e 40 2e 5b 5b 6e 75 6c 6c 2c 5b 5b 34 35 36 32 37 33 35 34 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 46 46 56 35 5c 22 5d 2c 5b 34 35 34 35 34 32 31 35 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 55 55 63 47 35 64 5c 22 5d 2c 5b 34 35 36 33 34 30 35 31 Data Ascii: "LoQv7e":true,"MT7f9b":[],"MUE6Ne":"InstantbuyFrontendBuyflowPayUi","QrtxK":"","RVcuze":"PRODUCTION","S06Grb":"","S6lZl":116799747,"TSDtV":"%.@.[[null,[[45627354,null,false,null,null,null,\"eFFV5\"],[45454215,null,true,null,null,null,\"UUcG5d\"],[45634051
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 6e 74 73 2f 76 34 2f 6a 73 2f 69 6e 74 65 67 72 61 74 6f 72 2e 6a 73 3f 73 73 5c 75 30 30 33 64 6d 64 5c 75 30 30 32 36 6a 73 6d 6f 64 65 5c 75 30 30 33 64 64 75 22 2c 22 6d 6a 65 5a 53 63 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 6e 44 33 31 65 64 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 79 6d 65 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 73 2f 76 34 2f 6a 73 2f 69 6e 74 65 67 72 61 74 6f 72 2e 6a 73 3f 73 73 5c 75 30 30 33 64 6d 64 22 2c 22 6e 51 79 41 45 22 3a 7b 22 46 4d 4d 52 46 22 3a 22 66 61 6c 73 65 22 2c 22 78 44 70 56 4a 64 22 3a 22 25 2e 40 2e 5b 5c 22 2b 74 6f 6b 65 6e 69 7a 61 74 69 6f 6e 40 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 22 5d 5d 22 2c 22 43 63 31 63 69 62 22 3a 22 66 61 6c 73 65 22 2c 22 58 48 79 62 4b 62 22 3a Data Ascii: nts/v4/js/integrator.js?ss\u003dmd\u0026jsmode\u003ddu","mjeZSc":"PRODUCTION","nD31ed":"https://payments.google.com/payments/v4/js/integrator.js?ss\u003dmd","nQyAE":{"FMMRF":"false","xDpVJd":"%.@.[\"+tokenization@google.com\"]]","Cc1cib":"false","XHybKb":
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 65 74 3b 69 66 28 66 2b 68 2e 68 65 69 67 68 74 3c 30 7c 7c 63 2b 68 2e 77 69 64 74 68 3c 30 7c 7c 68 2e 68 65 69 67 68 74 3c 3d 30 7c 7c 68 2e 77 69 64 74 68 3c 3d 30 29 72 65 74 75 72 6e 21 31 3b 62 3d 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 66 3c 3d 28 61 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 26 26 63 3c 3d 28 61 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 62 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 7d 3b 61 2e 5f 72 65 63 6f 72 64 49 6d 6c 45 6c 3d 6d 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 62 2e 74 61 72 67 65 74 3b 76 61 72 Data Ascii: et;if(f+h.height<0\|\|c+h.width<0\|\|h.height<=0\|\|h.width<=0)return!1;b=b.documentElement;return f<=(a.innerHeight\|\|b.clientHeight)&&c<=(a.innerWidth\|\|b.clientWidth)};a._recordImlEl=m;document.documentElement.addEventListener("load",function(b){b=b.target;var
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 4c 6a 4e 68 4d 7a 51 75 4e 7a 49 73 4d 7a 51 75 4e 7a 49 73 4d 43 77 77 4c 44 45 74 4d 54 45 75 4e 54 55 73 4d 6a 59 75 4e 6e 45 74 4d 54 45 75 4d 69 77 78 4d 43 34 32 4f 43 30 79 4e 79 34 32 4e 53 77 78 4d 43 34 32 4e 30 67 79 4d 44 59 75 4d 6c 70 74 4d 43 30 31 4f 53 34 78 4e 56 59 32 4f 53 34 78 4f 47 67 79 4e 32 45 79 4d 53 34 79 4f 43 77 79 4d 53 34 79 4f 43 77 77 4c 44 41 73 4d 43 77 78 4e 53 34 35 4d 79 30 32 4c 6a 51 34 4c 44 49 78 4c 6a 4d 32 4c 44 49 78 4c 6a 4d 32 4c 44 41 73 4d 43 77 77 4c 44 41 74 4d 7a 41 75 4e 6a 4d 73 4d 6a 45 73 4d 6a 45 73 4d 43 77 77 4c 44 41 74 4d 54 55 75 4f 54 4d 74 4e 69 34 32 4e 57 67 74 4d 6a 64 61 49 69 38 2b 50 48 42 68 64 47 67 67 59 32 78 68 63 33 4d 39 49 6d 4e 73 63 79 30 78 49 69 42 6b 50 53 4a 4e 4d 7a 41 Data Ascii: LjNhMzQuNzIsMzQuNzIsMCwwLDEtMTEuNTUsMjYuNnEtMTEuMiwxMC42OC0yNy42NSwxMC42N0gyMDYuMlptMC01OS4xNVY2OS4xOGgyN2EyMS4yOCwyMS4yOCwwLDAsMCwxNS45My02LjQ4LDIxLjM2LDIxLjM2LDAsMCwwLDAtMzAuNjMsMjEsMjEsMCwwLDAtMTUuOTMtNi42NWgtMjdaIi8+PHBhdGggY2xhc3M9ImNscy0xIiBkPSJNMzA
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 31 32 70 78 7d 2e 4e 50 51 37 49 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 73 42 79 46 45 7b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 38 70 78 29 7b 2e 73 42 79 46 45 7b 77 69 64 74 68 3a 36 30 38 70 78 7d 7d 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 45 54 53 44 7b 63 6f 6e 74 Data Ascii: verflow-x:hidden;overflow-y:auto;position:absolute;right:0;top:12px}.NPQ7Id{display:flex;flex-direction:column;align-items:center}.sByFE{width:100%}@media (min-width:608px){.sByFE{width:608px}}c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{cont
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 2c 65 29 7d 7d 29 7d 7d 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 5b 61 5d 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 65 63 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 3b 76 61 72 20 62 3b 69 66 28 28 62 3d 74 68 69 73 2e 67 29 3d 3d 6e 75 6c 6c 3f 30 3a 62 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 71 28 74 68 69 73 2c 74 68 69 73 2e 67 5b 61 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 2f 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 2f 2e 74 65 73 74 28 6e 61 76 69 67 Data Ascii: ,e)}})}}n.prototype.j=function(a){return this.l[a]};n.prototype.ecrd=function(a){this.i=a;var b;if((b=this.g)==null?0:b.length){for(a=0;a<this.g.length;a++)q(this,this.g[a]);this.g=null}};var t=typeof navigator!=="undefined"&&/iPhone\|iPad\|iPod/.test(navig
2024-07-03 07:23:12 UTC	2095	IN	Data Raw: 3d 43 5b 44 5d 3d 7b 7d 3a 43 5b 44 5d 3d 7a 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 43 6f 6c 6c 65 63 74 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 5f 2f 6d 73 73 2f 62 6f 71 2d 70 61 79 6d 65 6e 74 73 2d 63 6f 6e 73 75 6d 65 72 2f 5f 2f 6a 73 2f 6b 3d 62 6f 71 2d 70 61 79 6d 65 6e 74 73 2d 63 6f 6e 73 75 6d 65 72 2e 49 6e 73 74 61 6e 74 62 75 79 46 72 6f 6e 74 65 6e 64 42 75 79 66 6c 6f 77 50 61 79 55 69 2e 65 6e 5f 55 53 2e 4f 4d 54 77 32 72 56 56 44 69 51 2e 65 73 35 2e 4f 2f 61 6d 3d 4d 41 77 6b 41 77 2f 64 3d 31 2f 65 78 63 6d 3d 49 5a 54 36 33 2c 4a 75 68 73 6f 65 2c 4c 45 69 6b 5a 65 2c 50 72 50 59 52 64 2c 5f 62 2c 5f 74 70 2c 68 63 Data Ascii: =C[D]={}:C[D]=z;}).call(this);</script><script noCollect href="https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayUi.en_US.OMTw2rVVDiQ.es5.O/am=MAwkAw/d=1/excm=IZT63,Juhsoe,LEikZe,PrPYRd,_b,_tp,hc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49824	151.101.129.35	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:12 UTC	982	OUT	GET /ts?pgrp=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1&page=muse%3Aoffer%3A%3A%3ANGJ83G9Z8QXZ8-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=fe4dca86-323c-4442-b2a6-6bd13ac56ad7&es=visitorInfoFlowStarted&mrid=NGJ83G9Z8QXZ8&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&dh=1024&dw=1280&bh=907&bw=1280&cd=24&sh=1024&sw=1280&v=NA&pl=pdf&rosetta_language=en-US%2Cen&e=im&t=1719991390860&g=240&completeurl=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&disableSetCookie=true HTTP/1.1 Host: t.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:12 UTC	921	IN	HTTP/1.1 200 OK Connection: close Access-Control-Expose-Headers: Server-Timing CORRELATION-ID: a7b4c2f57ed05 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: image/gif Expires: Wed, 03 Jul 2024 07:23:12 GMT P3p: CP="CAO IND OUR SAM UNI STA COR COM" Paypal-Debug-Id: a7b4c2f57ed05 Pragma: no-cache Traceparent: 00-0000000000000000000a7b4c2f57ed05-5539bf58058636b4-01 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:12 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kjyo7100099-IAD, cache-ewr18178-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1719991393.502107,VS0,VE83 vary: Accept-Encoding Server-Timing: "traceparent;desc="00-0000000000000000000a7b4c2f57ed05-b48530364772b50a-01"";content-encoding;desc="",x-cdn;desc="fastly" Timing-Allow-Origin: * transfer-encoding: chunked
2024-07-03 07:23:12 UTC	4	IN	Data Raw: 32 61 0d 0a Data Ascii: 2a
2024-07-03 07:23:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;
2024-07-03 07:23:12 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-03 07:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49826	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:12 UTC	388	OUT	GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:12 UTC	1347	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1018 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Etag: W/"3fa-IlnPtWhTXw6lrn2l5UgD+oQRN4E" Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f15530925ac7f Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f15530925ac7f-66a2125e1a5b4116-01 X-Content-Type-Options: nosniff DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:12 GMT
2024-07-03 07:23:12 UTC	342	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 30 34 36 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 32 31 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 32 31 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 33 39 33 2e 35 31 33 33 32 37 2c 56 53 30 2c 56 45 31 30 34 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200046-IAD, cache-nyc-kteb1890021-NYC, cache-nyc-kteb1890021-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991393.513327,VS0,VE104
2024-07-03 07:23:12 UTC	1018	IN	Data Raw: 7b 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 73 22 2c 22 72 65 73 6f 75 72 63 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 7d 2c 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 64 61 74 65 22 3a 22 4a 75 6c 20 33 2c 20 32 30 32 34 Data Ascii: {"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/js","cssBaseUrl":"https://www.paypalobjects.com/css","templateBaseUrl":"https://www.paypalobjects.com/templates","resourceBaseUrl":"https://www.paypalobjects.com"},"pageInfo":{"date":"Jul 3, 2024

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49825	151.101.1.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:12 UTC	666	OUT	POST /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 2852 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure.actblue.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:12 UTC	2852	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 6c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 65 76 65 6e 74 22 3a 22 73 66 76 63 53 63 72 65 65 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 63 6f 6d 70 75 74 65 64 48 65 69 67 68 74 22 3a 39 30 37 2c 22 68 65 69 67 68 74 22 3a 39 30 37 2c 22 6f 75 74 65 72 48 65 69 67 68 74 22 3a 39 38 34 2c 22 73 63 61 6c 65 22 3a 31 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 31 37 31 39 39 39 31 33 38 37 32 31 32 22 2c 22 75 69 64 22 3a 22 75 69 64 5f 66 35 35 33 32 33 62 36 36 39 5f 6d 64 63 36 6d 6a 6d 36 6d 64 63 22 2c 22 65 6e 76 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 41 62 48 6f 36 68 42 45 44 6d 43 48 75 6c 44 68 52 4d 6b 43 56 6b 37 46 44 65 64 35 7a Data Ascii: {"events":[{"level":"info","event":"sfvcScreenInformation","payload":{"computedHeight":907,"height":907,"outerHeight":984,"scale":1,"timestamp":"1719991387212","uid":"uid_f55323b669_mdc6mjm6mdc","env":"production","clientId":"AbHo6hBEDmCHulDhRMkCVk7FDed5z
2024-07-03 07:23:12 UTC	1372	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1016 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://secure.actblue.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Etag: W/"3f8-YzzKf+KmAiiTaelxyIw/SgKuRxU" Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f1553093c6521 Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f1553093c6521-ed609933dea9f21c-01 X-Content-Type-Options: nosniff DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:12 GMT
2024-07-03 07:23:12 UTC	342	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 30 39 36 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 38 39 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 38 39 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 33 39 33 2e 35 31 37 31 36 31 2c 56 53 30 2c 56 45 31 30 39 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200096-IAD, cache-nyc-kteb1890089-NYC, cache-nyc-kteb1890089-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991393.517161,VS0,VE109
2024-07-03 07:23:12 UTC	1016	IN	Data Raw: 7b 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 73 22 2c 22 72 65 73 6f 75 72 63 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 7d 2c 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 64 61 74 65 22 3a 22 4a 75 6c 20 33 2c 20 32 30 32 34 Data Ascii: {"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/js","cssBaseUrl":"https://www.paypalobjects.com/css","templateBaseUrl":"https://www.paypalobjects.com/templates","resourceBaseUrl":"https://www.paypalobjects.com"},"pageInfo":{"date":"Jul 3, 2024

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49827	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:12 UTC	366	OUT	GET /graphql?GetNativeEligibility HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:12 UTC	1194	IN	HTTP/1.1 302 Found Connection: close Content-Length: 44 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Expose-Headers: Server-Timing Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: text/plain; charset=utf-8 Location: https://www.paypal.com Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f155309b020a5 Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Set-Cookie: l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 03 Jul 2024 07:53:12 GMT; HttpOnly; Secure; SameSite=None
2024-07-03 07:23:12 UTC	1042	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 3d 76 72 65 58 70 59 72 53 25 33 44 31 38 31 34 35 39 39 33 39 32 25 32 36 76 74 65 58 70 59 72 53 25 33 44 31 37 31 39 39 39 33 31 39 32 25 32 36 76 72 25 33 44 37 37 37 39 64 39 38 64 31 39 30 30 61 61 33 30 38 34 63 36 65 34 35 61 66 64 34 63 65 31 64 30 25 32 36 76 74 25 33 44 37 37 37 39 64 39 38 64 31 39 30 30 61 61 33 30 38 34 63 36 65 34 35 61 66 64 34 63 65 31 63 66 25 32 36 76 74 79 70 25 33 44 6e 65 77 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 30 33 20 4a 75 6c 20 32 30 32 37 20 30 37 3a 32 33 3a 31 32 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 Data Ascii: Set-Cookie: ts=vreXpYrS%3D1814599392%26vteXpYrS%3D1719993192%26vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 03 Jul 2027 07:23:12 GMT; HttpOnly; Secure; SameSite=NoneS
2024-07-03 07:23:12 UTC	44	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d Data Ascii: Found. Redirecting to https://www.paypal.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49840	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	569	OUT	OPTIONS /targeting/graphql?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,disable-set-cookie Origin: https://www.paypalobjects.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.paypalobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	1374	IN	HTTP/1.1 204 No Content Connection: close Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type,disable-set-cookie Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.paypalobjects.com Access-Control-Expose-Headers: Paypal-Debug-Id Cache-Control: max-age=0, no-cache, no-store, must-revalidate Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f155309b00b30 Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f155309b00b30-07449f24cb51dc96-01 DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish
2024-07-03 07:23:13 UTC	355	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 30 33 20 4a 75 6c 20 32 30 32 34 20 30 37 3a 32 33 3a 31 33 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 30 38 37 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 36 35 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 36 35 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 Data Ascii: Date: Wed, 03 Jul 2024 07:23:13 GMTStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kiad7000087-IAD, cache-nyc-kteb1890065-NYC, cache-nyc-kteb1890065-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49829	142.250.186.46	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	333	OUT	HEAD /pay HTTP/1.1 Host: google.com Connection: keep-alive Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	445	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/pay Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: sffe Content-Length: 223 X-XSS-Protection: 0 Date: Wed, 03 Jul 2024 07:16:01 GMT Expires: Wed, 03 Jul 2024 07:46:01 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 432 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49837	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:13 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49836	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:13 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49834	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:13 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49842	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	388	OUT	GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	1347	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1003 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Etag: W/"3eb-IwhRMnnol3gvt7SEqup2LnBjW08" Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f1553093c1805 Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f1553093c1805-01077899a336f9fe-01 X-Content-Type-Options: nosniff DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:13 GMT
2024-07-03 07:23:13 UTC	342	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 31 32 37 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 37 31 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 37 31 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 33 39 33 2e 31 38 39 38 36 33 2c 56 53 30 2c 56 45 31 30 34 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200127-IAD, cache-nyc-kteb1890071-NYC, cache-nyc-kteb1890071-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991393.189863,VS0,VE104
2024-07-03 07:23:13 UTC	1003	IN	Data Raw: 7b 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 73 22 2c 22 72 65 73 6f 75 72 63 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 7d 2c 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 64 61 74 65 22 3a 22 4a 75 6c 20 33 2c 20 32 30 32 34 Data Ascii: {"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/js","cssBaseUrl":"https://www.paypalobjects.com/css","templateBaseUrl":"https://www.paypalobjects.com/templates","resourceBaseUrl":"https://www.paypalobjects.com"},"pageInfo":{"date":"Jul 3, 2024

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49828	37.252.171.149	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	708	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	1562	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Wed, 03 Jul 2024 07:23:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dfbcaf041-6718-4afd-b973-8f173c1ee610 AN-X-Request-Uuid: 2f670321-a18f-4ff0-aaa0-437d17ee9ac8 Set-Cookie: XANDR_PANID=tY-MkkqvgwINK9MX4e2QBlSoM3kZbFQNSFQub69tHdhCK1zERzo8JVLj90VL2rAU-wC1AgjJrG-B2bF4d6YNNV2Q7AX4bCD_HcZcaSNtmNs.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 01-Oct-2024 07:23:13 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 21-Jun-2034 07:23:13 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3938742698804982171; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 01-Oct-2024 07:23:13 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49833	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:13 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49838	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:13 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49835	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:13 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49843	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	590	OUT	GET / HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l7_az=dcg02.phx; ts=vreXpYrS%3D1814599392%26vteXpYrS%3D1719993192%26vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf%26vtyp%3Dnew; ts_c=vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf
2024-07-03 07:23:13 UTC	300	IN	HTTP/1.1 200 OK Connection: close Content-Length: 158147 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Cache-Control: max-age=0, no-cache, no-store, must-revalidate
2024-07-03 07:23:13 UTC	2354	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 3b 20 66 72 61 6d 65 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2d 6e 6f 63 6f 6f 6b 69 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 78 6f 6f 6d 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 70 61 79 70 61 6c 2d 6d 6b 74 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 71 75 61 6c 74 Data Ascii: Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://.paypal-mktg.com https://.qualt
2024-07-03 07:23:13 UTC	1363	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 65 6e 66 6f 72 63 65 5f 70 6f 6c 69 63 79 3d 63 63 70 61 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 33 20 4a 75 6c 20 32 30 32 35 20 30 37 3a 32 33 3a 31 33 20 47 4d 54 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 73 69 64 3d 73 25 33 41 53 77 45 73 7a 4f 45 55 43 48 49 4f 35 30 65 35 35 38 6a 56 53 49 4f 6b 6c 31 4d 46 4c 6e 33 47 2e 70 75 30 59 70 79 6f 38 52 67 76 51 6f 68 67 42 6c 25 32 46 6f 48 42 52 67 4d 6a 6f 68 70 37 73 30 38 54 75 6d 69 75 37 57 44 6f 48 55 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f Data Ascii: Set-Cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Thu, 03 Jul 2025 07:23:13 GMT; Secure; SameSite=NoneSet-Cookie: nsid=s%3ASwEszOEUCHIO50e558jVSIOkl1MFLn3G.pu0Ypyo8RgvQohgBl%2FoHBRgMjohp7s08Tumiu7WDoHU; Path=/; HttpO
2024-07-03 07:23:13 UTC	801	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 74 73 5f 63 3d 76 72 25 33 44 37 37 37 39 64 39 38 64 31 39 30 30 61 61 33 30 38 34 63 36 65 34 35 61 66 64 34 63 65 31 64 30 25 32 36 76 74 25 33 44 37 37 37 39 64 39 38 64 31 39 30 30 61 61 33 30 38 34 63 36 65 34 35 61 66 64 34 63 65 31 63 66 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 70 61 79 70 61 6c 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 30 33 20 4a 75 6c 20 32 30 32 37 20 30 37 3a 32 33 3a 31 33 20 47 4d 54 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 54 72 61 63 65 70 61 72 65 6e 74 3a 20 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 66 31 35 35 33 30 39 62 30 36 61 64 34 2d 33 63 61 32 37 36 39 62 64 32 36 31 66 63 38 62 2d 30 31 0d 0a Data Ascii: Set-Cookie: ts_c=vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf; Path=/; Domain=paypal.com; Expires=Sat, 03 Jul 2027 07:23:13 GMT; Secure; SameSite=NoneTraceparent: 00-0000000000000000000f155309b06ad4-3ca2769bd261fc8b-01
2024-07-03 07:23:13 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 20 20 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 77 65 62 63 61 70 74 63 68 61 2f 6e 67 72 6c 43 61 70 74 63 68 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 2f 3e 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 Data Ascii: <!DOCTYPE html><html lang="en-US" dir="ltr"> <head><script async src="https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js"></script> <link rel="preconnect" href="https://www.gstatic.com" crossorigin /> <link rel="dns-prefetch" href="ht
2024-07-03 07:23:13 UTC	1378	IN	Data Raw: 73 22 2c 22 69 6d 61 67 65 22 3a 7b 22 40 74 79 70 65 22 3a 22 49 6d 61 67 65 4f 62 6a 65 63 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 2f 77 65 62 2f 55 53 2f 65 6e 2f 71 75 61 6e 74 75 6d 2d 6c 65 61 70 2f 68 6f 6d 65 2f 63 6f 6e 73 75 6d 65 72 2d 75 6e 63 6f 6f 6b 69 65 64 2d 68 6f 6d 65 70 61 67 65 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 6d 65 74 61 2d 73 69 7a 65 3d 61 6c 6c 2e 6a 70 67 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 2f 77 65 62 2f 55 53 2f 65 6e 2f 71 75 61 6e 74 75 6d 2d 6c 65 61 70 2f 68 6f 6d 65 2f 63 Data Ascii: s","image":{"@type":"ImageObject","@id":"https://www.paypalobjects.com/marketing/web/US/en/quantum-leap/home/consumer-uncookied-homepage-component=meta-size=all.jpg#primaryimage","url":"https://www.paypalobjects.com/marketing/web/US/en/quantum-leap/home/c
2024-07-03 07:23:13 UTC	959	IN	Data Raw: 62 57 71 4c 74 63 49 4c 66 78 69 6d 37 46 52 74 43 79 4d 34 46 59 75 4c 4f 69 45 36 4c 76 78 51 35 43 64 65 30 75 22 3e 69 66 20 28 73 65 6c 66 20 3d 3d 3d 20 74 6f 70 20 7c 7c 20 2f 28 70 61 79 70 61 6c 2e 63 6f 6d 7c 70 61 79 70 61 6c 2e 63 6e 29 24 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 29 20 7b 76 61 72 20 61 6e 74 69 43 6c 69 63 6b 6a 61 63 6b 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 61 6e 74 69 43 6c 69 63 6b 6a 61 63 6b 27 29 3b 69 66 20 28 61 6e 74 69 43 6c 69 63 6b 6a 61 63 6b 29 20 7b 61 6e 74 69 43 6c 69 63 6b 6a 61 63 6b 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 6e 74 69 43 6c 69 63 6b 6a 61 Data Ascii: bWqLtcILfxim7FRtCyM4FYuLOiE6LvxQ5Cde0u">if (self === top \|\| /(paypal.com\|paypal.cn)$/.test(window.parent.location.hostname)) {var antiClickjack = document.getElementById('antiClickjack');if (antiClickjack) {antiClickjack.parentNode.removeChild(antiClickja
2024-07-03 07:23:13 UTC	1378	IN	Data Raw: 65 22 20 63 6f 6e 74 65 6e 74 3d 22 44 69 67 69 74 61 6c 20 57 61 6c 6c 65 74 73 2c 20 4d 6f 6e 65 79 20 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 61 6e 64 20 4d 6f 72 65 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 2f 77 65 62 2f 55 53 2f 65 6e 2f 71 75 61 6e 74 75 6d 2d 6c 65 61 70 2f 68 6f 6d 65 2f 63 6f 6e 73 75 6d 65 72 2d 75 6e 63 6f 6f 6b 69 65 64 2d 68 6f 6d 65 70 61 67 65 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 6d 65 74 61 2d 73 69 7a 65 3d 61 6c 6c 2e 6a 70 67 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 Data Ascii: e" content="Digital Wallets, Money Management, and More" /><meta name="og:image" content="https://www.paypalobjects.com/marketing/web/US/en/quantum-leap/home/consumer-uncookied-homepage-component=meta-size=all.jpg" /><meta name="og:description" content="P
2024-07-03 07:23:13 UTC	1378	IN	Data Raw: 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 2f 77 65 62 2f 55 53 2f 65 6e 2f 71 75 61 6e 74 75 6d 2d 6c 65 61 70 2f 68 6f 6d 65 2f 63 6f 6e 73 75 6d 65 72 2d 75 6e 63 6f 6f 6b 69 65 64 2d 68 6f 6d 65 70 61 67 65 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 6d 65 74 61 2d 73 69 7a 65 3d 61 6c 6c 2e 6a 70 67 22 20 2f 3e 3c 74 69 74 6c 65 20 3e 44 69 67 69 74 61 6c 20 57 61 6c 6c 65 74 73 2c 20 4d 6f 6e 65 79 20 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 61 6e 64 20 4d 6f 72 65 20 7c 20 50 61 79 50 61 6c 20 55 53 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 61 79 50 61 6c 20 69 Data Ascii: mage" content="https://www.paypalobjects.com/marketing/web/US/en/quantum-leap/home/consumer-uncookied-homepage-component=meta-size=all.jpg" /><title >Digital Wallets, Money Management, and More \| PayPal US</title><meta name="description" content="PayPal i
2024-07-03 07:23:13 UTC	1378	IN	Data Raw: 6a 6d 39 68 5f 31 20 5b 63 6c 61 73 73 2a 3d 76 69 64 65 6f 2d 66 72 61 6d 65 2d 77 72 61 70 70 65 72 5f 5d 20 76 69 64 65 6f 7b 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 32 2e 32 33 7d 7d 2e 5f 68 65 72 6f 2d 68 6f 6d 65 70 61 67 65 2d 73 74 61 63 6b 5f 68 70 79 34 63 5f 32 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 65 72 6f 2d 63 6f 6e 73 75 6d 65 72 2d 68 6f 6d 65 2d 70 61 67 65 2d 73 74 61 63 6b 2d 62 67 29 3b 6f 76 65 72 66 6c 6f 77 3a 63 6c 69 70 3b 63 6f 6e 74 61 69 6e 3a 70 61 69 6e 74 3b 7a 2d 69 6e 64 65 78 3a 34 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 5f 68 65 72 6f 2d 68 6f 6d 65 70 61 67 65 2d 73 74 61 63 6b 2d 72 65 64 75 63 65 2d 6d 6f 74 69 6f 6e 5f 68 70 79 34 63 5f 31 32 7b 68 65 69 67 68 74 3a 61 75 74 6f Data Ascii: jm9h_1 [class*=video-frame-wrapper_] video{aspect-ratio:2.23}}._hero-homepage-stack_hpy4c_2{background:var(--hero-consumer-home-page-stack-bg);overflow:clip;contain:paint;z-index:4;position:relative}._hero-homepage-stack-reduce-motion_hpy4c_12{height:auto
2024-07-03 07:23:13 UTC	1378	IN	Data Raw: 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 72 65 6d 29 7b 2e 5f 68 65 72 6f 2d 68 6f 6d 65 70 61 67 65 2d 73 74 61 63 6b 2d 74 68 65 6d 65 2d 73 6c 61 74 65 2d 67 72 61 64 69 65 6e 74 5f 68 70 79 34 63 5f 33 31 7b 2d 2d 68 65 72 6f 2d 63 6f 6e 73 75 6d 65 72 2d 68 6f 6d 65 2d 70 61 67 65 2d 73 74 61 63 6b 2d 62 67 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 32 30 64 65 67 2c 20 23 30 30 31 34 33 35 20 36 39 2e 37 25 2c 20 23 30 30 33 30 38 37 20 31 30 31 2e 38 35 25 29 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 72 65 6d 29 7b 2e 5f 68 65 72 6f 2d 68 6f 6d 65 70 61 67 65 2d 73 74 61 63 6b 2d 74 68 65 6d 65 2d 77 68 69 74 65 5f Data Ascii: dia screen and (min-width: 64rem){._hero-homepage-stack-theme-slate-gradient_hpy4c_31{--hero-consumer-home-page-stack-bg: linear-gradient(220deg, #001435 69.7%, #003087 101.85%)}}@media only screen and (min-width: 64rem){._hero-homepage-stack-theme-white_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49841	173.194.76.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	357	OUT	GET /gp/p/web_manifest.json HTTP/1.1 Host: pay.google.com Connection: keep-alive Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	2373	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jul 2024 07:23:13 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-X9HjGLrjPBXZ07L6SEZCKg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/gp/p/_/InstantbuyFrontendBuyflowHttp/web-reports?context=eJzjitHikmJw1pBiWF4qxVBRK8WwZKYUg2fNTabOPTeZJL6-ZNIA4sPR01md0mewBgGxT_0M1hggbr15jnUqEM8NOM8annmeNenfedYiIP7IcZF1ScRF1kOJF1mFeDge_pi8hU1gxrclDxiVtJPyC-Mz84pLEvNKkkor04ry80pS81KKU4vKUovijQyMTAzMDYz0DEziCwwAqrc7yw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=515=gdq3yipDRygE8DBtVL7alcGwrf8U34SD0ncuSfBCkAhCzbMkXZ3ZKiK7_7Xz8N3SpDbn_7zyqUrdozehCZ5-B2Sf2QBPhS1ZzCj3HivzvC78Kwpo-TTA1T9mxD_zapibc_Z3rlYFF4q904_K5mctwMC7Vtoin4ArKMSrHG9cewM; expires=Thu, 02-Jan-2025 07:23:13 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:13 UTC	244	IN	Data Raw: 65 65 0d 0a 0a 7b 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 47 6f 6f 67 6c 65 20 50 61 79 22 2c 0a 20 20 22 6e 61 6d 65 22 3a 20 22 47 6f 6f 67 6c 65 20 50 61 79 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 7b 0a 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 69 6e 73 74 61 6e 74 62 75 79 2f 73 76 67 2f 6c 69 67 68 74 5f 73 71 75 61 72 65 5f 67 70 61 79 2e 73 76 67 22 0a 20 20 7d 5d 2c 0a 20 20 22 73 65 72 76 69 63 65 77 6f 72 6b 65 72 22 3a 20 7b 0a 20 20 20 20 22 73 72 63 22 3a 20 22 2f 67 70 2f 70 2f 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 2e 6a 73 22 2c 0a 20 20 20 20 22 75 73 65 5f 63 61 63 68 65 22 3a 20 74 72 75 65 0a 20 20 7d 0a 7d 0a 0d 0a Data Ascii: ee{ "short_name": "Google Pay", "name": "Google Pay", "icons": [{ "src": "https://www.gstatic.com/instantbuy/svg/light_square_gpay.svg" }], "serviceworker": { "src": "/gp/p/service_worker.js", "use_cache": true }}
2024-07-03 07:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49839	192.229.221.25	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	357	OUT	GET /muse/noop.js HTTP/1.1 Host: www.paypalobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:13 UTC	723	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: s-maxage=31536000 Cache-Control: public,max-age=3600 Content-Type: application/javascript Date: Wed, 03 Jul 2024 07:23:13 GMT DC: ccg11-origin-www-1.paypal.com Etag: "60271cd0-12" Expires: Wed, 03 Jul 2024 07:23:12 GMT Last-Modified: Sat, 13 Feb 2021 00:26:56 GMT Paypal-Debug-Id: e7af4d3555e10 Server: ECAcc (dac/9C31) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Timing-Allow-Origin: https://www.paypal.com,https://www.sandbox.paypal.com Traceparent: 00-0000000000000000000e7af4d3555e10-3a1ea4dbfb8ea1ab-01 Vary: Accept-Encoding Vary: Accept-Encoding X-Content-Type-Options: nosniff Content-Length: 18 Connection: close
2024-07-03 07:23:13 UTC	18	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6e 6f 6f 70 28 29 7b 7d 0a Data Ascii: function noop(){}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49844	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	925	OUT	POST /targeting/graphql?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 318 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json disable-set-cookie: true sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.paypalobjects.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.paypalobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l7_az=dcg02.phx; ts=vreXpYrS%3D1814599392%26vteXpYrS%3D1719993192%26vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf%26vtyp%3Dnew; ts_c=vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf
2024-07-03 07:23:13 UTC	318	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 7b 20 76 69 73 69 74 6f 72 49 6e 66 6f 28 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 75 6e 74 72 79 3a 20 5c 22 4e 2f 41 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 64 65 76 69 63 65 49 6e 66 6f 3a 20 5c 22 25 37 42 25 32 32 73 63 72 65 65 6e 57 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 73 63 72 65 65 6e 48 65 69 67 68 74 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 63 6f 6c 6f 72 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 72 6f 73 65 74 74 61 4c 61 6e 67 75 61 67 65 25 32 32 25 33 41 25 32 32 65 6e 2d 55 53 25 32 43 65 6e 25 32 32 25 32 43 25 32 32 64 65 76 69 63 65 54 79 70 65 25 32 32 25 33 41 25 32 32 44 65 73 6b 74 6f 70 25 32 32 25 32 43 25 32 32 62 72 6f 77 73 65 72 48 65 Data Ascii: {"query":"{ visitorInfo(\n country: \"N/A\",\n deviceInfo: \"%7B%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22colorDepth%22%3A24%2C%22rosettaLanguage%22%3A%22en-US%2Cen%22%2C%22deviceType%22%3A%22Desktop%22%2C%22browserHe
2024-07-03 07:23:14 UTC	1161	IN	HTTP/1.1 200 OK Connection: close Content-Length: 435 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.paypalobjects.com Access-Control-Expose-Headers: Paypal-Debug-Id Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' https://.paypal.com https://.paypalobjects.com; img-src 'self' https:; script-src 'nonce-xRRMBraR2HlLwDg8REcxtdmaIDWn0qAonTG7LI8BNhZuNNkP' 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline' ; style-src 'self' https://.paypal.com https://.paypalobjects.com 'unsafe-inline' ; form-action 'self' https://.paypal.com; base-uri 'self' https://.paypal.com; object-src 'none'; frame-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; connect-src 'self' https://.paypal.com https://.paypalobjects.com https://.qualtrics.com; Content-Type: application/json; charset=utf-8 Etag: W/"1b3-ggsan9X3d/XG+TpQgriE89i30Qc"
2024-07-03 07:23:14 UTC	1258	IN	Data Raw: 4f 72 69 67 69 6e 2d 54 72 69 61 6c 3a 20 41 6c 49 6f 67 56 33 4b 46 74 6e 62 66 56 43 79 6c 39 5a 32 4e 70 72 45 37 46 44 38 50 59 43 74 2b 54 51 69 59 64 45 33 70 70 65 4a 6a 4a 30 78 4a 4b 63 74 68 59 77 4f 78 58 70 52 43 4e 6f 70 78 56 57 64 4f 49 45 4e 4d 63 4e 53 76 51 43 47 41 6d 6a 30 66 77 30 41 41 41 42 32 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 65 58 42 68 62 43 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 4e 6c 62 6d 52 47 64 57 78 73 56 58 4e 6c 63 6b 46 6e 5a 57 35 30 51 57 5a 30 5a 58 4a 53 5a 57 52 31 59 33 52 70 62 32 34 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 32 4f 44 51 34 4f 44 59 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 Data Ascii: Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluI
2024-07-03 07:23:14 UTC	435	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 76 69 73 69 74 6f 72 49 6e 66 6f 22 3a 7b 22 65 6e 63 72 79 70 74 65 64 41 63 63 6f 75 6e 74 4e 75 6d 62 65 72 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 6e 75 6c 6c 2c 22 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 54 79 70 65 22 3a 6e 75 6c 6c 7d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 74 72 61 63 69 6e 67 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 30 33 54 30 37 3a 32 33 3a 31 33 2e 39 33 33 5a 22 2c 22 65 6e 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 30 33 54 30 37 3a 32 33 3a 31 33 2e 39 36 36 5a 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 33 33 33 32 32 32 36 33 2c 22 65 78 65 63 75 74 69 6f 6e 22 3a 7b 22 72 65 73 Data Ascii: {"data":{"visitorInfo":{"encryptedAccountNumber":null,"confidenceScore":null,"identificationType":null}},"extensions":{"tracing":{"version":1,"startTime":"2024-07-03T07:23:13.933Z","endTime":"2024-07-03T07:23:13.966Z","duration":33322263,"execution":{"res

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49845	37.252.171.149	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:13 UTC	933	OUT	GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dfbcaf041-6718-4afd-b973-8f173c1ee610 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=tY-MkkqvgwINK9MX4e2QBlSoM3kZbFQNSFQub69tHdhCK1zERzo8JVLj90VL2rAU-wC1AgjJrG-B2bF4d6YNNV2Q7AX4bCD_HcZcaSNtmNs.; receive-cookie-deprecation=1; uuid2=3938742698804982171
2024-07-03 07:23:14 UTC	1483	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 03 Jul 2024 07:23:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3938742698804982171&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 AN-X-Request-Uuid: 41ed5210-4b76-4757-92ca-e93c77c23285 Set-Cookie: XANDR_PANID=tY-MkkqvgwINK9MX4e2QBlSoM3kZbFQNSFQub69tHdhCK1zERzo8JVLj90VL2rAU-wC1AgjJrG-B2bF4d6YNNV2Q7AX4bCD_HcZcaSNtmNs.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 01-Oct-2024 07:23:14 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 21-Jun-2034 07:23:14 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3938742698804982171; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 01-Oct-2024 07:23:14 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49849	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:14 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49846	142.250.186.68	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	337	OUT	HEAD /pay HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:14 UTC	338	IN	HTTP/1.1 302 Found Location: https://pay.google.com/about/redirect/ Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 03 Jul 2024 07:23:14 GMT Server: sffe Content-Length: 235 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49848	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 747 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:14 UTC	747	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:14 UTC	920	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=nLIoBAXDu12Mzlr04x2xgpmOz_gYJgd8NwYJ3gxG4kFk3pirjDzDjjaqDDKCBrD8MoJwgMeUkJJaJCrLrOgWc4h6KNmO9A1ax4GNagaRHtDaho4We9bjYQRBjlTgl5Xu7NBBKCzHV75f4QMRF29oMLhO0EetKG1HOLpRtxHtu7o; expires=Thu, 02-Jan-2025 07:23:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 03 Jul 2024 07:23:14 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:14 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49850	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 800 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:14 UTC	800	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:14 UTC	920	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=lHDQQco-fIsEGR4bNUnyOrC7XzCnDPx_pW1NtYDq3hYBC7kicM3ClKuaVJLGfaEtLwfpK4l9Dh6OqegbWWrqLeD1Qf89NVXxUyOED927tU7wbosrgXHL9BPVhFX2irlaPFMnQUtrCuCTRYytGsf4QsIQ5FpXdkEfmmWVpG6Kz5U; expires=Thu, 02-Jan-2025 07:23:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 03 Jul 2024 07:23:14 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:14 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49847	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:14 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49852	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:14 UTC	782	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:14 UTC	920	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=YI23M-3t5tMOLyEKZZ93EAlRPv2i2xfsKTB0ai6aSGbsk7py4HKSvtrPPODbPQFsUG_YbK_YSJbr_NF3g-1TCgDVfYZoycUsvnazQF8mRw497c9jZjoxJQPrjI06BF-dvFgNGlq3wpuvbZbk6ClpgKbZhDFGo-hXM-ErbKrqUTg; expires=Thu, 02-Jan-2025 07:23:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 03 Jul 2024 07:23:14 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:14 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49853	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 817 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:14 UTC	817	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:14 UTC	920	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=K_f21c1Ai1fs6JFqjyJiwJfrLTjfDBB8GJJ04OHMiJSHk5uSyT2AEAYCiE-UTN_ScacqGQSlXKL7ZdK1hSIyyUCOYXaIiX5-bg8qFKI64u8mrxnHJyYuzhjNggfdKaqQip7D22orDT9jtl4B6iE773MiKwrIW5n1KniEjtCRHk0; expires=Thu, 02-Jan-2025 07:23:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 03 Jul 2024 07:23:14 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:14 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49851	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://pay.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:14 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49854	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 748 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:14 UTC	748	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:14 UTC	920	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=j685UFCMd2v4TnMT2gnItYTtBea2XHBVn0UIzOH3FmwvHOYAKM8j1sn-0xbND9mU4LLHZH9DapbnF23I_jwXg_Lj5lRuVSeqV8PhhrP8InYOuimhWdoC4IlhTvVr_LtUOEk8r15epdKLDRRQQjkFgd-YaQcjOG4yL32sAi5yHbs; expires=Thu, 02-Jan-2025 07:23:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 03 Jul 2024 07:23:14 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:14 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49855	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 803 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:14 UTC	803	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:14 UTC	920	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4; expires=Thu, 02-Jan-2025 07:23:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:14 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 03 Jul 2024 07:23:14 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:14 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49857	66.102.1.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	635	OUT	GET /gp/p/ui/pay HTTP/1.1 Host: pay.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=UVq2WYvqsKk2GmB1aQ6RptHLZhIjhn84hibrTD4w8d03nX-eXc4F59RH3HWjKW_oMpJpxnsYf2omLlXuryjcF3rp4mSdjpC8X4tByKlRmrN_RPz3aZy5dJIN4jebkcTgfnuE7zYBBGLq49DPCFof_GOv24SY16co5hTMjM28Q88
2024-07-03 07:23:14 UTC	2095	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: DENY x-ua-compatible: IE=edge Expires: Wed, 03 Jul 2024 07:23:14 GMT Date: Wed, 03 Jul 2024 07:23:14 GMT Cache-Control: private, max-age=3600 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-GWHUmHIGQOgd82wfFG68Pw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendBuyflowPayUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://sandbox.google.com https://payments.google.com https://payments.sandbox.google.com https://pay.google.com https://pay.sandbox.google.com;report-uri /_/InstantbuyFrontendBuyflowPayUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendBuyflowPayUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: unsafe-none Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/gp/p/_/InstantbuyFrontendBuyflowPayUi/web-reports?context=eJzjitHikmJw1ZBiWF4qxVBRK8WwZKYUg2fNTabOPTeZJL6-ZNIA4sPR01md0mewBgGxT_0M1hggbr15jnUqEM8NOM8annmeNenfedYiIP7IcZF1ScRF1kOJF1mFeDge_Zi8hU1gwsJ5XxmVtJPyC-Mz84pLEvNKkkor04ry80pS81KKU4vKUovijQyMTAzMDYz0DEziCwwAnPs7gA" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 35 66 30 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 70 2f 70 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 47 57 48 55 6d 48 49 47 51 4f 67 64 38 32 77 66 46 47 36 38 50 77 22 3e 77 69 6e 64 6f 77 5b 27 70 70 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 70 72 6f 64 75 63 74 4e 61 Data Ascii: 5f01<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://pay.google.com/gp/p/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><script nonce="GWHUmHIGQOgd82wfFG68Pw">window['ppConfig'] = {productNa
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 7b 61 28 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 70 72 6f 74 6f 2f 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 29 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 61 3b 69 66 28 28 61 3d 77 69 6e 64 6f 77 2e 70 70 43 6f 6e 66 69 67 29 3d 3d 6e 75 6c 6c 3f 30 3a 61 2e 64 69 73 61 62 6c 65 41 6c 6c 52 65 70 6f 72 74 69 6e 67 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 62 2c 63 2c 64 2c 65 3b 72 65 74 75 72 6e 28 65 3d 28 62 3d 77 69 6e 64 6f 77 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 28 63 3d 62 2e 6e 61 76 69 67 61 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 28 64 3d 63 2e Data Ascii: {a("https://csp.withgoogle.com/csp/proto/"+encodeURIComponent(b),JSON.stringify(c))}function t(){var a;if((a=window.ppConfig)==null?0:a.disableAllReporting)return function(){};var b,c,d,e;return(e=(b=window)==null?void 0:(c=b.navigator)==null?void 0:(d=c.
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 21 3d 6e 75 6c 6c 3f 68 3a 22 75 6e 6b 6e 6f 77 6e 22 2c 72 65 70 6f 72 74 3a 7b 62 6c 6f 63 6b 65 72 73 3a 64 7d 7d 29 7d 7d 3b 76 61 72 20 4e 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 4f 3d 74 28 29 2c 50 3d 77 69 6e 64 6f 77 2e 70 70 43 6f 6e 66 69 67 3b 50 26 26 28 50 2e 64 69 73 61 62 6c 65 41 6c 6c 52 65 70 6f 72 74 69 6e 67 7c 7c 50 2e 64 65 6c 65 74 65 49 73 45 6e 66 6f 72 63 65 64 26 26 50 2e 73 65 61 6c 49 73 45 6e 66 6f 72 63 65 64 7c 7c 4e 3c 50 2e 68 65 61 72 74 62 65 61 74 52 61 74 65 26 26 72 28 4f 2c 50 2e 70 72 6f 64 75 63 74 4e 61 6d 65 2c 7b 6f 72 69 67 69 6e 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2c 74 79 70 65 3a 22 48 45 41 52 54 42 45 41 54 Data Ascii: dow.location.origin)!=null?h:"unknown",report:{blockers:d}})}};var N=Math.random(),O=t(),P=window.ppConfig;P&&(P.disableAllReporting\|\|P.deleteIsEnforced&&P.sealIsEnforced\|\|N<P.heartbeatRate&&r(O,P.productName,{origin:window.location.origin,type:"HEARTBEAT
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 22 4c 6f 51 76 37 65 22 3a 74 72 75 65 2c 22 4d 54 37 66 39 62 22 3a 5b 5d 2c 22 4d 55 45 36 4e 65 22 3a 22 49 6e 73 74 61 6e 74 62 75 79 46 72 6f 6e 74 65 6e 64 42 75 79 66 6c 6f 77 50 61 79 55 69 22 2c 22 51 72 74 78 4b 22 3a 22 22 2c 22 52 56 63 75 7a 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 53 30 36 47 72 62 22 3a 22 22 2c 22 53 36 6c 5a 6c 22 3a 31 31 36 37 39 39 37 34 37 2c 22 54 53 44 74 56 22 3a 22 25 2e 40 2e 5b 5b 6e 75 6c 6c 2c 5b 5b 34 35 36 32 37 33 35 34 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 46 46 56 35 5c 22 5d 2c 5b 34 35 34 35 34 32 31 35 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 55 55 63 47 35 64 5c 22 5d 2c 5b 34 35 36 33 34 30 35 31 Data Ascii: "LoQv7e":true,"MT7f9b":[],"MUE6Ne":"InstantbuyFrontendBuyflowPayUi","QrtxK":"","RVcuze":"PRODUCTION","S06Grb":"","S6lZl":116799747,"TSDtV":"%.@.[[null,[[45627354,null,false,null,null,null,\"eFFV5\"],[45454215,null,true,null,null,null,\"UUcG5d\"],[45634051
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 6e 74 73 2f 76 34 2f 6a 73 2f 69 6e 74 65 67 72 61 74 6f 72 2e 6a 73 3f 73 73 5c 75 30 30 33 64 6d 64 5c 75 30 30 32 36 6a 73 6d 6f 64 65 5c 75 30 30 33 64 64 75 22 2c 22 6d 6a 65 5a 53 63 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 6e 44 33 31 65 64 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 79 6d 65 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 73 2f 76 34 2f 6a 73 2f 69 6e 74 65 67 72 61 74 6f 72 2e 6a 73 3f 73 73 5c 75 30 30 33 64 6d 64 22 2c 22 6e 51 79 41 45 22 3a 7b 22 46 4d 4d 52 46 22 3a 22 66 61 6c 73 65 22 2c 22 78 44 70 56 4a 64 22 3a 22 25 2e 40 2e 5b 5c 22 2b 74 6f 6b 65 6e 69 7a 61 74 69 6f 6e 40 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 22 5d 5d 22 2c 22 43 63 31 63 69 62 22 3a 22 66 61 6c 73 65 22 2c 22 58 48 79 62 4b 62 22 3a Data Ascii: nts/v4/js/integrator.js?ss\u003dmd\u0026jsmode\u003ddu","mjeZSc":"PRODUCTION","nD31ed":"https://payments.google.com/payments/v4/js/integrator.js?ss\u003dmd","nQyAE":{"FMMRF":"false","xDpVJd":"%.@.[\"+tokenization@google.com\"]]","Cc1cib":"false","XHybKb":
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 65 74 3b 69 66 28 66 2b 68 2e 68 65 69 67 68 74 3c 30 7c 7c 63 2b 68 2e 77 69 64 74 68 3c 30 7c 7c 68 2e 68 65 69 67 68 74 3c 3d 30 7c 7c 68 2e 77 69 64 74 68 3c 3d 30 29 72 65 74 75 72 6e 21 31 3b 62 3d 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 66 3c 3d 28 61 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 26 26 63 3c 3d 28 61 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 62 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 7d 3b 61 2e 5f 72 65 63 6f 72 64 49 6d 6c 45 6c 3d 6d 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 62 2e 74 61 72 67 65 74 3b 76 61 72 Data Ascii: et;if(f+h.height<0\|\|c+h.width<0\|\|h.height<=0\|\|h.width<=0)return!1;b=b.documentElement;return f<=(a.innerHeight\|\|b.clientHeight)&&c<=(a.innerWidth\|\|b.clientWidth)};a._recordImlEl=m;document.documentElement.addEventListener("load",function(b){b=b.target;var
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 4c 6a 4e 68 4d 7a 51 75 4e 7a 49 73 4d 7a 51 75 4e 7a 49 73 4d 43 77 77 4c 44 45 74 4d 54 45 75 4e 54 55 73 4d 6a 59 75 4e 6e 45 74 4d 54 45 75 4d 69 77 78 4d 43 34 32 4f 43 30 79 4e 79 34 32 4e 53 77 78 4d 43 34 32 4e 30 67 79 4d 44 59 75 4d 6c 70 74 4d 43 30 31 4f 53 34 78 4e 56 59 32 4f 53 34 78 4f 47 67 79 4e 32 45 79 4d 53 34 79 4f 43 77 79 4d 53 34 79 4f 43 77 77 4c 44 41 73 4d 43 77 78 4e 53 34 35 4d 79 30 32 4c 6a 51 34 4c 44 49 78 4c 6a 4d 32 4c 44 49 78 4c 6a 4d 32 4c 44 41 73 4d 43 77 77 4c 44 41 74 4d 7a 41 75 4e 6a 4d 73 4d 6a 45 73 4d 6a 45 73 4d 43 77 77 4c 44 41 74 4d 54 55 75 4f 54 4d 74 4e 69 34 32 4e 57 67 74 4d 6a 64 61 49 69 38 2b 50 48 42 68 64 47 67 67 59 32 78 68 63 33 4d 39 49 6d 4e 73 63 79 30 78 49 69 42 6b 50 53 4a 4e 4d 7a 41 Data Ascii: LjNhMzQuNzIsMzQuNzIsMCwwLDEtMTEuNTUsMjYuNnEtMTEuMiwxMC42OC0yNy42NSwxMC42N0gyMDYuMlptMC01OS4xNVY2OS4xOGgyN2EyMS4yOCwyMS4yOCwwLDAsMCwxNS45My02LjQ4LDIxLjM2LDIxLjM2LDAsMCwwLDAtMzAuNjMsMjEsMjEsMCwwLDAtMTUuOTMtNi42NWgtMjdaIi8+PHBhdGggY2xhc3M9ImNscy0xIiBkPSJNMzA
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 31 32 70 78 7d 2e 4e 50 51 37 49 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 73 42 79 46 45 7b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 38 70 78 29 7b 2e 73 42 79 46 45 7b 77 69 64 74 68 3a 36 30 38 70 78 7d 7d 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 45 54 53 44 7b 63 6f 6e 74 Data Ascii: verflow-x:hidden;overflow-y:auto;position:absolute;right:0;top:12px}.NPQ7Id{display:flex;flex-direction:column;align-items:center}.sByFE{width:100%}@media (min-width:608px){.sByFE{width:608px}}c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{cont
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 2c 65 29 7d 7d 29 7d 7d 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 5b 61 5d 7d 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 65 63 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 3b 76 61 72 20 62 3b 69 66 28 28 62 3d 74 68 69 73 2e 67 29 3d 3d 6e 75 6c 6c 3f 30 3a 62 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 71 28 74 68 69 73 2c 74 68 69 73 2e 67 5b 61 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 2f 69 50 68 6f 6e 65 7c 69 50 61 64 7c 69 50 6f 64 2f 2e 74 65 73 74 28 6e 61 76 69 67 Data Ascii: ,e)}})}}n.prototype.j=function(a){return this.l[a]};n.prototype.ecrd=function(a){this.i=a;var b;if((b=this.g)==null?0:b.length){for(a=0;a<this.g.length;a++)q(this,this.g[a]);this.g=null}};var t=typeof navigator!=="undefined"&&/iPhone\|iPad\|iPod/.test(navig
2024-07-03 07:23:14 UTC	2095	IN	Data Raw: 3d 43 5b 44 5d 3d 7b 7d 3a 43 5b 44 5d 3d 7a 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 43 6f 6c 6c 65 63 74 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 5f 2f 6d 73 73 2f 62 6f 71 2d 70 61 79 6d 65 6e 74 73 2d 63 6f 6e 73 75 6d 65 72 2f 5f 2f 6a 73 2f 6b 3d 62 6f 71 2d 70 61 79 6d 65 6e 74 73 2d 63 6f 6e 73 75 6d 65 72 2e 49 6e 73 74 61 6e 74 62 75 79 46 72 6f 6e 74 65 6e 64 42 75 79 66 6c 6f 77 50 61 79 55 69 2e 65 6e 5f 55 53 2e 4f 4d 54 77 32 72 56 56 44 69 51 2e 65 73 35 2e 4f 2f 61 6d 3d 4d 41 77 6b 41 77 2f 64 3d 31 2f 65 78 63 6d 3d 49 5a 54 36 33 2c 4a 75 68 73 6f 65 2c 4c 45 69 6b 5a 65 2c 50 72 50 59 52 64 2c 5f 62 2c 5f 74 70 2c 68 63 Data Ascii: =C[D]={}:C[D]=z;}).call(this);</script><script noCollect href="https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayUi.en_US.OMTw2rVVDiQ.es5.O/am=MAwkAw/d=1/excm=IZT63,Juhsoe,LEikZe,PrPYRd,_b,_tp,hc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49859	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	835	OUT	GET /targeting/graphql?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l7_az=dcg02.phx; ts_c=vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf; enforce_policy=ccpa; LANG=en_US%3BUS; x-pp-s=eyJ0IjoiMTcxOTk5MTM5MzY2MCIsImwiOiIwIiwibSI6IjAifQ; tsrce=mppnodeweb; nsid=s%3A185Y2Rb5NCQLEuqVpkaahycfE_wfsvCA.M%2BL60kvt6VQUFd%2FhfdgZInAaaoLMOuuwA0ebAEVFNHw; ts=vreXpYrS%3D1814599393%26vteXpYrS%3D1719993193%26vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf%26vtyp%3Dnew
2024-07-03 07:23:14 UTC	1048	IN	HTTP/1.1 403 Forbidden Connection: close Content-Length: 27 Accept-Ch: Sec-CH-UA-Full Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: text/html; charset=utf-8 Etag: W/"1b-t3Pfl4FRsGq0mO4t1UhagLO9mUw" Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f6979530e889c Traceparent: 00-0000000000000000000f6979530e889c-6a133907321a810b-01 DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:14 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Served-By: cache-iad-kcgs7200061-IAD, cache-ewr18154-EWR, cache-ewr18154-EWR X-Cache: MISS, MISS, MISS X-Cache-Hits: 0, 0, 0 X-Timer: S1719991395.596108,VS0,VE123 Server-Timing: content-encoding;desc="",x-cdn;desc="fastly"
2024-07-03 07:23:14 UTC	27	IN	Data Raw: 25 32 32 55 6e 68 61 6e 64 6c 65 64 25 32 30 65 78 63 65 70 74 69 6f 6e 25 32 32 Data Ascii: %22Unhandled%20exception%22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49861	35.71.131.137	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	908	OUT	GET /track/cmf/appnexus?ttd=1&anid=3938742698804982171&ttd_tdid=fbcaf041-6718-4afd-b973-8f173c1ee610 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; TDCPM=CAESFQoGZ29vZ2xlEgsI_vKv5ODOjT0QBRIWCgdydWJpY29uEgsImJmw5ODOjT0QBRIXCghhcHBuZXh1cxILCJT31pinnII9EAUYBSACKAEyCwjq3a7z9s6NPRAFQg8iDQgBEgkKBXRpZXIzEAFaB25jb2NyaWdgAXIIYXBwbmV4dXM.
2024-07-03 07:23:14 UTC	733	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 07:23:14 GMT Content-Length: 323 Connection: close server: Kestrel location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent= set-cookie: TDID=fbcaf041-6718-4afd-b973-8f173c1ee610; expires=Thu, 03 Jul 2025 07:23:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI_vKv5ODOjT0QBRIWCgdydWJpY29uEgsImJmw5ODOjT0QBRIXCghhcHBuZXh1cxILCIDT35Hhzo09EAUSFQoGY2FzYWxlEgsIpvjfkeHOjT0QBRgFIAMoATILCOrdrvP2zo09EAVCDyINCAESCQoFdGllcjMQAVoHbmNvY3JpZ2ABcgZjYXNhbGU.; expires=Thu, 03 Jul 2025 07:23:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-07-03 07:23:14 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 66 62 63 61 66 30 34 31 2d 36 37 31 38 2d 34 61 66 64 2d 62 39 37 33 2d 38 66 31 37 33 63 31 65 65 36 31 30 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 32 32 35 38 33 33 39 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 66 62 63 61 66 30 34 31 2d 36 37 31 38 2d 34 Data Ascii: Redirecting to: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent=">https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49860	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=nLIoBAXDu12Mzlr04x2xgpmOz_gYJgd8NwYJ3gxG4kFk3pirjDzDjjaqDDKCBrD8MoJwgMeUkJJaJCrLrOgWc4h6KNmO9A1ax4GNagaRHtDaho4We9bjYQRBjlTgl5Xu7NBBKCzHV75f4QMRF29oMLhO0EetKG1HOLpRtxHtu7o
2024-07-03 07:23:15 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:15 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:15 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:15 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49863	173.194.76.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	351	OUT	HEAD /about/redirect/ HTTP/1.1 Host: pay.google.com Connection: keep-alive Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:15 UTC	1196	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Length: 292 Content-Security-Policy: script-src 'nonce-0wsDPNl7OcgBp-MKix2wqw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/pay_google; base-uri 'none' Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/pay_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="uxe-owners-acl/pay_google" Report-To: {"group":"uxe-owners-acl/pay_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/pay_google"}]} Date: Wed, 03 Jul 2024 07:23:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 12 Mar 2024 05:08:00 GMT X-Content-Type-Options: nosniff Link: <https://pay.google.com/gp/p/payment_method_manifest.json>; rel="payment-method-manifest" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49864	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=K_f21c1Ai1fs6JFqjyJiwJfrLTjfDBB8GJJ04OHMiJSHk5uSyT2AEAYCiE-UTN_ScacqGQSlXKL7ZdK1hSIyyUCOYXaIiX5-bg8qFKI64u8mrxnHJyYuzhjNggfdKaqQip7D22orDT9jtl4B6iE773MiKwrIW5n1KniEjtCRHk0
2024-07-03 07:23:14 UTC	750	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:15 UTC	518	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:15 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49862	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 748 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=K_f21c1Ai1fs6JFqjyJiwJfrLTjfDBB8GJJ04OHMiJSHk5uSyT2AEAYCiE-UTN_ScacqGQSlXKL7ZdK1hSIyyUCOYXaIiX5-bg8qFKI64u8mrxnHJyYuzhjNggfdKaqQip7D22orDT9jtl4B6iE773MiKwrIW5n1KniEjtCRHk0
2024-07-03 07:23:14 UTC	748	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:15 UTC	518	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:15 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49865	216.58.206.78	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:14 UTC	947	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 748 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pay.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pay.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=j685UFCMd2v4TnMT2gnItYTtBea2XHBVn0UIzOH3FmwvHOYAKM8j1sn-0xbND9mU4LLHZH9DapbnF23I_jwXg_Lj5lRuVSeqV8PhhrP8InYOuimhWdoC4IlhTvVr_LtUOEk8r15epdKLDRRQQjkFgd-YaQcjOG4yL32sAi5yHbs
2024-07-03 07:23:14 UTC	748	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 6e 73 74 61 6e 74 62 75 79 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 37 30 32 2e 30 34 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_instantbuyfrontendserver_20240702.04_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,
2024-07-03 07:23:15 UTC	518	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://pay.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 03 Jul 2024 07:23:15 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-03 07:23:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49868	172.64.151.101	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:15 UTC	699	OUT	GET /rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:15 UTC	1239	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 07:23:15 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent=&C=1 CF-Ray: 89d5210e0859431c-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZoT8Y9HM6tsAAEN5AM0.mQAA; Path=/; Domain=casalemedia.com; Expires=Thu, 03 Jul 2025 07:23:15 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=3857; Path=/; Domain=casalemedia.com; Expires=Tue, 01 Oct 2024 07:23:15 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=3857; Path=/; Domain=casalemedia.com; Expires=Tue, 01 Oct 2024 07:23:15 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kbk8fiiIT9V3%2FWW6s1JqiUNSd4QfJYqS%2FDLGDmzV9%2FjXR2CkqC%2BQ%2BbgKswlnRNpUZCPX84YwYPeXvjd%2BkA%2FqPsm2Z8S%2Biz9ZwTsJdmMH8F7Tnh%2BOuOKSNqOBmeFQw%2BBP28gxvS7tGvqznQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49870	173.194.76.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:15 UTC	368	OUT	GET /gp/p/payment_method_manifest.json HTTP/1.1 Host: pay.google.com Connection: keep-alive Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:16 UTC	2371	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jul 2024 07:23:16 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce--JndkxKpN4mRZrPK1h42eQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/gp/p/_/InstantbuyFrontendBuyflowHttp/web-reports?context=eJzjitHikmLw05BiWF4qxVBRK8WwZKYUg2fNTabOPTeZJL6-ZNIA4sPR01md0mewBgGxT_0M1hggbr15jnUqEM8NOM8annmeNenfedYiIP7IcZF1ScRF1kOJF1mFuDme_Ji8hU3gwPKlQkraSfmF8Zl5xSWJeSVJpZVpRfl5Jal5KcWpRWWpRfFGBkYmBuYGRnoGJvEFBgBZKzrj" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=515=fC0Q2oQ_1EYL776r4aJsQvCASW_AQWvh6VEXm0jQ-HoPRFmnrcNSBhw6CN1IGuFPcxx17WLcIgakHq_e8C2-b1_viSBcg3VJc6qE9RMCEXcSKHPxZ-eYRhxoUXh36e227PA8yroF6qMayUiN7STDuKAC5BqZZ2KTuRyU24RTMv8; expires=Thu, 02-Jan-2025 07:23:16 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:16 UTC	138	IN	Data Raw: 38 34 0d 0a 0a 7b 0a 20 20 22 64 65 66 61 75 6c 74 5f 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 20 5b 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 70 2f 70 2f 77 65 62 5f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 5d 2c 0a 20 20 22 73 75 70 70 6f 72 74 65 64 5f 6f 72 69 67 69 6e 73 22 3a 20 5b 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 5d 0a 7d 0a 0d 0a Data Ascii: 84{ "default_applications": ["https://pay.google.com/gp/p/web_manifest.json"], "supported_origins": ["https://pay.google.com"]}
2024-07-03 07:23:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49871	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:15 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=nLIoBAXDu12Mzlr04x2xgpmOz_gYJgd8NwYJ3gxG4kFk3pirjDzDjjaqDDKCBrD8MoJwgMeUkJJaJCrLrOgWc4h6KNmO9A1ax4GNagaRHtDaho4We9bjYQRBjlTgl5Xu7NBBKCzHV75f4QMRF29oMLhO0EetKG1HOLpRtxHtu7o
2024-07-03 07:23:16 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:16 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:16 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:16 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49873	172.64.151.101	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:16 UTC	765	OUT	GET /rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent=&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZoT8Y9HM6tsAAEN5AM0.mQAA; CMPS=3857; CMPRO=3857
2024-07-03 07:23:16 UTC	986	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 89d52111db0b5e64-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZoT8Y9HM6tsAAEN5AM0.mQAA; Path=/; Domain=casalemedia.com; Expires=Thu, 03 Jul 2025 07:23:16 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=3857; Path=/; Domain=casalemedia.com; Expires=Tue, 01 Oct 2024 07:23:16 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=024Y%2F6xVOOzaMknqkJXul3yYka5pibMT5U8ZvZojiaJguMFK0WLxi0CHq9Uxfooq%2BPUrk8hq2hEHxWrUZh5O1KzuZsN9SC%2FJuKZR7fFlzSYnihxjms7DlXeFo39gxA2rqhLdACN9yg%2Bblw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-03 07:23:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49879	34.96.67.224	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:16 UTC	518	OUT	GET /s.js HTTP/1.1 Host: cdn.sift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:16 UTC	925	IN	HTTP/1.1 200 OK x-goog-generation: 1710750183024543 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 20557 Content-Encoding: gzip x-goog-hash: crc32c=asYZeQ== x-goog-hash: md5=SJxRz6qrueRs3NmAX5y15w== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 20557 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-UploadID: ACJd0NorXIUODfbeWItJ7P9el31cf3chEIq1cYfY0bx1TQf3J82GE7VYd-iMIAo7pMCyb1dfshIOrcRa3A Server: UploadServer Date: Sun, 30 Jun 2024 20:46:33 GMT Expires: Mon, 30 Jun 2025 20:46:33 GMT Cache-Control: no-transform Age: 211003 Last-Modified: Mon, 18 Mar 2024 08:23:03 GMT ETag: "489c51cfaaabb9e46cdcd9805f9cb5e7" Content-Type: application/javascript Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:16 UTC	465	IN	Data Raw: 1f 8b 08 08 52 ce ee 65 02 ff 74 6d 70 73 65 72 30 39 39 37 35 00 cd 7d 69 7b db 46 92 f0 77 fe 0a 0a 3b ab 00 66 93 02 78 48 14 5b 10 57 87 9d 78 c6 8e 3d b1 93 99 5d 9a f1 d3 04 40 12 12 af 10 a0 0e 4b da df fe 56 f5 01 34 0e 52 4a 32 b3 cf 3b e3 88 e8 bb fa aa ae ab ab 0f 5e 55 aa 6f 17 de 6c e3 07 51 d5 5b fa 41 75 bc 5e ce 7b 95 ea c5 fa 7e 15 2f ff fa a9 c2 63 1b 93 e5 72 32 0b 1a de 72 7e b0 3a f0 78 5a fd 2a aa 54 4d cf aa 36 6d fb b8 de b4 9d 66 75 74 5f fd 6b 30 1e 57 df 2f e3 b8 51 3d 9b cd aa eb 70 32 8d a3 ea 3a 88 82 f5 4d e0 37 76 56 77 70 1b 5e 87 07 ef 42 2f 58 44 c1 16 b8 3e ce 36 93 70 71 19 c4 81 17 57 6f ec c6 71 c3 a9 54 6f 6f 6f 1b ab 70 31 63 fe 7d 63 11 c4 07 7a a6 83 99 a8 ef a0 52 1d 54 ff be 09 bd eb cf e1 3c a8 be 99 b1 68 5a Data Ascii: Retmpser09975}i{Fw;fxH[Wx=]@KV4RJ2;^UolQ[Au^{~/cr2r~:xZ*TM6mfut_k0W/Q=p2:M7vVwp^B/XD>6pqWoqTooop1c}czRT<hZ
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: 3b 5a 8f a0 f9 49 18 4f 37 23 de ee 2f 0c 66 e4 60 0c d5 05 eb d5 3a 5c c4 57 51 13 96 ea 72 75 cf d7 99 5c 8d 4e b7 5f fd eb 72 c1 a2 ea 0f 8c 4d aa e6 15 7e ff d7 6c b9 9a 6e a2 c6 72 3d b1 4a 8a 74 fa 55 a8 3c 58 c4 e1 02 3e a2 70 76 1f dc 54 cd 1b 19 d5 b8 91 51 ff b5 dc c4 b3 e5 f2 1a a1 81 6a e4 52 f5 ab 9b 05 2e 8a 78 1a 54 df bf fd 5c 35 e5 c0 e1 b2 5c ae 20 c7 72 b3 f6 02 6c 5a 2d c6 e8 60 1e c6 75 19 68 ac a6 2b ab aa 02 95 57 07 95 1b b6 ae 7e 8d c2 71 ec f2 bf 8f 8f 83 21 1d 6f 16 7c e9 54 bf f2 38 be 7e 2f ce cd 7b eb 81 87 1b ab 4d 34 35 07 c6 d7 28 10 69 06 b9 1f 5a 4f b7 7c 85 35 32 65 dc 4c 88 f2 d6 3e 61 63 9f 78 5b aa 21 d3 7a 48 da bc 87 c0 3a 88 37 eb 45 75 b1 99 cd f6 5c 7d 87 ed ef 1b 7c 1f 1a 6e 26 ba 71 23 f6 00 24 ab 7a 20 87 1b Data Ascii: ;ZIO7#/f`:\WQru\N_rM~lnr=JtU<X>pvTQjR.xT\5\ rlZ-`uh+W~q!o\|T8~/{M45(iZO\|52eL>acx[!zH:7Eu\}\|n&q#$z
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: 09 54 9e 85 80 20 89 6b 5a 64 ea ee 39 80 59 aa 00 f5 fc 44 9d 84 96 3c 05 3e bd 7d f3 f9 eb e5 eb f3 9f bf df df af c8 38 38 a5 00 49 cf d9 c2 0b f6 f7 8b 71 8d 39 5b 5f 9b 78 74 69 e3 99 39 29 3b b6 65 11 cc 00 ad cf 6b ae 43 4a 1a 2b 6b 0b 8b c0 20 fc e1 26 cb 0a 06 2c da ac 03 2c 0b 2b 78 47 69 f2 a2 1c 3b db b7 28 4e d9 03 8c b7 2d 37 c9 ed 34 9c c1 16 b0 ed d3 b2 99 a9 6f 2c 3a 7d 7c 8c 44 18 88 4a 58 05 13 eb 49 ac 2a 9b e6 e3 93 f9 fe a0 13 65 23 be 2f 80 98 c4 65 f4 d6 ff 0a a4 c1 59 5f 8f 70 e3 c6 fb cb 8e 79 a6 41 6e f5 26 0d c0 99 eb 9f 81 07 f8 0a f3 6e 96 e4 d7 72 40 cf 9e c4 b6 7e 10 5b e9 6b 4f df 65 c7 b9 5d 46 24 c9 f7 b5 f7 91 8c 02 e6 2d 17 7f 0b ee bf f6 7e 78 a2 e7 48 b1 f0 7a b1 9d df cc 73 18 32 80 9f 5e f0 f8 15 5b c7 b0 a1 7f 4e Data Ascii: T kZd9YD<>}88Iq9[_xti9);ekCJ+k &,,+xGi;(N-74o,:}\|DJXI*e#/eY_pyAn&nr@~[kOe]F$-~xHzs2^[N
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: 7f 4d 8e e8 c7 c7 bf 9e 74 a1 a7 bc d8 0d 16 bb 99 79 65 55 ae 7c a4 af 50 9d b0 e6 ea 84 b2 3c eb 15 e4 81 e4 59 29 64 88 fd f6 f7 53 ac 16 59 0f 88 d4 f1 c0 62 37 e1 84 01 be 4f d3 80 7e 92 54 28 b0 2b 95 a6 05 67 6a 31 57 9a a3 69 f1 93 94 cd 81 9b 0a fc 77 09 16 45 0c 2f c5 a0 4f fa 31 b5 3b 27 52 b9 25 79 ac b2 72 63 06 d4 59 c9 21 92 e6 fd 29 88 96 b3 0d a6 25 27 c6 c9 ba 01 48 28 9c f1 73 e4 f1 51 9d 2f 2a 5a 9c 3b 25 47 87 da 33 09 aa 07 0a e7 dd f2 36 58 5f c0 79 c6 99 67 40 c6 11 a0 30 d8 21 e9 c1 92 cb 34 d2 39 01 b9 9e aa ab 29 20 16 c3 3a 75 ed be 21 f5 4a d5 8f 3c ae 97 cd 9d cd 93 49 05 aa 73 0d 8b 4a e6 38 93 21 3d 07 1c 18 9b 3b 99 fe 8e 7f eb a9 61 0a 04 b2 18 5a 3c e3 95 56 a0 54 f8 e1 53 a6 cc 9c 79 b2 be f7 f0 d5 33 3e c4 53 58 78 48 Data Ascii: MtyeU\|P<Y)dSYb7O~T(+gj1WiwE/O1;'R%yrcY!)%'H(sQ/*Z;%G36X_yg@0!49) :u!J<IsJ8!=;aZ<VTSy3>SXxH
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: ec 25 ca 39 b2 d9 e8 3a 42 12 f7 94 54 9d f0 84 f5 0c 40 1b f7 34 89 3c d9 b0 9e 2e 40 25 0b ec 44 46 98 45 e6 08 61 56 9a 45 16 e3 9e 36 ce 64 8c 59 d2 61 24 8b 55 2f 23 6b 22 2b cc a0 0b 9b 48 84 31 19 f1 32 89 6e 7b 59 c1 32 f1 fc 5e 46 a6 4c 56 3d 4d 6a 4c e2 65 af 20 80 24 58 24 15 07 12 2f e8 e5 25 c0 c4 c7 81 d1 84 be 24 c6 7a 73 a2 5e b2 c4 b9 90 c2 5d b2 c2 29 55 62 5d b2 8a 7a 19 61 2e b9 f1 7b 89 fc 96 dc 44 3d 5d 6c 4b a6 5e af 5c 52 4b ae 10 38 5d 2c 4b a2 a8 57 50 1e 90 19 46 66 94 01 a4 02 07 aa d1 d3 85 fc c4 1f f5 12 11 3f f1 b0 47 89 44 97 c4 d8 97 82 d0 06 10 46 af 54 3e 43 e2 a8 97 61 06 49 3c ea 15 29 31 c2 30 56 d1 1a c4 c3 45 51 c4 1c 24 c2 25 2a 36 ed 27 c8 18 c4 6f 3f c2 92 d9 24 91 68 d4 fa f5 89 8e dc 37 e6 c4 a2 40 84 be 31 af Data Ascii: %9:BT@4<.@%DFEaVE6dYa$U/#k"+H12n{Y2^FLV=MjLe $X$/%$zs^])Ub]za.{D=]lK^\RK8],KWPFf?GDFT>CaI<)10VEQ$%*6'o?$h7@1
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: 98 07 73 c0 71 e2 1c 91 43 fb d0 b1 3b 5d e7 d8 82 91 f5 4c d1 c2 88 67 68 0d 49 13 aa 70 ec 76 bb d3 ec b4 5a 68 09 2b c1 a8 28 38 da 1c 0e e7 e8 b0 ed 74 bb c7 47 45 38 3a 1c 0e a7 69 db 76 d7 6e 37 4b e0 38 e4 70 d4 9d 36 4c 64 cb 69 b5 9d 22 24 47 02 92 76 e7 c8 ee 1c 77 5b 56 61 38 ba 08 86 73 74 64 db ad 4e db 29 19 8e 63 31 1c ce 31 2e 95 76 db 39 2a c2 e1 d8 02 90 76 d3 86 83 ae 00 83 e3 c8 e1 38 3e b6 db 36 34 d2 2c 82 e1 34 39 1c d0 d1 43 bb 75 d8 6d 96 4c 4b 4b 00 d2 b6 a1 a3 8e ed 94 80 d1 96 e3 d1 b1 61 d0 9a cd 63 bb 04 96 0e 87 05 0e 85 c3 4e ab d3 6a 1e 23 28 57 59 50 86 a4 03 95 1c 76 8e 8e 0f 3b 8e 8d 90 5c 65 20 81 61 3f c6 c9 3d 3c ee d8 ce 61 ab 89 90 5c 65 21 c1 35 d4 26 87 ed 16 ec aa 23 07 c6 a4 e2 43 16 1d 10 18 b2 a6 0d ab ec 08 Data Ascii: sqC;]LghIpvZh+(8tGE8:ivn7K8p6Ldi"$Gvw[Va8stdN)c11.v9*v8>64,49CumLKKacNj#(WYPv;\e a?=<a\e!5&#C
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: e4 f0 1b 5a 03 4a 2a 98 89 e4 dd e4 77 a5 84 bf 02 e9 b7 40 75 01 6f a4 6d 49 41 96 dc 47 43 98 13 2e 9c 9b 87 00 b8 12 30 a4 f6 ed 7e ad c6 21 0b 4c 36 f0 f1 24 b5 4e 03 d3 93 9f 0a 22 87 66 72 9c 14 72 d4 9d e4 9a b4 fd 44 f8 9d d4 6d 93 45 b8 a2 7b 2f 33 54 19 b7 09 98 22 86 0c 91 a1 db 86 3e d6 eb 34 28 45 b4 a5 3d c7 7d 0e a8 c4 1c 18 b6 41 b4 ff 86 e9 98 b4 4f 7d de 73 ee f8 c1 b4 6b 96 d9 a8 59 ca bd 43 00 7d b3 f0 b2 28 7e b8 62 ed 34 fe 82 74 f6 a9 f7 f8 b8 97 ee 05 9e d1 e2 b9 a0 7a b5 7e 82 46 84 ce 4d 4c 9b b4 2d 29 fe 22 28 28 5e f9 bd 07 58 7c 1c 93 6a e3 32 c2 a5 c4 6d bb e0 38 f1 5d 36 18 0d 35 4c 18 4f c3 a8 11 ac d7 1f 46 57 6e a0 86 18 b0 22 2c 21 ff 47 76 53 38 c4 f8 5c b2 86 3f da 4c d4 a0 8a 10 15 d2 19 3e c2 78 7b 4c 5c 20 4e 2c 16 Data Ascii: ZJ*w@uomIAGC.0~!L6$N"frrDmE{/3T">4(E=}AO}skYC}(~b4tz~FML-)"((^X\|j2m8]65LOFWn",!GvS8\?L>x{L\ N,
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: 79 5f 97 8b bd ff 7a 75 20 17 60 ae 49 4f 9c 26 d9 82 7e 30 83 5d 53 cd c6 a6 37 36 04 68 70 e0 00 40 02 ff 29 f8 60 2a b4 34 73 0b 5c fb fb 47 27 b9 d1 e8 67 83 3d 1b 39 4f e0 0b fb bd c6 ab fe e0 57 56 ff 76 56 ff 9f a1 d5 ef 43 cc fb 4f 6f 5f 3f ae 6f 00 81 7c e9 59 f0 d7 fc e2 d7 be 34 fa 5f fc 57 d6 41 a8 a8 90 7e 85 4b 05 de cc 96 2c 21 6c fe e2 20 bf dc 3b 42 11 88 40 0b 3f 2e 17 65 98 c1 de 89 56 7b 0f 50 dc 4d fa dc 07 a4 e0 65 91 04 2a 58 a5 29 2d 0f a2 84 40 da dd 62 58 8d d7 f7 81 77 bd 74 f7 80 eb 3c e0 9f 0a 7a cf 52 31 d8 c7 03 fc e3 a7 3d 43 12 e5 f1 51 af 82 aa 31 17 15 ea 49 7d fd a8 3e 90 83 86 63 86 62 1d f2 c5 1f d6 f4 31 4b c6 89 4b 6e 81 d9 d3 67 97 5f a0 10 d0 9a 1f 3e fe c4 41 7b e4 91 29 94 8d 57 f0 23 69 98 6c 86 c1 97 83 61 5f Data Ascii: y_zu `IO&~0]S76hp@)`4s\G'g=9OWVvVCOo_?o\|Y4_WA~K,!l ;B@?.eV{PMeX)-@bXwt<zR1=CQ1I}>cb1KKng_>A{)W#ila_
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: 1f e0 9d a4 de 43 18 5d 86 11 9f e5 52 83 9f 72 51 b0 38 48 94 8d 82 da 43 a8 b4 36 b7 b9 bf 50 17 d4 49 f2 65 01 76 72 24 fe df 62 36 61 e7 ad 00 50 dd 2f 59 44 05 b6 99 2c 3e c9 86 72 7e 45 2c a0 3d 3f c9 9e 91 97 f3 81 49 8f 03 d6 b8 7c fb fd db cf ef df fe 98 aa e2 2d 71 f2 ee b1 c6 3b d8 55 8d 77 a8 2c 4b 77 1b 44 a0 fe 45 6d 43 69 25 b0 a5 29 99 99 db 01 f0 aa 2a 8a 69 01 04 95 cb a0 a4 c2 10 d5 b8 e1 ba fe 5c 5e 0f 09 31 40 ea 7e e3 0e 92 03 d7 c4 9c 77 2e 86 fb 5b da f7 1b 37 56 cf 3e cd 9d 03 1e e1 6d 58 fc 08 00 34 aa 36 6e 80 b4 36 5b 7b d3 52 23 1a 6c 82 c0 c4 90 31 ec 43 74 e4 8b 39 7f e0 5c e1 e3 a3 9f 99 16 a8 d7 a6 d9 2c 2e 3f b1 c7 a9 d1 41 82 ac f9 79 e1 67 e6 ce 13 15 fe 91 89 e3 ec 06 99 ba 2a fd ec 9f 24 24 57 64 e6 0e d0 9d 04 fc 7f Data Ascii: C]RrQ8HC6PIevr$b6aP/YD,>r~E,=?I\|-q;Uw,KwDEmCi%)i\^1@~w.[7V>mX46n6[{R#l1Ct9\,.?Ayg$$Wd
2024-07-03 07:23:16 UTC	1390	IN	Data Raw: 87 37 5c 0a 88 1f 6f 2f 7b 59 e7 4d 18 c9 1d 80 f5 3a b6 8d 72 be 4b c8 bd e5 dc 80 ac e9 a1 9b f7 09 a5 72 bc bd b4 04 eb 26 c8 bf 5c 75 d2 cc 2d a9 cd 34 a5 8e 5c b4 0c 54 65 5f 25 ba ac 97 54 ba db 93 28 51 d9 1a a1 e4 8d 39 1c 22 3a 0a 62 ee fe 2f a9 8b a8 f6 3e 49 a7 99 d8 2a 91 62 02 24 34 01 8e b7 8b f3 a5 7f 9f 14 b1 e4 6e f9 7d c4 22 9a ee f3 a1 fe 14 7e 0b 7a 0e 11 74 8b 18 ec b6 2d 83 c2 1f 5b cf b1 49 85 cd 62 3e 65 d2 17 ea b6 bf c6 16 06 41 48 20 0f 70 58 f1 80 2f ac 5d 8e ae 51 48 a4 af 74 a9 8d 49 06 89 91 81 a2 5b e1 c0 46 ca 15 6f 3f 6c e5 3d 3c e4 3d 94 4e b5 9c 65 c1 6d 96 fa 06 cb 86 32 9e c2 12 f3 43 c1 d0 ec 66 61 80 77 f1 25 1b c3 af 98 24 e6 77 82 2e a8 03 79 0f a7 7b 40 03 60 e7 38 37 83 76 9a 16 fe d9 ca cd 8c 1a 69 37 9e 61 72 Data Ascii: 7\o/{YM:rKr&\u-4\Te_%T(Q9":b/>I*b$4n}"~zt-[Ib>eAH pX/]QHtI[Fo?l=<=Nem2Cfaw%$w.y{@`87vi7ar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49881	151.101.1.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:16 UTC	666	OUT	POST /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive Content-Length: 1896 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure.actblue.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:16 UTC	1896	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 6c 65 76 65 6c 22 3a 22 69 6e 66 6f 22 2c 22 65 76 65 6e 74 22 3a 22 70 61 79 70 61 6c 5f 6a 73 5f 73 64 6b 5f 76 35 5f 69 6e 69 74 22 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 75 69 64 41 74 74 72 69 62 75 74 65 22 3a 22 6d 69 73 73 69 6e 67 22 2c 22 6c 6f 61 64 54 69 6d 65 22 3a 31 34 39 35 2c 22 63 61 63 68 65 54 79 70 65 22 3a 22 73 64 6b 5f 63 6c 69 65 6e 74 5f 63 61 63 68 65 5f 6d 69 73 73 22 2c 22 6a 73 53 64 6b 4c 69 62 72 61 72 79 22 3a 22 6e 6f 6e 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 53 6f 75 72 63 65 22 3a 22 6e 6f 6e 65 22 2c 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 31 37 Data Ascii: {"events":[{"level":"info","event":"paypal_js_sdk_v5_init","payload":{"uidAttribute":"missing","loadTime":1495,"cacheType":"sdk_client_cache_miss","jsSdkLibrary":"none","locale":"en_US","integrationSource":"none","localStorageEnabled":true,"timestamp":"17
2024-07-03 07:23:16 UTC	1372	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1020 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://secure.actblue.com Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Etag: W/"3fc-X7YLK/sBLbDJirgBcnKRu43Y3/w" Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f4988871bd5d2 Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f4988871bd5d2-b4827e5001d0217c-01 X-Content-Type-Options: nosniff DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:16 GMT
2024-07-03 07:23:16 UTC	328	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 6a 79 6f 37 31 30 30 31 33 33 2d 49 41 44 2c 20 63 61 63 68 65 2d 65 77 72 31 38 31 33 31 2d 45 57 52 2c 20 63 61 63 68 65 2d 65 77 72 31 38 31 33 31 2d 45 57 52 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 33 39 37 2e 37 37 38 31 34 36 2c 56 53 30 2c 56 45 31 31 30 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kjyo7100133-IAD, cache-ewr18131-EWR, cache-ewr18131-EWRX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991397.778146,VS0,VE110Vary: Accept-
2024-07-03 07:23:16 UTC	1020	IN	Data Raw: 7b 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 73 22 2c 22 72 65 73 6f 75 72 63 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 7d 2c 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 64 61 74 65 22 3a 22 4a 75 6c 20 33 2c 20 32 30 32 34 Data Ascii: {"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/js","cssBaseUrl":"https://www.paypalobjects.com/css","templateBaseUrl":"https://www.paypalobjects.com/templates","resourceBaseUrl":"https://www.paypalobjects.com"},"pageInfo":{"date":"Jul 3, 2024

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49880	172.64.151.101	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:16 UTC	527	OUT	GET /rum?cm_dsp_id=39&external_user_id=fbcaf041-6718-4afd-b973-8f173c1ee610&expiration=1722583394&gdpr=0&gdpr_consent=&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZoT8Y9HM6tsAAEN5AM0.mQAA; CMPS=3857; CMPRO=3857
2024-07-03 07:23:16 UTC	984	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 89d521160f4f19b2-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZoT8Y9HM6tsAAEN5AM0.mQAA; Path=/; Domain=casalemedia.com; Expires=Thu, 03 Jul 2025 07:23:16 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=3857; Path=/; Domain=casalemedia.com; Expires=Tue, 01 Oct 2024 07:23:16 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rg4lourrKm6HpXXO0IywtaQw5xWIZN%2BEhRkZvUUC2Cb3YI9EzQjOgxZ1%2FCH6cfRxp4wiuSbhK%2B3cE7orSN3v2oob8CrAQSEciYznZ1SJv749sAb6LCk8mSxJKoE44gOpsrypIEwXhRdxhw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-03 07:23:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49875	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:16 UTC	1644	OUT	POST /trackables HTTP/1.1 Host: secure.actblue.com Connection: keep-alive Content-Length: 90 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=utf-8 Accept: / Origin: https://secure.actblue.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
2024-07-03 07:23:16 UTC	90	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 22 6c 61 6e 64 65 64 5f 6c 69 73 74 5f 31 31 31 37 32 33 36 5f 72 65 66 63 6f 64 65 5f 74 61 5f 63 32 22 7d 2c 7b 22 65 76 65 6e 74 22 3a 22 6c 61 6e 64 65 64 5f 6c 69 73 74 5f 31 31 31 37 32 33 36 22 7d 5d 7d Data Ascii: {"events":[{"event":"landed_list_1117236_refcode_ta_c2"},{"event":"landed_list_1117236"}]}
2024-07-03 07:23:17 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Content-Type: text/html Cache-Control: private, no-store Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; domain=secure.actblue.com; path=/; expires=Wed, 03 Jul 2024 08:23:16 GMT; secure; HttpOnly; SameSite=Lax X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:16 GMT Via: 1.1 varnish Vary: Accept-Encoding X-Start: 2024-07-03 07:23:16.837 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49876	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:16 UTC	1623	OUT	GET /cf/static/actblue/favicon.ico HTTP/1.1 Host: secure.actblue.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/donate/p2p-240702-jbti?refcode=ta_c2&refcode2w=5wKgd5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226
2024-07-03 07:23:16 UTC	976	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2734 Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1719959007&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=3EuruA22wW1gCBgTk2QHCsSubGZ9TAlxrZX%2B52AcKCs%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1719959007&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=3EuruA22wW1gCBgTk2QHCsSubGZ9TAlxrZX%2B52AcKCs%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: max-age=31557600, must-revalidate Content-Type: image/x-icon Etag: W/"aae-1906f948dc8" Last-Modified: Mon, 01 Jul 2024 18:35:25 GMT Via: 1.1 vegur, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 32390 Date: Wed, 03 Jul 2024 07:23:16 GMT Vary: Accept-Encoding Set-Cookie: skip_prefill_check=true; Secure X-Start: 2024-07-03 07:23:16.860 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:16 UTC	1379	IN	Data Raw: 00 00 01 00 03 00 10 10 10 00 01 00 04 00 28 01 00 00 36 00 00 00 20 20 10 00 01 00 04 00 e8 02 00 00 5e 01 00 00 30 30 10 00 01 00 04 00 68 06 00 00 46 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 10 00 00 00 de 9c 00 00 df a1 0d 00 e0 a4 17 00 e4 b0 34 00 e8 ba 4f 00 ea c0 5e 00 eb c6 6d 00 f0 d3 90 00 f3 dd a9 00 f5 e3 b8 00 f9 ee d5 00 fd fb f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 00 01 64 46 30 00 00 4b 40 04 b6 bb b5 00 00 1b bb bb a6 00 b8 00 00 06 b7 8b 6b 79 b4 00 00 02 b7 8b 7b 8a a1 00 00 00 8b b7 9a 04 b4 00 00 00 3b b2 9b bb b1 00 00 00 04 40 46 65 20 00 00 Data Ascii: (6 ^00hF( 4O^mEdF0K@ky{;@Fe
2024-07-03 07:23:16 UTC	1355	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 34 43 00 00 00 00 00 00 34 44 30 34 44 33 00 00 00 00 00 00 00 00 00 09 aa aa 00 00 00 00 00 03 aa aa 71 9a aa aa a8 40 00 00 00 00 00 00 00 06 aa aa 50 00 00 00 00 07 aa aa 34 aa aa aa aa a6 00 00 00 00 00 00 00 01 aa aa 90 00 00 00 00 1a aa a9 09 aa aa aa aa aa 40 00 00 00 00 00 00 00 6a aa a4 00 00 00 00 6a aa a4 38 67 67 9a aa aa 90 00 00 00 00 00 00 00 Data Ascii: 4C4D04D3q@P4@jj8gg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49874	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:16 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=YI23M-3t5tMOLyEKZZ93EAlRPv2i2xfsKTB0ai6aSGbsk7py4HKSvtrPPODbPQFsUG_YbK_YSJbr_NF3g-1TCgDVfYZoycUsvnazQF8mRw497c9jZjoxJQPrjI06BF-dvFgNGlq3wpuvbZbk6ClpgKbZhDFGo-hXM-ErbKrqUTg
2024-07-03 07:23:17 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:16 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:17 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:17 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49878	173.194.76.92	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:16 UTC	357	OUT	GET /gp/p/web_manifest.json HTTP/1.1 Host: pay.google.com Connection: keep-alive Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:17 UTC	2377	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jul 2024 07:23:17 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-HhE2X2fYKQ1SHy_HyTQeew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/InstantbuyFrontendBuyflowHttp/cspreport/allowlist reporting-endpoints: default="/gp/p/_/InstantbuyFrontendBuyflowHttp/web-reports?context=eJzjStDikmLw1ZBiWFYqxVBRK8WwZKYUg0LYTibPmptMnXtuMkl8fcmkAcSHo6ezOqXPYA0CYp_6GawxQNx68xzrVCCeG3CeNTzzPGvSv_OsRUD8keMi65KIi6yHEi-yCnFzPP0xeQubwIn1l0WUtJPyC-Mz84pLEvNKkkor04ry80pS81KKU4vKUovijQyMTAzMDYz0DEziCwwAF-c8Vw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=515=d2KufL0JPhQjmVrpBxJyKSzi0S3yRtGDFLCfCTSIqHFqSpuCrfkX9T6m86JohVb8mCOEBAU327knWqnpBjor5yMEuwhZ-nYL6SjjwCJcxvyOB27NpM4GnlpLV6OsVy6s7qfGExHFcPxNPcFR_MmZMZQ-ppBUTiKcmhlK7TTKU6Y; expires=Thu, 02-Jan-2025 07:23:17 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:17 UTC	244	IN	Data Raw: 65 65 0d 0a 0a 7b 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 47 6f 6f 67 6c 65 20 50 61 79 22 2c 0a 20 20 22 6e 61 6d 65 22 3a 20 22 47 6f 6f 67 6c 65 20 50 61 79 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 7b 0a 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 69 6e 73 74 61 6e 74 62 75 79 2f 73 76 67 2f 6c 69 67 68 74 5f 73 71 75 61 72 65 5f 67 70 61 79 2e 73 76 67 22 0a 20 20 7d 5d 2c 0a 20 20 22 73 65 72 76 69 63 65 77 6f 72 6b 65 72 22 3a 20 7b 0a 20 20 20 20 22 73 72 63 22 3a 20 22 2f 67 70 2f 70 2f 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 2e 6a 73 22 2c 0a 20 20 20 20 22 75 73 65 5f 63 61 63 68 65 22 3a 20 74 72 75 65 0a 20 20 7d 0a 7d 0a 0d 0a Data Ascii: ee{ "short_name": "Google Pay", "name": "Google Pay", "icons": [{ "src": "https://www.gstatic.com/instantbuy/svg/light_square_gpay.svg" }], "serviceworker": { "src": "/gp/p/service_worker.js", "use_cache": true }}
2024-07-03 07:23:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49883	151.101.129.21	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:17 UTC	846	OUT	GET /xoplatform/logger/api/logger?disableSetCookie=true HTTP/1.1 Host: www.paypal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: l7_az=dcg02.phx; ts_c=vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf; enforce_policy=ccpa; LANG=en_US%3BUS; x-pp-s=eyJ0IjoiMTcxOTk5MTM5MzY2MCIsImwiOiIwIiwibSI6IjAifQ; tsrce=mppnodeweb; nsid=s%3A185Y2Rb5NCQLEuqVpkaahycfE_wfsvCA.M%2BL60kvt6VQUFd%2FhfdgZInAaaoLMOuuwA0ebAEVFNHw; ts=vreXpYrS%3D1814599393%26vteXpYrS%3D1719993193%26vr%3D7779d98d1900aa3084c6e45afd4ce1d0%26vt%3D7779d98d1900aa3084c6e45afd4ce1cf%26vtyp%3Dnew
2024-07-03 07:23:17 UTC	1347	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1015 Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Type: application/json; charset=utf-8 Etag: W/"3f7-F2AqhxOxGx1E15xUCXju3dvW7Iw" Origin-Trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Paypal-Debug-Id: f4988878cc102 Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") Traceparent: 00-0000000000000000000f4988878cc102-71a546ba20aa4999-01 X-Content-Type-Options: nosniff DC: ccg11-origin-www-1.paypal.com Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish, 1.1 varnish Date: Wed, 03 Jul 2024 07:23:17 GMT
2024-07-03 07:23:17 UTC	342	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 31 31 37 2d 49 41 44 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 36 35 2d 4e 59 43 2c 20 63 61 63 68 65 2d 6e 79 63 2d 6b 74 65 62 31 38 39 30 30 36 35 2d 4e 59 43 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 30 2c 20 30 2c 20 30 0d 0a 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 33 39 37 2e 34 36 34 34 35 32 2c 56 53 30 2c 56 45 31 30 38 0d Data Ascii: Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-iad-kcgs7200117-IAD, cache-nyc-kteb1890065-NYC, cache-nyc-kteb1890065-NYCX-Cache: MISS, MISS, MISSX-Cache-Hits: 0, 0, 0X-Timer: S1719991397.464452,VS0,VE108
2024-07-03 07:23:17 UTC	1015	IN	Data Raw: 7b 22 73 79 73 22 3a 7b 22 6c 69 6e 6b 73 22 3a 7b 22 6a 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 6a 73 22 2c 22 63 73 73 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 63 73 73 22 2c 22 74 65 6d 70 6c 61 74 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 73 22 2c 22 72 65 73 6f 75 72 63 65 42 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 61 79 70 61 6c 6f 62 6a 65 63 74 73 2e 63 6f 6d 22 7d 2c 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 64 61 74 65 22 3a 22 4a 75 6c 20 33 2c 20 32 30 32 34 Data Ascii: {"sys":{"links":{"jsBaseUrl":"https://www.paypalobjects.com/js","cssBaseUrl":"https://www.paypalobjects.com/css","templateBaseUrl":"https://www.paypalobjects.com/templates","resourceBaseUrl":"https://www.paypalobjects.com"},"pageInfo":{"date":"Jul 3, 2024

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49884	34.102.232.42	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:17 UTC	1379	OUT	GET /images/151717.gif?bk=19482a20cc&tm=84&r=308450253&v=107&cs=UTF-8&h=secure.actblue.com&l=en-US&S=9310b542c4dd2dbd7e7d9c462fc9fc73&uu=cfa36a9dc525de60da3844cb1fe06c2&t=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&u=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Win32&to=240&d=60&ce=true&tp=0&ol=true&pr=Gecko&ps=20030107&vd=Google%20Inc.&vs=&hc=4&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=864980724ce0e4610faf43e7780d8361&z=z HTTP/1.1 Host: hexagon-analytics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:17 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:17 GMT Content-Type: image/gif x-content-type-options: nosniff cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT x-envoy-upstream-service-time: 2 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:17 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49882	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:17 UTC	1396	OUT	GET /cf/static/actblue/favicon.ico HTTP/1.1 Host: secure.actblue.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: skip_prefill_check=true; mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226; __ssid=cfa36a9dc525de60da3844cb1fe06c2
2024-07-03 07:23:17 UTC	976	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2734 Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1719959007&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=3EuruA22wW1gCBgTk2QHCsSubGZ9TAlxrZX%2B52AcKCs%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1719959007&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=3EuruA22wW1gCBgTk2QHCsSubGZ9TAlxrZX%2B52AcKCs%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: max-age=31557600, must-revalidate Content-Type: image/x-icon Etag: W/"aae-1906f948dc8" Last-Modified: Mon, 01 Jul 2024 18:35:25 GMT Via: 1.1 vegur, 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 32390 Date: Wed, 03 Jul 2024 07:23:17 GMT Vary: Accept-Encoding Set-Cookie: skip_prefill_check=true; Secure X-Start: 2024-07-03 07:23:17.538 Strict-Transport-Security: max-age=31536000
2024-07-03 07:23:17 UTC	1379	IN	Data Raw: 00 00 01 00 03 00 10 10 10 00 01 00 04 00 28 01 00 00 36 00 00 00 20 20 10 00 01 00 04 00 e8 02 00 00 5e 01 00 00 30 30 10 00 01 00 04 00 68 06 00 00 46 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 10 00 00 00 de 9c 00 00 df a1 0d 00 e0 a4 17 00 e4 b0 34 00 e8 ba 4f 00 ea c0 5e 00 eb c6 6d 00 f0 d3 90 00 f3 dd a9 00 f5 e3 b8 00 f9 ee d5 00 fd fb f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 00 01 64 46 30 00 00 4b 40 04 b6 bb b5 00 00 1b bb bb a6 00 b8 00 00 06 b7 8b 6b 79 b4 00 00 02 b7 8b 7b 8a a1 00 00 00 8b b7 9a 04 b4 00 00 00 3b b2 9b bb b1 00 00 00 04 40 46 65 20 00 00 Data Ascii: (6 ^00hF( 4O^mEdF0K@ky{;@Fe
2024-07-03 07:23:17 UTC	1355	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 34 43 00 00 00 00 00 00 34 44 30 34 44 33 00 00 00 00 00 00 00 00 00 09 aa aa 00 00 00 00 00 03 aa aa 71 9a aa aa a8 40 00 00 00 00 00 00 00 06 aa aa 50 00 00 00 00 07 aa aa 34 aa aa aa aa a6 00 00 00 00 00 00 00 01 aa aa 90 00 00 00 00 1a aa a9 09 aa aa aa aa aa 40 00 00 00 00 00 00 00 6a aa a4 00 00 00 00 6a aa a4 38 67 67 9a aa aa 90 00 00 00 00 00 00 00 Data Ascii: 4C4D04D3q@P4@jj8gg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49885	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:17 UTC	1352	OUT	GET /trackables HTTP/1.1 Host: secure.actblue.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _session_id=d6f76c842fd199b32d6853afb5b4f9bd; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; _dd_s=logs=1&id=d0a78128-6eb0-4126-af4b-5a6a7468e3cf&created=1719991384226&expire=1719992284226; __ssid=cfa36a9dc525de60da3844cb1fe06c2
2024-07-03 07:23:18 UTC	691	IN	HTTP/1.1 404 Not Found Connection: close Content-Type: text/html; charset=utf-8 Cache-Control: no-store Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: _session_id=d6f76c842fd199b32d6853afb5b4f9bd; domain=secure.actblue.com; path=/; expires=Wed, 03 Jul 2024 08:23:18 GMT; secure; HttpOnly; SameSite=Lax X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:18 GMT Via: 1.1 varnish Vary: Accept, Accept-Encoding X-Start: 2024-07-03 07:23:17.984 Strict-Transport-Security: max-age=31536000 transfer-encoding: chunked
2024-07-03 07:23:18 UTC	5	IN	Data Raw: 31 33 66 0d 0a Data Ascii: 13f
2024-07-03 07:23:18 UTC	319	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 27 6e 61 72 72 6f 77 20 67 61 70 32 27 3e 0a 0a 20 20 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 20 28 34 30 34 20 45 72 72 6f 72 29 3c 2f 68 32 3e 0a 0a 20 20 3c 70 3e 0a 20 20 20 20 59 6f 75 27 76 65 20 61 73 6b 65 64 20 66 6f 72 20 61 20 70 61 67 65 20 74 68 61 74 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 6f 6e 20 6f 75 72 20 73 69 74 65 2e 0a 20 20 3c 2f 70 3e 0a 0a 20 20 3c 70 3e 0a 20 20 20 20 49 66 20 79 6f 75 20 73 74 69 6c 6c 20 63 61 6e 27 74 20 66 69 6e 64 20 77 68 61 74 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 2c 20 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 63 74 62 6c 75 65 2e 63 6f 6d 2f 63 6f 6e 74 61 63 74 22 3e 70 6c 65 61 73 65 20 6c 65 74 20 Data Ascii: <div class='narrow gap2'> <h2>Not Found (404 Error)</h2> <p> You've asked for a page that doesn't exist on our site. </p> <p> If you still can't find what you're looking for, <a href="https://secure.actblue.com/contact">please let
2024-07-03 07:23:18 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49886	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:17 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=K_f21c1Ai1fs6JFqjyJiwJfrLTjfDBB8GJJ04OHMiJSHk5uSyT2AEAYCiE-UTN_ScacqGQSlXKL7ZdK1hSIyyUCOYXaIiX5-bg8qFKI64u8mrxnHJyYuzhjNggfdKaqQip7D22orDT9jtl4B6iE773MiKwrIW5n1KniEjtCRHk0
2024-07-03 07:23:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:18 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:18 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49889	34.102.232.42	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:18 UTC	1141	OUT	GET /images/151717.gif?bk=19482a20cc&tm=84&r=308450253&v=107&cs=UTF-8&h=secure.actblue.com&l=en-US&S=9310b542c4dd2dbd7e7d9c462fc9fc73&uu=cfa36a9dc525de60da3844cb1fe06c2&t=Biden%20Victory%20Fund%20%E2%80%94%20Donate%20via%20ActBlue&u=https%3A%2F%2Fsecure.actblue.com%2Fdonate%2Fp2p-240702-jbti%3Frefcode%3Dta_c2%26refcode2w%3D5wKgd5&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&nm=2&mh=63196a00446a1e285d1992cfe444aa55&np=5&ph=332b72bdb211e34e6e3c24f88d7c393b&sh=1024&sw=1280&cd=24&p=Win32&to=240&d=60&ce=true&tp=0&ol=true&pr=Gecko&ps=20030107&vd=Google%20Inc.&vs=&hc=4&je=false&ss=true&ls=true&in=true&db=false&tl=false&tr=false&ts=false&tb=false&ab=false&cf=864980724ce0e4610faf43e7780d8361&z=z HTTP/1.1 Host: hexagon-analytics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:18 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:18 GMT Content-Type: image/gif x-content-type-options: nosniff cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT x-envoy-upstream-service-time: 1 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-03 07:23:18 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49890	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:18 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=j685UFCMd2v4TnMT2gnItYTtBea2XHBVn0UIzOH3FmwvHOYAKM8j1sn-0xbND9mU4LLHZH9DapbnF23I_jwXg_Lj5lRuVSeqV8PhhrP8InYOuimhWdoC4IlhTvVr_LtUOEk8r15epdKLDRRQQjkFgd-YaQcjOG4yL32sAi5yHbs
2024-07-03 07:23:19 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:19 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:19 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:19 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49893	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:19 UTC	1518	OUT	POST /track/?verbose=1&ip=1&_=1719991398644 HTTP/1.1 Host: proxy-service.actblue.com Connection: keep-alive Content-Length: 6771 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://secure.actblue.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2
2024-07-03 07:23:19 UTC	6771	OUT	Data Raw: 64 61 74 61 3d 57 77 6f 67 49 43 41 67 65 79 4a 6c 64 6d 56 75 64 43 49 36 49 43 4a 79 5a 57 46 6a 61 47 56 6b 49 47 4e 76 62 6e 52 79 61 57 4a 31 64 47 6c 76 62 69 42 6d 62 33 4a 74 49 69 77 69 63 48 4a 76 63 47 56 79 64 47 6c 6c 63 79 49 36 49 48 73 69 4a 47 39 7a 49 6a 6f 67 49 6c 64 70 62 6d 52 76 64 33 4d 69 4c 43 49 6b 59 6e 4a 76 64 33 4e 6c 63 69 49 36 49 43 4a 44 61 48 4a 76 62 57 55 69 4c 43 49 6b 59 33 56 79 63 6d 56 75 64 46 39 31 63 6d 77 69 4f 69 41 69 61 48 52 30 63 48 4d 36 4c 79 39 7a 5a 57 4e 31 63 6d 55 75 59 57 4e 30 59 6d 78 31 5a 53 35 6a 62 32 30 76 5a 47 39 75 59 58 52 6c 4c 33 41 79 63 43 30 79 4e 44 41 33 4d 44 49 74 61 6d 4a 30 61 54 39 79 5a 57 5a 6a 62 32 52 6c 50 58 52 68 58 32 4d 79 4a 6e 4a 6c 5a 6d 4e 76 5a 47 55 79 64 7a Data Ascii: data=WwogICAgeyJldmVudCI6ICJyZWFjaGVkIGNvbnRyaWJ1dGlvbiBmb3JtIiwicHJvcGVydGllcyI6IHsiJG9zIjogIldpbmRvd3MiLCIkYnJvd3NlciI6ICJDaHJvbWUiLCIkY3VycmVudF91cmwiOiAiaHR0cHM6Ly9zZWN1cmUuYWN0Ymx1ZS5jb20vZG9uYXRlL3AycC0yNDA3MDItamJ0aT9yZWZjb2RlPXRhX2MyJnJlZmNvZGUydz
2024-07-03 07:23:19 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://secure.actblue.com Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Via: 1.1 google, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:19 GMT
2024-07-03 07:23:19 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49892	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:19 UTC	675	OUT	GET /act/?permalink=update-email-preferences HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	724	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-hacker: If you're reading this, you should visit wpvip.com/careers and apply to join the fun, mention this header. X-Powered-By: WordPress VIP <https://wpvip.com> Host-Header: a9130478a60e5f9135f765b23f26593b Link: <https://democrats.org/wp-json/>; rel="https://api.w.org/" Link: <https://democrats.org/wp-json/wp/v2/pages/1006766>; rel="alternate"; type="application/json" Link: <https://democrats.org/?p=1006766>; rel=shortlink x-rq: jfk1 96 184 443 cache-control: max-age=300, must-revalidate accept-ranges: bytes x-cache: MISS
2024-07-03 07:23:20 UTC	645	IN	Data Raw: 31 64 38 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 Data Ascii: 1d86<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head> <meta name='robots' content='index, follow, max-image-preview:la
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 66 65 72 65 6e 63 65 20 66 6f 72 6d 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 75 62 6d 69 74 20 74 68 65 20 66 6f 72 6d 20 6f 6e 20 74 68 69 73 20 70 61 67 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 44 4e 43 20 65 6d 61 69 6c 20 70 72 65 66 65 72 65 6e 63 65 73 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 61 63 74 69 6f 6e 6e 65 74 77 6f 72 6b 2e 6f 72 67 2f 66 6f 72 6d 73 2f 75 70 64 61 74 65 2d 65 6d 61 69 6c 2d 70 72 65 66 65 72 65 6e 63 65 73 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 Data Ascii: ference form" /><meta property="og:description" content="Submit the form on this page to update your DNC email preferences." /><meta property="og:url" content="https://actionnetwork.org/forms/update-email-preferences" /><meta property="og:site_name"
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 23 77 65 62 73 69 74 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 22 2c 22 6e 61 6d 65 22 3a 22 44 65 6d 6f 63 72 61 74 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 3f 73 3d 7b 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e Data Ascii: @type":"WebSite","@id":"https://democrats.org/#website","url":"https://democrats.org/","name":"Democrats","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://democrats.org/?s={search_term_strin
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 6a 65 74 70 61 63 6b 2d 73 68 61 72 69 6e 67 2d 62 75 74 74 6f 6e 73 5f 5f 73 65 72 76 69 63 65 73 2d 6c 69 73 74 2e 68 61 73 2d 6c 61 72 67 65 2d 69 63 6f 6e 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 2e 6a 65 74 70 61 63 6b 2d 73 68 61 72 69 6e 67 2d 62 75 74 74 6f 6e 73 5f 5f 73 65 72 76 69 63 65 73 2d 6c 69 73 74 2e 68 61 73 2d 68 75 67 65 2d 69 63 6f 6e 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2e 6a 65 74 70 61 63 6b 2d 73 68 61 72 69 6e 67 2d 62 75 74 74 6f 6e 73 5f 5f 73 65 72 76 69 63 65 73 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 65 64 69 74 6f 72 2d Data Ascii: -size{font-size:16px}.jetpack-sharing-buttons__services-list.has-large-icon-size{font-size:24px}.jetpack-sharing-buttons__services-list.has-huge-icon-size{font-size:36px}@media print{.jetpack-sharing-buttons__services-list{display:none!important}}.editor-
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 36 2c 31 34 37 2c 32 32 37 2c 31 29 20 30 25 2c 72 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d Data Ascii: id-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 2c 33 2c 31 32 39 29 20 30 25 2c 72 67 62 28 34 30 2c 31 31 36 2c 32 35 32 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 3a 20 31 33 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 Data Ascii: 113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-la
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 0d 0a 34 36 66 30 0d 0a 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 Data Ascii: r(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{colo46f0r: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--c
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d Data Ascii: k) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6f 72 61 6e 67 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 Data Ascii: orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color:
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 2d 67 72 61 64 Data Ascii: ient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-grad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49894	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:19 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
2024-07-03 07:23:20 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:20 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:20 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49891	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	617	OUT	GET /wp-admin/admin-ajax.php?action=frmpro_css&ver=6171659 HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/act/?permalink=update-email-preferences Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	439	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/css;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Robots-Tag: noindex X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN x-rq: jfk1 96 185 443 accept-ranges: bytes cache-control: no-cache, must-revalidate, max-age=0, no-store x-cache: BYPASS
2024-07-03 07:23:20 UTC	930	IN	Data Raw: 65 34 66 0d 0a 2f 2a 20 57 41 52 4e 49 4e 47 3a 20 41 6e 79 20 63 68 61 6e 67 65 73 20 6d 61 64 65 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 77 69 6c 6c 20 62 65 20 6c 6f 73 74 20 77 68 65 6e 20 79 6f 75 72 20 46 6f 72 6d 69 64 61 62 6c 65 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 75 70 64 61 74 65 64 20 2a 2f 0a 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 7b 2d 2d 66 6f 72 6d 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 66 6f 72 6d 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 2d 2d 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 2d 2d 66 69 65 6c 64 73 65 74 3a 30 70 78 3b 2d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 2d 2d 66 69 65 6c 64 73 65 74 2d 70 61 64 64 69 6e 67 3a 30 20 30 20 31 35 70 78 20 30 3b 2d 2d 66 69 65 6c 64 73 65 74 2d 62 Data Ascii: e4f/* WARNING: Any changes made to this file will be lost when your Formidable settings are updated */.with_frm_style{--form-width:100%;--form-align:left;--direction:ltr;--fieldset:0px;--fieldset-color:#000000;--fieldset-padding:0 0 15px 0;--fieldset-b
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 65 6c 64 2d 70 61 64 3a 36 70 78 20 31 30 70 78 3b 2d 2d 66 69 65 6c 64 2d 6d 61 72 67 69 6e 3a 32 30 70 78 3b 2d 2d 66 69 65 6c 64 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 2d 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 42 46 43 33 43 38 3b 2d 2d 66 69 65 6c 64 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 2d 2d 66 69 65 6c 64 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 2d 2d 62 67 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 2d 2d 62 67 2d 63 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 23 66 66 66 66 66 66 3b 2d 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 23 36 36 61 66 65 39 3b 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 65 72 72 6f 72 3a 23 34 34 34 34 34 Data Ascii: eld-pad:6px 10px;--field-margin:20px;--field-weight:normal;--text-color:#555555;--border-color:#BFC3C8;--field-border-width:1px;--field-border-style:solid;--bg-color:#ffffff;--bg-color-active:#ffffff;--border-color-active:#66afe9;--text-color-error:#44444
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 2d 2d 73 75 62 6d 69 74 2d 61 63 74 69 76 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 2d 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 2d 65 72 72 6f 72 2d 62 67 3a 23 46 32 44 45 44 45 3b 2d 2d 65 72 72 6f 72 2d 62 6f 72 64 65 72 3a 23 45 42 43 43 44 31 3b 2d 2d 65 72 72 6f 72 2d 74 65 78 74 3a 23 42 39 34 41 34 38 3b 2d 2d 65 72 72 6f 72 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 2d 2d 73 75 63 63 65 73 73 2d 62 67 2d 63 6f 6c 6f 72 3a 23 44 46 46 30 44 38 3b 2d 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 44 36 45 39 43 36 3b 2d 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 23 34 36 38 38 34 37 3b 2d 2d 73 75 63 63 65 73 73 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b Data Ascii: --submit-active-border-color:#cccccc;--border-radius:4px;--error-bg:#F2DEDE;--error-border:#EBCCD1;--error-text:#B94A48;--error-font-size:14px;--success-bg-color:#DFF0D8;--success-border-color:#D6E9C6;--success-text-color:#468847;--success-font-size:14px;
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 0d 0a 34 64 32 33 0d 0a 74 6f 6d 3a 76 61 72 28 2d 2d 66 6f 72 6d 2d 64 65 73 63 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 29 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 66 6f 72 6d 2d 64 65 73 63 2d 70 61 64 64 69 6e 67 29 3b 7d 66 6f 72 6d 20 2e 66 72 6d 5f 5f 36 36 36 62 30 39 66 64 37 39 66 34 33 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 20 30 3b 68 65 69 67 68 74 3a 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 66 69 65 6c 64 73 65 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 66 69 65 6c 64 73 65 74 20 66 69 65 6c 64 73 65 Data Ascii: 4d23tom:var(--form-desc-margin-bottom);padding:0;padding:var(--form-desc-padding);}form .frm__666b09fd79f43 {overflow: hidden;width: 0;height: 0;position: absolute;}.with_frm_style fieldset{min-width:0;display: block; }.with_frm_style fieldset fieldse
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 69 65 6c 64 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 69 65 6c 64 2d 77 65 69 67 68 74 29 3b 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 72 65 71 75 69 72 65 64 7b 63 6f 6c 6f 72 3a 23 42 39 34 41 34 38 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 71 75 69 72 65 64 2d 63 6f 6c 6f 72 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 72 65 71 75 69 72 65 64 2d 77 65 69 67 68 74 29 3b 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 77 69 74 68 5f 66 72 6d 5f 73 74 Data Ascii: font-size:var(--field-font-size);font-weight:normal;font-weight:var(--field-weight);}.with_frm_style .frm_required{color:#B94A48;color:var(--required-color);font-weight:bold;font-weight:var(--required-weight);}.with_frm_style input[type=text],.with_frm_st
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 73 73 2d 6d 61 69 6e 20 7b 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 67 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 42 46 43 33 43 38 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 69 65 6c 64 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 76 61 72 28 2d 2d 66 69 Data Ascii: ss-main {color:#555555;color:var(--text-color);background-color:#ffffff;background-color:var(--bg-color);border-color:#BFC3C8;border-color:var(--border-color);border-width:1px;border-width:var(--field-border-width);border-style:solid;border-style:var(--fi
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 33 32 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 69 65 6c 64 2d 68 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 3d 6d 75 6c 74 69 70 6c 65 5d 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 7d 2e 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 2e 66 72 6d 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 66 6f 63 75 73 2c 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e Data Ascii: eight:32px;min-height:var(--field-height);line-height:1.3;}.with_frm_style select[multiple=multiple]{height:auto;}.input[type=file].frm_transparent:focus,.with_frm_style input[type=file]{background-color:transparent;border:none;outline:none;box-shadow:non
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 63 6f 6c 6f 72 3a 23 33 66 34 62 35 62 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6c 61 62 65 6c 2d 63 6f 6c 6f 72 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 77 65 69 67 68 74 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 76 61 72 28 2d 2d 61 6c 69 67 6e 29 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 33 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 6c 61 62 65 6c 2d 70 61 64 64 69 6e 67 29 3b 6d 61 72 67 69 6e 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 Data Ascii: size:15px;font-size:var(--font-size);color:#3f4b5b;color:var(--label-color);font-weight:normal;font-weight:var(--weight);text-align:left;text-align:var(--align);padding:0 0 3px 0;padding:var(--label-padding);margin:0;width:auto;display:block;}.with_frm_st
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 74 65 78 74 61 72 65 61 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 33 73 20 65 61 73 65 2d 69 6e 3b 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 20 3e 20 69 6e 70 75 74 3a 2d 6d 73 2d 69 Data Ascii: display: block;}.with_frm_style .frm_inside_container > input::-moz-placeholder,.with_frm_style .frm_inside_container > textarea::-moz-placeholder {opacity: 0 !important;transition: opacity 0.3s ease-in;}.with_frm_style .frm_inside_container > input:-ms-i
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 61 62 65 6c 5f 66 6c 6f 61 74 5f 74 6f 70 20 3e 20 74 65 78 74 61 72 65 61 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 33 73 20 65 61 73 65 2d 69 6e 3b 7d 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 2e 66 72 6d 5f 6c 61 62 65 6c 5f 66 6c 6f 61 74 5f 74 6f 70 20 3e 20 69 6e 70 75 74 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 77 69 74 68 5f 66 72 6d 5f 73 74 79 6c 65 20 2e 66 72 6d 5f 69 6e 73 69 64 65 5f 63 6f 6e 74 61 69 6e 65 72 2e 66 72 6d 5f 6c 61 62 65 6c 5f 66 6c 6f 61 74 5f 74 6f 70 20 3e 20 74 65 78 74 61 72 Data Ascii: abel_float_top > textarea::-moz-placeholder {opacity: 1 !important;transition: opacity 0.3s ease-in;}.with_frm_style .frm_inside_container.frm_label_float_top > input:-ms-input-placeholder,.with_frm_style .frm_inside_container.frm_label_float_top > textar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49897	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	626	OUT	GET /wp-includes/css/dist/block-library/style.min.css?m=1719250562g HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/act/?permalink=update-email-preferences Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	323	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/css Content-Length: 113381 Connection: close Last-Modified: Mon, 24 Jun 2024 17:36:02 GMT Vary: Accept-Encoding ETag: "6679ae82-1bae5" x-rq: jfk1 96 184 443 cache-control: max-age=31536000 x-cache: HIT Accept-Ranges: bytes
2024-07-03 07:23:20 UTC	1046	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 77 69 64 74 68 2d 32 35 7b 77 69 64 74 68 3a 63 61 6c 63 28 32 35 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 62 6c 6f 63 6b 2d 67 61 70 2c 20 2e 35 65 6d 29 2a 2e 37 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 77 69 64 74 68 2d 35 30 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 Data Ascii: ize .wp-block-button__link{font-size:inherit}.wp-block-buttons>.wp-block-button.wp-block-button__width-25{width:calc(25% - var(--wp--style--block-gap, .5em)*.75)}.wp-block-buttons>.wp-block-button.wp-block-button__width-50{width:calc(50% - var(--wp--style
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 3a 77 68 65 72 65 28 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 2e 68 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 69 6e 69 74 69 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 Data Ascii: .has-background),.wp-block-button:where(.is-style-outline)>.wp-block-button__link:not(.has-background){background-color:initial;background-image:none}.wp-block-button .wp-block-button__link:where(.has-border-color){border-width:initial}.wp-block-button .w
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 6c 65 66 74 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 63 65 6e 74 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 63 65 6e 74 65 72 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 Data Ascii: ify-content:flex-start}.wp-block-buttons.is-content-justification-left.is-vertical{align-items:flex-start}.wp-block-buttons.is-content-justification-center{justify-content:center}.wp-block-buttons.is-content-justification-center.is-vertical{align-items:ce
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 36 34 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 29 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 29 20 74 68 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 61 62 6c 65 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 20 74 68 7b 63 6f 6c 6f 72 3a 69 6e Data Ascii: 64d}.wp-block-calendar table:where(:not(.has-text-color)) td,.wp-block-calendar table:where(:not(.has-text-color)) th{border-color:#ddd}.wp-block-calendar table.has-background th{background-color:inherit}.wp-block-calendar table.has-text-color th{color:in
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6d 6e 5b 73 74 79 6c 65 2a 3d 66 6c 65 78 2d 62 61 73 69 73 5d 7b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 7b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 5b 73 74 79 6c 65 Data Ascii: mn[style*=flex-basis]{flex-grow:0}}.wp-block-columns.is-not-stacked-on-mobile{flex-wrap:nowrap!important}.wp-block-columns.is-not-stacked-on-mobile>.wp-block-column{flex-basis:0;flex-grow:1}.wp-block-columns.is-not-stacked-on-mobile>.wp-block-column[style
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 68 69 6c 64 72 65 6e 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 20 2e 61 76 61 74 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 2e 35 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 32 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 65 Data Ascii: ock-post-comments .commentlist .children{list-style:none;margin:0;padding:0}.wp-block-post-comments .comment-author{line-height:1.5}.wp-block-post-comments .comment-author .avatar{border-radius:1.5em;display:block;float:left;height:2.5em;margin-right:.75e
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 2c 73 6d 61 6c 6c 65 72 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 72 65 70 6c 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 34 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 34 39 34 39 34 3b 66 6f 6e 74 2d 66 61 Data Ascii: {font-size:var(--wp--preset--font-size--medium,smaller);margin-left:.5em}.wp-block-post-comments .reply{font-size:.875em;margin-bottom:1.4em}.wp-block-post-comments input:not([type=submit]),.wp-block-post-comments textarea{border:1px solid #949494;font-fa
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 2d 74 65 6d 70 6c 61 74 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 2d 74 65 6d 70 6c 61 74 65 20 6c 69 7b 63 6c 65 61 72 3a Data Ascii: rrow:not(.is-arrow-chevron){transform:scaleX(1)}.wp-block-comments-pagination.aligncenter{justify-content:center}.wp-block-comment-template{box-sizing:border-box;list-style:none;margin-bottom:0;max-width:100%;padding:0}.wp-block-comment-template li{clear:
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 Data Ascii: block-cover .wp-block-cover__background,.wp-block-cover .wp-block-cover__gradient-background,.wp-block-cover-image .wp-block-cover__background,.wp-block-cover-image .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim:not(.has-bac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49898	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	687	OUT	GET /_static/??-eJzTLy/QzcxLzilNSS3WzyrWz01NyUxMzUnNTc0rQeEU5CRWphbp5qSmJyZX6uVm5uklFxfr6OPTDpRD5sM02efaGpobWhqZGpiaGQMARLwu4g== HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/act/?permalink=update-email-preferences Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	334	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/css;charset=utf-8 Content-Length: 15521 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 24 Jun 2024 17:36:03 GMT x-rq: jfk1 96 185 443 accept-ranges: bytes cache-control: max-age=31536000 x-cache: HIT Accept-Ranges: bytes
2024-07-03 07:23:20 UTC	1035	IN	Data Raw: 2e 6d 65 6a 73 2d 6f 66 66 73 63 72 65 65 6e 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c Data Ascii: .mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 73 63 72 65 65 6e 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 75 6c 6c 73 63 72 65 65 6e 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 75 6c 6c 73 63 72 65 65 6e 20 2e 6d 65 6a 73 2d 6d 65 64 69 61 65 6c 65 6d 65 6e 74 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 75 6c 6c 73 63 72 65 65 6e 20 76 69 64 65 6f 7b 68 65 69 67 68 74 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: screen{overflow:hidden!important}.mejs-container-fullscreen{bottom:0;left:0;overflow:hidden;position:fixed;right:0;top:0;z-index:1000}.mejs-container-fullscreen .mejs-mediaelement,.mejs-container-fullscreen video{height:100%!important;width:100%!important
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 63 6f 6e 74 72 6f 6c 73 2e 73 76 67 29 20 2d 31 36 30 70 78 20 2d 34 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 38 30 70 78 3b 77 69 64 74 68 3a 38 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 61 7b 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 7b 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 7b 62 6f Data Ascii: controls.svg) -160px -40px no-repeat;display:block;height:80px;width:80px;z-index:1}@-webkit-keyframes a{to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes a{to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.mejs-controls{bo
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 36 70 78 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 6d 65 6a 73 2d 70 6c 61 79 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 2e 6d 65 6a 73 2d 70 61 75 73 65 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 70 78 20 30 7d 2e 6d 65 6a 73 2d 72 65 70 6c 61 79 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 30 70 78 20 30 7d 2e 6d 65 6a 73 2d 74 Data Ascii: ff;font-size:11px;font-weight:700;height:24px;overflow:hidden;padding:16px 6px 0;text-align:center;width:auto}.mejs-play>button{background-position:0 0}.mejs-pause>button{background-position:-20px 0}.mejs-replay>button{background-position:-160px 0}.mejs-t
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 6f 76 65 72 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 6f 76 65 72 65 64 2e 6e 65 67 61 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 62 75 66 66 65 72 69 6e 67 2c 2e 6d 65 6a 73 2d 74 69 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 2d 74 Data Ascii: hsla(0,0%,100%,.3)}.mejs-time-current,.mejs-time-handle-content{background:hsla(0,0%,100%,.9)}.mejs-time-hovered{background:hsla(0,0%,100%,.5);z-index:10}.mejs-time-hovered.negative{background:rgba(0,0,0,.2)}.mejs-time-buffering,.mejs-time-current,.mejs-t
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6f 76 65 72 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 66 6c 6f 61 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 33 33 3b 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 31 31 31 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 37 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 Data Ascii: over .mejs-time-handle-content{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1)}.mejs-time-float{background:#eee;border:1px solid #333;bottom:100%;color:#111;display:none;height:17px;margin-bottom:9px;position:absolute;text-align:cente
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 32 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 34 70 78 20 34 70 78 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 74 6f 74 61 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f Data Ascii: nsform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%);width:25px;z-index:1}.mejs-volume-button:hover{border-radius:0 0 4px 4px}.mejs-volume-total{background:hsla(0,0%,100%,.5);height:100px;left:50%;margin:0;position:absolute;to
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 65 63 74 6f 72 2c 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 62 75 74 74 6f 6e 3e 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 73 65 6c 65 63 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 35 30 2c 35 30 2c 35 30 2c 2e 37 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 34 33 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 35 30 25 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 77 69 64 74 68 3a 38 36 70 78 7d 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 Data Ascii: ector,.mejs-chapters-button>.mejs-chapters-selector{background:rgba(50,50,50,.7);border:1px solid transparent;border-radius:0;bottom:100%;margin-right:-43px;overflow:hidden;padding:0;position:absolute;right:50%;visibility:visible;width:86px}.mejs-chapters
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 2d 6c 61 79 65 72 5b 6c 61 6e 67 3d 61 72 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 70 6f 73 69 74 69 6f 6e 7b 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 70 6f 73 69 74 69 6f 6e 2d 68 6f 76 65 72 7b 62 6f 74 74 6f 6d 3a 33 35 70 78 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 74 65 78 74 2c 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 74 65 78 74 20 2a 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 38 25 2c 2e 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 35 70 78 20 30 20 30 Data Ascii: ptions-layer[lang=ar]{font-size:20px;font-weight:400}.mejs-captions-position{bottom:15px;left:0;position:absolute;width:100%}.mejs-captions-position-hover{bottom:35px}.mejs-captions-text,.mejs-captions-text *{background:hsla(0,0%,8%,.5);box-shadow:5px 0 0
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 29 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 73 6c 69 64 65 72 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 73 6c 69 64 65 72 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 74 6f 74 61 6c 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 72 61 69 6c 20 73 70 61 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 6d 65 6a 73 2d 6f 76 65 72 6c 61 79 2d 6c 6f 61 64 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 Data Ascii: )}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-current,.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-total,.mejs-controls .mejs-time-rail span{border-radius:0}.mejs-overlay-loading{background:0 0}.mejs-cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49895	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	616	OUT	GET /wp-content/themes/bsdstarter/style.css?m=1717432320g HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/act/?permalink=update-email-preferences Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	323	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/css Content-Length: 163746 Connection: close Last-Modified: Mon, 03 Jun 2024 16:32:00 GMT Vary: Accept-Encoding ETag: "665df000-27fa2" cache-control: max-age=31536000 x-cache: HIT x-rq: jfk1 96 185 443 Accept-Ranges: bytes
2024-07-03 07:23:20 UTC	1046	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 42 53 44 20 57 6f 72 64 70 72 65 73 73 20 53 74 61 72 74 65 72 6b 69 74 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 75 65 73 74 61 74 65 64 69 67 69 74 61 6c 2e 63 6f 6d 0a 41 75 74 68 6f 72 3a 20 42 6c 75 65 20 53 74 61 74 65 20 44 69 67 69 74 61 6c 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6c 75 65 73 74 61 74 65 64 69 67 69 74 61 6c 2e 63 6f 6d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 75 73 74 6f 6d 20 74 68 65 6d 65 20 73 74 61 72 74 65 72 20 6b 69 74 0a 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 4e 43 6f 6c 72 6f 79 2d 42 6f 6c 64 3b 66 6f 6e 74 2d 77 Data Ascii: @charset "UTF-8";/!Theme Name: BSD Wordpress StarterkitTheme URI: http://www.bluestatedigital.comAuthor: Blue State DigitalAuthor URI: http://www.bluestatedigital.comDescription: Custom theme starter kit/@font-face{font-family:NNColroy-Bold;font-w
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6f 6c 72 6f 79 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 4e 43 6f 6c 72 6f 79 2d 4d 65 64 69 75 6d 49 74 61 6c 69 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 4e 4e 43 6f 6c 72 6f 79 2d 4d 65 64 69 75 6d 49 74 61 6c 69 63 2e 65 6f 74 29 2c 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 4e 4e 43 6f 6c 72 6f 79 2d 4d 65 64 69 75 6d 49 74 61 6c 69 63 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 Data Ascii: olroy-Medium.woff) format("woff")}@font-face{font-family:NNColroy-MediumItalic;font-style:italic;font-weight:500;src:url(assets/fonts/NNColroy-MediumItalic.eot),url(assets/fonts/NNColroy-MediumItalic.eot?#iefix) format("embedded-opentype"),url(assets/font
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 67 6f 74 68 61 6d 62 6f 6f 6b 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 74 68 61 6d 20 42 6f 6c 64 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 67 6f 74 68 61 6d 62 6f 6c 64 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 67 6f 74 68 61 6d 62 6f 6c 64 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 Data Ascii: ("woff2"),url(assets/fonts/gothambook-webfont.woff) format("woff")}@font-face{font-family:'Gotham Bold';font-style:normal;font-weight:700;src:url(assets/fonts/gothambold-webfont.woff2) format("woff2"),url(assets/fonts/gothambold-webfont.woff) format("woff
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 63 61 6c 6c 6f 75 74 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 61 6c 6c 6f 75 74 2e 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 37 65 63 66 61 3b 63 6f 6c 6f 72 3a 23 30 61 30 61 30 61 7d 2e 63 61 6c 6c 6f 75 74 2e 73 65 63 6f 6e 64 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 65 61 65 61 3b 63 6f 6c 6f 72 3a 23 30 61 30 61 30 61 7d 2e 63 61 6c 6c 6f 75 74 2e 73 75 63 63 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 31 66 61 65 61 3b 63 6f 6c 6f 72 3a 23 30 61 30 61 30 61 7d 2e 63 61 6c 6c 6f 75 74 2e 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: child{margin-top:0}.callout>:last-child{margin-bottom:0}.callout.primary{background-color:#d7ecfa;color:#0a0a0a}.callout.secondary{background-color:#eaeaea;color:#0a0a0a}.callout.success{background-color:#e1faea;color:#0a0a0a}.callout.warning{background-c
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 61 75 64 69 6f 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 69 6d 67 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 Data Ascii: ;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}audio,video{display:inline-block}audio:not([controls]){display:none;height:0}img{border-style:none}svg:not(:root){overflow:hidden}button,input,optgroup,select,textare
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 64 65 74 61 69 6c 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 7d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 63 61 6e 76 61 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 66 6f 75 6e 64 61 74 69 6f 6e 2d 6d 71 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 73 6d 61 6c 6c 3d 30 65 6d 26 6d 65 64 69 75 6d 3d 34 30 65 6d 26 6c 61 72 67 65 3d 36 34 65 6d 26 78 6c 61 72 67 65 3d 37 35 65 6d Data Ascii: tical-align:baseline}textarea{overflow:auto}details{display:block}summary{display:list-item}menu{display:block}canvas{display:inline-block}template{display:none}[hidden]{display:none}.foundation-mq{font-family:"small=0em&medium=40em&large=64em&xlarge=75em
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 72 6f 77 20 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 36 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 30 65 6d 29 7b 2e 72 6f 77 20 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 39 33 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 39 33 37 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 34 65 6d 29 7b 2e 72 6f 77 20 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 39 33 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 39 Data Ascii: ;padding-left:0}.row .row{margin-right:-.625rem;margin-left:-.625rem}@media print,screen and (min-width:40em){.row .row{margin-right:-.9375rem;margin-left:-.9375rem}}@media print,screen and (min-width:64em){.row .row{margin-right:-.9375rem;margin-left:-.9
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 2d 31 36 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d 2e 73 6d 61 6c 6c 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 73 6d 61 6c 6c 2d 70 75 73 68 2d 33 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 32 35 25 7d 2e 73 6d 61 6c 6c 2d 70 75 6c 6c 2d 33 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 2d 32 35 25 7d 2e 73 6d 61 6c 6c 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 73 6d 61 6c 6c 2d 70 75 73 68 2d 34 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 Data Ascii: on:relative;left:-16.66667%}.small-offset-1{margin-left:8.33333%}.small-3{width:25%}.small-push-3{position:relative;left:25%}.small-pull-3{position:relative;left:-25%}.small-offset-2{margin-left:16.66667%}.small-4{width:33.33333%}.small-push-4{position:re
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 66 74 3a 2d 39 31 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 73 6d 61 6c 6c 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 6d 61 6c 6c 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 31 3e 2e 63 6f 6c 75 6d 6e 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 31 3e 2e 63 6f 6c 75 6d 6e 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 31 3e 2e 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 6e 29 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 31 3e 2e 63 6f 6c 75 6d 6e 73 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 6e 29 7b 63 6c 65 61 72 3a Data Ascii: ft:-91.66667%}.small-offset-10{margin-left:83.33333%}.small-12{width:100%}.small-offset-11{margin-left:91.66667%}.small-up-1>.column,.small-up-1>.columns{float:left;width:100%}.small-up-1>.column:nth-of-type(1n),.small-up-1>.columns:nth-of-type(1n){clear:
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6d 6e 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 32 30 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 6e 29 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 73 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 6e 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 35 6e 2b 31 29 2c 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 73 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 35 6e 2b 31 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 6f 6c 75 6d 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 73 6d 61 6c 6c 2d Data Ascii: mn,.small-up-5>.columns{float:left;width:20%}.small-up-5>.column:nth-of-type(1n),.small-up-5>.columns:nth-of-type(1n){clear:none}.small-up-5>.column:nth-of-type(5n+1),.small-up-5>.columns:nth-of-type(5n+1){clear:both}.small-up-5>.column:last-child,.small-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49896	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	616	OUT	GET /wp-content/themes/bsdstarter/src/js/vendor/jquery.js?m=1717432320g HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://democrats.org/act/?permalink=update-email-preferences Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: application/javascript Content-Length: 84345 Connection: close Last-Modified: Mon, 03 Jun 2024 16:32:00 GMT Vary: Accept-Encoding ETag: "665df000-14979" cache-control: max-age=31536000 x-cache: HIT x-rq: jfk1 96 184 443 Accept-Ranges: bytes
2024-07-03 07:23:20 UTC	1033	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 34 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 Data Ascii: /! jQuery v2.1.4 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a wind
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 64 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 63 3d 2b 61 2b 28 30 3e 61 3f 62 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 3e 3d 30 26 26 62 3e 63 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: slice:function(){return this.pushStack(d.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.length,c=+a+(0>a?b:0);return this.pushStack(c>=0&&b>c?[this[c]]:[])},end:function(){return t
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 3f 68 5b 69 2e 63 61 6c 6c 28 61 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 61 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 65 76 61 6c 3b 61 3d 6e 2e 74 72 69 6d 28 61 29 2c 61 26 26 28 31 3d 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 75 73 65 20 73 74 72 69 63 74 22 29 3f 28 62 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 62 2e 74 65 78 74 3d 61 2c 6c 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 29 3a 63 28 61 29 29 7d 2c 63 61 6d 65 6c 43 61 73 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 Data Ascii: nction"==typeof a?h[i.call(a)]\|\|"object":typeof a},globalEval:function(a){var b,c=eval;a=n.trim(a),a&&(1===a.indexOf("use strict")?(b=l.createElement("script"),b.text=a,l.head.appendChild(b).parentNode.removeChild(b)):c(a))},camelCase:function(a){return a
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 7c 7c 74 68 69 73 2c 65 2e 63 6f 6e 63 61 74 28 64 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 2c 66 2e 67 75 69 64 3d 61 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 6e 2e 67 75 69 64 2b 2b 2c 66 29 3a 76 6f 69 64 20 30 7d 2c 6e 6f 77 3a 44 61 74 65 2e 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6b 7d 29 2c 6e 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 68 5b 22 5b 6f 62 6a 65 63 Data Ascii: all(arguments,2),f=function(){return a.apply(b\|\|this,e.concat(d.call(arguments)))},f.guid=a.guid=a.guid\|\|n.guid++,f):void 0},now:Date.now,support:k}),n.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),function(a,b){h["[objec
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 3d 6e 65 77 20 52 65 67 45 78 70 28 22 3d 22 2b 4c 2b 22 2a 28 5b 5e 5c 5c 5d 27 5c 22 5d 2a 3f 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 22 67 22 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 50 29 2c 57 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 2b 22 24 22 29 2c 58 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 4d 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4d 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 2a 22 29 2b 22 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4f 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 50 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 Data Ascii: =new RegExp("="+L+"([^\\]'\"]?)"+L+"\\]","g"),V=new RegExp(P),W=new RegExp("^"+N+"$"),X={ID:new RegExp("^#("+M+")"),CLASS:new RegExp("^\\.("+M+")"),TAG:new RegExp("^("+M.replace("w","w")+")"),ATTR:new RegExp("^"+O),PSEUDO:new RegExp("^"+P),CHILD:new R
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 29 2c 21 68 7c 7c 21 68 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 64 3b 69 66 28 68 2e 69 64 3d 3d 3d 6a 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 68 29 2c 64 7d 65 6c 73 65 20 69 66 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 28 68 3d 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6a 29 29 26 26 74 28 62 2c 68 29 26 26 68 2e 69 64 3d 3d 3d 6a 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 68 29 2c 64 7d 65 6c 73 65 7b 69 66 28 66 5b 32 5d 29 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 29 2c 64 3b 69 66 28 28 6a 3d 66 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d Data Ascii: ),!h\|\|!h.parentNode)return d;if(h.id===j)return d.push(h),d}else if(b.ownerDocument&&(h=b.ownerDocument.getElementById(j))&&t(b,h)&&h.id===j)return d.push(h),d}else{if(f[2])return H.apply(d,b.getElementsByTagName(a)),d;if((j=f[3])&&c.getElementsByClassNam
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 5d 3d 63 5b 65 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b Data Ascii: rn function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function pa(a){
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 29 2c 64 2e 66 69 6e 64 2e 54 41 47 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 3a 63 2e 71 73 61 3f 62 2e 71 75 65 72 79 53 Data Ascii: a);return function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}}),d.find.TAG=c.getElementsByTagName?function(a,b){return"undefined"!=typeof b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.queryS
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 65 73 7c 7c 6f 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 6f 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 6a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 73 2e 63 61 6c 6c 28 61 2c 22 64 69 76 22 29 2c 73 2e 63 61 6c 6c 28 61 2c 22 5b 73 21 3d 27 27 5d 3a 78 22 29 2c 72 2e 70 75 73 68 28 22 21 3d 22 2c 50 29 7d 29 2c 71 3d 71 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 71 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 72 3d 72 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 72 2e 6a 6f 69 6e 28 22 7c 22 29 29 Data Ascii: es\|\|o.webkitMatchesSelector\|\|o.mozMatchesSelector\|\|o.oMatchesSelector\|\|o.msMatchesSelector))&&ja(function(a){c.disconnectedMatch=s.call(a,"div"),s.call(a,"[s!='']:x"),r.push("!=",P)}),q=q.length&&new RegExp(q.join("\|")),r=r.length&&new RegExp(r.join("\|"))
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 26 26 6d 28 61 29 2c 62 3d 62 2e 72 65 70 6c 61 63 65 28 55 2c 22 3d 27 24 31 27 5d 22 29 2c 21 28 21 63 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 21 70 7c 7c 72 26 26 72 2e 74 65 73 74 28 62 29 7c 7c 71 26 26 71 2e 74 65 73 74 28 62 29 29 29 74 72 79 7b 76 61 72 20 64 3d 73 2e 63 61 6c 6c 28 61 2c 62 29 3b 69 66 28 64 7c 7c 63 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 61 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 64 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 67 61 28 62 2c 6e 2c 6e 75 6c 6c 2c 5b 61 5d 29 2e 6c 65 6e 67 74 68 3e 30 7d 2c 67 61 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 Data Ascii: &&m(a),b=b.replace(U,"='$1']"),!(!c.matchesSelector\|\|!p\|\|r&&r.test(b)\|\|q&&q.test(b)))try{var d=s.call(a,b);if(d\|\|c.disconnectedMatch\|\|a.document&&11!==a.document.nodeType)return d}catch(e){}return ga(b,n,null,[a]).length>0},ga.contains=function(a,b){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49901	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	582	OUT	GET /user_files/user_files/000/080/770/original/funblue.css HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	775	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/css Content-Length: 22878 Connection: close Age: 288194 Cache-Control: max-age=2678400 Cf-Bgj: minify Cf-Polished: origSize=26647 alt-svc: h3=":443"; ma=86400 etag: "1612976cd64157043abb2444551c74c1" last-modified: Thu, 09 Feb 2023 15:26:26 GMT strict-transport-security: max-age=10 via: 1.1 varnish, 1.1 varnish, 1.1 varnish x-amz-server-side-encryption: AES256 x-cache: MISS, HIT, MISS x-cache-hits: 0, 168, 0 x-cdn-trace-id: 86a1014f-aaf4-4e19-8e07-8f60391ce5c5 x-served-by: cache-iad-kjyo7100093-IAD, cache-iad-kiad7000163-IAD, cache-lga21965-LGA x-timer: S1714617564.992483,VS0,VE68 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 89d5212ecabe0c82-EWR
2024-07-03 07:23:20 UTC	594	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 65 72 63 75 72 79 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 61 63 74 69 6f 6e 6e 65 74 77 6f 72 6b 2e 6f 72 67 2f 75 73 65 72 5f 66 69 6c 65 73 2f 75 73 65 72 5f 66 69 6c 65 73 2f 30 30 30 2f 30 38 30 2f 37 36 38 2f 6f 72 69 67 69 6e 61 6c 2f 4d 65 72 63 75 72 79 54 65 78 74 47 34 2d 52 6f 6d 61 6e 2d 50 72 6f 2e 6f 74 66 29 20 66 6f 72 6d 61 74 28 22 6f 70 65 6e 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 63 68 65 6c 74 65 6e 68 61 6d 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 64 65 6d 6f 63 72 61 74 73 2e 6f 72 67 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 73 64 73 74 61 72 74 65 72 2f 61 73 73 65 74 73 Data Ascii: @font-face{font-family:mercury;src:url(https://actionnetwork.org/user_files/user_files/000/080/768/original/MercuryTextG4-Roman-Pro.otf) format("opentype")}@font-face{font-family:cheltenham;src:url(https://democrats.org/wp-content/themes/bsdstarter/assets
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 33 70 78 29 7b 62 6f 64 79 3e 23 67 65 6e 5f 68 65 61 64 65 72 3e 2e 67 65 6e 5f 77 72 61 70 70 65 72 3e 69 6d 67 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 62 6f 64 79 3e 23 67 65 6e 5f 68 65 61 64 65 72 20 68 31 2e 67 65 6e 5f 6e 61 6d 65 7b 62 6f 72 64 65 72 3a 30 3b 66 6f 6e 74 3a 30 2f 30 20 61 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 61 63 74 69 6f 6e 6e 65 74 77 6f 72 6b 2e 6f 72 67 2f 75 73 65 72 5f 66 69 6c 65 73 2f 75 73 65 72 5f 66 69 6c 65 73 2f 30 30 30 2f 30 38 30 2f 37 36 37 2f 6f 72 69 67 69 6e 61 6c 2f 44 Data Ascii: @media(max-width:783px){body>#gen_header>.gen_wrapper>img{float:none!important}}body>#gen_header h1.gen_name{border:0;font:0/0 a;text-shadow:none;color:transparent;background-image:url(https://actionnetwork.org/user_files/user_files/000/080/767/original/D
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 74 65 78 74 61 72 65 61 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 63 61 6e 5f 73 65 6c 65 63 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 73 65 6c 65 63 74 20 6f 70 74 69 6f 6e 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 34 34 63 39 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 2e 36 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 69 6e 70 Data Ascii: can_embed #can_embed_form textarea::placeholder,.can_embed #can_embed_form .can_select::placeholder,.can_embed #can_embed_form select option::placeholder{color:#0044c9!important;font-weight:700!important;opacity:.6!important}.can_embed #can_embed_form inp
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 78 74 61 72 65 61 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 63 61 6e 5f 73 65 6c 65 63 74 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 73 65 6c 65 63 74 20 6f 70 74 69 6f 6e 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 34 34 63 39 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 2e 36 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 69 6e 70 75 Data Ascii: xtarea:-ms-input-placeholder,.can_embed #can_embed_form .can_select:-ms-input-placeholder,.can_embed #can_embed_form select option:-ms-input-placeholder{color:#0044c9!important;font-weight:700!important;opacity:.6!important}.can_embed #can_embed_form inpu
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6f 70 61 63 69 74 79 3a 30 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 33 30 70 78 21 69 6d Data Ascii: {color:#fff!important}.can_embed #can_embed_form input[type=radio]{position:absolute;opacity:0;width:0;height:0}.can_embed #can_embed_form input[type=checkbox]{background:0 0;-webkit-appearance:none;-moz-appearance:none;height:32px!important;width:30px!im
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 6c 61 62 65 6c 2e 72 61 64 69 6f 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 6c 61 62 65 6c 2e 72 61 64 69 6f 2e 65 72 72 6f 72 5f 63 68 65 63 6b 62 6f 78 7b 63 6f 6c 6f 72 3a 23 61 33 31 30 31 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 6c 61 62 65 6c 2e 72 61 64 69 6f 2e 63 68 65 63 6b 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 34 34 63 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 Data Ascii: m!important}.can_embed #can_embed_form label.radio:last-of-type{margin-bottom:0!important}.can_embed #can_embed_form label.radio.error_checkbox{color:#a31010!important}.can_embed #can_embed_form label.radio.checked{background-color:#0044c9!important;color
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6f 5f 6d 6f 64 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 23 64 6f 6e 61 74 65 5f 61 75 74 6f 5f 6d 6f 64 61 6c 20 2e 62 75 74 74 6f 6e 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 23 74 69 63 6b 65 74 65 64 5f 65 76 65 6e 74 5f 66 6f 72 6d 5f 62 75 74 74 6f 6e 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 23 64 6f 6e 61 74 65 5f 66 6f 72 6d 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 34 34 66 34 37 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 37 35 25 20 34 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 Data Ascii: o_modal input[type=submit],.can_embed #can_embed_form #donate_auto_modal .button,.can_embed #can_embed_form #ticketed_event_form_button,.can_embed #can_embed_form #donate_form_button{background:#f44f47!important;background-position:75% 40%;color:#fff;font
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 23 64 6f 6e 61 74 65 5f 61 75 74 6f 5f 6d 6f 64 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 68 6f 76 65 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 23 64 6f 6e 61 74 65 5f 61 75 74 6f 5f 6d 6f 64 61 6c 20 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 23 74 69 63 6b 65 74 65 64 5f 65 76 65 6e 74 5f 66 6f 72 6d 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 Data Ascii: can_embed #can_embed_form .button:hover,.can_embed #can_embed_form #donate_auto_modal input[type=submit]:hover,.can_embed #can_embed_form #donate_auto_modal .button:hover,.can_embed #can_embed_form #ticketed_event_form_button:hover,.can_embed #can_embed_f
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 33 70 78 29 7b 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 63 68 65 63 6b 5f 72 61 64 69 6f 5f 6c 61 62 65 6c 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 63 61 6e 5f 73 65 6c 65 63 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 61 6e 5f 65 6d 62 65 64 Data Ascii: a(max-width:783px){.can_embed #can_embed_form .check_radio_label,.can_embed #can_embed_form .control-label{color:#fff}}.can_embed #can_embed_form .control-label:empty{display:none!important}.can_embed #can_embed_form .can_select{margin-bottom:0}.can_embed
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 32 35 70 78 20 35 30 70 78 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 33 70 78 29 7b 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 64 69 76 23 63 61 6e 5f 73 69 64 65 62 61 72 2c 2e 63 61 6e 5f 65 6d 62 65 64 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 23 66 6f 72 6d 5f 63 6f 6c 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 28 6d Data Ascii: arent;border:none;background-color:#fff!important;padding:15px 25px 50px}@media(max-width:783px){.can_embed #can_embed_form div#can_sidebar,.can_embed #can_embed_form #form_col2{background-color:transparent!important;border:0;padding:0!important}}@media(m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49902	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	561	OUT	GET /css/style-embed-whitelabel-v3.css HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	724	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close via: 1.1 varnish, 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 last-modified: Mon, 01 Jul 2024 23:01:17 GMT etag: W/"6683353d-6b010" x-timer: S1719937042.562859,VS0,VE18 expires: Tue, 09 Jul 2024 16:17:21 GMT Age: 54360 x-served-by: cache-iad-kcgs7200114-IAD, cache-iad-kcgs7200115-IAD, cache-lga21935-LGA x-cache: MISS, HIT, HIT x-cache-hits: 0, 13, 227 vary: Accept-Encoding strict-transport-security: max-age=10 x-cdn-trace-id: 59fa2acf-5755-4536-80f0-35fa90e3cad8 alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89d5212ecb550c90-EWR
2024-07-03 07:23:20 UTC	645	IN	Data Raw: 37 63 39 37 0d 0a 2f 2a 0a 54 68 65 20 41 63 74 69 6f 6e 20 4e 65 74 77 6f 72 6b 20 57 68 69 74 65 6c 61 62 65 6c 20 45 6d 62 65 64 0a 53 69 6e 63 65 20 56 65 72 73 69 6f 6e 20 33 2e 31 2e 30 0a 41 75 74 68 6f 72 65 64 20 62 79 20 4a 61 6b 65 20 43 61 70 75 74 6f 0a 0a 59 6f 75 20 63 61 6e 20 6c 6f 6f 6b 2c 20 62 75 74 20 64 6f 6e 27 74 20 74 6f 75 63 68 2e 0a 2a 2f 0a 2e 67 72 61 64 69 65 6e 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 36 33 62 35 34 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 72 69 67 68 74 20 62 6f 74 74 6f 6d 2c 20 66 72 6f 6d 28 23 30 36 33 62 35 34 29 2c 20 74 6f 28 23 30 30 Data Ascii: 7c97/The Action Network Whitelabel EmbedSince Version 3.1.0Authored by Jake CaputoYou can look, but don't touch./.gradient { background-color: #063b54; background-image: -webkit-gradient(linear, left top, right bottom, from(#063b54), to(#00
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 47 72 61 64 69 65 6e 74 54 79 70 65 3d 31 2c 53 74 61 72 74 43 6f 6c 6f 72 53 74 72 3d 27 23 30 36 33 62 35 34 27 2c 20 45 6e 64 43 6f 6c 6f 72 53 74 72 3d 27 23 30 30 39 36 64 62 27 29 3b 20 7d 0a 0a 2f 2a 20 52 45 53 45 54 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 67 65 6e 5f 77 72 61 70 70 65 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0a 0a 73 65 6c 65 63 74 2e 77 72 61 70 70 65 72 5f 73 65 6c 65 63 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 36 30 70 78 3b 0a 20 Data Ascii: rosoft.gradient(GradientType=1,StartColorStr='#063b54', EndColorStr='#0096db'); }/* RESET -------------------------------------------------------------------------- */.gen_wrapper { box-sizing: border-box; }select.wrapper_select { width: 160px;
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 72 65 63 69 70 69 65 6e 74 73 2c 20 2e 63 61 6e 5f 65 6d 62 65 64 20 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 7a 6f 6f 6d 3a 20 31 3b 20 7d 0a 20 20 2e 63 61 6e 5f 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 64 6f 6e 61 74 69 6f 6e 5f 72 65 63 69 70 69 65 6e 74 73 3a 62 65 66 6f 72 65 2c 20 2e 63 61 6e 5f 65 6d 62 65 64 20 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 20 7d 0a 20 20 2e 63 61 6e 5f 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 64 6f 6e 61 74 69 6f 6e 5f 72 65 63 69 70 69 65 6e 74 73 3a 61 66 74 65 72 2c 20 2e 63 Data Ascii: recipients, .can_embed .clearfix { zoom: 1; } .can_clearfix:before, #can_embed_form .donation_recipients:before, .can_embed .clearfix:before { content: ""; display: table; } .can_clearfix:after, #can_embed_form .donation_recipients:after, .c
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 23 6c 65 74 74 65 72 2d 66 6f 72 6d 20 23 66 6f 72 6d 5f 63 6f 6c 32 20 3e 20 68 34 3a 61 66 74 65 72 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 33 20 2b 20 68 34 3a 61 66 74 65 72 2c 20 2e 65 76 65 6e 74 5f 63 61 6d 70 61 69 67 6e 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 3e 20 68 32 20 2b 20 68 34 3a 61 66 74 65 72 2c 20 2e 6c 65 74 74 65 72 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 32 2e 6c 69 6e 65 20 2b 20 68 34 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 Data Ascii: _embed_form #letter-form #form_col2 > h4:after, #can_embed_form h3 + h4:after, .event_campaign #can_embed_form > h2 + h4:after, .letter #can_embed_form h2.line + h4:after { content: ""; width: 40%; height: 1px; display: block; backgrou
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 0a 68 74 6d 6c 2e 63 61 6e 5f 65 6d 62 65 64 2d 68 74 6d 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 62 6f 64 79 2e 63 61 6e 5f 65 6d 62 65 64 2c 20 62 6f 64 79 2e 63 61 6e 5f 66 75 6e 64 72 61 69 73 69 6e 67 5f 77 69 64 67 65 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 63 61 6e 5f 66 75 6e 64 72 Data Ascii: color: #FFFFFF; }html.can_embed-html { margin: 0 !important; padding: 0 !important; height: auto !important; max-width: 100% !important; }body.can_embed, body.can_fundraising_widget { margin: 0 !important; font-weight: 400; }.can_fundr
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 31 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 32 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 33 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 34 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 35 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 36 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 70 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 70 72 65 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 61 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 61 62 62 72 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 61 63 72 6f 6e 79 6d 2c 20 23 63 Data Ascii: can_embed_form h1, #can_embed_form h2, #can_embed_form h3, #can_embed_form h4, #can_embed_form h5, #can_embed_form h6, #can_embed_form p, #can_embed_form blockquote, #can_embed_form pre, #can_embed_form a, #can_embed_form abbr, #can_embed_form acronym, #c
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 61 64 65 72 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 67 72 6f 75 70 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 6d 65 6e 75 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 6e 61 76 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 6f 75 74 70 75 74 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 72 75 62 79 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 73 65 63 74 69 6f 6e 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 73 75 6d 6d 61 72 79 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 74 69 6d 65 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 6d 61 72 6b 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 61 75 64 69 6f 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 76 69 64 Data Ascii: ader, #can_embed_form hgroup, #can_embed_form menu, #can_embed_form nav, #can_embed_form output, #can_embed_form ruby, #can_embed_form section, #can_embed_form summary, #can_embed_form time, #can_embed_form mark, #can_embed_form audio, #can_embed_form vid
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 62 6c 6f 63 6b 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 7d 0a 20 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 69 6e 70 75 74 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 74 65 78 74 61 72 65 61 2c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 73 65 6c 65 63 74 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 33 34 33 34 33 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 Data Ascii: block { display: block; } #can_embed_form input, #can_embed_form textarea, #can_embed_form select { color: #434343; font-size: 16px; line-height: 30px; font-weight: 400; outline: none; box-shadow: none; white-space: nowra
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 63 69 74 79 3a 20 2e 37 3b 20 7d 0a 20 20 20 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 6d 61 69 6e 5f 61 63 74 69 6f 6e 5f 63 61 70 74 69 6f 6e 20 61 2c 0a 20 20 20 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 72 65 64 61 63 74 6f 72 5f 63 61 70 74 69 6f 6e 20 61 20 7b 0a 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 0a 20 20 20 20 20 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 6d 61 69 6e 5f 61 63 74 69 6f 6e 5f 63 61 70 74 69 6f 6e 20 61 3a 68 6f 76 65 72 2c 0a 20 20 20 20 20 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 72 65 64 61 63 74 6f 72 5f 63 61 70 74 69 6f 6e 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 Data Ascii: city: .7; } #can_embed_form .main_action_caption a, #can_embed_form .redactor_caption a { text-decoration: underline; } #can_embed_form .main_action_caption a:hover, #can_embed_form .redactor_caption a:hover { text-decora
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 33 2e 6c 69 6e 65 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 33 70 78 20 73 6f 6c 69 64 20 23 45 30 45 30 45 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 7d 0a 20 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 68 34 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 Data Ascii: om: 10px; border-bottom: none; } #can_embed_form h3.line { padding-bottom: 10px; border-bottom: 3px solid #E0E0E0; margin-top: 40px; margin-bottom: 20px; } #can_embed_form h4 { margin-bottom: 15px; margin-top: 0; font-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49900	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	576	OUT	GET /user_files/user_files/000/080/707/original/overrides_sept22.js HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	737	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/javascript Content-Length: 2061 Connection: close last-modified: Fri, 14 Oct 2022 01:52:53 GMT etag: "bedc7011ba3aba280af8b88e2f2665a5" via: 1.1 varnish, 1.1 varnish, 1.1 varnish x-timer: S1710683869.096259,VS0,VE46 x-amz-server-side-encryption: AES256 Age: 2539957 x-served-by: cache-iad-kjyo7100077-IAD, cache-iad-kjyo7100132-IAD, cache-lga21929-LGA x-cache: MISS, HIT, HIT x-cache-hits: 0, 1170, 0 Cache-Control: max-age=2678400 strict-transport-security: max-age=10 x-cdn-trace-id: fb7a871b-fbbc-49aa-bf90-5d7b3fcd0878 alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 89d5212f083272a5-EWR
2024-07-03 07:23:20 UTC	632	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 63 61 6e 5f 65 6d 62 65 64 5f 6c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 20 2f 2f 77 61 69 74 20 66 6f 72 20 41 4e 20 6a 73 20 65 6d 62 65 64 20 74 6f 20 66 69 6e 69 73 68 20 6c 6f 61 64 69 6e 67 0a 0a 09 09 24 28 27 23 6d 6f 62 69 6c 65 5f 6f 70 74 5f 69 6e 27 29 2e 68 69 64 65 28 29 3b 0a 0a 09 09 24 28 27 23 66 6f 72 6d 2d 70 68 6f 6e 65 27 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 7b 0a 09 09 24 28 27 23 6d 6f 62 69 6c 65 5f 6f 70 74 5f 69 6e 5f 63 68 65 63 6b 62 6f 78 27 29 2e 61 74 74 72 28 27 63 68 65 63 6b Data Ascii: $(document).ready(function() {$(document).on('can_embed_loaded', function() { //wait for AN js embed to finish loading$('#mobile_opt_in').hide();$('#form-phone').change(function(){if($(this).val()){$('#mobile_opt_in_checkbox').attr('check
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 29 3b 0a 0a 09 09 24 28 27 2e 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 20 6c 61 62 65 6c 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 63 68 65 63 6b 65 64 27 29 3b 0a 09 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 27 63 68 65 63 6b 65 64 27 29 3b 0a 09 09 7d 29 3b 0a 09 09 0a 09 09 24 28 27 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 27 29 2e 70 61 72 65 6e 74 28 29 2e 61 64 64 43 6c 61 73 73 28 27 63 68 65 63 6b 65 64 27 29 3b 20 0a 0a 09 09 24 28 27 23 63 61 6e 5f 6d 61 69 6e 5f 63 6f 6c 20 3e 20 68 32 27 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 27 23 63 61 6e 5f 6d 61 69 6e 5f 63 6f 6c 20 3e Data Ascii: );$('.control-group label').click(function () {$(this).parent().children().removeClass('checked');$(this).addClass('checked');});$('input:checked').parent().addClass('checked'); $('#can_main_col > h2').insertAfter('#can_main_col >
2024-07-03 07:23:20 UTC	60	IN	Data Raw: 24 28 27 2e 73 68 61 72 65 2d 74 77 69 74 74 65 72 20 73 70 61 6e 20 73 74 72 6f 6e 67 27 29 2e 68 74 6d 6c 28 27 54 77 69 74 74 65 72 27 29 3b 0a 0a 20 20 7d 29 3b 0a 7d 29 3b 0a Data Ascii: $('.share-twitter span strong').html('Twitter'); });});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49904	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	589	OUT	GET /widgets/v5/form/update-email-preferences?format=js&source=widget&style=full HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:20 UTC	1349	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:20 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Accept-Datetime, Authorization, Cache-Control, Connection, Cookie, Content-Length, Content-MD5, Content-Type, Date, Expect, From, Host, Permanent, If-Match, If-Modified-Since, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, Origin, Pragma, Proxy-Authorization, Range, Referer, TE, User-Agent, Upgrade, Via, Warning, X-Requested-With, DNT, X-Forwarded-For, X-Forwarded-Proto, Front-End-Https, X-ATT-DeviceId, X-Wap-Profile, Proxy-Connection, api-key p3p: CP="Hello IE10" x-ua-compatible: IE=Edge,chrome=1 set-cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VT--c566da1f83acc9167194236a0aebc2a76fb1e72f; path=/; secure; HttpOnly; SameSite=None access-control-allow-methods: POST, PUT, GET, OPTIONS, PATCH, DELETE via: 1.1 varnish, 1.1 varnish, 1.1 varnish Cache-Control: max-age=0, private, must-revalidate x-rack-cache: miss x-timer: S1719991401.813606,VS0,VE27 status: 200 OK
2024-07-03 07:23:20 UTC	471	IN	Data Raw: 78 2d 72 75 6e 74 69 6d 65 3a 20 30 2e 30 32 31 39 32 35 0d 0a 61 63 63 65 70 74 2d 72 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 65 74 61 67 3a 20 22 65 62 33 34 30 63 34 63 64 61 33 65 62 33 31 33 37 66 34 35 39 36 31 36 38 64 39 63 34 62 61 38 22 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 32 65 61 38 35 38 65 38 35 33 66 31 38 30 32 36 31 38 37 37 37 62 65 39 37 31 32 32 64 33 33 64 0d 0a 78 2d 73 65 72 76 65 64 2d 62 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 6a 79 6f 37 31 30 30 30 38 34 2d 49 41 44 2c 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 30 36 33 2d 49 41 44 2c 20 63 61 63 68 65 2d 6c 67 61 32 31 39 32 32 2d 4c 47 41 0d 0a 78 2d 63 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 78 2d 63 61 63 68 65 2d Data Ascii: x-runtime: 0.021925accept-ranges: bytesetag: "eb340c4cda3eb3137f4596168d9c4ba8"x-request-id: 2ea858e853f1802618777be97122d33dx-served-by: cache-iad-kjyo7100084-IAD, cache-iad-kcgs7200063-IAD, cache-lga21922-LGAx-cache: MISS, MISS, MISSx-cache-
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 32 35 66 61 0d 0a 2f 2f 20 62 6f 6f 74 73 74 72 61 70 20 61 6e 64 20 6c 6f 61 64 20 66 6f 72 6d 5f 69 6e 6e 65 72 2e 6a 73 20 77 69 74 68 20 63 6f 72 72 65 63 74 20 55 52 4c 20 61 72 67 75 6d 65 6e 74 73 0a 0a 2f 2f 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 20 70 6f 6c 79 66 69 6c 6c 20 62 79 20 41 64 61 6d 20 4d 69 6c 6c 65 72 0a 0a 2f 2f 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 64 6f 63 75 6d 65 6e 74 29 20 7b 0a 20 20 76 61 72 20 63 75 72 72 65 6e 74 53 63 72 69 70 74 20 3d 20 27 63 75 72 72 65 6e 74 53 63 72 69 70 74 27 3b 0a 0a 20 20 2f 2f 20 49 66 20 62 72 6f 77 73 65 72 20 6e 65 65 64 73 20 63 75 72 72 65 6e 74 53 63 72 69 70 74 20 70 6f 6c 79 66 69 6c 6c 2c 20 61 64 64 20 67 65 74 20 63 Data Ascii: 25fa// bootstrap and load form_inner.js with correct URL arguments// document.currentScript polyfill by Adam Miller// MIT license(function (document) { var currentScript = 'currentScript'; // If browser needs currentScript polyfill, add get c
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 53 63 72 69 70 74 53 6f 75 72 63 65 52 65 67 45 78 70 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 27 28 3f 3a 5b 5e 5c 5c 6e 5d 2b 3f 5c 5c 6e 29 7b 30 2c 27 20 2b 20 28 6c 69 6e 65 20 2d 20 32 29 20 2b 20 27 7d 5b 5e 3c 5d 2a 3c 73 63 72 69 70 74 3e 28 5b 5c 5c 64 5c 5c 44 5d 2a 3f 29 3c 5c 5c 2f 73 63 72 69 70 74 3e 5b 5c 5c 64 5c 5c 44 5d 2a 27 2c 20 27 69 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 6c 69 6e 65 53 63 72 69 70 74 53 6f 75 72 63 65 20 3d 20 70 61 67 65 53 6f 75 72 63 65 2e 72 65 70 6c 61 63 65 28 69 6e 6c 69 6e 65 53 63 72 69 70 74 53 6f 75 72 63 65 52 65 67 45 78 70 2c 20 27 24 31 27 29 2e 74 72 69 6d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 3b 20 69 20 3c 20 73 63 72 69 70 Data Ascii: ScriptSourceRegExp = new RegExp('(?:[^\\n]+?\\n){0,' + (line - 2) + '}[^<]<script>([\\d\\D]?)<\\/script>[\\d\\D]*', 'i'); inlineScriptSource = pageSource.replace(inlineScriptSourceRegExp, '$1').trim(); } for (; i < scrip
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 28 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 7d 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 5f 65 6e 74 72 69 65 73 22 2c 7b 77 72 69 74 61 62 6c 65 3a 74 72 75 65 2c 76 61 6c 75 65 3a 7b 7d 7d 29 3b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 69 66 28 74 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 7d 65 6c 73 65 20 69 66 28 74 3d 3d 3d 22 73 74 72 69 6e 67 22 29 7b 69 66 28 65 21 3d 3d 22 22 29 7b 74 68 69 73 2e 5f 66 72 6f 6d 53 74 72 69 6e 67 28 65 29 7d 7d 65 6c 73 65 20 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 7b 76 61 72 20 72 3d 74 68 69 73 Data Ascii: (String(e).replace(/\+/g," "))};var a=function(){var a=function(e){Object.defineProperty(this,"_entries",{writable:true,value:{}});var t=typeof e;if(t==="undefined"){}else if(t==="string"){if(e!==""){this._fromString(e)}}else if(e instanceof a){var r=this
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 72 3d 5b 5d 3b 74 68 69 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 2e 70 75 73 68 28 74 29 7d 29 3b 72 65 74 75 72 6e 20 6e 28 72 29 7d 3b 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 5d 3b 74 68 69 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 70 75 73 68 28 65 29 7d 29 3b 72 65 74 75 72 6e 20 6e 28 74 29 7d 3b 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 74 68 69 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 2e 70 75 73 68 28 5b 74 2c 65 5d 29 7d 29 3b 72 65 74 75 72 6e 20 6e 28 72 29 7d 3b 69 66 28 72 29 7b 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e Data Ascii: ){var r=[];this.forEach(function(e,t){r.push(t)});return n(r)};e.values=function(){var t=[];this.forEach(function(e){t.push(e)});return n(t)};e.entries=function(){var r=[];this.forEach(function(e,t){r.push([t,e])});return n(r)};if(r){e[Symbol.iterator]=e.
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 6e 65 77 20 75 2e 55 52 4c 28 22 62 22 2c 22 68 74 74 70 3a 2f 2f 61 22 29 3b 65 2e 70 61 74 68 6e 61 6d 65 3d 22 63 20 64 22 3b 72 65 74 75 72 6e 20 65 2e 68 72 65 66 3d 3d 3d 22 68 74 74 70 3a 2f 2f 61 2f 63 25 32 30 64 22 26 26 65 2e 73 65 61 72 63 68 50 61 72 61 6d 73 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 75 2e 55 52 4c 3b 76 61 72 20 65 3d 66 75 6e 63 74 Data Ascii: !=="undefined"?window:typeof self!=="undefined"?self:this);(function(u){var e=function(){try{var e=new u.URL("b","http://a");e.pathname="c d";return e.href==="http://a/c%20d"&&e.searchParams}catch(e){return false}};var t=function(){var t=u.URL;var e=funct
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 6e 67 28 74 68 69 73 2e 73 65 61 72 63 68 29 3b 73 3d 74 72 75 65 7d 7d 7d 7d 29 7d 3b 76 61 72 20 72 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 74 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 5b 74 5d 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 5b 74 5d 3d 65 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 7d 29 7d 3b 5b 22 68 61 73 68 22 2c 22 68 6f 73 74 22 2c 22 68 6f 73 74 6e 61 6d 65 22 2c 22 70 6f 72 74 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e Data Ascii: ng(this.search);s=true}}}})};var r=e.prototype;var n=function(t){Object.defineProperty(r,t,{get:function(){return this._anchorElement[t]},set:function(e){this._anchorElement[t]=e},enumerable:true})};["hash","host","hostname","port","protocol"].forEach(fun
2024-07-03 07:23:20 UTC	1369	IN	Data Raw: 62 6a 65 63 74 55 52 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 76 6f 6b 65 4f 62 6a 65 63 74 55 52 4c 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 75 2e 55 52 4c 3d 65 7d 3b 69 66 28 21 65 28 29 29 7b 74 28 29 7d 69 66 28 75 2e 6c 6f 63 61 74 69 6f 6e 21 3d 3d 76 6f 69 64 20 30 26 26 21 28 22 6f 72 69 67 69 6e 22 69 6e 20 75 2e 6c 6f 63 61 74 69 6f 6e 29 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 75 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 28 75 2e 6c 6f 63 61 74 69 6f 6e 2e 70 6f 72 74 3f 22 3a 22 2b 75 2e 6c 6f 63 61 74 69 6f 6e 2e 70 6f 72 74 3a 22 22 29 7d 3b 74 72 79 7b 4f 62 Data Ascii: bjectURL=function(e){return t.revokeObjectURL.apply(t,arguments)};u.URL=e};if(!e()){t()}if(u.location!==void 0&&!("origin"in u.location)){var r=function(){return u.location.protocol+"//"+u.location.hostname+(u.location.port?":"+u.location.port:"")};try{Ob
2024-07-03 07:23:20 UTC	147	IN	Data Raw: 63 72 69 70 74 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 45 6c 65 6d 65 6e 74 28 27 61 66 74 65 72 65 6e 64 27 2c 20 73 63 72 69 70 74 29 3b 0a 7d 20 65 6c 73 65 20 7b 0a 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 6d 62 65 64 5f 72 65 70 6c 61 63 65 27 29 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 45 6c 65 6d 65 6e 74 28 27 61 66 74 65 72 65 6e 64 27 2c 20 73 63 72 69 70 74 29 3b 0a 7d 0d 0a Data Ascii: cript.insertAdjacentElement('afterend', script);} else { document.querySelector('.embed_replace').insertAdjacentElement('afterend', script);}
2024-07-03 07:23:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49903	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:20 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
2024-07-03 07:23:21 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:21 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:21 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:21 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49905	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:21 UTC	1524	OUT	POST /track/?verbose=1&ip=1&_=1719991400439 HTTP/1.1 Host: proxy-service.actblue.com Connection: keep-alive Content-Length: 6771 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://secure.actblue.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure.actblue.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2
2024-07-03 07:23:21 UTC	6771	OUT	Data Raw: 64 61 74 61 3d 57 77 6f 67 49 43 41 67 65 79 4a 6c 64 6d 56 75 64 43 49 36 49 43 4a 79 5a 57 46 6a 61 47 56 6b 49 47 4e 76 62 6e 52 79 61 57 4a 31 64 47 6c 76 62 69 42 6d 62 33 4a 74 49 69 77 69 63 48 4a 76 63 47 56 79 64 47 6c 6c 63 79 49 36 49 48 73 69 4a 47 39 7a 49 6a 6f 67 49 6c 64 70 62 6d 52 76 64 33 4d 69 4c 43 49 6b 59 6e 4a 76 64 33 4e 6c 63 69 49 36 49 43 4a 44 61 48 4a 76 62 57 55 69 4c 43 49 6b 59 33 56 79 63 6d 56 75 64 46 39 31 63 6d 77 69 4f 69 41 69 61 48 52 30 63 48 4d 36 4c 79 39 7a 5a 57 4e 31 63 6d 55 75 59 57 4e 30 59 6d 78 31 5a 53 35 6a 62 32 30 76 5a 47 39 75 59 58 52 6c 4c 33 41 79 63 43 30 79 4e 44 41 33 4d 44 49 74 61 6d 4a 30 61 54 39 79 5a 57 5a 6a 62 32 52 6c 50 58 52 68 58 32 4d 79 4a 6e 4a 6c 5a 6d 4e 76 5a 47 55 79 64 7a Data Ascii: data=WwogICAgeyJldmVudCI6ICJyZWFjaGVkIGNvbnRyaWJ1dGlvbiBmb3JtIiwicHJvcGVydGllcyI6IHsiJG9zIjogIldpbmRvd3MiLCIkYnJvd3NlciI6ICJDaHJvbWUiLCIkY3VycmVudF91cmwiOiAiaHR0cHM6Ly9zZWN1cmUuYWN0Ymx1ZS5jb20vZG9uYXRlL3AycC0yNDA3MDItamJ0aT9yZWZjb2RlPXRhX2MyJnJlZmNvZGUydz
2024-07-03 07:23:21 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://secure.actblue.com Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Via: 1.1 google, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:21 GMT
2024-07-03 07:23:21 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49906	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:21 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
2024-07-03 07:23:22 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:22 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:22 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:22 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49907	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:22 UTC	916	OUT	GET /widgets/v5/form/update-email-preferences?format=js&source=widget&style=full&permalink=update-email-preferences&js_inner=true HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VT--c566da1f83acc9167194236a0aebc2a76fb1e72f
2024-07-03 07:23:22 UTC	1367	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:22 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Accept-Datetime, Authorization, Cache-Control, Connection, Cookie, Content-Length, Content-MD5, Content-Type, Date, Expect, From, Host, Permanent, If-Match, If-Modified-Since, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, Origin, Pragma, Proxy-Authorization, Range, Referer, TE, User-Agent, Upgrade, Via, Warning, X-Requested-With, DNT, X-Forwarded-For, X-Forwarded-Proto, Front-End-Https, X-ATT-DeviceId, X-Wap-Profile, Proxy-Connection, api-key p3p: CP="Hello IE10" x-ua-compatible: IE=Edge,chrome=1 set-cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813; path=/; secure; HttpOnly; SameSite=None access-control-allow-methods: POST, PUT, GET, OPTIONS, PATCH, DELETE via: 1.1 varnish, 1.1 varnish, 1.1 varnish Cache-Control: must-revalidate, private, max-age=0
2024-07-03 07:23:22 UTC	545	IN	Data Raw: 78 2d 72 61 63 6b 2d 63 61 63 68 65 3a 20 6d 69 73 73 0d 0a 78 2d 74 69 6d 65 72 3a 20 53 31 37 31 39 39 39 31 34 30 32 2e 31 33 37 38 33 35 2c 56 53 30 2c 56 45 36 38 0d 0a 73 74 61 74 75 73 3a 20 32 30 30 20 4f 4b 0d 0a 78 2d 72 75 6e 74 69 6d 65 3a 20 30 2e 30 36 33 38 39 36 0d 0a 61 63 63 65 70 74 2d 72 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 65 74 61 67 3a 20 22 31 37 38 37 32 64 36 34 36 35 39 32 39 61 66 37 35 30 36 39 35 32 34 38 62 33 61 63 34 62 37 38 22 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 61 64 39 37 61 32 62 62 61 34 61 37 37 36 35 35 39 66 34 35 36 34 33 35 30 34 66 35 38 35 64 30 0d 0a 78 2d 73 65 72 76 65 64 2d 62 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 6a 79 6f 37 31 30 30 30 34 32 2d 49 41 44 2c 20 63 61 63 68 65 2d 69 61 Data Ascii: x-rack-cache: missx-timer: S1719991402.137835,VS0,VE68status: 200 OKx-runtime: 0.063896accept-ranges: bytesetag: "17872d6465929af750695248b3ac4b78"x-request-id: ad97a2bba4a776559f45643504f585d0x-served-by: cache-iad-kjyo7100042-IAD, cache-ia
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 33 66 66 61 0d 0a 2f 2a 79 65 70 6e 6f 70 65 31 2e 35 2e 78 7c 57 54 46 50 4c 7c 63 75 73 74 6f 6d 69 7a 65 64 20 77 69 74 68 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 53 6c 65 78 41 78 74 6f 6e 2f 79 65 70 6e 6f 70 65 2e 6a 73 2f 63 6f 6d 6d 69 74 2f 38 39 64 33 36 30 34 39 36 64 64 30 32 36 30 37 32 33 30 32 61 36 34 64 32 33 63 32 62 37 39 35 65 63 65 66 33 31 66 66 2a 2f 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 79 65 70 6e 6f 70 65 29 20 7b 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 61 2c 20 62 2c 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 20 3d 3d 20 6f 2e 63 61 6c 6c 28 61 Data Ascii: 3ffa/yepnope1.5.x\|WTFPL\|customized with https://github.com/SlexAxton/yepnope.js/commit/89d360496dd026072302a64d23c2b795ecef31ff/if (!window.yepnope) { (function(a, b, c) { function d(a) { return "[object Function]" == o.call(a
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 20 72 20 3d 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 20 75 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 3a 20 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 3a 20 63 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 3a 20 66 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 3a 20 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 3a 20 6a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 20 3d 3d 3d 20 79 5b 63 5d 20 26 26 20 28 72 20 3d 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: , r = 0 , u = { t: d, s: c, e: f, a: i, x: j }; 1 === y[c] && (r = 1,
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 20 3d 20 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 20 6d 20 3d 20 61 2e 73 65 74 54 69 6d 65 6f 75 74 2c 20 6e 20 3d 20 6e 20 3d 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 2c 20 6f 20 3d 20 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 20 70 20 3d 20 5b 5d 2c 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 61 64 46 69 72 73 74 53 63 72 69 70 74 20 20 20 20 20 20 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 20 7c 7c 20 21 6e 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: } var l = b.documentElement, m = a.setTimeout, n = n = b.getElementsByTagName("script")[0], o = {}.toString, p = [], readFirstScript = function() { if (!n \|\| !n.parentNod
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 66 20 3d 20 30 3b 20 66 20 3c 20 64 3b 20 66 2b 2b 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 20 3d 20 61 5b 66 5d 2e 73 70 6c 69 74 28 22 3d 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 20 3d 20 7a 5b 67 2e 73 68 69 66 74 28 29 5d 29 20 26 26 20 28 63 20 3d 20 65 28 63 2c 20 67 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 66 20 3d 20 30 3b 20 66 20 3c 20 62 3b 20 66 2b 2b 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 20 3d 20 78 5b 66 5d 28 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (f = 0; f < d; f++) g = a[f].split("="), (e = z[g.shift()]) && (c = e(c, g)); for (f = 0; f < b; f++) c = x[f](c);
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 28 61 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 20 7c 7c 20 28 6a 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (a) { if (e(a)) c \|\| (j = function() { var a = [].slice.call(arguments);
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 76 61 72 20 62 20 3d 20 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 26 26 20 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 62 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 28 6b 5b 6e 5d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: var b = [].slice.call(arguments); a && a.apply(this, b), l() } }(k[n])),
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 2e 65 72 72 6f 72 54 69 6d 65 6f 75 74 20 3d 20 31 65 34 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 20 3d 3d 20 62 2e 72 65 61 64 79 53 74 61 74 65 20 26 26 20 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 26 26 20 28 62 2e 72 65 61 64 79 53 74 61 74 65 20 3d 20 22 6c 6f 61 64 69 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 41 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 2e 72 65 6d Data Ascii: , B.errorTimeout = 1e4, null == b.readyState && b.addEventListener && (b.readyState = "loading", b.addEventListener("DOMContentLoaded", A = function() { b.rem
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 6c 6f 61 64 28 29 20 3a 20 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6b 2c 20 6e 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 2e 79 65 70 6e 6f 70 65 2e 69 6e 6a 65 63 74 43 73 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 63 2c 20 64 2c 20 65 2c 20 67 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2c 20 6a 2c 20 63 20 3d 20 69 20 3f Data Ascii: load() : n.parentNode.insertBefore(k, n) } , a.yepnope.injectCss = function(a, c, d, e, g, i) { var e = b.createElement("link"), j, c = i ?
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 5c 22 63 61 6e 5f 6d 61 69 6e 5f 63 6f 6c 5c 22 3e 5c 6e 5c 6e 5c 6e 5c 6e 5c 6e 09 09 09 09 3c 68 32 20 63 6c 61 73 73 3d 5c 22 65 6e 74 72 79 2d 74 69 74 6c 65 20 6a 73 2d 65 6e 74 72 79 2d 74 69 74 6c 65 5c 22 3e 5c 6e 09 09 09 09 09 55 70 64 61 74 65 20 79 6f 75 72 20 6f 66 66 69 63 69 61 6c 20 44 4e 43 20 65 6d 61 69 6c 20 70 72 65 66 65 72 65 6e 63 65 73 5c 6e 09 09 09 09 3c 5c 2f 68 32 3e 5c 6e 5c 6e 09 09 09 09 09 3c 69 6d 67 20 63 6c 61 73 73 3d 5c 22 6d 61 69 6e 5f 61 63 74 69 6f 6e 5f 69 6d 61 67 65 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 63 61 6e 32 2d 70 72 6f 64 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 66 6f 72 6d 73 2f 70 68 6f 74 6f 73 2f 30 30 30 2f 34 35 37 2f 31 30 38 2f 6f 72 69 67 69 6e 61 6c 2f 34 39 37 32 31 Data Ascii: \"can_main_col\">\n\n\n\n\n<h2 class=\"entry-title js-entry-title\">\nUpdate your official DNC email preferences\n<\/h2>\n\n<img class=\"main_action_image\" src=\"https://can2-prod.s3.amazonaws.com/forms/photos/000/457/108/original/49721

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49908	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:22 UTC	983	OUT	GET /user_files/user_files/000/080/767/original/D_Logo_Horizontal_White_90.png HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://actionnetwork.org/user_files/user_files/000/080/770/original/funblue.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VT--c566da1f83acc9167194236a0aebc2a76fb1e72f
2024-07-03 07:23:22 UTC	692	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:22 GMT Content-Type: image/png Content-Length: 6926 Connection: close x-timer: S1712303029.446055,VS0,VE65 last-modified: Sat, 10 Sep 2022 19:12:33 GMT via: 1.1 varnish, 1.1 varnish, 1.1 varnish etag: "adeff6454558869b9c1240d29ec77edf" Age: 2539959 x-served-by: cache-iad-kjyo7100097-IAD, cache-iad-kcgs7200150-IAD, cache-lga21952-LGA x-cache: MISS, HIT, HIT x-cache-hits: 0, 210, 0 Cache-Control: max-age=2678400 strict-transport-security: max-age=10 x-cdn-trace-id: fc2eeefb-0549-4851-bcab-c3a8e9d1a504 alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 89d5213729f44392-EWR
2024-07-03 07:23:22 UTC	677	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2b 00 00 00 5a 08 06 00 00 00 e0 ad 70 64 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 05 d1 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDR+ZpdpHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: 3a 34 32 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 32 2d 30 39 2d 31 30 54 31 34 3a 31 31 3a 35 31 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 32 2d 30 39 2d 31 30 54 31 34 3a 31 31 3a 35 31 2d 30 35 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 39 64 36 32 37 36 66 2d 38 38 61 34 2d 34 64 31 31 2d 61 63 34 31 2d 66 65 61 33 34 33 33 62 37 39 64 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 64 63 39 39 34 Data Ascii: :42-05:00" xmp:ModifyDate="2022-09-10T14:11:51-05:00" xmp:MetadataDate="2022-09-10T14:11:51-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:19d6276f-88a4-4d11-ac41-fea3433b79d6" xmpMM:DocumentID="adobe:docid:photoshop:edc994
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: f6 00 46 ab 90 19 56 86 b6 fd 19 38 c2 86 8b 61 b4 5c 61 55 0e 8d ea 2e e0 76 e0 85 0a 5d e3 30 35 4f 4f 2b b1 9e c7 80 23 6d c8 18 46 cb 13 56 bf 07 ce 2a 51 d0 5d 0b bc de 4c d7 ba 2b 70 69 89 42 cb 7c 58 86 d1 c2 84 d5 8f 80 9b 32 9e 73 ae 1e 3f ad 4a d7 3c 08 b8 b9 04 f3 f0 0a 24 d0 d5 30 8c 1a 17 56 83 11 ff 52 16 ae 47 96 dd ac af 81 6b bf 12 98 90 f1 d8 43 81 ff b1 e1 63 18 b5 2b ac da 03 0b 90 a4 78 31 34 01 27 22 69 5a 6a 89 c3 91 2c 0c 9d 22 8f 6b 04 b6 43 66 27 0d c3 68 06 62 e3 93 ee ca 20 a8 de 45 f2 56 3d 52 83 d7 ff 24 b0 37 f0 4e e4 71 9d b0 75 84 86 51 b3 9a d5 58 24 e6 28 86 7f 20 be a1 5a 5f 6b d7 15 89 e9 da 2d f2 b8 53 80 c9 36 8c 0c a3 b6 84 d5 62 24 f8 32 a6 fc 7e 48 5e f4 96 40 17 60 06 71 19 22 56 00 db 23 91 f5 86 61 d4 80 19 78 Data Ascii: FV8a\aU.v]05OO+#mFV*Q]L+piB\|X2s?J<$0VRGkCc+x14'"iZj,"kCf'hb EV=R$7NquQX$( Z_k-S6b$2~H^@`q"V#ax
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: ad 3e 9c 03 52 5e 30 df d6 97 b6 6f b2 e1 5b 09 9a 4e 92 32 d2 17 09 49 9a 9b f7 dd d3 2a e0 73 9a f2 3a 6d d3 70 cf f3 37 07 99 fd df bc e0 7c cb 74 8c f8 c6 dc 34 24 c4 69 01 b2 9e f6 2c e0 7c cf b5 74 a0 30 0e 33 c1 91 75 7a 84 43 ed fc 12 1d c9 21 0e f6 97 22 ea db cb 39 d7 14 d8 f6 c3 2b 38 19 30 b8 c4 7e f9 77 4f bd cf 39 e7 7a 3a e7 b6 56 c7 f5 08 e7 dc dd 45 da d2 bf a0 ee c9 9e 72 37 64 68 e7 b7 02 fb e3 ec 84 63 27 06 1c f7 b9 73 6e fb 82 e3 6e f7 94 9d ef 9c 6b 97 70 9e 1f a4 d4 df b3 a0 ec 14 4f b9 46 e7 5c df 84 ba 1f f6 94 ff 7b 81 93 79 65 e0 64 4c 37 e7 dc a4 94 f6 ee eb b9 0f 7d d4 79 9e 4f 93 73 ee 01 e7 dc aa 84 7a c6 07 de df a5 9e 76 0c 4f 39 a6 ab 73 ee 33 cf 71 bd 12 ca df 92 f7 fb 13 ce b9 73 9c 73 db 3a e7 ea 42 1c ec bd 23 de 72 Data Ascii: >R^0o[N2I*s:mp7\|t4$i,\|t03uzC!"9+80~wO9z:VEr7dhc'snnkpOF\{yedL7}yOszvO9s3qss:B#r
2024-07-03 07:23:22 UTC	1369	IN	Data Raw: fe 93 11 da 50 b9 c8 bd 04 0b 7d 25 db 24 08 fc e7 23 ea 9d ee f9 be 77 11 6d fa 08 cf f7 2f e5 fd 3d 8b e4 c5 ea 9d f1 2f b8 6e 0b 3c ac 5a e9 62 35 75 2e d7 f3 85 8c 95 3b 54 e3 98 84 3f 41 e4 29 c8 f2 ad 42 36 27 db 62 eb 7c da 97 a1 0e 1f 6d 54 8b 9a a8 2f cc fd 12 ca dc 8f 64 97 f8 22 c4 fc ae f7 d8 c9 a1 ec 4e 6d 31 00 f8 cf c0 b2 8f 44 d6 1d b3 53 f3 e2 0a 5d df da 04 33 e1 c7 f8 b3 99 ae d2 07 28 84 72 e6 c3 cf 69 ac 53 8b 94 5b 83 ac ce 0f 65 49 4a 79 df c3 3e 22 45 d8 e4 67 0c 59 8e c4 93 25 31 c1 f3 7d 7e a4 fa 56 2a a4 ae d2 3e 0f 11 56 f9 2f d5 87 3d da 5b 2b 92 67 02 87 53 9e 10 99 31 65 1e a3 23 10 9f d3 3b 7a af c6 23 eb 43 2f f6 94 5f 40 f2 24 c6 1a df 1b b0 f0 e0 06 c2 9c d4 83 a8 1d 0e 43 d2 2b 87 0c 92 b9 c8 8c 49 0c 03 03 cb 35 91 bc Data Ascii: P}%$#wm/=/n<Zb5u.;T?A)B6'b\|mT/d"Nm1DS]3(riS[eIJy>"EgY%1}~V*>V/=[+gS1e#;z#C/_@$C+I5
2024-07-03 07:23:22 UTC	773	IN	Data Raw: 56 76 a7 f4 dd 8e 0d c3 f0 50 2c 76 68 35 70 33 f0 8b c0 fa 76 42 e2 2b 2e 88 10 08 b3 6a b0 5f ae 88 10 54 20 b3 3d 26 a8 0c a3 8a 9a 15 c8 b4 e6 7b 84 e7 72 02 89 58 7e b4 85 f6 c9 41 c4 c7 4a f5 ac 80 66 67 18 46 81 49 55 8c 46 8a 6f 5d 5d c8 83 c8 4a eb 96 c6 76 c0 13 91 c7 5c 6f 82 ca 30 6a 43 b3 ca 99 8b 8b 08 db d9 25 c7 12 c4 e1 fe 7e 0b e9 8b 2e c8 72 84 98 54 30 9f 20 b9 94 2c de c6 30 6a 40 b3 02 09 e0 3a 3b b2 ee 6d 91 b5 5f 5b b7 80 7e e8 8a e4 01 df 25 f2 b8 f3 4d 50 19 46 6d 09 2b 90 1d 6f ef 89 ac 7f 47 24 94 7e 40 0d f7 41 3f 6d e3 6e 91 c7 e5 96 70 18 86 51 43 66 60 8e b6 6a 0e c6 6a 4b 4d c0 c9 94 2f c7 77 b9 18 85 2c c3 89 4d e9 db 80 ac 41 5b 69 43 c8 30 6a 4f b3 02 89 6f 3a 2a c3 79 da 20 4e f7 6b 09 4f b5 52 69 ae 42 16 76 66 c9 3d Data Ascii: VvP,vh5p3vB+.j_T =&{rX~AJfgFIUFo]]Jv\o0jC%~.rT0 ,0j@:;m_[~%MPFm+oG$~@A?mnpQCf`jjKM/w,MA[iC0jOo:*y NkORiBvf=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49909	151.101.0.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:22 UTC	1243	OUT	GET /track/?verbose=1&ip=1&_=1719991400439 HTTP/1.1 Host: proxy-service.actblue.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mp_1498bce7991dd9e45621a9bf2dbfa01b_mixpanel=%7B%22distinct_id%22%3A%20%22%24device%3A1907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24device_id%22%3A%20%221907779b6c61172-099864c81905db-26031e51-140000-1907779b6c61172%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%2C%22__mps%22%3A%20%7B%7D%2C%22__mpso%22%3A%20%7B%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D%2C%22__mpus%22%3A%20%7B%7D%2C%22__mpa%22%3A%20%7B%7D%2C%22__mpu%22%3A%20%7B%7D%2C%22__mpr%22%3A%20%5B%5D%2C%22__mpap%22%3A%20%5B%5D%7D; _gcl_au=1.1.227088756.1719991386; _ga_SQ4QER7ZE7=GS1.1.1719991388.1.0.1719991388.0.0.0; _ga=GA1.1.325672120.1719991389; _fbp=fb.1.1719991389579.953466754384111128; __ssid=cfa36a9dc525de60da3844cb1fe06c2
2024-07-03 07:23:22 UTC	527	IN	HTTP/1.1 200 OK Connection: close Content-Length: 45 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Via: 1.1 google, 1.1 varnish Accept-Ranges: bytes Date: Wed, 03 Jul 2024 07:23:22 GMT
2024-07-03 07:23:22 UTC	45	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 64 61 74 61 2c 20 6d 69 73 73 69 6e 67 20 6f 72 20 65 6d 70 74 79 22 2c 22 73 74 61 74 75 73 22 3a 30 7d Data Ascii: {"error":"data, missing or empty","status":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49910	216.58.212.174	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:22 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=mrfxHhxHML6AGCyVRkZF757K96g8Hnf6UD_AIabBzImO8ApnVdiOzo6Zj9w9M3I0hauz3JSTpwxr0sZFCt5HgAmf1zgmJO7pkjyfYQJ2tW1HmwTj7Yqx7rUoUWJf9St_sSCI7-b2_TIXfHXQ_l5UEVUE3MT1m3hg0Jiv5IRdha4
2024-07-03 07:23:23 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 03 Jul 2024 07:23:23 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 07:23:23 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-03 07:23:23 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49911	172.67.7.122	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:23 UTC	784	OUT	GET /user_files/user_files/000/080/767/original/D_Logo_Horizontal_White_90.png HTTP/1.1 Host: actionnetwork.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
2024-07-03 07:23:23 UTC	692	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:23 GMT Content-Type: image/png Content-Length: 6926 Connection: close x-timer: S1712303029.446055,VS0,VE65 last-modified: Sat, 10 Sep 2022 19:12:33 GMT via: 1.1 varnish, 1.1 varnish, 1.1 varnish etag: "adeff6454558869b9c1240d29ec77edf" Age: 2539960 x-served-by: cache-iad-kjyo7100097-IAD, cache-iad-kcgs7200150-IAD, cache-lga21952-LGA x-cache: MISS, HIT, HIT x-cache-hits: 0, 210, 0 Cache-Control: max-age=2678400 strict-transport-security: max-age=10 x-cdn-trace-id: fc2eeefb-0549-4851-bcab-c3a8e9d1a504 alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 89d5213dae1a8c5d-EWR
2024-07-03 07:23:23 UTC	677	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2b 00 00 00 5a 08 06 00 00 00 e0 ad 70 64 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 05 d1 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDR+ZpdpHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 3a 34 32 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 32 2d 30 39 2d 31 30 54 31 34 3a 31 31 3a 35 31 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 32 2d 30 39 2d 31 30 54 31 34 3a 31 31 3a 35 31 2d 30 35 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 39 64 36 32 37 36 66 2d 38 38 61 34 2d 34 64 31 31 2d 61 63 34 31 2d 66 65 61 33 34 33 33 62 37 39 64 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 65 64 63 39 39 34 Data Ascii: :42-05:00" xmp:ModifyDate="2022-09-10T14:11:51-05:00" xmp:MetadataDate="2022-09-10T14:11:51-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:19d6276f-88a4-4d11-ac41-fea3433b79d6" xmpMM:DocumentID="adobe:docid:photoshop:edc994
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: f6 00 46 ab 90 19 56 86 b6 fd 19 38 c2 86 8b 61 b4 5c 61 55 0e 8d ea 2e e0 76 e0 85 0a 5d e3 30 35 4f 4f 2b b1 9e c7 80 23 6d c8 18 46 cb 13 56 bf 07 ce 2a 51 d0 5d 0b bc de 4c d7 ba 2b 70 69 89 42 cb 7c 58 86 d1 c2 84 d5 8f 80 9b 32 9e 73 ae 1e 3f ad 4a d7 3c 08 b8 b9 04 f3 f0 0a 24 d0 d5 30 8c 1a 17 56 83 11 ff 52 16 ae 47 96 dd ac af 81 6b bf 12 98 90 f1 d8 43 81 ff b1 e1 63 18 b5 2b ac da 03 0b 90 a4 78 31 34 01 27 22 69 5a 6a 89 c3 91 2c 0c 9d 22 8f 6b 04 b6 43 66 27 0d c3 68 06 62 e3 93 ee ca 20 a8 de 45 f2 56 3d 52 83 d7 ff 24 b0 37 f0 4e e4 71 9d b0 75 84 86 51 b3 9a d5 58 24 e6 28 86 7f 20 be a1 5a 5f 6b d7 15 89 e9 da 2d f2 b8 53 80 c9 36 8c 0c a3 b6 84 d5 62 24 f8 32 a6 fc 7e 48 5e f4 96 40 17 60 06 71 19 22 56 00 db 23 91 f5 86 61 d4 80 19 78 Data Ascii: FV8a\aU.v]05OO+#mFV*Q]L+piB\|X2s?J<$0VRGkCc+x14'"iZj,"kCf'hb EV=R$7NquQX$( Z_k-S6b$2~H^@`q"V#ax
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: ad 3e 9c 03 52 5e 30 df d6 97 b6 6f b2 e1 5b 09 9a 4e 92 32 d2 17 09 49 9a 9b f7 dd d3 2a e0 73 9a f2 3a 6d d3 70 cf f3 37 07 99 fd df bc e0 7c cb 74 8c f8 c6 dc 34 24 c4 69 01 b2 9e f6 2c e0 7c cf b5 74 a0 30 0e 33 c1 91 75 7a 84 43 ed fc 12 1d c9 21 0e f6 97 22 ea db cb 39 d7 14 d8 f6 c3 2b 38 19 30 b8 c4 7e f9 77 4f bd cf 39 e7 7a 3a e7 b6 56 c7 f5 08 e7 dc dd 45 da d2 bf a0 ee c9 9e 72 37 64 68 e7 b7 02 fb e3 ec 84 63 27 06 1c f7 b9 73 6e fb 82 e3 6e f7 94 9d ef 9c 6b 97 70 9e 1f a4 d4 df b3 a0 ec 14 4f b9 46 e7 5c df 84 ba 1f f6 94 ff 7b 81 93 79 65 e0 64 4c 37 e7 dc a4 94 f6 ee eb b9 0f 7d d4 79 9e 4f 93 73 ee 01 e7 dc aa 84 7a c6 07 de df a5 9e 76 0c 4f 39 a6 ab 73 ee 33 cf 71 bd 12 ca df 92 f7 fb 13 ce b9 73 9c 73 db 3a e7 ea 42 1c ec bd 23 de 72 Data Ascii: >R^0o[N2I*s:mp7\|t4$i,\|t03uzC!"9+80~wO9z:VEr7dhc'snnkpOF\{yedL7}yOszvO9s3qss:B#r
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: fe 93 11 da 50 b9 c8 bd 04 0b 7d 25 db 24 08 fc e7 23 ea 9d ee f9 be 77 11 6d fa 08 cf f7 2f e5 fd 3d 8b e4 c5 ea 9d f1 2f b8 6e 0b 3c ac 5a e9 62 35 75 2e d7 f3 85 8c 95 3b 54 e3 98 84 3f 41 e4 29 c8 f2 ad 42 36 27 db 62 eb 7c da 97 a1 0e 1f 6d 54 8b 9a a8 2f cc fd 12 ca dc 8f 64 97 f8 22 c4 fc ae f7 d8 c9 a1 ec 4e 6d 31 00 f8 cf c0 b2 8f 44 d6 1d b3 53 f3 e2 0a 5d df da 04 33 e1 c7 f8 b3 99 ae d2 07 28 84 72 e6 c3 cf 69 ac 53 8b 94 5b 83 ac ce 0f 65 49 4a 79 df c3 3e 22 45 d8 e4 67 0c 59 8e c4 93 25 31 c1 f3 7d 7e a4 fa 56 2a a4 ae d2 3e 0f 11 56 f9 2f d5 87 3d da 5b 2b 92 67 02 87 53 9e 10 99 31 65 1e a3 23 10 9f d3 3b 7a af c6 23 eb 43 2f f6 94 5f 40 f2 24 c6 1a df 1b b0 f0 e0 06 c2 9c d4 83 a8 1d 0e 43 d2 2b 87 0c 92 b9 c8 8c 49 0c 03 03 cb 35 91 bc Data Ascii: P}%$#wm/=/n<Zb5u.;T?A)B6'b\|mT/d"Nm1DS]3(riS[eIJy>"EgY%1}~V*>V/=[+gS1e#;z#C/_@$C+I5
2024-07-03 07:23:23 UTC	773	IN	Data Raw: 56 76 a7 f4 dd 8e 0d c3 f0 50 2c 76 68 35 70 33 f0 8b c0 fa 76 42 e2 2b 2e 88 10 08 b3 6a b0 5f ae 88 10 54 20 b3 3d 26 a8 0c a3 8a 9a 15 c8 b4 e6 7b 84 e7 72 02 89 58 7e b4 85 f6 c9 41 c4 c7 4a f5 ac 80 66 67 18 46 81 49 55 8c 46 8a 6f 5d 5d c8 83 c8 4a eb 96 c6 76 c0 13 91 c7 5c 6f 82 ca 30 6a 43 b3 ca 99 8b 8b 08 db d9 25 c7 12 c4 e1 fe 7e 0b e9 8b 2e c8 72 84 98 54 30 9f 20 b9 94 2c de c6 30 6a 40 b3 02 09 e0 3a 3b b2 ee 6d 91 b5 5f 5b b7 80 7e e8 8a e4 01 df 25 f2 b8 f3 4d 50 19 46 6d 09 2b 90 1d 6f ef 89 ac 7f 47 24 94 7e 40 0d f7 41 3f 6d e3 6e 91 c7 e5 96 70 18 86 51 43 66 60 8e b6 6a 0e c6 6a 4b 4d c0 c9 94 2f c7 77 b9 18 85 2c c3 89 4d e9 db 80 ac 41 5b 69 43 c8 30 6a 4f b3 02 89 6f 3a 2a c3 79 da 20 4e f7 6b 09 4f b5 52 69 ae 42 16 76 66 c9 3d Data Ascii: VvP,vh5p3vB+.j_T =&{rX~AJfgFIUFo]]Jv\o0jC%~.rT0 ,0j@:;m_[~%MPFm+oG$~@A?mnpQCf`jjKM/w,MA[iC0jOo:*y NkORiBvf=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49912	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:23 UTC	969	OUT	GET /includes/js/jquery-min.js HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
2024-07-03 07:23:23 UTC	735	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=604800 via: 1.1 varnish, 1.1 varnish, 1.1 varnish x-timer: S1719401489.651151,VS0,VE3 last-modified: Tue, 25 Jun 2024 18:21:37 GMT etag: W/"667b0ab1-16e5e" expires: Wed, 03 Jul 2024 11:31:28 GMT Age: 121808 x-served-by: cache-iad-kcgs7200113-IAD, cache-iad-kjyo7100168-IAD, cache-lga21983-LGA x-cache: MISS, HIT, MISS x-cache-hits: 0, 1733, 0 vary: Accept-Encoding strict-transport-security: max-age=10 x-cdn-trace-id: 13d1fbb7-5a88-4352-a363-6ad831289e50 alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 89d5213dda3fc484-EWR
2024-07-03 07:23:23 UTC	634	IN	Data Raw: 37 63 38 63 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 20 0a 20 77 69 74 68 20 66 69 78 65 73 20 62 61 63 6b 70 6f 72 74 65 64 20 66 6f 72 3a 0a 0a 09 2d 20 43 56 45 20 32 30 31 32 2d 36 37 30 38 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2f 63 6f 6d 6d 69 74 2f 30 35 35 33 31 66 63 34 30 38 30 61 65 32 34 30 37 30 39 33 30 64 31 35 61 65 30 63 65 61 37 61 65 30 35 36 34 35 37 64 0a 09 2d 20 43 56 45 20 32 30 31 35 2d 39 32 35 31 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2f 63 6f 6d 6d 69 74 2f 66 36 30 37 32 39 66 33 39 30 33 64 31 37 39 31 37 64 63 33 35 31 Data Ascii: 7c8c/! jQuery JavaScript Library v1.9.1 with fixes backported for:- CVE 2012-6708: https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d- CVE 2015-9251: https://github.com/jquery/jquery/commit/f60729f3903d17917dc351
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 33 2d 32 2d 34 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 6f 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 61 3d 65 2e 6a 51 75 65 72 79 2c 73 3d 65 2e 24 2c 75 3d 7b 7d 2c 6c 3d 5b 5d 2c 63 3d 6c 2e 63 6f 6e 63 61 74 2c 66 3d 6c 2e 70 75 73 68 2c 64 3d 6c 2e 73 6c 69 63 65 2c 70 3d 6c 2e 69 6e 64 65 78 4f 66 2c 68 3d 75 2e Data Ascii: uery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2013-2-4 */!function(e,t){var n,r,i=e.document,o=e.location,a=e.jQuery,s=e.$,u={},l=[],c=l.concat,f=l.push,d=l.slice,p=l.indexOf,h=u.
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 65 29 29 7c 7c 21 72 5b 31 5d 26 26 74 29 72 65 74 75 72 6e 21 74 7c 7c 74 2e 6a 71 75 65 72 79 3f 28 74 7c 7c 6e 29 2e 66 69 6e 64 28 65 29 3a 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 2e 66 69 6e 64 28 65 29 3b 69 66 28 72 5b 31 5d 29 7b 69 66 28 74 3d 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 79 3f 74 5b 30 5d 3a 74 2c 79 2e 6d 65 72 67 65 28 74 68 69 73 2c 79 2e 70 61 72 73 65 48 54 4d 4c 28 72 5b 31 5d 2c 74 26 26 74 2e 6e 6f 64 65 54 79 70 65 3f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 3a 69 2c 21 30 29 29 2c 54 2e 74 65 73 74 28 72 5b 31 5d 29 26 26 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 29 29 66 6f 72 28 72 20 69 6e 20 74 29 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 68 69 73 5b 72 5d 29 3f 74 68 69 73 5b 72 5d Data Ascii: e))\|\|!r[1]&&t)return!t\|\|t.jquery?(t\|\|n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof y?t[0]:t,y.merge(this,y.parseHTML(r[1],t&&t.nodeType?t.ownerDocument\|\|t:i,!0)),T.test(r[1])&&y.isPlainObject(t))for(r in t)y.isFunction(this[r])?this[r]
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 7d 2c 70 75 73 68 3a 66 2c 73 6f 72 74 3a 5b 5d 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 5b 5d 2e 73 70 6c 69 63 65 7d 2c 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 79 2e 66 6e 2c 79 2e 65 78 74 65 6e 64 3d 79 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 73 3d 32 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 79 2e Data Ascii: s.constructor(null)},push:f,sort:[].sort,splice:[].splice},y.fn.init.prototype=y.fn,y.extend=y.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[1]\|\|{},s=2),"object"==typeof a\|\|y.
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 21 67 2e 63 61 6c 6c 28 65 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 67 2e 63 61 6c 6c 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 67 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 70 61 72 Data Ascii: !g.call(e,"constructor")&&!g.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(e){return!1}var t;for(t in e);return void 0===t\|\|g.call(e,t)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},error:function(e){throw new Error(e)},par
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 79 28 65 5b 72 5d 2c 6e 29 3b 72 2b 2b 29 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 61 70 70 6c 79 28 65 5b 72 5d 2c 6e 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 6f 29 66 6f 72 28 3b 72 3c 69 26 26 21 31 21 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 3b 72 2b 2b 29 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 72 69 6d 3a 6d 26 26 21 6d 2e 63 61 6c 6c 28 22 5c 75 66 65 66 66 c2 a0 22 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 6d 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: y(e[r],n);r++);else for(r in e)if(!1===t.apply(e[r],n))break}else if(o)for(;r<i&&!1!==t.call(e[r],r,e[r]);r++);else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},trim:m&&!m.call("\ufeff")?function(e){return null==e?"":m.call(e)}:function(e){ret
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 21 3d 3d 72 26 26 28 69 3d 21 30 2c 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 79 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 6e 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 29 2c 79 2e 72 65 61 64 Data Ascii: !==r&&(i=!0,y.isFunction(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(y(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},now:function(){return(new Date).getTime()}}),y.read
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 2e 68 61 73 28 72 29 7c 7c 73 2e 70 75 73 68 28 72 29 3a 72 26 26 72 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 69 26 26 74 28 72 29 7d 29 29 7d 28 61 72 67 75 6d 65 6e 74 73 29 2c 74 3f 69 3d 73 2e 6c 65 6e 67 74 68 3a 6e 26 26 28 61 3d 72 2c 6c 28 6e 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 26 26 79 2e 65 61 63 68 28 61 72 67 75 6d 65 6e 74 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3b 28 72 3d 79 2e 69 6e 41 72 72 61 79 28 6e 2c 73 2c 72 29 29 3e 2d 31 3b 29 73 2e 73 70 6c 69 63 65 28 72 2c 31 29 2c 74 26 26 28 72 3c 3d 69 26 26 69 2d 2d 2c 72 3c 3d 6f 26 26 6f 2d 2d 29 7d 29 29 2c 74 68 69 73 7d 2c 68 61 73 3a 66 75 Data Ascii: .has(r)\|\|s.push(r):r&&r.length&&"string"!==i&&t(r)}))}(arguments),t?i=s.length:n&&(a=r,l(n))}return this},remove:function(){return s&&y.each(arguments,(function(e,n){for(var r;(r=y.inArray(n,s,r))>-1;)s.splice(r,1),t&&(r<=i&&i--,r<=o&&o--)})),this},has:fu
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 3f 79 2e 65 78 74 65 6e 64 28 65 2c 72 29 3a 72 7d 7d 2c 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 72 2e 70 69 70 65 3d 72 2e 74 68 65 6e 2c 79 2e 65 61 63 68 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 61 3d 6f 5b 32 5d 2c 73 3d 6f 5b 33 5d 3b 72 5b 6f 5b 31 5d 5d 3d 61 2e 61 64 64 2c 73 26 26 61 2e 61 64 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 73 7d 29 2c 74 5b 31 5e 65 5d 5b 32 5d 2e 64 69 73 61 62 6c 65 2c 74 5b 32 5d 5b 32 5d 2e 6c 6f 63 6b 29 2c 69 5b 6f 5b 30 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 5b 6f 5b 30 5d 2b 22 57 69 74 68 22 5d 28 74 68 69 73 3d 3d 3d 69 3f 72 3a 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 7d 2c 69 5b 6f 5b 30 5d 2b 22 Data Ascii: eturn null!=e?y.extend(e,r):r}},i={};return r.pipe=r.then,y.each(t,(function(e,o){var a=o[2],s=o[3];r[o[1]]=a.add,s&&a.add((function(){n=s}),t[1^e][2].disable,t[2][2].lock),i[o[0]]=function(){return i[o[0]+"With"](this===i?r:this,arguments),this},i[o[0]+"
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 73 42 79 54 61 67 4e 61 6d 65 28 22 6c 69 6e 6b 22 29 2e 6c 65 6e 67 74 68 2c 73 74 79 6c 65 3a 2f 74 6f 70 2f 2e 74 65 73 74 28 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 29 2c 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3a 22 2f 61 22 3d 3d 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 2c 6f 70 61 63 69 74 79 3a 2f 5e 30 2e 35 2f 2e 74 65 73 74 28 72 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 2c 63 73 73 46 6c 6f 61 74 3a 21 21 72 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 63 68 65 63 6b 4f 6e 3a 21 21 6f 2e 76 61 6c 75 65 2c 6f 70 74 53 65 6c 65 63 74 65 64 3a 75 2e 73 65 6c 65 63 74 65 64 2c 65 6e 63 74 79 70 65 3a 21 21 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 2e 65 6e Data Ascii: sByTagName("link").length,style:/top/.test(r.getAttribute("style")),hrefNormalized:"/a"===r.getAttribute("href"),opacity:/^0.5/.test(r.style.opacity),cssFloat:!!r.style.cssFloat,checkOn:!!o.value,optSelected:u.selected,enctype:!!i.createElement("form").en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49914	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:23 UTC	650	OUT	GET /wp-content/themes/bsdstarter/favicon.ico HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://democrats.org/act/?permalink=update-email-preferences Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:23 UTC	207	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 03 Jul 2024 07:23:23 GMT Content-Type: text/html Content-Length: 548 Connection: close Vary: Accept-Encoding x-rq: jfk1 96 185 443 x-cache: EXPIRED
2024-07-03 07:23:23 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49913	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:23 UTC	909	OUT	GET /includes/js/jquery-min.js HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
2024-07-03 07:23:23 UTC	735	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=604800 via: 1.1 varnish, 1.1 varnish, 1.1 varnish x-timer: S1719401489.651151,VS0,VE3 last-modified: Tue, 25 Jun 2024 18:21:37 GMT etag: W/"667b0ab1-16e5e" expires: Wed, 03 Jul 2024 11:31:28 GMT Age: 121808 x-served-by: cache-iad-kcgs7200113-IAD, cache-iad-kjyo7100168-IAD, cache-lga21983-LGA x-cache: MISS, HIT, MISS x-cache-hits: 0, 1733, 0 vary: Accept-Encoding strict-transport-security: max-age=10 x-cdn-trace-id: 13d1fbb7-5a88-4352-a363-6ad831289e50 alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 89d521426baa19e7-EWR
2024-07-03 07:23:23 UTC	634	IN	Data Raw: 37 63 38 63 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 20 0a 20 77 69 74 68 20 66 69 78 65 73 20 62 61 63 6b 70 6f 72 74 65 64 20 66 6f 72 3a 0a 0a 09 2d 20 43 56 45 20 32 30 31 32 2d 36 37 30 38 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2f 63 6f 6d 6d 69 74 2f 30 35 35 33 31 66 63 34 30 38 30 61 65 32 34 30 37 30 39 33 30 64 31 35 61 65 30 63 65 61 37 61 65 30 35 36 34 35 37 64 0a 09 2d 20 43 56 45 20 32 30 31 35 2d 39 32 35 31 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2f 63 6f 6d 6d 69 74 2f 66 36 30 37 32 39 66 33 39 30 33 64 31 37 39 31 37 64 63 33 35 31 Data Ascii: 7c8c/! jQuery JavaScript Library v1.9.1 with fixes backported for:- CVE 2012-6708: https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d- CVE 2015-9251: https://github.com/jquery/jquery/commit/f60729f3903d17917dc351
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 33 2d 32 2d 34 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 6f 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 61 3d 65 2e 6a 51 75 65 72 79 2c 73 3d 65 2e 24 2c 75 3d 7b 7d 2c 6c 3d 5b 5d 2c 63 3d 6c 2e 63 6f 6e 63 61 74 2c 66 3d 6c 2e 70 75 73 68 2c 64 3d 6c 2e 73 6c 69 63 65 2c 70 3d 6c 2e 69 6e 64 65 78 4f 66 2c 68 3d 75 2e Data Ascii: uery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2013-2-4 */!function(e,t){var n,r,i=e.document,o=e.location,a=e.jQuery,s=e.$,u={},l=[],c=l.concat,f=l.push,d=l.slice,p=l.indexOf,h=u.
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 65 29 29 7c 7c 21 72 5b 31 5d 26 26 74 29 72 65 74 75 72 6e 21 74 7c 7c 74 2e 6a 71 75 65 72 79 3f 28 74 7c 7c 6e 29 2e 66 69 6e 64 28 65 29 3a 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 2e 66 69 6e 64 28 65 29 3b 69 66 28 72 5b 31 5d 29 7b 69 66 28 74 3d 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 79 3f 74 5b 30 5d 3a 74 2c 79 2e 6d 65 72 67 65 28 74 68 69 73 2c 79 2e 70 61 72 73 65 48 54 4d 4c 28 72 5b 31 5d 2c 74 26 26 74 2e 6e 6f 64 65 54 79 70 65 3f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 3a 69 2c 21 30 29 29 2c 54 2e 74 65 73 74 28 72 5b 31 5d 29 26 26 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 29 29 66 6f 72 28 72 20 69 6e 20 74 29 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 68 69 73 5b 72 5d 29 3f 74 68 69 73 5b 72 5d Data Ascii: e))\|\|!r[1]&&t)return!t\|\|t.jquery?(t\|\|n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof y?t[0]:t,y.merge(this,y.parseHTML(r[1],t&&t.nodeType?t.ownerDocument\|\|t:i,!0)),T.test(r[1])&&y.isPlainObject(t))for(r in t)y.isFunction(this[r])?this[r]
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 7d 2c 70 75 73 68 3a 66 2c 73 6f 72 74 3a 5b 5d 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 5b 5d 2e 73 70 6c 69 63 65 7d 2c 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 79 2e 66 6e 2c 79 2e 65 78 74 65 6e 64 3d 79 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 73 3d 32 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 79 2e Data Ascii: s.constructor(null)},push:f,sort:[].sort,splice:[].splice},y.fn.init.prototype=y.fn,y.extend=y.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[1]\|\|{},s=2),"object"==typeof a\|\|y.
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 21 67 2e 63 61 6c 6c 28 65 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 67 2e 63 61 6c 6c 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 67 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 70 61 72 Data Ascii: !g.call(e,"constructor")&&!g.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(e){return!1}var t;for(t in e);return void 0===t\|\|g.call(e,t)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},error:function(e){throw new Error(e)},par
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 79 28 65 5b 72 5d 2c 6e 29 3b 72 2b 2b 29 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 61 70 70 6c 79 28 65 5b 72 5d 2c 6e 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 6f 29 66 6f 72 28 3b 72 3c 69 26 26 21 31 21 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 3b 72 2b 2b 29 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 72 69 6d 3a 6d 26 26 21 6d 2e 63 61 6c 6c 28 22 5c 75 66 65 66 66 c2 a0 22 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 6d 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: y(e[r],n);r++);else for(r in e)if(!1===t.apply(e[r],n))break}else if(o)for(;r<i&&!1!==t.call(e[r],r,e[r]);r++);else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},trim:m&&!m.call("\ufeff")?function(e){return null==e?"":m.call(e)}:function(e){ret
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 21 3d 3d 72 26 26 28 69 3d 21 30 2c 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 79 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 6e 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 29 2c 79 2e 72 65 61 64 Data Ascii: !==r&&(i=!0,y.isFunction(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(y(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},now:function(){return(new Date).getTime()}}),y.read
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 2e 68 61 73 28 72 29 7c 7c 73 2e 70 75 73 68 28 72 29 3a 72 26 26 72 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 69 26 26 74 28 72 29 7d 29 29 7d 28 61 72 67 75 6d 65 6e 74 73 29 2c 74 3f 69 3d 73 2e 6c 65 6e 67 74 68 3a 6e 26 26 28 61 3d 72 2c 6c 28 6e 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 26 26 79 2e 65 61 63 68 28 61 72 67 75 6d 65 6e 74 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3b 28 72 3d 79 2e 69 6e 41 72 72 61 79 28 6e 2c 73 2c 72 29 29 3e 2d 31 3b 29 73 2e 73 70 6c 69 63 65 28 72 2c 31 29 2c 74 26 26 28 72 3c 3d 69 26 26 69 2d 2d 2c 72 3c 3d 6f 26 26 6f 2d 2d 29 7d 29 29 2c 74 68 69 73 7d 2c 68 61 73 3a 66 75 Data Ascii: .has(r)\|\|s.push(r):r&&r.length&&"string"!==i&&t(r)}))}(arguments),t?i=s.length:n&&(a=r,l(n))}return this},remove:function(){return s&&y.each(arguments,(function(e,n){for(var r;(r=y.inArray(n,s,r))>-1;)s.splice(r,1),t&&(r<=i&&i--,r<=o&&o--)})),this},has:fu
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 3f 79 2e 65 78 74 65 6e 64 28 65 2c 72 29 3a 72 7d 7d 2c 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 72 2e 70 69 70 65 3d 72 2e 74 68 65 6e 2c 79 2e 65 61 63 68 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 61 3d 6f 5b 32 5d 2c 73 3d 6f 5b 33 5d 3b 72 5b 6f 5b 31 5d 5d 3d 61 2e 61 64 64 2c 73 26 26 61 2e 61 64 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 73 7d 29 2c 74 5b 31 5e 65 5d 5b 32 5d 2e 64 69 73 61 62 6c 65 2c 74 5b 32 5d 5b 32 5d 2e 6c 6f 63 6b 29 2c 69 5b 6f 5b 30 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 5b 6f 5b 30 5d 2b 22 57 69 74 68 22 5d 28 74 68 69 73 3d 3d 3d 69 3f 72 3a 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 7d 2c 69 5b 6f 5b 30 5d 2b 22 Data Ascii: eturn null!=e?y.extend(e,r):r}},i={};return r.pipe=r.then,y.each(t,(function(e,o){var a=o[2],s=o[3];r[o[1]]=a.add,s&&a.add((function(){n=s}),t[1^e][2].disable,t[2][2].lock),i[o[0]]=function(){return i[o[0]+"With"](this===i?r:this,arguments),this},i[o[0]+"
2024-07-03 07:23:23 UTC	1369	IN	Data Raw: 73 42 79 54 61 67 4e 61 6d 65 28 22 6c 69 6e 6b 22 29 2e 6c 65 6e 67 74 68 2c 73 74 79 6c 65 3a 2f 74 6f 70 2f 2e 74 65 73 74 28 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 29 2c 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3a 22 2f 61 22 3d 3d 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 2c 6f 70 61 63 69 74 79 3a 2f 5e 30 2e 35 2f 2e 74 65 73 74 28 72 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 2c 63 73 73 46 6c 6f 61 74 3a 21 21 72 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 63 68 65 63 6b 4f 6e 3a 21 21 6f 2e 76 61 6c 75 65 2c 6f 70 74 53 65 6c 65 63 74 65 64 3a 75 2e 73 65 6c 65 63 74 65 64 2c 65 6e 63 74 79 70 65 3a 21 21 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 2e 65 6e Data Ascii: sByTagName("link").length,style:/top/.test(r.getAttribute("style")),hrefNormalized:"/a"===r.getAttribute("href"),opacity:/^0.5/.test(r.style.opacity),cssFloat:!!r.style.cssFloat,checkOn:!!o.value,optSelected:u.selected,enctype:!!i.createElement("form").en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49915	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:24 UTC	665	OUT	GET /wp-content/themes/bsdstarter/assets/fonts/MyFonts/CheltenhamITCProBook.woff2 HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://democrats.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://democrats.org/wp-content/themes/bsdstarter/style.css?m=1717432320g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:24 UTC	397	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:24 GMT Content-Type: application/font-woff2 Content-Length: 36364 Connection: close Last-Modified: Mon, 03 Jun 2024 16:32:00 GMT ETag: "665df000-8e0c" x-rq: jfk1 96 185 443 cache-control: max-age=300, must-revalidate x-cache: HIT Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-07-03 07:23:24 UTC	972	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 8e 0c 00 0b 00 00 00 00 e5 f0 00 00 8d 3a 00 00 00 00 00 00 8d 88 00 00 00 84 00 00 01 03 00 00 00 00 00 00 00 00 0d 81 f4 51 1b f4 14 1c a0 12 06 60 00 8c 28 01 36 02 24 03 8e 2c 04 06 05 a5 00 07 20 1b 2a e5 d7 0e c0 8c b2 03 00 40 5f 35 0f 11 15 ad 1e ce 48 4d ea 21 53 55 55 d5 6b 42 70 f7 aa 1d 00 c2 4f bf f8 d5 6f 7e f7 87 3f fd e5 6f ff f8 d7 7f fe f7 cf c0 71 3d d6 79 3f 80 43 cb a7 88 cd 3f b6 e5 37 e3 c8 ba b0 66 d4 e4 24 aa 69 78 40 7e 43 42 23 43 a7 ab e2 27 95 93 db 4d 44 7e 9e d6 f6 6f cd 0c ee ac 18 eb bc b8 f3 76 86 34 2a 29 a3 08 89 54 c9 5c 76 89 08 11 c9 25 0c 52 7d 48 3c b0 48 03 ac 8a 77 f6 fd c3 ff 79 dc 34 42 80 d0 3c a0 6d ea a1 09 a6 a9 88 cf 4c 19 13 75 d6 52 99 b9 32 11 fd e9 d2 db 1d 4f b6 f9 9e c7 Data Ascii: wOF2OTTO:Q`(6$, @_5HM!SUUkBpOo~?oq=y?C?7f$ix@~CB#C'MD~ov4)T\v%R}H<Hwy4B<mLuR2O
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: 3f 46 af 8a 79 2a 49 a7 a4 b1 e0 1d 01 42 54 48 08 e9 21 13 64 87 3c 50 12 aa 41 63 68 0f 7d 61 34 cc 80 a5 b0 11 f6 c2 69 b8 01 4f e1 23 fc 47 c5 58 98 14 53 63 26 cc 89 05 b0 18 96 c1 ea d8 10 9b 63 5b ec 8c 3d 71 30 8e c2 b1 38 05 67 e1 52 dc 88 bb 71 3f 9e c2 0b 78 09 6f e2 03 7c 86 1f f1 2f 06 13 52 54 8a 49 f1 29 29 65 a4 ec 54 84 4a 53 35 aa 43 8d a8 1d 75 a1 3e 34 9c 26 d3 74 9a 4b 4b 69 23 6d a7 23 74 9a 2e d1 75 ba 4b 8f e9 1d 7d a7 bf 0c 6c 1c 85 e3 71 0a 4e c7 59 39 0f 17 e6 92 5c 9e 6b 71 13 6e c5 1d b8 1b f7 e1 61 3c 96 27 f0 74 9e cb 2b 78 0b ef e3 43 7c 96 2f f3 55 be c3 8f f9 25 7f e1 00 0e 13 91 18 12 47 12 49 0a c9 22 b9 a4 b8 94 93 9a 52 5f 9a 4a 47 e9 2e fd 65 94 4c 93 59 b2 40 56 c8 16 d9 25 c7 e5 9c 5c 95 5b f2 40 9e c9 47 f9 25 01 Data Ascii: ?Fy*IBTH!d<PAch}a4iO#GXSc&c[=q08gRq?xo\|/RTI))eTJS5Cu>4&tKKi#m#t.uK}lqNY9\kqna<'t+xC\|/U%GI"R_JG.eLY@V%\[@G%
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: 4f e5 3e cc fd 92 cf e7 0f cc 1f 91 6f c9 b3 7c 29 7f 5a fe b7 c2 91 85 8e 02 2a bc 58 f8 a2 f0 4f 71 d7 62 65 b1 a3 38 5d bc a8 78 59 f1 d3 e2 57 c5 bf 8b ff 1b 96 d1 6f 2c 19 ca 38 d6 78 d4 78 c5 f8 d8 f8 c2 dc d9 3c d0 6c 37 a5 79 a3 79 97 f9 b6 f9 be f9 a5 b5 8d b5 b3 b5 bb d5 68 b5 5b a3 96 b0 ca d6 09 d6 05 d6 a5 d6 b5 d6 8d d6 6d d6 5d d6 83 d6 63 d6 0b d6 ab d6 37 d6 0f b6 69 6f 6b ef 64 ef 69 d7 da 6d f6 9c ed d9 47 db 67 d8 e7 db 97 db d7 d8 37 d8 f7 db cf da 2f db af da 6f da 9f d8 5f da f6 21 5f 59 60 51 3a 5c 3a 52 fa 9b 74 a2 74 b6 74 81 d4 44 6a 25 75 95 7a 49 03 a5 e1 d2 68 69 82 34 45 9a 2f 55 4b ab a4 75 d2 43 d2 76 69 9f f4 8a f4 96 f4 81 f4 b5 f4 33 67 d8 47 55 78 05 96 04 f2 81 41 d1 4a 4f d1 d0 a2 cc 0b a4 47 a9 fc 4a 75 5e 19 5f 56 Data Ascii: O>o\|)Z*XOqbe8]xYWo,8xx<l7yyh[m]c7iokdimGg7/o_!_Y`Q:\:RtttDj%uzIhi4E/UKuCvi3gGUxAJOGJu^_V
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: a7 53 d9 b8 f0 6f c1 a3 82 63 8b 7d 23 72 23 f8 5d 5b dc 03 93 72 12 76 27 8a da b8 1c 0e f6 e1 38 62 be 31 c4 d6 29 b8 f0 a0 50 90 57 58 40 ea bc ca 82 7d 03 14 3e 2c b3 c8 b2 d7 99 b0 ae 6a b7 ea 13 a4 ad a6 a6 ed e4 41 1f c7 9d a1 41 de 11 82 b6 66 ad 26 98 1b a4 70 b4 9a ee 5b 72 0f 56 f3 ef 69 6c 1d 24 94 8b 46 07 46 ab 18 ab cb cb d1 90 c7 f1 34 34 68 64 14 ab 66 da 2d 2d 1f 13 76 bd bc 60 4f 76 56 81 90 ee 14 b4 c3 df 4b 8b ed c8 bc ad f9 b7 71 e8 85 7f e1 f5 af e1 ff fd 05 93 b8 c0 2c 6a 5d 78 6c a2 1b 6f 48 5f bb f9 e1 5f 98 44 c0 06 b5 40 82 73 70 26 6a e3 18 b4 c5 85 5f 27 f4 9b 0b d3 68 b7 c8 c2 0b 4a 31 30 a3 1a 27 51 10 42 17 a8 29 c7 f7 66 a0 03 7f 11 08 be 75 eb dd f3 c7 cb d1 1b 75 4c 50 c7 61 9a 50 a0 a2 20 94 d6 0e 92 a8 18 e7 9e 6d f2 Data Ascii: Soc}#r#][rv'8b1)PWX@}>,jAAf&p[rVil$FF44hdf--v`OvVKq,j]xloH__D@sp&j_'hJ10'QB)fuuLPaP m
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: a9 70 d4 04 72 47 f9 ce 9d 5b e5 bb a3 81 f9 ee a3 7c 37 54 77 fa 1e d8 37 fc 48 cb 9e 03 06 f5 ec bd 6e e0 26 36 68 e0 e2 45 b3 e7 2c d2 cc 68 3f a8 53 ff 5e 72 70 55 ba 20 04 b5 ac 90 9d 14 14 85 9f e9 ea 5a c4 67 a4 28 3c 49 57 08 2d 09 95 d0 a7 6c 3a 09 93 c9 4a 17 58 c9 9a d2 ba 24 20 d5 9d f5 eb d9 e3 7d 6a 9d 57 cf 5f 30 7b f6 7c cd 98 41 93 07 0c a2 47 82 b7 53 07 4f 1b b5 60 4d 10 48 41 03 95 eb 76 af dc ae 46 f2 6d 46 8b b5 af 20 17 94 dd 3b af ac 1c a0 01 54 cf 22 80 4f bd 46 06 3f 3e 54 75 de 41 7b 84 6e 6e a2 c7 e1 aa de f4 18 b7 bb 73 37 16 4e 20 e4 c5 76 9d 40 da 5b f8 26 98 ca b4 ee 70 8d 06 a7 d0 f3 42 b5 dc 05 d7 7b 5d a7 c0 43 ec 05 a1 05 7f f0 32 76 05 9d c7 af f0 42 73 b2 06 50 eb c7 d8 2c b4 1c 47 9b 25 a9 68 f9 63 42 b5 92 59 5e b5 Data Ascii: prG[\|7Tw7Hn&6hE,h?S^rpU Zg(<IW-l:JX$ }jW_0{\|AGSO`MHAvFmF ;T"OF?>TuA{nns7N v@[&pB{]C2vBsP,G%hcBY^
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: b7 9a ee 35 0d 33 3d 68 fa d9 4c c7 6c a6 59 9e 59 b9 59 8b d9 49 b3 61 b3 eb 66 8f cc 5e 98 bd 33 ff c6 7c 86 f9 1c f3 6d e6 bb cd fd cd 15 e6 a5 e6 b5 e6 1d e6 37 cd 1f 9a bf 36 ff 6c fe 3f 0b de 62 85 85 9e c5 6e 0b 5b 0b 7f 8b 03 16 3f 5a 94 5b 74 58 0c 5b 4c 58 3c b5 f8 c5 e2 39 62 33 87 c4 bf 86 24 99 43 e2 bc 21 69 a6 96 98 a1 b6 d1 64 c8 20 07 5d a2 91 1e 14 62 f0 46 86 66 a1 f3 34 e8 41 21 a6 29 c0 35 32 0f 1a f4 a0 10 f4 50 21 a6 91 89 c3 34 e8 a1 42 a4 87 0a 31 52 a3 43 6a d6 26 00 29 82 42 77 10 c8 2d 3d d4 38 4c 07 5b 1a 24 27 e1 7a 05 d3 93 72 ce d5 35 c5 d9 97 df 7f 12 5d 47 12 86 fa f5 09 9a 1b 4c 90 a8 55 ed ad a8 51 e8 8e 3c bf ff 9c 8a 04 5c 74 a7 eb c0 14 cb 2e ce 6a cc 63 32 89 88 ec 54 be 0e 99 62 e0 fc 23 5d 07 a6 58 76 71 56 63 1e Data Ascii: 53=hLlYYYIaf^3\|m76l?bn[?Z[tX[LX<9b3$C!id ]bFf4A!)52P!4B1RCj&)Bw-=8L[$'zr5]GLUQ<\t.jc2Tb#]XvqVc
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: 0e c2 34 a8 88 e6 c6 81 74 1e a6 c6 03 08 ea 57 98 2a 5e 0e 26 c8 3a d1 42 d2 23 5a 48 c5 d8 3f 68 a4 86 c5 a0 86 c5 d8 04 ae b1 40 b6 98 25 2e 5a 20 5b 8c 6c e2 7a c0 e2 38 a7 b1 00 a3 e3 1c 59 27 5a 48 86 c4 4d d2 21 f1 07 1a 5e a2 c5 e8 25 5a 8c 19 e1 e2 26 b0 c5 7e c6 35 9b c0 16 23 91 53 02 90 e2 ad 93 ba dd 40 c4 01 b9 e9 e4 63 98 42 fd 05 fe 60 4d 77 e1 b0 19 6c ca 61 09 f3 7e e9 d5 a5 06 4b f7 ad f7 af 0b 3b d5 d6 50 df c6 f7 fb a6 55 33 2d fd a5 f5 13 27 76 5a f2 68 1e 22 c2 11 cd 38 e0 d4 9d 67 68 96 0d 01 46 ca 6e 98 db ed df 0b 43 67 60 56 b7 6e eb 63 20 9e c3 b6 eb e0 d2 4d 0d 27 8b 5f 81 27 ed 75 60 b8 e3 f9 49 d0 7d db 5d e1 11 6a e1 8a d6 6c 14 a0 1a 7d 4b fb 99 6f 89 db c8 22 2b 84 c3 12 30 05 67 98 09 3c d8 80 31 fc 80 a6 a0 35 02 f5 4b Data Ascii: 4tW*^&:B#ZH?h@%.Z [lz8Y'ZHM!^%Z&~5#S@cB`Mwla~K;PU3-'vZh"8ghFnCg`Vnc M'_'u`I}]jl}Ko"+0g<15K
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: 64 a7 d6 41 0a 70 a4 c6 a1 17 ae d2 30 07 05 62 65 f1 f9 29 a9 e1 8e b5 81 8c 12 52 2a f1 ee 08 7f cf 1b 3c f2 84 9f e1 07 70 c6 a8 37 e3 7f 77 b9 9e 66 2a 91 a3 12 f7 1d ec f4 66 12 52 94 e1 5e fc 7a f4 1d c2 60 3b 96 50 7b b8 a4 a8 fe b4 f2 04 53 89 e2 95 b8 4f d3 80 ca 84 07 63 54 83 76 a2 12 8c 1a b7 59 13 35 b8 8f 51 e2 d4 1b b0 ab 94 75 da c7 9c 62 ca 8a 2b ca ab 79 b2 e1 38 01 cd ef 5f c0 2e e9 12 82 dc 4f e8 96 89 35 54 20 55 06 74 14 41 b5 c8 23 73 4b e2 05 64 58 85 df 9f 03 38 f8 b2 b0 5a a6 59 a8 41 98 97 58 03 fa 4a 5c ef 4f 44 a1 bd 2c f2 92 89 0b c4 2f d8 19 9c 44 49 c8 bc 99 43 5e 4a 0e 35 ab fd 14 92 e3 a2 b6 f4 b8 da 8f 86 8b ff 9b 87 8d cb d0 c5 2f f3 30 12 25 21 f3 66 22 8a 40 ce 31 32 07 98 76 6b 31 f3 af 29 be 18 4d bb e5 c0 c4 80 33 Data Ascii: dAp0be)R<p7wffR^z`;P{SOcTvY5Qub+y8_.O5T UtA#sKdX8ZYAXJ\OD,/DIC^J5/0%!f"@12vk1)M3
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: 35 35 0e 5d 30 44 1b bf c2 12 2b d3 0b 0b ea ce ca bb 99 4a 14 a7 c4 fd aa 06 ee ae e0 01 47 f3 d1 57 88 c5 8c 36 47 9c f1 65 94 38 f5 06 6c 2a 65 9d 1e ca 26 a6 bc a8 ac a5 93 bf 72 e7 e7 4d 58 65 4c 51 42 52 d4 9e 8a 00 46 89 53 e3 90 50 29 eb 8e 0c f6 3d cf a3 39 60 fb 01 70 8c 7a 73 ef 59 95 5f 17 53 89 ac 95 b8 df 70 43 28 93 9c 9a 74 20 9e 27 0f 71 92 6c d8 09 36 b0 5b ba 98 20 f3 09 49 a7 38 4b aa c7 91 27 e5 66 ff 48 fc 75 2b ff a1 14 72 01 b3 e2 34 34 ca f9 92 20 79 3d 26 7d 8d 72 e8 b1 2f 09 a6 32 ef fb ae 1f 09 58 fc 30 ff 96 14 16 ef b4 22 c0 fc 42 ee 05 c9 5d 51 5b fa 37 18 d3 e5 cd 4d 9d 1d 59 8d 3f 36 ef 6f 3a a8 9d d8 dc 7c b0 85 1d 6e eb ef ab 13 a2 5a b1 88 c4 c8 80 60 36 2a a2 aa 2c 52 28 8f 88 28 0d 67 9d 42 dd bd 63 05 52 b3 56 c4 1b Data Ascii: 55]0D+JGW6Ge8le&rMXeLQBRFSP)=9`pzsY_SpC(t 'ql6[ I8K'fHu+r44 y=&}r/2X0"B]Q[7MY?6o:\|nZ`6,R((gBcRV
2024-07-03 07:23:24 UTC	1369	IN	Data Raw: a9 8f 30 3a 46 e7 64 15 e5 30 0d 69 e5 69 25 7c 6a 69 6a d1 31 a6 30 bf a0 88 6f 1f 76 57 b1 cd 75 8d cd cd d1 35 51 82 97 87 ef 3e 36 e5 50 6e 49 59 49 71 c9 31 81 12 2b ea 73 4a af 31 d7 32 4a f7 d7 f3 d4 c7 e4 63 c9 c5 65 4c 49 41 6e 09 df 3a e4 d1 cf 76 54 d6 b5 b4 c4 d6 45 08 5e 2e 3e c1 6c 4a 5a 6e 89 d0 7e fa e4 10 d3 16 db 12 1a 1a 1b 1e ca bb 9c f6 0b 61 92 d3 8e a4 f0 c1 2e bd 5e 6c 44 6c 6c 78 78 65 6c 87 d0 3f a4 6a 65 4b 0a 8e 24 1f 4c 4e 49 4e 10 28 71 7f 4c 46 92 39 63 9e 93 54 11 c3 53 1f 4b 12 4a 52 0e 32 c9 87 8e a4 f0 fb 3c 7a bc d8 a8 68 79 44 44 5d 54 b3 a0 1a ee 6f 67 8b f2 0f a5 25 a4 a6 a6 26 09 69 c9 69 89 d1 19 59 87 32 98 6a d4 80 9d 95 91 81 1c da d2 27 ea 77 c0 83 3e 49 27 68 3f 1d b9 33 22 15 d7 89 ff a3 ef 8f d8 0e 32 95 a8 Data Ascii: 0:Fd0ii%\|jij10ovWu5Q>6PnIYIq1+sJ12JceLIAn:vTE^.>lJZn~a.^lDllxxel?jeK$LNIN(qLF9cTSKJR2<zhyDD]Tog%&iiY2j'w>I'h?3"2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49917	192.0.66.105	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:25 UTC	673	OUT	GET /wp-content/uploads/2022/03/DNC-Logo_D-Lock_Medium-Blue.png?w=32 HTTP/1.1 Host: democrats.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://democrats.org/act/?permalink=update-email-preferences Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 07:23:25 UTC	337	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 03 Jul 2024 07:23:25 GMT Content-Type: image/webp Content-Length: 704 Connection: close Last-Modified: Sat, 18 May 2024 21:44:46 GMT ETag: "c245bf6090f46d95" Vary: Accept x-rq: jfk1 98 228 443 cache-control: max-age=31536000 accept-ranges: bytes x-cache: HIT Accept-Ranges: bytes
2024-07-03 07:23:25 UTC	704	IN	Data Raw: 52 49 46 46 b8 02 00 00 57 45 42 50 56 50 38 4c ac 02 00 00 2f 1f c0 07 10 3f e5 26 92 24 47 ca 3e f9 8a cd f3 47 f4 ee bb 77 2b 41 84 db 48 92 24 25 7b ef 3f 34 24 3c c4 50 0c 42 fe db 61 23 49 8e 72 bb 3f 67 f0 1e 02 20 35 12 22 4c 0f ef dd fc 1d d9 00 45 61 74 08 06 51 f3 bd 03 7b 5c d2 b2 20 03 9b 8d 84 d8 70 48 bd 12 26 29 08 c9 95 e4 82 12 00 1e 82 12 e8 65 15 93 4f 7e fe fe 49 4a 6a ea cb b5 34 f7 e7 dd da 04 03 82 58 48 48 fd 92 1d 97 22 42 49 40 40 c0 03 82 26 86 88 92 74 5b 38 1c 40 08 00 cf 1c 45 51 3c c0 a1 6a 00 ca 4a 22 b1 10 48 0d c9 d5 87 32 24 02 c9 21 b5 fa 62 28 14 08 c4 87 63 11 4e 03 28 49 28 1b 05 8a 8c 25 03 d3 d3 2c aa 13 91 d2 30 00 94 4e 90 7c b1 00 72 0b 5e 3d 73 d0 29 94 9e 7d a1 84 d0 12 11 44 0b d7 ed be ea 56 7c e2 8f 02 f0 Data Ascii: RIFFWEBPVP8L/?&$G>Gw+AH$%{?4$<PBa#Ir?g 5"LEatQ{\ pH&)eO~IJj4XHH"BI@@&t[8@EQ<jJ"H2$!b(cN(I(%,0N\|r^=s)}DV\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49916	104.22.6.107	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:25 UTC	973	OUT	GET /includes/js/can-embed.js?v=54 HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://democrats.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
2024-07-03 07:23:25 UTC	733	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:25 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close via: 1.1 varnish, 1.1 varnish, 1.1 varnish etag: W/"667c9c5d-2955c" expires: Thu, 04 Jul 2024 16:53:49 GMT Cache-Control: max-age=604800 x-timer: S1719507229.354983,VS0,VE4 last-modified: Wed, 26 Jun 2024 22:55:25 GMT Age: 121810 x-served-by: cache-iad-kcgs7200090-IAD, cache-iad-kcgs7200156-IAD, cache-lga21964-LGA x-cache: MISS, HIT, MISS x-cache-hits: 0, 41, 0 vary: Accept-Encoding strict-transport-security: max-age=10 x-cdn-trace-id: ff87432c-5713-4dff-a422-00dae7095c16 alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 89d5214acff5c334-EWR
2024-07-03 07:23:25 UTC	636	IN	Data Raw: 37 63 38 65 0d 0a 2f 2f 67 6c 6f 62 61 6c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 76 61 72 69 61 62 6c 65 0a 61 6e 5f 6a 61 76 61 73 63 72 69 70 74 5f 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 0a 09 77 65 65 6b 6c 79 3a 20 22 57 65 65 6b 6c 79 22 2c 0a 09 6d 6f 6e 74 68 6c 79 3a 20 22 4d 6f 6e 74 68 6c 79 22 2c 0a 09 65 76 65 72 79 5f 33 5f 6d 6f 6e 74 68 73 3a 20 22 45 76 65 72 79 20 33 20 4d 6f 6e 74 68 73 22 2c 0a 09 79 65 61 72 6c 79 3a 20 22 59 65 61 72 6c 79 22 2c 0a 09 73 65 63 75 72 65 6c 79 5f 70 75 72 63 68 61 73 65 5f 74 69 63 6b 65 74 73 3a 20 22 53 65 63 75 72 65 6c 79 20 50 75 72 63 68 61 73 65 20 54 69 63 6b 65 74 73 22 2c 0a 09 73 65 63 75 72 65 6c 79 5f 63 6f 6e 74 72 69 62 75 74 65 5f 6e 6f 77 3a 20 22 53 65 63 75 72 65 6c 79 20 43 6f Data Ascii: 7c8e//global translation variablean_javascript_translation = {weekly: "Weekly",monthly: "Monthly",every_3_months: "Every 3 Months",yearly: "Yearly",securely_purchase_tickets: "Securely Purchase Tickets",securely_contribute_now: "Securely Co
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 72 6f 72 22 2c 0a 09 65 72 72 6f 72 73 3a 20 22 65 72 72 6f 72 73 22 2c 0a 09 70 72 6f 63 65 73 73 69 6e 67 3a 20 22 50 72 6f 63 65 73 73 69 6e 67 22 2c 0a 09 79 6f 75 72 5f 63 61 72 64 5f 68 61 73 5f 6e 6f 74 5f 62 65 65 6e 5f 63 68 61 72 67 65 64 5f 70 6c 65 61 73 65 5f 74 72 79 5f 61 67 61 69 6e 5f 6f 72 3a 20 22 59 6f 75 72 20 63 61 72 64 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 63 68 61 72 67 65 64 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6f 72 22 2c 0a 09 63 6f 6e 74 61 63 74 5f 75 73 3a 20 22 63 6f 6e 74 61 63 74 20 75 73 22 2c 0a 09 69 66 5f 69 74 5f 6b 65 65 70 73 5f 68 61 70 70 65 6e 69 6e 67 3a 20 22 69 66 20 69 74 20 6b 65 65 70 73 20 68 61 70 70 65 6e 69 6e 67 22 2c 0a 09 74 68 65 72 65 5f 77 61 73 5f 61 6e 5f 65 72 72 6f 72 Data Ascii: ror",errors: "errors",processing: "Processing",your_card_has_not_been_charged_please_try_again_or: "Your card has not been charged. Please try again or",contact_us: "contact us",if_it_keeps_happening: "if it keeps happening",there_was_an_error
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 6d 62 65 64 5f 6c 6f 61 64 65 64 27 29 3b 0a 09 09 09 7d 2c 20 35 30 30 29 3b 0a 2a 2f 0a 0a 0a 0a 0a 09 09 09 2f 2a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 22 63 61 6e 5f 65 6d 62 65 64 5f 6c 6f 61 64 65 64 22 29 3b 0a 0a 09 09 09 24 28 27 23 27 20 2b 20 77 69 64 67 65 74 5f 69 64 29 2e 6f 6e 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 24 28 74 68 69 73 29 29 3b 0a 09 09 09 09 24 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 28 20 22 63 61 6e 5f 65 6d 62 65 64 5f 6c 6f 61 64 65 64 22 2c 20 5b 20 24 28 74 68 69 73 29 20 5d 20 29 3b 0a 09 09 09 7d 29 3b 0a 2a 2f 0a 0a 09 09 09 2f 2f 61 66 66 69 72 6d 61 74 69 76 65 20 6f 70 74 20 69 6e 20 72 65 71 75 69 72 65 64 20 63 Data Ascii: mbed_loaded');}, 500);//$(document).trigger("can_embed_loaded");$('#' + widget_id).on('load', function() {console.log($(this));$(this).trigger( "can_embed_loaded", [ $(this) ] );});*///affirmative opt in required c
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 74 65 78 74 61 72 65 61 27 29 2e 6e 6f 74 28 27 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 20 69 6e 70 75 74 2c 20 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 2c 20 2e 65 64 69 74 61 62 6c 65 5f 62 75 74 74 6f 6e 5f 74 65 78 74 2c 20 2e 6a 73 2d 73 65 61 72 63 68 2c 20 6c 61 62 65 6c 20 2b 20 69 6e 70 75 74 2c 20 6c 61 62 65 6c 20 2b 20 74 65 78 74 61 72 65 61 2c 20 74 65 78 74 61 72 65 61 2e 6a 73 2d 72 65 64 61 63 74 6f 72 2c 20 69 6e 70 75 74 2e 6a 73 2d 6f 74 68 65 72 5f 69 6e 70 75 74 2c 20 69 6e 70 75 74 2e 6f 74 68 65 72 5f 69 6e 70 75 74 2c 20 2e 6a 73 2d 6e 6f 5f 66 6c 6f 61 74 6c 61 62 65 6c 2c 20 23 72 65 70 Data Ascii: t[type=password], input[type=number], textarea').not('.select2-drop input, .select2-container input, .editable_button_text, .js-search, label + input, label + textarea, textarea.js-redactor, input.js-other_input, input.other_input, .js-no_floatlabel, #rep
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 74 65 5f 61 75 74 6f 5f 6d 6f 64 61 6c 20 69 6e 70 75 74 29 2c 20 74 65 78 74 61 72 65 61 3a 6e 6f 74 28 2e 72 65 64 61 63 74 6f 72 2d 62 6f 78 20 74 65 78 74 61 72 65 61 2c 20 2e 6a 73 2d 6e 6f 5f 66 6c 6f 61 74 6c 61 62 65 6c 2c 20 23 72 65 70 6c 79 48 69 64 64 65 6e 46 6f 72 6d 20 74 65 78 74 61 72 65 61 29 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 09 09 20 20 20 20 69 66 20 28 21 24 28 74 68 69 73 29 2e 64 61 74 61 28 29 2e 70 6c 75 67 69 6e 5f 66 6c 6f 61 74 6c 61 62 65 6c 20 26 26 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 70 6c 61 63 65 68 6f 6c 64 65 72 27 29 20 21 3d 20 27 27 20 26 26 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 70 6c 61 63 65 68 6f 6c 64 65 72 27 29 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 0a 09 09 09 Data Ascii: te_auto_modal input), textarea:not(.redactor-box textarea, .js-no_floatlabel, #replyHiddenForm textarea)', function(e) { if (!$(this).data().plugin_floatlabel && $(this).attr('placeholder') != '' && $(this).attr('placeholder') != undefined &&
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 66 28 74 65 6d 70 5f 65 6d 62 65 64 5f 77 69 64 74 68 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 09 09 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 65 6d 70 5f 65 6d 62 65 64 5f 77 69 64 74 68 29 3b 0a 09 09 09 09 7d 0a 2a 2f 0a 09 09 09 09 69 66 20 28 74 79 70 65 6f 66 28 74 65 6d 70 5f 65 6d 62 65 64 5f 77 69 64 74 68 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 65 6d 70 5f 65 6d 62 65 64 5f 77 69 64 74 68 20 21 3d 20 66 61 6c 73 65 29 20 7b 0a 09 09 09 09 09 76 61 72 20 77 69 64 74 68 20 3d 20 74 65 6d 70 5f 65 6d 62 65 64 5f 77 69 64 74 68 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 76 61 72 20 77 69 64 74 68 20 3d 20 70 61 72 65 6e 74 5f 73 65 63 74 69 6f 6e 2e 77 69 64 74 68 28 29 3b 0a 09 Data Ascii: f(temp_embed_width) !== 'undefined') {console.log(temp_embed_width);}*/if (typeof(temp_embed_width) !== 'undefined' && temp_embed_width != false) {var width = temp_embed_width;} else {var width = parent_section.width();
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 22 20 23 65 6d 62 65 64 5f 6f 70 74 69 6f 6e 73 22 29 2e 73 6c 69 64 65 44 6f 77 6e 28 32 30 30 29 3b 0a 09 09 20 20 20 20 20 20 20 20 24 28 22 23 22 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 22 20 23 65 6d 62 65 64 5f 74 6f 67 67 6c 65 2d 63 6c 6f 73 65 22 29 2e 73 68 6f 77 28 29 3b 0a 09 09 20 20 20 20 20 20 20 20 24 28 22 23 22 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 22 20 23 65 6d 62 65 64 5f 74 6f 67 67 6c 65 2d 6f 70 65 6e 22 29 2e 68 69 64 65 28 29 3b 0a 09 09 20 20 20 20 7d 29 3b 0a 09 09 20 20 20 20 24 28 22 23 22 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 22 20 23 65 6d 62 65 64 5f 74 6f 67 67 6c 65 2d 63 6c 6f 73 65 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 20 Data Ascii: + widget_id + " #embed_options").slideDown(200); $("#" + widget_id + " #embed_toggle-close").show(); $("#" + widget_id + " #embed_toggle-open").hide(); }); $("#" + widget_id + " #embed_toggle-close").click(function() {
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 20 3d 3d 20 27 27 29 20 7b 0a 09 09 09 09 77 69 6e 64 6f 77 5b 77 69 64 67 65 74 5f 69 64 20 2b 20 27 5f 64 65 74 65 63 74 65 64 5f 63 6f 75 6e 74 72 79 27 5d 20 3d 20 27 55 53 27 3b 0a 09 09 09 7d 0a 09 09 09 69 66 20 28 77 69 6e 64 6f 77 5b 77 69 64 67 65 74 5f 69 64 20 2b 20 27 5f 64 65 74 65 63 74 65 64 5f 63 6f 75 6e 74 72 79 27 5d 20 21 3d 20 27 55 53 27 20 26 26 20 28 24 28 27 23 27 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 27 2e 6a 73 2d 74 69 63 6b 65 74 65 64 5f 65 76 65 6e 74 5f 66 6f 72 6d 2c 20 27 20 2b 20 27 23 27 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 27 2e 6a 73 2d 64 6f 6e 61 74 65 5f 66 6f 72 6d 27 29 2e 6c 65 6e 67 74 68 20 7c 7c 20 24 28 27 23 27 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 27 20 2e 6a 73 2d 74 69 63 6b 65 74 Data Ascii: == '') {window[widget_id + '_detected_country'] = 'US';}if (window[widget_id + '_detected_country'] != 'US' && ($('#' + widget_id + '.js-ticketed_event_form, ' + '#' + widget_id + '.js-donate_form').length \|\| $('#' + widget_id + ' .js-ticket
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 61 6c 5f 6c 69 6e 6b 5f 63 6f 75 6e 74 72 79 27 29 2e 74 65 78 74 28 77 69 6e 64 6f 77 5b 77 69 64 67 65 74 5f 69 64 20 2b 20 27 5f 64 65 74 65 63 74 65 64 5f 63 6f 75 6e 74 72 79 27 5d 29 3b 0a 09 09 09 7d 0a 09 09 09 09 0a 09 09 09 09 2f 2a 20 68 69 64 65 20 7a 69 70 20 63 6f 64 65 20 2a 2f 0a 09 09 09 09 69 66 20 28 24 28 27 23 27 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 27 20 2e 63 6f 75 6e 74 72 79 5f 64 72 6f 70 5f 77 72 61 70 20 73 65 6c 65 63 74 27 29 2e 76 61 6c 28 29 20 3d 3d 20 27 49 45 27 20 7c 7c 20 24 28 27 23 27 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 27 20 2e 63 6f 75 6e 74 72 79 5f 64 72 6f 70 5f 77 72 61 70 20 73 65 6c 65 63 74 27 29 2e 76 61 6c 28 29 20 3d 3d 20 27 49 72 65 6c 61 6e 64 27 29 20 7b 0a 09 09 09 09 09 24 28 27 23 Data Ascii: al_link_country').text(window[widget_id + '_detected_country']);}/* hide zip code */if ($('#' + widget_id + ' .country_drop_wrap select').val() == 'IE' \|\| $('#' + widget_id + ' .country_drop_wrap select').val() == 'Ireland') {$('#
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 09 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 27 2e 63 6f 75 6e 74 72 79 5f 64 72 6f 70 5f 77 72 61 70 20 73 65 6c 65 63 74 27 29 2e 61 64 64 43 6c 61 73 73 28 27 72 65 71 75 69 72 65 64 27 29 3b 0a 09 09 20 20 20 20 7d 29 3b 0a 0a 09 09 20 20 20 20 24 28 27 23 27 20 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 20 27 20 2e 63 6f 75 6e 74 72 79 5f 64 72 6f 70 5f 77 72 61 70 20 73 65 6c 65 63 74 27 29 2e 6f 6e 28 27 63 68 61 6e 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 69 66 20 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 77 69 64 67 65 74 5f 69 64 20 2b 20 27 5f 64 65 74 65 63 74 65 64 5f 63 6f 75 6e 74 72 79 27 5d 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 Data Ascii: $(this).parent().parent().find('.country_drop_wrap select').addClass('required'); }); $('#' + widget_id + ' .country_drop_wrap select').on('change', function() {if (typeof(window[widget_id + '_detected_country']) == 'undefined'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49919	172.67.7.122	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 07:23:25 UTC	1030	OUT	GET /forms/unsubscribe-4/ HTTP/1.1 Host: actionnetwork.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _can2_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIhNwYXJlbnRfcmVmZXJlcgY7AEYiG2h0dHBzOi8vZGVtb2NyYXRzLm9yZy9JIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--2bf63fbf0db948d88f89aa30083e78765094c813
2024-07-03 07:23:25 UTC	1131	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 07:23:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK set-cookie: _can2_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFVEkiJWI1YzdjYjkyNTI0OWI5N2Y3ZTI1YzBkZmIwNWY2ZDkzBjsAVEkiEWh0dHBfcmVmZXJlcgY7AEYiEmRlbW9jcmF0cy5vcmdJIg1sb2NhdGlvbgY7AEYiB1VTSSIQX2NzcmZfdG9rZW4GOwBGSSIxdlpRck9MaUZEQzBTdFlwSGw1WkJobWZFeEk5UW1WdCtHdTN4aDNRU1lTND0GOwBG--bcfb2d752fca70be99ebdfdbb8b77a7456be3e12; path=/; secure; HttpOnly; SameSite=None x-ua-compatible: IE=Edge,chrome=1 Cache-Control: must-revalidate, private, max-age=0 x-request-id: 3a853d4be3f6920232b535c2bb625d3f x-timer: S1719991406.567770,VS0,VE57 via: 1.1 varnish, 1.1 varnish, 1.1 varnish x-runtime: 0.052510 x-rack-cache: miss x-served-by: cache-iad-kcgs7200028-IAD, cache-iad-kcgs7200028-IAD, cache-lga21964-LGA x-cache: MISS, MISS, MISS x-cache-hits: 0, 0, 0 vary: Accept-Encoding strict-transport-security: max-age=10 x-cdn-trace-id: 2cdb9891-ffed-412c-98bb-0329d42f7b2e alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89d5214c8daf0f77-EWR
2024-07-03 07:23:25 UTC	238	IN	Data Raw: 31 62 33 65 0d 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: 1b3e<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head><meta name="viewport" content="width=device-width, init
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6a 6f 65 62 69 64 65 6e 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 34 2f 32 34 30 34 32 34 5f 53 6f 63 69 61 6c 53 68 61 72 65 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 Data Ascii: ial-scale=1, maximum-scale=1, user-scalable=0" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta property="og:image" content="https://joebiden.com/wp-content/uploads/2023/04/240424_SocialShare.png"><link rel="icon" type="imag
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 2e 67 65 6e 5f 77 72 61 70 70 65 72 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2c 0d 0a 20 20 20 20 20 20 2e 63 61 6e 5f 65 6d 62 65 64 2d 68 74 6d 6c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2c 0d 0a 20 20 20 20 20 20 2e 67 65 6e 5f 77 72 61 70 70 65 72 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 2e 63 61 6e 5f 65 6d 62 65 64 2d 68 74 6d 6c 20 23 63 61 6e 5f 65 6d 62 65 64 5f 66 6f 72 6d 20 2e 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 2e 67 65 6e 5f 77 72 61 70 70 65 72 20 23 64 6f 6e 61 74 65 5f 61 75 74 6f 5f 6d 6f 64 61 6c 20 69 6e 70 75 74 5b Data Ascii: .gen_wrapper #can_embed_form input[type="submit"], .can_embed-html #can_embed_form input[type="submit"], .gen_wrapper #can_embed_form .button, .can_embed-html #can_embed_form .button, .gen_wrapper #donate_auto_modal input[
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 20 20 2e 67 65 6e 5f 77 72 61 70 70 65 72 20 61 2c 0d 0a 20 20 20 20 20 20 23 63 61 6e 5f 66 75 6e 64 72 61 69 73 69 6e 67 5f 77 69 64 67 65 74 20 61 2c 0d 0a 20 20 20 20 20 20 2e 74 69 63 6b 65 74 65 64 5f 65 76 65 6e 74 20 61 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 23 46 33 32 46 33 38 3b 20 2f 2a 20 5b 54 48 49 53 20 49 53 20 47 45 4e 45 52 41 54 45 44 20 46 52 4f 4d 20 54 48 45 20 2a 53 45 43 4f 4e 44 2a 20 43 4f 4c 4f 52 20 50 49 43 4b 45 52 20 4f 50 54 49 4f 4e 5d 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 2e 67 65 6e 5f 77 72 61 70 70 65 72 20 61 3a 68 6f 76 65 72 2c 0d 0a 20 20 20 20 20 20 23 63 61 Data Ascii: .gen_wrapper a, #can_fundraising_widget a, .ticketed_event a { color:#F32F38; /* [THIS IS GENERATED FROM THE SECOND COLOR PICKER OPTION] */ text-decoration: none; } .gen_wrapper a:hover, #ca
2024-07-03 07:23:25 UTC	1369	IN	Data Raw: 6f 70 65 72 74 79 3d 22 6f 67 3a 66 62 3a 61 70 70 5f 69 64 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 50 6c 65 61 73 65 20 64 6f 6e 26 23 78 32 37 3b 74 20 67 6f 21 22 20 6e 61 6d 65 3d 22 61 63 74 69 6f 6e 5f 74 69 74 6c 65 22 20 2f 3e 3c 74 69 74 6c 65 3e 50 6c 65 61 73 65 20 64 6f 6e 27 74 20 67 6f 21 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 40 74 68 65 61 63 74 69 6f 6e 6e 65 74 22 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 Data Ascii: operty="og:fb:app_id" /><meta content="Please don't go!" name="action_title" /><title>Please don't go!</title><meta content="@theactionnet" property="twitter:site" /><meta content="summary_large_image" property="twitter:card" /><link rel="alternate"
2024-07-03 07:23:25 UTC	1268	IN	Data Raw: 63 65 3d 22 3e 68 74 74 70 73 3a 2f 2f 61 63 74 69 6f 6e 6e 65 74 77 6f 72 6b 2e 6f 72 67 2f 66 6f 72 6d 73 2f 75 6e 73 75 62 73 63 72 69 62 65 2d 34 3f 6e 6f 77 72 61 70 70 65 72 3d 74 72 75 65 26 72 65 66 65 72 72 65 72 3d 26 73 6f 75 72 63 65 3d 26 6f 6e 65 63 6c 69 63 6b 3d 3c 2f 61 3e 3c 2f 70 3e 0a 20 20 20 20 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 63 65 6e 74 65 72 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 20 69 64 3d 22 70 61 69 64 66 6f 72 62 79 22 3e Data Ascii: ce=">https://actionnetwork.org/forms/unsubscribe-4?nowrapper=true&referrer=&source=&oneclick=</a></p> </noscript><center><div style="border: 1px solid; padding: 10px; text-align: center; max-width: 600px;" width="100%" align="center" id="paidforby">
2024-07-03 07:23:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	03:22:55
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	03:22:57
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2128,i,432476065494129524,13042706341455745414,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	03:22:59
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bfptxt.com/5wKgd5"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://bfptxt.com/5wKgd5

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Windows Analysis Report
https://bfptxt.com/5wKgd5