Edit tour

Windows Analysis Report
http://livewiseinc.com

Overview

General Information

Sample URL:	http://livewiseinc.com
Analysis ID:	1467857
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1952,i,13230899412911799749,16161761796975008523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://livewiseinc.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-7KWN4PCCYC&gtm=45je4730v9100741783za200zb9186823250&_p=1720126515277&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=1060836916.1720126517&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1720126520&sct=1&seg=0&dl=https%3A%2F%2Flivewiseinc.com%2F&dt=Empowering%20Wellness%20in%20Pickering%3A%20Mental%20Health%20%26%20Therapy%20Services&en=page_view&_fv=1&_ss=1&_ee=1&tfd=9354&_z=fetch HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://livewiseinc.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://livewiseinc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_366.2.dr	String found in binary or memory: http://addyosmani.github.com/jquery-ui-bootstrap
Source: chromecache_366.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_329.2.dr	String found in binary or memory: http://creativecommons.org/licenses/GPL/2.0/)
Source: chromecache_336.2.dr, chromecache_338.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/
Source: chromecache_366.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Button#theming
Source: chromecache_366.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Dialog#theming
Source: chromecache_366.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Menu#theming
Source: chromecache_366.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Progressbar#theming
Source: chromecache_366.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Slider#theming
Source: chromecache_336.2.dr, chromecache_338.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_336.2.dr, chromecache_338.2.dr	String found in binary or memory: http://fontawesome.io.
Source: chromecache_221.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_329.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_366.2.dr, chromecache_329.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_366.2.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_366.2.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_366.2.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_366.2.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_366.2.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_366.2.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_366.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/
Source: chromecache_366.2.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_336.2.dr, chromecache_338.2.dr	String found in binary or memory: http://kyruus.com
Source: chromecache_297.2.dr, chromecache_197.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_336.2.dr, chromecache_338.2.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.html
Source: chromecache_336.2.dr, chromecache_338.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_329.2.dr	String found in binary or memory: http://sixtwothree.org
Source: chromecache_329.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_336.2.dr	String found in binary or memory: http://twitter.com/byscuits
Source: chromecache_338.2.dr	String found in binary or memory: http://twitter.com/davegandy
Source: chromecache_336.2.dr, chromecache_338.2.dr	String found in binary or memory: http://twitter.com/fontawesome.
Source: chromecache_329.2.dr	String found in binary or memory: http://www.viget.com)
Source: chromecache_347.2.dr	String found in binary or memory: http://www.whatarecookies.com/enable.asp
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://accounts.janeapp.com
Source: chromecache_193.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/EmptyState/empty-state-booking-af03cd9a8955b0eaffd663
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/application_styles-9297b9cdf5cc56e89ca7.css
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/core_js_polyfills-277f54535c98b71ea847.js
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/monitoring-eb308bb7edb8313e9316.js
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/public-1ebe00b1034ccbeecd99.js
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/public-9297b9cdf5cc56e89ca7.css
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/vendor_public-9297b9cdf5cc56e89ca7.css
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/vendor_public-e7477ec4b94aed7a4ae4.js
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/assets/vendor_styles-9297b9cdf5cc56e89ca7.css
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/favicons/apple-touch-icon.png?v=20170325
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/favicons/browserconfig.xml?v=20170325
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/favicons/favicon-16x16.png?v=20170325
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/favicons/favicon-32x32.png?v=20170325
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/favicons/favicon.ico?v=20170325
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/favicons/manifest.json?v=20170325
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/favicons/safari-pinned-tab.svg?v=20170325
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/jane_startup_1024x748.png?v=20240511
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/jane_startup_1536x2008.png?v=20240511
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/jane_startup_2048x1496.png?v=20240511
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/jane_startup_320x460.png?v=20240511
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/jane_startup_640x920.png?v=20240511
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/jane_startup_768x1004.png?v=20240511
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/javascripts/i18n/en.js?v=6.3.281
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjItMDYt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjItMTIt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDUt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDgt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDkt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTEt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTIt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDEt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDQt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDUt
Source: chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDYt
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC9pbWFnZS9waG90by8yMDIyLTA2
Source: chromecache_244.2.dr	String found in binary or memory: https://assets.ctfassets.net
Source: chromecache_244.2.dr	String found in binary or memory: https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/1a930247.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedCodeEditor-86776e0635434fc49715.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AtlasDashboardGraphic-042f01c5c5f7a5d7ca1a.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Bootstrapper-CSGR34WU.js
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModal-77aed9e8900fc44f1554.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModalGraphic-e9e1fc8f4c2bf8a9bd44.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CardField-739e285edeecea986ed0.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CaseStudyCard-60f3f5412530e6e993e8.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditor-6eacb8e42c7465ddd557.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorLineNumbers-0eded1c84476ec649145.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeSyntax-e0768ef33503219c518d.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeTerminal-ca23848effb056969042.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CopyTitle-c641e014b3946628bc95.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardOverlay-09e527d11b6471566771.cs
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarousel-6ad3f0dce85838a77d8b.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavGroup-41fa77c08914b1b778
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DomGraphic-5a317684eb2b9d1f76d2.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Flag-0530f6f8a0ae1e011860.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Form-401d42df82b6e8482f06.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-4513faa7ba2dd8949ee2.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingAnimation-fa25c03988d3d1f36a35.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphic-c9e3aeda05ab14a454b1.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicLogo-2cee099c6b840fb58d86.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagram-bcf0320e44c152e1ca03.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagramOrderNotification-b0f6b26d
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnection-192c60d5ff4ac27dec4f.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicImage-ff4d221174ca6cab4402.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicOutline-cbb29a27650befdb3913.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIcon-f22f360dadf72ca61a47.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconGrid-f5ddeb3e7d94044a9646.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconOutline-2c0929473dcd28db2e99.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingAnimation-ba03e22ccfea12d68c6c.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingCard-b80b51aa94acdc8a688e.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsGraphic-45fe2caceea82c749c40.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStandaloneAnimation-5aefb3912ae346b5293e.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Globe-b2159f87180df559d2e8.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GradientLegend-f1cabc70fbf82f3e9c05.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicForm-7d75b8ba72e0304da82c.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormField-33f78921d62dc714d424.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInputGrid-281fa6a92c2e3caa14c9.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/InvoicingFeatureGraphic-db95f6cbfa638cca151e.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/List-d4c6ad06c173a7dca2ed.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LocaleControl-09ce62c550a15bb456e5.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LowCodeNoCode-de32a3423ce25c839d82.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/MobileStickyNav-5c229e49df6b7e5315d7.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/PaymentLinksFeatureGraphic-6c9382201d4ede7c851a.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Picture-3f0067e6b392244c9bda.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductBadge-aa2497ab8abdcc6a3d34.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-4476eb8c383446c052aa.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/RowLayout-9272a8ee72d3dac4a6ef.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSection-1c0a8e1d30b69be4ef69.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSectionSupportLinkList-US-bf39e598e6b8dad8c
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StartUp-889f28d89767c8a9d60f.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsedList-4a8c16b5e5f3fa51247d.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Track-2f2fce741fc3d8fc8450.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ac6713d5.woff)
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/imt-abc6bafb6daf2e526154443d9a47ca50.js
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/store-936f0d847a16164e7f6b15d74659c4a9.html
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/stripethirdparty-srv/assets/
Source: chromecache_229.2.dr	String found in binary or memory: https://browser.sentry-cdn.com/7.118.0/bundle.es5.min.js
Source: chromecache_358.2.dr, chromecache_393.2.dr, chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr, chromecache_193.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_239.2.dr, chromecache_266.2.dr, chromecache_388.2.dr, chromecache_379.2.dr	String found in binary or memory: https://clinicsites.co
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_239.2.dr, chromecache_266.2.dr, chromecache_388.2.dr, chromecache_379.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2023/06/21/18/45/50/4760ed29-ec7e-461c-88b6-d85cc5eb9f2b/Clini
Source: chromecache_388.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/05/13/14/49/38/7e588fe8-1a76-4c51-8fc9-d0ceb02b4a91/Couns
Source: chromecache_239.2.dr, chromecache_388.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/05/15/21/23/39/91ec8626-356f-41d7-be64-215088e533ec/Small
Source: chromecache_266.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/05/29/18/25/52/8aebf9dd-6449-45a0-a1e9-f97a64395678/file
Source: chromecache_239.2.dr, chromecache_388.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/06/01/18/19/58/9042732b-3e9c-4dd8-927d-343bc7ce15e5/self%
Source: chromecache_266.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/06/06/01/21/44/5470860f-4901-4885-a21e-ab2d27e0b2c2/AJ-He
Source: chromecache_239.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/06/12/01/18/33/972da15c-bdc6-4495-8526-5f03f89dc044/LiveW
Source: chromecache_266.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/06/12/16/56/27/4bf0ffc3-dcee-4f4f-8992-46e2b20e4b25/file
Source: chromecache_266.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/06/12/17/34/26/8f7b90e3-0af2-411a-a067-c630c9d163ad/Appro
Source: chromecache_266.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/06/25/17/04/13/e1596870-dcba-46eb-9ad2-98544e026aec/Couns
Source: chromecache_239.2.dr, chromecache_388.2.dr	String found in binary or memory: https://d2t6o06vr3cm40.cloudfront.net/2024/07/01/13/03/25/1cd889c5-c2f2-461f-8589-711d110760f1/MH%20
Source: chromecache_244.2.dr	String found in binary or memory: https://dashboard.stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://dashboard.stripe.com/register
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_338.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_338.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_239.2.dr, chromecache_266.2.dr, chromecache_388.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Material
Source: chromecache_239.2.dr, chromecache_266.2.dr, chromecache_388.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:300
Source: chromecache_239.2.dr, chromecache_266.2.dr, chromecache_388.2.dr, chromecache_379.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:400
Source: chromecache_306.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_306.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialsymbolsoutlined/v195/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMz
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_373.2.dr, chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_381.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_269.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_221.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker/
Source: chromecache_221.2.dr, chromecache_338.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_329.2.dr	String found in binary or memory: https://github.com/jgarber623/jquery-placehold)
Source: chromecache_244.2.dr	String found in binary or memory: https://github.com/stripe-samples
Source: chromecache_221.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_332.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_332.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_193.2.dr	String found in binary or memory: https://google.com
Source: chromecache_193.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_239.2.dr	String found in binary or memory: https://gottmanconnect.com
Source: chromecache_239.2.dr	String found in binary or memory: https://gottmanconnect.com/public/img/gottman_checkup_badge.png
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1ctgMwd2p9euFW9pPSM7jR/451d5e987ca7fa14060526e6b1766a8b/bm
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1lCtk48IB26AGgXdHsrLrt/ad2816d6a744d5249c19ba66be22b0a6/ch
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43/fa
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/3AGidihOJl4nH9D1vDjM84/9540155d584be52fc54c443b6efa4ae6/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4jq1Wguyus7CA7yc2kxMgn/cf7b01aadf305daef40ac8acab654510/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4zeFefnpB8yh7U3qSQRktP/d583ee93dd3d8910fa27296748699a0f/bm
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5C5LvT3YZvRTGYn7uabXGj/7da8063dc77c67b7f66a1479f47409c8/bu
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5DaqGgXeMbxSIqQj9WSqSF/8142c0c6e15b27a8bb6c8a0f8a5d4dfb/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5epSdhifMhjZWOkOxK9xG8/05715737a672f2069c17903d2acae585/ty
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5hEVwGQfvUQhsMjfASiuA/db4e12749695dbf5735787879ae56e96/fla
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074/ty
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/6c56LuWUxcACbVkv4fqszI/d0a88e48d11a88b97daf896246ac40da/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef/ch
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7C4ROeiaqUa0HwwBU9EL9l/f9c57cccfc64de8869be7e7a9556fec9/at
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7jjWJlm9NHgLI7SV98B0Dg/ea1ae753f3764897fa4333311e41f496/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/wEsTNDVgdEqaPAKkFdqnL/c69e1649432f1b772d86d81e423b7e3e/but
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://jane.app
Source: chromecache_323.2.dr	String found in binary or memory: https://jane.app/guide/meet-your-new-jane-guide-sidekick
Source: chromecache_323.2.dr	String found in binary or memory: https://jane.app/guide/using-jane-s-demo-clinic
Source: chromecache_347.2.dr, chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://jane.app/privacy
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://jane.app/terms
Source: chromecache_239.2.dr, chromecache_266.2.dr, chromecache_388.2.dr, chromecache_379.2.dr	String found in binary or memory: https://js.sentry-cdn.com/94b09a2c1e465a745170fd2d8fd6138d.min.js
Source: chromecache_346.2.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Source: chromecache_379.2.dr	String found in binary or memory: https://livewise.janeapp.com/
Source: chromecache_266.2.dr	String found in binary or memory: https://livewise.janeapp.com/#/staff_member/1
Source: chromecache_239.2.dr	String found in binary or memory: https://livewise.janeapp.com/?_gl=1
Source: chromecache_379.2.dr	String found in binary or memory: https://livewise.janeapp.com/locations/livewise-associates
Source: chromecache_379.2.dr	String found in binary or memory: https://livewise.janeapp.com/locations/livewise-associates/book
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvMjIvZDJkNzU4MzctNWQ
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvNTQvNThkZDVmYzQtZGV
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDgvMTAvNTY1OWVjNzAtYTB
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDgvMjMvZDVhMTFkYTktMDM
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMTUvMDYvYWIxYWVmM2YtMmY
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjIvNTQvZmVkN2YwY2EtNWM
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjMvMjMvNTgwNjgxNGItMjE
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjMvNDUvMThhMDhkYTctN2M
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjAvMjUvMzgvZGYwOTM1Y2EtYTY
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDcvMjIvYTNkYzhhODQtODZ
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDkvMTIvNDZhNmJhMWEtM2V
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMTIvMDMvNDkwYTkzMTMtODc
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDYvMDYvMTUvMzgvMTEvM2M2MGRiMWMtYTF
Source: chromecache_239.2.dr	String found in binary or memory: https://livewiseinc.com/
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/about
Source: chromecache_388.2.dr	String found in binary or memory: https://livewiseinc.com/blog
Source: chromecache_388.2.dr	String found in binary or memory: https://livewiseinc.com/blog.rss
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDIvNTkwOTIxNWUtNzIzMS00N2I4LWIxYTI
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDMvMzcwN2U5NGUtNGMwMC00ZjYyLWEzZjI
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDQvY2E4YzQ1NzAtYTVlNS00ZDY0LWI5ZGM
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDUvNWFiNWQ5ZWYtNTdjYi00ZWIxLTk1N2U
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDcvNzRhYzA0M2MtYmI1MS00ZWYwLTllNGI
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDgvMjc2OWI5MzMtNDNmYS00Njk4LTk1YWQ
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDkvOTg2ZTEzZjgtNGZlNC00ZWQ1LTk3ZjY
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDkvY2E1OWFmNWQtMzM5Zi00ZGRhLWI1NDk
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTEvOTk3Yjg5MjQtN2QyNi00OTE3LTk5YmI
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTIvZDg0MGYyNGMtNTA4Zi00ODM2LThlMTQ
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTMvOWIwZDA4MjktYzE1Mi00ZjQ2LWI4NzA
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTQvMTVjZmY1MmYtYmUzMy00MzA3LWJiYWU
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTUvYzQ2OTQ1YmYtMDliNy00MTIwLWE2NmY
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTcvYzc3Y2Q5ZDMtYzVlZS00MDdlLWI4OTc
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTgvZjA2MWM0NDgtOWQyOC00MzA1LWIxY2M
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTkvNzg4NzA3ZjktNTQ3Mi00M2EwLWE1YjM
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMTAvMDAvZThiODgyMTktMDkwNS00YjI0LTgxMTc
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMTAvMDEvYjNmNjI2YWQtNTI1Yi00MDc4LThhNzM
Source: chromecache_266.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDYvMDMvMTgvMzMvMTAvNmM1MzJlMjQtMDk5NS00ZWE3LWJmZTc
Source: chromecache_379.2.dr	String found in binary or memory: https://livewiseinc.com/df_media/W1siZiIsImN1c3RvbWVyX2ltYWdlcy8xMzQwMC8yMDI0LzAyLzIxLzE4LzAxLzU1L2U
Source: chromecache_379.2.dr	String found in binary or memory: https://livewiseinc.com/pages/contact
Source: chromecache_227.2.dr	String found in binary or memory: https://m.stripe.network
Source: chromecache_379.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/staticmap?zoom=15&sensor=false&size=1500x1500&cente
Source: chromecache_244.2.dr	String found in binary or memory: https://marketplace.stripe.com/
Source: chromecache_193.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_358.2.dr, chromecache_393.2.dr, chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr, chromecache_193.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_271.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_379.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_379.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_244.2.dr	String found in binary or memory: https://press.stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://privacy.stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://q.stripe.com
Source: chromecache_271.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_244.2.dr	String found in binary or memory: https://sales-live-chat.stripe.com
Source: chromecache_244.2.dr	String found in binary or memory: https://sales-live-chat.stripe.com/render
Source: chromecache_244.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_393.2.dr, chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_244.2.dr	String found in binary or memory: https://status.stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/#organization
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/ae
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/at
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/au
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/br
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/contact/sales
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de-be
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de-ch
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de-li
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de-lu
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/api
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/billing
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/connect
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/development
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/invoicing/hosted-invoice-page
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/libraries
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/no-code
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/no-code/payment-links
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/no-code/tap-to-pay
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/payments
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/payments/checkout
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/stripe-apps
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/terminal
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/upgrades#api-changelog
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/upgrades#api-versions
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-at
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-be
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-bg
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-br
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-ca
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-ch
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-cy
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-cz
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-de
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-dk
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-ee
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-es
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-fi
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-fr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-gi
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-gr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-hk
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-hr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-hu
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-it
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-jp
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-li
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-lt
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-lu
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-lv
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-mt
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-mx
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-my
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-nl
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-no
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-pl
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-pt
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-ro
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-se
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-sg
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-si
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-sk
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-th
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/es
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/es-us
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr-be
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr-ca
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr-ch
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr-lu
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/gb
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/guides
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/ie
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/in
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/issuing
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/it
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/it-ch
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/it-hr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/it-si
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/jp
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/mx
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/nl
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/nl-be
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/nz
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/pricing
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/privacy
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/pt-pt
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/radar
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/se
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/sigma
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/spc/licenses
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/sv-fi
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/th
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/us
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/use-cases/global-businesses
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/zh-hk
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/zh-my
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/zh-sg
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/zh-us
Source: chromecache_271.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_244.2.dr	String found in binary or memory: https://support.stripe.com/?referrerLocale=en-us
Source: chromecache_358.2.dr, chromecache_393.2.dr, chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr, chromecache_193.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_244.2.dr	String found in binary or memory: https://twitter.com/stripe
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_193.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_364.2.dr, chromecache_296.2.dr, chromecache_314.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/16526066952/?random
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_193.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_193.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_358.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_239.2.dr, chromecache_266.2.dr, chromecache_388.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-52CJ0NGGB7
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-MCTHZF7ZXQ
Source: chromecache_213.2.dr, chromecache_271.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.
Source: chromecache_374.2.dr, chromecache_183.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Source: chromecache_244.2.dr	String found in binary or memory: https://www.linkedin.com/company/stripe/
Source: chromecache_281.2.dr, chromecache_216.2.dr	String found in binary or memory: https://www.livewiseinc.com
Source: chromecache_393.2.dr, chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_379.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq
Source: chromecache_374.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/
Source: chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_244.2.dr	String found in binary or memory: https://youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 64834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 64777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64809
Source: unknown	Network traffic detected: HTTP traffic on port 64650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64804
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64803
Source: unknown	Network traffic detected: HTTP traffic on port 64823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64807
Source: unknown	Network traffic detected: HTTP traffic on port 64718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64800
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 64809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 64641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 64664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 64767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 64810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 64778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 64630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 64779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 64833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 64663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 64756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64736
Source: unknown	Network traffic detected: HTTP traffic on port 64786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64737
Source: unknown	Network traffic detected: HTTP traffic on port 64763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64730
Source: unknown	Network traffic detected: HTTP traffic on port 64625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64734
Source: unknown	Network traffic detected: HTTP traffic on port 64774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64629
Source: unknown	Network traffic detected: HTTP traffic on port 64683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64741
Source: unknown	Network traffic detected: HTTP traffic on port 64825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64745
Source: unknown	Network traffic detected: HTTP traffic on port 64775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64750
Source: unknown	Network traffic detected: HTTP traffic on port 64803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64631
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64632
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 64797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64647
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64642
Source: unknown	Network traffic detected: HTTP traffic on port 64695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64641
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64644
Source: unknown	Network traffic detected: HTTP traffic on port 64710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64643
Source: unknown	Network traffic detected: HTTP traffic on port 64752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64645
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64816
Source: unknown	Network traffic detected: HTTP traffic on port 64801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64810
Source: unknown	Network traffic detected: HTTP traffic on port 64799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64704
Source: unknown	Network traffic detected: HTTP traffic on port 64764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64827
Source: unknown	Network traffic detected: HTTP traffic on port 64649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64822
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64821
Source: unknown	Network traffic detected: HTTP traffic on port 64798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64836
Source: unknown	Network traffic detected: HTTP traffic on port 64682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64718
Source: unknown	Network traffic detected: HTTP traffic on port 64765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64719
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64833
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64832
Source: unknown	Network traffic detected: HTTP traffic on port 64776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64725
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64726
Source: unknown	Network traffic detected: HTTP traffic on port 64626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64728
Source: unknown	Network traffic detected: HTTP traffic on port 64787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64722
Source: unknown	Network traffic detected: HTTP traffic on port 64731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64843
Source: unknown	Network traffic detected: HTTP traffic on port 64725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64698
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64780
Source: unknown	Network traffic detected: HTTP traffic on port 64796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64658
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64779
Source: unknown	Network traffic detected: HTTP traffic on port 64738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64650
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64654
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64775
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64777
Source: unknown	Network traffic detected: HTTP traffic on port 64669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64671
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64670
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64791
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64669
Source: unknown	Network traffic detected: HTTP traffic on port 64712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64785
Source: unknown	Network traffic detected: HTTP traffic on port 64804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64666
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64667
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64680
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64682
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64677
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64676
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64679
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64799
Source: unknown	Network traffic detected: HTTP traffic on port 64751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64692
Source: unknown	Network traffic detected: HTTP traffic on port 64816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64683
Source: unknown	Network traffic detected: HTTP traffic on port 64827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64688
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64689
Source: unknown	Network traffic detected: HTTP traffic on port 64654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 64715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 64726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 64655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64632 -> 443

Source: unknown	HTTPS traffic detected: 23.53.114.19:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.53.114.19:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@26/367@72/33

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1952,i,13230899412911799749,16161761796975008523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://livewiseinc.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1952,i,13230899412911799749,16161761796975008523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://livewiseinc.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://stripe.com/#organization	0%	URL Reputation	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTkvNzg4NzA3ZjktNTQ3Mi00M2EwLWE1YjM	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	0%	Avira URL Cloud	safe
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMTIvMDMvNDkwYTkzMTMtODcxYy00ODIwLThlOTQtNDExYzk5YzdkMDYyL0RlcHJlc3Npb24ucG5nIl1d/Depression.png?sha=eb4824c07f6dd1eb	0%	Avira URL Cloud	safe
https://d2t6o06vr3cm40.cloudfront.net/2024/07/01/13/03/25/1cd889c5-c2f2-461f-8589-711d110760f1/MH%202.jpg	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC9pbWFnZS9waG90by8yMDIyLTA2	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDYvMDMvMTgvMzMvMTAvNmM1MzJlMjQtMDk5NS00ZWE3LWJmZTc	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTgvZjA2MWM0NDgtOWQyOC00MzA1LWIxY2M	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTEtMDgvMTIxNDE5L2Q1ZjRlYmYwLWRiMzMtNGMyMC05ZTA1LWQyNmJkN2MxY2QxOS9IQU1JRC1ORVdfUEhPVE8tcmVtb3ZlYmctcHJldmlldy5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=eb7b6274066f40c5&for=livewise.janeapp.com	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTIvZDg0MGYyNGMtNTA4Zi00ODM2LThlMTQ	0%	Avira URL Cloud	safe
https://js.sentry-cdn.com/94b09a2c1e465a745170fd2d8fd6138d.min.js	0%	Avira URL Cloud	safe
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDcvMjIvYTNkYzhhODQtODZ	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://d2t6o06vr3cm40.cloudfront.net/2024/06/01/18/19/58/9042732b-3e9c-4dd8-927d-343bc7ce15e5/self%20compassion.jpg	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMDgvMTAvMTAvMTcvNTRmNjllNTctZGMzZS00MDY1LTllYjUtZjhkZmExY2EwY2ZkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjYwMHg2MDBcdTAwM2UiXSxbInAiLCJ0cmltIl1d?sha=1b206e95ba189cd1	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/jane_startup_1024x748.png?v=20240511	0%	Avira URL Cloud	safe
https://d2t6o06vr3cm40.cloudfront.net/2024/06/06/01/21/44/5470860f-4901-4885-a21e-ab2d27e0b2c2/AJ-Headshot-Reduced.jpg	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css	0%	Avira URL Cloud	safe
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-MCTHZF7ZXQ&cid=1790560015.1720126564&gtm=45je4730v9131492802za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDEtMTQvMTQzNDE1Lzc5NWYyNmRkLTZjNTQtNGQxNy04MTY1LTBhYjk5ZWM2NTFiYy9TaGFuZS1KYW5lIHBob3RvLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=e75a2d5ae1b1ce47&for=livewise.janeapp.com	0%	Avira URL Cloud	safe
http://twitter.com/fontawesome.	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	0%	Avira URL Cloud	safe
https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEt	0%	Avira URL Cloud	safe
http://docs.jquery.com/UI/Dialog#theming	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	0%	Avira URL Cloud	safe
https://jane.app/terms	0%	Avira URL Cloud	safe
https://stripe.com/ie	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/favicons/browserconfig.xml?v=20170325	0%	Avira URL Cloud	safe
http://twitter.com/davegandy	0%	Avira URL Cloud	safe
https://jane.app/guide/using-jane-s-demo-clinic	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDIzNzMzLzdlOTE1Y2FhLTEyZTYtNGEyNS05MGRiLWViYThjNGE0MTc2OC9BTUlOLUxBUkdFUi0xICgyKS5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=aa657fcec7f64757&for=livewise.janeapp.com	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTUvYzQ2OTQ1YmYtMDliNy00MTIwLWE2NmY	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDE0MzAyL2FmYWUxYzg3LTVjNjctNDhkNS05NmI5LWZiMGU2OTNiYjYyYS9sYXJnZXItcHJvZmlsZXBpYy1OYXRhbGllLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=bdb48c07b6b4936a&for=livewise.janeapp.com	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	0%	Avira URL Cloud	safe
http://kyruus.com	0%	Avira URL Cloud	safe
https://accounts.janeapp.com	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDgt	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/jane_startup_2048x1496.png?v=20240511	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css	0%	Avira URL Cloud	safe
https://d2t6o06vr3cm40.cloudfront.net/2024/05/15/21/23/39/91ec8626-356f-41d7-be64-215088e533ec/Small	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTcvYzc3Y2Q5ZDMtYzVlZS00MDdlLWI4OTc	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTcvMDA1NDQzL2IwNWI0Y2U4LTVkNDUtNDdlYS1hM2I5LWY5MmE4ODBkZmU0Ni9BbGl5YS1wcm9maWxlIHBpY3R1cmUtc21hbGxlci5qcGVnIl0sWyJwIiwidGh1bWIiLCIxOTJ4MjI4IyJdXQ?sha=ce9dbc7fa470f792&for=livewise.janeapp.com	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDUtMTgvMjM1MjUxLzk2MWEyODBhLTE3MzktNDFhOC04ZTIyLTJmZGNkMDIwNjliMS8yMDIxMDMxMl8xMDE1MDggKDEpLmpwZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=1dfa6ad91fe5ceb5&for=livewise.janeapp.com	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDI1NTU0L2E5ZmMzOTZiLWViYmItNDkwOS05MjY2LTg3MjkwMTJhNGY2Yi9NeSBwcm9qZWN0LTEgKDMpLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=f4d02fec98e7f7cd&for=livewise.janeapp.com	0%	Avira URL Cloud	safe
https://d2t6o06vr3cm40.cloudfront.net/2023/06/21/18/45/50/4760ed29-ec7e-461c-88b6-d85cc5eb9f2b/Clinic%20Sites%20PNG.png	0%	Avira URL Cloud	safe
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjIvNTQvZmVkN2YwY2EtNWM1ZC00N2E5LWIyMWMtNjExZjU5ODJkMjQ3L2lkeC1pY29uMi5wbmciXV0/idx-icon2.png?sha=16346d852e6f1d45	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTEt	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDEt	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/assets/vendor_styles-9297b9cdf5cc56e89ca7.css	0%	Avira URL Cloud	safe
https://stripe.com/in	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTEvOTk3Yjg5MjQtN2QyNi00OTE3LTk5YmI	0%	Avira URL Cloud	safe
https://stripe.com/docs/payments	0%	Avira URL Cloud	safe
https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/assets/public-1ebe00b1034ccbeecd99.js	0%	Avira URL Cloud	safe
https://stripe.com/it	0%	Avira URL Cloud	safe
http://creativecommons.org/licenses/GPL/2.0/)	0%	Avira URL Cloud	safe
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvNTQvNThkZDVmYzQtZGV	0%	Avira URL Cloud	safe
https://stripe.com/jp	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css	0%	Avira URL Cloud	safe
https://dashboard.stripe.com/	0%	Avira URL Cloud	safe
https://images.ctfassets.net	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css	0%	Avira URL Cloud	safe
https://d2t6o06vr3cm40.cloudfront.net/2024/06/12/17/34/26/8f7b90e3-0af2-411a-a067-c630c9d163ad/Appro	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/assets/application_styles-9297b9cdf5cc56e89ca7.css	0%	Avira URL Cloud	safe
https://gottmanconnect.com/public/img/gottman_checkup_badge.png	0%	Avira URL Cloud	safe
https://stripe.com/sv-fi	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/assets/monitoring-eb308bb7edb8313e9316.js	0%	Avira URL Cloud	safe
https://support.stripe.com/?referrerLocale=en-us	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTUvYzQ2OTQ1YmYtMDliNy00MTIwLWE2NmYtZjM0NmVkMTVkNmFhL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=64b05b453234c3bb	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDcvNzRhYzA0M2MtYmI1MS00ZWYwLTllNGItMDgzOWJiMDg1NjMwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=e2973f1666078d3c	0%	Avira URL Cloud	safe
https://images.ctfassets.net/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef/ch	0%	Avira URL Cloud	safe
https://livewise.janeapp.com/locations/livewise-associates/book	0%	Avira URL Cloud	safe
https://livewise.janeapp.com/#/staff_member/1	0%	Avira URL Cloud	safe
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMTUvMDYvYWIxYWVmM2YtMmY4NC00MDUyLWIzYzEtNDBiZmFhMzA4Y2Q2L2lkeC1pY29uMS5wbmciXV0/idx-icon1.png?sha=a2aaeccf5041060e	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css	0%	Avira URL Cloud	safe
https://stripe.com/de	0%	Avira URL Cloud	safe
https://www.google.com/js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/favicons/favicon-32x32.png?v=20170325	0%	Avira URL Cloud	safe
https://github.com/Eonasdan/bootstrap-datetimepicker/	0%	Avira URL Cloud	safe
https://stripe.com/docs/api	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTkvNzg4NzA3ZjktNTQ3Mi00M2EwLWE1YjMtYWU0YTdkYzVmZmNkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=37d5cab959016bd1	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css	0%	Avira URL Cloud	safe
https://assets-jane-cac1-23.janeapp.net/assets/bg-gradient-38002f3b52e3788e66764182aca85a79.jpg	0%	Avira URL Cloud	safe
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDgvMjc2OWI5MzMtNDNmYS00Njk4LTk1YWQtYjkxMzMzMTQzN2UxL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=b7a469a71aceaff8	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jane-pod-cac1-23.janeapp.net	99.79.89.210	true	false	unknown
o4505290921410560.ingest.sentry.io	34.120.195.249	true	false	unknown
www.recaptcha.net	142.250.186.67	true	false	unknown
clinicsites-139604409.us-west-2.elb.amazonaws.com	54.212.237.39	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	74.125.133.157	true	false	unknown
stripecdn.map.fastly.net	151.101.192.176	true	false	unknown
js.sentry-cdn.com	151.101.194.217	true	false	unknown
livewiseinc.com	52.89.243.208	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
d2t6o06vr3cm40.cloudfront.net	18.65.40.139	true	false	unknown
googleads.g.doubleclick.net	216.58.206.34	true	false	unknown
m.stripe.com	44.240.83.234	true	false	unknown
stripe.com	198.137.150.201	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
td.doubleclick.net	142.250.185.194	true	false	unknown
analytics.google.com	216.58.212.142	true	false	unknown
gottmanconnect.com	104.18.7.90	true	false	unknown
assets-jane-cac1-23.janeapp.net	18.239.94.5	true	false	unknown
m.stripe.network	unknown	unknown	false	unknown
js.stripe.com	unknown	unknown	false	unknown
livewiseasso3873.clinicsites.co	unknown	unknown	false	unknown
livewise.janeapp.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTEtMDgvMTIxNDE5L2Q1ZjRlYmYwLWRiMzMtNGMyMC05ZTA1LWQyNmJkN2MxY2QxOS9IQU1JRC1ORVdfUEhPVE8tcmVtb3ZlYmctcHJldmlldy5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=eb7b6274066f40c5&for=livewise.janeapp.com	false	Avira URL Cloud: safe	unknown
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMTIvMDMvNDkwYTkzMTMtODcxYy00ODIwLThlOTQtNDExYzk5YzdkMDYyL0RlcHJlc3Npb24ucG5nIl1d/Depression.png?sha=eb4824c07f6dd1eb	false	Avira URL Cloud: safe	unknown
https://d2t6o06vr3cm40.cloudfront.net/2024/07/01/13/03/25/1cd889c5-c2f2-461f-8589-711d110760f1/MH%202.jpg	false	Avira URL Cloud: safe	unknown
https://js.sentry-cdn.com/94b09a2c1e465a745170fd2d8fd6138d.min.js	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMDgvMTAvMTAvMTcvNTRmNjllNTctZGMzZS00MDY1LTllYjUtZjhkZmExY2EwY2ZkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjYwMHg2MDBcdTAwM2UiXSxbInAiLCJ0cmltIl1d?sha=1b206e95ba189cd1	false	Avira URL Cloud: safe	unknown
https://d2t6o06vr3cm40.cloudfront.net/2024/06/01/18/19/58/9042732b-3e9c-4dd8-927d-343bc7ce15e5/self%20compassion.jpg	false	Avira URL Cloud: safe	unknown
https://d2t6o06vr3cm40.cloudfront.net/2024/06/06/01/21/44/5470860f-4901-4885-a21e-ab2d27e0b2c2/AJ-Headshot-Reduced.jpg	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-MCTHZF7ZXQ&cid=1790560015.1720126564&gtm=45je4730v9131492802za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDEtMTQvMTQzNDE1Lzc5NWYyNmRkLTZjNTQtNGQxNy04MTY1LTBhYjk5ZWM2NTFiYy9TaGFuZS1KYW5lIHBob3RvLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=e75a2d5ae1b1ce47&for=livewise.janeapp.com	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDIzNzMzLzdlOTE1Y2FhLTEyZTYtNGEyNS05MGRiLWViYThjNGE0MTc2OC9BTUlOLUxBUkdFUi0xICgyKS5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=aa657fcec7f64757&for=livewise.janeapp.com	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDE0MzAyL2FmYWUxYzg3LTVjNjctNDhkNS05NmI5LWZiMGU2OTNiYjYyYS9sYXJnZXItcHJvZmlsZXBpYy1OYXRhbGllLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=bdb48c07b6b4936a&for=livewise.janeapp.com	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTcvMDA1NDQzL2IwNWI0Y2U4LTVkNDUtNDdlYS1hM2I5LWY5MmE4ODBkZmU0Ni9BbGl5YS1wcm9maWxlIHBpY3R1cmUtc21hbGxlci5qcGVnIl0sWyJwIiwidGh1bWIiLCIxOTJ4MjI4IyJdXQ?sha=ce9dbc7fa470f792&for=livewise.janeapp.com	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDUtMTgvMjM1MjUxLzk2MWEyODBhLTE3MzktNDFhOC04ZTIyLTJmZGNkMDIwNjliMS8yMDIxMDMxMl8xMDE1MDggKDEpLmpwZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=1dfa6ad91fe5ceb5&for=livewise.janeapp.com	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDI1NTU0L2E5ZmMzOTZiLWViYmItNDkwOS05MjY2LTg3MjkwMTJhNGY2Yi9NeSBwcm9qZWN0LTEgKDMpLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=f4d02fec98e7f7cd&for=livewise.janeapp.com	false	Avira URL Cloud: safe	unknown
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjIvNTQvZmVkN2YwY2EtNWM1ZC00N2E5LWIyMWMtNjExZjU5ODJkMjQ3L2lkeC1pY29uMi5wbmciXV0/idx-icon2.png?sha=16346d852e6f1d45	false	Avira URL Cloud: safe	unknown
https://d2t6o06vr3cm40.cloudfront.net/2023/06/21/18/45/50/4760ed29-ec7e-461c-88b6-d85cc5eb9f2b/Clinic%20Sites%20PNG.png	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/assets/vendor_styles-9297b9cdf5cc56e89ca7.css	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/assets/public-1ebe00b1034ccbeecd99.js	false	Avira URL Cloud: safe	unknown
https://livewise.janeapp.com/	false		unknown
https://assets-jane-cac1-23.janeapp.net/assets/application_styles-9297b9cdf5cc56e89ca7.css	false	Avira URL Cloud: safe	unknown
https://gottmanconnect.com/public/img/gottman_checkup_badge.png	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/assets/monitoring-eb308bb7edb8313e9316.js	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTUvYzQ2OTQ1YmYtMDliNy00MTIwLWE2NmYtZjM0NmVkMTVkNmFhL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=64b05b453234c3bb	false	Avira URL Cloud: safe	unknown
https://m.stripe.network/inner.html#url=https%3A%2F%2Flivewise.janeapp.com%2F&title=Book%20Online%20%7C%20LiveWise%20Associates&referrer=&muid=NA&sid=NA&version=6&preview=false	false		unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDcvNzRhYzA0M2MtYmI1MS00ZWYwLTllNGItMDgzOWJiMDg1NjMwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=e2973f1666078d3c	false	Avira URL Cloud: safe	unknown
https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Flivewise.janeapp.com%2F%3F_gl%3D1itr0xc_gcl_auNTgwOTk4NzAzLjE3MTUxMDYwODY._gaOTEyMzQyMDgyLjE3MTUxMDYwODY._ga_MCTHZF7ZXQ*MTcxNTIwOTc0Mi41LjEuMTcxNTIwOTc0Mi42MC4wLjA.%23%2Flist&title=Book%20Online%20%7C%20LiveWise%20Associates&referrer=&muid=5cf079c8-e8d7-4364-ba9e-675e8ceaab0ab4d0a0&sid=069bef62-4d56-4f0a-958f-40a3b8d48d754e772c&version=6&preview=false	false		unknown
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMTUvMDYvYWIxYWVmM2YtMmY4NC00MDUyLWIzYzEtNDBiZmFhMzA4Y2Q2L2lkeC1pY29uMS5wbmciXV0/idx-icon1.png?sha=a2aaeccf5041060e	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTkvNzg4NzA3ZjktNTQ3Mi00M2EwLWE1YjMtYWU0YTdkYzVmZmNkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=37d5cab959016bd1	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/assets/bg-gradient-38002f3b52e3788e66764182aca85a79.jpg	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDgvMjc2OWI5MzMtNDNmYS00Njk4LTk1YWQtYjkxMzMzMTQzN2UxL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=b7a469a71aceaff8	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTkvNzg4NzA3ZjktNTQ3Mi00M2EwLWE1YjM	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDYvMDMvMTgvMzMvMTAvNmM1MzJlMjQtMDk5NS00ZWE3LWJmZTc	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC9pbWFnZS9waG90by8yMDIyLTA2	chromecache_281.2.dr, chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTgvZjA2MWM0NDgtOWQyOC00MzA1LWIxY2M	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDcvMjIvYTNkYzhhODQtODZ	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTIvZDg0MGYyNGMtNTA4Zi00ODM2LThlMTQ	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/jane_startup_1024x748.png?v=20240511	chromecache_281.2.dr, chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
http://twitter.com/fontawesome.	chromecache_336.2.dr, chromecache_338.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEt	chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_213.2.dr, chromecache_271.2.dr	false	URL Reputation: safe	unknown
http://docs.jquery.com/UI/Dialog#theming	chromecache_366.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/ie	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_221.2.dr	false	Avira URL Cloud: safe	unknown
https://jane.app/terms	chromecache_281.2.dr, chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
http://twitter.com/davegandy	chromecache_338.2.dr	false	Avira URL Cloud: safe	unknown
https://jane.app/guide/using-jane-s-demo-clinic	chromecache_323.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/favicons/browserconfig.xml?v=20170325	chromecache_281.2.dr, chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTUvYzQ2OTQ1YmYtMDliNy00MTIwLWE2NmY	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://accounts.janeapp.com	chromecache_281.2.dr, chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/jane_startup_2048x1496.png?v=20240511	chromecache_281.2.dr, chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_271.2.dr	false	URL Reputation: safe	unknown
http://kyruus.com	chromecache_336.2.dr, chromecache_338.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDgt	chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://d2t6o06vr3cm40.cloudfront.net/2024/05/15/21/23/39/91ec8626-356f-41d7-be64-215088e533ec/Small	chromecache_239.2.dr, chromecache_388.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTcvYzc3Y2Q5ZDMtYzVlZS00MDdlLWI4OTc	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTEvOTk3Yjg5MjQtN2QyNi00OTE3LTk5YmI	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/docs/payments	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/in	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDEt	chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTEt	chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/it	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvNTQvNThkZDVmYzQtZGV	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
http://creativecommons.org/licenses/GPL/2.0/)	chromecache_329.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/#organization	chromecache_244.2.dr	false	URL Reputation: safe	unknown
https://stripe.com/jp	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://dashboard.stripe.com/	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://d2t6o06vr3cm40.cloudfront.net/2024/06/12/17/34/26/8f7b90e3-0af2-411a-a067-c630c9d163ad/Appro	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/sv-fi	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://support.stripe.com/?referrerLocale=en-us	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_213.2.dr, chromecache_271.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef/ch	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://livewise.janeapp.com/locations/livewise-associates/book	chromecache_379.2.dr	false	Avira URL Cloud: safe	unknown
https://livewise.janeapp.com/#/staff_member/1	chromecache_266.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://assets-jane-cac1-23.janeapp.net/favicons/favicon-32x32.png?v=20170325	chromecache_281.2.dr, chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/de	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/docs/api	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/Eonasdan/bootstrap-datetimepicker/	chromecache_221.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.76.156	unknown	United States	15169	GOOGLEUS	false
142.250.186.67	www.recaptcha.net	United States	15169	GOOGLEUS	false
216.58.212.142	analytics.google.com	United States	15169	GOOGLEUS	false
151.101.0.176	unknown	United States	54113	FASTLYUS	false
99.79.89.210	jane-pod-cac1-23.janeapp.net	United States	16509	AMAZON-02US	false
34.209.252.182	unknown	United States	16509	AMAZON-02US	false
44.240.83.234	m.stripe.com	United States	16509	AMAZON-02US	false
198.137.150.201	stripe.com	United States	3356	LEVEL3US	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
172.217.18.3	unknown	United States	15169	GOOGLEUS	false
3.99.105.136	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
104.18.7.90	gottmanconnect.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
52.26.250.4	unknown	United States	16509	AMAZON-02US	false
54.212.237.39	clinicsites-139604409.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.192.176	stripecdn.map.fastly.net	United States	54113	FASTLYUS	false
74.125.133.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.89.243.208	livewiseinc.com	United States	16509	AMAZON-02US	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
216.58.206.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.194.217	js.sentry-cdn.com	United States	54113	FASTLYUS	false
18.65.40.60	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.74.195	unknown	United States	15169	GOOGLEUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
18.239.94.28	unknown	United States	16509	AMAZON-02US	false
18.65.40.139	d2t6o06vr3cm40.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
18.239.94.5	assets-jane-cac1-23.janeapp.net	United States	16509	AMAZON-02US	false
34.120.195.249	o4505290921410560.ingest.sentry.io	United States	15169	GOOGLEUS	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467857
Start date and time:	2024-07-04 22:54:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://livewiseinc.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@26/367@72/33
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://livewiseinc.com/about Browse: https://livewiseinc.com/pages/contact Browse: https://livewiseinc.com/blog Browse: https://livewise.janeapp.com/ Browse: https://livewise.janeapp.com/?_gl=1itr0xc_gcl_auNTgwOTk4NzAzLjE3MTUxMDYwODY._gaOTEyMzQyMDgyLjE3MTUxMDYwODY._ga_MCTHZF7ZXQ*MTcxNTIwOTc0Mi41LjEuMTcxNTIwOTc0Mi42MC4wLjA.#/list

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 142.250.185.174, 64.233.167.84, 34.104.35.123, 172.217.16.202, 142.250.186.131, 216.58.212.168, 172.217.16.142, 40.68.123.157, 72.21.81.240, 192.229.221.95, 13.95.31.18, 20.242.39.171, 142.250.185.106, 142.250.186.42, 216.58.212.170, 216.58.206.74, 142.250.186.138, 142.250.185.234, 142.250.185.170, 142.250.184.202, 172.217.16.138, 142.250.185.202, 216.58.206.42, 142.250.186.74, 172.217.23.106, 142.250.185.138, 172.217.18.106, 142.250.181.234, 142.250.185.131, 142.250.186.106, 142.250.186.170, 142.250.184.234, 216.58.212.138, 142.250.185.74, 172.217.18.10, 142.250.74.202, 142.250.181.227, 142.250.186.163, 142.250.185.163, 216.58.212.136, 142.250.185.227
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://livewiseinc.com

Input	Output
URL: https://livewise.janeapp.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a 'Sign In' button which is a part of a login form.","There is no sense of urgency in the text.","There is no CAPTCHA or any other anti-robot detection mechanism present on the webpage."]}
Title: Book Online \| LiveWise Associates OCR: Hello. Are you a current client? Sign in Sign In or Sign Up Live Wise Book an Appointment Please note that not all therapists listed are available for in #rson appointments. You can view the therapist's profile and availability tor in person sessions by clicking on their name on this booking page. Most insurance cover services for Registered Psychotherapist or Registered Social Worker We also provide direct billing tor some insurance plans when approved by your picy provider (Please call your insurance provider to confirm details). Our Team Welcome to our online booking site Intake Matching Consultation Intake Matching Consultation Intake Consultation Discover the peffect match tor your needs with our complimentary 15-minute Appointment Intake Matching Psychotherapy, Registered Consultation. Led by our skilled Client Intake Coordinator, this personalized session is designed to Psychotherapist understand your unique requirements and connect you Witn the right services. During this consultation, our Client Intake Coordinator will attentively listen to your concerns, goals, and pret_.. Z Read More Psychotherapy, Sial Book by Session Book by Practitioner Worker INTAKE-ART THERAPY 15 minutes - SOu - Couples Therapy Offered by Morgan Sparks, Lee and Deanah EMDR Therapy Psychotherapy Intern Clinical Su#rvlsion Post-secondary Student
URL: https://livewise.janeapp.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,
Title: Book Online \| LiveWise Associates OCR: Hello. Are you a current client? Sign in Sign In or Sign Up Live Wise Book an Appointment Please note that not all therapists listed are available for in person appointments You can view the therapist's profile and availability for in person sessions by clicking on their name on this booking page Most insurance policies ccwer services for Registered Psychotherapist or Registered Scn:ial Worker We also provide direct billing for some insurance plans when approved by your policy provider (Please call your insurance provider to confirm details). Our Team Welcome to our online booking site Intake Matching Consultation Intake Matching Consultation Intake Consultation Discover the perfect match for your needs with our complimentary 15-minute Appointment Intake Matching Psychotherapy, Registered Consultation. Led by our skilled Client Intake Coordinator, this personalized session is designed to Psychotherapist understand your unique requirements and connect you with the right services. During this consultation, our Client Intake Coordinator will attentively listen to your concerns, goals, and pref.__ O Read More Psychotherapy, Social Worker Book by Session Book by Practitioner Couples Therapy INTAKE-ART THERAPY 15 minutes - $000 - Offered by Morgan Sparks, Lee Kellogg, and EMDR Therapy Psychotherapy Intern Clinical Supervision Post-secondary Student Counselling	{"loginform": true,"urgency": false,
URL: https://livewise.janeapp.com Model: gpt-4o	```json{ "phishing_score": 1, "brands": "LiveWise Associates Inc.", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "janeapp.com", "reasons": "The URL 'https://livewise.janeapp.com' appears to be legitimate. JaneApp is a well-known platform for booking appointments with healthcare professionals, and the subdomain 'livewise' likely refers to a specific organization using JaneApp's services. The webpage design and content look professional and consistent with what one would expect from a legitimate booking site. There are no obvious signs of social engineering techniques, suspicious links, or other phishing indicators. The login form is prominent, which is typical for such services. Overall, there is no strong evidence to suggest that this is a phishing site."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3203)
Category:	downloaded
Size (bytes):	3226
Entropy (8bit):	4.870884009496049
Encrypted:	false
SSDEEP:	48:TAVuzTGuOMGqfVp63p88tQ9FDRWr7FFNi:TNTGuHGSA36jDg1FNi
MD5:	4AC15B5916DD97A877E2F373FDE96C9E
SHA1:	C2C68BFFA6ACA9AE3AE411A7C0FB54218E3EDAE7
SHA-256:	BB89F3A9F649EA98721F77EF41F0A87B3CA29599150E7F4FDD2D56A8FC6EA7E0
SHA-512:	C9F5E8417EF201F28453059CD7AA5CB620CD98C4FD5E90F00B0D45BD61638D82A72FE7F59FCEBF499A60348DC035331B5CDF01CA88221D7951444FBC1A20D6EE
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/assets/print-bb89f3a9f649ea98721f77ef41f0a87b3ca29599150e7f4fdd2d56a8fc6ea7e0.css
Preview:	/.Print Styles.../..@media print{.col-print-1{width:8.3333333333%;float:left}.col-print-2{width:16.6666666667%;float:left}.col-print-3{width:25%;float:left}.col-print-4{width:33.3333333333%;float:left}.col-print-5{width:41.6666666667%;float:left}.col-print-6{width:50%;float:left}.col-print-7{width:58.3333333333%;float:left}.col-print-8{width:66.6666666667%;float:left}.col-print-9{width:75%;float:left}.col-print-10{width:83.3333333333%;float:left}.col-print-11{width:91.6666666667%;float:left}.col-print-12{width:100%;float:left}.header{min-height:0 !important;padding-top:30px !important;padding-bottom:0 !important;display:block}.header .text-center{text-align:left !important}.directory .search,.directory .btn-link{display:none}.directory .user-info{margin-top:0}.directory .print-layout{margin-top:0}.directory .print-layout .user{font-size:10px;width:50%}.directory .print-layout img{width:150px !important;max-width:50%}#topbar,#min_holder,.footer,.social_buttons,.program_link,.header .b

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-7KWN4PCCYC&gacid=1060836916.1720126517&gtm=45je4730v9100741783za200zb9186823250&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=579395402
Preview:	<html></html>

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14713
Entropy (8bit):	7.959714712307717
Encrypted:	false
SSDEEP:	384:YTe5yEs1Lt/3QGO6LRRV+w5xjItL4PyDEgT2A4:u+stt/3FO6LRRV+qqtWyDG
MD5:	0D806E6FEA69C60A7AF9B595DE5A3445
SHA1:	E91ADFD7E885A51B63E7AEB949B37B393BE766E0
SHA-256:	593FE758A49C48635EF8B04635E7708ED81F1929B002641473B900925DDBAFB1
SHA-512:	ED0F87F6B4A80667428237BF107B576716B5986E4372BA0D6D1AB18B931C6299D7449F465E376FB1B894A2BC7550AD46DEBD1A2700658498B8AF9EA181849BF3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......x.............gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+....8{IDATx..y.].]..y.v.[U.V.../.-.-yK.l.!...$........=....L.C..O.........C .Nl.....e..E..]U.^w_.gy.s.]JU...IU...r..,........$D..!..F. D..7.BB.."D.!!.......B...DH.!B.hB....q. ..y..F.(.FH..........1..m ..x..r..DH.....L...?......#]:.......M...z.....&H&..>..4O..aZ....O....).........B..Th.'....#Yj.DH.+$.fk...IT!x...zH.....a. 0 .M.?;8...,`....).r.....7...%,.EB.B."...Z A"..<}.."...K!../....z....q]I.b!V8BBXU..t.CQ........//H.....o..- eH...!!."../...P.?.@.~..5.]..fk\|r...9Sh..!V6BBX-.'.WLcM..&DS"..E.'-._.R4I..%,;$.....V .....@"....%.....l. %..Gfj\|..I.](a.......V......]4m..!.o$IwL.m#.`..Ds.Rx..^....x......r....B.tt1W.s..3Qh.i<....M...1...4.../'..E....L...7.O.q...V"BBX!......\|..i>..<...!DG.......].6f".wR.r. $. <.....l.O<3.S...Ma."$...`RN.....3\|.p.l.Tw/.`.xR...1~..zb*.........h...6..\|.).....!1....p.#....:...$...b9...U.a...E.b..

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56359), with no line terminators
Category:	downloaded
Size (bytes):	56359
Entropy (8bit):	5.908311343417257
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBbZ54PgxRmSGdXXwW7MFW+JVEEM:4UcW6v+0Bb6hXwW4nxM
MD5:	4ADCCF70587477C74E2FCD636E4EC895
SHA1:	AF63034901C98E2D93FAA7737F9C8F52E302D88B
SHA-256:	0E04CD9EEC042868E190CBDABF2F8F0C7172DCC54AB87EB616ECA14258307B4D
SHA-512:	D3F071C0A0AA7F2D3B8E584C67D4A1ADF1A9A99595CFFC204BF43B99F5B19C4B98CEC8B31E65A46C01509FC7AF8787BD7839299A683D028E388FDC4DED678CB3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 260x120, components 3
Category:	downloaded
Size (bytes):	11672
Entropy (8bit):	7.8715289038575404
Encrypted:	false
SSDEEP:	192:aS9Pfa0cI7/YrXXIPqDZLajVcKvmzyVmWi4r9EawVvU0x/NTHz25kx:aS9PVcMcXYPqVLaO3zYmF+E1BU0ZpHz/
MD5:	1D6ACACA5F1C8EE52A435C3DF2F6BDD8
SHA1:	D56793F396DD5A6D29E4F7A444766F0C21B4A39D
SHA-256:	8569DA69E808A5F956839D940D36B044A9289011D5DA34F82A01C44569A51078
SHA-512:	80164ED76716CBCDB9BECF4E150E9B6A15DF70FF6838EA5B1AE99FDDF0BDC263606E79B7038964A78AEACA6A48D28AE8521CBCD681E6E0A32762684BB1CDFC7A
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvNTQvNThkZDVmYzQtZGViMi00NDUxLWE0NGItZDg0NjEzZWZlMTE3L0dyZWVuc3BhY2UgTG9nby5qcGVnIl1d/Greenspace%20Logo.jpeg?sha=28914c691fff0ece
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B6F2BD4C495011EDB3DBB4E491C43782" xmpMM:DocumentID="xmp.did:B6F2BD4D495011EDB3DBB4E491C43782"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B6F2BD4A495011EDB3DBB4E491C43782" stRef:documentID="xmp.did:B6F2BD4B495011EDB3DBB4E491C43782"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.385737257052624
Encrypted:	false
SSDEEP:	3:Oza3PdNhkWXLfn:Oza3PdUQrn
MD5:	F3C42D1378067752945A0CC40E67BF24
SHA1:	87CBCD95757D3AEED3E4F88D2C7CD4BCD9243A92
SHA-256:	56332F9DAB52B933E7AA16316BF659079A9FCB4C9CFA5B915FFB2F17FF099EBC
SHA-512:	7B985046AC37FC769B5674A4277CAB43A3E4A6EF1A48DAD489F5AF7C9C866A48801C5F0F9E73770C8958B22F6EB5F12C4B20A15DAC2FA9F733C055B48F21F8B1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQmqgph8emmFBhIFDbVvX3USBQ26x__EEgUNz5AaqhIFDb6t_ZU=?alt=proto
Preview:	CiQKBw21b191GgAKBw26x//EGgAKBw3PkBqqGgAKBw2+rf2VGgA=

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6940
Entropy (8bit):	7.915518120773207
Encrypted:	false
SSDEEP:	96:2BdPzExocIKQAzWZ6V8hAqATy77UAdbJ4D4GKQV2h5pO/ITYO9ImVBlfo5Mjm:2B5EOcI6KZ6V8yqAmDqV2fpNT1932n
MD5:	AEE69BA3904FB1EB42293F1A65DC282B
SHA1:	CDA6F96DDE038B281A799D9814E8588DAD5A1F65
SHA-256:	D1D4F7D67F4EDE4B07BD95A5140B3715F4DDF42E8D17126A19B5C036FDA2C2C8
SHA-512:	F8D976ADD4AB9188FA14F210906545735C0F2BFDC99D80C59A1E94C3A19C9FD7480FD669904225C2C34549C9EDEC78DF166FD1D27A4D30E8F3154E3C879E94E6
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2023/06/21/18/45/50/4760ed29-ec7e-461c-88b6-d85cc5eb9f2b/Clinic%20Sites%20PNG.png
Preview:	.PNG........IHDR...,...T.....8{.m....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...#...#.x.?v....tIME......$........IDATx..y.\U......;.$....B...UV.Ae.E...(..# :..2..;:.:.2...;.(. ..c...YG.CB..w......:...9..U].]..-..~>.I...s.=...>.s....D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D.....T.E.^....t.g$7...\+b.K...yd...=.H$...h.u.......\,q.0IrC$.%V!...~`.r<6....v$..%...:.....&"~(x....R..@x.<...E.1wZ.Z..[.T...=$.$'q....%...].;x..wgH.s>.2..=.H$.[.p..:@r'{./jU^T.>Q. ...#.Ho.....G.<...b...(1...}(P...D"....@r.....g.Olk..!.L.&a$..e@....,....s..p%.V..U...rW.........".H/0.V..Z...;.!.G._..........I.$2..%w..4.......o.9=w..>.H$.C..:w....<......j..1...G#...K..r..s.yG....._X.L.<.A..W$fJ,........oJn...T........=..H.....:w...a......$7..H.J8...D..xE....;.Ny.UpLF.Fr.3^...r...K%w'p...e.O.L..I.D".OW...:...._.5..zq...V..N9.It*. 8.e.......I......{...i...V.....D..>s...l..:..H\%...V.l./....N...y.jW..?i:.....;_.\|.lZ.4..x.>$.u.w.G=....>..t.>..^...

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Canva], baseline, precision 8, 1800x1200, components 3
Category:	downloaded
Size (bytes):	348683
Entropy (8bit):	7.968553932284151
Encrypted:	false
SSDEEP:	6144:PENxZrMsq0XGgqe8I1dHbKjO+V1/vecfsgI9dlIQvOtklLazp41vCFp:PErZimGgZ1fksFlvOty6u1aFp
MD5:	F967900E79496F65EB3535F706C92839
SHA1:	46C1A654B23D26072D68133534AEE839578D1051
SHA-256:	383F108E5A1040696DFB0F604955D85675084D5E459D18A18B094599EB824B41
SHA-512:	AC67A319B15417C63D1C9DE2BDB291B3BB492B2E6F2A583288851AAE4D163DAF009022476E05C77A59293E6547FD61F52F43121BC718F5E67DA6D5D3DAA37ADB
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsImN1c3RvbWVyX2ltYWdlcy8xMzQwMC8yMDI0LzAyLzIxLzE4LzAxLzU5L2Y1NTBjYzRhLTA3MTUtNDA0OC04N2U5LWZhNmUyNTIzYzBhNS9Db3Vuc2VsaW5nOC13ZWlnaHQtbncuanBnIl0sWyJwIiwidG9fd2VicCJdLFsicCIsInRodW1iIiwiMjAwMHgxNTAwXHUwMDNlIl1d/Counseling8-weight-nw.jpg?sha=b6ce67013d5a39dc
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.......K..Z...%G..........."Aesthetics - Counseling8-weight-nw..P..Christine Bergen.8BIM.%.......OU.8..............Exif..MM.*.................V...........^.(...........1.........f.;.........l.i.........~.......,.......,....Canva.Christine Bergen...........=............................................ASCII...xr:d:DAFpTMdYBlI:643,j:1617201069187934366,t:23111021....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Bergen</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Aesthetics - Counseling8-weight-nw</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmet

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36169
Entropy (8bit):	7.97784541173813
Encrypted:	false
SSDEEP:	768:JmyxQzEEFNPpDjMDukSbMiKNn15x9aeChtEvsF4acM:JQEoNkWKN1d7ChtEvsuU
MD5:	86BE4E44150164A26D1EAF5DFB46D5AF
SHA1:	B02639E676D9B3CA5FADC5546CB19763EA5D1876
SHA-256:	E7D1A4A74E40B7853F675F91E21590D0D9C99C7DE35F7E7695631D5EFF5858D5
SHA-512:	01BACAC9C16606CEEAE3B22942D99A9399F34CE81D3B7E6243F9174A8D55E0C81F2C6BAFB3BFE2528E55BB8BB49BB6BE7F0B81A49D4F17E6AF407A8DD5C21008
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..\.F....IDATx.....eYv.}.p...1...+kbU..,..L..I..-.h.2.-.....h.....F.p.0.4.....[h.....MM.A.bU.Xsfe.T9FF..p...Xk.s^V.E.Y.x........=...^...]&.y........<Z.....9....^.....P.G..h}..#.x.>...<Z.........z....z=r.G.C..9....^.....P.G..h}..#.x.>...<Z.........z....z..............C`.{.8... ....p.c..59'...c..E2.o....1`...?l.....t...)W...H....!....7....>....1...q.wp..?..\|..?....c.I).X,q.C..".iq..c$..q.24M....3..0f.<....L..h...#..S.L.a.....3...=..........g...Cd..c}qJ..g?.).n.8.,.{...9g.......e..`.....].....c.!.....{..X..M.......Y..X,V......'_...O.r...1.;...=.M^..Wy.or.w..N.v..3.s.M.......?8b.3....C....C......>...x....sNN..m.T .6-....k....7os..-n.z.'.z..O~...n....Z.A.+..9..b.q..;o3.[.\|........+...8..v;v}......9...[..E.N.q\|.&.7.........%..{.{.....DB......")g..8......<.7.}.....88<.m.\|.q...\|.c...I.\|...4.....#U....R..7x...p.....s............1.c.[t...8.4m..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 405, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	18309
Entropy (8bit):	7.924199070001516
Encrypted:	false
SSDEEP:	192:OKzTK+irFIwu0y1GlC/UYMAFwc3P/O5MIFHZB/Vy4rcwKQ8s/bcVEQbNgjLqR7tl:s+i3uNgM53f/KzZB/VRVJbnGN+8+6pf
MD5:	55136D7BC4A9696570D1FDC6DA164063
SHA1:	E3F6F0A6567C0756340E84DC302E0488F1B2A242
SHA-256:	92025D14E4BD359A3EE5E6AD3FDC3310C84714F4434814CD2093B02646C2BC10
SHA-512:	7602CA5DE6F18DA591375136428E4F12F6FD8B9E201A5AF9EDB1EB6049AC7AF48D1EDA8FEC760CAF529F6B5DDE5FE1AFFBD7EEA3DEE10A662857B6CA4FBBF061
Malicious:	false
Reputation:	low
URL:	https://gottmanconnect.com/public/img/gottman_checkup_badge.png
Preview:	.PNG........IHDR.............Y.....PLTELiq.....................................................................................................................................................................................................................................................................................^..F..>../..,..,..8..C..R..t............................................z..1..-..0..2..1........6..U.....?..3..@..P..b.......X...........u..k.....I..-..r........B..`.....=..9....V..;......9..n........K............e......<..........4..j........H....N..h..w....Y........................M.........................[..\|..+..)....~....p....@......E..b.....7../..U.....d........k.....g.......................K..j..6..l..U..;..........v.....8............tRNS.......................... "#%')*,./1254<Oerx{F.............X9..6..C.;..K>AY.D..F.L.G.................................................................................................

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	24533
Entropy (8bit):	7.618292277906146
Encrypted:	false
SSDEEP:	384:i6fUk+wMmrph/z7dLh92/PxqExYVsCMTVQrapiZbMI6l9tem1L6eRxU7iA7R2D2l:N8NQw/PxNxYVTMTV6dbKl9tem1VUn7oE
MD5:	B9DEA2CB4105CBF1D00C548E7CBFEF11
SHA1:	C2D1A70A1F7E1BF8B2071A34526CCE96F221F684
SHA-256:	7C66A8E97D1870E3F9CCAE50D7EE53611486A992DE0A1091B431F46024A6C198
SHA-512:	DAC1938062D25FD62FE228ADD1725ED50F7F9B99B8B56E591608204556F5E76C2D4B41259EABC7F63E9F112CA3F44A12DF9B2FE991DA927D7D0DB81FDEF04DD3
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC9pbWFnZS9waG90by8yMDIyLTA2LTIwLzIxMjIyMy8zZDEwMDlkOS04OWEyLTRjMzgtYWQ0ZS01YmI0OWYyY2FlZDAvTElWRVdJU0UgTE9HTy1DT01QUkVTU0VELkpQRyJdLFsicCIsInRodW1iIiwiNjAweDYwMD4iXV0?sha=780eb076f58aee50&for=livewise.janeapp.com
Preview:	......JFIF.....H.H......Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H..............0221....................0100.......................................................C....................................................................C.......................................................................X.X.."..........................................l..............................!1.29AQqv.."38Ra......7UWuw......#Bbrt.....Vs.....$6CSTX....&'5df...(4:De....................................<.........................5r....!46Aqs.1QST......a...."2B..............?..................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	61048
Entropy (8bit):	7.976983207111607
Encrypted:	false
SSDEEP:	1536:yWY7w1dQ+FMi5WAFOJZzbYNIWDzTAO7sE++VOrr6g5pVzd:yd7edbdOzzbY2WDzUOxkSg5pVzd
MD5:	EE5D2499204B78C112E197EEB4C331CE
SHA1:	7F834B0436A573B0D23E7BF2ECCBBE0A0FFBEE26
SHA-256:	66CF25236E69E83007ACFC0C0D4EF8238368BE5104D6F9FF5B51775956B09831
SHA-512:	FFE28499456EB94578FA22CDA54B1B3CD7A498E25B7BE47059A72E71C78329A2586E4B5AA5E5B2FB4FAC3498A16B275C263BD960C3BF3C614F9C83875DD39BDD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8.~.w.....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx..w...Y..[.)o....3-S.Lz...@...AJ ....Q...E>...A..R..F..ED..."""...dZ...3s...-OY...^....\~ ..s&.`..g..Y.Zw......z~=.._........z~=.._........_...kq....!..d.....p.....7.x.I......x8\|..~3.{...<...Z[?.=...Z........8Z......c.X,.p.._~...........p...R.>}...\|p\......\..._..\|W<....8:...m...w.w..k.zx2..ZYU.N.......!8k...F..Z.S.-....r....._.M......Q^....._.f\|..^.6).....].=..7[k..t2.b.......0.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.787190602698568
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKvUjfXNIqHWaee:PLKdXNQKv2fXLHL
MD5:	F66834120FACCB628F46EB0FC62F644C
SHA1:	15406E8EA9C7C2E6EF5C775BE244FE166933BFCB
SHA-256:	8F063AE681A530A407EA4D17859790D9E45FD81CE5B3BB6202FC9E30CEF95996
SHA-512:	7C596E61967FE787BC29D262C945D7EB4E02F9F574D3C8C664F333C9C3B4DD4AFF1DFCDE8F34BE1ACFAF8C05423C1C118A4BFD50684A7CD9F90E5F40FBC89653
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50723
Entropy (8bit):	7.983160999032946
Encrypted:	false
SSDEEP:	1536:5GfQHnsc6rPunZUVndUJ49xYSUvg4GuUBb:5GXrPAL4J14G5b
MD5:	E06BC686DDD1D336BF6772580BE5097C
SHA1:	471EDB611EEFC4CD3F03445EFFBE9163E27C525D
SHA-256:	6C3237561635DA306B426039CE1E97257A07389257441C28DDA331F531C63C9F
SHA-512:	C7C4F12ABB4FC5BE6C8EC16E56C5B13EB395E7C134CED5BC407A3BD713AAA6C665AC79FFD6B0EB5986DE051E168ADCE22B32046D03DFA7842204332E0174C9AF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8...&A....IDATx...y.mY..}~k.{..No..r.........zT7.Z...,....@a @.!. c..B.@ad#;.......#..2 .......j...9.t.s..k...../..7f..q#...u..........'....G...5.2.d..y.{y.O.<.......{..g..&.....yA.2......^>.'m.....=.......a.......^.s?.Q..$].7.<O..{}.].....<.........~.y.t...<... ..4..N.;....o.....;..q.s......so.:.{.....x.y..<..y..$.3}...7gO.{....A.y.y.z.s.....g..[o....1..0...{}....'e...y....=~.y....~.Hm.[Y.o...Q.....^.@...Z...g<....mgZ...s=..;.y.....h.s...>.y.}.s?.'6.V..^2.o..^_..........:....f..N...a..{9.7..ab.ov....I.O.yb..V..h...`..<.a....x'..7.<.\...v...<.Z.....'.Tx...we\|.....M=...z...~..3.......\|.y...x...,....R.y.[.....'~..Hi.G1....G...+....{.m...n.u..<..%S.b..f....._.uA\|.\|.'u.o........?..7eo.. ......T..$..b.i..p..;...s9...6c._.9..m._....1.W...~a..O.&.M5...zT..o.y....]...G.L:os~....1..Rv.1...0....}]`H1\|`..oYo.O..g!D(..!.1.,`...Wf......s..Nb~.g

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	9235
Entropy (8bit):	7.846091442365623
Encrypted:	false
SSDEEP:	192:uMs1hMHorcCADrXu7CfhRgv3F7Z/kezSuIG1ptFgOT0oblA:ufvRzA2AuP7/Rh//0obO
MD5:	8C4F9E289B2DF3CFC09B69EC8EDCFFE7
SHA1:	F9226C3DAE6B3F1037EEAB02E0116CD1A5CAEBF3
SHA-256:	FB2056125214CE76CF1189E82782469D5805ED16BD08EA27DC1A915118C1A977
SHA-512:	26BEB64EB52A8F0F9BB9C30F3950944D8A0F3D3E614E895FD18EF16C415BD112EE9660E0DC550E15FE7537E09413B44552F20BD1A80D6C418625932869FE9B09
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMTAvMDAvZThiODgyMTktMDkwNS00YjI0LTgxMTctNjRiNDcwNWExNGQ1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjbiJdXQ?sha=34644bba1454c484
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...XExif..MM.*...................i.........&.................................................(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C............................................................................"..........................................E.........................!..1..AQa."q...#2B...b...$3Rr..%S....8Cc....................

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	61048
Entropy (8bit):	7.976983207111607
Encrypted:	false
SSDEEP:	1536:yWY7w1dQ+FMi5WAFOJZzbYNIWDzTAO7sE++VOrr6g5pVzd:yd7edbdOzzbY2WDzUOxkSg5pVzd
MD5:	EE5D2499204B78C112E197EEB4C331CE
SHA1:	7F834B0436A573B0D23E7BF2ECCBBE0A0FFBEE26
SHA-256:	66CF25236E69E83007ACFC0C0D4EF8238368BE5104D6F9FF5B51775956B09831
SHA-512:	FFE28499456EB94578FA22CDA54B1B3CD7A498E25B7BE47059A72E71C78329A2586E4B5AA5E5B2FB4FAC3498A16B275C263BD960C3BF3C614F9C83875DD39BDD
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDE0MzAyL2FmYWUxYzg3LTVjNjctNDhkNS05NmI5LWZiMGU2OTNiYjYyYS9sYXJnZXItcHJvZmlsZXBpYy1OYXRhbGllLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=bdb48c07b6b4936a&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8.~.w.....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx..w...Y..[.)o....3-S.Lz...@...AJ ....Q...E>...A..R..F..ED..."""...dZ...3s...-OY...^....\~ ..s&.`..g..Y.Zw......z~=.._........z~=.._........_...kq....!..d.....p.....7.x.I......x8\|..~3.{...<...Z[?.=...Z........8Z......c.X,.p.._~...........p...R.>}...\|p\......\..._..\|W<....8:...m...w.w..k.zx2..ZYU.N.......!8k...F..Z.S.-....r....._.M......Q^....._.f\|..^.6).....].=..7[k..t2.b.......0.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	7.988839220194277
Encrypted:	false
SSDEEP:	768:laqlEK1RMrr+r0B1GALfxZZdOz+M6O55cbawZk4h3r3117T66bvjVPPEG84MCptd:QdkMr6r0B5tZZyD3cbaV+17TbpPM+L5h
MD5:	66179AC6CB82EF0005DB0E318CF7ADC1
SHA1:	E1A0E5CE15948F9A5B3E222C7BFE4A1B943B714D
SHA-256:	40A48C91D56FADB3B4F562040C50F5DB8E0A8ADCD7B941A37F7A3CD9670D6124
SHA-512:	550D081BA14EFBAC21109B7978E746D245D5618FB91BCA9FD449F986D43EF4AFF2A3E1EAB43D1181E2E3C2A627282BB8FBC464F3E8052BFCEB60A5195D1AE02D
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDI1NTU0L2E5ZmMzOTZiLWViYmItNDkwOS05MjY2LTg3MjkwMTJhNGY2Yi9NeSBwcm9qZWN0LTEgKDMpLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=f4d02fec98e7f7cd&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8....t....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y...y..~.{y.w;...wu...eY....66alc0... .0d2c..L..a&!.....B`B....6......l.-.d..n.^].....,.:.....!.H.Wu_.Tuw.9o...Z~...o...F.......~5._{.;...of....}]...........w......k.9@[.[.r..^.KW....G.........o.....5..~'.~.?8oU....uR/.\|...C.O5. ?.;.......s......#..t....A....+...S.bJ..s.0..O.0'.?.........v./~.....G.w.;w.GvO..7......C....G....O~...'..W...Dmo......k..]7.t.....^.....3...c...cf<..9...z

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Canva], baseline, precision 8, 1800x1200, components 3
Category:	dropped
Size (bytes):	284501
Entropy (8bit):	7.971063146990173
Encrypted:	false
SSDEEP:	6144:huaAKA9KITyYVkm0zrXR3HH+FRm/Oe3Mp2wvD87OKygzwh44zM2:huanZJYVh0/XR3HeFKOe3jaYrhgM2
MD5:	D222BB4E2443ACCDE8293E306203BFF5
SHA1:	4E2CA3EBDE6978D4F9C753C3D86C5E08DC25D8F8
SHA-256:	24B6F6D9B1E0CE45253ECB0AE671D42DC4C3453EB143BBAFE1B4DD2D668184D8
SHA-512:	F6FC623EA9C2B81AF1E40F56C76ED719CD4809585D8CB1C501B100E2D92EA664529278D8EA6B66A7BD3B97C3AB0BF95E0CE18DC2CD301F5B0BC8BDC7285994BF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.......J..Z...%G...........!Aesthetics - Counseling3-weight-n..P..Christine Bergen8BIM.%......k.0S.6;...........Exif..MM.*.................V...........^.(...........1.........f.;.........l.i.........~.......,.......,....Canva.Christine Bergen...........=............................................ASCII...xr:d:DAFpTMdYBlI:643,j:1617201069187934366,t:23111021....fhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Bergen</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Aesthetics - Counseling3-weight-n</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x627, components 3
Category:	dropped
Size (bytes):	119313
Entropy (8bit):	7.853609287744999
Encrypted:	false
SSDEEP:	3072:KlU9SvDko5n2dwL2sPn5XxEFZM8xh6XhqufS:ebkun1L7PjEF+836XQuq
MD5:	D1215283D860C3524BF579AD188C3DA6
SHA1:	E52C03333A365886EFDF9731F01CCBF8A26CC316
SHA-256:	C8EBA3A74D739ED3E4DB3D02C082AAABD879B013A36054792FAE497B3F4D5114
SHA-512:	D86A8352CFA5296E1CD63CC3BA907FB89BEFBDBC1D8BA61A0AE9EF2179DAE4F47E8C0D8EA296E84B2BA89BB85F9979F829AC412909ABF929EA2019B1E48A7AF5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	81250
Entropy (8bit):	7.986208809977716
Encrypted:	false
SSDEEP:	1536:NvWkaOqS+x2Su79/ba8zKDFkg6ge1g6Cyf6+AVHdeDbyCYimF:MkpvZhJz8pyf6ZVHdyr8
MD5:	9D4A2BDFE6004B4A55BAE8D1CF9F17DB
SHA1:	5BAD99A0A190628816B32E5E55A2BCFF52C1C182
SHA-256:	DA47985036A3546539D65B3E3B99410F0664DE90453B8B6FC401CAA0A04D10C0
SHA-512:	1703D7089B20A52FEC1034E0E10127B7850A17ED4D09ADAA4EF4BE63052684AD7352DFCB50167E33DD70990058C1A0EC62D1BC8DEC2680F745762AD8816986B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8....t....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...w.f.U...w8....:...4..1H $!....16.&..b...{mc.08`..c.xI..BD%P@Ba.&tO....w...S5.__...J.h}>.nuWW?s.^{.../.>....{..`mM=..r.x\..G.]..x..U.^..b6..=...Z..n...76.SW%.^...yO]U..9.<GE.).Y..f.o..6._p..Mc:MS...d..e.'.u........'?.O.....O..,.../../y.A?.?.!....Y.......>.a^.....t\|..M_..~.[../..{.F;;..'....r.4.~....O'.,/........N^.DQ.`8d8...`{{..\|JY..eE.4TuE]7x.Z+.f.8N....K...r..............z.s...]....

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	448
Entropy (8bit):	4.322416131286903
Encrypted:	false
SSDEEP:	6:vMqoXDEAJyB79i8sJOezXXhKvNsTXDEAJyB79S6OJOez114vN8K2GTagGT4Swqn:UNDgBU8sJHh0NIDgB86OJWN8YTaDTxhn
MD5:	2701CADE8C085EA5C92E00CA7959B10A
SHA1:	715138E474D5412C27819E469D4B378D2912472E
SHA-256:	2EE7ABD562D0D952E0A5089C1AD79B839485E14A72564C791CBE2E1FB7AC44D2
SHA-512:	CD2059F9674C94DB391E7CC03FE3571E219A6CFFB826AB8F12CECD274DB91BC134A7153AFB2F92F1A8218D7522647208D309B982AF906C45BF0005248336474F
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/favicons/manifest.json?v=20170325
Preview:	{. "name": "Jane",. "icons": [. {. "src": "/favicons/android-chrome-192x192.png?v=20170325",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/favicons/android-chrome-512x512.png?v=20170325",. "sizes": "512x512",. "type": "image/png". }. ],. "theme_color": "#ffffff",. "background_color": "#ffffff",. "display": "standalone".}.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	65683
Entropy (8bit):	7.986441099827576
Encrypted:	false
SSDEEP:	1536:4HSghW1Ww0dpOI79G/kvHG0KCQwNYJKLmwivuqY1YEArUF:eSghNOIJG8D28HivuqY11F
MD5:	E13D2D805FE38E6AC290F9080B683940
SHA1:	FF7A5C9E8892BE56C32D912A757AC07586927614
SHA-256:	B9E3502932212028E23716C6DEC2A29965038512B9BBC4CF8999B678F2B8F0BA
SHA-512:	896D73D724D5D959FA4D00A11ED6187E995158E0E70818BDE94226D1F3987FBCBB7FCFE4E5636F2ADC78A3783BEF2DA560401FF68661B1164DEFE672D7727E10
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......7.......zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y.m.Y.~...c.9W....E @..H....(u-).)...(.~J-.r..X..,..s.[Z.U.U.;PT.!...@H... $$9.9'...j.c....<.{.G..d%d=...n.^k.....i~.p.............x.g...=...;.....o.....z....2K.8X.<r....@.{..=..c(.i..J.,.7...J..s.#.b$.LH...N....b..RI....c.....L..)F.\I...&6!..f.B...3.9B5.T@,...d..... ......,"..\..... .......cu..;.]{.........w..E.+?..]........\|?.........E.._....q...8~v.....V) 5q.`......8^..8.Y..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4774)
Category:	downloaded
Size (bytes):	270486
Entropy (8bit):	5.54162662472578
Encrypted:	false
SSDEEP:	3072:Y0aiJ9iVYZLYFshf300mjnnvLMzU467dbeOKfy4WqM0bukMY0n:V+VY9YFoyzymTqM0qkMz
MD5:	C2EDA04E9D10606C81BE8A7B6D28A6F1
SHA1:	DDA92EC29CD2C3664E676AEDE483436C514B28CB
SHA-256:	4F208F1F015AB3B0F0A16D0AD86AF49A88E72B2A9DAFE5D5910E4396E7DB9226
SHA-512:	6B3EC9FED5CD471D92C82310AAD4604F5C0A0A1BF42A472CA66FFDB1CC3E83814A896C9B24D6AE034D2526A00AC98C928F096B6B73CE8869FA370C9654AA8E55
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=GTM-PR9B4PVX&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"7",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 670x350, components 3
Category:	downloaded
Size (bytes):	87713
Entropy (8bit):	7.976613049285819
Encrypted:	false
SSDEEP:	1536:Qbitx9se8Fg+lC+cOADhRM6DezFWaWRqsfgY/uU4aGGxhvSBx2:QbsxNcSTMyeNIFfgY2mvSBx2
MD5:	4F9D27C91C9335246FCE3D4AD108A392
SHA1:	CB575554AA037341D6EC9C3F7B1A9CA6DB6A0AF5
SHA-256:	E8EB1AE0AB6F41DAB8AECA7A60B48FDE1F645A779A57E63D6D4FACB957C9993F
SHA-512:	F7DD6E9146B6B52FA17E4A09322BAD129782FE50B922E1138240E4863D5A0943D14A225386BFDD121B824E961AC64D5B3BAF5B1A8D81165B91F85FED45911F8B
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2024/07/01/13/03/25/1cd889c5-c2f2-461f-8589-711d110760f1/MH%202.jpg
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................^..............................................Z...........................!.1A."Qa.2q....#Br..Rb......$3C.%4s...&'DSc....7T..5Ed..(Uet.................................6......................!1..2A."Q.Baq#........3.C.$R..............?.5.M.3..-#s2...D2>@@.m.v.U.m.J#."Gl.......ap}S>..b..?.v.%Ne4.....`..r....r"..6.....{x...K...5.o0E....-...2.A..r..Z..2k;{DZ.+.A...y`....Q.$.}.......G.c:.>....U.<..(..F.......D$/d(vp.....9..............@..Ut.....Pt.qO...Z.F`....[.c...kG.....d.....b$..2...k.9<.'oCO.....3..#.W....>....E..............*......K..)V.E...Q.dkC?m5.8.E\.y....a..S^.y..r..m..C............weCp.^U.......4g}...3w1.W..m#.ap.kl;...k..vM%.. .....]._m.&.;.....=.I.)....yJ.....J..y.XX.4......D...D.?.>....y..Jz"E4.....by.$.rz}..$%.KkCI=.K.]B.>-.q../{Aafq.f.6...JL....,,A(.=w.\e...P....-..e.......Fji.B..........

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68260
Entropy (8bit):	7.9851148071118825
Encrypted:	false
SSDEEP:	1536:tPm36kSQ/DomCbwUivW/A8agCSMYhGjTaHXJ0rovQIgSlgtqvdMVE5:tPm17omCbju8agvzGjWaIWteMm5
MD5:	7802691B41D7F361F4B02367592F2EA7
SHA1:	CF71EF5D6291A240D48DDC2FBA49BF81E85D0868
SHA-256:	9B5D8D659C4289926B6E21FB72E55CD055F3D620125EE351EF687FD9CDA98367
SHA-512:	A3425F0ED4BBD95F232C582B866AA3E5DFC4E10FFE5843DFC43B219D614A5584F63E59AC05F239D32E7E56FF62387711EFAF5519FA9C57AAF7B95595A63487C0
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDQtMDQvMTY0OTA2Lzk3ODFhNmNjLWM2ODEtNDgxNi1hM2MyLTcwZGI3MWI4ZTZhYS9wcm9maWxlLXBpYyAoMykucG5nIl0sWyJwIiwidGh1bWIiLCIxOTJ4MjI4IyJdXQ?sha=f296a3c836863003&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..UZ.....IDATx....%.u....sL.r.`IJs?].4.y....j$J.@.t....my....~X+.d..H.........'On..^cj.._.Ske.&^.\|._.......=}.0&..BC..\..4.s.Z..RJ....0...%.1.......q...HM.........VC...~.w.q......C.4.c..D.vXkH9c.`..;..8...........s..L.Pj.:....iH).c.^s..c..%CJ.g..q..q..;..=...................._...../6/../.........../^S..b...C..C..0.0...Mh.Vnv{J...#..4Fj5.X.9.s.b.W+....S..3.Tb......1..d.Z.M.1F6.)c...O.\.p@Lp8....c-.{l..q...J>..bJ........4....BJ#?..s\.4m....>...v.z..9..f~.._......g.....s..O..W...'4.Z+.C-.Z...J.....q.0@..UN.i..w..Xk...%.LJ....{.8r<.8..x.h\|C-......PJ...u.w..........'.L4..m0@.'.5...(Y6\.t]O...'.1.\|.9OJ..$yo.s.k=...O~..9eJ.........<\|.....o6.....m..#/_..O......o...}...k..@.R...^j.[....0.G......J)..2.frM...#.....v..Z.4.?...B..HEe(.`....T....M;.R.Y0..B.R)...\.%...q...D..g.Z.i...l..4mK...0.K!.D.....Vj5...O?..a.8.......Q........7%.....l..#/^<..

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	71195
Entropy (8bit):	7.99156473821155
Encrypted:	true
SSDEEP:	1536:OxjbF5xg+gZssHiqvJ6RB8ytZg2q16qJqZnjWxEQC1BE+q:Ox15gZs9goRt2ySmjBvq
MD5:	CF65B66E511EB99CB29A5E6E39059E3F
SHA1:	6F0B00373DAF43350192018684EC18B1FF5B798F
SHA-256:	4B86327462043C8990E57CCE0658A1D791D7170EF94084832970A2BB10D05903
SHA-512:	7B912201805970DDCC9314149CA8A243CFF43A51775FA00B288EFA7398787E59B126AF47163DAC53AC984050B0BF7B566701278AB0BF407573A96D83AECCD420
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDQvY2E4YzQ1NzAtYTVlNS00ZDY0LWI5ZGMtNzMwZDUwNzVkYzkwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=6906302e733c4b9c
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......-}f6.....IDATx...y...z.}....a..........B...0....8.b....8$.....\.3..[...91..T\.!..8....3...@W....=..oX.?..../....QS......{....Y.Z......?v..../q...>..X..+;o.[..h...4.......@k.Z.R.B.....-"..(.P. .Z).s.&&...]!....f.Z.6..H.a..Q.....TIP1.D..b4.....I.B..P)...D....H..I.)....?Q...L.. .T.....1?...}h$)R.^7...)...D............>.....<.......5...../...}....._.?......a.!.j6w...k.3.....Vh.Z.J)..%.r`).QJ.2(e."$a..Z..WhR.DQ...V(S.v(.P.._.K..J...w.P..1...]^.....@JP...\|......4.......b:.. ....._o..A$..g.W..Q.M..u>.4h.....vC...WF......+])~./...._.+.{.<.e....'y....zb.....I..t.~...E.:..1.cu..)_E...J).}..^A.6%.4Z.(e./.\.....-..J...n.7{..A.......(....s.$HL.@...H~...M...._g..%.R.Y.....(.j.:.! ...`P..'IP..t.....JP..n..{..(.Vh..'i}.Z..h.Cw..<y....{.....&.u.....I^.,.....T%.'...i..c...C.h)"...%.L..F.R.)...Z.s5.:Di"...1..,I.V..&.D....et..$..)..V..S..

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 1600x417, components 3
Category:	downloaded
Size (bytes):	161094
Entropy (8bit):	7.968250000126227
Encrypted:	false
SSDEEP:	3072:YNz6wSLszvVRDBms5rSMmfvcX3ikJYusicqEZNA8VoJnpLzRN:lLsjLDOvc3ikJbsfntVoJnp3r
MD5:	6190955D5BCE75AA1AF1F13523A33F87
SHA1:	77EE1181B34E32F6761F8E13AAEB154E3215738B
SHA-256:	24A81B4B371CDF225462CB3B551506F82C312ED0CD20E33AB84B681A94C4A6E3
SHA-512:	FF74D85A36BD906F78A653B2BD7FB0C3CE9336E74662D703CA352654CE7924A9508DED01A4A485E585114520E89F36DED3BA2D1AA34527717685CED33DED374E
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjkvMjAvMDMvMzYvZmY1ZjVhNDgtZTlhNi00YmFmLWEzYzctYzBlMzlkNjQ1YzU4L0xpdmV3aXNlIEJhbm5lci5qcGciXSxbInAiLCJ0b193ZWJwIl0sWyJwIiwidGh1bWIiLCIxNjAweFx1MDAzZSJdXQ?sha=70838abb427ebf2a
Preview:	......JFIF.....`.`......Exif..II*...........................................(.......................i.......V.................0231....................0100........................................`.......`...........http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Untitled (1920 x 500 px) - Livewise Banner</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-05-29</Attrib:Created>. <Attrib:ExtId>805a70df-27a6-46bb-83f8-2efeb9912263</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	60543
Entropy (8bit):	7.98873222836943
Encrypted:	false
SSDEEP:	1536:pmQWDUsbX++Sb2hk+RDJ2iw+W8sXP/Q4fh8XKC3PMihm:ZWggX+70RN21lf4PPMihm
MD5:	A840A96806090712C33E73A0A666D3A6
SHA1:	EBB4D2D83A9C1229D1735597CF294991072C1D15
SHA-256:	45AC0BBFA2347687CD43B4CBB61CA01029FD20AFAFABA8CEFA157A84B732E82B
SHA-512:	154A6DF15249F0553EB686807AFA64EFE22D8C9D5C99C8F2452E89FD355ED36346E78353C06F18AB69F51D3A3D4D0DB51E67707C18AC816A09D605AE623863A2
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTkvNzg4NzA3ZjktNTQ3Mi00M2EwLWE1YjMtYWU0YTdkYzVmZmNkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=37d5cab959016bd1
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................tIME......;........IDATx...Y..iz......[-]...g.2.A...p.ER\l... ).&m....F..K..a...V(lG.aKrX....&!q.iP ....H...l=.]KV..oyW_<..n0,Q..(.j......:..>....7...\|......c..:s.,.V....x...n...w...<)m.1Dr....Vk..g-.m.w.L..k...s..h....1.4C.2...%E.t ,.%%.8.c...2O..1...4-M...m.hM.....Ph.G..4..5..uO.uL...v.'dEL..3.8r..e&.D;.0..'....RLY..f}.A3.~]......u?}ssx6/s..U.\Cc.2SrF.R.R.._......g.....~............z...3\|..6.w9.......{...&...4.Rb..@...1.Z...b.,..2.pm.....&....3)El..H.....1..sR.t..m).Pr..m.. .D..m4)%....,....i..Ef..N.+.C...M7..'W{nnoXB........r.h.I1....c..:b.(cJ..w.{.?......^X...x8...q.hU...s,9..)9.~........g.....~'......C?.1n..5.{.4...p..1.7.....W~.q.!./O..Z...P....._oh.5M7....x.'.O.Y;,.)EJ..n......Zk.R..1...g<...R./3.5X.(%QR -.~.1Fc5h..F..Dt..D.vl...'.K!.D.GR..W((L.H..(b....E..."J+.I...e.\|../.b..o.........<.oSN)...X.J*.d.....!

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54217
Entropy (8bit):	7.991711921921949
Encrypted:	true
SSDEEP:	1536:mdYg9WrkNE+Yg+D0kvVSEKtD/S8sVflsgRsJ:AYGWryQg+w1EKtDK5q/
MD5:	53C1891A914E43CA1A7DD3B7683BA0B0
SHA1:	8033B33B5990B233DBD5EFC440C6EA9897F9E17C
SHA-256:	A7C7CAA07F036C6B7FFC66BE28D0D2E5BF68E9ACAD5978C134F9439268F825F6
SHA-512:	2022B881FAF3670EED4D0ECBEAF4F268F75BD55D340EF9B3A2FA9934EB389872D39DF7B31C84CBC191209AC1AF8467EDCAAFC17A3F5810B5B1A858C14D4E283D
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTEtMDgvMTIxNDE5L2Q1ZjRlYmYwLWRiMzMtNGMyMC05ZTA1LWQyNmJkN2MxY2QxOS9IQU1JRC1ORVdfUEhPVE8tcmVtb3ZlYmctcHJldmlldy5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=eb7b6274066f40c5&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8...Gm....IDATx...w..[z........'.\|.V.QU.J%.J.......a7..$...`....ew..l.,.nh@M0na.Im..B..R..J.n:q..V.......>W..N.s.{..g..^{.5.;....y.7..j?.._.....1.M..L?.bx.h.../G....\i.. F.D."......c....2Z.s.....&...~Z".....w..?.y.....q..../..a...9..........+.)(2.b...\|J..ze.7..;.....Y$m..@..&"../BP.....G.d...k......g...6..G.?US.\.}.j..e.........-yM....y.....en._.&/.......[L1..e..JDD...4>F\|.d...(.%DQ.....@ ....V..B..........E.I....}...~..?...'....../>....p._.....z.#...r0.d...m.oRY..R.W..."."B..1...i.."..@..hC...b.. .!`D#.RE./D..=6...oB8..\|...........K...\|..e9_....a.U_.....".....2/..}.%>.{.,W.S.o1.~.Q.u..F2MP.c.@k....." ......Z.BH.....D...VI)B.$D"@....!.} ...nI..4M..B...fU.n....W...../J{..~......r}.s....N.t..[La.U[.V.t..AY..E.8l...Ji...m...'.(..B$.58. );.C.$....@.%B..q.#...46......?p...+.7...}..?....[.Eeo8./.~...J...U>.s.......4....).PZ..&j...Za.!].)..Q(..C$."

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x228, components 3
Category:	downloaded
Size (bytes):	5516
Entropy (8bit):	7.909436039745196
Encrypted:	false
SSDEEP:	96:RhLLc4PRnwnjExbcyfwpxsO2cojUHTEP5kHcbMRe6pVEVHqaLHTfHTJ:LzwjsfwzsO3oKTIFbaqI+T/TJ
MD5:	59D15C815991A2808850D5AB02BFF46A
SHA1:	E13E143F61767636ABDFF9C0E8BFBDE0ABC9B2E8
SHA-256:	4D36ADAA4668D54F9BCEB6C7BB217951BD507B26C75AFBC615F7DA70E2ADE258
SHA-512:	F808EF67FAE09C217B22C5DBFF3C47840B287C356E64CF02A19A41CBC1F6DF81768AF3AEBC1801FC8D1B978591A5AC292D06B1F5A1FEF9E247100D8777977BC4
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjItMTItMDYvMTUxODA5LzdiZDM0MGViLTAzOTEtNDZhYy05MTYxLWFjZWMyMTgzOTU4YS8xMzg0QUJBRC1CQTY0LTQzQ0QtODI0My00QTAzNjNFRkNDMDMuanBlZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=295a24aa85a5e0a4&for=livewise.janeapp.com
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................7.........................!.1A."Qaq..2B..#R....3..$b.r..............................$......................!1..2A"Q.3aq............?... ..B... .._...8......b..tt@.......4..v..vA.,g.`.....tk3.h.3T..s.o...R... s.5c.X...Q.7S. ...@..P..\...B...%.=\.# ./....8.S..U..y...Z...u5.1..c../Gz)N....d!.J....!.@....!.@....!.@.....:X.4....$...ed.4...o....q..Op..}.7H.^d..Q..{..1.......YE..5L./..r.......T ....q.........E..I.....Ue.<<.D..9..<...&...>v..o4.p&.n.h..? r\.I.$)D...?...Vn.....".....&'..jR.9m\e....Y.]`...Q...z.O.}..E.m..Q&....,.-.1;3N>...B...!..B...!..B...!..?....;.<Gs...>.Z8......8.^.\|.O.`.cw...t. .:..&.......i..^...!.Y..O.6%T$..g....!..7d................Iw ...\|=...K....s.......6C.K.^+Y..(...6i.+{i..0.L....G3,......N.jv...-V....-hQu4e......b....F....

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	65653
Entropy (8bit):	7.979724100878532
Encrypted:	false
SSDEEP:	1536:Ee+EhAeRTK56CFmSL6mH7Tt/x/c0h6JnW9KlnH+bzHZj6OG:pUs25rmat7H/c0hQnwKlnoHJ6OG
MD5:	B18195FC08B32C12ACD8BC304F5E0D27
SHA1:	7F0B6720EA41D09A98F9F69F4BF3D3FC8F5334C9
SHA-256:	2387EFC1A103F1784D734BD15043C318E550D416ADC9010063B51B4C268F1E70
SHA-512:	EF671F42E2185ECF6E7A70B09DD457A91308A665BDBF263494112A48D8191F1546CF51E080F0494AA1242B72E87B044B99D9522F287B55E167844569205A1209
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......6........IDATx....%yv.}~...%.\k..h....... e32.L.'=.Q...$q.f..d.L...9.p(..8 .F7z.....2+32c........7.%.........Eged....?~..bDD.;?............!.+z[Y..]..}....=>..qXcp..\G5...:.1.c-.9.....D.c..D..JAj......U.%g.H...L).k .B).k."PJ.V.V!.bDH1".j.j.)eJ).R.%S.P...P...0...0.B,.j<....._.....?...w....u}....pw..g...k.......O...,.@.<..p>.'t..{0.k,.K.PE......`....A.#.~.w`.R..P+..R......Z+b...J-.Z..R.P.g,....g..dD...)%..X.T....x.).k.......R...T.X.!.7....M._....c.....sB.}.........s..o\|.....7.y..Y.CG..2...z..X.0..`....R..........ki.m.Z.....ALE.i....`...0..X..=...h@"H...X..S. ..C4k..)V..V..4XkE.`..V.5B.....>4j-Xc..7..?.o./......w..o.-.7...8"..........W.9..}..^.......^..e. h.Z.@0.".....s..l.d.s.?...i0K.c0...J)..1.!%.zM.Ar.JEL..k....ic4..V.X......u...a...P.X...V...Xr.8c.V..........5._....7...\|.?.G....x.~....."X...YCp..:\|.p!.\|.Xj........Z...~.l

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41964, version 1.0
Category:	downloaded
Size (bytes):	41964
Entropy (8bit):	7.994757068377577
Encrypted:	true
SSDEEP:	768:OAf9GXPPZFBsHVGcWPtfwX5ZtRHOTj7AgKBVgU0P3tgHr4AupvpITg7m09rSFUSW:FVKnZFmccWPlwrttOoVgnPdH9FKgSCSW
MD5:	AF5E269A608CBC1A49696C81FDCB922E
SHA1:	52C701D20C16FD65CC5F8E2369F68511C0B5CAB9
SHA-256:	E3809EAC1E4F60764AE8950B6A6B8223587BCDCE0C961F02E7D775ABB5CC8A4D
SHA-512:	8DC8354AE8A63E838F1A0AA62B6AF452D434E3658754DAB934BA2F04203C99DBC1349EE4D73BA35568410F394CBFFDE4A2998F0ABC5CD16771B9440D6BF3EC6B
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/proximanova-thin-webfont-af5e269a608cbc1a49696c81fdcb922e.woff2
Preview:	wOF2..............J.............................?FFTM..0..(....`......e........&..F..6.$.... .. ..G...[X.r...7)..UU.3.\|..f.;.iI...X..t.P.{.e......d...z.......}H!......x6w..u.9..<.O2W......e..(+.n.&....v\..~.I\&.v`..q4R.k..{.d?..~.$Z....&.P..._.<.."..IX.Y.M.._./.....F...m..$RH..\|...v.....Lsj..18.%.}7Hh..L..\|..I.........a.H.).(.8&.e....I..-.V...+.0e...D.A.y..T.!....8..v.Z4...EW.j.....S#Y9y.....Q.N;g....M....m3...p..3..=..U...Q0...#1.0.s.\9c.,...~..).t.^....(..TP..I.t..?(".....R. @(..-.a...q...i....}...Ht/.H%.B..E......7....B....\|_......\..d.-...x!..>........<...w...$..O .....DGr.i.i.K)(&...G...v.....w.W..,UY...:.........G...x..&..x......t.....].a..5.\|..._..#@.iA`...M.G....9;'..k^{MH..x...<...SG4.6J?y.b..@X.......m.#g/.....y.Y...eeT.t0R@~.....Od..I .....D...........].:..j..#....K..'...t..\G.#..1...%..m....f).`pf....b.j..c.H....yO.q....Q%.Z.<a..Nw..&...Pc-..G~......&S....ep<[.x a.w.B..dS.2.s@.z,.[8.Y..C..;.4W.....T].$R..J.\|....%..%....fpw..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	15292
Entropy (8bit):	7.890697765187456
Encrypted:	false
SSDEEP:	384:/K1386Tw1vteR77H7uOWXq6qYSY7KbXvmY4RF8THeGtl/JQ:/K1etuvuOWXSKGbp4ROT+GD/JQ
MD5:	673CFB26645ACB2A9C7F638158B93B99
SHA1:	D7AA698F28BB0861B2F6A0ECB7DA553C2E2FDADD
SHA-256:	0A6DF2BAF285FF1DF6648D8D8D51C077548E4CCE2CBEC9D452ECBADEBB24F591
SHA-512:	A71B75D17EC7F2BB52B8F6D7453C387C9C518F0219945F38CE2652492BBB7B1977343C9BC30C475D97CCD4DA6A7BB2962355C41E467E2674E26E8207537DA448
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM.*.......i.......................................&.......@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C............................................................................"..........................................G........................!..1A..Qa.."q2....#B..R..br...3C..$%s.&56ct.................................(........................!1A."2.BQaq.......

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	6558
Entropy (8bit):	7.928163225074316
Encrypted:	false
SSDEEP:	96:RhzL4ijgTm9do7i6Fcju99MHpkDoJIqvyksxUUQbVeK5d7lsL8Ruf55WuYzDE8R+:LzLPlW8+aI4vFbVZf7lsL8RPDE8RDRk
MD5:	73F5763E0C5AFFC81701B80926442296
SHA1:	C2B64B24D614CB8F2AAFE95DD979A1CC8DAA86A1
SHA-256:	463B47EABBA38BB3A5588262899F9D4BE7030197BFD9D814C23079894F46DF3D
SHA-512:	32937570C437195FF892659753444CE9793FA39C4FF6553069D9AAB4D93422AEDD0C0D96128E56B07BE1A7E1CF5EDCF866E73ADA71852F925DE6FEEF867BDEA5
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDkvOTg2ZTEzZjgtNGZlNC00ZWQ1LTk3ZjYtMDVmZWEwZTIyNjgzL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=eb61b04775901328
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................>........................!..1A."Qa..2q#....BR%3b....$&4rSc................................."......................!.1.A"23Q.............?... ..B... .Fk:.zV1q.J..}..C>-;.....A..Yv..I.,....;......s.!.....m..`....K.=..j<U5.G....%.j-\|..lz.U....G5......!.F.6C....}....{......v.W...}....C..%l..r..I.^....C..gRll.......K..7c.8...K..2F).M..].G<.(x#...?aq.j....OU.ih...Ks0......4.f.).n....F.z.a.Zlol..c...`...,....-..!..B...!..B...!..B.......\..@.Oe.qn...#......2..f..R...:....j..F._u....G...]o=H=....n...3.+}._0..:G..os.L>[e...(_'/.ys..n..`...G....V....K..crz"...@.wRQi.P.U..[Cl.....F.if....K...8.A.....r+.qZ...z,,...E.i.....)0..PWGc5.k..F.....O.s7N..tD..I..J.Q.DYv.T.'..&.5&...-W.5..4..m;..z{,.I.>.Z4.`.F..y.l..V....y*=.....um-..<Vyd..]8...!.A.B...!..B...!..B..>.@..e

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Canva], baseline, precision 8, 1800x1200, components 3
Category:	downloaded
Size (bytes):	284501
Entropy (8bit):	7.971063146990173
Encrypted:	false
SSDEEP:	6144:huaAKA9KITyYVkm0zrXR3HH+FRm/Oe3Mp2wvD87OKygzwh44zM2:huanZJYVh0/XR3HeFKOe3jaYrhgM2
MD5:	D222BB4E2443ACCDE8293E306203BFF5
SHA1:	4E2CA3EBDE6978D4F9C753C3D86C5E08DC25D8F8
SHA-256:	24B6F6D9B1E0CE45253ECB0AE671D42DC4C3453EB143BBAFE1B4DD2D668184D8
SHA-512:	F6FC623EA9C2B81AF1E40F56C76ED719CD4809585D8CB1C501B100E2D92EA664529278D8EA6B66A7BD3B97C3AB0BF95E0CE18DC2CD301F5B0BC8BDC7285994BF
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2024/05/13/14/49/38/7e588fe8-1a76-4c51-8fc9-d0ceb02b4a91/Counseling3-weight-n.jpg
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.......J..Z...%G...........!Aesthetics - Counseling3-weight-n..P..Christine Bergen8BIM.%......k.0S.6;...........Exif..MM.*.................V...........^.(...........1.........f.;.........l.i.........~.......,.......,....Canva.Christine Bergen...........=............................................ASCII...xr:d:DAFpTMdYBlI:643,j:1617201069187934366,t:23111021....fhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Bergen</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Aesthetics - Counseling3-weight-n</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	24533
Entropy (8bit):	7.618292277906146
Encrypted:	false
SSDEEP:	384:i6fUk+wMmrph/z7dLh92/PxqExYVsCMTVQrapiZbMI6l9tem1L6eRxU7iA7R2D2l:N8NQw/PxNxYVTMTV6dbKl9tem1VUn7oE
MD5:	B9DEA2CB4105CBF1D00C548E7CBFEF11
SHA1:	C2D1A70A1F7E1BF8B2071A34526CCE96F221F684
SHA-256:	7C66A8E97D1870E3F9CCAE50D7EE53611486A992DE0A1091B431F46024A6C198
SHA-512:	DAC1938062D25FD62FE228ADD1725ED50F7F9B99B8B56E591608204556F5E76C2D4B41259EABC7F63E9F112CA3F44A12DF9B2FE991DA927D7D0DB81FDEF04DD3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H..............0221....................0100.......................................................C....................................................................C.......................................................................X.X.."..........................................l..............................!1.29AQqv.."38Ra......7UWuw......#Bbrt.....Vs.....$6CSTX....&'5df...(4:De....................................<.........................5r....!46Aqs.1QST......a...."2B..............?..................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	96770
Entropy (8bit):	7.9874725475836605
Encrypted:	false
SSDEEP:	1536:ldJcGBjKDY2q0EYJkB375TBf+wibxt1oyBFDln2hXnsU6JOdV1LbOoPBa5AFMkhx:lbcMGc+jkB375Ffebxt1oY2hXnsFwdVp
MD5:	379D7D1258B269BE26F00418206BF4C4
SHA1:	6C119EBAD0A447997543477C2B128781C7CCEF3F
SHA-256:	72E9DCC087D163742C9468E4F2F3ED6263D5493411573D23E7407D74F6632DC9
SHA-512:	505C1A00960AAE5FAD55A0866329E4AAB0FEEE3647A99A8CCD298DD00D54AAAEEB68B00148DB7B7332FB76447076A4025F8874C20F54DC56D3C18CD4AFC8B22D
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDIvNTkwOTIxNWUtNzIzMS00N2I4LWIxYTItMTQzMjRlNDFjM2M4L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=d83e60a674f2023d
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......+........zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y.m....F9.\...>.-^].{/...B.P.5U....I..--@R.i...4.4!..I.2SDh."L.f.(.....D..U..{O...V1.Q..c.....>..6.m..s.Yk.U.>z._.....gv....g~}.>.....'....'...zz~.m...x.........D.ID...1!.D)...).b..1&\|.(..Z........'....5.Z..(%.).I..HB.C@iMp..h..HR.....,.......Zk.kXU.EUa.B.... ED..B@J...!.c .....<.9...>...m?..#..tc.s..&*.G.....%U..).Bp\|\|.r.d......vK....1...{.<Jj.uMJ..5..>DJ../.......8.TU..'O...vK.u.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2648), with no line terminators
Category:	downloaded
Size (bytes):	2648
Entropy (8bit):	5.8535379090482085
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08qSD9ulNDG9QpB6:aJd6SUtJfNrVlCWWWdtqjZeSZu2
MD5:	6B1A6B682290134A7813B2DA89AACD0D
SHA1:	2F8AEB642CFE048BCB6C7AC532DE7E7201AD2A80
SHA-256:	637B3B9ECF01AA1DD9AF43B4E20A1E5225D64AF474DEA023FFF4BA452A156A21
SHA-512:	E398C196C4ECB0848F5320963D9D741AAEA01928F4DF4A16334DCD3D59931E6B27665ADD61737AF8DF52A45D89A07E419009B36A4E0EF92F4FF15F8A23A7D5AA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/16526066952/?random=1720126521927&cv=11&fst=1720126521927&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2F&hn=www.googleadservices.com&frm=0&tiba=Empowering%20Wellness%20in%20Pickering%3A%20Mental%20Health%20%26%20Therapy%20Services&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68260
Entropy (8bit):	7.9851148071118825
Encrypted:	false
SSDEEP:	1536:tPm36kSQ/DomCbwUivW/A8agCSMYhGjTaHXJ0rovQIgSlgtqvdMVE5:tPm17omCbju8agvzGjWaIWteMm5
MD5:	7802691B41D7F361F4B02367592F2EA7
SHA1:	CF71EF5D6291A240D48DDC2FBA49BF81E85D0868
SHA-256:	9B5D8D659C4289926B6E21FB72E55CD055F3D620125EE351EF687FD9CDA98367
SHA-512:	A3425F0ED4BBD95F232C582B866AA3E5DFC4E10FFE5843DFC43B219D614A5584F63E59AC05F239D32E7E56FF62387711EFAF5519FA9C57AAF7B95595A63487C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..UZ.....IDATx....%.u....sL.r.`IJs?].4.y....j$J.@.t....my....~X+.d..H.........'On..^cj.._.Ske.&^.\|._.......=}.0&..BC..\..4.s.Z..RJ....0...%.1.......q...HM.........VC...~.w.q......C.4.c..D.vXkH9c.`..;..8...........s..L.Pj.:....iH).c.^s..c..%CJ.g..q..q..;..=...................._...../6/../.........../^S..b...C..C..0.0...Mh.Vnv{J...#..4Fj5.X.9.s.b.W+....S..3.Tb......1..d.Z.M.1F6.)c...O.\.p@Lp8....c-.{l..q...J>..bJ........4....BJ#?..s\.4m....>...v.z..9..f~.._......g.....s..O..W...'4.Z+.C-.Z...J.....q.0@..UN.i..w..Xk...%.LJ....{.8r<.8..x.h\|C-......PJ...u.w..........'.L4..m0@.'.5...(Y6\.t]O...'.1.\|.9OJ..$yo.s.k=...O~..9eJ.........<\|.....o6.....m..#/_..O......o...}...k..@.R...^j.[....0.G......J)..2.frM...#.....v..Z.4.?...B..HEe(.`....T....M;.R.Y0..B.R)...\.%...q...D..g.Z.i...l..4mK...0.K!.D.....Vj5...O?..a.8.......Q........7%.....l..#/^<..

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14713
Entropy (8bit):	7.959714712307717
Encrypted:	false
SSDEEP:	384:YTe5yEs1Lt/3QGO6LRRV+w5xjItL4PyDEgT2A4:u+stt/3FO6LRRV+qqtWyDG
MD5:	0D806E6FEA69C60A7AF9B595DE5A3445
SHA1:	E91ADFD7E885A51B63E7AEB949B37B393BE766E0
SHA-256:	593FE758A49C48635EF8B04635E7708ED81F1929B002641473B900925DDBAFB1
SHA-512:	ED0F87F6B4A80667428237BF107B576716B5986E4372BA0D6D1AB18B931C6299D7449F465E376FB1B894A2BC7550AD46DEBD1A2700658498B8AF9EA181849BF3
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDYvMDYvMTUvMzgvMTEvM2M2MGRiMWMtYTFmNi00NTgyLWE1NDMtZWQzNDNmNzhmMTIzL1VudGl0bGVkIGRlc2lnbiAoMTUpLnBuZyJdXQ/Untitled%20design%20%2815%29.png?sha=802242b28522858a
Preview:	.PNG........IHDR.......x.............gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+....8{IDATx..y.].]..y.v.[U.V.../.-.-yK.l.!...$........=....L.C..O.........C .Nl.....e..E..]U.^w_.gy.s.]JU...IU...r..,........$D..!..F. D..7.BB.."D.!!.......B...DH.!B.hB....q. ..y..F.(.FH..........1..m ..x..r..DH.....L...?......#]:.......M...z.....&H&..>..4O..aZ....O....).........B..Th.'....#Yj.DH.+$.fk...IT!x...zH.....a. 0 .M.?;8...,`....).r.....7...%,.EB.B."...Z A"..<}.."...K!../....z....q]I.b!V8BBXU..t.CQ........//H.....o..- eH...!!."../...P.?.@.~..5.]..fk\|r...9Sh..!V6BBX-.'.WLcM..&DS"..E.'-._.R4I..%,;$.....V .....@"....%.....l. %..Gfj\|..I.](a.......V......]4m..!.o$IwL.m#.`..Ds.Rx..^....x......r....B.tt1W.s..3Qh.i<....M...1...4.../'..E....L...7.O.q...V"BBX!......\|..i>..<...!DG.......].6f".wR.r. $. <.....l.O<3.S...Ma."$...`RN.....3\|.p.l.Tw/.`.xR...1~..zb*.........h...6..\|.).....!1....p.#....:...$...b9...U.a...E.b..

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2618
Entropy (8bit):	6.8953334601054905
Encrypted:	false
SSDEEP:	48:lQv0vDFq50BERoch6BEyVTFE8bD/WyaYmaB3anGuVUEBh:lQv2jGRoch6CWT2QDeP7at6
MD5:	23A5182D6257862CA350BD899DAB3A45
SHA1:	24FBF78830DB3476C75F04A4BFBBDA764C172D83
SHA-256:	D28D28A473431FA68706951C9A3223A44349808E680B9CDC77D2B14E21F773CD
SHA-512:	B5D91CCCFA6D4C3B0451E391ABFF16E6F729A1789B0F50FE7A11514BF3AFD91DD050398DC4952C31FA41E296FD0152D8B02AB0BE9DDBF8EEEAC0CBB74051D2F7
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjIvNTQvZmVkN2YwY2EtNWM1ZC00N2E5LWIyMWMtNjExZjU5ODJkMjQ3L2lkeC1pY29uMi5wbmciXV0/idx-icon2.png?sha=16346d852e6f1d45
Preview:	.PNG........IHDR...<...<......")@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE....a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<...........tRNS..D....H.x...z.G.E...N..Q.......LO..c..^......`a...8/....25.W..._..[.R..........K].h..d..+"...%(...S...P.......gi...b&'.....sqtr..$..\.{..\|.v*...},Be..f?.1..:.......w......

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (930), with no line terminators
Category:	downloaded
Size (bytes):	930
Entropy (8bit):	5.12292712843304
Encrypted:	false
SSDEEP:	24:0jHQfOuH41YiLY3WL3QquM32EhEcx+Ps2P2pCgrsLHOII:0EJpNqycBxWACgrsDOt
MD5:	06BFCD88AF438673A8BF9B845A11AA6E
SHA1:	D024A745032CBE115526ABE648D9FA0F0A10A681
SHA-256:	947AC0903521F5ECEEFC90637C066306A8CA67466CCC188BB0107FB7CFB532D1
SHA-512:	6A37EA27F3AD16DE6BCB4C386D9F09962902AE2F2FDF76B6723CFF8155CD0B9D4504D1EA6ED3C4D5C9D49BE9C636EB9386BB13C9A787A71F02640A8EC939D180
Malicious:	false
Reputation:	low
URL:	https://m.stripe.network/inner.html
Preview:	<!doctype html><html><head><meta charset="utf-8"><title>StripeM-Inner</title></head><body><script>!function(){var e=document.createElement("script");e.defer=!0,e.src="out-4.5.43.js",e.onload=function(){var e;window.StripeM&&(e=window.location.hash,/ping=false/.test(e)\|\|(e=(e=e.match(/version=(4\|6)/))?e[1]:"4",window.StripeM.p({t:!0,v:e})),e=function(e){if(window.opener\|\|window.parent\|\|window)try{var i=((t=JSON.parse(e.data)).message\|\|t).action,t=t.message?t.message.payload:t;switch(i){case"ping":window.StripeM.p({t:!0,o:{muid:t.muid,sid:t.sid,referrer:t.referrer,url:t.url,title:t.title,v2:t.v2},v:t.version\|\|"4"});break;case"track":if(!t.source\|\|!t.data)return;window.StripeM.b({muid:t.muid,sid:t.sid,url:t.url,source:t.source,data:t.data},t.version\|\|"4")}}catch(e){}},window.addEventListener?window.addEventListener("message",e,!1):window.attachEvent("onMessage",e))},document.body.appendChild(e)}()</script></body></html>

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	546598
Entropy (8bit):	5.708515975651759
Encrypted:	false
SSDEEP:	6144:yihcR5I9BggP9ZSmsOjitOxTIuAFBZv51aLyOWNfsjj+LBH:y8MIAgxT0F3Bc/Y
MD5:	93E3F7248853EA26232278A54613F93C
SHA1:	16100C397972A415BFCFCE1A470ACAD68C173375
SHA-256:	0EC782544506A0AEA967EA044659C633E1EE735B79E5172CB263797CC5CEFE3A
SHA-512:	26ACA30DE753823A247916A9418AA8BCE24059D80EC35AF6E1A08A6E931DCF3119E326EC7239A1F8F83439979F39460B1F74C1A6D448E2F0702E91F5AD081DF9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	313724
Entropy (8bit):	5.56404710944566
Encrypted:	false
SSDEEP:	3072:lW44gTnaiJ9iVYZLQOFvhf3A0mjHnvLMzU467JXDBin0bukM3M/AAwLm/qHi:44nn+VY9QOFJW7HVin0qkMc/AAwLm/qC
MD5:	C92080719895AA4ABF9659F4DD828C84
SHA1:	2FF2192471FBAF94ECD3C7D2514C2FF7B3A9D963
SHA-256:	6D6FDDDE4C4815402C1C795C076A162A5B48F854F4D057C7161B73E837846F15
SHA-512:	3838630033A6C36591D6DCE5B51E767928F60429A04A3F0FF7794F9BA9C4BFC9619957A0D607371E0C8981A9FCDC798B33CF7D35DB59D15710B36FECC205D64B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-7KWN4PCCYC&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":13,"vtp_instanceDestinationId":"G-7KWN4PCCYC","tag_id":25},{"function":"__set_product_settings","priority":12,"vtp_instanceDestinationId":"G-7KWN4PCCYC","vtp_foreignTldMacroResult":["macro",5],"vtp_isChinaVipRegionMacroResult":["macro",6],"tag_id":24},{"function":

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	60121
Entropy (8bit):	7.830521059970251
Encrypted:	false
SSDEEP:	1536:rgBo5IrBAnbLpM2/jHm8EfivsZp0yZasM5Ce8Wo0++:4m4c/pdLE08p0yo7Hq0P
MD5:	0322596AE21820D671FB805B0D3C1253
SHA1:	9FDCA2D4A11B845906763B2DB1A95E715E64234A
SHA-256:	2B028E4CE4F21B82ECBF76387762BA92FF853244283B3D272D10330434F0B245
SHA-512:	D3E054A1607D5E0CECFD67F7622459112C62A3FF5E9DA869AE3A7F7E1463869D4947A96E4B0A42DF4A616C6C80F67C31630D96BDF7B39DE1892474D52BDA7D49
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...8.......l.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......IDATx...wx.....W......n........N.$@...B......5.P...z'$.&@ ...t.16.....V..Jw.....d.........<~.[7.....W;3........................................................................................................................................................................................................................................................................................................^.......N..A..%.K...G...5.{.....).C.....z.{]....qI-....J..-..H=....2..:9.J%.K.X.?..s%....]..$5H..........X...............s....HZO.hIC......k..H...>..(..-.....\|.....).N........(I..9.V..%.)<V...H..vH.........y....U......@0uJZ....K.<..y.C...$.......:..&.....c.......y..H...cn.??.Gb......(8..X..u....c..')d;..%..<V.._. .H..v8........=<..4Q.-2F....{..o..Gb.......(8..Y.s..Z........P....5.....J....@.\.{..I...2.....@..<.4#........Pp....s.rI....&i

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1798), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	332800
Entropy (8bit):	5.932433326499279
Encrypted:	false
SSDEEP:	6144:eg7po1EXW5oD/liy3gXfnHlfLFI+DwH+XQkK:LQXfFfLNDwH+XQkK
MD5:	9604151D3EA800F94209FB74380805AA
SHA1:	81AD3BFE253E319E315C76FED9989CD7DC5470E6
SHA-256:	448B522F11453EB00E936C48BEF18DA32C9B61FA6CC7E5A3DAF6E229B49BF22A
SHA-512:	A13089E1E0FC3A9B8323C0BEB0FC51B49AD051A0F10195E5537425EC38E77523F386CB9E6FC94EDD4FFFF8CD2A0B41F4CDA81214D93A148FB1BEF37A7380F337
Malicious:	false
Reputation:	low
URL:	https://livewise.janeapp.com/
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>.<script>. document.cookie = 'cookies_enabled=true'. . if (typeof document.cookie == 'string' && document.cookie.indexOf('cookies_enabled') < 0) {. // redirect if cookies aren't enabled. window.location = '/cookies_required'. }.</script>..<script>. window.JANE_CLIENT_VERSION = "v6.3.281". window.POD_NAME = "cac1-23".</script>.<script src='https://assets-jane-cac1-23.janeapp.net/assets/core_js_polyfills-277f54535c98b71ea847.js' type='text/javascript'></script>.<script src='https://assets-jane-cac1-23.janeapp.net/assets/monitoring-eb308bb7edb8313e9316.js' type='text/javascript'></script>.<script>. var sentryData = {"dsn":"https://0a2411dd501e4441a1f4a27ebdb0b309@o4505290921410560.ingest.sentry.io/4505291008311296","environment":"production","tracesSampleRate":"0","userGuid":null,"extraScope":{"app":"online_booking","company_current_name":"LiveWise Associates","patient_id":null,"guid":"34800","role":null,"staff_member_id":null,"session_i

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	87652
Entropy (8bit):	7.989302664198412
Encrypted:	false
SSDEEP:	1536:hv8dpkY9qRv0ipni2z+kbdgL7CrSSU2y91RJ89HE:hEZ9Yv0ip11mCrZpy91Pt
MD5:	1C4961FA644D23C68D8E8807E3CCB514
SHA1:	6666462E6F48ADA42757EE31527C9450E8BD75A5
SHA-256:	5A9C7E91A729BD04BA3950018856DAD3D63FD539BA9028BDDB79AF6AE40F9B6B
SHA-512:	384C547CA72BF05943933CA82E8DB7E1153C26DC3A4A53566282686713C98375A60A039B6B4038FE131B126A96190F16393025BB7EFB8FB8080FFFB37E4CE970
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMTAvMDEvYjNmNjI2YWQtNTI1Yi00MDc4LThhNzMtYjI4OTE1NWI1ZGZmL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=e7a7d525434ae295
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.........Xh....IDATx...w.n.u..>.-s..^w/....Y.I...C.CH .@N.......{S.../)...w..;....!.`...k.-[.......e...Y.v.x.w~..[.. ?..-.U...5..c<.y.Ax..C=.sp.@........<..K.}{k.;.VWg...Z....a..V..<.R..qH)!.G..B;m`"k..Jd..H.Z.D&8.........Yp. ..8.c.......p.`.L.TZ.(.....J)h.T.AY...TZC[..R)0.`.!.T..B.X...u.D.$I..(mP.9.....UU.. .......Z4..0.AD...1..H..y.C....h4...7..n..s.e...`......3.)%.$.I.....f....._...8s..^Q........v.....~.G......?.g.?\8y/]..c..g?.....=y....jw..}..k....9...k..hh.Q.....'.$I.n40.j..j"%B;..j.0.j.!....9.....#..88.....p.... `-.,@$@.A;..,P.%...s8g.S.B...+.E..5.q...T........A..D........J..!.1.....$......c.5..B.@.....14......z=.ma.....:...ch.........."...Zk0. .......5.....[..{...O.9z......:.DD...V...r..?..........;v.>....?..'......]..~..X.9u:-$R....j... ..8X.B.h&..........4..h6...H....9A...9.....8......s..K.m`..77..\| 1....`B......R.Cr..`.j...

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	71195
Entropy (8bit):	7.99156473821155
Encrypted:	true
SSDEEP:	1536:OxjbF5xg+gZssHiqvJ6RB8ytZg2q16qJqZnjWxEQC1BE+q:Ox15gZs9goRt2ySmjBvq
MD5:	CF65B66E511EB99CB29A5E6E39059E3F
SHA1:	6F0B00373DAF43350192018684EC18B1FF5B798F
SHA-256:	4B86327462043C8990E57CCE0658A1D791D7170EF94084832970A2BB10D05903
SHA-512:	7B912201805970DDCC9314149CA8A243CFF43A51775FA00B288EFA7398787E59B126AF47163DAC53AC984050B0BF7B566701278AB0BF407573A96D83AECCD420
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......-}f6.....IDATx...y...z.}....a..........B...0....8.b....8$.....\.3..[...91..T\.!..8....3...@W....=..oX.?..../....QS......{....Y.Z......?v..../q...>..X..+;o.[..h...4.......@k.Z.R.B.....-"..(.P. .Z).s.&&...]!....f.Z.6..H.a..Q.....TIP1.D..b4.....I.B..P)...D....H..I.)....?Q...L.. .T.....1?...}h$)R.^7...)...D............>.....<.......5...../...}....._.?......a.!.j6w...k.3.....Vh.Z.J)..%.r`).QJ.2(e."$a..Z..WhR.DQ...V(S.v(.P.._.K..J...w.P..1...]^.....@JP...\|......4.......b:.. ....._o..A$..g.W..Q.M..u>.4h.....vC...WF......+])~./...._.+.{.<.e....'y....zb.....I..t.~...E.:..1.cu..)_E...J).}..^A.6%.4Z.(e./.\.....-..J...n.7{..A.......(....s.$HL.@...H~...M...._g..%.R.Y.....(.j.:.! ...`P..'IP..t.....JP..n..{..(.Vh..'i}.Z..h.Cw..<y....{.....&.u.....I^.,.....T%.'...i..c...C.h)"...%.L..F.R.)...Z.s5.:Di"...1..,I.V..&.D....et..$..)..V..S..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	65683
Entropy (8bit):	7.986441099827576
Encrypted:	false
SSDEEP:	1536:4HSghW1Ww0dpOI79G/kvHG0KCQwNYJKLmwivuqY1YEArUF:eSghNOIJG8D28HivuqY11F
MD5:	E13D2D805FE38E6AC290F9080B683940
SHA1:	FF7A5C9E8892BE56C32D912A757AC07586927614
SHA-256:	B9E3502932212028E23716C6DEC2A29965038512B9BBC4CF8999B678F2B8F0BA
SHA-512:	896D73D724D5D959FA4D00A11ED6187E995158E0E70818BDE94226D1F3987FBCBB7FCFE4E5636F2ADC78A3783BEF2DA560401FF68661B1164DEFE672D7727E10
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTUvYzQ2OTQ1YmYtMDliNy00MTIwLWE2NmYtZjM0NmVkMTVkNmFhL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=64b05b453234c3bb
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......7.......zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y.m.Y.~...c.9W....E @..H....(u-).)...(.~J-.r..X..,..s.[Z.U.U.;PT.!...@H... $$9.9'...j.c....<.{.G..d%d=...n.^k.....i~.p.............x.g...=...;.....o.....z....2K.8X.<r....@.{..=..c(.i..J.,.7...J..s.#.b$.LH...N....b..RI....c.....L..)F.\I...&6!..f.B...3.9B5.T@,...d..... ......,"..\..... .......cu..;.]{.........w..E.+?..]........\|?.........E.._....q...8~v.....V) 5q.`......8^..8.Y..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 454x392, components 3
Category:	dropped
Size (bytes):	23655
Entropy (8bit):	7.855132754035271
Encrypted:	false
SSDEEP:	384:pdcj90b3+VbifmpapJNAUSn5pKUD7YGXWu0VmzJB/NXCrm5VAkrFQQ/eNaZ:pWZiOw+pap7AV9nY+x00zJjCr9krFr/L
MD5:	B9B470B4C41CB03B1DA025E25E521D82
SHA1:	8919D7761CA65597A9D96FFCC76C8D415A6B9AD0
SHA-256:	4F6774C003C5A2550AB3484F165A81D4BFC4FD8692D60FF499D03B3041DC0732
SHA-512:	CF5877262895AEC6011CB8FA96011B17254DD0200C153B37461B58A0F8B2CB03C48490F67681DBC020A17FD79C534F6C33795F60A1C695B165A409963F44469D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM..............................J...........R.(...........i.........Z.......H.......H..............0221....................0100.......................................................C....................................................................C............................................................................"..........................................t.............................!1.2..8AQaqv.."79Rru......3BUWw.....#5t.......$46CVs...%&STbd.......EXf...':DFGceg.....................................=.........................15r...!46ASq..........2a.3QR.."BT.............?..........................,t\..V..\|J..i....h.D:...$dF^@..}>..(o......=u...E.!kN._.W..%.._............3.B.4..uq.t..8.AVOC?5.i..4.-u$de.......~.........h/..9...t.]..Z.Ke..}./..b..f7u...TIBK......y^T..p..#.E1..v......c,3.y....t.....q./. W..z?....?..%~oA.);.Q........,_......?...=dy...i..}..u8.G.4....v.!{.<.NMF}.1..uJ..xu.5'h.5...f.,c..G ...........15$.....

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (540)
Category:	downloaded
Size (bytes):	301073
Entropy (8bit):	5.022736091594979
Encrypted:	false
SSDEEP:	6144:N5hZ1j1raYdRJYpY1A+PI9kBNf0lcLf9HxwCPwQ6v0m6E6MkCYdayUlbRDlTNzDs:N5hZ1ZraYdRJYpY1A+PI9kBNf0lcLf9D
MD5:	B69AC0D9FFE4063CD9E4628690495ED1
SHA1:	9EBD4E36D10B89FB2BDB49004A3A1A1EAB8C6607
SHA-256:	2F6E5FD6A95FB8285F59EE2A37F1D2507F5B3DAB49355F4C071B0EFE7A221AD4
SHA-512:	7ADF7A8683E426149600E1581B021CCA8E0BFFDE47BAA141E77014EFC6737680C0548D6881C1BC8EEDD982ACFAE4561AEEB0463D373A55F10EB6804DDEFFABC0
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/themes/stylesheet.css?timestamp=2024-06-27+17%3A22%3A25+-0700
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /./! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */.html {. font-family: sans-serif;. -ms-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%;.}.body {. margin: 0;.}.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.main,.menu,.nav,.section,.summary {. display: block;.}.audio,.canvas,.progress,.video {. display: inline-block;. vertical-align: baseline;.}.audio:not([controls]) {. display: none;. height: 0;.}.[hidden],.template {. display: none;.}.a {. background-color: transparent;.}.a:active,.a:hover {. outline: 0;.}.abbr[title] {. border-bottom: 1px dotted;.}.b,.strong {. font-weight: bold;.}.dfn {. font-style: italic;.}.h1 {. font-size: 2em;. margin: 0.67em 0;.}.mark {. background: #ff0;. color: #000;.}.small {. font-size: 80%;.}.sub,.sup {. font-siz

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	85916
Entropy (8bit):	7.988883959794354
Encrypted:	false
SSDEEP:	1536:F0XaTW8wNiRcKHnzTiF8GEjWvT9O5tZPTJBdjIZyvvvbRCOFOLExbHZwwKaUjF0K:FGyWtiRtHnzczEiLsJDLvvvbRCOF3xZ6
MD5:	180F80EDC9011F8C9098D3C9680DD9FD
SHA1:	C22A316A71C6E35BEDA71F97E2AA5A32855E08C7
SHA-256:	582C651780F487A1947ED5E8FB7738438A7F570B12A5CC2D421F5612431DAC4D
SHA-512:	4A17E70061DC5A862E6ECF7B674594112920F107E40808F78DA461145310AB8EC2CD04084D89EA6B3481CF5D349E76CE57E873A8DADEED630A143BCA380DF45D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME........ogH....IDATx...W.,I...}..=.&.$.w..1...<.... "...1.}..9g.pb...f.;..B.....%On....Tu.ZKM)................._./.o...;..O.....D).R..9b.\/#.`.....9..).....B.T2K.`..<3O..u.9......t.X.4M.....:r..k0.......+.:nnn...c-9gRN.c..b..p8....p>..9.yOZ".4.s.Y..\.g........dz.w.=......}..a...........b.X...0`..XK..a.BN...qY..".#-...c$.H&SJ".L..r....`.c...JJ..PJ.ZK.....B...P....J........Rf...1....e..../c.$r..#9.nn...G...g.qd.......=...#.:..Xk..c..z.....=......o....._......\|.....0.....vy..#/............_.^FB....c.9g......[0%.m.EE.:K.\.9g.ybI...P.....{....}O...,...B..yR$-..g.q..p.a.....2E..u.5....i.....t8k...i....8.%3t=..-.4....v.....{.O.....a..td..p.b].Z.s..<...q.`u.[g.d...7....C..^..gO.\"9..rJ...d,...9.........k,......H9Q2..&..`-.o...'8O..r......#...J...{.5X...}h.......f.V.Ur......+....;>\|...p.t:.B.}...q.R..<..............._I1.wrs..E6.2....3...X

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 510x660, components 3
Category:	downloaded
Size (bytes):	83290
Entropy (8bit):	7.954222888292048
Encrypted:	false
SSDEEP:	1536:pLBuU+nhvSL8FRQ/IOVIO0lzftY8hVfjTRKN1yIQD5+it7ABgdKERiJvjgv:pLEhcp/n/UG8hhR81yIQdyER20v
MD5:	13A47DB86C485590380056A083E554AA
SHA1:	AC40446F8B646A79308E6B3BCB7A06EA464FCA52
SHA-256:	3CD75E8B192EE04ECE100758E864C7F6864EB97CEE4473D68FF6C669A737AD4C
SHA-512:	018574D304E0CBCDD2FF73D61955B2BE1448422E4645261EC77A66FA676FC049A31269E3195368F54223FDCBFAD23899998957FA74B2B2E10ACB1CA4DE9D639F
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2024/06/06/01/21/44/5470860f-4901-4885-a21e-ab2d27e0b2c2/AJ-Headshot-Reduced.jpg
Preview:	......JFIF.............0ICC_PROFILE...... appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl................................................desc.......kcprt...h...#wtpt........bkpt........rXYZ........gXYZ........bXYZ........rTRC........bTRC........gTRC........desc........Adobe RGB (1998)................................................................................text....Copyright Apple Inc., 2022..XYZ .......Q........XYZ ................XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....curv.........3..curv.........3..curv.........3.....C....................................................................C.......................................................................................................................J.........................!1.A."Qa.2q..B...#...$Rb...3....Cr%...Ss...Dc.................................,.....................!1.A..2Qaq"..#3BR................?..S.0....0....0....0....0....0....0....0....0....0....0....0....0.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Canva], baseline, precision 8, 1800x1200, components 3
Category:	dropped
Size (bytes):	348683
Entropy (8bit):	7.968553932284151
Encrypted:	false
SSDEEP:	6144:PENxZrMsq0XGgqe8I1dHbKjO+V1/vecfsgI9dlIQvOtklLazp41vCFp:PErZimGgZ1fksFlvOty6u1aFp
MD5:	F967900E79496F65EB3535F706C92839
SHA1:	46C1A654B23D26072D68133534AEE839578D1051
SHA-256:	383F108E5A1040696DFB0F604955D85675084D5E459D18A18B094599EB824B41
SHA-512:	AC67A319B15417C63D1C9DE2BDB291B3BB492B2E6F2A583288851AAE4D163DAF009022476E05C77A59293E6547FD61F52F43121BC718F5E67DA6D5D3DAA37ADB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.......K..Z...%G..........."Aesthetics - Counseling8-weight-nw..P..Christine Bergen.8BIM.%.......OU.8..............Exif..MM.*.................V...........^.(...........1.........f.;.........l.i.........~.......,.......,....Canva.Christine Bergen...........=............................................ASCII...xr:d:DAFpTMdYBlI:643,j:1617201069187934366,t:23111021....ghttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Bergen</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Aesthetics - Counseling8-weight-nw</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmet

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 670x350, components 3
Category:	downloaded
Size (bytes):	123361
Entropy (8bit):	7.971338247423067
Encrypted:	false
SSDEEP:	1536:aprbxEBBK5UDM2YHzXjRpuJEoL/qz3vwjuwqFM5Gr/bMDyGAEukG70v/fQcS8UnY:canEjjR4G/wjuwsM5ywpZm0v/fQjxPW
MD5:	007DF99502CDAC350621CE1C3F1C5027
SHA1:	3C717E49BC3179C7E24856B373E4B3D9C0E34249
SHA-256:	E2A04DB959824CA5FF153CA2DCE3470BE9649CAF0CCD958861CDEED0D46B36AD
SHA-512:	5B16D7EFA542CDE5102884AF2CDFEBB27BFE582DD671EE75242BF6198B398E41705190AC08AF53234707572BAD141B160E4348F5DBCDBA48A1E6B1944F24298A
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2024/05/15/21/23/39/91ec8626-356f-41d7-be64-215088e533ec/Small%20leaf%20sprouting%20out%20of%20dirt.jpeg
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:90D96C7F494D11EDACEFB02FF7685C06" xmpMM:DocumentID="xmp.did:90D96C80494D11EDACEFB02FF7685C06"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:90D96C7D494D11EDACEFB02FF7685C06" stRef:documentID="xmp.did:90D96C7E494D11EDACEFB02FF7685C06"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	46281
Entropy (8bit):	7.983040321089759
Encrypted:	false
SSDEEP:	768:PgT9NKLU7CCWANle9uRlevrWO1oNPHBMAIWRBIUuXk/qmCRoWbny3w:4T/iEXesxMC/BcEInkhCNbGw
MD5:	1088C979CF8A8B675079ABEE13625DB8
SHA1:	0A566B4F41030A558092EEB8B78ACAC21344065E
SHA-256:	49DF16E61471E368BBA4BA5B3486E3651A5B3D2009CB5C31D76553BB6D0F88C0
SHA-512:	515AC409457ABAF08AD268B7B557373F9E5F0051C290E6566C6457CAA5062B28B4205651F042523E53BC72086D9EF9436A2C3656AEFF36DA4A5881085F9897E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................tIME.....8..\.F....IDATx...y...y..~.....w.[.T..%c........&.`;$`..@.$du...4.@w....C.d5.Vwp.!..B..<..[.d..JU.;..~.....{O.N..dn...u...s.........;..x...q<...8...x...q<...8...x...q<...8...x..`........7..$....JI.........}I....U..~......!8.R.....(...R.)B.!.w..@..!.c.;...!HR.). }......=R.8.~....!....Z.U:]........./..m...yA.I.X....=.........0....$C...c.>@.......S...cD)..B.!..".Hh.@...........V...q..2.....!.....QR...R..e.....:......\|.^9..$....q..LR..R.KbtRJ.@....^..&1.^....I .)...N)).VFJ....!..e.n..\....>..M......%...?....S\.vh.t.....T..T.B.+.......v..R.>%.=%..........0.tSJ.9.......V.C...... ..x.}hQ\.R.B:.>..VRI...).1....1......4f.....?~.o..'./.... X..\...@<yyg..x&....v.[E..y.!.Y..F.TG;h."%.0..D....(.BxA.UU.S5.i.m....b..j?l....oy...<..bJ..t-.x.c....G.}....D..).4.$.$DL..VI..z.&.^.......7M<N..I.....).b..K..e#yqh.o...o...[C...R....-.{..Do..

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526), with no line terminators
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	4.844995662196588
Encrypted:	false
SSDEEP:	12:c4GJ0k2lvgyT6d1uOMXUZsCxYADLsdfPw3CgrR5jddeU7nu:c5D2BtT67uOMXUZjxYOLsOCgrN80u
MD5:	D96C709017743C0759CF3853D1806BA5
SHA1:	72E21587610C49C8305A55E71F73FA88ED618205
SHA-256:	BA2338AA6670580269C762F51C4291DAEF913201AA8F4D4FD166C1A878262652
SHA-512:	974E260ED8BD1D99628FC3248F07179F6EA228E37A6B9D3EF906DBA57571F2DF54D73F93D1F3460902D28A90BD4793BCA35477B2EF8FBF424B9112147F04BCCF
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Preview:	!function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){var t=window.opener\|\|window.parent\|\|window;if(!t)return;t.postMessage(n.data,"")}else o.contentWindow.postMessage(n.data,"")};window.addEventListener?window.addEventListener("message",i,!1):window.attachEvent("onMessage",i),document.body&&document.body.appendChild(o)}();

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	65653
Entropy (8bit):	7.979724100878532
Encrypted:	false
SSDEEP:	1536:Ee+EhAeRTK56CFmSL6mH7Tt/x/c0h6JnW9KlnH+bzHZj6OG:pUs25rmat7H/c0hQnwKlnoHJ6OG
MD5:	B18195FC08B32C12ACD8BC304F5E0D27
SHA1:	7F0B6720EA41D09A98F9F69F4BF3D3FC8F5334C9
SHA-256:	2387EFC1A103F1784D734BD15043C318E550D416ADC9010063B51B4C268F1E70
SHA-512:	EF671F42E2185ECF6E7A70B09DD457A91308A665BDBF263494112A48D8191F1546CF51E080F0494AA1242B72E87B044B99D9522F287B55E167844569205A1209
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTMvOWIwZDA4MjktYzE1Mi00ZjQ2LWI4NzAtMTVhMGRjMzAzNTkzL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=4014013dc62e3eef
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......6........IDATx....%yv.}~...%.\k..h....... e32.L.'=.Q...$q.f..d.L...9.p(..8 .F7z.....2+32c........7.%.........Eged....?~..bDD.;?............!.+z[Y..]..}....=>..qXcp..\G5...:.1.c-.9.....D.c..D..JAj......U.%g.H...L).k .B).k."PJ.V.V!.bDH1".j.j.)eJ).R.%S.P...P...0...0.B,.j<....._.....?...w....u}....pw..g...k.......O...,.@.<..p>.'t..{0.k,.K.PE......`....A.#.~.w`.R..P+..R......Z+b...J-.Z..R.P.g,....g..dD...)%..X.T....x.).k.......R...T.X.!.7....M._....c.....sB.}.........s..o\|.....7.y..Y.CG..2...z..X.0..`....R..........ki.m.Z.....ALE.i....`...0..X..=...h@"H...X..S. ..C4k..)V..V..4XkE.`..V.5B.....>4j-Xc..7..?.o./......w..o.-.7...8"..........W.9..}..^.......^..e. h.Z.@0.".....s..l.d.s.?...i0K.c0...J)..1.!%.zM.Ar.JEL..k....ic4..V.X......u...a...P.X...V...Xr.8c.V..........5._....7...\|.?.G....x.~....."X...YCp..:\|.p!.\|.Xj........Z...~.l

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2627)
Category:	downloaded
Size (bytes):	2628
Entropy (8bit):	5.318958620541389
Encrypted:	false
SSDEEP:	48:g1H/IiI2RB0Pf+eT4CI7OWZhivUKF6tLiNL+uzjjXAuyPjf5PGYGCH2f0apBpKC+:WH/17VeCpKF6tLiNLxv+1GYxcpBpv+
MD5:	580159CB8A31D14276DDEEF0CD5C478C
SHA1:	B1AAE4AFD063E86D9DF0CEFD4795F66B2D0889FB
SHA-256:	2921CE3121EB53EAC49D8DFFB59906FF2C57C9B6829A3474601F3DDDE3829FE7
SHA-512:	D2AB4CB5C671465BCA56F57E8598B4421467277EC65DA30D6931AE05EDD3AF5B746A01E2BB5C04BFF202C8A9838B856D283D8D53B175F18672795135B1B8ECC1
Malicious:	false
Reputation:	low
URL:	https://js.sentry-cdn.com/94b09a2c1e465a745170fd2d8fd6138d.min.js
Preview:	!function(n,e,r,t,i,o,a,c,s){for(var u=s,f=0;f<document.scripts.length;f++)if(document.scripts[f].src.indexOf(o)>-1){u&&"no"===document.scripts[f].getAttribute("data-lazy")&&(u=!1);break}var p=[];function l(n){return"e"in n}function d(n){return"p"in n}function _(n){return"f"in n}var v=[];function y(n){u&&(l(n)\|\|d(n)\|\|_(n)&&n.f.indexOf("capture")>-1\|\|_(n)&&n.f.indexOf("showReportDialog")>-1)&&m(),v.push(n)}function g(){y({e:[].slice.call(arguments)})}function h(n){y({p:n})}function E(){try{n.SENTRY_SDK_SOURCE="loader";var e=n[i],o=e.init;e.init=function(i){n.removeEventListener(r,g),n.removeEventListener(t,h);var a=c;for(var s in i)Object.prototype.hasOwnProperty.call(i,s)&&(a[s]=i[s]);!function(n,e){var r=n.integrations\|\|[];if(!Array.isArray(r))return;var t=r.map((function(n){return n.name}));n.tracesSampleRate&&-1===t.indexOf("BrowserTracing")&&(e.browserTracingIntegration?r.push(e.browserTracingIntegration({enableInp:!0})):e.BrowserTracing&&r.push(new e.BrowserTracing));(n.replaysSes

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2208, manufacturer=samsung, model=SM-G973W, orientation=upper-right, xresolution=210, yresolution=218, resolutionunit=2, software=G973WVLS4FUB1, datetime=2021:03:12 10:15:08, width=2944], baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	21699
Entropy (8bit):	7.865742524859515
Encrypted:	false
SSDEEP:	384:XadeBS4o1UFYJARncaqw/doXPSO0aCZVznOyO63pEIjyMMWZ/BAIggHJzvkrS:XadySh1UFYJ+qUdoK4td6a2y/PIhHJzn
MD5:	230BC94572C755E33FA08C11DC3162BE
SHA1:	7B1059C84FAC89FED8B7D39D61E014D64803609D
SHA-256:	82B330D8228B7201ABED7F3C4EEC383D4D86C47531A65771CE026C80EBB9FB93
SHA-512:	53E1450E982638BE3FEE1D7C499C86135815243E15598BB84D933A66AD68582B88A0E1DA7B582E9A4C50A613BD3E5B3CAC1009CEE050057DFE571CEF11BD25DF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H....>tExif..II*...........................................................................................(...........1...........2.......................i...............samsung.SM-G973W..G973WVLS4FUB1.2021:03:12 10:15:08.H.......H.................\...........T..."...........'.......}...........0220........ ...........4...........H...........N...........d...........l...........t...........\|................................................................................................................................................... ...............2021:03:12 10:15:08.2021:03:12 10:15:08.-05:00-05:00....d.......x.......x.......d...F...d.......d.......d...{...d...J...d...L12XLLD00SM...............................................................(...............................N;......H.......H...................."..............................................................................................................................................................

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	634132
Entropy (8bit):	5.361108072080494
Encrypted:	false
SSDEEP:	12288:l1j3VNgD6XoC4wALELcLpLjF7HBQfceYBX1D+ZyniX8Nn4jqhcopl3Iqv54Iggd9:LzehShpLo
MD5:	16095B208FCE1F9394656811FB5B307E
SHA1:	35471DAB86DAAA4692681E892078121A2E9B1570
SHA-256:	CE3A2C1F166951C17A773F8A1E503D7A416D5430854EDF0AD5EA1460BFD92672
SHA-512:	849EF97FC6094ACA1E68771EFB14D8EB680D091D47D0E09C3F5C21EFDF14CE79120D8C9A2B999F61D6401B82F1E5AEE8369C7E7A568105AB918933C65C3C227A
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function i(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var a,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),a=function(){c=-c,u.data=c}):a=i(o),r.requestFlush=a,r.makeRequestCallFromTimer=i},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	57025
Entropy (8bit):	7.785097963929259
Encrypted:	false
SSDEEP:	1536:sl/fpZaDuDbDuj+fG3hc+nhRJIOvy/eDyiIiCVB:mBZaDuDbDum+nhRJVvwQhgB
MD5:	A382FEFE1265D1343675183991C65768
SHA1:	8846DE2D00337DF3326B7C5681621CCA502D0D8A
SHA-256:	EF1F65FEC669C44FC2239241300910737419C4D2DFC17A62345D3331286EEAB5
SHA-512:	2AB119F6A58ED0010D699C79C39663FF3E14C528E54907226504DB72A627B16E6BFA3600663CF4D196B1C95A69ED3681CC081C787810700B936A038D43D6C160
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDcvMjIvYTNkYzhhODQtODZkOC00ZmRkLWEyMzItYWUyYTQ5MTgwOTNjL0NoaWxkIGJlaGF2aW91ci5wbmciXV0/Child%20behaviour.png?sha=56fe014ed47e4e25
Preview:	.PNG........IHDR...8...8.......l.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......IDATx...w.T....{gggfw..,U...X..^c..[b/.D.5._L...1..[....`.. .H[.~vg......c.,p.<S..........e.3.y_.......................................................................................................................................................................................................................................................................................................@..Y....6<..T).BRLR..?.%.,.......I)I.2.........~$$.Ij.G...-...<.....0.u.$UK...o.?...U)...tKj..(ii..o...............ol...i....4B.pI.$.......R-{..X..I_H.....Y...........\.X......y-I..X!W.\..<...p$.e....B.....y.......y.../..S..yZ....I_.#q.:$..........s.RI.z....c...b....$..I.O{.....;.......p......T......pI!.\|.+i........H8.o....@6c...@/.u.$....2.Zg.....'............p.....:.....u...H..\|,....@&1....5.u6....M..AF.u. ........&.#...C..........N..mz.l-is

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68076
Entropy (8bit):	7.977760892724278
Encrypted:	false
SSDEEP:	1536:npOJgaW4WwAMVlV4H/H0XIeGXlFrCUZwlHktm8f+obNrRJmlllP:npOJhWjdeVIH0yrCUZwdJarRUlt
MD5:	5C6567F3D4B2F59A78C11346BBE7E129
SHA1:	961DB407CE2E764475298ACB867EFE052A14EA5A
SHA-256:	A0AFA451F8DE44E4632EF1C2FD2BF0C52188961D0DE2451568D8B1CD4CAC46F1
SHA-512:	33CEBDB6812C8C9BF38E0DCD9908B9FF64AC1B012466023A88EE280B980015A1C007C0A15DF27A072AD871275FD12D410399D17BB9FCB738F9465F7F3C338C1E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..8......IDATx...i.m.Y.......'...]....R)!.$..@6.RI2...=l....7<..=\..We.g.W......[.H...2..R.ln...q....nu..Z{..7...L.}G...q"N....o~s....ey../.2~.G....R...].....{.1.8v..Mo...2.\...MH).n.q..a<..C8y....=.c..... ...O.ey....z...K......... MSr...LMM!.sr..).:u...O<....G?./]_n?..q2J.k-#.h....K....G....8~.....Kx..g..A.$h.Z.~.:~.G~._.....RJ.B...K.,.y.....x.".("SSS`..(......C...../.p..o\|.LQ.'.$...~.....EQ...j..V....fo.9\|...={....p.]..=...\|..a.....x.k_k......k...C..K..Y....9.R.,......].Z..1.KKK.Z..c.?....?..?I......l~.o..p..C.k.o-..^..,.....A@..s.@..E.4M.j.03..z......./....w.s.Sw.qG.h4....Zk.......B...-...m....-O....p8.1..V.J)..}<..sx..GA.y.&/.G.....W..V..S.N.k-677.eYx.....v..../~..'........Hw.w.24.0..j...P.0...B.......t:....Y. .C...%A.\...8\|....._X....<..c...y...B.RD.a.R.R.....\.b...155.....?...y.9r.W.^E..X]]E.......A......j..t.o.~......>....e...5.KpYk.1.y

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50770
Entropy (8bit):	7.986140289338976
Encrypted:	false
SSDEEP:	1536:99bhl5/huVxG/LW7UH9PgKa7oIJ8rPBb/tN:9jl5/GxpUdMUIJ2ZBN
MD5:	658BEAA8B36C209174D82FABCD6DC51E
SHA1:	06C4CA6E50A39BDCF7B75DD617536B3282B30372
SHA-256:	8E2FB6F2D875D62716ABA08F90EE239CBC370C938B0EADBA17A05D60820EB497
SHA-512:	65ACA56F4D737E412D4ED117AA04D006E345319D31C8714FA35B70D0DD689C59C3F82F98685AF611F270E2AE52C1E027DBDCE708A290C275D752890185EB7A4A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8.........zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx..w...]..>.).....V..H..n.c...Z.P~!.$@..)@........B...6.b.!.....m\.e[..........{W.B...V:z.K...y...o..x\|=.._.........z\|=.._......1..a.....R...7s.Sn......C.\|..........\.~..\q.............?-....!.....cw].Rx.2.y..W.9.ti...x........'.......7..[z.....\_....x4.....`..wn.?X^........#..S..^..'66...O.../...l.$.%m>.p..b.T..\|PW...1..>q.CO.......]........}T.....Xo..7......2..cw.._,...

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	696
Entropy (8bit):	5.320823512683231
Encrypted:	false
SSDEEP:	12:Uc11FPk+5O6Zq6pHAH6ycSw47gmfDmx8ypFk+56ZmOHc9n+5cMK00k14enEPCedG:3Fs+5OYqKo6yxw4LfaKyA+5YmOOk4TfE
MD5:	EFB350B58B30B09009BCD30016CC04E5
SHA1:	F01DEDA4A72061126985414DDB22DC927A45CFB8
SHA-256:	69B9BE9B3A29790A4D3BAE435CAB06464524DC2FE87141AEBE7E7A9576DF410F
SHA-512:	6B642A12FBD92F9DE28FD4AE1D40629A42F32E73F8FBD863FCD27EADB2B0F524C85E0B1DE5DE645720D7AE25CE750A4D4138036B094D3742EAB073943F1809B8
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,200,0,0"
Preview:	/* fallback */.@font-face {. font-family: 'Material Symbols Outlined';. font-style: normal;. font-weight: 200;. src: url(https://fonts.gstatic.com/s/materialsymbolsoutlined/v195/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzByHX9rA6RzaxHMPdY43zj-jCxv3fzvRNU22ZXGJpEpjC_1v-p_4MrImHCIJIZrDAvHOej.woff2) format('woff2');.}...material-symbols-outlined {. font-family: 'Material Symbols Outlined';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 192x228, components 3
Category:	downloaded
Size (bytes):	13159
Entropy (8bit):	7.884426903782157
Encrypted:	false
SSDEEP:	384:/Tgz3qpoKewgWH1IvZatnZ+6OrooZsmH3cH:/Tgz3y5fH2Z4DoZDXK
MD5:	BF0B1550C3B35E5F2007F1C05AFA5300
SHA1:	515087BA41F1C09E0EB80684FE1F8CACBCCA67AE
SHA-256:	9BB329713589C9B4D3816AB75C57F916457868570F5AD5FA632A0A1C6503F17A
SHA-512:	5B57A4F5B65236DBF614B90F55E8A780A2B1927F0A5BEBA9300A37B9EAB22D067B6C909C2209428E82E2929D58108DF7CE397DFD7C132334FCB9D302FF541819
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDUtMDYvMDAyNDU3L2Q3YjNlMGRjLTlmYjEtNGIzOS04YWMxLWYyYmVkMDFkOThiNC9SZWR1Y2VkIGZpbGUtQUotSGVhZHNob3QuanBnIl0sWyJwIiwidGh1bWIiLCIxOTJ4MjI4IyJdXQ?sha=b2755e00795e32d4&for=livewise.janeapp.com
Preview:	......JFIF.....H.H.....@Exif..MM........i.......................................&.......@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C............................................................................"..........................................D.........................!..1A.."Qa.q2...#B.....3b.r...$R...CDc..........................................................!13A2a"Q..#B.........

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	9235
Entropy (8bit):	7.846091442365623
Encrypted:	false
SSDEEP:	192:uMs1hMHorcCADrXu7CfhRgv3F7Z/kezSuIG1ptFgOT0oblA:ufvRzA2AuP7/Rh//0obO
MD5:	8C4F9E289B2DF3CFC09B69EC8EDCFFE7
SHA1:	F9226C3DAE6B3F1037EEAB02E0116CD1A5CAEBF3
SHA-256:	FB2056125214CE76CF1189E82782469D5805ED16BD08EA27DC1A915118C1A977
SHA-512:	26BEB64EB52A8F0F9BB9C30F3950944D8A0F3D3E614E895FD18EF16C415BD112EE9660E0DC550E15FE7537E09413B44552F20BD1A80D6C418625932869FE9B09
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...XExif..MM.*...................i.........&.................................................(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C............................................................................"..........................................E.........................!..1..AQa."q...#2B...b...$3Rr..%S....8Cc....................

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 501 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7204
Entropy (8bit):	7.888681518073147
Encrypted:	false
SSDEEP:	96:nYz1Mp1WHjhHHTvjyyyJjC6kezATcYumXK1fJ9nuS8ATTTGOpWWn8TcicvtMZH6k:Yi7WFnHKjOck6JzHnTmWYccdSLUx
MD5:	DACE492658BA48878A23205643013CF3
SHA1:	7C4E61FA6FEE0E4B14A19E1CD67D136CBC9637ED
SHA-256:	7C69F25C3FB45191988BA01423ACC6796F7ADF26B77DB35302F0D6C129E379D6
SHA-512:	FBB784248C1A4AFDFBF5B3853A6D5174F6ECE721B0E89DAF6A7DFE480F4C89FC6DCCA4591275C1618D21B1799D431C040458413BBE0661F1E51F57394CE11E48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.............tEXtSoftware.Adobe ImageReadyq.e<...xiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:294c2824-3446-4627-a303-31535e597b79" xmpMM:DocumentID="xmp.did:7AFA669F96D911E9A00D97B40098793D" xmpMM:InstanceID="xmp.iid:7AFA669E96D911E9A00D97B40098793D" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:294c2824-3446-4627-a303-31535e597b79" stRef:documentID="xmp.did:294c2824-3446-4627-a303-31535e597b79"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.I.....BIDATx...t\.y.?YoY..zX.l.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1424), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	36607
Entropy (8bit):	5.148130433781336
Encrypted:	false
SSDEEP:	384:vdCOS24nBUBWqElZ5IoqIFaR39DNJDRD6ZD08q0YKloqhOIWCsdHJkqvFaR39Dj+:r4aWnOoYNZhK9foJuLLh87Ck2mehVsmm
MD5:	D03392E625FDE9FB86EBF5B8517F4623
SHA1:	89DC2A5A4EDD15D23F33F698CD3187E6BC918982
SHA-256:	04E16BB0F28C4DC8F127320A8DE6345B6725BA9BFC1B7B4E168DC35DE13A3B87
SHA-512:	3F6130BF4117D043BA367E8E861D2CB6E3DC8D4E4C183E2B842C5ABF390E0FE4EF731DC429365A0C58CC14FE200CEC2CAEFD6754D607D4993CDDC40A0432FED1
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8">. <meta content="IE=edge" http-equiv="X-UA-Compatible"/>. <meta content="width=device-width, initial-scale=1.0" name="viewport"/>. <meta content="LiveWise Associates" name="author"/>.. <title>. Empowering Wellness in Pickering: Mental Health & Therapy Services. </title>. <meta content="mental health, therapy services, counseling, wellness, coaching, Pickering, psychotherapy, EMDR, clinical supervision, group therapy, student counselling, employment coaching, couples therapy" name="keywords" />. <meta name="description" content="Discover comprehensive mental health support with therapy, counseling, and coaching services at LiveWise Associates in Pickering, ON." />.. <meta name="robots" content="index,follow" />. . social meta start -->. <meta property="og:site_name" content="LiveWise Associates" />. <meta property="og:title" content="Empowering Wellness in Pickering: Mental Health & T

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	75522
Entropy (8bit):	7.984531382229057
Encrypted:	false
SSDEEP:	1536:gRw+ab5HR5l4H+15gVAaxRrLuustd6gdLRUGM8gSRlXaZogz:B+E4H+17UFLuust5dNlXg
MD5:	5085257D3356386CAD100A381F7B2014
SHA1:	083E866E133C19933836F88036BAEF472E190D1C
SHA-256:	81919EDE4ED66BB2C7B4B23DF576334FED01EAB08D8EFF2739457C832308FF79
SHA-512:	E3765881FAD8456A07379F3B428D21FE454B7E695568F7013E5C310E0034E25B1F19056CE04B59C064694B78F24202085B7507CFCD15C5F1C5B52836190DAB83
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDI0MzEwLzUyZGNlNjNiLTYyMmItNGIxYS05ZmRjLWU1YjdjZjBmYWEzNi9NeSBwcm9qZWN0LTEgKDEpLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=35706cdce1a26466&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8.........zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...w.n[z...fZ..;.p.[u+J.........=.=....rC.1..nZ....m.2....0.....nL.....B(W.....v..3..s.o..V..u.nU.k..s....k.w..}..y^..~=r..o.&....?.........s.;.".........o.b.e...Z.4m{.f.e.0yQ[.l.nN. ...IS.e.\|...?.../.wz...by..R..C.$H%.B......$...l..)iS..`;.4U.5..s..<..~....y.....eg......r.n...LQ.o..o.q'.zC...."...>...l..,...o..../....{y...E..\|...g..o...\.~.{.;._.,O..?&~..'E...f.s..B.....m...

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 260x120, components 3
Category:	dropped
Size (bytes):	14539
Entropy (8bit):	7.931604562243161
Encrypted:	false
SSDEEP:	384:a4Y9Al91TOO8ZrVCRCxnE+L1I9tTNj8wTubHFgM:a4JHNOO8Fx+9/j8wYHWM
MD5:	402436717025A13BDF7F8D1C29DEE8B7
SHA1:	51B779B776B92032DF1012D95910956BEEBB3028
SHA-256:	FD4B7E10569931107AE6498EAABBEEC9DA30B7E9BD81138CCFCD5D9997D3270F
SHA-512:	89AFB83D829CF568F007549BD69703BFF686534F9953940174FE0F468D1ADE77141CDEBE4C97BF926CCA17FE8E682DCA1AB6DAF85D66C6F86A74625C75B8FC6D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B3A9042B495011ED899CBA6B97265C13" xmpMM:DocumentID="xmp.did:B3A9042C495011ED899CBA6B97265C13"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B3A90429495011ED899CBA6B97265C13" stRef:documentID="xmp.did:B3A9042A495011ED899CBA6B97265C13"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	96770
Entropy (8bit):	7.9874725475836605
Encrypted:	false
SSDEEP:	1536:ldJcGBjKDY2q0EYJkB375TBf+wibxt1oyBFDln2hXnsU6JOdV1LbOoPBa5AFMkhx:lbcMGc+jkB375Ffebxt1oY2hXnsFwdVp
MD5:	379D7D1258B269BE26F00418206BF4C4
SHA1:	6C119EBAD0A447997543477C2B128781C7CCEF3F
SHA-256:	72E9DCC087D163742C9468E4F2F3ED6263D5493411573D23E7407D74F6632DC9
SHA-512:	505C1A00960AAE5FAD55A0866329E4AAB0FEEE3647A99A8CCD298DD00D54AAAEEB68B00148DB7B7332FB76447076A4025F8874C20F54DC56D3C18CD4AFC8B22D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......+........zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y.m....F9.\...>.-^].{/...B.P.5U....I..--@R.i...4.4!..I.2SDh."L.f.(.....D..U..{O...V1.Q..c.....>..6.m..s.Yk.U.>z._.....gv....g~}.>.....'....'...zz~.m...x.........D.ID...1!.D)...).b..1&\|.(..Z........'....5.Z..(%.).I..HB.C@iMp..h..HR.....,.......Zk.kXU.EUa.B.... ED..B@J...!.c .....<.9...>...m?..#..tc.s..&*.G.....%U..).Bp\|\|.r.d......vK....1...{.<Jj.uMJ..5..>DJ../.......8.TU..'O...vK.u.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8099)
Category:	dropped
Size (bytes):	2221934
Entropy (8bit):	5.124198594957263
Encrypted:	false
SSDEEP:	6144:DkZommtZZU6bvHaE0k6yJ8FoyJ4uhZfxyJ8dIyJS0lR/4CskVA8lEgY2PwUgQf48:yomM0k6yJ+oyJfyJKIyJN1
MD5:	3A0FBD9F639D28769B984B7408398834
SHA1:	EFA733AC0ABD635BB9D52DE0278D84840785DD48
SHA-256:	746B30C9EB8563D8FADEB1A0132306FC16AB87BB3BC5FA125AF70C17E9139CE1
SHA-512:	42E62D7F7790FAB62938395586C01D1744D305CD09F858E58AF38B6D90CE7A4A734F5BAFE052BC8F8C172647338E6A47C4F293F940B619A8A6F2D4A620E15383
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html. class="MktRoot". lang="en-US". data-js-controller="Page". data-page-id="Home". data-page-title="Stripe \| Financial Infrastructure to Grow Your Revenue". data-loading.>. <head>. <script>window.__capturedErrors = [];.window.onerror = function (message, url, line, column, error) { __capturedErrors.push(error); };.window.onunhandledrejection = function(evt) { __capturedErrors.push(evt.reason); }.</script>.<meta. name="sentry-config". data-js-dsn="https://7cd38b0eb2b348b39a6002cc768f91c7@errors.stripe.com/376". data-js-release="21fe4d0d45ef1f8bcf0c56b5e9cfe2c8f2ac099a". data-js-environment="production". data-js-project="mkt".>.. <meta name="experiment-treatments" content="acquisition_top_cta_change.control.ursula.a61b6327-2127-476f-a8fb-10f29f76311f.a,wpp_homepage_title_copy.control.ursula.0223fb04-2cd8-4250-810e-d82578704e8e.a,acquisition_sticky_nav.treatment_full_nav.ursula.d6c5d20a-c9af-4045-b55d-b67306d7c280.m,acquisition_home_email_input.control

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	81250
Entropy (8bit):	7.986208809977716
Encrypted:	false
SSDEEP:	1536:NvWkaOqS+x2Su79/ba8zKDFkg6ge1g6Cyf6+AVHdeDbyCYimF:MkpvZhJz8pyf6ZVHdyr8
MD5:	9D4A2BDFE6004B4A55BAE8D1CF9F17DB
SHA1:	5BAD99A0A190628816B32E5E55A2BCFF52C1C182
SHA-256:	DA47985036A3546539D65B3E3B99410F0664DE90453B8B6FC401CAA0A04D10C0
SHA-512:	1703D7089B20A52FEC1034E0E10127B7850A17ED4D09ADAA4EF4BE63052684AD7352DFCB50167E33DD70990058C1A0EC62D1BC8DEC2680F745762AD8816986B6
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDMwNDA5LzY5YjhkODM4LTg3YzItNDM0OS05Y2ZkLWQyM2MwYTc1YzlmMC9NeSBwcm9qZWN0LTEgKDYpLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=431d76ba62049194&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8....t....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...w.f.U...w8....:...4..1H $!....16.&..b...{mc.08`..c.xI..BD%P@Ba.&tO....w...S5.__...J.h}>.nuWW?s.^{.../.>....{..`mM=..r.x\..G.]..x..U.^..b6..=...Z..n...76.SW%.^...yO]U..9.<GE.).Y..f.o..6._p..Mc:MS...d..e.'.u........'?.O.....O..,.../../y.A?.?.!....Y.......>.a^.....t\|..M_..~.[../..{.F;;..'....r.4.~....O'.,/........N^.DQ.`8d8...`{{..\|JY..eE.4TuE]7x.Z+.f.8N....K...r..............z.s...]....

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	6558
Entropy (8bit):	7.928163225074316
Encrypted:	false
SSDEEP:	96:RhzL4ijgTm9do7i6Fcju99MHpkDoJIqvyksxUUQbVeK5d7lsL8Ruf55WuYzDE8R+:LzLPlW8+aI4vFbVZf7lsL8RPDE8RDRk
MD5:	73F5763E0C5AFFC81701B80926442296
SHA1:	C2B64B24D614CB8F2AAFE95DD979A1CC8DAA86A1
SHA-256:	463B47EABBA38BB3A5588262899F9D4BE7030197BFD9D814C23079894F46DF3D
SHA-512:	32937570C437195FF892659753444CE9793FA39C4FF6553069D9AAB4D93422AEDD0C0D96128E56B07BE1A7E1CF5EDCF866E73ADA71852F925DE6FEEF867BDEA5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................>........................!..1A."Qa..2q#....BR%3b....$&4rSc................................."......................!.1.A"23Q.............?... ..B... .Fk:.zV1q.J..}..C>-;.....A..Yv..I.,....;......s.!.....m..`....K.=..j<U5.G....%.j-\|..lz.U....G5......!.F.6C....}....{......v.W...}....C..%l..r..I.^....C..gRll.......K..7c.8...K..2F).M..].G<.(x#...?aq.j....OU.ih...Ks0......4.f.).n....F.z.a.Zlol..c...`...,....-..!..B...!..B...!..B.......\..@.Oe.qn...#......2..f..R...:....j..F._u....G...]o=H=....n...3.+}._0..:G..os.L>[e...(_'/.ys..n..`...G....V....K..crz"...@.wRQi.P.U..[Cl.....F.if....K...8.A.....r+.qZ...z,,...E.i.....)0..PWGc5.k..F.....O.s7N..tD..I..J.Q.DYv.T.'..&.5&...-W.5..4..m;..z{,.I.>.Z4.`.F..y.l..V....y*=.....um-..<Vyd..]8...!.A.B...!..B...!..B..>.@..e

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2208, manufacturer=samsung, model=SM-G973W, orientation=upper-right, xresolution=210, yresolution=218, resolutionunit=2, software=G973WVLS4FUB1, datetime=2021:03:12 10:15:08, width=2944], baseline, precision 8, 192x228, components 3
Category:	dropped
Size (bytes):	27456
Entropy (8bit):	6.805980356599985
Encrypted:	false
SSDEEP:	384:SF9DVadeBS4o1UFYJARncaqw/doXPSO0aCZVznOyO63pEIjyMJa8VG/:SXDVadySh1UFYJ+qUdoK4td6a2yoaV
MD5:	305BC35A5CD69C02CEA5E833B5F1DBDF
SHA1:	91E7CD3826998FEBD60A6060601E53A722DE3BAF
SHA-256:	DA5EDDBB8A54523B51CC3E775F458E0C4F04EE6A9F97EF5621E9605AAB49DE95
SHA-512:	27DC4E284B76086F32BD48C49FBCAE3F0595598281B9579B4B9977189C7E08E5E2F620960685AB8CF574205CA3FC3086C021A3F7AA79D242D54AB658AB00D3E7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....m....................\...P...D.......(...7....................................................................................f..LM......................C...........................................................................h........................... ...}...x...............D...........................................................................................................z ..........z ......................................T.......B...(...............j...............................I...............................R...R...d...............................!...,...6...R...........................,...,...I.......v...............\...m...v...m.......0...........................................!.......j...................................................................4...~...~...........~............;...\...e..1.......d...............................................P...P...............................!...5...................................................

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68746
Entropy (8bit):	7.984998151488386
Encrypted:	false
SSDEEP:	1536:ciCjTnNETfDIKJG1spjdjxXdjJwYEWFz7duz1/:cHfR/u/jxJKYVFz7di
MD5:	704A3874A4A3024B07B923C9363D3B27
SHA1:	9FCBDBADBEA48B38EF69038A089DB5DD00EA9E2E
SHA-256:	266B5AF36E960DF2F31EF626A40DA3DC3D151977AC27A63AED17154D0AB1D13A
SHA-512:	9A77B09C1F5221A9A63644AD88C552FE3EDC15DBC6B966D726029E77CA3A2EB914A04FEFA50E9A99DA0B707D8451FB9CB3C92E5FF4C3BFBEF6DB43BBF16471AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......3.i......IDATx...y.mi^..~.i.gx.;....9.L.&f.]...e)...Pb).e.......U..z...j.,..FmQ,.rQ. ..9Gfd.q.w<...L...y.972QP.pc.7....>........W\|.......G8..f~.g....p..........m.,.HL..#.....5.XrN.c .LJ...g..J...(h.....@.5.,....Y...3..Xc.....=..?.W\\\@.h.0Z...#...\|`..X.7.6.BL..H.6c`=DB...1.b".L.........4..).s&....).PJa..Z.V.m4Fk...$_k.E...G\|.h....&.9g...2.."C..6...E....{G...M.Z....w.......~.....\|.O.+.....b\.-h.{.5_.R..#)'@..1.P. .....=9'...(..`3.....a.Xfm...>..%.c1kp.R.Y....#Q+.5.}G.[....rJx..!..bf...h..1dF.......lg..b.>0x...J....r...J..f...31.r..cqXr..2.M..C.1.k.!$H... ..0ZAN..J.S..B.....s>.............},..e.....v}...6.........y........J..#!fR..L.R.."....J...] .sD..5..1,..{.9..{...a..4p..t..U..F).].u..Y..(Ek4...)E.5..A..9.:G..M.3..<.h..j..sD..Bn4...\..B...r. %P..5Z..Z">..`P(..P.@.`..Z.r.....r4.&.H)..&e.Ji..^.i.r...>..}......x...}....

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50770
Entropy (8bit):	7.986140289338976
Encrypted:	false
SSDEEP:	1536:99bhl5/huVxG/LW7UH9PgKa7oIJ8rPBb/tN:9jl5/GxpUdMUIJ2ZBN
MD5:	658BEAA8B36C209174D82FABCD6DC51E
SHA1:	06C4CA6E50A39BDCF7B75DD617536B3282B30372
SHA-256:	8E2FB6F2D875D62716ABA08F90EE239CBC370C938B0EADBA17A05D60820EB497
SHA-512:	65ACA56F4D737E412D4ED117AA04D006E345319D31C8714FA35B70D0DD689C59C3F82F98685AF611F270E2AE52C1E027DBDCE708A290C275D752890185EB7A4A
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTAvMDIzNzMzLzdlOTE1Y2FhLTEyZTYtNGEyNS05MGRiLWViYThjNGE0MTc2OC9BTUlOLUxBUkdFUi0xICgyKS5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=aa657fcec7f64757&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8.........zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx..w...]..>.).....V..H..n.c...Z.P~!.$@..)@........B...6.b.!.....m\.e[..........{W.B...V:z.K...y...o..x\|=.._.........z\|=.._......1..a.....R...7s.Sn......C.\|..........\.~..\q.............?-....!.....cw].Rx.2.y..W.9.ti...x........'.......7..[z.....\_....x4.....`..wn.?X^........#..S..^..'66...O.../...l.$.%m>.p..b.T..\|PW...1..>q.CO.......]........}T.....Xo..7......2..cw.._,...

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	91020
Entropy (8bit):	7.985035550381465
Encrypted:	false
SSDEEP:	1536:u7hzCG3rVLuqlrMp5dLh3LqaSg9z/0uGifND1cjQrrS8JbmyeWdBgDddLC9KE:u75jLuqCxlGaSg9zGifND1cjkS8G2N9f
MD5:	6C8652924E5C940CBC6EDC4035364344
SHA1:	F1B078CE0C3B036741A29189B976AF19DC38DFD4
SHA-256:	D71BFFFC78E5EC23AFCCD9ABAAD74258BC771A97C124541694B5BF6D0AC9BAFB
SHA-512:	826DACF3F97D65EBF92DB9A642140208E7D15E9C29E3DAFAB15110012FD919A251D019815A1FBE131F1BD8C6325448F1B9BE806D9F59582B0109D0757D8E54C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................tIME......,.a.d....IDATx....m.u..f.....7... H.(6.)KGY.GU./..o....G9..p'K..d5.(."....@"..y...n5...k..`9...@..B\.m..g7k.1.7..}......w&...a.:.^<.........x..k.Z....].r......z.d.....V...(..<z.....3.......u.09.R.XCe-...1.c,...M..9....s..5.......f..PJ.2......f..HIA..[GSUT..%.H..rb9.c..9E......zO..R.l.".,_W9.6..X.b.a.a..$.!...b..1.`......u.8z.~../.z.G.XoG.g......C$...G\|.,g3P..=Ze...y.b.h.o....w.....~.[..}..@....Y.f.........s....f.vs..~....}O.,...#1F..>.c..>$....5.r^f0F.P.PZ....( gr.$m.(.Rh@....k4JAJ..".:cp...Z...<.1`.Bi.....3FYj.....Ai..I).b.q.k.1...D.i.GL....`..!.} .De..X.u.....1eB...QJ.{..9)RJ..@[;..@N...1.hk.C.t.%&...,..F..5...1%..Xk.}....G.}..o<}....)&..*.U..9.\........va.C`.w..O....~.......u...._..B..Bk.9.1P9K.b.$..F.."g..+c.".%.LJ..........@....(2J.......9..AkH.P...$.HA.2.3.....XmSSU..-...".@..k.V)b..hi.].

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 10x2000, components 3
Category:	dropped
Size (bytes):	1512
Entropy (8bit):	5.114906775508485
Encrypted:	false
SSDEEP:	24:gllK1hpgyWwjx82lY2T3UVXCwyJ3VMwGHkKc:gk/ENn2wCJ31Ec
MD5:	38002F3B52E3788E66764182ACA85A79
SHA1:	5E63AABC00AF324A85AE6DA604D8FB2A722DEFBD
SHA-256:	5FA644A716CD85B46D1ED48AE749AF7AF0FA8F88241AFC83640CD6A58D9E4C49
SHA-512:	C6BF094D58B994859C21AD98B79F649F21E74137388BC30BF4E3A5430A69681E031B9E53A26F79DA8E173DA7EC0A877AE23D080F7352B41222FA01E38C40EF92
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:878DB8FD020D11E4B98E92A15713ED29" xmpMM:DocumentID="xmp.did:878DB8FE020D11E4B98E92A15713ED29"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:878DB8FB020D11E4B98E92A15713ED29" stRef:documentID="xmp.did:878DB8FC020D11E4B98E92A15713ED29"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmqTqmoIzErAhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 260x120, components 3
Category:	downloaded
Size (bytes):	13891
Entropy (8bit):	7.909286224422782
Encrypted:	false
SSDEEP:	384:aI9C8x+S5BlEnTeF96qO7vDa7vF47Zm4EQbDO:a/LSPlaDqkvDa7v+TE4O
MD5:	129B872953761A9E85E7D47E7E6EC401
SHA1:	E139F8773EDA0C850C95949C687646D125AB7838
SHA-256:	8278356630F61285DFB66206CDFA4EFAE4FE29615D99A82D78E3047848ACACBB
SHA-512:	B1A8902A3777989DEBD29EE0AA7C932E94EB35443346C1588C785B0C21215B03C9C1365D31FED275EB1BB8B66BAD1164CA61A9CD8EF70337B5E0320AACE25214
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDgvMTAvNTY1OWVjNzAtYTBiYS00OTQ2LWI4ODAtOGJiM2ZiN2ZhMjE3L1N1biBMaWZlIExvZ28uanBlZyJdXQ/Sun%20Life%20Logo.jpeg?sha=a80bd69ae9f8cb13
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C6047870495011EDA0739C790EB7E78F" xmpMM:DocumentID="xmp.did:C6047871495011EDA0739C790EB7E78F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C604786E495011EDA0739C790EB7E78F" stRef:documentID="xmp.did:C604786F495011EDA0739C790EB7E78F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.853178646307767
Encrypted:	false
SSDEEP:	3:IndHwa3PdNhkWXLrICkuWthHeTn:6Hwa3PdUQnkuqxeT
MD5:	609D812034651D68EB144AF2B7340A5E
SHA1:	E5F9271CFE94DBF1CDE3874D1D71B7AB3E6E3441
SHA-256:	1EC6224FA6AC74750240FEE741EBF6C77F0D0CA56E11669193DAD50E80A1443D
SHA-512:	87B0B0015A7103121448DAFA20ECDB40DF995327A5788DE1DBEF17C2342A9C40B492CDCFFB36835983887C41EDF1A6828B189C34891ADD193EEB59AE1CF3D05B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAkT_7QWcOnEZhIFDbVvX3USBQ26x__EEgUNz5AaqhIFDb6t_ZUSBQ1TWkfFEhAJqk6pqCMxKwISBQ1TWkfF?alt=proto
Preview:	Ci0KBw21b191GgAKBw26x//EGgAKBw3PkBqqGgAKBw2+rf2VGgAKBw1TWkfFGgAKCQoHDVNaR8UaAA==

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10362
Entropy (8bit):	5.447902619831522
Encrypted:	false
SSDEEP:	192:Ak9wkhFkKkpuk129w2hF2K2pu21p9wphFpKppupRlaQh2tsS0l4QnkteSflDQ8Pk:A6wAF5paYw6F3nUDwrFomtpRXqsf
MD5:	E93282E631552E8ABE99164DBFE601D1
SHA1:	5E2911B3C4FFDF76B496FA2A3BA0E18D2BDF3094
SHA-256:	B4478E68F43F1E8875FDD39BE0970A1FFBF78934C4B31F63F3C4A84FBDEEA315
SHA-512:	0834D6E89ABF56490C22CEDE59CBB497F7449BA2127792E7101CC5F85A8627ABF70C1A340637C70E7F7739CA49364B25CDFD1ED99D4BF6D80107D5117505C211
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Montserrat:400,400i,600,600i,700,700i"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	69202
Entropy (8bit):	7.979505626875378
Encrypted:	false
SSDEEP:	1536:Qbv9rWCQg6QCILAh3fuTN38i1GUpdOfNv+cjjkh8EAqCQV/M/jYMfseM:q9C4CIL2638iMwYlJjjio+6fsx
MD5:	B50A5E17089E075C7EEADA21F7B6FD00
SHA1:	C947FD381DE6B2DFF39A88C6F68AB75F6A9B5513
SHA-256:	15F536C28795F0F9ADDCE87BA72074A9F1673FB03C07E9C126F7D76E9DE432DC
SHA-512:	0739114D060AADD07577F1E4D7CFB95A8D7211E5EE92D096D2D6AF03AA1B0C4E214655ED0456BE0053220C507E51A4A1A9A4D9C727ABC643AB1818560F8306F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..UZ.....IDATx..w.e.U....o...==.'.H#i...@H...."..d.1.......M26..l..{.....l...@......{:wW......Tu..<x....SS=]....k........+..F..{....;..[.....O.?.y~0.t..'#%e..yU....X..P....F.l..>..W...g...._....K.{..$.C..........?y...'Yq.d..2/.....uK.::Qbqe.8.3/.4..e-.....T...\|ln..K.X>.ew..~........'.$........,....O=.\|{..z...>.f.0..EY.5..Q:Ae=.8p....6y..iE..J...iVp....oa.\C..\|.....1g...o.v.[E.>.......(.......o.Z.9qT...~......l....wpj..B.2.e.a..Z...k..K.,._bZN1.DG.B...Q...-f..f...W^y7...R..N..W...e.1.....F...[.o.........*.f....<v.....c....ay"7..).....J.kIK.H.x.J0....C.T...3..R..()l..tB..2....1Jv..<TM...76.....;f...-p.g...y...........'.'I..oz...M.....F.oL.........\|.)..BE.F..H#.$Bk.....(.B....7.<N....)..Ci..8un...7..M.N&h..j.i4..Y..Sg..G..n}l....[.g~ekRd.._.}...p...............r......l...0..I%.<...J..S.47C...I..s%`w7.s.k.U.c...m.44E9.,s.@JO......

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70047
Entropy (8bit):	7.984164998123276
Encrypted:	false
SSDEEP:	1536:AO0WalrOw8UDpdk1yTsH1+qyZH/HmQkc0TxkKdkAlU3LOq:L0WaliV4N2Iqeayyq
MD5:	9721EC770651C3B8BBE7595A5DA2866F
SHA1:	E125171EFA090078B21772EF0495F3A2E5BF591D
SHA-256:	CE9934903B211303BCDB73EB433E50DED9412DA1E532DBBD45FFF80B76267792
SHA-512:	F020F1FD5FA62963C9F1F2CA7A0E152DF509AA4AA430575003767B985337F02139225A4765B0690B0D685996613FAD681594D833917529E6CC847942B416F684
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDgtMTAvMTUyNDUzLzU4YzhhMDZmLTY3NjUtNDBhNy1hZGE1LWIyMTY5YWI5NDNmMS9FbHNhLXVwZGF0ZWQgcGhvdG8uUE5HIl0sWyJwIiwidGh1bWIiLCIxOTJ4MjI4IyJdXQ?sha=80c2296f810fc0d7&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................tIME.....8....t....IDATx....m...~..3.tG\.... Y.j..JR.RI.[m...vwt.;./...O.._..v..!.R[.eY.5.F..... @...w.9..{ZS?.}...... .....y3.d...o....DJ)...z...!H)m..1....=!x..v.`}y...m.....%gGG<.....Dd>.E........u..x.z..s.EY0.=..S.M.......e2...A....!...z...I.._....z.....n`yy...}..rt.}.......C\|..hE....{....m......\|.(%.B2.'.%.J0..aw..JY./NH$.-......d:g.....>{W.a....RiRJX[ .z"...~.../...p.........o\|.k...7xx.]..N.C...%1ZQU5.....Xv...\|.y=..C....\|.....h..!.-...!.B....A..to.............~...O.R$.HU.0.".....I.....?...iD.........m..._...wX,.D..N.V.%%..E\|t~.j...(.E...A.bD.....ua.R.C..@7.,W-)H\|.H.......=RI\p.e...(+...?.Yla9?=...M>..gx../q..S.c..?a....'.>....jy...#..G...7y.or..m..k.~`R....C.@L..a..\6=C.c4m.1-4)&B.?.`o.....).\`.=!%&....s..wt....B....@..V.-I...DKI?.(m..;...^.g......"Wo..*..............[.F.....o.k.....7^...........v&H@..H...b..F)I....

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 510x660, components 3
Category:	dropped
Size (bytes):	83290
Entropy (8bit):	7.954222888292048
Encrypted:	false
SSDEEP:	1536:pLBuU+nhvSL8FRQ/IOVIO0lzftY8hVfjTRKN1yIQD5+it7ABgdKERiJvjgv:pLEhcp/n/UG8hhR81yIQdyER20v
MD5:	13A47DB86C485590380056A083E554AA
SHA1:	AC40446F8B646A79308E6B3BCB7A06EA464FCA52
SHA-256:	3CD75E8B192EE04ECE100758E864C7F6864EB97CEE4473D68FF6C669A737AD4C
SHA-512:	018574D304E0CBCDD2FF73D61955B2BE1448422E4645261EC77A66FA676FC049A31269E3195368F54223FDCBFAD23899998957FA74B2B2E10ACB1CA4DE9D639F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............0ICC_PROFILE...... appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl................................................desc.......kcprt...h...#wtpt........bkpt........rXYZ........gXYZ........bXYZ........rTRC........bTRC........gTRC........desc........Adobe RGB (1998)................................................................................text....Copyright Apple Inc., 2022..XYZ .......Q........XYZ ................XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....curv.........3..curv.........3..curv.........3.....C....................................................................C.......................................................................................................................J.........................!1.A."Qa.2q..B...#...$Rb...3....Cr%...Ss...Dc.................................,.....................!1.A..2Qaq"..#3BR................?..S.0....0....0....0....0....0....0....0....0....0....0....0....0.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	22978
Entropy (8bit):	7.925469182785946
Encrypted:	false
SSDEEP:	384:tvhujSBWsbNbBO+ZaM/NK2ayQqxHv9FwEDEudPns4z9epWS1FlUwCr+r:CobY+ZhKSlFMu5ns4BepWS1FewN
MD5:	6BA4665DDA43025AE547C390F9BF5CCA
SHA1:	B5247282241CD33D0081482F62443A0F39812202
SHA-256:	3F6BB0808683C73693A24DBAA883AC42B35AC9EF54C14CDFD73C57470F068D20
SHA-512:	6C568E49518DE205A73E4FF895E06996A70304519125810C940EB7008B693823236689B0B4B865C6AAFF5DB18FD373C0139D3410B4A96BDCAD293F2FE46DA0B3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H..............0221....................0100......................@...................(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C............................................................................"...........................................B............................!1."AQ..2aq.B#R...b...$3Cr

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47178
Entropy (8bit):	7.9782046701052955
Encrypted:	false
SSDEEP:	768:Y5nSIEhUpinizMCLVnw/LBxW3WL7Uyu053qddEA//vmjH8vTD/tt97UWTMXzkUx1:CnSHhU4niICZnQLBxW6xoQknMH8vTxT4
MD5:	D616A49134283860B950F6A449464C87
SHA1:	820BFE04643DD86EF35175B89CE2FCE745D933B7
SHA-256:	3D496E581AF599E32855CCF87F217907F3DB23E3739A1B9C57F4CEAD664C190A
SHA-512:	0A5F794ABBFDC5EC3DF5BB06CDF908DE3953D5D729B90BE0484CCCE7DC8DA6AE7D548B6D7447A7FEC34A2B1E6C1E9A222AAB7CED917F8D3634A546D6BF23D979
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..\.F....IDATx....o.u.}.......s..4.A.`......p..f.\e.\.+..qkl.G....3.....XcJ.....$....o.\|./........4.......gU...O.p.....7.Zk.:...4....\.u\|.q........p.?.q........p.?.q........p.?.q........p.?.q........p.?.q........p.?.q............G)...Sr..JJ..'O.x.&......oZ.o?..;4.n....1..1...:..O...4..?z._.cN...W...{...d.~..RJ".D.\.b.nq@X......K<........[.<.r.....w.sM..`......./....>O^.:.'.p2.M!X..,.cT0..K&..T..R..S!K....aur...^.~.g?.1^...9.u..i?....&.........x.W...../.y.U\..&..{.5.[.T...5..HRH. ..@.1&b.`..C..T....^.c...\|.o.,..2....2.:...QJ........u^... .?.!.X!8....c.P1.l......P.T..ZI1SJ!.L...J..0.,.....1A1...g>.)>.7.6...Oq.gp.}..5.H\'..0..._....W.._0=y..-t..,.op.b....j...J.@..n0\>.i..)#..@.!em..T...E..Xb...r!7.w^..?...}~.s....'?po.........7^..~..../..!.,...W.1...\...`..Z..`.H. .1."..J..@..#9..Tr...).Z..\..J5.....,...g...y.3?........O.M.....gq...s.C.7..w..

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43680, version 1.0
Category:	downloaded
Size (bytes):	43680
Entropy (8bit):	7.995163411730426
Encrypted:	true
SSDEEP:	768:PLLJI9N93egyW2v+WDjyXEmW+0oR5mY/FqH1VmetMSNhFp2QAOM3lfyjmR:fS9N9yLv+AjyUmp0OR/Fq1vzFpbMT
MD5:	7EBA3F452F880FAC74A78DC786892F76
SHA1:	45EBE617F8483FDE8FDE3E9D5E626938C0562B00
SHA-256:	84F66802127DF1E175BA95FE6247800E01367EFBE122A484B975718FE495C7B7
SHA-512:	2EA561C12837482CD9ACB36FAD69423345A9641577C174DD89909C4F4A4D6FEDF1EEBA0C2A4C08DFD0A350D8A11FA3B1E1435AC729143E8DDD32DD9AE6E6321F
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/proximanova-sbold-webfont-7eba3f452f880fac74a78dc786892f76.woff2
Preview:	wOF2..............S....8........................?FFTM..0.....B.`....D..e.....$..m..J..6.$.... ..F..[...[\....n;.r.m"@.1\........,. ..e%.%.;...[jZ......Ic....;....... G..$...T..b...N./.o8/....K..>Lh~k..R>...T........N....+<sX3..t..)m..8...[...#_3Z...._qL...9.....{..TDr..Q\...2.N....p..i.$...6...i. ..]..I$..P-...k%X..p....X?.e/.5..]..S....<..2V....../...z.&....C.e....(0....X.S...D1[.........>....y}`.^........T.#...{..)[9;.k....;.C`......e.+O.y....[{.s..Ie.k...P!*l.I(.X..8...r..y......jiZ..803..`n..e...A...X..d..X...6`...F..lBEA...IxQ.a.})x.9...;.:10.V,L..)..N.TR1.Aq..3..W.;..ml}]..n;...&......_..]...ZwJ_.g.>)F..s..V.KI.s..l.<.Lr.[..Q...g...(..Q...eH....4.;.S.M..!p.v...7.....G..H..-.Y...e....N..S.5B.m........h<.ij.]...G....FG...F.c...t.....G.....IB.h..k_.....o..[Zw..R... E..D_....).T.K.g..G.=0~c.$....6C.i$~.....^!!=aZnC...u=M..Sz^Vh....KSD.}..";.<.. ..7.9..%.9....5.,a/9...+4..m.u....y..)+....`.r...W...fVA...B...$....UW....~U....,d..;w...~...

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	87554
Entropy (8bit):	7.980551907603484
Encrypted:	false
SSDEEP:	1536:zFIB/zRZFsTWK1BaIJNVIqcjBD9TSxPm2AFAD8nB28SCNAzTB88FC:zFIFFZWfgIvVEcw2AF+E29CSzTG8FC
MD5:	66AC6DECA5AD477521AA745D609315D0
SHA1:	3C635B51A42CC47FF6C3E71CABEBD523E828E99D
SHA-256:	A5B10E7F87C3187219DB547DF8A5BC2A02F567FF96B0B7C977ABB54CBA2D7053
SHA-512:	4AA619383F1BD2997175C36E1D0CDF137EF6E5157D9E87608584EBBF0D904635D1B10B435FC3EE0F928B39B3CD316D3B533A986682D925AB16B5949D33D74CBA
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDkvY2E1OWFmNWQtMzM5Zi00ZGRhLWI1NDktM2RlOTJmNzYxMDZjL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=812399337bf0296b
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......2.n;.....IDATx...w.e.y...W...S.s.9gIW.........0......0`>...{<0...l.,p..-.......]..V.?.>..e.'..nQ...>Uu......_....\\|.W}..N.....T...^...._...'....^.lg.+..D;.i7.~...~..JWr..'9.4...9yl.H....'."..H%.....CJ....x.q......!......B..... ..{. .x........`.c8.p..e._.`..I.~..4;.vw..._`cg.8/H....WP.^;..O....F....&....k..\|.........4).....9.K...:.7p...x.SO..Ys...../.*...np..g8w...<.....&.v..^y...."..........3G8ul.N+E)I...q.T.!%B...!..E .@.....=RJ.. @.1...b..i2Cx....D..B....,......./....KW.w.,..S......N..$..K.9.`8.V.F. .O..."..XcQQDV.1.....z.g?..s..........r.w.0.?.._..?.?.)./N.=..'.n_HA.......C..^A..n..k._...%ZM....Cw...%./....B..1...........)....OH.=J....F..9..w.w_'.....p.{...8.h&1.8b<.q..%..>..Y..b8.i4.L..~.MQTX/..F...'..w$QD...q.m.\|......._ym../..7...s(..7..n8..>.[.orq.v.E....E$p..5.4...3...O.z...........=...9..-.X#..Pi5;1.:.A...$.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	5.49563096212181
Encrypted:	false
SSDEEP:	192:jAbSrixs6OViafAO1OZOxernGWfhi2Osrb81vZlt:jAbW6baFezGWfhi2OsrbMt
MD5:	F65BCC78C47C4C0F403F33460141CB98
SHA1:	3D6537C22DEDD731C94119B499C3A9933C48F119
SHA-256:	E98809FAA88BE33133590CBF33352AE61242AE5D6E58DCF362BE13B97FBBE52B
SHA-512:	FF40D23F18CE46689597EFDAD0CF82DE9CEDEDFFDEAC1F3892D4FB5702A7D1EE8614EA5DE23FD9BB5B7D7E1FE007E10F29616B698C24A2E90A156DAA46E805C8
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................T...x.................................................."................................................................................x..T..........................................T...x.........................................................."........................................................................................x..T..............................T..................................................................................................................................................................T......................T.........................................................................."...............................................................................................T..............T*.............................................................................."...................................................

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (731), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	45907
Entropy (8bit):	5.032844793710126
Encrypted:	false
SSDEEP:	384:vDQ24nSUkEFLEFhoqIZn08lbrS7Nx1cqmdiuzQA61AbCg6v4acZXxOc9qjMwtt6S:Z4HF4Fhod/9rSjA4G4voJmmM
MD5:	8647D3859E3E6AA9B11DA0042F8224CD
SHA1:	583C53E576E88475F1C4CDB629BAFD33D3E010F1
SHA-256:	89D6A7416D49F003C2AB8D3AAF5A79CD365CB91B8762D4A1E96B2BFFA11D83F8
SHA-512:	6D56F843288B5512B47BE0A2B1D5C4190667D7DBF5F8CE4C115083C00E6F2E95A3C52CA1B71E5453360582B9C2638252D7753D689C267FD85F1CE81F3BD26452
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/about
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8">. <meta content="IE=edge" http-equiv="X-UA-Compatible"/>. <meta content="width=device-width, initial-scale=1.0" name="viewport"/>. <meta content="LiveWise Associates" name="author"/>.. <title>. About LiveWise Associates: Compassionate Therapy in Pickering, ON. </title>. <meta content="LiveWise Associates, therapy Pickering, clinical supervision, group therapy, student counselling, EMDR therapy, psychotherapy, social worker, couples therapy, employment coaching" name="keywords" />. <meta name="description" content="Discover how LiveWise Associates in Pickering, ON, empowers individuals through heartfelt therapy and guidance for a healthier future." />.. <meta name="robots" content="index,follow" />. . social meta start -->. <meta property="og:site_name" content="LiveWise Associates" />. <meta property="og:title" content="About LiveWise Associates: Compassionate Therapy in Pickering, ON" />.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 640, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	100146
Entropy (8bit):	7.98135303566225
Encrypted:	false
SSDEEP:	1536:cBbJHp9JXV08nH8Et09gsa4G6Sk8ht7HFc9m41X2yb3EZ6Q+NSvSrpLKWglrh:cBddXV08nHsaeGhBW84nwZ6Q+NxXgv
MD5:	61A1B29809061C2275E5E4223F551D0F
SHA1:	FC28483B502CF07D6AD711CE312AE44EBAE64BEF
SHA-256:	D1DC8C31EFAB55A777FC2DEA211916BAF0E7E52BA7101D0ED0DC5C31064F7BFC
SHA-512:	5101BDAF3C7FE48BF62497881558897C8D63163F091A3CECE04214C8AAFE72F362C70ED6E7284812485C06D62377579433644AC2E3586CCF1B4DD7080B5A66C5
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/staticmap?zoom=15&sensor=false&size=1500x1500&center=&markers=icon:\|color:red\|43.8331491%2C-79.0879084&key=AIzaSyABNNVTJpWzkwqE5wf9Cw5J7zcStZS3y4s&signature=1BILFpf8CtHgb_-fnJ6KeczS798=
Preview:	.PNG........IHDR.............;.9.....PLTE..#..7w;.MMMOSWSSS[[^So{cddcgkkklos{vvv{{{.s.'{._w.g..w..'.C3.O3.Sc..C.[O.g_.wg........'..).....7..G..s..w.....o..c..C..B..D..K..S..S..X..b..n..o..s..~..{..o..w...q.....2'.3'.5).5).:..S..k;.:-.5.?2.G<.k..w.....B5.B5.L?.VH.J@.PA._S.ym..w....?.......................'../..?..<._....=..7..?..H..G..K..H..K..[..S..[.....k..{..g..o..w.........................................................................................................................................................................................................................................................................................................................................................................................................../<Pl....bKGD....... .IDATx.}.k#W...M....X.UH.4..EC...f.zgf.M..0..\|....B..1.7..2}..%.n.I...D.Ll.d$.E}.B ...5.J4t....:..9.>NU.Sud.}f..Q*.....;.2.2.55.. ...&.V...l8...L5..0....<...El..D

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 260x120, components 3
Category:	downloaded
Size (bytes):	14539
Entropy (8bit):	7.931604562243161
Encrypted:	false
SSDEEP:	384:a4Y9Al91TOO8ZrVCRCxnE+L1I9tTNj8wTubHFgM:a4JHNOO8Fx+9/j8wYHWM
MD5:	402436717025A13BDF7F8D1C29DEE8B7
SHA1:	51B779B776B92032DF1012D95910956BEEBB3028
SHA-256:	FD4B7E10569931107AE6498EAABBEEC9DA30B7E9BD81138CCFCD5D9997D3270F
SHA-512:	89AFB83D829CF568F007549BD69703BFF686534F9953940174FE0F468D1ADE77141CDEBE4C97BF926CCA17FE8E682DCA1AB6DAF85D66C6F86A74625C75B8FC6D
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvMjIvZDJkNzU4MzctNWQyYi00MzQzLWE1YTAtOTVkODVhZjA2M2JlL1BzeWNob2xvZ3kgVG9kYXkgTG9nby5qcGVnIl1d/Psychology%20Today%20Logo.jpeg?sha=68aaec49b29fcca1
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B3A9042B495011ED899CBA6B97265C13" xmpMM:DocumentID="xmp.did:B3A9042C495011ED899CBA6B97265C13"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B3A90429495011ED899CBA6B97265C13" stRef:documentID="xmp.did:B3A9042A495011ED899CBA6B97265C13"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7004
Entropy (8bit):	5.395016530414462
Encrypted:	false
SSDEEP:	192:KNF6NBNWNW3FN/NGYN+5NUpNWNVNs3mNkNifNBNnXNTNIND3cNTNzxNM:wFAXckrVV4UvcbaMiyXndpGzqpDM
MD5:	A1B623B480C10860325CEC82F031FF4A
SHA1:	9EE81458C3EF11577DAA3B7BC34E693BB5D36D89
SHA-256:	31D196AFC7BF97B61BE0A9881F623B3B8A7B56D4B0C08C6B78C37CE92D7827B2
SHA-512:	9A4598F38C0E7735229D48ED73D4462DFE364E17531A936D7F7C27D3BB2DF88FB09854B8C922DA4FD86D6B00646BC24632DC07DF629941B19A2111B130C61023
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:400,500,600,700&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	104364
Entropy (8bit):	7.9868187201974985
Encrypted:	false
SSDEEP:	3072:VcRTMq9FXVIGy8wRVF+t+WSwIH1tqGr3q8M0tA:VclMQIX887aAH1Q7
MD5:	B53B919CF26B422D06BE09AFE2E7FD25
SHA1:	98E03882746A156BE24F919D7BB2EC56FAF7FCC4
SHA-256:	90B9BD8F450EB0D34D4DC893A567B6ECCF8FCBE13798F67E8C092A69D7C4F2BB
SHA-512:	57C23E3BA12DECBD36500F22BA9D0E8C71DBEE7BE11564C057A752D03F379D3EF1B48EE63665D6E6FA7E48D211880B98B922216E0E9E0DBB6D230E6D307B784C
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDcvNzRhYzA0M2MtYmI1MS00ZWYwLTllNGItMDgzOWJiMDg1NjMwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=e2973f1666078d3c
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME....../.hW.....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...w...U..vz...:w.YYH.,.."..c....<..6.q.....6..p...1..q~.......BB.....N\|.N....t.1....TK..O=]]]u.T.w.k.Ap.......;\|........x..g.W.^>;8......b.\0.+..1"..]....=eU2...`6.QV.]..u.)aww....!.X..B.u...Q.0..Y,..F#B....R1.L...g4.!.....8.0.0nB.,.+...(.JI...{...".9.....CY..)...*K...]........V..RJB...Za.B......!....e4>D.n .4%..<s......W...n>w.....].!..%...}.O.}%Bo.1._....q.r.. ...,UU2?..j1...J....`

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	546598
Entropy (8bit):	5.708515975651759
Encrypted:	false
SSDEEP:	6144:yihcR5I9BggP9ZSmsOjitOxTIuAFBZv51aLyOWNfsjj+LBH:y8MIAgxT0F3Bc/Y
MD5:	93E3F7248853EA26232278A54613F93C
SHA1:	16100C397972A415BFCFCE1A470ACAD68C173375
SHA-256:	0EC782544506A0AEA967EA044659C633E1EE735B79E5172CB263797CC5CEFE3A
SHA-512:	26ACA30DE753823A247916A9418AA8BCE24059D80EC35AF6E1A08A6E931DCF3119E326EC7239A1F8F83439979F39460B1F74C1A6D448E2F0702E91F5AD081DF9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 260x120, components 3
Category:	downloaded
Size (bytes):	4050
Entropy (8bit):	7.361726680088984
Encrypted:	false
SSDEEP:	96:aY2btociB9Cd1e16Uxc16iPWnHtW/sZ5oG/:aTtocM9C3Uda1BIAsZKG/
MD5:	B24DD72E0E5DE8B6F5F5E331A5C785D4
SHA1:	048D433B62505E6CAD6D33313C0948102DF8CEB0
SHA-256:	B5376FDDAD3D74C73158E1424A2F160A8A0875A941FEFB6D34AB4741BA7B2BFF
SHA-512:	0625C85675FE17213E278E3ED0E7BCEE9A08F817BE0AE01DC53B48D7F94B252A82F1E61728083AA2C959EFAB0575E8666B1CAC75428E68A8FD64E5624A2BC214
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDgvMjMvZDVhMTFkYTktMDMyZC00NWJjLWE3ODctMmM1ZmM2NjJjMzYxL1RISSBMb2dvLmpwZWciXV0/THI%20Logo.jpeg?sha=c2807b442533c69c
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BADF4506495011ED8B0EF8CDDEA4A2D2" xmpMM:DocumentID="xmp.did:BADF4507495011ED8B0EF8CDDEA4A2D2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BADF4504495011ED8B0EF8CDDEA4A2D2" stRef:documentID="xmp.did:BADF4505495011ED8B0EF8CDDEA4A2D2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	69202
Entropy (8bit):	7.979505626875378
Encrypted:	false
SSDEEP:	1536:Qbv9rWCQg6QCILAh3fuTN38i1GUpdOfNv+cjjkh8EAqCQV/M/jYMfseM:q9C4CIL2638iMwYlJjjio+6fsx
MD5:	B50A5E17089E075C7EEADA21F7B6FD00
SHA1:	C947FD381DE6B2DFF39A88C6F68AB75F6A9B5513
SHA-256:	15F536C28795F0F9ADDCE87BA72074A9F1673FB03C07E9C126F7D76E9DE432DC
SHA-512:	0739114D060AADD07577F1E4D7CFB95A8D7211E5EE92D096D2D6AF03AA1B0C4E214655ED0456BE0053220C507E51A4A1A9A4D9C727ABC643AB1818560F8306F1
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTEtMjIvMDExNzQ4Lzk3MGY2MTI4LTNjOWQtNGEyZi04YjFmLWFiYTc3MWIzZGQ4OS9NSC1QSE9UTy5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=13f9b5f8cdec0e5a&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..UZ.....IDATx..w.e.U....o...==.'.H#i...@H...."..d.1.......M26..l..{.....l...@......{:wW......Tu..<x....SS=]....k........+..F..{....;..[.....O.?.y~0.t..'#%e..yU....X..P....F.l..>..W...g...._....K.{..$.C..........?y...'Yq.d..2/.....uK.::Qbqe.8.3/.4..e-.....T...\|ln..K.X>.ew..~........'.$........,....O=.\|{..z...>.f.0..EY.5..Q:Ae=.8p....6y..iE..J...iVp....oa.\C..\|.....1g...o.v.[E.>.......(.......o.Z.9qT...~......l....wpj..B.2.e.a..Z...k..K.,._bZN1.DG.B...Q...-f..f...W^y7...R..N..W...e.1.....F...[.o.........*.f....<v.....c....ay"7..).....J.kIK.H.x.J0....C.T...3..R..()l..tB..2....1Jv..<TM...76.....;f...-p.g...y...........'.'I..oz...M.....F.oL.........\|.)..BE.F..H#.$Bk.....(.B....7.<N....)..Ci..8un...7..M.N&h..j.i4..Y..Sg..G..n}l....[.g~ekRd.._.}...p...............r......l...0..I%.<...J..S.47C...I..s%`w7.s.k.U.c...m.44E9.,s.@JO......

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	55890
Entropy (8bit):	7.808296150826514
Encrypted:	false
SSDEEP:	1536:Xj0SH/eosvd7+PoxybiXGw9L4b+fYpCEGXbeYX/t3h87Pmd8:XjnUv5Mlb+fKSXbnXrSPmd8
MD5:	F61DF82A9E7ADF92445FB43DE74DCE61
SHA1:	D297CAB551CD9F40748594A5F8666936D9359EC5
SHA-256:	5C3343202DCD13FBF0AAE2FCB4A832DDA3A77ADEA10486C1715FBDF7AEAAF962
SHA-512:	ECA29842DFBE28EC984CAC14434776A9CF0D0166B37E6C62869FAA9B38DBEAE92022A591A2D4724342D0B7A5028DD207F7C84EF126B50BED1247B94130FB080B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...8.......l.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......IDATx...w.T......N..&.....6..{..%.X.Fc.Q.1.$.X.3..11..I..{A%.....[.rww....1k...9sf._...<{..\...9E..........................................................................................................................................................................................................................................................................................................l....vx.S!.LR.....Z...Z..}.....I.I.~....5.~u..%.Kj..c+m_[...y.8...a...H..T%..[.~........Z%5Kj........o..p..vx...?~}... .y.......4B. .....i.. ...I.D...pl.....(p...a...J.r..._.K...o.J.T}..U\|]...zl... .P... .<..j...../...?.HZ.U.?>..I0..l....O(p...O...I...k._.%....\|;O.BI........`8.e;.........k.N..Z.....K...._I5......`8.n;........}<..4N.,d.g;.......+.......@6.....;....gd..........Qo;....D....k..l&i....E!..v. .Z.E..-I...7m...........\.J..}

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 948, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16096
Entropy (8bit):	7.807065150493356
Encrypted:	false
SSDEEP:	384:Vh9PP67tHxxecxi26eY86seU3BzUQN2tK2CbQuy9T5V:VPi7tRxesiaY86seU31gtK2CQ9b
MD5:	EDD4FD8F35611FE59D13AE45BA2E75B8
SHA1:	A42AA7509241CA92465417BF01931EAA5A8D21A9
SHA-256:	AF03CD9A8955B0EAFFD6635D492DEC57FE3B13F63C7E54BA15A1557ED3F5E2C5
SHA-512:	3804798F515D7BC4A84F90668727CF8EFA4A77B635F782E54EDF35A5FCA893DDA74EA8BA29337B22CAE943E544E93CF9926A145D83871069CFD5820492CEFC18
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............?e....PLTE.................................................................................................................................................[.....tRNS...@...@..0..` P..p.` ...p ..7>..=.IDATx.........................................................................`..`.A ...(j4Q.....-YHK[.j2w.Yg.C>..............................~...x\..~..V..dA..-.r/@.......h...9........4..5.p..].NK..sD...4............a,hP..r....a.=H%.z.5.~....`%t..Z ..Jh2.I.VB&"+.J.Dd%X.....+!...`%d"....LDV.....J..2.Y.VB&"+.J.Dd%X.....+!....}Y...K X...Y.[.......\....'.>.l..a_n:&XM1.t.1L.n..=~..-N.tn....&...z..4......M../]A.....Ga0...I0~U.../.....m..i.....7..{ah...iT.0D..2..RD.].;.c<6....C..Y+...]...3...G.B.!...\|=.%W..}...!X.a.v..Z..&.l.+.+...g..../&....^...=..D.`..Cd.~..b."-.....R.p!X.a..R...6'%..T..OzPy....,.0D.........5.\..KV...a1.S....`1.!.A.Z.....8.....).2.tS...xi.`1.!r/I.;M..T.Q\|.H....Tx.J.,.0D..../.E$.^z.y..`1.!rJf..j.[j....C..!..CEz

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 670x350, components 3
Category:	dropped
Size (bytes):	67216
Entropy (8bit):	7.963525081093338
Encrypted:	false
SSDEEP:	1536:SJ+7RKLF+NKwsJ4SimRxwzhFNFPqh3wYxIVZbJyQ1pzhNrCbqd4:XAR8lsJ4Sl6hXKu5vhl4
MD5:	E53D0C18C0E8E583B734D7ACD54C28D0
SHA1:	5D107264813A3930FBEF5678E235C8D081BEBF1A
SHA-256:	83B26F5F68414E41ADB3833ED136B21786C78A055664A80DA0A1C1A1BC493CFE
SHA-512:	B10763C7577A45A7AF9A34CD937393F0E3B15A568E6ADB5371B885323C24932E673769B2134F8D65D3C61DC538A2DBAC44AB0B16042A253177E047A344274EE5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................^..............................................Q..........................!1.."AQ.2aq.#BR...3b....$Cr...%cs...4S...&56T...D.'...................................8.......................!1.AQ.".2aqB....R....#.3b..C.4r............?........`....+..kD`.;.Vt......`....P...@........(.P...@........(.P...@........(.P...@....F.lQo...RT..oII...J.N..XM}.2Db.....\|..;...7..^^3X..i..s.Z...fw.\|.YH........K%U...8VE12.........#=N(..r}...(.i..........P..........3.zx,.P.....RG........v4..l3.{...Y.-[)....g...)...b.zy..q.V6nDa.eY?.4&'..Y;\|>..3j.P..xg..U.c6..df.P.\|t.....A^.q!...[n.AiJl.L.#.Sh..2.{D{.J..$o..IW\.'..k..V.8.a].~.@..Z.....;..V......<.&..S..2..z.P.{K......(.x...q..F.g.78 .{.Ob.Q.5..1*^.@Ci[.\.nV0.I.&..\|.z9~T.~.NPP...@........(.P...@........(.P...@........(...M&..Z...........Y..`.`..$..;.....v&...T........i..

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 192x228, components 3
Category:	dropped
Size (bytes):	24818
Entropy (8bit):	7.92535355378126
Encrypted:	false
SSDEEP:	384:tvsona45Y7ba9/39ETf1IXkYBjk9SF9zLPqIi+CmbdT2SJo+oHHGMjG1wfbNV4z0:eoJ5YfAf9MEZBETMNCVH7amfTQfKA4
MD5:	850658E3A457443F313792BEA74AC991
SHA1:	B4EF963BE85480A503052836C3B39525AF706B21
SHA-256:	ED71C7D7FBF0A76BC34AEA35ED8F30A3A303AA3E60D938F7E5C92AECD53FFDD8
SHA-512:	C83EBA4446BA562B09D773213260799894AC27193CF3BCA388FFD140BB824D0A1FB9E22BBAC0BD10C1BD52C27194C8A058A91624D65DEE90D68462BE3D3823BF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H..............0221....................0100......................@...................(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C............................................................................"...........................................D............................!1.A.."Q#2aq.BR.....$3Sb..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	22978
Entropy (8bit):	7.925469182785946
Encrypted:	false
SSDEEP:	384:tvhujSBWsbNbBO+ZaM/NK2ayQqxHv9FwEDEudPns4z9epWS1FlUwCr+r:CobY+ZhKSlFMu5ns4BepWS1FewN
MD5:	6BA4665DDA43025AE547C390F9BF5CCA
SHA1:	B5247282241CD33D0081482F62443A0F39812202
SHA-256:	3F6BB0808683C73693A24DBAA883AC42B35AC9EF54C14CDFD73C57470F068D20
SHA-512:	6C568E49518DE205A73E4FF895E06996A70304519125810C940EB7008B693823236689B0B4B865C6AAFF5DB18FD373C0139D3410B4A96BDCAD293F2FE46DA0B3
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTcvYzc3Y2Q5ZDMtYzVlZS00MDdlLWI4OTctM2E5OTkwODEwMmM4L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjbiJdXQ?sha=ee9ece7bf4ed9477
Preview:	......JFIF.....H.H......Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H..............0221....................0100......................@...................(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C............................................................................"...........................................B............................!1."AQ..2aq.B#R...b...$3Cr

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/16526066952?random=1720126536948&cv=11&fst=1720126536948&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fabout&hn=www.googleadservices.com&frm=0&tiba=About%20LiveWise%20Associates%3A%20Compassionate%20Therapy%20in%20Pickering%2C%20ON&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54147
Entropy (8bit):	7.986917205091437
Encrypted:	false
SSDEEP:	1536:Ea07/eZC7yJhSzO3RP/4wLuuFLlD3yoOuKSi:P07/I22czOF/4yuYlqu4
MD5:	CE97F420FFFC3A975FD6DDAA639CEB94
SHA1:	3AFFC39A6FB13D93E7D64F030AE96B457907A6CF
SHA-256:	C47B42E7E1CFDD833A32BE0D6EFE74F367834D39FEBF4AC407A66C370D5F6549
SHA-512:	1FB7E8E5415932DC0CB436B58102E730EA7F26BEC46A051743995C6468FC0E3E922D840CB6B0F6FAC57C6468AA6C69EA380E32AACD8EF533F7CFD52B309FF763
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8.~.w.....IDATx...y.m.}..~f....io..}.Iz.;.,..cl.q.#.......i..f.I.TR..Aj.H..$.EL....]..P`...1.e[..<IOO...=..........&......c.q....{...5..^[../.e...xm......J...9Q$#b(%3..g-.n....5`.....o...~..k.p..o..?...-..g.Y...O..^..O..6.'...w..a..(.......~...+...{......._.._.......<..........AJ=C...{...xz}...~1\...B9.s>(E..!.J.g}._.6.........-.V..?...w.s.......:.._....O} .k......oGrdH.$.UZ.....n.w......n.\|@.<Y.\.\.X.cZ..".c..HI)mDX.7K/....H1....q.....}.#y...,..f-..o.w..i..]..............%...<nn..}.0..B6....+R)./..{.,BSD..0Xc.C)......rI..)).M..-k..N....5....y....?p....o..........~Z.(.k..yZ...[I)..;.6o.Oz...e6..CI...d..].o5.\...0.s".\7....b.....jt..A...c..0e0.\...........B.....?p....L.\~...Z .^.._.....{(y...X....z;.t>..q.o7F.....o.%=Q`.c.u..5dc..R"g.../.5VO~..`..Z..c(.R..ZG.....b....?A.....}1?.._.M...O.S9X..../...H.../q}..n..~..._.7.sC.o..\|@....;.3..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1860), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	332862
Entropy (8bit):	5.932558396258378
Encrypted:	false
SSDEEP:	6144:zN7po1EXW5oD/liy3gXfnHlfLFI+DwH+XQkK:DQXfFfLNDwH+XQkK
MD5:	51DE80A81220666F31B187AC11BD2BAB
SHA1:	4034283635B59D014B792E0D7D6148C257B8CB08
SHA-256:	8B5CDFDB2FCC354E6D439F3F1363A275DBA3547ADD5BF51443DEAD50DFD839C5
SHA-512:	7A77DC1A7901AE8788ADFF7C6652F97CDCBCF9A08B0C9B9404DA6D3B76DAA149039F41E853DDCEEF7F320FC133BD1F4003F2A0EAA265E16DD21C0469D1E188A6
Malicious:	false
Reputation:	low
URL:	https://livewise.janeapp.com/?_gl=1itr0xc_gcl_auNTgwOTk4NzAzLjE3MTUxMDYwODY._gaOTEyMzQyMDgyLjE3MTUxMDYwODY._ga_MCTHZF7ZXQ*MTcxNTIwOTc0Mi41LjEuMTcxNTIwOTc0Mi42MC4wLjA.
Preview:	<!DOCTYPE html>.<html lang='en'>.<head>.<script>. document.cookie = 'cookies_enabled=true'. . if (typeof document.cookie == 'string' && document.cookie.indexOf('cookies_enabled') < 0) {. // redirect if cookies aren't enabled. window.location = '/cookies_required'. }.</script>..<script>. window.JANE_CLIENT_VERSION = "v6.3.281". window.POD_NAME = "cac1-23".</script>.<script src='https://assets-jane-cac1-23.janeapp.net/assets/core_js_polyfills-277f54535c98b71ea847.js' type='text/javascript'></script>.<script src='https://assets-jane-cac1-23.janeapp.net/assets/monitoring-eb308bb7edb8313e9316.js' type='text/javascript'></script>.<script>. var sentryData = {"dsn":"https://0a2411dd501e4441a1f4a27ebdb0b309@o4505290921410560.ingest.sentry.io/4505291008311296","environment":"production","tracesSampleRate":"0","userGuid":null,"extraScope":{"app":"online_booking","company_current_name":"LiveWise Associates","patient_id":null,"guid":"34800","role":null,"staff_member_id":null,"session_i

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2599
Entropy (8bit):	7.8062518694225185
Encrypted:	false
SSDEEP:	48:c/ihq0FxFEA4QmqgjuNUeHreKE9HlKjbU7zT1VTEH:c/iFNmVjuPa7ygfT2
MD5:	4B93EECDFE16A9FF0FE59FE608739157
SHA1:	7CD6D92E13A8103013B677431AD7CBEE3327EB0A
SHA-256:	F6CED74C14E0B42DF4E0F2DD5C851ECA6485DEDC413F0669CB5621F8DE0271AB
SHA-512:	680FD1569E97FC6A46D7A9EB6812AB1FCD42218C6ED0C1366A1708FB5E743BE9BDFC764052AB2CA55FF978EC5746C0CD8BAD9A1CAB23A18EA5A2DA124FCA4023
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......tIME.....+9......IDATx..Z]..I..NU..I...$3q...A.].V..,.../>...!/...>....'.(..F. .OK`U...d.a.}11.`6.d~.{....\|......;so.Ip.L.L.T....:U..........H..K..aqq....3KKK..v.u...(.....^.\|.....q...w..K.Z-...+'...C.....T2=.....?....o..Hi.........}.....A..i.(.F.~..7.\Y...?..Nm.VPvsuu.....t:..q../:..,...a...k.~z...bck+H..S..o.....V.X..v....{..}.......Q..5..g_.}p.R.w..$.tU........W...M..@.Q.!.c.....v....1.q....y.I..Va.n........v.Z+...G#B`..QK....0.....@.0.FA.$@<.)5F...{...TB.m:....,@.IT.@.@...8...W.@..-.Ddd#E..o:..4.P ..j...$H...#.... ...t.D..X..B.t..{Nb.pn..."R..P....Qzc1......L/.@.8...2....jqq..O.....?.n.?*"tmQ........Q.._.z...J.`.=.9......{.N..r...x....2..!(...K.\YYyy}}.;.RfU.z..J.w.8^/.l....!.... "...d.(0.. .....z. .c.....BZk...q9..Y/e..%OJd,..6....rw.4 Mi.$Q.]..P.0g....,.@....'..`.CXtKn..D.a.......e+..1=`..n......."...]...+.&..0...)..Y

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	75522
Entropy (8bit):	7.984531382229057
Encrypted:	false
SSDEEP:	1536:gRw+ab5HR5l4H+15gVAaxRrLuustd6gdLRUGM8gSRlXaZogz:B+E4H+17UFLuust5dNlXg
MD5:	5085257D3356386CAD100A381F7B2014
SHA1:	083E866E133C19933836F88036BAEF472E190D1C
SHA-256:	81919EDE4ED66BB2C7B4B23DF576334FED01EAB08D8EFF2739457C832308FF79
SHA-512:	E3765881FAD8456A07379F3B428D21FE454B7E695568F7013E5C310E0034E25B1F19056CE04B59C064694B78F24202085B7507CFCD15C5F1C5B52836190DAB83
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8.........zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...w.n[z...fZ..;.p.[u+J.........=.=....rC.1..nZ....m.2....0.....nL.....B(W.....v..3..s.o..V..u.nU.k..s....k.w..}..y^..~=r..o.&....?.........s.;.".........o.b.e...Z.4m{.f.e.0yQ[.l.nN. ...IS.e.\|...?.../.wz...by..R..C.$H%.B......$...l..)iS..`;.4U.5..s..<..~....y.....eg......r.n...LQ.o..o.q'.zC...."...>...l..,...o..../....{y...E..\|...g..o...\.~.{.;._.,O..?&~..'E...f.s..B.....m...

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/16526066952?random=1720126521927&cv=11&fst=1720126521927&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2F&hn=www.googleadservices.com&frm=0&tiba=Empowering%20Wellness%20in%20Pickering%3A%20Mental%20Health%20%26%20Therapy%20Services&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 501 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6487
Entropy (8bit):	7.856937582599766
Encrypted:	false
SSDEEP:	96:nYz9Mp7S18LfbhB7BbH8AKblzbjc0qOp0PdDIa7PD/5SUnTKwiX4atUY4VL:YqkCtBtzKRzbjclVDIa0wT1i4acVL
MD5:	16248E38FC18BC88F65AF6A28CA892DA
SHA1:	B68C04013CE6BE178E0FA0974DA998968BD974B0
SHA-256:	14F28A18838E1ACEEDA071B377B4AE2E845B9FB8E0AE409A7977522C17F56EA4
SHA-512:	8952B621A2C049BB21DAAB123BE56A4178F7A8AB0E11F927F3FF461367A6FFE6CBE6C87EEBAFCC20D2ADE7F89191A509D90541A3A84591591479606107749D41
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/tag-Booking-by-Jane-App-16248e38fc18bc88f65af6a28ca892da.png
Preview:	.PNG........IHDR.......P.............tEXtSoftware.Adobe ImageReadyq.e<...xiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:294c2824-3446-4627-a303-31535e597b79" xmpMM:DocumentID="xmp.did:7AFA669B96D911E9A00D97B40098793D" xmpMM:InstanceID="xmp.iid:7AFA669A96D911E9A00D97B40098793D" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:294c2824-3446-4627-a303-31535e597b79" stRef:documentID="xmp.did:294c2824-3446-4627-a303-31535e597b79"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p.....uIDATx...t\.y.?./.bY.G.-

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43572, version 1.0
Category:	downloaded
Size (bytes):	43572
Entropy (8bit):	7.991846190596049
Encrypted:	true
SSDEEP:	768:9aVzVymSbSDcPi1iyD9m9ySj+H2fmwsTtxNXfmQZKQ6srdeujlLANRWOvClvztaO:KVyW6i1iyD9Epj+umwsxmir6soCKvXvY
MD5:	B683029BAFE0305AC2234038A03E1541
SHA1:	12F8C193902E99348493ACE32E498031BF79B654
SHA-256:	18E6B5FF511B90EDF098E62AC45ED9D6673A3EEE10165D0DE4164D4D02A3A77F
SHA-512:	44823904027DD2E901429BFF1672132600AE6895486EBCFD3B97A5315635104BB1D555F614DC5FDCA9645B01C65056D2D55842351B1324290C163A2451307E46
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/fontawesome-webfont-b683029bafe0305ac2234038a03e1541.woff
Preview:	wOFF.......4......4.........................FFTM...D........epa.GDEF...`....... ....OS/2.......>...`..z.cmap....... ...j.5..gasp................glyf............2..head.......1...6.\."hhea...........$....hmtx................loca............q...maxp........... ....name.......f....<.e.post...0........2...webf...,.........RQ..........=.......T.0......<.x.c`d``..b...`b`d`dl..,`........x.c`f}.8............B3.3D..8AAeQ1....W.6..@>...2.bDR......R....x...J.Q...n~. {...(.f.@}....ZR.X..H...!.e..$.6AD.tV...$Y.,.L...n\..l...s.....!...FrR.(...T....D)..6.P.......~.../..6.....h......}.c,.8..E."5iHkH.D.....G_x.F.%....&...).q.....W6.$e.........3.f.l.....?.z]7....gy..x..x..9..+&m.X.....G.I?.....)..O..".......M........H.....2tn........x...\|T..0~.s..;..Y..d2.d.$d..Y............ ..(.....j...]..j..jW}mkW...m..^...?[!s.....$$.}....{.}=..s.s......x...N.l....!.....v2.]....q.8.....3................H(.Oe.!....H.:. =.R..r.x.7..O..on.6z..1*..`t......s....`.cub.......J.$.C..^.8..

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	79775
Entropy (8bit):	7.985484437451393
Encrypted:	false
SSDEEP:	1536:beDXiLzfIOyZY9p3myAIDewzTJifWb8r/9HrPIi7O9XW1TTusTM2AxI:bebozflyi9Zhkf1rtrQiC9KvFTPAu
MD5:	996F40C439369530FD7FBBBA979F8F47
SHA1:	0FF2F3D71CA3DAE80CC27FC4AC337628BC15D0B6
SHA-256:	6851CACBB2146141FF4CEC4F0AE49CDC212820DD0364B1D387C42AC895161031
SHA-512:	E5025F845570D2EC2BBC564E6B2F59411E5B2B94EB7798F44E93E009BE06220FD3895D18C1D951590A56F15C27C545BCA5522B357C2FE5B2ED20E08440BA42F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......0.`Z+....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y.m.Y...F7.\.nNSu..T%.JC. ........"x.z./=..W.S@.T...g....\|...`......`Lh..V.9.>{..{..w.9.>)\|..d.Sq..9...{.....o.k.>.......?...r}..w..s.~...l^..o.18.?.R....!.0.\|...F.....3!.."....:...b.Q......]......G..2.2...XXc...V.Xk...._....W.u.W.y..n.. "....a....``...8@..( .L...B.H9C)@+...4.k[Xk.P`&..1.....!"3.cF..Fi.M..z..j.h..v.M...._...<.....G.}......}..{..P....~....8...~.....{.....=......3

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	320641
Entropy (8bit):	5.596007739995028
Encrypted:	false
SSDEEP:	3072:SF44gP6aiJ9iVYZLQOFYhf3e0NjHnvLMzU467JXDBin0bukM32/UASLm/Qhwi:U4z6+VY9QOF8n7HVin0qkMm/UASLm/uT
MD5:	11AEEE7316C1F7D3E687221C86F72B5C
SHA1:	26BA2B4FEC12937E4BE627750701747FE7370EAE
SHA-256:	FDD1096696B6D3CBC5DED85F2DB47782615CBB2FD9D56A40AACC14D57DECAB41
SHA-512:	32419CE9061436F75FF38014957E222FA093359A4C693F667C02B4FB4A4100D82FCE7C2CBF0DAD728F55F4883581E12AA07DCC0A9C8D92AD8452E8307C420C9B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-K7908VSBER&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":f

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1886
Entropy (8bit):	6.658647029435398
Encrypted:	false
SSDEEP:	24:Px6FqelMEJfCmpKPQMBMdMYyEf91vq0TbOGR+8GIj23wC1j50zRNEMFmI:J6FqHEJfU4Ml70TS0fGn0VNEQ
MD5:	0F1A2D5C7CAAEE8EB78F2FB4DAC3DB82
SHA1:	3E8AB0A3C73AE63870F3E395AB693B763D427019
SHA-256:	E7A06B779C7554806C62FDCFC9E066F5DF66A9B9761478EC7C5FC3857203F179
SHA-512:	49F8C39F3DCEA6285323AD2B19D6B764C03B6A11F62F1ECB7A0D85F8119F1652E103B94C7992DB58B1B35BCB4F908F7BE49F4F1F1FDD1CB477A392A4F24FB3CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<......")@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...@PLTE....a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<......C....tRNS......)/..V.^.\.X.rj.Z.............[..........Q.1RL7G.@l..........AH...W+o..p,..m... ..*n.-....U......................a{"?=(..'..DC..E......%K_]..z.d.Y..i....s.k.4f..vM$.&...:9t.~gm.&....bKGD....H....tIME.......o......,IDATH....;TQ...;...,...(e2."...R..hH....HY.].}.^..s.\.2wf.=OO..w.....9...^A.o

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-MCTHZF7ZXQ&gacid=1790560015.1720126564&gtm=45je4730v9131492802za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=2099412820
Preview:	<html></html>

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, description=As seen on a Sussex Directories Inc site, xresolution=116, yresolution=124, resolutionunit=2], baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	46079
Entropy (8bit):	7.961458769232924
Encrypted:	false
SSDEEP:	768:P7egB7W5JJv9AdWJCI/796Gy9cT5Kk1Q5VceFjx6aLgiRWDqD+:PP76JJlAdUCqu9E5unF16/UWDn
MD5:	1B571FDCF1DD44699E644E0850C6F2C6
SHA1:	D4F4E9404489B719B465D986297F1E4AC0C56B92
SHA-256:	900B8A27137B646514C8B552286253177B2AC5C1968250C73CADE0C95E5FAB97
SHA-512:	0CB7832549DD919764559AC226403B99A56F5DA0BCD08740BE8FDFDC8C82B15DDBAA02C9BC3FA0C203239C0B7DCBE1DE07B1CAEF0F2BDC2C8741F66C73A86AF8
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDYvMDMvMTgvMzMvMTAvNmM1MzJlMjQtMDk5NS00ZWE3LWJmZTctZWQ0ZWVhZDA3NzliL0Fzc29jaWF0ZS1MZW1veS1Qcm9maWxlLVBpY3R1cmUuanBnIl0sWyJwIiwidGh1bWIiLCIyNDB4MjQwIyJdXQ/Associate-Lemoy-Profile-Picture.jpg?sha=2fb954a5bd1c5504
Preview:	......JFIF.....H.H......Exif..MM..............)...J...........t...........\|.(..........................As seen on a Sussex Directories Inc site.....H.......H.......C....................................................................C........................................................................................................................D...........................!.."1..AQ.2aq.#B.3....$CRb..%4r.DTcs......................................F.......................!..1A.Qa.."q.2......#B....R.3br.$C.c.%..46S..............?...D.h...A..4A.. ... .D......"._..i......b.Y...H..a2..j5:..P....B.y.V..B..@..* $9:6.y..u_..N.x../-...J(.....\.bV"O}U]...@.....}L.;!s_....yID..r^rJ.LYy..@9Ny.M..9..M.'....P..'c.k..P...Om)..N.2l.%C.i.u.>]..#...i........yJDf..].%\|.ZPRop\|.n...@.$...m~}\|..........l.LR.v.....<.T...iW.Sm.E8....w...hi9h8.I..2.9J..$8..'M........R..;nwp..C.(6..[p.Z.x..\...VYT.d..q..C..o..Tx.KfP!Iy>[l.iR.P.%...'...r....7'...a.....>..YH..wBi.'\..A.L.L\..X.......

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68076
Entropy (8bit):	7.977760892724278
Encrypted:	false
SSDEEP:	1536:npOJgaW4WwAMVlV4H/H0XIeGXlFrCUZwlHktm8f+obNrRJmlllP:npOJhWjdeVIH0yrCUZwdJarRUlt
MD5:	5C6567F3D4B2F59A78C11346BBE7E129
SHA1:	961DB407CE2E764475298ACB867EFE052A14EA5A
SHA-256:	A0AFA451F8DE44E4632EF1C2FD2BF0C52188961D0DE2451568D8B1CD4CAC46F1
SHA-512:	33CEBDB6812C8C9BF38E0DCD9908B9FF64AC1B012466023A88EE280B980015A1C007C0A15DF27A072AD871275FD12D410399D17BB9FCB738F9465F7F3C338C1E
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDUtMDcvMTExNjE2L2Y1NWI5NTkyLWFhOTctNDY2YS04ZmJkLWMyYTY3OWQ1MTBjMi9SZW1vdmUgYmFja2dyb3VuZCBwcm9qZWN0ICgzKS5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=a4ae687096739338&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..8......IDATx...i.m.Y.......'...]....R)!.$..@6.RI2...=l....7<..=\..We.g.W......[.H...2..R.ln...q....nu..Z{..7...L.}G...q"N....o~s....ey../.2~.G....R...].....{.1.8v..Mo...2.\...MH).n.q..a<..C8y....=.c..... ...O.ey....z...K......... MSr...LMM!.sr..).:u...O<....G?./]_n?..q2J.k-#.h....K....G....8~.....Kx..g..A.$h.Z.~.:~.G~._.....RJ.B...K.,.y.....x.".("SSS`..(......C...../.p..o\|.LQ.'.$...~.....EQ...j..V....fo.9\|...={....p.]..=...\|..a.....x.k_k......k...C..K..Y....9.R.,......].Z..1.KKK.Z..c.?....?..?I......l~.o..p..C.k.o-..^..,.....A@..s.@..E.4M.j.03..z......./....w.s.Sw.qG.h4....Zk.......B...-...m....-O....p8.1..V.J)..}<..sx..GA.y.&/.G.....W..V..S.N.k-677.eYx.....v..../~..'........Hw.w.24.0..j...P.0...B.......t:....Y. .C...%A.\...8\|....._X....<..c...y...B.RD.a.R.R.....\.b...155.....?...y.9r.W.^E..X]]E.......A......j..t.o.~......>....e...5.KpYk.1.y

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65444)
Category:	downloaded
Size (bytes):	6195301
Entropy (8bit):	5.620521507910991
Encrypted:	false
SSDEEP:	49152:tW6vT4Hw3JbjhNTg1Mn859CIpvzgcOYVF+y8yUOdJ5QqEZXqS0pMypgOaH5dCIlS:F4bky8sJ5VXJY0R
MD5:	7847C5DF02D5C46DF6685DA9CDE71E75
SHA1:	94F20DCBB13BE9B2898C0D978D6F1DDF64CE3250
SHA-256:	576CC442BD4D9247DA82B1348507441CBD26B98621233DC198B8FD389BEE545C
SHA-512:	B61ABDC2AF7C4E11EB297966315FC0DFF61C84ECC8BB2D6962BDE57777D83F57BCD2106AFE0B62BA62A8CB0CECAC04C2D46A822F1ED036605948335F841B8AD4
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/vendor_public-e7477ec4b94aed7a4ae4.js
Preview:	/! For license information please see vendor_public-e7477ec4b94aed7a4ae4.js.LICENSE.txt /.(self.webpackChunkjane_ui=self.webpackChunkjane_ui\|\|[]).push([[450,558],{210504:function(e,t){!function(e){"use strict";var t={prefix:"fab",iconName:"apple",icon:[384,512,[],"f179","M318.7 268.7c-.2-36.7 16.4-64.4 50-84.8-18.8-26.9-47.2-41.7-84.7-44.6-35.5-2.8-74.3 20.7-88.5 20.7-15 0-49.4-19.7-76.4-19.7C63.3 141.2 4 184.8 4 273.5q0 39.3 14.4 81.2c12.8 36.7 59 126.7 107.2 125.2 25.2-.6 43-17.9 75.8-17.9 31.8 0 48.3 17.9 76.4 17.9 48.6-.7 90.4-82.5 102.6-119.3-65.2-30.7-61.7-90-61.7-91.9zm-56.6-164.2c27.3-32.4 24.8-61.9 24-72.5-24.1 1.4-52 16.4-67.9 34.9-17.5 19.8-27.8 44.3-25.6 71.9 26.1 2 49.9-11.4 69.5-34.3z"]};e.faApple=t;var n={prefix:"fab",iconName:"facebook-f",icon:[320,512,[],"f39e","M80 299.3V512H196V299.3h86.5l18-97.8H196V166.9c0-51.7 20.3-71.5 72.7-71.5c16.3 0 29.4 .4 37 1.2V7.9C291.4 4 256.4 0 236.2 0C129.3 0 80 50.5 80 159.4v42.1H14v97.8H80z"]};e.faFacebookF=n;var r={prefix:"fab",ico

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	57025
Entropy (8bit):	7.785097963929259
Encrypted:	false
SSDEEP:	1536:sl/fpZaDuDbDuj+fG3hc+nhRJIOvy/eDyiIiCVB:mBZaDuDbDum+nhRJVvwQhgB
MD5:	A382FEFE1265D1343675183991C65768
SHA1:	8846DE2D00337DF3326B7C5681621CCA502D0D8A
SHA-256:	EF1F65FEC669C44FC2239241300910737419C4D2DFC17A62345D3331286EEAB5
SHA-512:	2AB119F6A58ED0010D699C79C39663FF3E14C528E54907226504DB72A627B16E6BFA3600663CF4D196B1C95A69ED3681CC081C787810700B936A038D43D6C160
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...8.......l.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......IDATx...w.T....{gggfw..,U...X..^c..[b/.D.5._L...1..[....`.. .H[.~vg......c.,p.<S..........e.3.y_.......................................................................................................................................................................................................................................................................................................@..Y....6<..T).BRLR..?.%.,.......I)I.2.........~$$.Ij.G...-...<.....0.u.$UK...o.?...U)...tKj..(ii..o...............ol...i....4B.pI.$.......R-{..X..I_H.....Y...........\.X......y-I..X!W.\..<...p$.e....B.....y.......y.../..S..yZ....I_.#q.:$..........s.RI.z....c...b....$..I.O{.....;.......p......T......pI!.\|.+i........H8.o....@6c...@/.u.$....2.Zg.....'............p.....:.....u...H..\|,....@&1....5.u6....M..AF.u. ........&.#...C..........N..mz.l-is

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2650), with no line terminators
Category:	downloaded
Size (bytes):	2650
Entropy (8bit):	5.85035682313124
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08LS89ulOrhzG9QG6:aJd6SUtJfNrVlCWWWdtqjZHS6uoF
MD5:	B6D609FF4820F8C4E38EEEEACBBFD75F
SHA1:	21A238EE53703F76B03E586E00B88194CD25F59F
SHA-256:	F963AAE869226290B7068A50ABA33916CAA01D86252A9D4D52C98870D755E85C
SHA-512:	2FB8AE970B97CAE778A320F8B170D0C0EA7F22C98C5FF5F2557FB52ECE59180894EF0BD6E9AC5B8207513A86B2A226D1BE8E5AE11591C0284F0C8B0EDF77567B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/16526066952/?random=1720126536948&cv=11&fst=1720126536948&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fabout&hn=www.googleadservices.com&frm=0&tiba=About%20LiveWise%20Associates%3A%20Compassionate%20Therapy%20in%20Pickering%2C%20ON&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 1600x417, components 3
Category:	dropped
Size (bytes):	161094
Entropy (8bit):	7.968250000126227
Encrypted:	false
SSDEEP:	3072:YNz6wSLszvVRDBms5rSMmfvcX3ikJYusicqEZNA8VoJnpLzRN:lLsjLDOvc3ikJbsfntVoJnp3r
MD5:	6190955D5BCE75AA1AF1F13523A33F87
SHA1:	77EE1181B34E32F6761F8E13AAEB154E3215738B
SHA-256:	24A81B4B371CDF225462CB3B551506F82C312ED0CD20E33AB84B681A94C4A6E3
SHA-512:	FF74D85A36BD906F78A653B2BD7FB0C3CE9336E74662D703CA352654CE7924A9508DED01A4A485E585114520E89F36DED3BA2D1AA34527717685CED33DED374E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......Exif..II*...........................................(.......................i.......V.................0231....................0100........................................`.......`...........http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Untitled (1920 x 500 px) - Livewise Banner</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-05-29</Attrib:Created>. <Attrib:ExtId>805a70df-27a6-46bb-83f8-2efeb9912263</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 10x2000, components 3
Category:	downloaded
Size (bytes):	1512
Entropy (8bit):	5.114906775508485
Encrypted:	false
SSDEEP:	24:gllK1hpgyWwjx82lY2T3UVXCwyJ3VMwGHkKc:gk/ENn2wCJ31Ec
MD5:	38002F3B52E3788E66764182ACA85A79
SHA1:	5E63AABC00AF324A85AE6DA604D8FB2A722DEFBD
SHA-256:	5FA644A716CD85B46D1ED48AE749AF7AF0FA8F88241AFC83640CD6A58D9E4C49
SHA-512:	C6BF094D58B994859C21AD98B79F649F21E74137388BC30BF4E3A5430A69681E031B9E53A26F79DA8E173DA7EC0A877AE23D080F7352B41222FA01E38C40EF92
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/bg-gradient-38002f3b52e3788e66764182aca85a79.jpg
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:878DB8FD020D11E4B98E92A15713ED29" xmpMM:DocumentID="xmp.did:878DB8FE020D11E4B98E92A15713ED29"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:878DB8FB020D11E4B98E92A15713ED29" stRef:documentID="xmp.did:878DB8FC020D11E4B98E92A15713ED29"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	59942
Entropy (8bit):	7.9865939770444
Encrypted:	false
SSDEEP:	1536:X0+Zbry6N4RtreAsBS8yjRz2+4bPWT+eQ:ZK6N4RtrJsBTytinLWT+h
MD5:	89D7AE9153BE55B697EE9065E057A281
SHA1:	DB6B8A5DB0BDC8895DCF549ECF1C061D25CAECEC
SHA-256:	B01A07DDEA6E21C0B3852ED875D230E85AB3A5FE9658EE07E678FC9AFC5BEE22
SHA-512:	3CAA56513F431E1434093D0F8570F0841AC177778F3B2B51701858E0829DEB20BE46EB328A33D5E81A319C0F2C80A4FFBF7F37EFC9A6BA80BA9EFAAD57A3AF9A
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTItMTQvMTU1NTEyLzc3N2NhNDNkLWYxNGItNDE5Ni05NWZlLWI2NDU3YTAzYWQwYi9JTUdfMDAwMi5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=638befbb8717801a&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8...Gm....IDATx...w..i~..~...{oD...,_..Fj.h9...-.a..+1: .+.hwa..p....]vfg...............i..........w.}.....y.l. ....\|.........}~..3_#b......<].~....Z....`}^....`}^....`}^....`}^....`}^....`}^....`}^....`}^....`}^....`}^....`}^/.Z?...?m}..._.{.y.s..]..A..EJ...G~.....Z..K....o.%..7}....,.........=...]..k/.._.M....r.J...+.."F..^...RxiL.y.h..A.?;...y~.....".....k...Z....Y...}?..u..'.8.K.\|%.R.2. .../...!].AIb..+..1...j..B5TE...51..].>~.W\|..... .>.......C.....o.?..'.a...TK.,....3z.w..>..h.Q...!..)D.@..R..{#.^8w..Z...qgo....>....U...I...w}^......?...~\|....m......~...._...s).......#k.".....8.b.N.o.W.V&Dv..R)=.(..h.\..\.n:....6m{igg.CRJ...V;w.G.r.?te.........w.G.....o.....x......?.....w..../.y.m=Z[...m...}....]_t].7..L.."1.m..v.Z.!}p....~wwwc..F.G.......V.......f.........g.)....*.p....PD....>...w....r.....u.?...gx.... ~..)~.....j..<1..Mse

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	76570
Entropy (8bit):	7.981451239717939
Encrypted:	false
SSDEEP:	1536:SWUh//Tk8XIWxSRiiZUea8MPQZcoNDOMwDuy:HQ7kULxSrI5RoZjjy
MD5:	9E2DBAA7A88F3B8E2D6322132DBF8A79
SHA1:	950F393136F750EF704BEEF95A7FEA8872B464D7
SHA-256:	0792AC625E668D827EAF7A4BA6D5B3EDA6F7204E7398D828E534A8321EFEB0BF
SHA-512:	BDC325F4FC026C0F142FF96D6899247A9B84A3C58353F54BC2B8B1745E2F60C78D766696DBD13D06D762ADDC3D56CB33D0491D2CF6223C32D4C2AC86CBD9CB69
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......6........IDATx....miz....wZk..p......G.M..%.0.H.!.....8.`$@./...D....\|.d+N..I$......r").(S.E6......n..{Z.;=..k.}....Y.U.Uo.t.{.=...z.3..bf...a.?.k.I..r..?x.....;..!3.*..!.V...v.r....nn...g...6..A.........Fk.......3..(.`......B...0 ...u......uU]..mM.T..........s..g._9:>....g.g._...........m.(@5u...>..f.y..7..._.R^........A......~..J=z...f.}%.t........./m.......fs.j...^.ow.n..23.....S....&..@..g...)X.P..R.`..13.Rh....sV..,.g..b...7O.~...W.h........Msa.]..lupx.~UWW).&.4..U.st\|.._}.G_8...)....\|..?.....o......{.m]W.z......_..}..._..Z.[./.n..E.u..H..6..h.....RJ..@.c...PDp..J..z.....1PJ..... .Z...RNPJA..........,.~.u].OZ....5PFs]....n..FU..i.9.....R............~.W....I8....\.7.y.p.^..S^...OA.>}............g_......n.....H.h.....0.....dYf.R..ZXkQ...h....k........H.%..R EPZ....A+...~^L..uUAi.R.g]X..l.s..zc...ZCD.9{~xx...s...

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 260x120, components 3
Category:	dropped
Size (bytes):	11672
Entropy (8bit):	7.8715289038575404
Encrypted:	false
SSDEEP:	192:aS9Pfa0cI7/YrXXIPqDZLajVcKvmzyVmWi4r9EawVvU0x/NTHz25kx:aS9PVcMcXYPqVLaO3zYmF+E1BU0ZpHz/
MD5:	1D6ACACA5F1C8EE52A435C3DF2F6BDD8
SHA1:	D56793F396DD5A6D29E4F7A444766F0C21B4A39D
SHA-256:	8569DA69E808A5F956839D940D36B044A9289011D5DA34F82A01C44569A51078
SHA-512:	80164ED76716CBCDB9BECF4E150E9B6A15DF70FF6838EA5B1AE99FDDF0BDC263606E79B7038964A78AEACA6A48D28AE8521CBCD681E6E0A32762684BB1CDFC7A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B6F2BD4C495011EDB3DBB4E491C43782" xmpMM:DocumentID="xmp.did:B6F2BD4D495011EDB3DBB4E491C43782"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B6F2BD4A495011EDB3DBB4E491C43782" stRef:documentID="xmp.did:B6F2BD4B495011EDB3DBB4E491C43782"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70047
Entropy (8bit):	7.984164998123276
Encrypted:	false
SSDEEP:	1536:AO0WalrOw8UDpdk1yTsH1+qyZH/HmQkc0TxkKdkAlU3LOq:L0WaliV4N2Iqeayyq
MD5:	9721EC770651C3B8BBE7595A5DA2866F
SHA1:	E125171EFA090078B21772EF0495F3A2E5BF591D
SHA-256:	CE9934903B211303BCDB73EB433E50DED9412DA1E532DBBD45FFF80B76267792
SHA-512:	F020F1FD5FA62963C9F1F2CA7A0E152DF509AA4AA430575003767B985337F02139225A4765B0690B0D685996613FAD681594D833917529E6CC847942B416F684
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................tIME.....8....t....IDATx....m...~..3.tG\.... Y.j..JR.RI.[m...vwt.;./...O.._..v..!.R[.eY.5.F..... @...w.9..{ZS?.}...... .....y3.d...o....DJ)...z...!H)m..1....=!x..v.`}y...m.....%gGG<.....Dd>.E........u..x.z..s.EY0.=..S.M.......e2...A....!...z...I.._....z.....n`yy...}..rt.}.......C\|..hE....{....m......\|.(%.B2.'.%.J0..aw..JY./NH$.-......d:g.....>{W.a....RiRJX[ .z"...~.../...p.........o\|.k...7xx.]..N.C...%1ZQU5.....Xv...\|.y=..C....\|.....h..!.-...!.B....A..to.............~...O.R$.HU.0.".....I.....?...iD.........m..._...wX,.D..N.V.%%..E\|t~.j...(.E...A.bD.....ua.R.C..@7.,W-)H\|.H.......=RI\p.e...(+...?.Yla9?=...M>..gx../q..S.c..?a....'.>....jy...#..G...7y.or..m..k.~`R....C.@L..a..\6=C.c4m.1-4)&B.?.`o.....).\`.=!%&....s..wt....B....@..V.-I...DKI?.(m..;...^.g......"Wo..*..............[.F.....o.k.....7^...........v&H@..H...b..F)I....

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 62736, version 1.0
Category:	downloaded
Size (bytes):	62736
Entropy (8bit):	7.997122729729386
Encrypted:	true
SSDEEP:	1536:xSy+RsnoArTomGH4E2ojkL4vVmg5xyLdDmzuh:g9snooTtTEW4vwyyL1nh
MD5:	0B731EF8FCB05B6DB8A28F48861AC7F2
SHA1:	8C3C6CB3AE91B6CCBC980812CDC4E757C92F1A52
SHA-256:	94D20FEE76C5E85925714B500FA29C86D48CAB6D631DE813EED365F8EA5AC5E8
SHA-512:	363440C2B4A78DA2D66B31EA7D555DEA3A1BAFE04F7273A5331D2BF54B79D5E4AD8F07BA513AA15F0D4B4AAF1A9F2BC13E23081F7BF5D53E65849091D2C253DB
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/proximanova-janesymbols-webfont-0b731ef8fcb05b6db8a28f48861ac7f2.woff2
Preview:	wOF2...............\|............................?FFTM..f..@..h.`..>..B........H.....d..6.$..`. ........a[-4......f.Q..M.....=..2.....1Y...>..: ss....P....d........d1......PU.\........R.!.d...L.....k.a..;6.1a..........t.x`.".k.X.V...M8.5..R...p.4R..4l.].I..{...R.(.3W.V...5...i.b.....T........>5K..eJ.{$..13.2uM..jdf.e.1....=.3...L..j.wop._WR.......\....7..W).d....O........P..@..M.#ER.a...7.S.49NyM..R:...[...(.@..P...OzS.N.P.=....BU^3 N..sM....2z.Z.:.=m...?9........_...,q].K.WG..."<.-...G.$..>...;...Y..SYEE(O.t...)A....p.6.P..$.........-QE.k.5.$.I.M;..?B'.H.{<....n.M.`K.)R.{?=#=....\......:..T%..-.E.\|.?...w.k..%.z'..6.7....4..hn....0V.nyK.}..%..)).........[o....b...+f\|........AH..,.CCS.VT.z.E......&.%}.q.l'..Y.BE.(.95)=...d.e.o.lg.!<..m.r@A..i.J........RW.A..u!....\1..g.l....C..."..o..R... `8-.S.....xQ.Ux.J....U...x..6...{..W..`L..0.._J.+.`..v.4n.Q\.d.r@...?iV. .&...%..<xzmi.....eR.o7@...(..4A.vQ...U_k..X..n...P&m:...`b..It.vu~.... .S.Y.P.lq.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68746
Entropy (8bit):	7.984998151488386
Encrypted:	false
SSDEEP:	1536:ciCjTnNETfDIKJG1spjdjxXdjJwYEWFz7duz1/:cHfR/u/jxJKYVFz7di
MD5:	704A3874A4A3024B07B923C9363D3B27
SHA1:	9FCBDBADBEA48B38EF69038A089DB5DD00EA9E2E
SHA-256:	266B5AF36E960DF2F31EF626A40DA3DC3D151977AC27A63AED17154D0AB1D13A
SHA-512:	9A77B09C1F5221A9A63644AD88C552FE3EDC15DBC6B966D726029E77CA3A2EB914A04FEFA50E9A99DA0B707D8451FB9CB3C92E5FF4C3BFBEF6DB43BBF16471AE
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2024/06/12/16/56/27/4bf0ffc3-dcee-4f4f-8992-46e2b20e4b25/file
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......3.i......IDATx...y.mi^..~.i.gx.;....9.L.&f.]...e)...Pb).e.......U..z...j.,..FmQ,.rQ. ..9Gfd.q.w<...L...y.972QP.pc.7....>........W\|.......G8..f~.g....p..........m.,.HL..#.....5.XrN.c .LJ...g..J...(h.....@.5.,....Y...3..Xc.....=..?.W\\\@.h.0Z...#...\|`..X.7.6.BL..H.6c`=DB...1.b".L.........4..).s&....).PJa..Z.V.m4Fk...$_k.E...G\|.h....&.9g...2.."C..6...E....{G...M.Z....w.......~.....\|.O.+.....b\.-h.{.5_.R..#)'@..1.P. .....=9'...(..`3.....a.Xfm...>..%.c1kp.R.Y....#Q+.5.}G.[....rJx..!..bf...h..1dF.......lg..b.>0x...J....r...J..f...31.r..cqXr..2.M..C.1.k.!$H... ..0ZAN..J.S..B.....s>.............},..e.....v}...6.........y........J..#!fR..L.R.."....J...] .sD..5..1,..{.9..{...a..4p..t..U..F).].u..Y..(Ek4...)E.5..A..9.:G..M.3..<.h..j..sD..Bn4...\..B...r. %P..5Z..Z">..`P(..P.@.`..Z.r.....r4.&.H)..&e.Ji..^.i.r...>..}......x...}....

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54217
Entropy (8bit):	7.991711921921949
Encrypted:	true
SSDEEP:	1536:mdYg9WrkNE+Yg+D0kvVSEKtD/S8sVflsgRsJ:AYGWryQg+w1EKtDK5q/
MD5:	53C1891A914E43CA1A7DD3B7683BA0B0
SHA1:	8033B33B5990B233DBD5EFC440C6EA9897F9E17C
SHA-256:	A7C7CAA07F036C6B7FFC66BE28D0D2E5BF68E9ACAD5978C134F9439268F825F6
SHA-512:	2022B881FAF3670EED4D0ECBEAF4F268F75BD55D340EF9B3A2FA9934EB389872D39DF7B31C84CBC191209AC1AF8467EDCAAFC17A3F5810B5B1A858C14D4E283D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8...Gm....IDATx...w..[z........'.\|.V.QU.J%.J.......a7..$...`....ew..l.,.nh@M0na.Im..B..R..J.n:q..V.......>W..N.s.{..g..^{.5.;....y.7..j?.._.....1.M..L?.bx.h.../G....\i.. F.D."......c....2Z.s.....&...~Z".....w..?.y.....q..../..a...9..........+.)(2.b...\|J..ze.7..;.....Y$m..@..&"../BP.....G.d...k......g...6..G.?US.\.}.j..e.........-yM....y.....en._.&/.......[L1..e..JDD...4>F\|.d...(.%DQ.....@ ....V..B..........E.I....}...~..?...'....../>....p._.....z.#...r0.d...m.oRY..R.W..."."B..1...i.."..@..hC...b.. .!`D#.RE./D..=6...oB8..\|...........K...\|..e9_....a.U_.....".....2/..}.%>.{.,W.S.o1.~.Q.u..F2MP.c.@k....." ......Z.BH.....D...VI)B.$D"@....!.} ...nI..4M..B...fU.n....W...../J{..~......r}.s....N.t..[La.U[.V.t..AY..E.8l...Ji...m...'.(..B$.58. );.C.$....@.%B..q.#...46......?p...+.7...}..?....[.Eeo8./.~...J...U>.s.......4....).PZ..&j...Za.!].)..Q(..C$."

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	306838
Entropy (8bit):	4.834358473643112
Encrypted:	false
SSDEEP:	3072:nJP75L9L6hEPRp4tQPmyeqDktGxcbpez7E:n15L3Psqjcbpez7E
MD5:	6AF1F927E6A91D58B30335992882BB99
SHA1:	96CA89475C7AABFC3D630180A008B8323D2C1FE2
SHA-256:	CEB61524E2428E62E3C93838DAD09ED961800987D5743E292CC6E5A133163AE8
SHA-512:	1F0110646D10FCE7D0C4B70956CE4586F9E8FD12B4DF353EE14E4BF2521D869EA4B95552DA6E8AA31DD1D491AB06C2F9E52FBC2D66FD06A24AA040503703B555
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/vendor_public-9297b9cdf5cc56e89ca7.css
Preview:	@import url(https://fonts.googleapis.com/css?family=Open+Sans:400,600,700&display=swap);.@import url(https://fonts.googleapis.com/css?family=Roboto:400,500,600,700&display=swap);..react-tabs {. -webkit-tap-highlight-color: transparent;.}...react-tabs__tab-list {. border-bottom: 1px solid #aaa;. margin: 0 0 10px;. padding: 0;.}...react-tabs__tab {. display: inline-block;. border: 1px solid transparent;. border-bottom: none;. bottom: -1px;. position: relative;. list-style: none;. padding: 6px 12px;. cursor: pointer;.}...react-tabs__tab--selected {. background: #fff;. border-color: #aaa;. color: black;. border-radius: 5px 5px 0 0;.}...react-tabs__tab--disabled {. color: GrayText;. cursor: default;.}...react-tabs__tab:focus {. outline: none;.}...react-tabs__tab:focus:after {. content: '';. position: absolute;. height: 5px;. left: -4px;. right: -4px;. bottom: -5px;. background: #fff;.}...react-tabs__tab-panel {. display: none;.}...react-tabs__tab-panel--selected {

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47178
Entropy (8bit):	7.9782046701052955
Encrypted:	false
SSDEEP:	768:Y5nSIEhUpinizMCLVnw/LBxW3WL7Uyu053qddEA//vmjH8vTD/tt97UWTMXzkUx1:CnSHhU4niICZnQLBxW6xoQknMH8vTxT4
MD5:	D616A49134283860B950F6A449464C87
SHA1:	820BFE04643DD86EF35175B89CE2FCE745D933B7
SHA-256:	3D496E581AF599E32855CCF87F217907F3DB23E3739A1B9C57F4CEAD664C190A
SHA-512:	0A5F794ABBFDC5EC3DF5BB06CDF908DE3953D5D729B90BE0484CCCE7DC8DA6AE7D548B6D7447A7FEC34A2B1E6C1E9A222AAB7CED917F8D3634A546D6BF23D979
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDEtMTQvMTQzNDE1Lzc5NWYyNmRkLTZjNTQtNGQxNy04MTY1LTBhYjk5ZWM2NTFiYy9TaGFuZS1KYW5lIHBob3RvLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=e75a2d5ae1b1ce47&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..\.F....IDATx....o.u.}.......s..4.A.`......p..f.\e.\.+..qkl.G....3.....XcJ.....$....o.\|./........4.......gU...O.p.....7.Zk.:...4....\.u\|.q........p.?.q........p.?.q........p.?.q........p.?.q........p.?.q........p.?.q............G)...Sr..JJ..'O.x.&......oZ.o?..;4.n....1..1...:..O...4..?z._.cN...W...{...d.~..RJ".D.\.b.nq@X......K<........[.<.r.....w.sM..`......./....>O^.:.'.p2.M!X..,.cT0..K&..T..R..S!K....aur...^.~.g?.1^...9.u..i?....&.........x.W...../.y.U\..&..{.5.[.T...5..HRH. ..@.1&b.`..C..T....^.c...\|.o.,..2....2.:...QJ........u^... .?.!.X!8....c.P1.l......P.T..ZI1SJ!.L...J..0.,.....1A1...g>.)>.7.6...Oq.gp.}..5.H\'..0..._....W.._0=y..-t..,.op.b....j...J.@..n0\>.i..)#..@.!em..T...E..Xb...r!7.w^..?...}~.s....'?po.........7^..~..../..!.,...W.1...\...`..Z..`.H. .1."..J..@..#9..Tr...).Z..\..J5.....,...g...y.3?........O.M.....gq...s.C.7..w..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	73433
Entropy (8bit):	7.986646668633815
Encrypted:	false
SSDEEP:	1536:XEoa/x9vGAL5IvH95erRrd1dIkr7SAZoambHxWGM+f5Ic:X/0x9vGO+9qdtfSA/JGbfv
MD5:	B84A3DAE08E19BD95753C4E62938C3EF
SHA1:	13F8BF2E1A2F2D36E9130AB9F938CB80F19306AB
SHA-256:	B4C315AD6B0DA49EE80677A39E2971EB7C3C54D948207A62468FADB6BE15C2C0
SHA-512:	84AB9BCFFFD6E7CE7C47585F22F002093E8F829EF87549980FED8CB20FD2F3F8101B8FD296855BD1FFA385AE9E71489F6FB5816C13D35A9E8DA60DC83418814C
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTgvZjA2MWM0NDgtOWQyOC00MzA1LWIxY2MtNmExYTlkZGM0YzMxL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=c987c3b7f740d138
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......:...5....IDATx...y.m[~.}~.Yk.}.{.o./.KU..Q.[..-.............. .!#...B..0 ....d.x...].....-.,UIU..W...6..{....\..{...}...k.z..\s.5...}...R.(\..w........4.k...k....X.y.'k..>...G...G....9.C..'....#.c....@J....B..(Xk)......D. .c..b..D8..A.......)..8...2..i%...."2..]G.=.X.............1...B..O......../.......>.r...k\|.....Z.6y.......g....5.....{..n.k.}_..ryb~`>....X....9....GS.1.k.BV..!.`.P.J..(TFT...1.c...(.....5.8.........C...C...:.B)`...H.=.)4M.6c-.c....R.@..F..T......_..o..E.+....{..7}.7..M{.&{.q....4....Po...[.>7T..a..s.Y.u.._Y..........}..a....".....i.......R....y....@.e...JI. .D...;.0,.C..L#..7..-wOoc.....\|.$f..@..,......Y....1...`..N.+...[...gb...[...0.....$6.....}.3Tke.s^...9...y.t..z.5.}...k.YQ......M..k..A..3........3......&....:R......X......d@7Y..3%g..F...9c...!..#c(..M..f...3...1.K!..XJ....^........:.1..&{).I

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	55890
Entropy (8bit):	7.808296150826514
Encrypted:	false
SSDEEP:	1536:Xj0SH/eosvd7+PoxybiXGw9L4b+fYpCEGXbeYX/t3h87Pmd8:XjnUv5Mlb+fKSXbnXrSPmd8
MD5:	F61DF82A9E7ADF92445FB43DE74DCE61
SHA1:	D297CAB551CD9F40748594A5F8666936D9359EC5
SHA-256:	5C3343202DCD13FBF0AAE2FCB4A832DDA3A77ADEA10486C1715FBDF7AEAAF962
SHA-512:	ECA29842DFBE28EC984CAC14434776A9CF0D0166B37E6C62869FAA9B38DBEAE92022A591A2D4724342D0B7A5028DD207F7C84EF126B50BED1247B94130FB080B
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjAvMjUvMzgvZGYwOTM1Y2EtYTYzNC00OWU3LWExZmQtMmU0YzhkZmU3MjY1L1BhcmVudGluZyBcdTAwMjYgRmFtaWx5LnBuZyJdXQ/Parenting%20%26%20Family.png?sha=3338acc4386c5eb9
Preview:	.PNG........IHDR...8...8.......l.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......IDATx...w.T......N..&.....6..{..%.X.Fc.Q.1.$.X.3..11..I..{A%.....[.rww....1k...9sf._...<{..\...9E..........................................................................................................................................................................................................................................................................................................l....vx.S!.LR.....Z...Z..}.....I.I.~....5.~u..%.Kj..c+m_[...y.8...a...H..T%..[.~........Z%5Kj........o..p..vx...?~}... .y.......4B. .....i.. ...I.D...pl.....(p...a...J.r..._.K...o.J.T}..U\|]...zl... .P... .<..j...../...?.HZ.U.?>..I0..l....O(p...O...I...k._.%....\|;O.BI........`8.e;.........k.N..Z.....K...._I5......`8.n;........}<..4N.,d.g;.......+.......@6.....;....gd..........Qo;....D....k..l&i....E!..v. .Z.E..-I...7m...........\.J..}

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/16526066952?random=1720126544242&cv=11&fst=1720126544242&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&hn=www.googleadservices.com&frm=0&tiba=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50723
Entropy (8bit):	7.983160999032946
Encrypted:	false
SSDEEP:	1536:5GfQHnsc6rPunZUVndUJ49xYSUvg4GuUBb:5GXrPAL4J14G5b
MD5:	E06BC686DDD1D336BF6772580BE5097C
SHA1:	471EDB611EEFC4CD3F03445EFFBE9163E27C525D
SHA-256:	6C3237561635DA306B426039CE1E97257A07389257441C28DDA331F531C63C9F
SHA-512:	C7C4F12ABB4FC5BE6C8EC16E56C5B13EB395E7C134CED5BC407A3BD713AAA6C665AC79FFD6B0EB5986DE051E168ADCE22B32046D03DFA7842204332E0174C9AF
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMTItMDcvMTk0MjQ2L2IxYWJjMmQ4LTVjYTMtNGI0ZC1hZmJlLWY2YzU5MDdlYWY2My9JTUdfMDAwOS5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=8bd77541778ae37c&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8...&A....IDATx...y.mY..}~k.{..No..r.........zT7.Z...,....@a @.!. c..B.@ad#;.......#..2 .......j...9.t.s..k...../..7f..q#...u..........'....G...5.2.d..y.{y.O.<.......{..g..&.....yA.2......^>.'m.....=.......a.......^.s?.Q..$].7.<O..{}.].....<.........~.y.t...<... ..4..N.;....o.....;..q.s......so.:.{.....x.y..<..y..$.3}...7gO.{....A.y.y.z.s.....g..[o....1..0...{}....'e...y....=~.y....~.Hm.[Y.o...Q.....^.@...Z...g<....mgZ...s=..;.y.....h.s...>.y.}.s?.'6.V..^2.o..^_..........:....f..N...a..{9.7..ab.ov....I.O.yb..V..h...`..<.a....x'..7.<.\...v...<.Z.....'.Tx...we\|.....M=...z...~..3.......\|.y...x...,....R.y.[.....'~..Hi.G1....G...+....{.m...n.u..<..%S.b..f....._.uA\|.\|.'u.o........?..7eo.. ......T..$..b.i..p..;...s9...6c._.9..m._....1.W...~a..O.&.M5...zT..o.y....]...G.L:os~....1..Rv.1...0....}]`H1\|`..oYo.O..g!D(..!.1.,`...Wf......s..Nb~.g

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1982
Entropy (8bit):	6.669471406462233
Encrypted:	false
SSDEEP:	24:PiuXWJuEKLHQp1Va9xELbJNsSWNctKFkchagk4is5waR2pVZizR+/EMkx:auXPwpa9S/jWiAFkchxOS2pHiV+/EJx
MD5:	5C981CA75228BAED49C57383CA11D07C
SHA1:	1BC0344BEDD96442E2E46C03A8C90A659A05FE10
SHA-256:	9A2A113A5278FC69AB6FD40430D9B82F7E18CDB3F99A2A67F6597C96510C0DAF
SHA-512:	7B82BD4A3BF1F2D7F4DEABCE2F3FDD790A13BA026B326873E06BBD3584E1E482785B38BC9F7E58CAF33DCD1341B625B1590104CD58C8104F712AFF19D3D31BE7
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjMvMjMvNTgwNjgxNGItMjExMy00YzlkLTk4NWUtOWM1NWUzZDk0Yjk0L2lkeC1pY29uMy5wbmciXV0/idx-icon3.png?sha=612460af434d2817
Preview:	.PNG........IHDR...<...<......")@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...UPLTE....a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<...`.......tRNS.............................`..._....b.\|...W.@...D..\8........i5..4f.....o..j.JG.x.}PrO.'.N!>...=.~....l......6.,.:g...s/[...Z3VM.#..7.KL-.(..];.a..H.T...2...h.&...<..).."...d.e{1..QCIvtw^......).....bKGD....H....tIME..........C...pIDATH..._La...)...FJ..Q$.b.N$k..ID....[*I...Z."...

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 260x120, components 3
Category:	dropped
Size (bytes):	13891
Entropy (8bit):	7.909286224422782
Encrypted:	false
SSDEEP:	384:aI9C8x+S5BlEnTeF96qO7vDa7vF47Zm4EQbDO:a/LSPlaDqkvDa7v+TE4O
MD5:	129B872953761A9E85E7D47E7E6EC401
SHA1:	E139F8773EDA0C850C95949C687646D125AB7838
SHA-256:	8278356630F61285DFB66206CDFA4EFAE4FE29615D99A82D78E3047848ACACBB
SHA-512:	B1A8902A3777989DEBD29EE0AA7C932E94EB35443346C1588C785B0C21215B03C9C1365D31FED275EB1BB8B66BAD1164CA61A9CD8EF70337B5E0320AACE25214
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C6047870495011EDA0739C790EB7E78F" xmpMM:DocumentID="xmp.did:C6047871495011EDA0739C790EB7E78F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C604786E495011EDA0739C790EB7E78F" stRef:documentID="xmp.did:C604786F495011EDA0739C790EB7E78F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2661), with no line terminators
Category:	downloaded
Size (bytes):	2661
Entropy (8bit):	5.844972361024179
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08oS09ulo/HG9QGO+6:aJd6SUtJfNrVlCWWWdtqjZMSCuyvb
MD5:	6CBF8C616A2178B4F964E00E82C943B6
SHA1:	F74307A7C19B88D8A8A3FCEDAC77BB96506F01B1
SHA-256:	9F2183F3E86D4434686D98AD2B008001C2B95ECD2C31A50DC54593CE360750C4
SHA-512:	690311CED6A2FAD4F4A4B06B9AE577D82CA3E38F12CF14F5F1770F39C367D5CABE82AE2D897F3AAB4D8F381963E127EF705483E2E071DDC90A3473BDA205D7D4
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/16526066952/?random=1720126544242&cv=11&fst=1720126544242&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&hn=www.googleadservices.com&frm=0&tiba=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 192x228, components 3
Category:	downloaded
Size (bytes):	24818
Entropy (8bit):	7.92535355378126
Encrypted:	false
SSDEEP:	384:tvsona45Y7ba9/39ETf1IXkYBjk9SF9zLPqIi+CmbdT2SJo+oHHGMjG1wfbNV4z0:eoJ5YfAf9MEZBETMNCVH7amfTQfKA4
MD5:	850658E3A457443F313792BEA74AC991
SHA1:	B4EF963BE85480A503052836C3B39525AF706B21
SHA-256:	ED71C7D7FBF0A76BC34AEA35ED8F30A3A303AA3E60D938F7E5C92AECD53FFDD8
SHA-512:	C83EBA4446BA562B09D773213260799894AC27193CF3BCA388FFD140BB824D0A1FB9E22BBAC0BD10C1BD52C27194C8A058A91624D65DEE90D68462BE3D3823BF
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDEtMTcvMDA1NDQzL2IwNWI0Y2U4LTVkNDUtNDdlYS1hM2I5LWY5MmE4ODBkZmU0Ni9BbGl5YS1wcm9maWxlIHBpY3R1cmUtc21hbGxlci5qcGVnIl0sWyJwIiwidGh1bWIiLCIxOTJ4MjI4IyJdXQ?sha=ce9dbc7fa470f792&for=livewise.janeapp.com
Preview:	......JFIF.....H.H......Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H..............0221....................0100......................@...................(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C............................................................................"...........................................D............................!1.A.."Q#2aq.BR.....$3Sb..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/16526066952?random=1720126553997&cv=11&fst=1720126553997&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fblog&hn=www.googleadservices.com&frm=0&tiba=Blog%20Posts%20(page%201)%20%7C%20LiveWise%20Associates&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	88751
Entropy (8bit):	5.414296471740167
Encrypted:	false
SSDEEP:	1536:2sHx8vawlWe2XzbStiSc6q1jboAmKum7EqIZ7d+/:2sHx8vzWe2jOtiSg1jboAmKum7EqCp+/
MD5:	69CB7809B5011312E716F29B3D19DCE6
SHA1:	833DABFB546D57065AEBA7190B5EE5A2428DFA47
SHA-256:	E039E607C78306C7E029A7FD0ECDB14F86456F16E1A5CE65AA26B4FDF1D38A3C
SHA-512:	4259C8F940CFE4B7EC384E5ABD855713DA7792A955A7B737B75E45E6559A90292ADE59D7CCAB381EA4C2D0FA5109B4ABD9BFA0887C05C9FB1A27469D5E198A69
Malicious:	false
Reputation:	low
URL:	https://m.stripe.network/out-4.5.43.js
Preview:	var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var _ in e)n.d(r,_,function(t){return e[t]}.bind(null,_));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=30)}([function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){retur

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	56412
Entropy (8bit):	7.988839220194277
Encrypted:	false
SSDEEP:	768:laqlEK1RMrr+r0B1GALfxZZdOz+M6O55cbawZk4h3r3117T66bvjVPPEG84MCptd:QdkMr6r0B5tZZyD3cbaV+17TbpPM+L5h
MD5:	66179AC6CB82EF0005DB0E318CF7ADC1
SHA1:	E1A0E5CE15948F9A5B3E222C7BFE4A1B943B714D
SHA-256:	40A48C91D56FADB3B4F562040C50F5DB8E0A8ADCD7B941A37F7A3CD9670D6124
SHA-512:	550D081BA14EFBAC21109B7978E746D245D5618FB91BCA9FD449F986D43EF4AFF2A3E1EAB43D1181E2E3C2A627282BB8FBC464F3E8052BFCEB60A5195D1AE02D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8....t....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y...y..~.{y.w;...wu...eY....66alc0... .0d2c..L..a&!.....B`B....6......l.-.d..n.^].....,.:.....!.H.Wu_.Tuw.9o...Z~...o...F.......~5._{.;...of....}]...........w......k.9@[.[.r..^.KW....G.........o.....5..~'.~.?8oU....uR/.\|...C.O5. ?.;.......s......#..t....A....+...S.bJ..s.0..O.0'.?.........v./~.....G.w.;w.GvO..7......C....G....O~...'..W...Dmo......k..]7.t.....^.....3...c...cf<..9...z

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	79775
Entropy (8bit):	7.985484437451393
Encrypted:	false
SSDEEP:	1536:beDXiLzfIOyZY9p3myAIDewzTJifWb8r/9HrPIi7O9XW1TTusTM2AxI:bebozflyi9Zhkf1rtrQiC9KvFTPAu
MD5:	996F40C439369530FD7FBBBA979F8F47
SHA1:	0FF2F3D71CA3DAE80CC27FC4AC337628BC15D0B6
SHA-256:	6851CACBB2146141FF4CEC4F0AE49CDC212820DD0364B1D387C42AC895161031
SHA-512:	E5025F845570D2EC2BBC564E6B2F59411E5B2B94EB7798F44E93E009BE06220FD3895D18C1D951590A56F15C27C545BCA5522B357C2FE5B2ED20E08440BA42F8
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDgvMjc2OWI5MzMtNDNmYS00Njk4LTk1YWQtYjkxMzMzMTQzN2UxL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=b7a469a71aceaff8
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......0.`Z+....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y.m.Y...F7.\.nNSu..T%.JC. ........"x.z./=..W.S@.T...g....\|...`......`Lh..V.9.>{..{..w.9.>)\|..d.Sq..9...{.....o.k.>.......?...r}..w..s.~...l^..o.18.?.R....!.0.\|...F.....3!.."....:...b.Q......]......G..2.2...XXc...V.Xk...._....W.u.W.y..n.. "....a....``...8@..( .L...B.H9C)@+...4.k[Xk.P`&..1.....!"3.cF..Fi.M..z..j.h..v.M...._...<.....G.}......}..{..P....~....8...~.....{.....=......3

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2004
Entropy (8bit):	6.649852126233836
Encrypted:	false
SSDEEP:	48:FKULoNFt7TtzPdcc+zfJV6kG961VMIEzk:F76bzPd1mfJV6kg6R
MD5:	80D9180F91443126F24CAE022495E1EA
SHA1:	FC1044F719AE0E6C3DCD258F2C93889F904EA73C
SHA-256:	FA12FB12E1DE484D9B3D2B0AD0D3FD6763630339BB54E7B80A04705DF28D86B7
SHA-512:	BC2F0479D90F936F23E112D43729AE0D378859B5F167A156E583D9770D01DDA3B3F08CF38ACC0FDA48356C4DCFB508FBEF352A2B788CE0D24634C9023DCB6032
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjMvNDUvMThhMDhkYTctN2M2NC00MTdjLTg4N2ItNDIyMjA0ODZiMTgxL2lkeC1pY29uNC5wbmciXV0/idx-icon4.png?sha=5992698387238b95
Preview:	.PNG........IHDR...<...<......")@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...dPLTE....a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<...........tRNS..,x.....65..D..zM43Is...+....lX.qT1mp:<..w..V......B.'" U.>Z.u..?\|.oA\S.._Q.d....Kfb.y.N..a............W......c..8.....L.O.....F...[Y^..(...*..@.....g.k.%..H.E....=....0/.....2..-..#;...]$..&C...V.;.....bKGD....H....tIME......-A.d....rIDATH..._LQ....($)e+KJ...)K.Ee

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	60543
Entropy (8bit):	7.98873222836943
Encrypted:	false
SSDEEP:	1536:pmQWDUsbX++Sb2hk+RDJ2iw+W8sXP/Q4fh8XKC3PMihm:ZWggX+70RN21lf4PPMihm
MD5:	A840A96806090712C33E73A0A666D3A6
SHA1:	EBB4D2D83A9C1229D1735597CF294991072C1D15
SHA-256:	45AC0BBFA2347687CD43B4CBB61CA01029FD20AFAFABA8CEFA157A84B732E82B
SHA-512:	154A6DF15249F0553EB686807AFA64EFE22D8C9D5C99C8F2452E89FD355ED36346E78353C06F18AB69F51D3A3D4D0DB51E67707C18AC816A09D605AE623863A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................tIME......;........IDATx...Y..iz......[-]...g.2.A...p.ER\l... ).&m....F..K..a...V(lG.aKrX....&!q.iP ....H...l=.]KV..oyW_<..n0,Q..(.j......:..>....7...\|......c..:s.,.V....x...n...w...<)m.1Dr....Vk..g-.m.w.L..k...s..h....1.4C.2...%E.t ,.%%.8.c...2O..1...4-M...m.hM.....Ph.G..4..5..uO.uL...v.'dEL..3.8r..e&.D;.0..'....RLY..f}.A3.~]......u?}ssx6/s..U.\Cc.2SrF.R.R.._......g.....~............z...3\|..6.w9.......{...&...4.Rb..@...1.Z...b.,..2.pm.....&....3)El..H.....1..sR.t..m).Pr..m.. .D..m4)%....,....i..Ef..N.+.C...M7..'W{nnoXB........r.h.I1....c..:b.(cJ..w.{.?......^X...x8...q.hU...s,9..)9.~........g.....~'......C?.1n..5.{.4...p..1.7.....W~.q.!./O..Z...P....._oh.5M7....x.'.O.Y;,.)EJ..n......Zk.R..1...g<...R./3.5X.(%QR -.~.1Fc5h..F..Dt..D.vl...'.K!.D.GR..W((L.H..(b....E..."J+.I...e.\|../.b..o.........<.oSN)...X.J*.d.....!

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18524, version 0.-15616
Category:	downloaded
Size (bytes):	18524
Entropy (8bit):	7.982738877722554
Encrypted:	false
SSDEEP:	384:yLUuYl/aRC/91/Po6MjO+GlYmdda1GO2kIXX7t+:yLe19ofjO+GlYmdda1nl2U
MD5:	AAB07E68E20BA82D4DAF78AE09777BB3
SHA1:	8FF57E9E41FABC259F4BD2A9FC1094920E654D5B
SHA-256:	07A40AD412A5D99F955C5B8D1690BE15FE3E0D5DEBA550AC5BA5ECBA4C69A466
SHA-512:	D6B25D7C330B0BB17F9F3C3A17CCE416FD5EBC84664F4E3B946626F789E85B2B82DF8FA9A0ED995459C5075D0ADCFBA13C16A1913F2596296454CFE26C52A62A
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/fa-solid-900-aab07e68e20ba82d4daf78ae09777bb3.woff2
Preview:	wOF2......H\.......g..H..........................6.$. .`..4..X..$.\..a. .3SE!=i.=....z.T-.2/X....?..#t..7.?..^....h.V:.L..~1...i...iM.=......!....d.@...._..1d$9..qCY..lk.7......TYY..$h(U.....eW...m...3.z...^...B/...zwGG^.....g.....:b.....GT..w.....[.!._...NcP.K..o..>L...m.`g...._.............g/iC..4oCns,......M....3......T.$.......`.....O....DJ:>...N.C...@J...i.r.(:..(]..}.u...;[....+T`Ab.O....{.EAD(m.Fc..U+.[.F.p......&l.Y.......8.S.;?.s.S..{..dk.K.)p........u'.}.}.E.R.0(.O.....c.l...\|...c-8.Uy;+.......I..A;....X.....%.?8g>!KR..5....1..D..\|..d:..aI..Dh.,J..<...T..!}......kuj.B...N2...\kC.!......knp.\|.dp....CY5.7.W\-/..Bq'I..B....5.$.~......lp..~].=..m.zZ......>.k.l.f......,...>..T...L.......P...9.7.....zt...l..r.......M'Y.....MO.e.o.@:....Y...i%.4Bi..W.....dq..<....>.6.6....tw...=.>..X.X~,.;.;....x..q.............r."^...W.+.U.y}.~^.o../Q(......?....9JS.2......J..J....UL..V]5U..j...n.!.....q........Z...k.6j.vi....N......^...J........?.?.\.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65445)
Category:	downloaded
Size (bytes):	1452288
Entropy (8bit):	5.3402613302741475
Encrypted:	false
SSDEEP:	24576:klwfB+GdW6nakLCq+mpaOHPXR4gEFlxwAo:kGfBlzakLCq+mpaOHPXR4gelxwN
MD5:	C8B35201E8C035721129BFB7FBED7BCD
SHA1:	D0DB61B1A5FC66ED35691549A6E93922E0D5E5F6
SHA-256:	577AF70F0EFD49DF92342477CFF90DEA2DC309D54C2525555B30C4F1631C66B4
SHA-512:	ADA472F8BE0B2188D9C74FCAB2FCAC9319A83B64BF3B44A0C77F62BA3D978E46E78BBD2938DF6C598D2E4DE10D7F8E66327AA54C3D5C8FDBAB5C867F0FC64AD6
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/public-1ebe00b1034ccbeecd99.js
Preview:	/! For license information please see public-1ebe00b1034ccbeecd99.js.LICENSE.txt /.!function(){var e,t,n,r,a,i={456926:function(e,t,n){var r={"./add_remove_fields.js":388281,"./facebook.js":292919,"./home_screen_support.js":395673,"./notify.js":68588};function a(e){var t=i(e);return n(t)}function i(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=i,e.exports=a,a.id=456926},822128:function(e,t,n){var r={"./notify.hamlc":744402,"./notify_popover.hamlc":564673};function a(e){var t=i(e);return n(t)}function i(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=i,e.exports=a,a.id=822128},251797:function(e,t,n){var r={"./_base.js":418454,"./discipline.js":418977,"./event.js":772492,"./staff_member.js":489936,"./treatment.js":918741};function a(e){var t=i(e);return n(t)}funct

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, description=As seen on a Sussex Directories Inc site, xresolution=116, yresolution=124, resolutionunit=2], baseline, precision 8, 192x228, components 3
Category:	dropped
Size (bytes):	37962
Entropy (8bit):	7.961125202714594
Encrypted:	false
SSDEEP:	768:uRNfDMgD7NqTJ31t8PPnFXf5LnxQy9WCYQXIyeIDHVs9E2CLtU4vOFp3YI:wNLd7Nu3y81QXsAHVs94o3YI
MD5:	C23892800C89745DB9AF0A40BFA69A14
SHA1:	EB402368A20FF5699A1BC7F8B90CCF99138CB9CF
SHA-256:	5AB4908A8FDC30847FC85AE051758F9F1715023DFB101C31B5B1C9275D4C7D3E
SHA-512:	E4C342A10FA140601A80063201D407A96F44E398A3BDE4B1274B786CF3C99395F57956C8DFFEC233FB95C1E1A3777F9A175C3086F4116543A3E7C17E361E078D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM..............)...J...........t...........\|.(..........................As seen on a Sussex Directories Inc site.....H.......H.......C....................................................................C........................................................................................................................C...........................!..1."A.Q.#2a.Bq....$3R.....4b.%5CE......................................F.........................!1.AQ.."aq......2...#B...3Rb.$r...4C...cs..............?...E.tQGE.tQGE.tQGE.tQGE.I>\|..S,..E...."}.........-.Sf....#L6..u.%.B...$..$...F..q?R?..zj..>.......U.71.a{S..i...m....V[I]b.o.).....I..mmD...c.h.\ft.`........Sg.P...>[\|.H...g...A..W.....:..n.=b...b...l.....m.&I...".q.-.X..,V...T. 8..Jbt......I....x..p>.s.M....[..."eU....=..)~....YmP.8.&..3../...........H..(.V.!(%j.']9...U..'T........^........6..f'.\!.Wy.<^.56/+3..\.+.f.".....I.)q.M.AvL6....N...3.%..0..O......B.Uyj>5&:{........u.5.v.V[.N.gWc.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50687
Entropy (8bit):	7.851832760172838
Encrypted:	false
SSDEEP:	1536:wtKB0bLIzQ3Uc/U5o3aM2Y69U8fEjUrsqm5PPM:wtKqnIEEEUUaM2Gis3dM
MD5:	1E3C0F92C3A80977822A8A1C299677F7
SHA1:	B07F4496DDF888D73C4F1EF9695F61A9008D4DE5
SHA-256:	9C028FF6BD9E47F85588FFAAD8EE8363E91F54C22D46472C000CBBF64E608953
SHA-512:	64DDD890943B924F29121216670B7FB5431EEFF6769CE5F5A8F4EBC88111BB7FA9B53D591B471AC7B3BF6A7D024F2781757D0C2CA2060ED187453EE5EEC123EB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...8.......l.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......IDATx....\|.g^...3....P.qd...`w.l{V2.....[.6..e.8.8...U...8)...M\|..v.'pz..m./..4....P.6.ik..E..(U.E&D..V.%.....c4..X..........G..n...=...z..sI.......................................................................................................................................................................................................................................................................................................V.......7.0.G.7Hj..QRq...-i...^\.....%.mI.$E...h..}.._.%Is..^...\.... ~.....X..wI.GR...m...]...=..I...H...s.=.y..n.........OV.....jQ..H._..%}...Z9..9U.:..$.$}M.kE..P..p3....b....n.0...[%y...m.....x..?/.=.m.E...'.......AQ......w.R ..tQ..?.&.kE.\...@..p...NQ..$}d..?...G$.).`.."I.....?...._-z......H#..... ..v..`4.......C..T..h............$#...`Y...$}...d....P}.....?E.q]...I@....(...;26...X.i.:...0...D....

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 670x350, components 3
Category:	dropped
Size (bytes):	123361
Entropy (8bit):	7.971338247423067
Encrypted:	false
SSDEEP:	1536:aprbxEBBK5UDM2YHzXjRpuJEoL/qz3vwjuwqFM5Gr/bMDyGAEukG70v/fQcS8UnY:canEjjR4G/wjuwsM5ywpZm0v/fQjxPW
MD5:	007DF99502CDAC350621CE1C3F1C5027
SHA1:	3C717E49BC3179C7E24856B373E4B3D9C0E34249
SHA-256:	E2A04DB959824CA5FF153CA2DCE3470BE9649CAF0CCD958861CDEED0D46B36AD
SHA-512:	5B16D7EFA542CDE5102884AF2CDFEBB27BFE582DD671EE75242BF6198B398E41705190AC08AF53234707572BAD141B160E4348F5DBCDBA48A1E6B1944F24298A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:90D96C7F494D11EDACEFB02FF7685C06" xmpMM:DocumentID="xmp.did:90D96C80494D11EDACEFB02FF7685C06"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:90D96C7D494D11EDACEFB02FF7685C06" stRef:documentID="xmp.did:90D96C7E494D11EDACEFB02FF7685C06"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65445)
Category:	downloaded
Size (bytes):	1692127
Entropy (8bit):	5.433290249960989
Encrypted:	false
SSDEEP:	12288:f08A9aFvUpfzbVTsQ8+NK2Ce/ytg0VpKV1ibJ7d0XZZMSpPI2I:RGbVTsQq2Ce42GN7d0X0J
MD5:	E1962BBC2CA17E6F0A7B74090C5F2D43
SHA1:	B705EDC3697AF95747EEF3B4D22AE5D490CD83AD
SHA-256:	361A7D99C0CB420B3CC5CF86CC6C5CF0855296CE71B8ABEE3755827B6802619B
SHA-512:	B26CF3F51CD141A07D167F1F205F01859C40B912D77D02831DEF5A1E29E8CEC09634CF5E81664C5DA3D535597E948E9A8EC2E02FD45908742A66B5523637B6F0
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/monitoring-eb308bb7edb8313e9316.js
Preview:	/! For license information please see monitoring-eb308bb7edb8313e9316.js.LICENSE.txt /.!function(){var e={310653:function(e,t,n){"use strict";n.d(t,{r:function(){return c},y:function(){return p}});var o=n(800363),r=n(737826),i=n(67645);function c(e){var t=(0,i.f0)({version:"4.50.1",onReady:function(e){e()}},e);return Object.defineProperty(t,"_setDebug",{get:function(){return r.yD},enumerable:!1}),t}function p(e,t,n){var r=e[t];e[t]=n,r&&r.q&&r.q.forEach((function(e){return(0,o.Z)(e,"onReady callback threw an error:")()}))}},634288:function(e,t,n){"use strict";n.d(t,{O:function(){return i},y:function(){return c}});var o=n(737826),r=n(726001);function i(e,t,n,o,r){return c(e,t,[n],o,r)}function c(e,t,n,i,c){var p=void 0===c?{}:c,a=p.once,b=p.capture,M=p.passive,s=(0,o.zk)(a?function(e){u(),i(e)}:i),z=M?{capture:b,passive:M}:b,O=(0,r.I)(t,"addEventListener");function u(){var e=(0,r.I)(t,"removeEventListener");n.forEach((function(n){return e.call(t,n,s,z)}))}return n.forEach((function(e)

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Canva], baseline, precision 8, 1800x1200, components 3
Category:	dropped
Size (bytes):	241357
Entropy (8bit):	7.949314996449017
Encrypted:	false
SSDEEP:	6144:EJXXd2cwQcx3fqw8lygYzJsb0g/Avi3z0+NVR1tM:EJx2ixIkbNVR1tM
MD5:	2DD2D1A3D7D03E6F5D1EE936734DE23F
SHA1:	9EE7B71892DF78CE070F0966C066C3417B545B7A
SHA-256:	2012DFFBC398B529527CE1F6CC25BF8B871C7039B36B57C42EC2B4F11F24104D
SHA-512:	6B96A76DA35DA10AB7A837326983B0CBC0791BFE264C9BD865F48F20630A4F5D85BB42C88D1615ADEFADC89BBF147A864D1E1B353DEA4D3CDF13FEE4E74B92D8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....zPhotoshop 3.0.8BIM.......B..Z...%G............Aesthetics - Aesthetic 15..P..Christine Bergen8BIM.%.......gg..'..."AB......Exif..MM.*.................V...........^.(...........1.........f.;.........l.i.........~.......,.......,....Canva.Christine Bergen...........=............................................ASCII...xr:d:DAFpTMdYBlI:643,j:1617201069187934366,t:23111021....^http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Bergen</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Aesthetics - Aesthetic 15</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27039)
Category:	downloaded
Size (bytes):	304866
Entropy (8bit):	5.271137109084666
Encrypted:	false
SSDEEP:	6144:6alqoe8FSz2HDgvNYRD6wqDTVRakaCOrxY6Q:AWFSCHDJKVRakalxZQ
MD5:	6D54ABC2C927627121F568B4041F0F13
SHA1:	2912059F9C2D5F94D711B00B0DAC465582E12092
SHA-256:	5052A1E44FBF24AC612EFC53E22BA2663BC6590D52BC9D27A5861E13BEFEA98C
SHA-512:	7983257497CF4D272480B0DFF3C6D4FE82815989113AEEE0CAC5629A4769F904E505DFFFBC4B4A23F46DBAABC350162719A70A2F385D7AE1BB30731B08297528
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/assets/application-5052a1e44fbf24ac612efc53e22ba2663bc6590d52bc9d27a5861e13befea98c.js
Preview:	function fadeInVideoBackground(){$("#breakpoints .hidden-xs").is(":hidden")&&$(".video-background").remove(),$(".video-background").delay(1500).fadeIn(500)}function onPlayerReady(e){e.target.playVideo()}function getBlockBtnColor(e){var t="";switch(e){case"primary":t="btn-primary ";break;case"secondary":t="btn-secondary ";break;case"tertiary":t="btn-tertiary ";break;case"light":t="btn-light ";break;case"dark":t="btn-dark ";break;case"ghost":t="btn-ghost ";break;default:t="btn-default "}return t}function getBlockBtnSize(e){var t="";switch(e){case"big":t="btn-lg ";break;case"medium":t="btn-md ";break;case"small":t="btn-sm "}return t}function getBlockBtnClasses(e,t){var n=e.val(),o=t.val();return getBlockBtnColor(n)+getBlockBtnSize(o)}function changeHeight(e,t){t.css("min-height",e+"vh")}function getBlockColorArray(){return["primary","primary_counter","secondary","secondary_counter","tertiary","tertiary_counter"]}function setBlockImageSize(e,t,n){n?setImageSizeLandscape(e,t):setImageSizePo

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54147
Entropy (8bit):	7.986917205091437
Encrypted:	false
SSDEEP:	1536:Ea07/eZC7yJhSzO3RP/4wLuuFLlD3yoOuKSi:P07/I22czOF/4yuYlqu4
MD5:	CE97F420FFFC3A975FD6DDAA639CEB94
SHA1:	3AFFC39A6FB13D93E7D64F030AE96B457907A6CF
SHA-256:	C47B42E7E1CFDD833A32BE0D6EFE74F367834D39FEBF4AC407A66C370D5F6549
SHA-512:	1FB7E8E5415932DC0CB436B58102E730EA7F26BEC46A051743995C6468FC0E3E922D840CB6B0F6FAC57C6468AA6C69EA380E32AACD8EF533F7CFD52B309FF763
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjItMDYtMjcvMTU0MzU0LzhlOGE0ODc5LWU4YzUtNDViMS05MWMzLTI5MWI2NmRkMmU0ZS9NYXJpYW0tUFQtSGVhZHNob3QtcmVtb3ZlZCBiYWNrZ3JvdW5kLnBuZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=043d2af53745f29e&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8.~.w.....IDATx...y.m.}..~f....io..}.Iz.;.,..cl.q.#.......i..f.I.TR..Aj.H..$.EL....]..P`...1.e[..<IOO...=..........&......c.q....{...5..^[../.e...xm......J...9Q$#b(%3..g-.n....5`.....o...~..k.p..o..?...-..g.Y...O..^..O..6.'...w..a..(.......~...+...{......._.._.......<..........AJ=C...{...xz}...~1\...B9.s>(E..!.J.g}._.6.........-.V..?...w.s.......:.._....O} .k......oGrdH.$.UZ.....n.w......n.\|@.<Y.\.\.X.cZ..".c..HI)mDX.7K/....H1....q.....}.#y...,..f-..o.w..i..]..............%...<nn..}.0..B6....+R)./..{.,BSD..0Xc.C)......rI..)).M..-k..N....5....y....?p....o..........~Z.(.k..yZ...[I)..;.6o.Oz...e6..CI...d..].o5.\...0.s".\7....b.....jt..A...c..0e0.\...........B.....?p....L.\~...Z .^.._.....{(y...X....z;.t>..q.o7F.....o.%=Q`.c.u..5dc..R"g.../.5VO~..`..Z..c(.R..ZG.....b....?A.....}1?.._.M...O.S9X..../...H.../q}..n..~..._.7.sC.o..\|@....;.3..

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2208, manufacturer=samsung, model=SM-G973W, orientation=upper-right, xresolution=210, yresolution=218, resolutionunit=2, software=G973WVLS4FUB1, datetime=2021:03:12 10:15:08, width=2944], baseline, precision 8, 192x228, components 3
Category:	downloaded
Size (bytes):	27456
Entropy (8bit):	6.805980356599985
Encrypted:	false
SSDEEP:	384:SF9DVadeBS4o1UFYJARncaqw/doXPSO0aCZVznOyO63pEIjyMJa8VG/:SXDVadySh1UFYJ+qUdoK4td6a2yoaV
MD5:	305BC35A5CD69C02CEA5E833B5F1DBDF
SHA1:	91E7CD3826998FEBD60A6060601E53A722DE3BAF
SHA-256:	DA5EDDBB8A54523B51CC3E775F458E0C4F04EE6A9F97EF5621E9605AAB49DE95
SHA-512:	27DC4E284B76086F32BD48C49FBCAE3F0595598281B9579B4B9977189C7E08E5E2F620960685AB8CF574205CA3FC3086C021A3F7AA79D242D54AB658AB00D3E7
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDUtMTgvMjM1MjUxLzk2MWEyODBhLTE3MzktNDFhOC04ZTIyLTJmZGNkMDIwNjliMS8yMDIxMDMxMl8xMDE1MDggKDEpLmpwZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=1dfa6ad91fe5ceb5&for=livewise.janeapp.com
Preview:	......JFIF.....H.H.....m....................\...P...D.......(...7....................................................................................f..LM......................C...........................................................................h........................... ...}...x...............D...........................................................................................................z ..........z ......................................T.......B...(...............j...............................I...............................R...R...d...............................!...,...6...R...........................,...,...I.......v...............\...m...v...m.......0...........................................!.......j...................................................................4...~...~...........~............;...\...e..1.......d...............................................P...P...............................!...5...................................................

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60452), with NEL line terminators
Category:	downloaded
Size (bytes):	180067
Entropy (8bit):	5.457009106955434
Encrypted:	false
SSDEEP:	1536:WdB7hwiNQLGpLqraVblmYRLxsyFy/Rg8mnuAIPleaRWVBJGN6/zSLc7+M6jy/bsN:y4zYRzFy/Evys6kbhgV0zufB
MD5:	4F1F691D5E59045A6A5033DD28C976AC
SHA1:	40D978462CB09E27CABE06DF85290F7368CEB986
SHA-256:	01E8D534C487D2911244E6CEC20C5AEEF6C108C3DBF0669DD2C448A6BE79A69E
SHA-512:	7269BFF1B018B1B66229E0102F422E760BF4269BDFB6E4029159CA19B7BFAE87DA6417E4B50DC60012D5F5141B19319FD2A6127781D8ABF41F88E4FF52E36CA6
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/core_js_polyfills-277f54535c98b71ea847.js
Preview:	!function(){"use strict";var t={705088:function(t,r,e){var n=e(851490),o=e(249649),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not a function")}},464433:function(t,r,e){var n=e(957196),o=e(249649),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not a constructor")}},835221:function(t,r,e){var n=e(446203),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw new i("Can't set "+o(t)+" as a prototype")}},89400:function(t,r,e){var n=e(360331),o=e(979916),i=e(232438).f,a=n("unscopables"),u=Array.prototype;void 0===u[a]&&i(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},803497:function(t,r,e){var n=e(423627).charAt;t.exports=function(t,r,e){return r+(e?n(t,r).length:1)}},917e3:function(t,r,e){var n=e(207773),o=TypeError;t.exports=function(t,r){if(n(r,t))return t;throw new o("Incorrect invocation")}},642370:function(t,r,e){var n=e(52760),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw n

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50687
Entropy (8bit):	7.851832760172838
Encrypted:	false
SSDEEP:	1536:wtKB0bLIzQ3Uc/U5o3aM2Y69U8fEjUrsqm5PPM:wtKqnIEEEUUaM2Gis3dM
MD5:	1E3C0F92C3A80977822A8A1C299677F7
SHA1:	B07F4496DDF888D73C4F1EF9695F61A9008D4DE5
SHA-256:	9C028FF6BD9E47F85588FFAAD8EE8363E91F54C22D46472C000CBBF64E608953
SHA-512:	64DDD890943B924F29121216670B7FB5431EEFF6769CE5F5A8F4EBC88111BB7FA9B53D591B471AC7B3BF6A7D024F2781757D0C2CA2060ED187453EE5EEC123EB
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMTIvMDMvNDkwYTkzMTMtODcxYy00ODIwLThlOTQtNDExYzk5YzdkMDYyL0RlcHJlc3Npb24ucG5nIl1d/Depression.png?sha=eb4824c07f6dd1eb
Preview:	.PNG........IHDR...8...8.......l.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......IDATx....\|.g^...3....P.qd...`w.l{V2.....[.6..e.8.8...U...8)...M\|..v.'pz..m./..4....P.6.ik..E..(U.E&D..V.%.....c4..X..........G..n...=...z..sI.......................................................................................................................................................................................................................................................................................................V.......7.0.G.7Hj..QRq...-i...^\.....%.mI.$E...h..}.._.%Is..^...\.... ~.....X..wI.GR...m...]...=..I...H...s.=.y..n.........OV.....jQ..H._..%}...Z9..9U.:..$.$}M.kE..P..p3....b....n.0...[%y...m.....x..?/.=.m.E...'.......AQ......w.R ..tQ..?.&.kE.\...@..p...NQ..$}d..?...G$.).`.."I.....?...._-z......H#..... ..v..`4.......C..T..h............$#...`Y...$}...d....P}.....?E.q]...I@....(...;26...X.i.:...0...D....

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 260x120, components 3
Category:	dropped
Size (bytes):	4050
Entropy (8bit):	7.361726680088984
Encrypted:	false
SSDEEP:	96:aY2btociB9Cd1e16Uxc16iPWnHtW/sZ5oG/:aTtocM9C3Uda1BIAsZKG/
MD5:	B24DD72E0E5DE8B6F5F5E331A5C785D4
SHA1:	048D433B62505E6CAD6D33313C0948102DF8CEB0
SHA-256:	B5376FDDAD3D74C73158E1424A2F160A8A0875A941FEFB6D34AB4741BA7B2BFF
SHA-512:	0625C85675FE17213E278E3ED0E7BCEE9A08F817BE0AE01DC53B48D7F94B252A82F1E61728083AA2C959EFAB0575E8666B1CAC75428E68A8FD64E5624A2BC214
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BADF4506495011ED8B0EF8CDDEA4A2D2" xmpMM:DocumentID="xmp.did:BADF4507495011ED8B0EF8CDDEA4A2D2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BADF4504495011ED8B0EF8CDDEA4A2D2" stRef:documentID="xmp.did:BADF4505495011ED8B0EF8CDDEA4A2D2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C....................................................................

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 948, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16096
Entropy (8bit):	7.807065150493356
Encrypted:	false
SSDEEP:	384:Vh9PP67tHxxecxi26eY86seU3BzUQN2tK2CbQuy9T5V:VPi7tRxesiaY86seU31gtK2CQ9b
MD5:	EDD4FD8F35611FE59D13AE45BA2E75B8
SHA1:	A42AA7509241CA92465417BF01931EAA5A8D21A9
SHA-256:	AF03CD9A8955B0EAFFD6635D492DEC57FE3B13F63C7E54BA15A1557ED3F5E2C5
SHA-512:	3804798F515D7BC4A84F90668727CF8EFA4A77B635F782E54EDF35A5FCA893DDA74EA8BA29337B22CAE943E544E93CF9926A145D83871069CFD5820492CEFC18
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/EmptyState/empty-state-booking-af03cd9a8955b0eaffd6635d492dec57fe3b13f63c7e54ba15a1557ed3f5e2c5.png
Preview:	.PNG........IHDR...............?e....PLTE.................................................................................................................................................[.....tRNS...@...@..0..` P..p.` ...p ..7>..=.IDATx.........................................................................`..`.A ...(j4Q.....-YHK[.j2w.Yg.C>..............................~...x\..~..V..dA..-.r/@.......h...9........4..5.p..].NK..sD...4............a,hP..r....a.=H%.z.5.~....`%t..Z ..Jh2.I.VB&"+.J.Dd%X.....+!...`%d"....LDV.....J..2.Y.VB&"+.J.Dd%X.....+!....}Y...K X...Y.[.......\....'.>.l..a_n:&XM1.t.1L.n..=~..-N.tn....&...z..4......M../]A.....Ga0...I0~U.../.....m..i.....7..{ah...iT.0D..2..RD.].;.c<6....C..Y+...]...3...G.B.!...\|=.%W..}...!X.a.v..Z..&.l.+.+...g..../&....^...=..D.`..Cd.~..b."-.....R.p!X.a..R...6'%..T..OzPy....,.0D.........5.\..KV...a1.S....`1.!.A.Z.....8.....).2.tS...xi.`1.!r/I.;M..T.Q\|.H....Tx.J.,.0D..../.E$.^z.y..`1.!rJf..j.[j....C..!..CEz

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65135)
Category:	downloaded
Size (bytes):	152179
Entropy (8bit):	5.168303966686991
Encrypted:	false
SSDEEP:	1536:awvssEH1KNIRmGMgm0n0zjGwIhIEp+kijuS:vtoGjUhIEp+iS
MD5:	816CF49ACBCC3BBB847242547FB88A5F
SHA1:	F9FF79F09905FCC7973BAA696F2D504D9593CFC9
SHA-256:	B2DFC1AAD05E45E6756E097B15C026C250A3E30A8CAB4651D613DD0A09EF5569
SHA-512:	55753D32B9C7EA48A28817DF5F0C4B6A861905F142E2F59ED763E05F9096AAD31FA0AE8AA04FB968C7F451976EF0F4CC1B281EE91F8BF5A7DD9698C914FCF9DB
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/assets/application-b2dfc1aad05e45e6756e097b15c026c250a3e30a8cab4651d613dd0a09ef5569.css
Preview:	/. This is a manifest file that'll automatically include all the stylesheets available in this directory. * and any sub-directories. You're free to add application-wide styles to this file and they'll appear at. * the top of the compiled file, but it's generally better to create a new file per style scope..... = ekko-lightbox...../../! normalize.css v3.0.1 \| MIT License \| git.io/normalize /.html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-heig

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6940
Entropy (8bit):	7.915518120773207
Encrypted:	false
SSDEEP:	96:2BdPzExocIKQAzWZ6V8hAqATy77UAdbJ4D4GKQV2h5pO/ITYO9ImVBlfo5Mjm:2B5EOcI6KZ6V8yqAmDqV2fpNT1932n
MD5:	AEE69BA3904FB1EB42293F1A65DC282B
SHA1:	CDA6F96DDE038B281A799D9814E8588DAD5A1F65
SHA-256:	D1D4F7D67F4EDE4B07BD95A5140B3715F4DDF42E8D17126A19B5C036FDA2C2C8
SHA-512:	F8D976ADD4AB9188FA14F210906545735C0F2BFDC99D80C59A1E94C3A19C9FD7480FD669904225C2C34549C9EDEC78DF166FD1D27A4D30E8F3154E3C879E94E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...T.....8{.m....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...#...#.x.?v....tIME......$........IDATx..y.\U......;.$....B...UV.Ae.E...(..# :..2..;:.:.2...;.(. ..c...YG.CB..w......:...9..U].]..-..~>.I...s.=...>.s....D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D.....T.E.^....t.g$7...\+b.K...yd...=.H$...h.u.......\,q.0IrC$.%V!...~`.r<6....v$..%...:.....&"~(x....R..@x.<...E.1wZ.Z..[.T...=$.$'q....%...].;x..wgH.s>.2..=.H$.[.p..:@r'{./jU^T.>Q. ...#.Ho.....G.<...b...(1...}(P...D"....@r.....g.Olk..!.L.&a$..e@....,....s..p%.V..U...rW.........".H/0.V..Z...;.!.G._..........I.$2..%w..4.......o.9=w..>.H$.C..:w....<......j..1...G#...K..r..s.yG....._X.L.<.A..W$fJ,........oJn...T........=..H.....:w...a......$7..H.J8...D..xE....;.Ny.UpLF.Fr.3^...r...K%w'p...e.O.L..I.D".OW...:...._.5..zq...V..N9.It*. 8.e.......I......{...i...V.....D..>s...l..:..H\%...V.l./....N...y.jW..?i:.....;_.\|.lZ.4..x.>$.u.w.G=....>..t.>..^...

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (540)
Category:	downloaded
Size (bytes):	294194
Entropy (8bit):	5.185668176496487
Encrypted:	false
SSDEEP:	6144:A5T5q595dWtpbDbbnUbMh4IlnXS/Vmoqbl4imF923bIEpMo6uFETHreP1jEtJ5Ix:A5T5q595dWtpbDbbnUbMh4IlnXS/Vmoa
MD5:	C13DC4A1409544A0606B1833EC6B1626
SHA1:	3894D92127CFFD843271B7A0A89AABF371CEEE20
SHA-256:	9F35372F49909C99828532D34ECE3FC1F5B14F7EB22375B3D241445D572ABA9A
SHA-512:	C19004B7C385DE2FBF2D2C51C394520A21AA33C19B99AC17CA970B8812BF19CF0BA6877A091A7D173A35E9AF2DEF7B72046E342033FAD0FD39FA18898AFDB5E5
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/vendor_styles-9297b9cdf5cc56e89ca7.css
Preview:	/. = require bootstrap-public. /./! normalize.css v3.0.2 \| MIT License \| git.io/normalize */.html {. font-family: sans-serif;. -ms-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%;.}.body {. margin: 0;.}.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.main,.menu,.nav,.section,.summary {. display: block;.}.audio,.canvas,.progress,.video {. display: inline-block;. vertical-align: baseline;.}.audio:not([controls]) {. display: none;. height: 0;.}.[hidden],.template {. display: none;.}.a {. background-color: transparent;.}.a:active,.a:hover {. outline: 0;.}.abbr[title] {. border-bottom: 1px dotted;.}.b,.strong {. font-weight: bold;.}.dfn {. font-style: italic;.}.h1 {. font-size: 2em;. margin: 0.67em 0;.}.mark {. background: #ff0;. color: #000;.}.small {. font-size: 80%;.}.sub,.sup {. font-size: 75%;. line-height: 0;. position: relative;. vertical-align: baseline;.}.sup {. top: -0.5em;.}.sub {. bottom: -0.25em;.}.img {. border: 0;.}.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 501 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7204
Entropy (8bit):	7.888681518073147
Encrypted:	false
SSDEEP:	96:nYz1Mp1WHjhHHTvjyyyJjC6kezATcYumXK1fJ9nuS8ATTTGOpWWn8TcicvtMZH6k:Yi7WFnHKjOck6JzHnTmWYccdSLUx
MD5:	DACE492658BA48878A23205643013CF3
SHA1:	7C4E61FA6FEE0E4B14A19E1CD67D136CBC9637ED
SHA-256:	7C69F25C3FB45191988BA01423ACC6796F7ADF26B77DB35302F0D6C129E379D6
SHA-512:	FBB784248C1A4AFDFBF5B3853A6D5174F6ECE721B0E89DAF6A7DFE480F4C89FC6DCCA4591275C1618D21B1799D431C040458413BBE0661F1E51F57394CE11E48
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/tag-See-Jane-Run-Your-Practice-dace492658ba48878a23205643013cf3.png
Preview:	.PNG........IHDR.......P.............tEXtSoftware.Adobe ImageReadyq.e<...xiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:294c2824-3446-4627-a303-31535e597b79" xmpMM:DocumentID="xmp.did:7AFA669F96D911E9A00D97B40098793D" xmpMM:InstanceID="xmp.iid:7AFA669E96D911E9A00D97B40098793D" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:294c2824-3446-4627-a303-31535e597b79" stRef:documentID="xmp.did:294c2824-3446-4627-a303-31535e597b79"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.I.....BIDATx...t\.y.?YoY..zX.l.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 192x228, components 3
Category:	dropped
Size (bytes):	8940
Entropy (8bit):	7.8195154674345755
Encrypted:	false
SSDEEP:	192:uMs1hMHDdGwf4JXrFpBnm2mQb/X88FGck7JOmoebKLpD+18OyVBr+G:ufv4Gwf4JXDBZmu/XFevoebWY0wG
MD5:	03A6BAB51A3B9DFB8AC5355460B80054
SHA1:	C5CB56C9D6AF7CED0C414C9A1151E75DB3809AEF
SHA-256:	EB3358467B92A1B963AF072D1E628AA03F834CAB99C51C023FCA1724A0B116E4
SHA-512:	B52E9C13B304779DB735D3B7BBBFCD5CAFDAB9AB3EAD9A4AB56A7F227BC6D779231D1578B741645E7FE3FFFAE7A384719F46ED72D37E5E05D4D5A04C786306C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...XExif..MM.*...................i.........&.................................................(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C............................................................................"..........................................G...........................!1..AQa.."2q....BR....#br....$%3CSs.......................

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	439
Entropy (8bit):	4.397609226330742
Encrypted:	false
SSDEEP:	12:YiJ9C2e87G8pQXnC5rewAJ+UPptmy9Ypn:YOE2e8Dp2C55s+Uxtmy9An
MD5:	FABF4D336AF836B5FC547E35DFDF0CCC
SHA1:	A696E0A5EB159704DEEE0E0C66981FEC2AC3D880
SHA-256:	9EBB1195D287D35F430D595CF80497938E62A45F255EE0795177F5AE2F9093BB
SHA-512:	0C40091DC864CD68B9BECEF983847BD5E697355EF38A10A288DD9737CF5FCE73E33D615AF1EDA35871CBB7785531BE6C1368AB51FBB1AF2355DC9A811DA9713A
Malicious:	false
Reputation:	low
URL:	https://livewise.janeapp.com/api/v3/feature_flags
Preview:	{"feature_flags":["killswitch.process-idempotent-physitrack-webhook","release.charting-accessibility","release.charting-text-search-improvement","release.feature-flags.rest-endpoint","release.gift-cards.fraud-prevention","release.imports.file-validation-worker","release.new-psychology-discipline","release.patient-portal-receipts","release.payments.server-driven-terminal","release.private-api-multi-key-support","release.rich-consents"]}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	60121
Entropy (8bit):	7.830521059970251
Encrypted:	false
SSDEEP:	1536:rgBo5IrBAnbLpM2/jHm8EfivsZp0yZasM5Ce8Wo0++:4m4c/pdLE08p0yo7Hq0P
MD5:	0322596AE21820D671FB805B0D3C1253
SHA1:	9FDCA2D4A11B845906763B2DB1A95E715E64234A
SHA-256:	2B028E4CE4F21B82ECBF76387762BA92FF853244283B3D272D10330434F0B245
SHA-512:	D3E054A1607D5E0CECFD67F7622459112C62A3FF5E9DA869AE3A7F7E1463869D4947A96E4B0A42DF4A616C6C80F67C31630D96BDF7B39DE1892474D52BDA7D49
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDkvMTIvNDZhNmJhMWEtM2VjMy00ZTNkLTgwZGQtNjBjMzIyMWM4MzdiL05ld2NvbWVyLnBuZyJdXQ/Newcomer.png?sha=e0aec34076deb024
Preview:	.PNG........IHDR...8...8.......l.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......IDATx...wx.....W......n........N.$@...B......5.P...z'$.&@ ...t.16.....V..Jw.....d.........<~.[7.....W;3........................................................................................................................................................................................................................................................................................................^.......N..A..%.K...G...5.{.....).C.....z.{]....qI-....J..-..H=....2..:9.J%.K.X.?..s%....]..$5H..........X...............s....HZO.hIC......k..H...>..(..-.....\|.....).N........(I..9.V..%.)<V...H..vH.........y....U......@0uJZ....K.<..y.C...$.......:..&.....c.......y..H...cn.??.Gb......(8..X..u....c..')d;..%..<V.._. .H..v8........=<..4Q.-2F....{..o..Gb.......(8..Y.s..Z........P....5.....J....@.\.{..I...2.....@..<.4#........Pp....s.rI....&i

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2004
Entropy (8bit):	6.649852126233836
Encrypted:	false
SSDEEP:	48:FKULoNFt7TtzPdcc+zfJV6kG961VMIEzk:F76bzPd1mfJV6kg6R
MD5:	80D9180F91443126F24CAE022495E1EA
SHA1:	FC1044F719AE0E6C3DCD258F2C93889F904EA73C
SHA-256:	FA12FB12E1DE484D9B3D2B0AD0D3FD6763630339BB54E7B80A04705DF28D86B7
SHA-512:	BC2F0479D90F936F23E112D43729AE0D378859B5F167A156E583D9770D01DDA3B3F08CF38ACC0FDA48356C4DCFB508FBEF352A2B788CE0D24634C9023DCB6032
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<......")@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...dPLTE....a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<...........tRNS..,x.....65..D..zM43Is...+....lX.qT1mp:<..w..V......B.'" U.>Z.u..?\|.oA\S.._Q.d....Kfb.y.N..a............W......c..8.....L.O.....F...[Y^..(...*..@.....g.k.%..H.E....=....0/.....2..-..#;...]$..&C...V.;.....bKGD....H....tIME......-A.d....rIDATH..._LQ....($)e+KJ...)K.Ee

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 640, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	100146
Entropy (8bit):	7.98135303566225
Encrypted:	false
SSDEEP:	1536:cBbJHp9JXV08nH8Et09gsa4G6Sk8ht7HFc9m41X2yb3EZ6Q+NSvSrpLKWglrh:cBddXV08nHsaeGhBW84nwZ6Q+NxXgv
MD5:	61A1B29809061C2275E5E4223F551D0F
SHA1:	FC28483B502CF07D6AD711CE312AE44EBAE64BEF
SHA-256:	D1DC8C31EFAB55A777FC2DEA211916BAF0E7E52BA7101D0ED0DC5C31064F7BFC
SHA-512:	5101BDAF3C7FE48BF62497881558897C8D63163F091A3CECE04214C8AAFE72F362C70ED6E7284812485C06D62377579433644AC2E3586CCF1B4DD7080B5A66C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.9.....PLTE..#..7w;.MMMOSWSSS[[^So{cddcgkkklos{vvv{{{.s.'{._w.g..w..'.C3.O3.Sc..C.[O.g_.wg........'..).....7..G..s..w.....o..c..C..B..D..K..S..S..X..b..n..o..s..~..{..o..w...q.....2'.3'.5).5).:..S..k;.:-.5.?2.G<.k..w.....B5.B5.L?.VH.J@.PA._S.ym..w....?.......................'../..?..<._....=..7..?..H..G..K..H..K..[..S..[.....k..{..g..o..w.........................................................................................................................................................................................................................................................................................................................................................................................................../<Pl....bKGD....... .IDATx.}.k#W...M....X.UH.4..EC...f.zgf.M..0..\|....B..1.7..2}..%.n.I...D.Ll.d$.E}.B ...5.J4t....:..9.>NU.Sud.}f..Q*.....;.2.2.55.. ...&.V...l8...L5..0....<...El..D

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	73433
Entropy (8bit):	7.986646668633815
Encrypted:	false
SSDEEP:	1536:XEoa/x9vGAL5IvH95erRrd1dIkr7SAZoambHxWGM+f5Ic:X/0x9vGO+9qdtfSA/JGbfv
MD5:	B84A3DAE08E19BD95753C4E62938C3EF
SHA1:	13F8BF2E1A2F2D36E9130AB9F938CB80F19306AB
SHA-256:	B4C315AD6B0DA49EE80677A39E2971EB7C3C54D948207A62468FADB6BE15C2C0
SHA-512:	84AB9BCFFFD6E7CE7C47585F22F002093E8F829EF87549980FED8CB20FD2F3F8101B8FD296855BD1FFA385AE9E71489F6FB5816C13D35A9E8DA60DC83418814C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......:...5....IDATx...y.m[~.}~.Yk.}.{.o./.KU..Q.[..-.............. .!#...B..0 ....d.x...].....-.,UIU..W...6..{....\..{...}...k.z..\s.5...}...R.(\..w........4.k...k....X.y.'k..>...G...G....9.C..'....#.c....@J....B..(Xk)......D. .c..b..D8..A.......)..8...2..i%...."2..]G.=.X.............1...B..O......../.......>.r...k\|.....Z.6y.......g....5.....{..n.k.}_..ryb~`>....X....9....GS.1.k.BV..!.`.P.J..(TFT...1.c...(.....5.8.........C...C...:.B)`...H.=.)4M.6c-.c....R.@..F..T......_..o..E.+....{..7}.7..M{.&{.q....4....Po...[.>7T..a..s.Y.u.._Y..........}..a....".....i.......R....y....@.e...JI. .D...;.0,.C..L#..7..-wOoc.....\|.$f..@..,......Y....1...`..N.+...[...gb...[...0.....$6.....}.3Tke.s^...9...y.t..z.5.}...k.YQ......M..k..A..3........3......&....:R......X......d@7Y..3%g..F...9c...!..#c(..M..f...3...1.K!..XJ....^........:.1..&{).I

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	4.942373347667344
Encrypted:	false
SSDEEP:	3:qTkIDZxVsJYkup3XyHFeTrAyTKTWKMrBKblbJ4ZNDpVbz2USrGXI9kBbZ6iF4:qTjxVgYkYv3J/14QpcUAVuB965
MD5:	3437AADDCDF6922D623E172C2D6F9278
SHA1:	F69066CF20141AC93418102D3EEE7C0225B8A623
SHA-256:	35DCC382EB69D00369D708708CDC545F3968B68FA5BBE3E728D11FEDD04F93BB
SHA-512:	2DAE5C5C30C6A0E763D8128F2CE1D467EAD432E582AB4EBB68E23991DB08F57490ABC0EED805FD33FAB5503C1737D9D47D4CC1090AE15D7391593FBB295D66E7
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js"></script></head><body></body></html>

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (361)
Category:	downloaded
Size (bytes):	34896
Entropy (8bit):	4.513488206048853
Encrypted:	false
SSDEEP:	384:VttuvLZ/Mkuzx2K6222n0/I93rVBFgDudJBsbZLht+6/D1uBAwAy4lxoHPXxyaSs:0lD20/I9DFx76/Jul/A+LSGnR
MD5:	551A1F540A975FB0F4618A4BBDC7F09B
SHA1:	5B752AE9647AF4AAF123E3951C6C798AD825D4B2
SHA-256:	0F54E3B4ACC470BAE4DD8F70C07701580AC1FEED0C2D42E53DDCDB8C575C68AF
SHA-512:	EDFC54C50B452D61821FAAAB5F55C7B6BC51E08D3043CC365240E251D90C96D8674D73A9C2AE5FA2C32B471661F349428A6C84E481C3242B222287C1A89F85F7
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/javascripts/i18n/en.js?v=6.3.281
Preview:	I18n.translations \|\| (I18n.translations = {});.I18n.translations["en"] = I18n.extend((I18n.translations["en"] \|\| {}), {. "assets": {. "javascript": {. "insurance_upload": {. "add_additional_policy": "Add Additional Policy",. "back": "Back",. "browse_files": "Browse Files",. "camera_off": "Close",. "confirm_photo": "Looks Good",. "delete_file": "Remove File",. "delete_insurance_image_error": "There was a problem deleting your insurance card image",. "delete_policy_error": "There was a problem deleting your policy",. "drag_and_drop_here": "Drag and drop image here",. "drag_drop_instructions": "Drag and drop to upload or browse to choose a file",. "existing_claim": {. "add_new_policy": "Add Additional Policy",. "card_mode": {. "both_sides": "Both Sides of the Insurance Card",. "front": "Front of the Insurance Card",. "none": "None". },.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, description=As seen on a Sussex Directories Inc site, xresolution=116, yresolution=124, resolutionunit=2], baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	46079
Entropy (8bit):	7.961458769232924
Encrypted:	false
SSDEEP:	768:P7egB7W5JJv9AdWJCI/796Gy9cT5Kk1Q5VceFjx6aLgiRWDqD+:PP76JJlAdUCqu9E5unF16/UWDn
MD5:	1B571FDCF1DD44699E644E0850C6F2C6
SHA1:	D4F4E9404489B719B465D986297F1E4AC0C56B92
SHA-256:	900B8A27137B646514C8B552286253177B2AC5C1968250C73CADE0C95E5FAB97
SHA-512:	0CB7832549DD919764559AC226403B99A56F5DA0BCD08740BE8FDFDC8C82B15DDBAA02C9BC3FA0C203239C0B7DCBE1DE07B1CAEF0F2BDC2C8741F66C73A86AF8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM..............)...J...........t...........\|.(..........................As seen on a Sussex Directories Inc site.....H.......H.......C....................................................................C........................................................................................................................D...........................!.."1..AQ.2aq.#B.3....$CRb..%4r.DTcs......................................F.......................!..1A.Qa.."q.2......#B....R.3br.$C.c.%..46S..............?...D.h...A..4A.. ... .D......"._..i......b.Y...H..a2..j5:..P....B.y.V..B..@..* $9:6.y..u_..N.x../-...J(.....\.bV"O}U]...@.....}L.;!s_....yID..r^rJ.LYy..@9Ny.M..9..M.'....P..'c.k..P...Om)..N.2l.%C.i.u.>]..#...i........yJDf..].%\|.ZPRop\|.n...@.$...m~}\|..........l.LR.v.....<.T...iW.Sm.E8....w...hi9h8.I..2.9J..$8..'M........R..;nwp..C.(6..[p.Z.x..\...VYT.d..q..C..o..Tx.KfP!Iy>[l.iR.P.%...'...r....7'...a.....>..YH..wBi.'\..A.L.L\..X.......

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	439
Entropy (8bit):	4.397609226330742
Encrypted:	false
SSDEEP:	12:YiJ9C2e87G8pQXnC5rewAJ+UPptmy9Ypn:YOE2e8Dp2C55s+Uxtmy9An
MD5:	FABF4D336AF836B5FC547E35DFDF0CCC
SHA1:	A696E0A5EB159704DEEE0E0C66981FEC2AC3D880
SHA-256:	9EBB1195D287D35F430D595CF80497938E62A45F255EE0795177F5AE2F9093BB
SHA-512:	0C40091DC864CD68B9BECEF983847BD5E697355EF38A10A288DD9737CF5FCE73E33D615AF1EDA35871CBB7785531BE6C1368AB51FBB1AF2355DC9A811DA9713A
Malicious:	false
Reputation:	low
Preview:	{"feature_flags":["killswitch.process-idempotent-physitrack-webhook","release.charting-accessibility","release.charting-text-search-improvement","release.feature-flags.rest-endpoint","release.gift-cards.fraud-prevention","release.imports.file-validation-worker","release.new-psychology-discipline","release.patient-portal-receipts","release.payments.server-driven-terminal","release.private-api-multi-key-support","release.rich-consents"]}

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	46281
Entropy (8bit):	7.983040321089759
Encrypted:	false
SSDEEP:	768:PgT9NKLU7CCWANle9uRlevrWO1oNPHBMAIWRBIUuXk/qmCRoWbny3w:4T/iEXesxMC/BcEInkhCNbGw
MD5:	1088C979CF8A8B675079ABEE13625DB8
SHA1:	0A566B4F41030A558092EEB8B78ACAC21344065E
SHA-256:	49DF16E61471E368BBA4BA5B3486E3651A5B3D2009CB5C31D76553BB6D0F88C0
SHA-512:	515AC409457ABAF08AD268B7B557373F9E5F0051C290E6566C6457CAA5062B28B4205651F042523E53BC72086D9EF9436A2C3656AEFF36DA4A5881085F9897E8
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDUtMTgvMDAwNTIzLzkzOWMxYzFmLWUxYjUtNGExZi04ZDY3LWM1YjdhM2ZkMDJlOC9EZWFuYWhfSGVhZHNob3RzLXJlbW92ZWJnLXByZXZpZXcucG5nIl0sWyJwIiwidGh1bWIiLCIxOTJ4MjI4IyJdXQ?sha=d02960a4e105d01c&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................tIME.....8..\.F....IDATx...y...y..~.....w.[.T..%c........&.`;$`..@.$du...4.@w....C.d5.Vwp.!..B..<..[.d..JU.;..~.....{O.N..dn...u...s.........;..x...q<...8...x...q<...8...x...q<...8...x..`........7..$....JI.........}I....U..~......!8.R.....(...R.)B.!.w..@..!.c.;...!HR.). }......=R.8.~....!....Z.U:]........./..m...yA.I.X....=.........0....$C...c.>@.......S...cD)..B.!..".Hh.@...........V...q..2.....!.....QR...R..e.....:......\|.^9..$....q..LR..R.KbtRJ.@....^..&1.^....I .)...N)).VFJ....!..e.n..\....>..M......%...?....S\.vh.t.....T..T.B.+.......v..R.>%.=%..........0.tSJ.9.......V.C...... ..x.}hQ\.R.B:.>..VRI...).1....1......4f.....?~.o..'./.... X..\...@<yyg..x&....v.[E..y.!.Y..F.TG;h."%.0..D....(.BxA.UU.S5.i.m....b..j?l....oy...<..bJ..t-.x.c....G.}....D..).4.$.$DL..VI..z.&.^.......7M<N..I.....).b..K..e#yqh.o...o...[C...R....-.{..Do..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 405, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	18309
Entropy (8bit):	7.924199070001516
Encrypted:	false
SSDEEP:	192:OKzTK+irFIwu0y1GlC/UYMAFwc3P/O5MIFHZB/Vy4rcwKQ8s/bcVEQbNgjLqR7tl:s+i3uNgM53f/KzZB/VRVJbnGN+8+6pf
MD5:	55136D7BC4A9696570D1FDC6DA164063
SHA1:	E3F6F0A6567C0756340E84DC302E0488F1B2A242
SHA-256:	92025D14E4BD359A3EE5E6AD3FDC3310C84714F4434814CD2093B02646C2BC10
SHA-512:	7602CA5DE6F18DA591375136428E4F12F6FD8B9E201A5AF9EDB1EB6049AC7AF48D1EDA8FEC760CAF529F6B5DDE5FE1AFFBD7EEA3DEE10A662857B6CA4FBBF061
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............Y.....PLTELiq.....................................................................................................................................................................................................................................................................................^..F..>../..,..,..8..C..R..t............................................z..1..-..0..2..1........6..U.....?..3..@..P..b.......X...........u..k.....I..-..r........B..`.....=..9....V..;......9..n........K............e......<..........4..j........H....N..h..w....Y........................M.........................[..\|..+..)....~....p....@......E..b.....7../..U.....d........k.....g.......................K..j..6..l..U..;..........v.....8............tRNS.......................... "#%')*,./1254<Oerx{F.............X9..6..C.;..K>AY.D..F.L.G.................................................................................................

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	71067
Entropy (8bit):	7.985179024248109
Encrypted:	false
SSDEEP:	1536:C9NK2S+sVvSg0AWg2ZOAOQ0gGwUBC6XX+Oe7A6+HcNVbJg:0Nd6VvS3AWQAOQ0gGxX+OB6+HcNB+
MD5:	09F7C490B77831331077A34084D50736
SHA1:	BFB6AA15BEC662768FFF4AE574E30339954D100B
SHA-256:	9E7179938DB4EDD2A5A2723D6DBDC8F92849C07409B3B08C39138DEB46BFEC2F
SHA-512:	DFFEAF760FBF432CD674D00E364713EA80F16CA336B16EA65EB247A3BA3148F15EC1648B533338861ED30CAE3022437C91A33452326AA5FFF781DE95706CE95B
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2024/05/29/18/25/52/8aebf9dd-6449-45a0-a1e9-f97a64395678/file
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......8........zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y...}..~~...{.:..+K..y.`....6cC...`...`......+....j..B.Y.`....0.....1x@.e....;.{.:U...}....={.c..V..J.{..J...SU..}~.o.....<v..............l....q..8??...\|~.^...n.N.(P@.XAD.!.B ..4E@p.......t]O.#..9.;D...m.......I)3N.....`...=%G..R"]gi..1.%......s0..-...{R.......8.8Z.4.SJ!.).d. .R0. "`.B.XG...nG...k)..6.GGK...{.."9'..Y..&rN.T..9.i9;.b.;.w.."a..FX-;.....s.\."X..3.3.y..Xk...,...:Z.^?>../f....

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1886
Entropy (8bit):	6.658647029435398
Encrypted:	false
SSDEEP:	24:Px6FqelMEJfCmpKPQMBMdMYyEf91vq0TbOGR+8GIj23wC1j50zRNEMFmI:J6FqHEJfU4Ml70TS0fGn0VNEQ
MD5:	0F1A2D5C7CAAEE8EB78F2FB4DAC3DB82
SHA1:	3E8AB0A3C73AE63870F3E395AB693B763D427019
SHA-256:	E7A06B779C7554806C62FDCFC9E066F5DF66A9B9761478EC7C5FC3857203F179
SHA-512:	49F8C39F3DCEA6285323AD2B19D6B764C03B6A11F62F1ECB7A0D85F8119F1652E103B94C7992DB58B1B35BCB4F908F7BE49F4F1F1FDD1CB477A392A4F24FB3CF
Malicious:	false
Reputation:	low
URL:	https://livewiseasso3873.clinicsites.co/df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMTUvMDYvYWIxYWVmM2YtMmY4NC00MDUyLWIzYzEtNDBiZmFhMzA4Y2Q2L2lkeC1pY29uMS5wbmciXV0/idx-icon1.png?sha=a2aaeccf5041060e
Preview:	.PNG........IHDR...<...<......")@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...@PLTE....a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<......C....tRNS......)/..V.^.\.X.rj.Z.............[..........Q.1RL7G.@l..........AH...W+o..p,..m... ..*n.-....U......................a{"?=(..'..DC..E......%K_]..z.d.Y..i....s.k.4f..vM$.&...:9t.~gm.&....bKGD....H....tIME.......o......,IDATH....;TQ...;...,...(e2."...R..hH....HY.].}.^..s.\.2wf.=OO..w.....9...^A.o

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	85916
Entropy (8bit):	7.988883959794354
Encrypted:	false
SSDEEP:	1536:F0XaTW8wNiRcKHnzTiF8GEjWvT9O5tZPTJBdjIZyvvvbRCOFOLExbHZwwKaUjF0K:FGyWtiRtHnzczEiLsJDLvvvbRCOF3xZ6
MD5:	180F80EDC9011F8C9098D3C9680DD9FD
SHA1:	C22A316A71C6E35BEDA71F97E2AA5A32855E08C7
SHA-256:	582C651780F487A1947ED5E8FB7738438A7F570B12A5CC2D421F5612431DAC4D
SHA-512:	4A17E70061DC5A862E6ECF7B674594112920F107E40808F78DA461145310AB8EC2CD04084D89EA6B3481CF5D349E76CE57E873A8DADEED630A143BCA380DF45D
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDUvNWFiNWQ5ZWYtNTdjYi00ZWIxLTk1N2UtZTczZmU3MWZhNGI1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=a3b2a23b5ff3b050
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME........ogH....IDATx...W.,I...}..=.&.$.w..1...<.... "...1.}..9g.pb...f.;..B.....%On....Tu.ZKM)................._./.o...;..O.....D).R..9b.\/#.`.....9..).....B.T2K.`..<3O..u.9......t.X.4M.....:r..k0.......+.:nnn...c-9gRN.c..b..p8....p>..9.yOZ".4.s.Y..\.g........dz.w.=......}..a...........b.X...0`..XK..a.BN...qY..".#-...c$.H&SJ".L..r....`.c...JJ..PJ.ZK.....B...P....J........Rf...1....e..../c.$r..#9.nn...G...g.qd.......=...#.:..Xk..c..z.....=......o....._......\|.....0.....vy..#/............_.^FB....c.9g......[0%.m.EE.:K.\.9g.ybI...P.....{....}O...,...B..yR$-..g.q..p.a.....2E..u.5....i.....t8k...i....8.%3t=..-.4....v.....{.O.....a..td..p.b].Z.s..<...q.`u.[g.d...7....C..^..gO.\"9..rJ...d,...9.........k,......H9Q2..&..`-.o...'8O..r......#...J...{.5X...}h.......f.V.Ur......+....;>\|...p.t:.B.}...q.R..<..............._I1.wrs..E6.2....3...X

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36169
Entropy (8bit):	7.97784541173813
Encrypted:	false
SSDEEP:	768:JmyxQzEEFNPpDjMDukSbMiKNn15x9aeChtEvsF4acM:JQEoNkWKN1d7ChtEvsuU
MD5:	86BE4E44150164A26D1EAF5DFB46D5AF
SHA1:	B02639E676D9B3CA5FADC5546CB19763EA5D1876
SHA-256:	E7D1A4A74E40B7853F675F91E21590D0D9C99C7DE35F7E7695631D5EFF5858D5
SHA-512:	01BACAC9C16606CEEAE3B22942D99A9399F34CE81D3B7E6243F9174A8D55E0C81F2C6BAFB3BFE2528E55BB8BB49BB6BE7F0B81A49D4F17E6AF407A8DD5C21008
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDYtMTAvMTgyMDU1LzFhNTM1YjdiLTdjNzAtNDcxYy05OTNlLTgxOTU2NjliY2M3ZS9VbnRpdGxlZC5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=63bd78991dd505b8&for=livewise.janeapp.com
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8..\.F....IDATx.....eYv.}.p...1...+kbU..,..L..I..-.h.2.-.....h.....F.p.0.4.....[h.....MM.A.bU.Xsfe.T9FF..p...Xk.s^V.E.Y.x........=...^...]&.y........<Z.....9....^.....P.G..h}..#.x.>...<Z.........z....z=r.G.C..9....^.....P.G..h}..#.x.>...<Z.........z....z..............C`.{.8... ....p.c..59'...c..E2.o....1`...?l.....t...)W...H....!....7....>....1...q.wp..?..\|..?....c.I).X,q.C..".iq..c$..q.24M....3..0f.<....L..h...#..S.L.a.....3...=..........g...Cd..c}qJ..g?.).n.8.,.{...9g.......e..`.....].....c.!.....{..X..M.......Y..X,V......'_...O.r...1.;...=.M^..Wy.or.w..N.v..3.s.M.......?8b.3....C....C......>...x....sNN..m.T .6-....k....7os..-n.z.'.z..O~...n....Z.A.+..9..b.q..;o3.[.\|........+...8..v;v}......9...[..E.N.q\|.&.7.........%..{.{.....DB......")g..8......<.7.}.....88<.m.\|.q...\|.c...I.\|...4.....#U....R..7x...p.....s............1.c.[t...8.4m..

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	71067
Entropy (8bit):	7.985179024248109
Encrypted:	false
SSDEEP:	1536:C9NK2S+sVvSg0AWg2ZOAOQ0gGwUBC6XX+Oe7A6+HcNVbJg:0Nd6VvS3AWQAOQ0gGxX+OB6+HcNB+
MD5:	09F7C490B77831331077A34084D50736
SHA1:	BFB6AA15BEC662768FFF4AE574E30339954D100B
SHA-256:	9E7179938DB4EDD2A5A2723D6DBDC8F92849C07409B3B08C39138DEB46BFEC2F
SHA-512:	DFFEAF760FBF432CD674D00E364713EA80F16CA336B16EA65EB247A3BA3148F15EC1648B533338861ED30CAE3022437C91A33452326AA5FFF781DE95706CE95B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......8........zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%*J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...y...}..~~...{.:..+K..y.`....6cC...`...`......+....j..B.Y.`....0.....1x@.e....;.{.:U...}....={.c..V..J.{..J...SU..}~.o.....<v..............l....q..8??...\|~.^...n.N.(P@.XAD.!.B ..4E@p.......t]O.#..9.;D...m.......I)3N.....`...=%G..R"]gi..1.%......s0..-...{R.......8.8Z.4.SJ!.).d. .R0. "`.B.XG...nG...k)..6.GGK...{.."9'..Y..&rN.T..9.i9;.b.;.w.."a..FX-;.....s.\."X..3.3.y..Xk...,...:Z.^?>../f....

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	232772
Entropy (8bit):	5.527665321332166
Encrypted:	false
SSDEEP:	3072:LjaiJ9iVYZLyFlhf3A0ljnnvLMzU467dbeOKfy4WqM0bukMli:X+VY9yFbVzymTqM0qkMQ
MD5:	4B38B963E9ED5F817D535A2ECEBEEF7C
SHA1:	BC9ED34D4A955DFFFF4C52CED51852380A31C04F
SHA-256:	7ACFF29511094D1245679F855D0A364CFC48856245F5763051176C50118CF871
SHA-512:	4212741ACD4B68D5A6917AF12E981CFFD9D8774A5E7434F094AA7FC9296A66A1DC2C1234A4605AAC94185FB7F8E31A494FCDA84231D3D6759B3C9D22DA95CCC3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-16526066952&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	91020
Entropy (8bit):	7.985035550381465
Encrypted:	false
SSDEEP:	1536:u7hzCG3rVLuqlrMp5dLh3LqaSg9z/0uGifND1cjQrrS8JbmyeWdBgDddLC9KE:u75jLuqCxlGaSg9zGifND1cjkS8G2N9f
MD5:	6C8652924E5C940CBC6EDC4035364344
SHA1:	F1B078CE0C3B036741A29189B976AF19DC38DFD4
SHA-256:	D71BFFFC78E5EC23AFCCD9ABAAD74258BC771A97C124541694B5BF6D0AC9BAFB
SHA-512:	826DACF3F97D65EBF92DB9A642140208E7D15E9C29E3DAFAB15110012FD919A251D019815A1FBE131F1BD8C6325448F1B9BE806D9F59582B0109D0757D8E54C0
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDMvMzcwN2U5NGUtNGMwMC00ZjYyLWEzZjItOTcyNDA3MjEyNjUyL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=548868e047346673
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................tIME......,.a.d....IDATx....m.u..f.....7... H.(6.)KGY.GU./..o....G9..p'K..d5.(."....@"..y...n5...k..`9...@..B\.m..g7k.1.7..}......w&...a.:.^<.........x..k.Z....].r......z.d.....V...(..<z.....3.......u.09.R.XCe-...1.c,...M..9....s..5.......f..PJ.2......f..HIA..[GSUT..%.H..rb9.c..9E......zO..R.l.".,_W9.6..X.b.a.a..$.!...b..1.`......u.8z.~../.z.G.XoG.g......C$...G\|.,g3P..=Ze...y.b.h.o....w.....~.[..}..@....Y.f.........s....f.vs..~....}O.,...#1F..>.c..>$....5.r^f0F.P.PZ....( gr.$m.(.Rh@....k4JAJ..".:cp...Z...<.1`.Bi.....3FYj.....Ai..I).b.q.k.1...D.i.GL....`..!.} .De..X.u.....1eB...QJ.{..9)RJ..@[;..@N...1.hk.C.t.%&...,..F..5...1%..Xk.}....G.}..o<}....)&..*.U..9.\........va.C`.w..O....~.......u...._..B..Bk.9.1P9K.b.$..F.."g..+c.".%.LJ..........@....(2J.......9..AkH.P...$.HA.2.3.....XmSSU..-...".@..k.V)b..hi.].

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=2208, manufacturer=samsung, model=SM-G973W, orientation=upper-right, xresolution=210, yresolution=218, resolutionunit=2, software=G973WVLS4FUB1, datetime=2021:03:12 10:15:08, width=2944], baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	21699
Entropy (8bit):	7.865742524859515
Encrypted:	false
SSDEEP:	384:XadeBS4o1UFYJARncaqw/doXPSO0aCZVznOyO63pEIjyMMWZ/BAIggHJzvkrS:XadySh1UFYJ+qUdoK4td6a2y/PIhHJzn
MD5:	230BC94572C755E33FA08C11DC3162BE
SHA1:	7B1059C84FAC89FED8B7D39D61E014D64803609D
SHA-256:	82B330D8228B7201ABED7F3C4EEC383D4D86C47531A65771CE026C80EBB9FB93
SHA-512:	53E1450E982638BE3FEE1D7C499C86135815243E15598BB84D933A66AD68582B88A0E1DA7B582E9A4C50A613BD3E5B3CAC1009CEE050057DFE571CEF11BD25DF
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTEvOTk3Yjg5MjQtN2QyNi00OTE3LTk5YmItOTgxNzRkMzJjNTIwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=f297d14f93e8ab06
Preview:	......JFIF.....H.H....>tExif..II*...........................................................................................(...........1...........2.......................i...............samsung.SM-G973W..G973WVLS4FUB1.2021:03:12 10:15:08.H.......H.................\...........T..."...........'.......}...........0220........ ...........4...........H...........N...........d...........l...........t...........\|................................................................................................................................................... ...............2021:03:12 10:15:08.2021:03:12 10:15:08.-05:00-05:00....d.......x.......x.......d...F...d.......d.......d...{...d...J...d...L12XLLD00SM...............................................................(...............................N;......H.......H...................."..............................................................................................................................................................

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	4.79793265427725
Encrypted:	false
SSDEEP:	6:tZViARwM7LK+WNUXP03oGJuvGJF/7GJhDzQfUk:DEARRLpWCXM4GJ+GJl7GJlz/k
MD5:	8924BE9F5EAD4AD7DA294D6E49B2F04B
SHA1:	07DC4985E000D3652DA0A019CA88524A1D8A124A
SHA-256:	72A980CF14267657C863BA73D3033814E028DAE4381CA0E291DB6EE642342BE2
SHA-512:	23BD7420042D492D8A4C61B463DAB5BB4C525ADE3E320FDA0724187A3653C9D781BB5D6E83B2A9491E35F8B2B6219473FD8B5EE25F58E66D590EFD1B98A23D16
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/assets/overrides-72a980cf14267657c863ba73d3033814e028dae4381ca0e291db6ee642342be2.css
Preview:	@media screen and (max-width:991px){.btn{white-space:normal}.video-background{display:none}}.grecaptcha-badge{visibility:hidden}.recaptcha small{font-size:75%}.recaptcha small a{text-decoration:underline}.recaptcha small a:hover{text-decoration:none}#configure-dns p{font-size:15px}.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	104364
Entropy (8bit):	7.9868187201974985
Encrypted:	false
SSDEEP:	3072:VcRTMq9FXVIGy8wRVF+t+WSwIH1tqGr3q8M0tA:VclMQIX887aAH1Q7
MD5:	B53B919CF26B422D06BE09AFE2E7FD25
SHA1:	98E03882746A156BE24F919D7BB2EC56FAF7FCC4
SHA-256:	90B9BD8F450EB0D34D4DC893A567B6ECCF8FCBE13798F67E8C092A69D7C4F2BB
SHA-512:	57C23E3BA12DECBD36500F22BA9D0E8C71DBEE7BE11564C057A752D03F379D3EF1B48EE63665D6E6FA7E48D211880B98B922216E0E9E0DBB6D230E6D307B784C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME....../.hW.....zTXtRaw profile type xmp..8..T[r. ....{....}.....g..-H.q2Uk._...p......Q.%..{..`.+..M...a..x...s.0...(z!..YA....Wg`.WmE.O&..$...+N.Q}7...`.I.o;.9...l.z.@....`..p.......%J... .....j.U......+.J..<..4..4.tt..p....]x.f.>......W.. .r..x...Q'.c.r..F^_v. .d..K<.'..M..xC:3H.\\|....J.;....4.QW......~..V......;k....)2Jn39......=5.}[.4.G.+..U7.;.(.4!......Y.l9p&.....,w...f....I.[.%..v...........uY4.FG./.)....?...{...h..K.c.c...8Mo......].FN.......1s.....IDATx...w...U..vz...:w.YYH.,.."..c....<..6.q.....6..p...1..q~.......BB.....N\|.N....t.1....TK..O=]]]u.T.w.k.Ap.......;\|........x..g.W.^>;8......b.\0.+..1"..]....=eU2...`6.QV.]..u.)aww....!.X..B.u...Q.0..Y,..F#B....R1.L...g4.!.....8.0.0nB.,.+...(.JI...{...".9.....CY..)...*K...]........V..RJB...Za.B......!....e4>D.n .4%..<s......W...n>w.....].!..%...}.O.}%Bo.1._....q.r.. ...,UU2?..j1...J....`

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	314000
Entropy (8bit):	5.564716208650033
Encrypted:	false
SSDEEP:	3072:dW44gTnaiJ9iVYZLQOFlhf3A0ajHnvLMzU467JXDBin0bukMYM/AA4Lm/qHn:A4nn+VY9QOFbq7HVin0qkM//AA4Lm/qH
MD5:	345E4D835B303F4BD3A48F1B1FBB0E1B
SHA1:	CF70CC291A64B959643C473B8B9BDD1504F91AFC
SHA-256:	99F70616B7F6C58C1FED4DE2F81F5A6A5A880B5CF838B9652A617395B1F7138E
SHA-512:	575DEAF40AE657436EB79D8BCA71BD4F43C2CD8913774B139460EF05A3A49E11F3F3F9A4E18117025351E500D37492D80A336E8B16951168B7F34EBB66A120A6
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-52CJ0NGGB7
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":f

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2621), with no line terminators
Category:	downloaded
Size (bytes):	2621
Entropy (8bit):	5.857184175387004
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08LST9ulltcG9QkL26:aJd6SUtJfNrVlCWWWdtqjZfSJutLj
MD5:	8C0BCF52C19165A9A31EF0222D5E6C34
SHA1:	6C73AB1B78747B64F7B8940BBB2856D109A4D66E
SHA-256:	D55C0C624866A9DA13EDEE4C854DEA3D2913D31B3B9D0C99D5579976A19FA654
SHA-512:	45536ADCB403498838D0708DBAD57C13C01CA78FD9380DEE779A0568E5BA63F34336AC4A21D4399B22978A31C4B84AC03FE3B97E9A3D113C4758D88AAF4D4967
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/16526066952/?random=1720126553997&cv=11&fst=1720126553997&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fblog&hn=www.googleadservices.com&frm=0&tiba=Blog%20Posts%20(page%201)%20%7C%20LiveWise%20Associates&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2599
Entropy (8bit):	7.8062518694225185
Encrypted:	false
SSDEEP:	48:c/ihq0FxFEA4QmqgjuNUeHreKE9HlKjbU7zT1VTEH:c/iFNmVjuPa7ygfT2
MD5:	4B93EECDFE16A9FF0FE59FE608739157
SHA1:	7CD6D92E13A8103013B677431AD7CBEE3327EB0A
SHA-256:	F6CED74C14E0B42DF4E0F2DD5C851ECA6485DEDC413F0669CB5621F8DE0271AB
SHA-512:	680FD1569E97FC6A46D7A9EB6812AB1FCD42218C6ED0C1366A1708FB5E743BE9BDFC764052AB2CA55FF978EC5746C0CD8BAD9A1CAB23A18EA5A2DA124FCA4023
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDYvMTAvMTcvNDMvNTcvNzFjNmEzZTEtZDhjMS00ZmE2LTk2MGItMWI4ZTUyMjdhYmFmL0RlZW5hIEhha2lubSwgRC5DLiAoMTIpLnBuZyJdLFsicCIsInRodW1iIiwiNjR4Il1d?sha=54b88a30c58378ae
Preview:	.PNG........IHDR...@...@......iq.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........+......tIME.....+9......IDATx..Z]..I..NU..I...$3q...A.].V..,.../>...!/...>....'.(..F. .OK`U...d.a.}11.`6.d~.{....\|......;so.Ip.L.L.T....:U..........H..K..aqq....3KKK..v.u...(.....^.\|.....q...w..K.Z-...+'...C.....T2=.....?....o..Hi.........}.....A..i.(.F.~..7.\Y...?..Nm.VPvsuu.....t:..q../:..,...a...k.~z...bck+H..S..o.....V.X..v....{..}.......Q..5..g_.}p.R.w..$.tU........W...M..@.Q.!.c.....v....1.q....y.I..Va.n........v.Z+...G#B`..QK....0.....@.0.FA.$@<.)5F...{...TB.m:....,@.IT.@.@...8...W.@..-.Ddd#E..o:..4.P ..j...$H...#.... ...t.D..X..B.t..{Nb.pn..."R..P....Qzc1......L/.@.8...2....jqq..O.....?.n.?*"tmQ........Q.._.z...J.`.=.9......{.N..r...x....2..!(...K.\YYyy}}.;.RfU.z..J.w.8^/.l....!.... "...d.(0.. .....z. .c.....BZk...q9..Y/e..%OJd,..6....rw.4 Mi.$Q.]..P.0g....,.@....'..`.CXtKn..D.a.......e+..1=`..n......."...]...+.&..0...)..Y

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	463163
Entropy (8bit):	5.014109670395995
Encrypted:	false
SSDEEP:	6144:7mjymnyamwbTRyXITPedeiNFBARNH0D4cN9Ix:7GnyamwbTRyXITPedeiNFBARNH0DrTIx
MD5:	5E40491937E1649A1D5B4869850B6218
SHA1:	3320D7E79E6DE2008909DDF7E42FD0164D461882
SHA-256:	C3194C83F6748BEBD5712658B9A9DB259B6A593F04EB0DA1A9F19F20D5E4A256
SHA-512:	79D6421F4617BC9B79EC78FADE22F170BE29DCF21989D2F1609FBCD995B1F72075CFB518C01FCEC1B2D67FE339B0A90AC8164ED342615669B257B99BBF56C545
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/application_styles-9297b9cdf5cc56e89ca7.css
Preview:	html.standalone .hide-standalone {. display: none;.}../!. jQuery UI Bootstrap (0.5). * http://addyosmani.github.com/jquery-ui-bootstrap. . Copyright 2012 - 2013, Addy Osmani. * Dual licensed under the MIT or GPL Version 2 licenses.. . Portions copyright jQuery UI & Twitter Bootstrap. /.../ Layout helpers.----------------------------------/..ui-helper-hidden { display: none; }..ui-helper-hidden-accessible { . border: 0; clip: rect(0 0 0 0);. height: 1px; . margin: -1px; . overflow: hidden; . padding: 0; . position: absolute; . width: 1px; .}..ui-helper-reset { . margin: 0; . padding: 0; . border: 0; . outline: 0; . line-height: 1.3; . text-decoration: none; . font-size: 100%; . list-style: none; .}..ui-helper-clearfix:before,..ui-helper-clearfix:after {. content: "";. display: table;.}..ui-helper-clearfix:after { . content: "."; . display: block; . height: 0; . clear: both; . visibility: hidden; .}..ui-helper-clearfix { . /display: inline-block; */.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 670x350, components 3
Category:	downloaded
Size (bytes):	67216
Entropy (8bit):	7.963525081093338
Encrypted:	false
SSDEEP:	1536:SJ+7RKLF+NKwsJ4SimRxwzhFNFPqh3wYxIVZbJyQ1pzhNrCbqd4:XAR8lsJ4Sl6hXKu5vhl4
MD5:	E53D0C18C0E8E583B734D7ACD54C28D0
SHA1:	5D107264813A3930FBEF5678E235C8D081BEBF1A
SHA-256:	83B26F5F68414E41ADB3833ED136B21786C78A055664A80DA0A1C1A1BC493CFE
SHA-512:	B10763C7577A45A7AF9A34CD937393F0E3B15A568E6ADB5371B885323C24932E673769B2134F8D65D3C61DC538A2DBAC44AB0B16042A253177E047A344274EE5
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2024/06/01/18/19/58/9042732b-3e9c-4dd8-927d-343bc7ce15e5/self%20compassion.jpg
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................^..............................................Q..........................!1.."AQ.2aq.#BR...3b....$Cr...%cs...4S...&56T...D.'...................................8.......................!1.AQ.".2aqB....R....#.3b..C.4r............?........`....+..kD`.;.Vt......`....P...@........(.P...@........(.P...@........(.P...@....F.lQo...RT..oII...J.N..XM}.2Db.....\|..;...7..^^3X..i..s.Z...fw.\|.YH........K%U...8VE12.........#=N(..r}...(.i..........P..........3.zx,.P.....RG........v4..l3.{...Y.-[)....g...)...b.zy..q.V6nDa.eY?.4&'..Y;\|>..3j.P..xg..U.c6..df.P.\|t.....A^.q!...[n.AiJl.L.#.Sh..2.{D{.J..$o..IW\.'..k..V.8.a].~.@..Z.....;..V......<.&..S..2..z.P.{K......(.x...q..F.g.78 .{.Ob.Q.5..1*^.@Ci[.\.nV0.I.&..\|.z9~T.~.NPP...@........(.P...@........(.P...@........(...M&..Z...........Y..`.`..$..;.....v&...T........i..

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2618
Entropy (8bit):	6.8953334601054905
Encrypted:	false
SSDEEP:	48:lQv0vDFq50BERoch6BEyVTFE8bD/WyaYmaB3anGuVUEBh:lQv2jGRoch6CWT2QDeP7at6
MD5:	23A5182D6257862CA350BD899DAB3A45
SHA1:	24FBF78830DB3476C75F04A4BFBBDA764C172D83
SHA-256:	D28D28A473431FA68706951C9A3223A44349808E680B9CDC77D2B14E21F773CD
SHA-512:	B5D91CCCFA6D4C3B0451E391ABFF16E6F729A1789B0F50FE7A11514BF3AFD91DD050398DC4952C31FA41E296FD0152D8B02AB0BE9DDBF8EEEAC0CBB74051D2F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<......")@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE....a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<...........tRNS..D....H.x...z.G.E...N..Q.......LO..c..^......`a...8/....25.W..._..[.R..........K].h..d..+"...%(...S...P.......gi...b&'.....sqtr..$..\.{..\|.v*...},Be..f?.1..:.......w......

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	59942
Entropy (8bit):	7.9865939770444
Encrypted:	false
SSDEEP:	1536:X0+Zbry6N4RtreAsBS8yjRz2+4bPWT+eQ:ZK6N4RtrJsBTytinLWT+h
MD5:	89D7AE9153BE55B697EE9065E057A281
SHA1:	DB6B8A5DB0BDC8895DCF549ECF1C061D25CAECEC
SHA-256:	B01A07DDEA6E21C0B3852ED875D230E85AB3A5FE9658EE07E678FC9AFC5BEE22
SHA-512:	3CAA56513F431E1434093D0F8570F0841AC177778F3B2B51701858E0829DEB20BE46EB328A33D5E81A319C0F2C80A4FFBF7F37EFC9A6BA80BA9EFAAD57A3AF9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+'... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.....8...Gm....IDATx...w..i~..~...{oD...,_..Fj.h9...-.a..+1: .+.hwa..p....]vfg...............i..........w.}.....y.l. ....\|.........}~..3_#b......<].~....Z....`}^....`}^....`}^....`}^....`}^....`}^....`}^....`}^....`}^....`}^....`}^/.Z?...?m}..._.{.y.s..]..A..EJ...G~.....Z..K....o.%..7}....,.........=...]..k/.._.M....r.J...+.."F..^...RxiL.y.h..A.?;...y~.....".....k...Z....Y...}?..u..'.8.K.\|%.R.2. .../...!].AIb..+..1...j..B5TE...51..].>~.W\|..... .>.......C.....o.?..'.a...TK.,....3z.w..>..h.Q...!..)D.@..R..{#.^8w..Z...qgo....>....U...I...w}^......?...~\|....m......~...._...s).......#k.".....8.b.N.o.W.V&Dv..R)=.(..h.\..\.n:....6m{igg.CRJ...V;w.G.r.?te.........w.G.....o.....x......?.....w..../.y.m=Z[...m...}....]_t].7..L.."1.m..v.Z.!}p....~wwwc..F.G.......V.......f.........g.)....*.p....PD....>...w....r.....u.?...gx.... ~..)~.....j..<1..Mse

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	24620
Entropy (8bit):	4.967368920302414
Encrypted:	false
SSDEEP:	384:9H5R62tKLILgp+g6lih7nZxQZWTz4YUkogUQb:9Zw2wLkgkg6Eh7ZdTz4YUkogUQb
MD5:	4E17E009C956BB80A3C8F0069369D73E
SHA1:	705ED6E3151089C594E2740E23AD3E8DA7FC8AAB
SHA-256:	6A3EBF7C9796CBF1F922B45AD19E97F95CD50434E324978C031CCCFF4D241590
SHA-512:	50FCE3384E2624E806712033FD27A41269523714F27D6832DAE0A8AF7023ACC7BE286D14F238B2FE577B44DB744BCB1CF31A4EC10A90D5D77A9DA740E5BD8849
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/assets/public-9297b9cdf5cc56e89ca7.css
Preview:	/** List group overrides /./* Badge overrides */..toggle {. position: relative;. display: inline-block;. height: 23px;. width: 42px;. font-size: 12px;. line-height: 1.5;. color: #555555;. border: 0;. -webkit-appearance: none;. cursor: pointer;. background: 0;.}..toggle:focus > .toggle-content {. outline: -webkit-focus-ring-color auto 5px;.}..toggle:focus,..toggle .toggle-content:focus {. outline: none;.}..toggle .toggle-content {. position: absolute;. top: 0;. left: 0;. height: 100%;. width: 100%;.}..toggle .toggle-bg {. left: 0;. top: 4px;. width: 40px;. height: 14px;. border-radius: 20px;. position: absolute;. display: inline-block;. -webkit-transition: all ease 500ms;. -o-transition: all ease 500ms;. transition: all ease 500ms;. -webkit-box-shadow: inset 0 0 3px rgba(106, 106, 106, 0.35);. box-shadow: inset 0 0 3px rgba(106, 106, 106, 0.35);.}..toggle .toggle-btn {. position: absolute;. top: 0;. left: 0;. width: 22px;. height: 22px;. border-radi

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	15292
Entropy (8bit):	7.890697765187456
Encrypted:	false
SSDEEP:	384:/K1386Tw1vteR77H7uOWXq6qYSY7KbXvmY4RF8THeGtl/JQ:/K1etuvuOWXSKGbp4ROT+GD/JQ
MD5:	673CFB26645ACB2A9C7F638158B93B99
SHA1:	D7AA698F28BB0861B2F6A0ECB7DA553C2E2FDADD
SHA-256:	0A6DF2BAF285FF1DF6648D8D8D51C077548E4CCE2CBEC9D452ECBADEBB24F591
SHA-512:	A71B75D17EC7F2BB52B8F6D7453C387C9C518F0219945F38CE2652492BBB7B1977343C9BC30C475D97CCD4DA6A7BB2962355C41E467E2674E26E8207537DA448
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTIvZDg0MGYyNGMtNTA4Zi00ODM2LThlMTQtZjUyNjQwYWQ1Mjc2L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=0ad5067c52cbc75c
Preview:	......JFIF.....H.H.....@Exif..MM.*.......i.......................................&.......@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C............................................................................"..........................................G........................!..1A..Qa.."q2....#B..R..br...3C..$%s.&56ct.................................(........................!1A."2.BQaq.......

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x228, components 3
Category:	dropped
Size (bytes):	5516
Entropy (8bit):	7.909436039745196
Encrypted:	false
SSDEEP:	96:RhLLc4PRnwnjExbcyfwpxsO2cojUHTEP5kHcbMRe6pVEVHqaLHTfHTJ:LzwjsfwzsO3oKTIFbaqI+T/TJ
MD5:	59D15C815991A2808850D5AB02BFF46A
SHA1:	E13E143F61767636ABDFF9C0E8BFBDE0ABC9B2E8
SHA-256:	4D36ADAA4668D54F9BCEB6C7BB217951BD507B26C75AFBC615F7DA70E2ADE258
SHA-512:	F808EF67FAE09C217B22C5DBFF3C47840B287C356E64CF02A19A41CBC1F6DF81768AF3AEBC1801FC8D1B978591A5AC292D06B1F5A1FEF9E247100D8777977BC4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................7.........................!.1A."Qaq..2B..#R....3..$b.r..............................$......................!1..2A"Q.3aq............?... ..B... .._...8......b..tt@.......4..v..vA.,g.`.....tk3.h.3T..s.o...R... s.5c.X...Q.7S. ...@..P..\...B...%.=\.# ./....8.S..U..y...Z...u5.1..c../Gz)N....d!.J....!.@....!.@....!.@.....:X.4....$...ed.4...o....q..Op..}.7H.^d..Q..{..1.......YE..5L./..r.......T ....q.........E..I.....Ue.<<.D..9..<...&...>v..o4.p&.n.h..? r\.I.$)D...?...Vn.....".....&'..jR.9m\e....Y.]`...Q...z.O.}..E.m..Q&....,.-.1;3N>...B...!..B...!..B...!..?....;.<Gs...>.Z8......8.^.\|.O.`.cw...t. .:..&.......i..^...!.Y..O.6%T$..g....!..7d................Iw ...\|=...K....s.......6C.K.^+Y..(...6i.+{i..0.L....G3,......N.jv...-V....-hQu4e......b....F....

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6908
Entropy (8bit):	5.446174359016192
Encrypted:	false
SSDEEP:	192:Al9wlhFlKlpul1k9wkhFkKkpukIlHQYrtNSGlaQh2tsST:AvwXF8qj6wAF5p7wqp0
MD5:	3F219D73035AA0859A16A47EB2A77F58
SHA1:	C0BF10D63ADA7E513E0A749046675F5C628BCAAF
SHA-256:	74491E720B20269C3BAD2FAF11DBD0E503CA4F62628A1D8B2E04D5D6EE4BC9B0
SHA-512:	54E142235E867F5728F979FC8166636231929D4093A53FFF383A26880645BD9767E2101CA7ADF848708A1B8DE7C99640A5A4B346FAEB2548E0C4F64EF3BA4684
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Montserrat:300,300i,400,400i"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1931), with no line terminators
Category:	downloaded
Size (bytes):	1931
Entropy (8bit):	5.856716999228131
Encrypted:	false
SSDEEP:	48:iEAh9Ko7jfcvtTA2tXsDXx/gm12nxLrwUnG:pAaGMSKcz9cZsuG
MD5:	310BB1D964D68F4A98165F8DFE332A3E
SHA1:	B86403DBD817FE9E235C35981E7852A166FC05E7
SHA-256:	C4987FD7D552161BE9E6AF30AF7AFD23F4E52F079854E005BB4ACC3A9F01558E
SHA-512:	E97DB57AC66CD5922B3A8A9570077D4D9CE1684C7F2DF567642AD86A6887FA9896249D93C3A690D5237148A9504C9EE21AA91445D0751344FD415D3799A15A75
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A89JPrWYXvEpNQ/xE+PjjlGJiBu/L2GfQcplC/QkDJOS1fBoX5Q4/HLfT1dXpD1td7C2peXE3bSCJiYdwoFcNgQAAACSeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVG

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17658)
Category:	downloaded
Size (bytes):	18253
Entropy (8bit):	5.613005837912891
Encrypted:	false
SSDEEP:	384:JqTfkYjguOeer0HbhUEAY2dnrFB7PeaeP1EmZ7eiMiHO/:JAkYBO3r0QNKae/KilHO/
MD5:	6C9CC3DD6B9A3F9815BA2BE7AE4EB4C4
SHA1:	03FB8C0E025E584E6F39F944128656218A5C3499
SHA-256:	994F6552FE5F0BEE8F20D5C6C36D1852F43074E52A06C9FAE6827F3E4103AD6A
SHA-512:	A8199000BF9BC6BF21CD7A400F27783AE5496C86FA92DF430643F15AB0D99032E5463E1D81DD9DF2A666F8D0C2909FBB7AB21E09F2549F1C894174951FC0A4C6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(n,v){if(!(v=(n=null,X.trustedTypes),v)\|\|!v.createPolicy)return n;try{n=v.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U})}catch(z){X.console&&X.console.error(z.message)}return n},X=this\|\|self,U=function(n){return n};(0,eval)(function(n,v){return(v=f())&&n.eval(v.createScript("1"))===1?function(z){return v.createScript(z)}:function(z){return""+z}}(X)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var vK=function(n,v,U,X,f){q(((X=(U=(X=F((v&=(f=v&4,3),n)),F(n)),e(X,n)),f&&(X=nY(""+X)),v)&&q(O(X.length,2),U,n),X),U,n)},O=function(n,v,U,X){for(X=(v\|(U=[],0))-1;X>=0;X--)U[(v\|0)-1-(X\|0)]=n>>X*8&255;return U},T=function(n,v,U,X,f,y){if(n.W.length){(n.j=(n.j&&0(),true),n).pK=v;try{y=n.C(),n.V=y,n.S=0,n.g=0,n.s=y,f=jH(n,v),v=U?0:10,X=n.C()-n.V,n.u+=X,n.Ep&&n.Ep(X-n.A,n.X,n.H,n.S),n.X=false,n.H=false,n

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 501 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6487
Entropy (8bit):	7.856937582599766
Encrypted:	false
SSDEEP:	96:nYz9Mp7S18LfbhB7BbH8AKblzbjc0qOp0PdDIa7PD/5SUnTKwiX4atUY4VL:YqkCtBtzKRzbjclVDIa0wT1i4acVL
MD5:	16248E38FC18BC88F65AF6A28CA892DA
SHA1:	B68C04013CE6BE178E0FA0974DA998968BD974B0
SHA-256:	14F28A18838E1ACEEDA071B377B4AE2E845B9FB8E0AE409A7977522C17F56EA4
SHA-512:	8952B621A2C049BB21DAAB123BE56A4178F7A8AB0E11F927F3FF461367A6FFE6CBE6C87EEBAFCC20D2ADE7F89191A509D90541A3A84591591479606107749D41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.............tEXtSoftware.Adobe ImageReadyq.e<...xiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:294c2824-3446-4627-a303-31535e597b79" xmpMM:DocumentID="xmp.did:7AFA669B96D911E9A00D97B40098793D" xmpMM:InstanceID="xmp.iid:7AFA669A96D911E9A00D97B40098793D" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:294c2824-3446-4627-a303-31535e597b79" stRef:documentID="xmp.did:294c2824-3446-4627-a303-31535e597b79"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p.....uIDATx...t\.y.?./.bY.G.-

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x627, components 3
Category:	downloaded
Size (bytes):	119313
Entropy (8bit):	7.853609287744999
Encrypted:	false
SSDEEP:	3072:KlU9SvDko5n2dwL2sPn5XxEFZM8xh6XhqufS:ebkun1L7PjEF+836XQuq
MD5:	D1215283D860C3524BF579AD188C3DA6
SHA1:	E52C03333A365886EFDF9731F01CCBF8A26CC316
SHA-256:	C8EBA3A74D739ED3E4DB3D02C082AAABD879B013A36054792FAE497B3F4D5114
SHA-512:	D86A8352CFA5296E1CD63CC3BA907FB89BEFBDBC1D8BA61A0AE9EF2179DAE4F47E8C0D8EA296E84B2BA89BB85F9979F829AC412909ABF929EA2019B1E48A7AF5
Malicious:	false
Reputation:	low
URL:	https://d2t6o06vr3cm40.cloudfront.net/2024/06/12/17/34/26/8f7b90e3-0af2-411a-a067-c630c9d163ad/Approved%20Supervisor%20-%201200x627%202.jpg
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Canva], baseline, precision 8, 1800x1200, components 3
Category:	downloaded
Size (bytes):	241357
Entropy (8bit):	7.949314996449017
Encrypted:	false
SSDEEP:	6144:EJXXd2cwQcx3fqw8lygYzJsb0g/Avi3z0+NVR1tM:EJx2ixIkbNVR1tM
MD5:	2DD2D1A3D7D03E6F5D1EE936734DE23F
SHA1:	9EE7B71892DF78CE070F0966C066C3417B545B7A
SHA-256:	2012DFFBC398B529527CE1F6CC25BF8B871C7039B36B57C42EC2B4F11F24104D
SHA-512:	6B96A76DA35DA10AB7A837326983B0CBC0791BFE264C9BD865F48F20630A4F5D85BB42C88D1615ADEFADC89BBF147A864D1E1B353DEA4D3CDF13FEE4E74B92D8
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsImN1c3RvbWVyX2ltYWdlcy8xMzQwMC8yMDI0LzAyLzIxLzE4LzAxLzQ4LzkyODY3ZTM4LTdiZDEtNGIzNi1hODE4LTdhNzJmNjdhMzZiZS9BZXN0aGV0aWMgMTUuanBnIl0sWyJwIiwidG9fd2VicCJdLFsicCIsInRodW1iIiwiMjAwMHgxNTAwXHUwMDNlIl1d/Aesthetic%2015.jpg?sha=c1b21970f376057b
Preview:	......JFIF.....,.,.....zPhotoshop 3.0.8BIM.......B..Z...%G............Aesthetics - Aesthetic 15..P..Christine Bergen8BIM.%.......gg..'..."AB......Exif..MM.*.................V...........^.(...........1.........f.;.........l.i.........~.......,.......,....Canva.Christine Bergen...........=............................................ASCII...xr:d:DAFpTMdYBlI:643,j:1617201069187934366,t:23111021....^http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Bergen</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Aesthetics - Aesthetic 15</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (769)
Category:	downloaded
Size (bytes):	25499
Entropy (8bit):	5.023751663183452
Encrypted:	false
SSDEEP:	384:vP2Q24nrU8JXITiqu/Fq8CQ2JqW4ewIlqBq9Dt+5IDL/FmGImfQA:3u4RwiTqvQ2J2ewqZt+5IDL/FMmV
MD5:	FDB7CABDB2B83A5D39E1C7158E7C5387
SHA1:	0A2873983CFC7F124B379A4E76A5D00C0452BAE5
SHA-256:	C634E13C34584B520342F7E407B3BC779AF7DE84BA007E96EAF7E1E4F7002FD5
SHA-512:	4F95B3CF95519EA5C036EED625991160821FAA8C20F155D28D742FCB730BD603B395498A7D3D8A1D3EC3C97EFBB57061828EEA78E8FD6B826E3D902F6990DA5B
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/pages/contact
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8">. <meta content="IE=edge" http-equiv="X-UA-Compatible"/>. <meta content="width=device-width, initial-scale=1.0" name="viewport"/>. <meta content="LiveWise Associates" name="author"/>.. <title>. Contact LiveWise Associates in Pickering, ON for Compassionate Care. </title>. <meta content="LiveWise Associates, Contact, Compassionate Care, Wellness, Pickering ON, Mental Health, Therapy Services, Clinical Supervision, EMDR Therapy, Couples Therapy, Psychotherapy, Social Worker, Student Counselling" name="keywords" />. <meta name="description" content="Reach out to LiveWise Associates in Pickering, ON today and start your journey to wellness with our compassionate, professional care." />.. <meta name="robots" content="index,follow" />. . social meta start -->. <meta property="og:site_name" content="LiveWise Associates" />. <meta property="og:title" content="Contact LiveWise Associates in Pickering

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	76570
Entropy (8bit):	7.981451239717939
Encrypted:	false
SSDEEP:	1536:SWUh//Tk8XIWxSRiiZUea8MPQZcoNDOMwDuy:HQ7kULxSrI5RoZjjy
MD5:	9E2DBAA7A88F3B8E2D6322132DBF8A79
SHA1:	950F393136F750EF704BEEF95A7FEA8872B464D7
SHA-256:	0792AC625E668D827EAF7A4BA6D5B3EDA6F7204E7398D828E534A8321EFEB0BF
SHA-512:	BDC325F4FC026C0F142FF96D6899247A9B84A3C58353F54BC2B8B1745E2F60C78D766696DBD13D06D762ADDC3D56CB33D0491D2CF6223C32D4C2AC86CBD9CB69
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTQvMTVjZmY1MmYtYmUzMy00MzA3LWJiYWUtZjkzYmVjZDVmYmI1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=a157f78ed1fbb052
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......6........IDATx....miz....wZk..p......G.M..%.0.H.!.....8.`$@./...D....\|.d+N..I$......r").(S.E6......n..{Z.;=..k.}....Y.U.Uo.t.{.=...z.3..bf...a.?.k.I..r..?x.....;..!3.*..!.V...v.r....nn...g...6..A.........Fk.......3..(.`......B...0 ...u......uU]..mM.T..........s..g._9:>....g.g._...........m.(@5u...>..f.y..7..._.R^........A......~..J=z...f.}%.t........./m.......fs.j...^.ow.n..23.....S....&..@..g...)X.P..R.`..13.Rh....sV..,.g..b...7O.~...W.h........Msa.]..lupx.~UWW).&.4..U.st\|.._}.G_8...)....\|..?.....o......{.m]W.z......_..}..._..Z.[./.n..E.u..H..6..h.....RJ..@.c...PDp..J..z.....1PJ..... .Z...RNPJA..........,.~.u].OZ....5PFs]....n..FU..i.9.....R............~.W....I8....\.7.y.p.^..S^...OA.>}............g_......n.....H.h.....0.....dYf.R..ZXkQ...h....k........H.%..R EPZ....A+...~^L..uUAi.R.g]X..l.s..zc...ZCD.9{~xx...s...

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	17451
Entropy (8bit):	5.359104590429714
Encrypted:	false
SSDEEP:	192:a/KWbqXV6uyErbqGIwYjc1Yk/MoBqNf6uyCrbqGIwYpa1GT/7Hqqmg6uy5rbqGIe:kaHq904Zq9H3gq98
MD5:	71B2730C1CECF7A0768725BD944422C5
SHA1:	8DFA323CB988538BCE8556A99BB5BD556E3593D1
SHA-256:	851699A18B631A7BD68EFC99598701293A6065B463FCED7B68D8D6D9227BD8E7
SHA-512:	E593A74CE83AAB1F8B9CA891B0D54BDBCC270202173C8842589B65F06E780A3384AF9BB3A79856AC71A01341D691E445371E1DEE8F6F3CA5DA2D883EC1EAD296
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400,600,700&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	87554
Entropy (8bit):	7.980551907603484
Encrypted:	false
SSDEEP:	1536:zFIB/zRZFsTWK1BaIJNVIqcjBD9TSxPm2AFAD8nB28SCNAzTB88FC:zFIFFZWfgIvVEcw2AF+E29CSzTG8FC
MD5:	66AC6DECA5AD477521AA745D609315D0
SHA1:	3C635B51A42CC47FF6C3E71CABEBD523E828E99D
SHA-256:	A5B10E7F87C3187219DB547DF8A5BC2A02F567FF96B0B7C977ABB54CBA2D7053
SHA-512:	4AA619383F1BD2997175C36E1D0CDF137EF6E5157D9E87608584EBBF0D904635D1B10B435FC3EE0F928B39B3CD316D3B533A986682D925AB16B5949D33D74CBA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME......2.n;.....IDATx...w.e.y...W...S.s.9gIW.........0......0`>...{<0...l.,p..-.......]..V.?.>..e.'..nQ...>Uu......_....\\|.W}..N.....T...^...._...'....^.lg.+..D;.i7.~...~..JWr..'9.4...9yl.H....'."..H%.....CJ....x.q......!......B..... ..{. .x........`.c8.p..e._.`..I.~..4;.vw..._`cg.8/H....WP.^;..O....F....&....k..\|.........4).....9.K...:.7p...x.SO..Ys...../.*...np..g8w...<.....&.v..^y...."..........3G8ul.N+E)I...q.T.!%B...!..E .@.....=RJ.. @.1...b..i2Cx....D..B....,......./....KW.w.,..S......N..$..K.9.`8.V.F. .O..."..XcQQDV.1.....z.g?..s..........r.w.0.?.._..?.?.)./N.=..'.n_HA.......C..^A..n..k._...%ZM....Cw...%./....B..1...........)....OH.=J....F..9..w.w_'.....p.{...8.h&1.8b<.q..%..>..Y..b8.i4.L..~.MQTX/..F...'..w$QD...q.m.\|......._ym../..7...s(..7..n8..>.[.orq.v.E....E$p..5.4...3...O.z...........=...9..-.X#..Pi5;1.:.A...$.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	5.49563096212181
Encrypted:	false
SSDEEP:	192:jAbSrixs6OViafAO1OZOxernGWfhi2Osrb81vZlt:jAbW6baFezGWfhi2OsrbMt
MD5:	F65BCC78C47C4C0F403F33460141CB98
SHA1:	3D6537C22DEDD731C94119B499C3A9933C48F119
SHA-256:	E98809FAA88BE33133590CBF33352AE61242AE5D6E58DCF362BE13B97FBBE52B
SHA-512:	FF40D23F18CE46689597EFDAD0CF82DE9CEDEDFFDEAC1F3892D4FB5702A7D1EE8614EA5DE23FD9BB5B7D7E1FE007E10F29616B698C24A2E90A156DAA46E805C8
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/favicons/favicon.ico?v=20170325
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................T...x.................................................."................................................................................x..T..........................................T...x.........................................................."........................................................................................x..T..............................T..................................................................................................................................................................T......................T.........................................................................."...............................................................................................T..............T*.............................................................................."...................................................

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 192x228, components 3
Category:	downloaded
Size (bytes):	8940
Entropy (8bit):	7.8195154674345755
Encrypted:	false
SSDEEP:	192:uMs1hMHDdGwf4JXrFpBnm2mQb/X88FGck7JOmoebKLpD+18OyVBr+G:ufv4Gwf4JXDBZmu/XFevoebWY0wG
MD5:	03A6BAB51A3B9DFB8AC5355460B80054
SHA1:	C5CB56C9D6AF7CED0C414C9A1151E75DB3809AEF
SHA-256:	EB3358467B92A1B963AF072D1E628AA03F834CAB99C51C023FCA1724A0B116E4
SHA-512:	B52E9C13B304779DB735D3B7BBBFCD5CAFDAB9AB3EAD9A4AB56A7F227BC6D779231D1578B741645E7FE3FFFAE7A384719F46ED72D37E5E05D4D5A04C786306C6
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDktMTIvMTkxNTI4L2Q2MGIyNDk4LTgxZjgtNDFjNi1iYjczLWFlZGM1M2Q0ODcyMS9NYXV2aWV5YW4tSGVhZHNob3QuanBlZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=47bc7dca75fe25f9&for=livewise.janeapp.com
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...XExif..MM.*...................i.........&.................................................(ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl....8.G.m..Oz../................................desc.......0cprt...,...Pwtpt...\|....rXYZ........gXYZ........bXYZ........rTRC....... chad.......,bTRC....... gTRC....... mluc............enUS.........D.i.s.p.l.a.y. .P.3mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.2XYZ ...............,XYZ ..........=.....XYZ ......J....7....XYZ ......(8.......para..........ff......Y.......[sf32.......B.......&.......................n...C....................................................................C............................................................................"..........................................G...........................!1..AQa.."2q....BR....#br....$%3CSs.......................

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 454x392, components 3
Category:	downloaded
Size (bytes):	23655
Entropy (8bit):	7.855132754035271
Encrypted:	false
SSDEEP:	384:pdcj90b3+VbifmpapJNAUSn5pKUD7YGXWu0VmzJB/NXCrm5VAkrFQQ/eNaZ:pWZiOw+pap7AV9nY+x00zJjCr9krFr/L
MD5:	B9B470B4C41CB03B1DA025E25E521D82
SHA1:	8919D7761CA65597A9D96FFCC76C8D415A6B9AD0
SHA-256:	4F6774C003C5A2550AB3484F165A81D4BFC4FD8692D60FF499D03B3041DC0732
SHA-512:	CF5877262895AEC6011CB8FA96011B17254DD0200C153B37461B58A0F8B2CB03C48490F67681DBC020A17FD79C534F6C33795F60A1C695B165A409963F44469D
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/df_media/W1siZiIsIjIwMjQvMDUvMDgvMTAvMTAvMTcvNTRmNjllNTctZGMzZS00MDY1LTllYjUtZjhkZmExY2EwY2ZkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjYwMHg2MDBcdTAwM2UiXSxbInAiLCJ0cmltIl1d?sha=1b206e95ba189cd1
Preview:	......JFIF.....H.H......Exif..MM..............................J...........R.(...........i.........Z.......H.......H..............0221....................0100.......................................................C....................................................................C............................................................................"..........................................t.............................!1.2..8AQaqv.."79Rru......3BUWw.....#5t.......$46CVs...%&STbd.......EXf...':DFGceg.....................................=.........................15r...!46ASq..........2a.3QR.."BT.............?..........................,t\..V..\|J..i....h.D:...$dF^@..}>..(o......=u...E.!kN._.W..%.._............3.B.4..uq.t..8.AVOC?5.i..4.-u$de.......~.........h/..9...t.]..Z.Ke..}./..b..f7u...TIBK......y^T..p..#.E1..v......c,3.y....t.....q./. W..z?....?..%~oA.);.Q........,_......?...=dy...i..}..u8.G.4....v.!{.<.NMF}.1..uJ..xu.5'h.5...f.,c..G ...........15$.....

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, description=As seen on a Sussex Directories Inc site, xresolution=116, yresolution=124, resolutionunit=2], baseline, precision 8, 192x228, components 3
Category:	downloaded
Size (bytes):	37962
Entropy (8bit):	7.961125202714594
Encrypted:	false
SSDEEP:	768:uRNfDMgD7NqTJ31t8PPnFXf5LnxQy9WCYQXIyeIDHVs9E2CLtU4vOFp3YI:wNLd7Nu3y81QXsAHVs94o3YI
MD5:	C23892800C89745DB9AF0A40BFA69A14
SHA1:	EB402368A20FF5699A1BC7F8B90CCF99138CB9CF
SHA-256:	5AB4908A8FDC30847FC85AE051758F9F1715023DFB101C31B5B1C9275D4C7D3E
SHA-512:	E4C342A10FA140601A80063201D407A96F44E398A3BDE4B1274B786CF3C99395F57956C8DFFEC233FB95C1E1A3777F9A175C3086F4116543A3E7C17E361E078D
Malicious:	false
Reputation:	low
URL:	https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjItMDYtMjcvMjAzNTIxL2E5NTFkZjZmLWE4ODUtNDljNy04NDg3LTViYWU0MDM1NWZhZS9Bc3NvY2lhdGUtTGVtb3ktUHJvZmlsZS1QaWN0dXJlLmpwZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=d2b7a9d887da134c&for=livewise.janeapp.com
Preview:	......JFIF.....H.H......Exif..MM..............)...J...........t...........\|.(..........................As seen on a Sussex Directories Inc site.....H.......H.......C....................................................................C........................................................................................................................C...........................!..1."A.Q.#2a.Bq....$3R.....4b.%5CE......................................F.........................!1.AQ.."aq......2...#B...3Rb.$r...4C...cs..............?...E.tQGE.tQGE.tQGE.tQGE.I>\|..S,..E...."}.........-.Sf....#L6..u.%.B...$..$...F..q?R?..zj..>.......U.71.a{S..i...m....V[I]b.o.).....I..mmD...c.h.\ft.`........Sg.P...>[\|.H...g...A..W.....:..n.=b...b...l.....m.&I...".q.-.X..,V...T. 8..Jbt......I....x..p>.s.M....[..."eU....=..)~....YmP.8.&..3../...........H..(.V.!(%j.']9...U..'T........^........6..f'.\!.Wy.<^.56/+3..\.+.f.".....I.)q.M.AvL6....N...3.%..0..O......B.Uyj>5&:{........u.5.v.V[.N.gWc.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 670x350, components 3
Category:	dropped
Size (bytes):	87713
Entropy (8bit):	7.976613049285819
Encrypted:	false
SSDEEP:	1536:Qbitx9se8Fg+lC+cOADhRM6DezFWaWRqsfgY/uU4aGGxhvSBx2:QbsxNcSTMyeNIFfgY2mvSBx2
MD5:	4F9D27C91C9335246FCE3D4AD108A392
SHA1:	CB575554AA037341D6EC9C3F7B1A9CA6DB6A0AF5
SHA-256:	E8EB1AE0AB6F41DAB8AECA7A60B48FDE1F645A779A57E63D6D4FACB957C9993F
SHA-512:	F7DD6E9146B6B52FA17E4A09322BAD129782FE50B922E1138240E4863D5A0943D14A225386BFDD121B824E961AC64D5B3BAF5B1A8D81165B91F85FED45911F8B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................^..............................................Z...........................!.1A."Qa.2q....#Br..Rb......$3C.%4s...&'DSc....7T..5Ed..(Uet.................................6......................!1..2A."Q.Baq#........3.C.$R..............?.5.M.3..-#s2...D2>@@.m.v.U.m.J#."Gl.......ap}S>..b..?.v.%Ne4.....`..r....r"..6.....{x...K...5.o0E....-...2.A..r..Z..2k;{DZ.+.A...y`....Q.$.}.......G.c:.>....U.<..(..F.......D$/d(vp.....9..............@..Ut.....Pt.qO...Z.F`....[.c...kG.....d.....b$..2...k.9<.'oCO.....3..#.W....>....E..............*......K..)V.E...Q.dkC?m5.8.E\.y....a..S^.y..r..m..C............weCp.^U.......4g}...3w1.W..m#.ap.kl;...k..vM%.. .....]._m.&.;.....=.I.)....yJ.....J..y.XX.4......D...D.?.>....y..Jz"E4.....by.$.rz}..$%.KkCI=.K.]B.>-.q../{Aafq.f.6...JL....,,A(.=w.\e...P....-..e.......Fji.B..........

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (613)
Category:	downloaded
Size (bytes):	18199
Entropy (8bit):	4.943360630304934
Encrypted:	false
SSDEEP:	192:vQX2Ra6MyCGQ/s6P/FUtZM3sCbWAygc8r10OVG8tFsEomDgaGHFCJoOXmQSe:vy24nTUcr1Nw8taEom0mfv
MD5:	54169BF2B7A544736B66C0D04994BECB
SHA1:	2052B0B1B17DC69E3C6EF0A8D6F788BF4964795A
SHA-256:	E9FB21E5C396BE1312CACC1ED581C2BFDF959F5A366FBD3A7BCB41E4AFC47B4F
SHA-512:	BCDA072A14AB2F2EF8E303EDDF5953361E8F7D40B4F99B52B2249BF63923CAA0DDEA7FDF3DC91C555DC04CAC88A31B98C8265B31F6E4E8A685C6C01057321375
Malicious:	false
Reputation:	low
URL:	https://livewiseinc.com/blog
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8">. <meta content="IE=edge" http-equiv="X-UA-Compatible"/>. <meta content="width=device-width, initial-scale=1.0" name="viewport"/>. <meta content="LiveWise Associates" name="author"/>.. <title>. Blog Posts (page 1) \| LiveWise Associates. </title>. <meta content="mental health, therapy services, counseling, wellness, coaching, Pickering, psychotherapy, EMDR, clinical supervision, group therapy, student counselling, employment coaching, couples therapy" name="keywords" />. <meta content="Discover comprehensive mental health support with therapy, counseling, and coaching services at LiveWise Associates in Pickering, ON." name="description" />. <meta name="robots" content="index,follow" />. . <link rel="canonical" href="https://livewiseinc.com/blog">. <link href="/df_media/W1siZiIsIjIwMjQvMDYvMTAvMTcvNDMvNTcvNzFjNmEzZTEtZDhjMS00ZmE2LTk2MGItMWI4ZTUyMjdhYmFmL0RlZW5hIEhha2lubSwgRC5DLiAoMTIpLnBuZyJdLFsicCIsInRod

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 192x228, components 3
Category:	dropped
Size (bytes):	13159
Entropy (8bit):	7.884426903782157
Encrypted:	false
SSDEEP:	384:/Tgz3qpoKewgWH1IvZatnZ+6OrooZsmH3cH:/Tgz3y5fH2Z4DoZDXK
MD5:	BF0B1550C3B35E5F2007F1C05AFA5300
SHA1:	515087BA41F1C09E0EB80684FE1F8CACBCCA67AE
SHA-256:	9BB329713589C9B4D3816AB75C57F916457868570F5AD5FA632A0A1C6503F17A
SHA-512:	5B57A4F5B65236DBF614B90F55E8A780A2B1927F0A5BEBA9300A37B9EAB22D067B6C909C2209428E82E2929D58108DF7CE397DFD7C132334FCB9D302FF541819
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i.......................................&.......@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C............................................................................"..........................................D.........................!..1A.."Qa.q2...#B.....3b.r...$R...CDc..........................................................!13A2a"Q..#B.........

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1982
Entropy (8bit):	6.669471406462233
Encrypted:	false
SSDEEP:	24:PiuXWJuEKLHQp1Va9xELbJNsSWNctKFkchagk4is5waR2pVZizR+/EMkx:auXPwpa9S/jWiAFkchxOS2pHiV+/EJx
MD5:	5C981CA75228BAED49C57383CA11D07C
SHA1:	1BC0344BEDD96442E2E46C03A8C90A659A05FE10
SHA-256:	9A2A113A5278FC69AB6FD40430D9B82F7E18CDB3F99A2A67F6597C96510C0DAF
SHA-512:	7B82BD4A3BF1F2D7F4DEABCE2F3FDD790A13BA026B326873E06BBD3584E1E482785B38BC9F7E58CAF33DCD1341B625B1590104CD58C8104F712AFF19D3D31BE7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<......")@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...UPLTE....a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<.a<...`.......tRNS.............................`..._....b.\|...W.@...D..\8........i5..4f.....o..j.JG.x.}PrO.'.N!>...=.~....l......6.,.:g...s/[...Z3VM.#..7.KL-.(..];.a..H.T...2...h.&...<..).."...d.e{1..QCIvtw^......).....bKGD....H....tIME..........C...pIDATH..._La...)...FJ..Q$.b.N$k..ID....[*I...Z."...

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16026), with no line terminators
Category:	downloaded
Size (bytes):	16026
Entropy (8bit):	4.758845980620784
Encrypted:	false
SSDEEP:	96:Z/OsgTb3tAKLz4FMMEyWmrFKO1fOWTVTenfLdOJOcc38iyviDiLiVs7g266:Z/9BDdqfBBl6
MD5:	5145204FA41BBD0FB8AF3D15E47F1A8A
SHA1:	8BB04C26081FD96FFEA814C9265583DBCB22A81C
SHA-256:	B6813D251F63F0633A813A1B718D9A3182594E1784A4ED82627EA00BF4EE83FB
SHA-512:	FD507A300B5D57522468AA7A0B9784F611FDC08BEBE0E86A931831B8ED3DF891E5C4E91CC04211CA0408405CC580B42F900FF462290C7068D51E4D3670AB142C
Malicious:	false
Reputation:	low
URL:	https://livewise.janeapp.com/styles.css
Preview:	a{color:#ed6e0c}a:hover,a:focus{color:#a44c08}.navbar-tier-2{background-color:#f47c1f}@media (max-width:768px){.clinic-primary-color-container{background:linear-gradient(to bottom, #ed6e0c 66%, white 50%)}.company_header_jane_sso_link{border-radius:4px;background:white;box-shadow:0 0 12px 0 rgba(0,0,0,0.08);padding:8px;margin:26px 0 5px 0}}.page-header.header-reverse{background-color:#ed6e0c}.table tr.reverse th{background-color:#ed6e0c}.table-bordered{border:none}.table-bordered tr.reverse th{border:1px solid #ed6e0c}.nav-tabs>.active>a,.nav-tabs>.active>a:hover{background-color:#ed6e0c}.notifications .notification.notification-info{background:#ed6e0c}.calendar .event .item.opening,.calendar .event .item{background-color:#ed6e0c}.calendar .event:hover .item.opening{background-color:#bc570a}.calendar .event.active .item.opening{background-color:#190c03}.calendar .event.active:hover .item.opening{background-color:#000}.calendar .event.active.group .item.opening{background-image:none}.ca

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	87652
Entropy (8bit):	7.989302664198412
Encrypted:	false
SSDEEP:	1536:hv8dpkY9qRv0ipni2z+kbdgL7CrSSU2y91RJ89HE:hEZ9Yv0ip11mCrZpy91Pt
MD5:	1C4961FA644D23C68D8E8807E3CCB514
SHA1:	6666462E6F48ADA42757EE31527C9450E8BD75A5
SHA-256:	5A9C7E91A729BD04BA3950018856DAD3D63FD539BA9028BDDB79AF6AE40F9B6B
SHA-512:	384C547CA72BF05943933CA82E8DB7E1153C26DC3A4A53566282686713C98375A60A039B6B4038FE131B126A96190F16393025BB7EFB8FB8080FFFB37E4CE970
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.........Xh....IDATx...w.n.u..>.-s..^w/....Y.I...C.CH .@N.......{S.../)...w..;....!.`...k.-[.......e...Y.v.x.w~..[.. ?..-.U...5..c<.y.Ax..C=.sp.@........<..K.}{k.;.VWg...Z....a..V..<.R..qH)!.G..B;m`"k..Jd..H.Z.D&8.........Yp. ..8.c.......p.`.L.TZ.(.....J)h.T.AY...TZC[..R)0.`.!.T..B.X...u.D.$I..(mP.9.....UU.. .......Z4..0.AD...1..H..y.C....h4...7..n..s.e...`......3.)%.$.I.....f....._...8s..^Q........v.....~.G......?.g.?\8y/]..c..g?.....=y....jw..}..k....9...k..hh.Q.....'.$I.n40.j..j"%B;..j.0.j.!....9.....#..88.....p.... `-.,@$@.A;..,P.%...s8g.S.B...+.E..5.q...T........A..D........J..!.1.....$......c.5..B.@.....14......z=.ma.....:...ch.........."...Zk0. .......5.....[..{...O.9z......:.DD...V...r..?..........;v.>....?..'......]..~..X.9u:-$R....j... ..8X.B.h&..........4..h6...H....9A...9.....8......s..K.m`..77..\| 1....`B......R.Cr..`.j...

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	286140
Entropy (8bit):	5.608228582823952
Encrypted:	false
SSDEEP:	3072:2irOzaiJ9iVYZLQOFyhf3K0ojHnvLMzU4676XDWqM0bukMz/yLm/Qhcn:HCz+VY9QOFai74qqM0qkMz/yLm/uu
MD5:	221A531AE82ED40135AE3DB843A207FE
SHA1:	35BDB1DB539A727DF8E1047FD830F58D5C72F509
SHA-256:	BBA34C51E14D1322EDA97D126AAD923535092EC5FA8787C2D91E4107628F044D
SHA-512:	7EB3E832A87E64C58467C718863EEA52171676B3CDAB9CE58F4954FEF49A05D3B5496A6AA376F142C7B8A4D2D187280C3E3E33A30376E54A432A8F9FC25E4A82
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-MCTHZF7ZXQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":23,"vtp_rules":["list","^livewiseinc\\.com$","^livewise\\.janeapp\\.com$"],"tag_id":20},{"function":"__ogt_ga_send","priority":13,"vtp_value":true,"tag_id":17},{"function":"__ogt_session_timeout","priority":13,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","janeapp\\.com"],"tag_id":21},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CS

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 4, 2024 22:55:02.448416948 CEST	49678	443	192.168.2.4	104.46.162.224
Jul 4, 2024 22:55:04.104571104 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 4, 2024 22:55:12.452414036 CEST	49735	80	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:12.452804089 CEST	49736	80	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:12.457225084 CEST	80	49735	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:12.457305908 CEST	49735	80	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:12.457461119 CEST	49735	80	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:12.457598925 CEST	80	49736	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:12.457655907 CEST	49736	80	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:12.463120937 CEST	80	49735	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.087198019 CEST	80	49735	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.087277889 CEST	80	49735	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.087338924 CEST	49735	80	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.087984085 CEST	49735	80	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.092720985 CEST	80	49735	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.142740011 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.142772913 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.142868996 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.143074036 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.143086910 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.711999893 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 4, 2024 22:55:13.786153078 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.786659002 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.786676884 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.787631035 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.787692070 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.791075945 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.791138887 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.793261051 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:13.793268919 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:13.837397099 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.037874937 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:14.037926912 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:14.037986994 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:14.038300991 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:14.038324118 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:14.361881971 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.363477945 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.363539934 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.363554001 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.363593102 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.363826990 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.364331961 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.364384890 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.364392042 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.364429951 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.455940008 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.456012011 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.456026077 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.456072092 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.456240892 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.456288099 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.457637072 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.457645893 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.457684994 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.457700968 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.457709074 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.457731962 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.457818031 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.457859993 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.457866907 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.458559036 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.458609104 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.458615065 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.458655119 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.458655119 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.458695889 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.484405994 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.484422922 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.484657049 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.486371040 CEST	49742	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.486377001 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.486648083 CEST	49742	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.486922026 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.486932993 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.487517118 CEST	49742	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.487526894 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.488759995 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.488799095 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.488857985 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.491276026 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.491292000 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.491827011 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.491852045 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.491930008 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.492861986 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.492887020 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.492960930 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.494342089 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.494354963 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.495333910 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.495347977 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.499599934 CEST	49739	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:14.499609947 CEST	443	49739	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:14.686166048 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:14.686177015 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:14.686307907 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:14.686953068 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:14.686964035 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:14.746205091 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:14.746234894 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:14.746376038 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:14.746617079 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:14.746632099 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:14.823854923 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:14.824095011 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:14.824121952 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:14.824982882 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:14.825042009 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:14.989835978 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:14.989869118 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:14.989932060 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:14.991718054 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:14.991731882 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:15.157835007 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:15.157948971 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:15.201560974 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:15.201582909 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:15.247454882 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:15.271164894 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.271512032 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.271533966 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.272793055 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.272882938 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.274274111 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.274337053 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.274795055 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.274801016 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.296412945 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.296566963 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.297133923 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.297149897 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.297525883 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.297646046 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.297657967 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.298520088 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.298554897 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.298576117 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.298810959 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.298911095 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.299484968 CEST	49742	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.299491882 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.299788952 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.300127029 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.300184965 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.300724983 CEST	49742	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.300776958 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.301023006 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.301507950 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.301517010 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.301614046 CEST	49742	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.311744928 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.312222004 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.312242985 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.312549114 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.312973022 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.313029051 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.313107967 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.313157082 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.314045906 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.314102888 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.314256907 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.314322948 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.315160990 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.315224886 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.315653086 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.315663099 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.316145897 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.316154957 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.324476004 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.344501972 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.344504118 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.352864027 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.368220091 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.368321896 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.425770044 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.426043987 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.426172972 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.426176071 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.426220894 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.426270008 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.426279068 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.426388979 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.426441908 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.454301119 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.454332113 CEST	443	49749	151.101.194.217	192.168.2.4
Jul 4, 2024 22:55:15.454343081 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.454376936 CEST	49749	443	192.168.2.4	151.101.194.217
Jul 4, 2024 22:55:15.542336941 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.542401075 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.542457104 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.542476892 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.542500019 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.543019056 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.543267012 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.543322086 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.543704987 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.543761015 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.543807030 CEST	49742	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.561650038 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.562195063 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.562405109 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.562454939 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.562488079 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.562531948 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.562840939 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.562849045 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.562894106 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.562916040 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.562972069 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.563020945 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.563088894 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.563107014 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.563163996 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.563424110 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.563484907 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.563920021 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.564006090 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.564507008 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.564538956 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.564591885 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.564606905 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.564663887 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.564735889 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.564790010 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.617479086 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.617558002 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.623445988 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:15.623555899 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:15.632839918 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.632905006 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.633928061 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.633935928 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.633986950 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.633996010 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.634660006 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.634702921 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.634708881 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.634844065 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.634886026 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.634892941 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.635934114 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.637326956 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.637336969 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.637389898 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.639725924 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.639734983 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.639808893 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.645133972 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.645426035 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.645447969 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.646296978 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.646378040 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.648797035 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.648850918 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.649668932 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.649674892 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.652324915 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.652333975 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.652489901 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.652668953 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.652757883 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.652766943 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.652802944 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.653449059 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.653518915 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.654313087 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.654407024 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.654412985 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.654505014 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.655118942 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.655163050 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.655457020 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.655504942 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.656138897 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.656146049 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.656202078 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.657797098 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.657804012 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.657836914 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.657879114 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.657891035 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.657936096 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.657943010 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.658113956 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.658121109 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.658202887 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.658626080 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.658683062 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.658689976 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.658704042 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.658730030 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.658761024 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.658771038 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.658798933 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.658806086 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.658848047 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.689937115 CEST	49742	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.689953089 CEST	443	49742	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.698352098 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.713843107 CEST	49744	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.713855028 CEST	443	49744	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.722229958 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.722270012 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.722310066 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.722320080 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.722368002 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.724457026 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.724493980 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.724526882 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.724540949 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.724549055 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.724598885 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.725265980 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.725333929 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.727349997 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.727365017 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.727437973 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.727444887 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.728522062 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.728599072 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.742130041 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.742136955 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.742166042 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.742224932 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.742238045 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.742259979 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.742338896 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.742923021 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.743007898 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.743186951 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.743236065 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.743242025 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.743316889 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.743870974 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.743931055 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.744092941 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.744146109 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.744874001 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.744939089 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.745870113 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.745945930 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.745955944 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.746009111 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.746715069 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.746814013 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.750010014 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.750051975 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.750078917 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.750098944 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.750119925 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.750133991 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.750708103 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.750742912 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.750777006 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.750782013 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.750819921 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.751226902 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.751275063 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.751281023 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.751486063 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.751533031 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.751540899 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.751579046 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.753345013 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.753362894 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.753412962 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.753422022 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.753506899 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.754318953 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.754353046 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.754379034 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.754385948 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.754410982 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.772679090 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:15.772702932 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:15.772965908 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:15.775793076 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.789228916 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.789347887 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.789357901 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.789426088 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.798031092 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.798069000 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.798093081 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.798103094 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.798161030 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.798167944 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.798213959 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.805979967 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.814618111 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.814634085 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.814683914 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.814686060 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.814697981 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.814722061 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.814728022 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.814750910 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.814757109 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.814774990 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.814784050 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.814811945 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.814816952 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.814867020 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.816088915 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.816103935 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.816128016 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.816160917 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.816169024 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.816190958 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.816246986 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.816342115 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.818804979 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.818854094 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.818869114 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.818872929 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.818881989 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.818893909 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.818965912 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.823379040 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:15.824599028 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.824668884 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.832510948 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.832568884 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.832581043 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.832587004 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.832611084 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.832634926 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.832720995 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.832776070 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.832925081 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.832969904 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.832978964 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.833158016 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.833183050 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.833257914 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.833380938 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.833460093 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.833734035 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.833775043 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.834572077 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.834615946 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.834640026 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.834645033 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.834664106 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.834760904 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.834844112 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.834942102 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.844002962 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.844018936 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.844057083 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.844067097 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.844101906 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.845077038 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.845113039 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.845134974 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.845141888 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.845160961 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.845201969 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.845210075 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.845221043 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.846219063 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.846240044 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.846281052 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.846297026 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.846323967 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.846874952 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.846908092 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.846941948 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.846947908 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.846987009 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.847002029 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.852272034 CEST	49741	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.852279902 CEST	443	49741	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.873404026 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.873425961 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.873521090 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.874058008 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.874070883 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.878164053 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.878253937 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.878266096 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.878472090 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.900293112 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.900310040 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.900316954 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.900358915 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.900367022 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.900386095 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.900413990 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.900418997 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.900443077 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.900469065 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.907560110 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.907632113 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.907746077 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.907795906 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.908138037 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.908188105 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.908665895 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.908713102 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.908735991 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.908740997 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.908756018 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.908767939 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.909252882 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.909409046 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.918170929 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.918226957 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.919164896 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.919182062 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.919230938 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.919244051 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.922851086 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.922907114 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.922914028 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.922966957 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.923103094 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.923150063 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.923166037 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.923177958 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.923352957 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.923597097 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.923639059 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.923649073 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.923652887 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.923692942 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.923692942 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.924376965 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.924499989 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.925551891 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.925587893 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.925612926 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.925617933 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.925637960 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.925659895 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.925694942 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.925694942 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.925699949 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.926409006 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.926450014 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.926457882 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.926466942 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.926485062 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.926516056 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.926521063 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.926544905 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.926563025 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.927242994 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.927294016 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.927309036 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.927316904 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.927336931 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.927336931 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.927383900 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.927393913 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.927510977 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.928100109 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.928138971 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.928159952 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.928159952 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.928172112 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.928188086 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.928205013 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.928230047 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.928236008 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.928251982 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.928281069 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.928284883 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.930932045 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.931010008 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.931018114 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.931066036 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.931113958 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.931163073 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.931407928 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.931467056 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.931814909 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.931849957 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.931869984 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.931875944 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.931890965 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.932291031 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.932342052 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.932348967 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.932400942 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.940594912 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.943006039 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.943037987 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.943063021 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.943073988 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.943099976 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.943119049 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.943697929 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.943756104 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.944838047 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.944854021 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.944916010 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.944922924 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.944950104 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.945270061 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.945305109 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.945329905 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.945336103 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.945358038 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.945374966 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.945703983 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.945749998 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.946532965 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.946548939 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.946584940 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.946593046 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.946619987 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.947278976 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.947309971 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.947352886 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.947360039 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.947385073 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.947398901 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.947674036 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.947729111 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.948381901 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.948400974 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.948451042 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.948457956 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.948492050 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.968636990 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:15.968732119 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.968803883 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.968940973 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.971139908 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.994296074 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.994363070 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.994366884 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.994383097 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.994390011 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.994410992 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.994435072 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.996049881 CEST	49750	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:15.996057034 CEST	443	49750	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:15.997343063 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.997400045 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.997410059 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.997452021 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.997785091 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.997823000 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:15.997831106 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.997859955 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:15.998097897 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.002823114 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.002832890 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.002927065 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.003459930 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.003469944 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.003662109 CEST	49745	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.003678083 CEST	443	49745	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.011975050 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012006998 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012067080 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.012094975 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012108088 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.012167931 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012216091 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.012226105 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012270927 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.012547970 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012603045 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.012609005 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012655973 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.012661934 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012672901 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.012703896 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.016508102 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:16.037894964 CEST	49743	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.037921906 CEST	443	49743	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.115552902 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.115571022 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.115822077 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.116049051 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.116063118 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.145564079 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:16.145606041 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:16.145756006 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:16.436157942 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.436170101 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.436348915 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.437119961 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:16.437150002 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:16.437165976 CEST	49751	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:16.437175035 CEST	443	49751	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:16.446130037 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.446146965 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.450145960 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.450155020 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.450206041 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.450561047 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.450573921 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.458720922 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.458745956 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:16.458895922 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.458913088 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.458931923 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:16.459017038 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.459018946 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.459055901 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:16.459115028 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.459279060 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.459294081 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:16.459462881 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.459472895 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:16.459584951 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:16.459600925 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:16.487066031 CEST	49762	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:16.487082958 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:16.487193108 CEST	49762	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:16.487586021 CEST	49762	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:16.487596989 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:16.494505882 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.494893074 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.494910955 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.495281935 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.495666027 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.495728016 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.495940924 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.536499977 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.627015114 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.627269983 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.627280951 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.627626896 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.628232956 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.628294945 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.628371954 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.668498993 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.673281908 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.747589111 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.747858047 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.747870922 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.748759031 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.748828888 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.749490023 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.749537945 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.749978065 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.749983072 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.799875975 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.839859962 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.839881897 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.839905977 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.839939117 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.839951992 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.839988947 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.840028048 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.841208935 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.841224909 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.841280937 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.841288090 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.841315031 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.841331005 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.931142092 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.931159973 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.931212902 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.931236982 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.931268930 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.931292057 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.931927919 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.931993961 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.932009935 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.932032108 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.932084084 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.934628010 CEST	49753	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.934638977 CEST	443	49753	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.972286940 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.972306013 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.972312927 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.972357988 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.972389936 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.972424030 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.972431898 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.972445965 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.972476959 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.973925114 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.973946095 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.973987103 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.973994017 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:16.974003077 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.974030972 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:16.992408037 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:16.992420912 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:16.992491961 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.010741949 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.010776997 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.010833025 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.037077904 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.037089109 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.037440062 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.037461996 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.060178041 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.063008070 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.063028097 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.063090086 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.063098907 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.063138008 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.064142942 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.064203978 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.064203978 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.064241886 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.064244986 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.064258099 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.064852953 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.076071024 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.100253105 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.103437901 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.114732027 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.114764929 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.114773035 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.114829063 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.114845991 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.114877939 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.114886045 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.114900112 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.114927053 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.116028070 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.116031885 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.116503954 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.116518974 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.116573095 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.116581917 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.116765976 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.116875887 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.116889954 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.116945982 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.117012978 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.117367983 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.118321896 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.118379116 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.118791103 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.118818998 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.119683981 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.119771004 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.120136976 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.120203972 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.122678041 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.122730017 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.123444080 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.123471975 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.123713017 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.123718977 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.123807907 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.123816967 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.138696909 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:17.138776064 CEST	49762	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:17.166137934 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.166428089 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.166651964 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.174685001 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.174738884 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.175764084 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.175837040 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.177086115 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.177159071 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.177563906 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.177581072 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.179249048 CEST	49754	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.179255962 CEST	443	49754	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.204375029 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.204392910 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.204447985 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.204458952 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.204509974 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.204509974 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.204998016 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.205035925 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.205044985 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.205058098 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.205104113 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.205461025 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.205476046 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.206957102 CEST	49755	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.206965923 CEST	443	49755	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.208672047 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.208760023 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.209808111 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.209888935 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.210378885 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.210386038 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.212148905 CEST	49762	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:17.212158918 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:17.212383032 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:17.219446898 CEST	49762	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:17.228020906 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.258991003 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.260509014 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:17.298590899 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.298636913 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.298686028 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.298697948 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.298737049 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.298862934 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.298899889 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.298937082 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.298945904 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.298994064 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.307068110 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.307084084 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.307126045 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.307147980 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.308844090 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.310658932 CEST	49756	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.310664892 CEST	443	49756	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.319788933 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.319808960 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.319916010 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.320887089 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.320898056 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.335462093 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.335469961 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.335530996 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.335882902 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.335892916 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.343564034 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.343591928 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.343650103 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.344013929 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.344022036 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.344078064 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.344300985 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.344322920 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.344434977 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.344471931 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.344490051 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.344754934 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.344768047 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.344901085 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.344909906 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.374907017 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.374980927 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.389061928 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.389125109 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.390193939 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.390202045 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.390265942 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.390275955 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.391145945 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.391199112 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.391207933 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.400218964 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:17.400291920 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:17.400405884 CEST	49762	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:17.412249088 CEST	49762	443	192.168.2.4	23.53.114.19
Jul 4, 2024 22:55:17.412260056 CEST	443	49762	23.53.114.19	192.168.2.4
Jul 4, 2024 22:55:17.432799101 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.465337992 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.465349913 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.465387106 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.465408087 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.465414047 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.465447903 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.479353905 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.479391098 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.479413033 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.479418039 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.479454041 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.480340958 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.480401039 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.480417967 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.480423927 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.480442047 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.481832027 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.481867075 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.481889009 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.481898069 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.481934071 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.526427984 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.555644989 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.555654049 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.555682898 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.555763006 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.555763006 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.555771112 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.556045055 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.556133986 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.556142092 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.556226015 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.569622993 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.569665909 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.569694996 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.569701910 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.569741964 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.569808960 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.570569992 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.570601940 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.570653915 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.570661068 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.570691109 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.570703983 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.571774006 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.571794033 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.571861029 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.571866989 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.571882963 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.571901083 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.572384119 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.572438955 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.572449923 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.572455883 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.572536945 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.574631929 CEST	49758	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.574645042 CEST	443	49758	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.594249010 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.594291925 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.594440937 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.594674110 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.594680071 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.595076084 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.595098972 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.595174074 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.595671892 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.595685959 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.595885038 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.596062899 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.596076012 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.596281052 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.596292019 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.601377010 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.601393938 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.601622105 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.602252960 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.602263927 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.650774956 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.651057005 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.651067972 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.652106047 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.652162075 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.656311035 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.656411886 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.656801939 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.656810045 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.696561098 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.738837957 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.747616053 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.747623920 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.747652054 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.747663021 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.747673035 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.747699022 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.747745037 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.747762918 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.748070002 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.831082106 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.831099033 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.831306934 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.831334114 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.831377983 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.835618973 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.835635900 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.835709095 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.835721016 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.835760117 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.842293024 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.842329979 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.842398882 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.842447042 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.893093109 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.895926952 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.896003008 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.896148920 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.896158934 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.896213055 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.896303892 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.896353960 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.899657965 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.901612997 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.901635885 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.901676893 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.901680946 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.901696920 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.901709080 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.901722908 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.901767015 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.919068098 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.919106960 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.919150114 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.919166088 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.919303894 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.920273066 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.920291901 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.920331955 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.920341969 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.920380116 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.921148062 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.921205044 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.921206951 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.921246052 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.927730083 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.942363977 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.942377090 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.942406893 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.942419052 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.942435026 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.942445993 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.942475080 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.942509890 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.942534924 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.944375038 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.964361906 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.969425917 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.969510078 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.979198933 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.985002995 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.986078978 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.986138105 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.986215115 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.986232042 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.986367941 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.986398935 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.986406088 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.986418962 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.986426115 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.986439943 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:17.986484051 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:17.986536980 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.986738920 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.986782074 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.986810923 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.986823082 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.986834049 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.986857891 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.987328053 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.987401009 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.987698078 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.987816095 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:17.988451958 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.988514900 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.988884926 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:17.988960981 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:17.988972902 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:17.992252111 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.992311001 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.992319107 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.992336035 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:17.992372036 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.992386103 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:17.997644901 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.022121906 CEST	49761	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.022136927 CEST	443	49761	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.025302887 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.025315046 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.025343895 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.025365114 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.025388956 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.025408983 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.025440931 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.025465012 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.029702902 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.029711008 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.029742956 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.029776096 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.029795885 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.029819965 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.029844999 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.030020952 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.031575918 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.031626940 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.032501936 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.035007000 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.077330112 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.077375889 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.077430010 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.077440977 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.077488899 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.078850985 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.078891993 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.078926086 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.078933001 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.078953981 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.078973055 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.080682039 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.080724955 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.080754042 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.080760956 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.080785990 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.080796003 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.084506989 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.084538937 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.084790945 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.085057020 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.085097075 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.085120916 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.085128069 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.085169077 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.087833881 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.089483023 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.089497089 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.097016096 CEST	49763	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.097024918 CEST	443	49763	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.111388922 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.111430883 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.111449003 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.111469984 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.111519098 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.168291092 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.168361902 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.168370008 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.168473005 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.168521881 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.203092098 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.203111887 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.203181028 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.204330921 CEST	49759	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.204361916 CEST	443	49759	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.207372904 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.207385063 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.207726955 CEST	49760	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.207736015 CEST	443	49760	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.207740068 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.212093115 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.220767975 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.223872900 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.223890066 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.223931074 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.223942995 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.223980904 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.224912882 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.225227118 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.225852013 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.229098082 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.229110003 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.230262995 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.230271101 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.230570078 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.230588913 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.230916023 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.230932951 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.231112003 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.231123924 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.231215954 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.231220961 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.231405973 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.231460094 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.231467009 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.231508970 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.231524944 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.231811047 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.231877089 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.231964111 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.231992960 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.231997967 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.232064009 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.232064009 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.232569933 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.232625961 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.232846022 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.232909918 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.232981920 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.233052969 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.233331919 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.233375072 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.233515978 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.233728886 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.233791113 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.234391928 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.234457970 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.234469891 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.234484911 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.235513926 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.235686064 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.236069918 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.236078024 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.236850023 CEST	49765	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.236860037 CEST	443	49765	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.237066031 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.237134933 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.237442970 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.237451077 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.237782955 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.237791061 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.237931967 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.238435030 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.238442898 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.238502026 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.238508940 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.239691973 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.239749908 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.239918947 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.239926100 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.241317987 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.241333008 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.241477966 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.242470026 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.242475986 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.242852926 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.242863894 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.246006012 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.246027946 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.246038914 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.246069908 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.246085882 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.246097088 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.246092081 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.246114016 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.246139050 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.246139050 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.246170044 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.248754025 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.248958111 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.248966932 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.249938965 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.249988079 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.250365019 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.250420094 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.250543118 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.262624025 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:18.262639999 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:18.262851000 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:18.263046980 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:18.263058901 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:18.263508081 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.263530970 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.263578892 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.263588905 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.263639927 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.263639927 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.278297901 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.278306961 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.278361082 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.278369904 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.280520916 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.294311047 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.294311047 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.294317961 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.294326067 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.337261915 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.337279081 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.337337971 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.337347984 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.337414980 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.337644100 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.337701082 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.337701082 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.337770939 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.339473009 CEST	49764	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.339483976 CEST	443	49764	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.342358112 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.414479017 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.414496899 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.414558887 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.414592981 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.414736032 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.421961069 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.421979904 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.422040939 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.422048092 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.422148943 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.435997009 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.436356068 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.436395884 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.436465025 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.436729908 CEST	49767	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.436753988 CEST	443	49767	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.465533972 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.465576887 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.465631962 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.465643883 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.465714931 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.465749025 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.465780973 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.465821028 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.465826988 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.465914965 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.474658012 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.474678040 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.474720001 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.474724054 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.474759102 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.475236893 CEST	49771	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.475245953 CEST	443	49771	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.477005959 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.477042913 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.477104902 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.477313995 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.477329016 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.481802940 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.481827021 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.481872082 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.481878042 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.481888056 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.481925011 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.482425928 CEST	49770	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.482434034 CEST	443	49770	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.483635902 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.483691931 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.483778954 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.483942986 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.483973980 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.494350910 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.494394064 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.494400978 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.494430065 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.494450092 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.494462967 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.494472980 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.494488955 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.494509935 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.504287958 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.504297972 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.504326105 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.504354954 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.504362106 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.504414082 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.504446030 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.504468918 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.506151915 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.506175041 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.506221056 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.506227970 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.506239891 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.506333113 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.508985043 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.509015083 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.509035110 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.509043932 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.509064913 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.509083986 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.513468027 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.513475895 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.513514042 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.513544083 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.513547897 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.513567924 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.513598919 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.513623953 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.515448093 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.515463114 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.515530109 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.515538931 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.515579939 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.537836075 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.537844896 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.537905931 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.544028044 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544084072 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544120073 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544138908 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544152975 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.544203043 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544228077 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544233084 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.544258118 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544294119 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.544311047 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544395924 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.544414997 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.544744015 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.544933081 CEST	49772	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.544939995 CEST	443	49772	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.557393074 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.557455063 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.558090925 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.558099031 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.558150053 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.558161020 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.559097052 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.559155941 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.559161901 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.577625990 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.577656031 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.577702045 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.577734947 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.577760935 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.577792883 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.584073067 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.584091902 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.584141016 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.584152937 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.584326982 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.589263916 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.589298010 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.589319944 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.589323997 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.589371920 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.589521885 CEST	49769	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.589529037 CEST	443	49769	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.594024897 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.594090939 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.594099045 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.594115019 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.594141960 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.594165087 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.594357967 CEST	49766	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.594362974 CEST	443	49766	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.597734928 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.597771883 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.597798109 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.597806931 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.597819090 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.597832918 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.597846985 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.598069906 CEST	49768	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.598081112 CEST	443	49768	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.613301039 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.648727894 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.648736954 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.648762941 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.648791075 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.648797989 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.648835897 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.649449110 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.649456978 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.649487019 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.649516106 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.649521112 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.649559975 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.650557041 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.650563955 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.650590897 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.650619030 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.650624037 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.650662899 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.651725054 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.651752949 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.651793003 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.651798010 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.651839972 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.653460026 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.653490067 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.653522015 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.653526068 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.653557062 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.653569937 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.721290112 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.721343994 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.722771883 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.723141909 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.723154068 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.723495960 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.731626987 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.731690884 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.732002020 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.748760939 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.748778105 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.748843908 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.748850107 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.750164032 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.750185013 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.750225067 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.750231028 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.750260115 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.751111984 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.751122952 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.751180887 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.751187086 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.751905918 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.751941919 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.751955986 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.751970053 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.752002954 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.772504091 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.774805069 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:18.791541100 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:18.791551113 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:18.795387030 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:18.795471907 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:18.806341887 CEST	49773	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:18.806351900 CEST	443	49773	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:18.808438063 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:18.808653116 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:18.808873892 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:18.808885098 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:18.819091082 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.819422960 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.819433928 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.820408106 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.820466042 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.821464062 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.821528912 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.821791887 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.821799040 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.847217083 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.847260952 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:18.847362995 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.847536087 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.847551107 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:18.847630024 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.848165035 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.848176956 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:18.848319054 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.848336935 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:18.857319117 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:18.858506918 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.858520985 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:18.858772039 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.858992100 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:18.859002113 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:18.860461950 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.860472918 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.860574007 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.860778093 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.860791922 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.862044096 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.862051010 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.862143993 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.862382889 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.862395048 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.863920927 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.863928080 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.864084005 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.864681005 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.864692926 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.866415977 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.866424084 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.866564035 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.866754055 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:18.866765976 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:18.869554996 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.873217106 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.887044907 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.888149977 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.888159037 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.888367891 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.888382912 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.888504982 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.888724089 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.889081955 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.889137983 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.889627934 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:18.889970064 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.890032053 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.890069962 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:18.932506084 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:18.936499119 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:18.942755938 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:19.971998930 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972068071 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972112894 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972126961 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:19.972146988 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972194910 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:19.972203016 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972215891 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972255945 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:19.972266912 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972727060 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972769022 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:19.972779036 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972824097 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972835064 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.972868919 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.972881079 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:19.972893000 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.973087072 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:19.973567963 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.973577023 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.973613977 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.973628998 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.973647118 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.973659992 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.973676920 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.973705053 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.973742008 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.974327087 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.974508047 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.974530935 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.974581003 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.974589109 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.974627972 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.974761963 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.974795103 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.975159883 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.975383997 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:19.976542950 CEST	49775	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.976560116 CEST	443	49775	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.977627993 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.977796078 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.977902889 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.978301048 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.978327990 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.978349924 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.978382111 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.978406906 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.978410959 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.978415012 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.978425980 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.978441954 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.978470087 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:19.978476048 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:19.978486061 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.978513002 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:19.978591919 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.982378006 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:19.982400894 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:19.982408047 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:19.982462883 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:19.982472897 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:19.982494116 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.982507944 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:19.982914925 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.982929945 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.985749960 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.985812902 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:19.986177921 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:19.986227036 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:19.986536026 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:19.987056017 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.987067938 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.987406969 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.987415075 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.987715006 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.987728119 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.987735033 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.987893105 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.987900019 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.988024950 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.988756895 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.988774061 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.988828897 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.988842964 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.989238977 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.989247084 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.989430904 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.989439011 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.989578962 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.989584923 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.990159988 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.990214109 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.990287066 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.990355968 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.990427971 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.990477085 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.990724087 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:19.990793943 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:19.991173029 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.991231918 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.991563082 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.991620064 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.991982937 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.992044926 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.992352962 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:19.992433071 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:19.993038893 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:19.996385098 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.996440887 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.998538971 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.998600960 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:19.999061108 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:19.999126911 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.000442982 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:20.000571012 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.000674963 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.000754118 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.000763893 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.001224995 CEST	49778	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.001240015 CEST	443	49778	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.002726078 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.002736092 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.003978014 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.003983974 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.004477978 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.004487038 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.004527092 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.004543066 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.013689041 CEST	49777	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:20.013700962 CEST	443	49777	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:20.014857054 CEST	49774	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:20.014864922 CEST	443	49774	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:20.015227079 CEST	49776	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:20.015232086 CEST	443	49776	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:20.040508032 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:20.043652058 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.043653011 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.044501066 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:20.044537067 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.048499107 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.048506021 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.048747063 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.048839092 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.063213110 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.063239098 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.063321114 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.063815117 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.063831091 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.071569920 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.071602106 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.071769953 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.072655916 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.072681904 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.078624964 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.078644991 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.078794003 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.079176903 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.079204082 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.088989019 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.089015007 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.089211941 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.089447021 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.089459896 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.237155914 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.237180948 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.237220049 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.237246037 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.237272024 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.237977982 CEST	49788	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.237994909 CEST	443	49788	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.238373995 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.238406897 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.238617897 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.239267111 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.239293098 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.239382982 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:20.239454031 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:20.239525080 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:20.239542007 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:20.239634991 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:20.239689112 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:20.240904093 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.240921974 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.240958929 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.240966082 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.240997076 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.244333982 CEST	49780	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:20.244354963 CEST	443	49780	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:20.248955965 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.249017000 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.249066114 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.249077082 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.249248028 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.249264956 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.249294043 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.249306917 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.249314070 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.249342918 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.249845982 CEST	49785	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.249850988 CEST	443	49785	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.251395941 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.253257990 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.255305052 CEST	49786	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.255311012 CEST	443	49786	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.255471945 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.255490065 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.255496025 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.255544901 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.255552053 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.255579948 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.255605936 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.255625963 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.255636930 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.255636930 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.255646944 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.255678892 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.260360956 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.260368109 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.260409117 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.260418892 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.260442019 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.260463953 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.260508060 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.260508060 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.260508060 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.260516882 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.260567904 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.262041092 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.262052059 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.262068987 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.262075901 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.262079000 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.262109995 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.262116909 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.262152910 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.262177944 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.328938007 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:20.328984976 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:20.328999043 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:20.329046011 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:20.329055071 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:20.329112053 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:20.337842941 CEST	49779	443	192.168.2.4	54.212.237.39
Jul 4, 2024 22:55:20.337851048 CEST	443	49779	54.212.237.39	192.168.2.4
Jul 4, 2024 22:55:20.342473984 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.342499018 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.342535973 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.342541933 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.342581034 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.342586040 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.342681885 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.342726946 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.343894005 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.343909979 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.343976974 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.343986034 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.344062090 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.344461918 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.344479084 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.344521999 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.344527960 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.344553947 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.344572067 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.351361990 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.351380110 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.351418018 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.351425886 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.351454973 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.351474047 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.354718924 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.354736090 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.354773998 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.354783058 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.354810953 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.354834080 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.355113029 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.355129004 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.355161905 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.355169058 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.355197906 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.355216980 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.356381893 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.356405020 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.356436014 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.356441021 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.356476068 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.356487036 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.392452955 CEST	49787	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.392462015 CEST	443	49787	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.431524038 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.431545019 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.431616068 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.431633949 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.432869911 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.433245897 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.433260918 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.433317900 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.433326006 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.436038017 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.436089993 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.436148882 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.436196089 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.436204910 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.436225891 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.436240911 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.437127113 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.437150955 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.437181950 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.437195063 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.437203884 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.437226057 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.437227011 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.437278986 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.438816071 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.438869953 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.438889027 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.438918114 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.438930035 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.438960075 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.440279961 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.440296888 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.440355062 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.440360069 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.440402985 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.441277981 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.441328049 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.441351891 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.441385031 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.441618919 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.441632986 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.441688061 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.441699982 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.444876909 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.445856094 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.445910931 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.445933104 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.445957899 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.469583988 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.470597982 CEST	49783	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.470607042 CEST	443	49783	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.471157074 CEST	49784	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.471162081 CEST	443	49784	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.473473072 CEST	49782	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.473484993 CEST	443	49782	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.490221024 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.490277052 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.490340948 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.490782022 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.490808964 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.578638077 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.578963995 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.578977108 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.580089092 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.580161095 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.580913067 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.580977917 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.581170082 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.581176996 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.621496916 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.704706907 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.705110073 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.705120087 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.705404997 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.706159115 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.706223011 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.706335068 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.706594944 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.707042933 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.707060099 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.707356930 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.707751989 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.707823038 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.707990885 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.728600979 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.728642941 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.728672028 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.728694916 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.728704929 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.728770018 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.728796959 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.728800058 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.728811979 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.728847027 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.728965998 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.729008913 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.729043961 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.733170033 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.733215094 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.733222008 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.733253956 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.733299017 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.733304977 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.748501062 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.752495050 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.776871920 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.776881933 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.817842007 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.818053961 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.818356037 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.818399906 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.820270061 CEST	49795	443	192.168.2.4	104.18.7.90
Jul 4, 2024 22:55:20.820278883 CEST	443	49795	104.18.7.90	192.168.2.4
Jul 4, 2024 22:55:20.822942019 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.823287010 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.823298931 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.824402094 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.824853897 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.825031042 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.825042963 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.848267078 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.848939896 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.848954916 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.849833965 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.849898100 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.850621939 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.850682020 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.850805044 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.850819111 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.868500948 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:20.870119095 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:20.901288033 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.958745956 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.958766937 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.958806992 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.958836079 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.958868980 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.960284948 CEST	49793	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.960309029 CEST	443	49793	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.962217093 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.962236881 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.962269068 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.962285995 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:20.962316036 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.962352991 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.963545084 CEST	49792	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:20.963562965 CEST	443	49792	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.078305960 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:21.082134008 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:21.082171917 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:21.082205057 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:21.082231045 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:21.082281113 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:21.082330942 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:21.082395077 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:21.082529068 CEST	49794	443	192.168.2.4	18.65.40.60
Jul 4, 2024 22:55:21.082549095 CEST	443	49794	18.65.40.60	192.168.2.4
Jul 4, 2024 22:55:21.095088959 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095109940 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095117092 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095129013 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095135927 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095160961 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095180035 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.095197916 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095218897 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095261097 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.095263004 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.095305920 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.096451998 CEST	49796	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.096467972 CEST	443	49796	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.105508089 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.105777979 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.105793953 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.106676102 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.106738091 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.107151985 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.107230902 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.107275963 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.149655104 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.149668932 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.197002888 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.354571104 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.354585886 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.354629993 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.354641914 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.354693890 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.444828987 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.444838047 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.444866896 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.444875002 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.444901943 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.444925070 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.444964886 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.449764013 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:21.449781895 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:21.449923038 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:21.450161934 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:21.450191021 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:21.450253963 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:21.450895071 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:21.450906038 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:21.451081038 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:21.451092958 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:21.482669115 CEST	49799	443	192.168.2.4	52.26.250.4
Jul 4, 2024 22:55:21.482676029 CEST	443	49799	52.26.250.4	192.168.2.4
Jul 4, 2024 22:55:21.491499901 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:21.491519928 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:21.491676092 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:21.491878986 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:21.491887093 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:21.932806015 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:21.933073044 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:21.933094978 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:21.933414936 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:21.933470011 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:21.934012890 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:21.934068918 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:21.935034037 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:21.935086012 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:21.935242891 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:21.935249090 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:21.980899096 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:22.049060106 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:22.049724102 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:22.049752951 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:22.049761057 CEST	443	49805	216.239.32.181	192.168.2.4
Jul 4, 2024 22:55:22.049778938 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:22.049813032 CEST	49805	443	192.168.2.4	216.239.32.181
Jul 4, 2024 22:55:22.121556997 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:22.124597073 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.124624014 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:22.125634909 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:22.125699997 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.154819012 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.154999018 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:22.155369997 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.155395985 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:22.159380913 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.159703016 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.159713984 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.160557985 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.160635948 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.161884069 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.161925077 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.162380934 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.162388086 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.197366953 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.202373028 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.385255098 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:22.385533094 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:22.385586023 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.385864973 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.385889053 CEST	443	49804	74.125.133.157	192.168.2.4
Jul 4, 2024 22:55:22.385900974 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.386025906 CEST	49804	443	192.168.2.4	74.125.133.157
Jul 4, 2024 22:55:22.447910070 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.448016882 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.448059082 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.485517979 CEST	49806	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.485531092 CEST	443	49806	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.762670994 CEST	49807	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.762696981 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.762757063 CEST	49807	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.763417959 CEST	49807	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:22.763432026 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:22.769186974 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:22.769215107 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:22.769320965 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:22.769530058 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:22.769548893 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.418190956 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:23.429069042 CEST	49807	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:23.429080009 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:23.429419994 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:23.430082083 CEST	49807	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:23.430144072 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:23.430396080 CEST	49807	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:23.462093115 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.462560892 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:23.462591887 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.463469982 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.463536978 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:23.468168974 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:23.468229055 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.468729973 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:23.468740940 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.476490974 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:23.509978056 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:23.708765984 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:23.709661961 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:23.709795952 CEST	49807	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:23.770272970 CEST	49807	443	192.168.2.4	142.250.185.194
Jul 4, 2024 22:55:23.770282984 CEST	443	49807	142.250.185.194	192.168.2.4
Jul 4, 2024 22:55:23.783693075 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.783751965 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.783823013 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:23.783854961 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.784044027 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.784110069 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:23.843138933 CEST	49808	443	192.168.2.4	216.58.206.34
Jul 4, 2024 22:55:23.843172073 CEST	443	49808	216.58.206.34	192.168.2.4
Jul 4, 2024 22:55:23.893425941 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:23.893441916 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:23.893547058 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:23.893913031 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:23.893925905 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.549330950 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.555493116 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:24.555505037 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.556569099 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.556687117 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:24.557987928 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:24.557987928 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:24.558001041 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.558067083 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.604861021 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:24.604867935 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.652851105 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:24.730282068 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:24.730326891 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:24.730452061 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:24.835587978 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.837220907 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.837526083 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:24.838113070 CEST	49810	443	192.168.2.4	142.250.185.196
Jul 4, 2024 22:55:24.838120937 CEST	443	49810	142.250.185.196	192.168.2.4
Jul 4, 2024 22:55:24.848846912 CEST	49740	443	192.168.2.4	142.250.185.132
Jul 4, 2024 22:55:24.848870039 CEST	443	49740	142.250.185.132	192.168.2.4
Jul 4, 2024 22:55:24.849112034 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:24.849143028 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:24.852953911 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:24.853367090 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:24.853383064 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:24.897659063 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:24.897681952 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:24.897797108 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:24.900850058 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:24.900861979 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:25.468184948 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.468501091 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.468544006 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.469022036 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.469408035 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.469599962 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.469619036 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.521410942 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.545219898 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:25.545712948 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:25.545725107 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:25.546576977 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:25.546637058 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:25.547497034 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:25.547548056 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:25.547986984 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:25.547993898 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:25.587294102 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:25.645694971 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.645740986 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.645787954 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.645806074 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.645823002 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.645872116 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.646771908 CEST	49811	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.646781921 CEST	443	49811	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.714679956 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.714709044 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.714766979 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.715723038 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:25.715734959 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:25.830492020 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:25.830733061 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:25.830787897 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:25.832513094 CEST	49812	443	192.168.2.4	172.217.16.132
Jul 4, 2024 22:55:25.832525015 CEST	443	49812	172.217.16.132	192.168.2.4
Jul 4, 2024 22:55:26.350117922 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:26.350521088 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:26.350544930 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:26.350874901 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:26.351850986 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:26.351919889 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:26.352267027 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:26.352283001 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:26.603214025 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:26.603265047 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:26.603332996 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:26.603357077 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:26.604948997 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:26.664851904 CEST	49813	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:26.664865017 CEST	443	49813	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:28.144433022 CEST	64619	53	192.168.2.4	1.1.1.1
Jul 4, 2024 22:55:28.149317980 CEST	53	64619	1.1.1.1	192.168.2.4
Jul 4, 2024 22:55:28.149408102 CEST	64619	53	192.168.2.4	1.1.1.1
Jul 4, 2024 22:55:28.149426937 CEST	64619	53	192.168.2.4	1.1.1.1
Jul 4, 2024 22:55:28.154258966 CEST	53	64619	1.1.1.1	192.168.2.4
Jul 4, 2024 22:55:28.609431982 CEST	53	64619	1.1.1.1	192.168.2.4
Jul 4, 2024 22:55:28.615115881 CEST	64619	53	192.168.2.4	1.1.1.1
Jul 4, 2024 22:55:28.621135950 CEST	53	64619	1.1.1.1	192.168.2.4
Jul 4, 2024 22:55:28.621309996 CEST	64619	53	192.168.2.4	1.1.1.1
Jul 4, 2024 22:55:32.775835037 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:32.775901079 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:32.776055098 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:32.776370049 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:32.776392937 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:32.776907921 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:32.777278900 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:32.777317047 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:32.777901888 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:32.777920961 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.410202980 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.410675049 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.410716057 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.411056995 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.412388086 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.412388086 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.412430048 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.412473917 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.420217991 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.443284988 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.443305016 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.443617105 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.444417000 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.444477081 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.456868887 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.493411064 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.895899057 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.896173000 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.896231890 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.896266937 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.896321058 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.897043943 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.897053003 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.897106886 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.987874031 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.987883091 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.987950087 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.987972021 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.988015890 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.988018990 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.988034010 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.988080025 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.990037918 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.990072012 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.990107059 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.990123034 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.990170002 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.990170956 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:33.990711927 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:33.990770102 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.037260056 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.037319899 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.059324980 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.059410095 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.059425116 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.059467077 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.059515953 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.125432014 CEST	64628	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.125485897 CEST	443	64628	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.125557899 CEST	64628	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.125838995 CEST	64625	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.125861883 CEST	443	64625	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.126712084 CEST	64629	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.126741886 CEST	443	64629	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.126808882 CEST	64629	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.127129078 CEST	64630	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.127135992 CEST	443	64630	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.127177000 CEST	64630	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.127490997 CEST	64631	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.127518892 CEST	443	64631	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.127572060 CEST	64631	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.127782106 CEST	64632	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:34.127810955 CEST	443	64632	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:34.127856970 CEST	64632	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:34.128083944 CEST	64633	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.128092051 CEST	443	64633	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.128144026 CEST	64633	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.128366947 CEST	64628	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.128396034 CEST	443	64628	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.128777027 CEST	64629	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.128792048 CEST	443	64629	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.129194021 CEST	64630	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.129205942 CEST	443	64630	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.129383087 CEST	64631	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.129410028 CEST	443	64631	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.129563093 CEST	64632	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:34.129575968 CEST	443	64632	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:34.129682064 CEST	64633	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.129694939 CEST	443	64633	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296088934 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296128035 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296195984 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.296216965 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296266079 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.296278954 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296297073 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296351910 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.296365976 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296416998 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.296551943 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296601057 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.296607018 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.296659946 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.521162033 CEST	64634	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:34.521219969 CEST	443	64634	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:34.521344900 CEST	64634	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:34.521583080 CEST	64634	443	192.168.2.4	18.65.40.139
Jul 4, 2024 22:55:34.521599054 CEST	443	64634	18.65.40.139	192.168.2.4
Jul 4, 2024 22:55:34.529371977 CEST	64626	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.529407978 CEST	443	64626	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.529659033 CEST	64635	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.529690981 CEST	443	64635	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.530066013 CEST	64635	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.530272007 CEST	64635	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.530299902 CEST	443	64635	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.741115093 CEST	443	64628	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.741384029 CEST	64628	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.741420984 CEST	443	64628	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.741803885 CEST	443	64629	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.741921902 CEST	443	64628	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.741975069 CEST	64629	443	192.168.2.4	52.89.243.208
Jul 4, 2024 22:55:34.741993904 CEST	443	64629	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.742275000 CEST	443	64629	52.89.243.208	192.168.2.4
Jul 4, 2024 22:55:34.742449999 CEST	64628	443	192.168.2.4	52.89.243.208

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 4, 2024 22:55:12.100195885 CEST	192.168.2.4	1.1.1.1	0x1aed	Standard query (0)	livewiseinc.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:12.100728989 CEST	192.168.2.4	1.1.1.1	0x7a6	Standard query (0)	livewiseinc.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:13.091207027 CEST	192.168.2.4	1.1.1.1	0xd1f4	Standard query (0)	livewiseinc.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:13.091376066 CEST	192.168.2.4	1.1.1.1	0x6d54	Standard query (0)	livewiseinc.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:14.027710915 CEST	192.168.2.4	1.1.1.1	0x74b9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.028322935 CEST	192.168.2.4	1.1.1.1	0xd56f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:14.489965916 CEST	192.168.2.4	1.1.1.1	0x9436	Standard query (0)	js.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.490926027 CEST	192.168.2.4	1.1.1.1	0x8687	Standard query (0)	js.sentry-cdn.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:14.500838041 CEST	192.168.2.4	1.1.1.1	0x4286	Standard query (0)	livewiseasso3873.clinicsites.co	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.501425028 CEST	192.168.2.4	1.1.1.1	0x2b37	Standard query (0)	livewiseasso3873.clinicsites.co	65	IN (0x0001)	false
Jul 4, 2024 22:55:16.434396029 CEST	192.168.2.4	1.1.1.1	0x880c	Standard query (0)	d2t6o06vr3cm40.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.434578896 CEST	192.168.2.4	1.1.1.1	0xdd5	Standard query (0)	d2t6o06vr3cm40.cloudfront.net	65	IN (0x0001)	false
Jul 4, 2024 22:55:16.923367977 CEST	192.168.2.4	1.1.1.1	0x91f4	Standard query (0)	livewiseinc.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.932563066 CEST	192.168.2.4	1.1.1.1	0x174c	Standard query (0)	livewiseinc.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:16.933943987 CEST	192.168.2.4	1.1.1.1	0x76f4	Standard query (0)	livewiseasso3873.clinicsites.co	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.934381008 CEST	192.168.2.4	1.1.1.1	0x4b7e	Standard query (0)	livewiseasso3873.clinicsites.co	65	IN (0x0001)	false
Jul 4, 2024 22:55:18.229917049 CEST	192.168.2.4	1.1.1.1	0x70d2	Standard query (0)	gottmanconnect.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:18.230139017 CEST	192.168.2.4	1.1.1.1	0x17fa	Standard query (0)	gottmanconnect.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:18.820260048 CEST	192.168.2.4	1.1.1.1	0x523d	Standard query (0)	d2t6o06vr3cm40.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:18.820557117 CEST	192.168.2.4	1.1.1.1	0xbe9b	Standard query (0)	d2t6o06vr3cm40.cloudfront.net	65	IN (0x0001)	false
Jul 4, 2024 22:55:20.069161892 CEST	192.168.2.4	1.1.1.1	0x2b88	Standard query (0)	gottmanconnect.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:20.069336891 CEST	192.168.2.4	1.1.1.1	0xb57d	Standard query (0)	gottmanconnect.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:21.436507940 CEST	192.168.2.4	1.1.1.1	0xba4f	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.436867952 CEST	192.168.2.4	1.1.1.1	0x477e	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:21.437434912 CEST	192.168.2.4	1.1.1.1	0x237b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.437633991 CEST	192.168.2.4	1.1.1.1	0xd77	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 22:55:21.481400013 CEST	192.168.2.4	1.1.1.1	0x78e3	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.481740952 CEST	192.168.2.4	1.1.1.1	0x3e1	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 22:55:22.756108046 CEST	192.168.2.4	1.1.1.1	0x18e7	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:22.759800911 CEST	192.168.2.4	1.1.1.1	0x6e05	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 22:55:23.883980989 CEST	192.168.2.4	1.1.1.1	0xb927	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:23.885253906 CEST	192.168.2.4	1.1.1.1	0xd3a8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:24.887434006 CEST	192.168.2.4	1.1.1.1	0xb17a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:24.887434006 CEST	192.168.2.4	1.1.1.1	0xea26	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:44.130415916 CEST	192.168.2.4	1.1.1.1	0x31db	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:44.130558014 CEST	192.168.2.4	1.1.1.1	0xb802	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Jul 4, 2024 22:55:47.319807053 CEST	192.168.2.4	1.1.1.1	0xd89e	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:47.320285082 CEST	192.168.2.4	1.1.1.1	0x66e5	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Jul 4, 2024 22:55:50.068334103 CEST	192.168.2.4	1.1.1.1	0x4780	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:50.068572998 CEST	192.168.2.4	1.1.1.1	0x838b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:52.642672062 CEST	192.168.2.4	1.1.1.1	0xdc1d	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:52.649461985 CEST	192.168.2.4	1.1.1.1	0x5f9c	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Jul 4, 2024 22:55:58.816735029 CEST	192.168.2.4	1.1.1.1	0xa3e3	Standard query (0)	livewise.janeapp.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:58.817209005 CEST	192.168.2.4	1.1.1.1	0xb0b0	Standard query (0)	livewise.janeapp.com	65	IN (0x0001)	false
Jul 4, 2024 22:55:59.772125006 CEST	192.168.2.4	1.1.1.1	0x3c9d	Standard query (0)	assets-jane-cac1-23.janeapp.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:59.772275925 CEST	192.168.2.4	1.1.1.1	0xdcbc	Standard query (0)	assets-jane-cac1-23.janeapp.net	65	IN (0x0001)	false
Jul 4, 2024 22:56:02.280118942 CEST	192.168.2.4	1.1.1.1	0xa094	Standard query (0)	o4505290921410560.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:02.280311108 CEST	192.168.2.4	1.1.1.1	0x1a01	Standard query (0)	o4505290921410560.ingest.sentry.io	65	IN (0x0001)	false
Jul 4, 2024 22:56:03.037417889 CEST	192.168.2.4	1.1.1.1	0xc19	Standard query (0)	o4505290921410560.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:03.037971973 CEST	192.168.2.4	1.1.1.1	0x96ae	Standard query (0)	o4505290921410560.ingest.sentry.io	65	IN (0x0001)	false
Jul 4, 2024 22:56:03.039132118 CEST	192.168.2.4	1.1.1.1	0x6ac	Standard query (0)	assets-jane-cac1-23.janeapp.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:03.039676905 CEST	192.168.2.4	1.1.1.1	0xf197	Standard query (0)	assets-jane-cac1-23.janeapp.net	65	IN (0x0001)	false
Jul 4, 2024 22:56:04.954006910 CEST	192.168.2.4	1.1.1.1	0xd4b5	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:04.957698107 CEST	192.168.2.4	1.1.1.1	0xd3f7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 4, 2024 22:56:04.977152109 CEST	192.168.2.4	1.1.1.1	0xeb42	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:04.977483988 CEST	192.168.2.4	1.1.1.1	0xb6b1	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 22:56:09.314007044 CEST	192.168.2.4	1.1.1.1	0xa7f5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.314954996 CEST	192.168.2.4	1.1.1.1	0x5682	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 22:56:09.552253008 CEST	192.168.2.4	1.1.1.1	0x1a94	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.555023909 CEST	192.168.2.4	1.1.1.1	0xd8e5	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Jul 4, 2024 22:56:10.591447115 CEST	192.168.2.4	1.1.1.1	0xea0e	Standard query (0)	livewise.janeapp.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:10.591674089 CEST	192.168.2.4	1.1.1.1	0x187f	Standard query (0)	livewise.janeapp.com	65	IN (0x0001)	false
Jul 4, 2024 22:56:15.644386053 CEST	192.168.2.4	1.1.1.1	0x65a9	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:15.644562960 CEST	192.168.2.4	1.1.1.1	0xd78	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Jul 4, 2024 22:56:17.240634918 CEST	192.168.2.4	1.1.1.1	0xe0c6	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:17.241003036 CEST	192.168.2.4	1.1.1.1	0x124c	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Jul 4, 2024 22:56:20.434874058 CEST	192.168.2.4	1.1.1.1	0x3121	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:20.435026884 CEST	192.168.2.4	1.1.1.1	0x9343	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Jul 4, 2024 22:56:21.524647951 CEST	192.168.2.4	1.1.1.1	0x3f34	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.524797916 CEST	192.168.2.4	1.1.1.1	0x5e80	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Jul 4, 2024 22:56:22.501564026 CEST	192.168.2.4	1.1.1.1	0xc32a	Standard query (0)	stripe.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:22.501737118 CEST	192.168.2.4	1.1.1.1	0xc59	Standard query (0)	stripe.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 4, 2024 22:55:12.449480057 CEST	1.1.1.1	192.168.2.4	0x1aed	No error (0)	livewiseinc.com		52.89.243.208	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:13.127017975 CEST	1.1.1.1	192.168.2.4	0xd1f4	No error (0)	livewiseinc.com		52.89.243.208	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.035888910 CEST	1.1.1.1	192.168.2.4	0xd56f	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 4, 2024 22:55:14.036297083 CEST	1.1.1.1	192.168.2.4	0x74b9	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.684689999 CEST	1.1.1.1	192.168.2.4	0x9436	No error (0)	js.sentry-cdn.com		151.101.194.217	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.684689999 CEST	1.1.1.1	192.168.2.4	0x9436	No error (0)	js.sentry-cdn.com		151.101.130.217	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.684689999 CEST	1.1.1.1	192.168.2.4	0x9436	No error (0)	js.sentry-cdn.com		151.101.2.217	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.684689999 CEST	1.1.1.1	192.168.2.4	0x9436	No error (0)	js.sentry-cdn.com		151.101.66.217	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.699955940 CEST	1.1.1.1	192.168.2.4	0x2b37	No error (0)	livewiseasso3873.clinicsites.co	clinicsites-139604409.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:14.745485067 CEST	1.1.1.1	192.168.2.4	0x4286	No error (0)	livewiseasso3873.clinicsites.co	clinicsites-139604409.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:14.745485067 CEST	1.1.1.1	192.168.2.4	0x4286	No error (0)	clinicsites-139604409.us-west-2.elb.amazonaws.com		54.212.237.39	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:14.745485067 CEST	1.1.1.1	192.168.2.4	0x4286	No error (0)	clinicsites-139604409.us-west-2.elb.amazonaws.com		52.26.250.4	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.458134890 CEST	1.1.1.1	192.168.2.4	0x880c	No error (0)	d2t6o06vr3cm40.cloudfront.net		18.65.40.139	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.458134890 CEST	1.1.1.1	192.168.2.4	0x880c	No error (0)	d2t6o06vr3cm40.cloudfront.net		18.65.40.210	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.458134890 CEST	1.1.1.1	192.168.2.4	0x880c	No error (0)	d2t6o06vr3cm40.cloudfront.net		18.65.40.164	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.458134890 CEST	1.1.1.1	192.168.2.4	0x880c	No error (0)	d2t6o06vr3cm40.cloudfront.net		18.65.40.60	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.936218023 CEST	1.1.1.1	192.168.2.4	0x91f4	No error (0)	livewiseinc.com		52.89.243.208	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.960856915 CEST	1.1.1.1	192.168.2.4	0x76f4	No error (0)	livewiseasso3873.clinicsites.co	clinicsites-139604409.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:16.960856915 CEST	1.1.1.1	192.168.2.4	0x76f4	No error (0)	clinicsites-139604409.us-west-2.elb.amazonaws.com		52.26.250.4	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.960856915 CEST	1.1.1.1	192.168.2.4	0x76f4	No error (0)	clinicsites-139604409.us-west-2.elb.amazonaws.com		54.212.237.39	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:16.963255882 CEST	1.1.1.1	192.168.2.4	0x4b7e	No error (0)	livewiseasso3873.clinicsites.co	clinicsites-139604409.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:18.251451015 CEST	1.1.1.1	192.168.2.4	0x70d2	No error (0)	gottmanconnect.com		104.18.7.90	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:18.251451015 CEST	1.1.1.1	192.168.2.4	0x70d2	No error (0)	gottmanconnect.com		104.18.6.90	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:18.271838903 CEST	1.1.1.1	192.168.2.4	0x17fa	No error (0)	gottmanconnect.com			65	IN (0x0001)	false
Jul 4, 2024 22:55:18.846756935 CEST	1.1.1.1	192.168.2.4	0x523d	No error (0)	d2t6o06vr3cm40.cloudfront.net		18.65.40.60	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:18.846756935 CEST	1.1.1.1	192.168.2.4	0x523d	No error (0)	d2t6o06vr3cm40.cloudfront.net		18.65.40.139	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:18.846756935 CEST	1.1.1.1	192.168.2.4	0x523d	No error (0)	d2t6o06vr3cm40.cloudfront.net		18.65.40.210	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:18.846756935 CEST	1.1.1.1	192.168.2.4	0x523d	No error (0)	d2t6o06vr3cm40.cloudfront.net		18.65.40.164	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:20.086810112 CEST	1.1.1.1	192.168.2.4	0x2b88	No error (0)	gottmanconnect.com		104.18.7.90	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:20.086810112 CEST	1.1.1.1	192.168.2.4	0x2b88	No error (0)	gottmanconnect.com		104.18.6.90	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:20.088044882 CEST	1.1.1.1	192.168.2.4	0xb57d	No error (0)	gottmanconnect.com			65	IN (0x0001)	false
Jul 4, 2024 22:55:21.444554090 CEST	1.1.1.1	192.168.2.4	0x477e	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:21.444674969 CEST	1.1.1.1	192.168.2.4	0xba4f	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:21.444674969 CEST	1.1.1.1	192.168.2.4	0xba4f	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.444674969 CEST	1.1.1.1	192.168.2.4	0xba4f	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.444674969 CEST	1.1.1.1	192.168.2.4	0xba4f	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.444674969 CEST	1.1.1.1	192.168.2.4	0xba4f	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.446017981 CEST	1.1.1.1	192.168.2.4	0x237b	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.446017981 CEST	1.1.1.1	192.168.2.4	0x237b	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.446017981 CEST	1.1.1.1	192.168.2.4	0x237b	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.446017981 CEST	1.1.1.1	192.168.2.4	0x237b	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:21.488761902 CEST	1.1.1.1	192.168.2.4	0x78e3	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:22.763706923 CEST	1.1.1.1	192.168.2.4	0x18e7	No error (0)	googleads.g.doubleclick.net		216.58.206.34	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:22.768663883 CEST	1.1.1.1	192.168.2.4	0x6e05	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 4, 2024 22:55:23.892376900 CEST	1.1.1.1	192.168.2.4	0xb927	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:23.892633915 CEST	1.1.1.1	192.168.2.4	0xd3a8	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 4, 2024 22:55:24.894130945 CEST	1.1.1.1	192.168.2.4	0xb17a	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:24.894440889 CEST	1.1.1.1	192.168.2.4	0xea26	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 4, 2024 22:55:30.077054024 CEST	1.1.1.1	192.168.2.4	0x36eb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:30.077054024 CEST	1.1.1.1	192.168.2.4	0x36eb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:42.530668974 CEST	1.1.1.1	192.168.2.4	0xd358	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:42.530668974 CEST	1.1.1.1	192.168.2.4	0xd358	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:44.138489008 CEST	1.1.1.1	192.168.2.4	0x31db	No error (0)	www.recaptcha.net		142.250.186.67	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:47.327236891 CEST	1.1.1.1	192.168.2.4	0xd89e	No error (0)	www.recaptcha.net		142.250.74.195	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:50.075752974 CEST	1.1.1.1	192.168.2.4	0x4780	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:50.076056004 CEST	1.1.1.1	192.168.2.4	0x838b	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 4, 2024 22:55:52.650036097 CEST	1.1.1.1	192.168.2.4	0xdc1d	No error (0)	www.recaptcha.net		172.217.18.3	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:58.836216927 CEST	1.1.1.1	192.168.2.4	0xb0b0	No error (0)	livewise.janeapp.com	jane-pod-cac1-23.janeapp.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:58.837275982 CEST	1.1.1.1	192.168.2.4	0xa3e3	No error (0)	livewise.janeapp.com	jane-pod-cac1-23.janeapp.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:55:58.837275982 CEST	1.1.1.1	192.168.2.4	0xa3e3	No error (0)	jane-pod-cac1-23.janeapp.net		99.79.89.210	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:58.837275982 CEST	1.1.1.1	192.168.2.4	0xa3e3	No error (0)	jane-pod-cac1-23.janeapp.net		99.79.90.192	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:58.837275982 CEST	1.1.1.1	192.168.2.4	0xa3e3	No error (0)	jane-pod-cac1-23.janeapp.net		3.99.105.136	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:59.782690048 CEST	1.1.1.1	192.168.2.4	0x3c9d	No error (0)	assets-jane-cac1-23.janeapp.net		18.239.94.5	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:59.782690048 CEST	1.1.1.1	192.168.2.4	0x3c9d	No error (0)	assets-jane-cac1-23.janeapp.net		18.239.94.41	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:59.782690048 CEST	1.1.1.1	192.168.2.4	0x3c9d	No error (0)	assets-jane-cac1-23.janeapp.net		18.239.94.69	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:55:59.782690048 CEST	1.1.1.1	192.168.2.4	0x3c9d	No error (0)	assets-jane-cac1-23.janeapp.net		18.239.94.28	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:02.301559925 CEST	1.1.1.1	192.168.2.4	0xa094	No error (0)	o4505290921410560.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:03.050956964 CEST	1.1.1.1	192.168.2.4	0x6ac	No error (0)	assets-jane-cac1-23.janeapp.net		18.239.94.28	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:03.050956964 CEST	1.1.1.1	192.168.2.4	0x6ac	No error (0)	assets-jane-cac1-23.janeapp.net		18.239.94.5	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:03.050956964 CEST	1.1.1.1	192.168.2.4	0x6ac	No error (0)	assets-jane-cac1-23.janeapp.net		18.239.94.69	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:03.050956964 CEST	1.1.1.1	192.168.2.4	0x6ac	No error (0)	assets-jane-cac1-23.janeapp.net		18.239.94.41	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:03.059979916 CEST	1.1.1.1	192.168.2.4	0xc19	No error (0)	o4505290921410560.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:03.456342936 CEST	1.1.1.1	192.168.2.4	0x395f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:03.456342936 CEST	1.1.1.1	192.168.2.4	0x395f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:04.962743044 CEST	1.1.1.1	192.168.2.4	0xd4b5	No error (0)	analytics.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:04.965682030 CEST	1.1.1.1	192.168.2.4	0xd3f7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:04.984071970 CEST	1.1.1.1	192.168.2.4	0xeb42	No error (0)	td.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.324579954 CEST	1.1.1.1	192.168.2.4	0xa7f5	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.324579954 CEST	1.1.1.1	192.168.2.4	0xa7f5	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.324579954 CEST	1.1.1.1	192.168.2.4	0xa7f5	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.324579954 CEST	1.1.1.1	192.168.2.4	0xa7f5	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.561640024 CEST	1.1.1.1	192.168.2.4	0x1a94	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:09.561640024 CEST	1.1.1.1	192.168.2.4	0x1a94	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.561640024 CEST	1.1.1.1	192.168.2.4	0x1a94	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.561640024 CEST	1.1.1.1	192.168.2.4	0x1a94	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.561640024 CEST	1.1.1.1	192.168.2.4	0x1a94	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:09.562737942 CEST	1.1.1.1	192.168.2.4	0xd8e5	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:10.611371040 CEST	1.1.1.1	192.168.2.4	0xea0e	No error (0)	livewise.janeapp.com	jane-pod-cac1-23.janeapp.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:10.611371040 CEST	1.1.1.1	192.168.2.4	0xea0e	No error (0)	jane-pod-cac1-23.janeapp.net		3.99.105.136	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:10.611371040 CEST	1.1.1.1	192.168.2.4	0xea0e	No error (0)	jane-pod-cac1-23.janeapp.net		99.79.90.192	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:10.611371040 CEST	1.1.1.1	192.168.2.4	0xea0e	No error (0)	jane-pod-cac1-23.janeapp.net		99.79.89.210	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:10.613746881 CEST	1.1.1.1	192.168.2.4	0x187f	No error (0)	livewise.janeapp.com	jane-pod-cac1-23.janeapp.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:15.652806997 CEST	1.1.1.1	192.168.2.4	0x65a9	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:15.652806997 CEST	1.1.1.1	192.168.2.4	0x65a9	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:15.652806997 CEST	1.1.1.1	192.168.2.4	0x65a9	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:15.652806997 CEST	1.1.1.1	192.168.2.4	0x65a9	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:15.652806997 CEST	1.1.1.1	192.168.2.4	0x65a9	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:15.654361010 CEST	1.1.1.1	192.168.2.4	0xd78	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:17.247796059 CEST	1.1.1.1	192.168.2.4	0xe0c6	No error (0)	m.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:17.247796059 CEST	1.1.1.1	192.168.2.4	0xe0c6	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:17.247796059 CEST	1.1.1.1	192.168.2.4	0xe0c6	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:17.247796059 CEST	1.1.1.1	192.168.2.4	0xe0c6	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:17.247796059 CEST	1.1.1.1	192.168.2.4	0xe0c6	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:17.249834061 CEST	1.1.1.1	192.168.2.4	0x124c	No error (0)	m.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:20.442023993 CEST	1.1.1.1	192.168.2.4	0x3121	No error (0)	m.stripe.com		44.240.83.234	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:20.442023993 CEST	1.1.1.1	192.168.2.4	0x3121	No error (0)	m.stripe.com		44.241.217.230	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:20.442023993 CEST	1.1.1.1	192.168.2.4	0x3121	No error (0)	m.stripe.com		44.238.197.191	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:20.442023993 CEST	1.1.1.1	192.168.2.4	0x3121	No error (0)	m.stripe.com		34.209.252.182	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:20.442023993 CEST	1.1.1.1	192.168.2.4	0x3121	No error (0)	m.stripe.com		52.27.30.120	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:20.442023993 CEST	1.1.1.1	192.168.2.4	0x3121	No error (0)	m.stripe.com		34.211.59.54	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:20.442023993 CEST	1.1.1.1	192.168.2.4	0x3121	No error (0)	m.stripe.com		52.27.171.251	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:20.442023993 CEST	1.1.1.1	192.168.2.4	0x3121	No error (0)	m.stripe.com		44.240.131.60	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.532937050 CEST	1.1.1.1	192.168.2.4	0x3f34	No error (0)	m.stripe.com		34.209.252.182	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.532937050 CEST	1.1.1.1	192.168.2.4	0x3f34	No error (0)	m.stripe.com		44.240.131.60	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.532937050 CEST	1.1.1.1	192.168.2.4	0x3f34	No error (0)	m.stripe.com		44.237.241.146	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.532937050 CEST	1.1.1.1	192.168.2.4	0x3f34	No error (0)	m.stripe.com		44.241.217.230	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.532937050 CEST	1.1.1.1	192.168.2.4	0x3f34	No error (0)	m.stripe.com		52.88.12.151	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.532937050 CEST	1.1.1.1	192.168.2.4	0x3f34	No error (0)	m.stripe.com		52.11.30.157	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.532937050 CEST	1.1.1.1	192.168.2.4	0x3f34	No error (0)	m.stripe.com		52.27.171.251	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:21.532937050 CEST	1.1.1.1	192.168.2.4	0x3f34	No error (0)	m.stripe.com		44.240.83.234	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:22.509228945 CEST	1.1.1.1	192.168.2.4	0xc32a	No error (0)	stripe.com		198.137.150.201	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:56:22.663678885 CEST	1.1.1.1	192.168.2.4	0xa55a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:56:22.663678885 CEST	1.1.1.1	192.168.2.4	0xa55a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	52.89.243.208	80	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:55:12.457461119 CEST	430	OUT	GET / HTTP/1.1 Host: livewiseinc.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 22:55:13.087198019 CEST	161	IN	HTTP/1.1 308 Permanent Redirect Connection: close Location: https://livewiseinc.com/ Server: Caddy Date: Thu, 04 Jul 2024 20:55:12 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	52.89.243.208	80	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:55:57.464129925 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:13 UTC	658	OUT	GET / HTTP/1.1 Host: livewiseinc.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:14 UTC	1182	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: frame-ancestors 'self' http://*.lvh.me:3000 Content-Type: text/html; charset=utf-8 Date: Thu, 04 Jul 2024 20:55:14 GMT Etag: W/"d03392e625fde9fb86ebf5b8517f4623" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Set-Cookie: _engage_session=M0poZkRtOFNWeVhmQ0Q0a2t5bDlWaEFvTkIrakpmd1Q2TitBQVZVdmlJczB1WjJ2OXFTRTczaFdTdkNqZmlmV240SXJuQ0U5anFlbVN5cUhEV1QzRDMrQzdxN0RWbGtxNXk0ZGxrS0htemJOK29kNDlxdkZQdlVIcEhiTFVobUNrMHNZMjNUU1dFeENCbXBJTmVHWXlQTXNZVHNidTh5cEJPR3FpNTcrZjVBSUVnYWREeDZXWEM4MUd4Q25ZQlhWbjlVT3JrNDNhdHlqSlNCeDVvS29GU1NtS0pIZ05Ka1dLMDRUb3NGQkU4ZCtZcHBWT3pBVFczOE01cFhTb2tSMDhrZUJadllPU0U2OHVxbkF5NnNKc0RINW9yZ2t3b3lIb0hVeloyVjRzMWwzMmsrVVFZMktsU3B5aFBFWDlmNWViN1dXUFpuVHFmRGpMVyt3a3lwWVRuNUQ1ek5HVjcrbHNYS3pKaXlYYkNLYWdSMHh0bm5hR2l3NGhzYy9zbjlWVFhuODFnQm1YUUJKOWRYaCtZMk5nMmE3ZHBNeXVIZFBlaVB1RHlRNlE0d285OVpzeDIzdU5IVmtnN1crTzcxVS0tSGRDTjZOc01iVFVBbFkyWGd1NnA1UT09--56968e23bbbced720d8e367d320a9f1560a16dac; path=/; HttpOnly Status: 200 OK Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
2024-07-04 20:55:14 UTC	218	IN	Data Raw: 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 68 75 73 69 6f 6e 20 50 61 73 73 65 6e 67 65 72 28 52 29 20 36 2e 30 2e 31 34 0d 0a 58 2d 52 61 63 6b 2d 43 61 63 68 65 3a 20 6d 69 73 73 0d 0a 58 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 30 63 37 62 31 33 63 64 2d 34 65 66 63 2d 34 61 33 37 2d 38 32 64 39 2d 61 32 32 39 39 35 65 62 39 62 30 65 0d 0a 58 2d 52 75 6e 74 69 6d 65 3a 20 30 2e 32 36 31 33 39 37 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: X-Powered-By: Phusion Passenger(R) 6.0.14X-Rack-Cache: missX-Request-Id: 0c7b13cd-4efc-4a37-82d9-a22995eb9b0eX-Runtime: 0.261397X-Xss-Protection: 1; mode=blockConnection: closeTransfer-Encoding: chunked
2024-07-04 20:55:14 UTC	3558	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 69 76 65 57 69 73 65 20 41 73 73 6f 63 69 61 74 65 73 22 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 Data Ascii: 4000<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta content="IE=edge" http-equiv="X-UA-Compatible"/> <meta content="width=device-width, initial-scale=1.0" name="viewport"/> <meta content="LiveWise Associates" name="author"
2024-07-04 20:55:14 UTC	538	IN	Data Raw: 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 0a 20 20 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2d 35 30 35 32 61 31 65 34 34 66 62 66 32 34 61 63 36 31 32 65 66 63 35 33 65 32 32 62 61 32 36 36 33 62 63 36 35 39 30 64 35 32 62 63 39 64 32 37 61 35 38 36 31 65 31 33 62 65 66 65 61 39 38 63 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 74 69 6e 79 6d 63 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 20 74 69 6e 79 6d 63 65 2e 75 74 69 6c 2e 58 48 52 2e 6f 6e 28 27 62 65 66 6f 72 65 53 65 6e 64 27 2c 20 73 65 74 75 70 54 69 6e 79 4d 43 45 48 65 61 64 65 Data Ascii: sorigin="anonymous" ></script> <script src="/assets/application-5052a1e44fbf24ac612efc53e22ba2663bc6590d52bc9d27a5861e13befea98c.js"></script> <script> if (typeof tinymce !== 'undefined') { tinymce.util.XHR.on('beforeSend', setupTinyMCEHeade
2024-07-04 20:55:14 UTC	5930	IN	Data Raw: 72 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 20 20 20 20 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 2d 35 32 43 4a 30 4e 47 47 42 37 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 2d 37 4b 57 4e 34 50 43 43 59 43 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 54 4d 2d 50 52 39 42 34 50 56 58 27 29 3b 0a 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 0a 3c 2f 68 65 61 64 3e 0a 0a 20 20 3c 62 6f 64 79 Data Ascii: r \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-52CJ0NGGB7'); gtag('config', 'G-7KWN4PCCYC'); gtag('config', 'GTM-PR9B4PVX'); </script> </head> <body
2024-07-04 20:55:14 UTC	6364	IN	Data Raw: 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 22 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 2d 2d 3e 0a 0a 20 20 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 6d 61 69 6e 20 72 6f 6c 65 3d 22 6d 61 69 6e 22 20 63 6c 61 73 73 3d 27 63 6f 6e 74 65 6e 74 20 66 6c 65 78 2d 67 72 6f 77 2d 31 20 20 5f 69 6e 64 65 78 20 63 6c 65 61 72 66 69 78 20 6d 2d 30 20 70 2d 30 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 0a 0a 20 20 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 3e 0a 0a 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 2d 73 6f 72 74 61 62 6c 65 2d 74 6f 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 6c 6f 63 6b 2d Data Ascii: " style="opacity: 0.5;"> </div> </div> </div>--> </div> <main role="main" class='content flex-grow-1 _index clearfix m-0 p-0'> <div class=""> <div class="js-sortable-top"> <div id="block-
2024-07-04 20:55:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 20:55:14 UTC	4096	IN	Data Raw: 34 30 30 30 0d 0a 2e 30 3b 22 20 64 61 74 61 2d 62 6c 6f 63 6b 2d 6f 76 65 72 6c 61 79 3e 20 3c 2f 64 69 76 3e 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 72 65 6c 61 74 69 76 65 22 3e 0a 0a 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 6c 6f 63 6b 5f 65 6c 65 6d 65 6e 74 5f 32 34 34 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 73 6f 72 74 61 62 6c 65 2d 69 74 65 6d 20 6d 62 2d 33 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 32 3e 4e 6f 20 57 61 69 74 69 6e 67 20 4c 69 73 74 73 21 20 0a 20 20 20 20 20 20 20 20 3c 2f 68 32 3e 0a 20 20 20 20 20 20 3c 68 33 3e 44 69 72 65 63 74 20 42 69 6c 6c 69 6e 67 20 46 6f 72 20 4d 6f 73 74 20 49 6e 73 75 72 61 6e 63 65 20 50 6c 61 6e 73 21 20 3c 2f 68 33 3e Data Ascii: 4000.0;" data-block-overlay> </div> <div class="container relative"> <div id="block_element_244" class="element sortable-item mb-3"> <h2>No Waiting Lists! </h2> <h3>Direct Billing For Most Insurance Plans! </h3>
2024-07-04 20:55:14 UTC	10674	IN	Data Raw: 61 74 69 76 65 20 62 67 2d 63 6f 76 65 72 20 62 67 2d 6e 6f 6e 65 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 6a 73 2d 62 6c 6f 63 6b 2d 68 65 69 67 68 74 20 6a 73 2d 62 6c 6f 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 20 6a 73 2d 62 6c 6f 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 68 6f 74 6f 20 22 20 73 74 79 6c 65 3d 22 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 34 31 76 68 3b 22 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 67 2d 74 65 72 74 69 61 72 79 20 70 6f 73 20 70 6f 73 2d 63 6f 76 65 72 20 6a 73 2d 62 6c 6f 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 20 6a 73 2d 62 6c 6f 63 6b 2d 6f 70 61 63 69 74 79 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a 20 31 2e 30 3b 22 20 64 61 74 61 2d 62 6c 6f 63 6b 2d 6f 76 65 72 Data Ascii: ative bg-cover bg-none overflow-hidden js-block-height js-block-background js-block-background-photo " style=" min-height: 41vh;"> <div class="bg-tertiary pos pos-cover js-block-background js-block-opacity" style="opacity: 1.0;" data-block-over
2024-07-04 20:55:14 UTC	1620	IN	Data Raw: 76 65 20 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 2d 73 6d 2d 66 6c 65 78 20 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 2d 73 6d 2d 66 6c 65 78 20 77 2d 31 30 30 20 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 6d 64 2d 38 20 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 36 20 63 6f 6c 2d 6d 64 2d 34 20 6d 62 2d 33 20 6d 62 2d 73 6d 2d 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 27 27 3e 0a 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 27 75 70 70 65 72 63 61 73 65 2d 6d 65 6e 75 20 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 27 3e 0a 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: ve container"> <div class="d-sm-flex row"> <div class="d-sm-flex w-100 col-sm-6 col-md-8 row"> <div class="col-sm-6 col-md-4 mb-3 mb-sm-0"> <div class=''> <ul class='uppercase-menu list-unstyled'> <
2024-07-04 20:55:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49749	151.101.194.217	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:15 UTC	585	OUT	GET /94b09a2c1e465a745170fd2d8fd6138d.min.js HTTP/1.1 Host: js.sentry-cdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://livewiseinc.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:15 UTC	320	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2628 content-type: text/javascript access-control-allow-origin: * cache-control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000 x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 1; mode=block
2024-07-04 20:55:15 UTC	1445	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 77 6f 72 6b 65 72 2d 73 72 63 20 62 6c 6f 62 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 73 31 2e 73 65 6e 74 72 79 2d 63 64 6e 2e 63 6f 6d 20 6a 73 2e 73 65 6e 74 72 79 2d 63 64 6e 2e 63 6f 6d 20 62 72 6f 77 73 65 72 2e 73 65 6e 74 72 79 2d 63 64 6e 2e 63 6f 6d 20 73 74 61 74 75 73 70 61 67 65 2d 70 72 6f 64 75 63 74 69 6f 6e 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 20 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 20 61 75 69 2d 63 64 6e 2e 61 74 6c 61 73 73 69 61 6e 2e 63 6f 6d 20 63 6f 6e 6e 65 63 74 2d 63 64 6e 2e 61 74 6c 2d 70 61 61 73 2e 6e Data Ascii: content-security-policy: worker-src blob:; script-src 'self' 'unsafe-inline' 'report-sample' s1.sentry-cdn.com js.sentry-cdn.com browser.sentry-cdn.com statuspage-production.s3.amazonaws.com static.zdassets.com aui-cdn.atlassian.com connect-cdn.atl-paas.n
2024-07-04 20:55:15 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 72 2c 74 2c 69 2c 6f 2c 61 2c 63 2c 73 29 7b 66 6f 72 28 76 61 72 20 75 3d 73 2c 66 3d 30 3b 66 3c 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 5b 66 5d 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 6f 29 3e 2d 31 29 7b 75 26 26 22 6e 6f 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 5b 66 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 61 7a 79 22 29 26 26 28 75 3d 21 31 29 3b 62 72 65 61 6b 7d 76 61 72 20 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 6e 29 7b 72 65 74 75 72 6e 22 65 22 69 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 29 7b 72 65 74 75 72 6e 22 70 22 69 6e 20 6e 7d 66 75 6e Data Ascii: !function(n,e,r,t,i,o,a,c,s){for(var u=s,f=0;f<document.scripts.length;f++)if(document.scripts[f].src.indexOf(o)>-1){u&&"no"===document.scripts[f].getAttribute("data-lazy")&&(u=!1);break}var p=[];function l(n){return"e"in n}function d(n){return"p"in n}fun
2024-07-04 20:55:15 UTC	1249	IN	Data Raw: 28 72 3d 30 3b 72 3c 76 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 5f 28 6f 3d 76 5b 72 5d 29 26 26 22 69 6e 69 74 22 3d 3d 3d 6f 2e 66 26 26 65 2e 69 6e 69 74 2e 61 70 70 6c 79 28 65 2c 6f 2e 61 29 7d 4c 28 29 7c 7c 65 2e 69 6e 69 74 28 29 3b 76 61 72 20 74 3d 6e 2e 6f 6e 65 72 72 6f 72 2c 69 3d 6e 2e 6f 6e 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 3b 66 6f 72 28 72 3d 30 3b 72 3c 76 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3b 69 66 28 5f 28 6f 3d 76 5b 72 5d 29 29 7b 69 66 28 22 69 6e 69 74 22 3d 3d 3d 6f 2e 66 29 63 6f 6e 74 69 6e 75 65 3b 65 5b 6f 2e 66 5d 2e 61 70 70 6c 79 28 65 2c 6f 2e 61 29 7d 65 6c 73 65 20 6c 28 6f 29 26 26 74 3f 74 2e 61 70 70 6c 79 28 6e 2c 6f 2e 65 29 3a 64 28 6f 29 26 26 69 26 26 69 2e 61 70 70 6c 79 28 Data Ascii: (r=0;r<v.length;r++){_(o=v[r])&&"init"===o.f&&e.init.apply(e,o.a)}L()\|\|e.init();var t=n.onerror,i=n.onunhandledrejection;for(r=0;r<v.length;r++){var o;if(_(o=v[r])){if("init"===o.f)continue;e[o.f].apply(e,o.a)}else l(o)&&t?t.apply(n,o.e):d(o)&&i&&i.apply(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:15 UTC	1316	OUT	GET /assets/application-b2dfc1aad05e45e6756e097b15c026c250a3e30a8cab4651d613dd0a09ef5569.css HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac
2024-07-04 20:55:15 UTC	373	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: text/css Date: Thu, 04 Jul 2024 20:55:15 GMT Etag: W/"660e5093-25273" Expires: Fri, 04 Jul 2025 20:55:15 GMT Last-Modified: Thu, 04 Apr 2024 07:02:43 GMT Server: Caddy Server: nginx/1.14.0 (Ubuntu) Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:15 UTC	2372	IN	Data Raw: 38 30 30 30 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 69 73 20 61 20 6d 61 6e 69 66 65 73 74 20 66 69 6c 65 20 74 68 61 74 27 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 63 6c 75 64 65 20 61 6c 6c 20 74 68 65 20 73 74 79 6c 65 73 68 65 65 74 73 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 69 73 20 64 69 72 65 63 74 6f 72 79 0a 20 2a 20 61 6e 64 20 61 6e 79 20 73 75 62 2d 64 69 72 65 63 74 6f 72 69 65 73 2e 20 59 6f 75 27 72 65 20 66 72 65 65 20 74 6f 20 61 64 64 20 61 70 70 6c 69 63 61 74 69 6f 6e 2d 77 69 64 65 20 73 74 79 6c 65 73 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 61 6e 64 20 74 68 65 79 27 6c 6c 20 61 70 70 65 61 72 20 61 74 0a 20 2a 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 63 6f 6d 70 69 6c 65 64 20 66 69 6c 65 2c 20 62 75 Data Ascii: 8000/* * This is a manifest file that'll automatically include all the stylesheets available in this directory * and any sub-directories. You're free to add application-wide styles to this file and they'll appear at * the top of the compiled file, bu
2024-07-04 20:55:15 UTC	1724	IN	Data Raw: 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 61 2c 61 3a 76 69 73 69 74 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 5b 68 72 65 66 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 28 22 20 61 74 74 72 28 68 72 65 66 29 20 22 29 22 7d 61 62 62 72 5b 74 69 74 6c 65 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 28 22 20 61 74 74 72 28 74 69 74 6c 65 29 20 22 29 22 7d 61 5b 68 72 65 66 5e 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 22 5d 3a 61 66 74 65 Data Ascii: w:none !important;color:#000 !important;background:transparent !important;box-shadow:none !important}a,a:visited{text-decoration:underline}a[href]:after{content:" (" attr(href) ")"}abbr[title]:after{content:" (" attr(title) ")"}a[href^="javascript:"]:afte
2024-07-04 20:55:15 UTC	4744	IN	Data Raw: 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 Data Ascii: h-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off:before{content:"\e017"}.glyphicon-signal:before
2024-07-04 20:55:15 UTC	5930	IN	Data Raw: 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 31 22 7d 2e 67 Data Ascii: n:before{content:"\e126"}.glyphicon-hand-right:before{content:"\e127"}.glyphicon-hand-left:before{content:"\e128"}.glyphicon-hand-up:before{content:"\e129"}.glyphicon-hand-down:before{content:"\e130"}.glyphicon-circle-arrow-right:before{content:"\e131"}.g
2024-07-04 20:55:15 UTC	7116	IN	Data Raw: 6e 3a 6a 75 73 74 69 66 79 7d 2e 74 65 78 74 2d 6e 6f 77 72 61 70 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 7d 2e 74 65 78 74 2d 75 70 70 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 74 65 78 74 2d 63 61 70 69 74 61 6c 69 7a 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 63 61 70 69 74 61 6c 69 7a 65 7d 2e 74 65 78 74 2d 6d 75 74 65 64 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 23 34 32 38 62 63 61 7d 61 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 30 37 31 61 39 7d 2e 74 Data Ascii: n:justify}.text-nowrap{white-space:nowrap}.text-lowercase{text-transform:lowercase}.text-uppercase{text-transform:uppercase}.text-capitalize{text-transform:capitalize}.text-muted{color:#777}.text-primary{color:#428bca}a.text-primary:hover{color:#3071a9}.t
2024-07-04 20:55:15 UTC	8302	IN	Data Raw: 6f 6c 2d 73 6d 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 36 7b 6c 65 66 74 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 35 7b 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 34 7b 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 Data Ascii: ol-sm-push-11{left:91.66666667%}.col-sm-push-10{left:83.33333333%}.col-sm-push-9{left:75%}.col-sm-push-8{left:66.66666667%}.col-sm-push-7{left:58.33333333%}.col-sm-push-6{left:50%}.col-sm-push-5{left:41.66666667%}.col-sm-push-4{left:33.33333333%}.col-sm-p
2024-07-04 20:55:15 UTC	2586	IN	Data Raw: 72 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2e 64 61 6e 67 65 72 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 64 61 6e 67 65 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 64 61 6e 67 65 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 64 61 6e 67 65 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 64 65 64 65 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 Data Ascii: r,.table>tfoot>tr>th.danger,.table>thead>tr.danger>td,.table>tbody>tr.danger>td,.table>tfoot>tr.danger>td,.table>thead>tr.danger>th,.table>tbody>tr.danger>th,.table>tfoot>tr.danger>th{background-color:#f2dede}.table-hover>tbody>tr>td.danger:hover,.table-h
2024-07-04 20:55:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 20:55:15 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 6f 78 22 5d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 6f 75 74 70 75 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 63 6f 6c 6f 72 3a 23 35 35 35 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 33 34 70 78 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 32 70 78 3b 66 6f Data Ascii: 8000ox"]:focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px}output{display:block;padding-top:7px;font-size:14px;line-height:1.42857143;color:#555}.form-control{display:block;width:100%;height:34px;padding:6px 12px;fo
2024-07-04 20:55:15 UTC	13046	IN	Data Raw: 66 65 65 64 62 61 63 6b 7b 77 69 64 74 68 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 68 65 6c 70 2d 62 6c 6f 63 6b 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 72 61 64 69 6f 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 63 68 65 63 6b 62 6f 78 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 2e 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2c Data Ascii: feedback{width:30px;height:30px;line-height:30px}.has-success .help-block,.has-success .control-label,.has-success .radio,.has-success .checkbox,.has-success .radio-inline,.has-success .checkbox-inline,.has-success.radio label,.has-success.checkbox label,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:15 UTC	1290	OUT	GET /themes/stylesheet.css?timestamp=2024-06-27+17%3A22%3A25+-0700 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac
2024-07-04 20:55:15 UTC	707	IN	HTTP/1.1 200 OK Age: 0 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public Content-Type: text/css; charset=utf-8 Date: Thu, 04 Jul 2024 20:55:15 GMT Etag: W/"73853a13bc44d72fa59ac596bfdf2281" Last-Modified: Fri, 28 Jun 2024 00:22:25 GMT Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK Vary: Accept-Encoding X-Content-Digest: 9ebd4e36d10b89fb2bdb49004a3a1a1eab8c6607 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: stale, valid, store X-Request-Id: d66f0f69-c0ad-4832-997e-d5e9743f6b05 X-Runtime: 0.013556 X-Xss-Protection: 1; mode=block Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:15 UTC	2372	IN	Data Raw: 31 64 39 32 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d Data Ascii: 1d92/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */htm
2024-07-04 20:55:15 UTC	1724	IN	Data Raw: 6e 64 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 6f 70 74 67 72 6f 75 70 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 20 20 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 74 64 2c 0a 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2f 2a 21 20 53 6f 75 72 63 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 68 35 62 70 2f 68 74 6d 6c 35 2d 62 6f 69 6c 65 72 70 6c 61 74 65 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 73 72 63 2f 63 Data Ascii: nd { border: 0; padding: 0;}textarea { overflow: auto;}optgroup { font-weight: bold;}table { border-collapse: collapse; border-spacing: 0;}td,th { padding: 0;}/*! Source: https://github.com/h5bp/html5-boilerplate/blob/master/src/c
2024-07-04 20:55:15 UTC	3482	IN	Data Raw: 61 74 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 35 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 32 32 32 32 32 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 69 6e 70 75 74 2c 0a 62 75 74 74 6f 6e 2c 0a 73 65 6c 65 63 74 2c 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 36 32 33 63 3b 0a 20 20 66 69 6c 6c 3a 20 23 64 65 36 32 33 63 3b 0a 20 20 74 65 Data Ascii: at', sans-serif; font-size: 15px; line-height: 1.55; color: #222222; background-color: #ffffff;}input,button,select,textarea { font-family: inherit; font-size: inherit; line-height: inherit;}a { color: #de623c; fill: #de623c; te
2024-07-04 20:55:15 UTC	4096	IN	Data Raw: 34 30 30 30 0d 0a 63 61 73 65 3b 0a 7d 0a 2e 74 65 78 74 2d 75 70 70 65 72 63 61 73 65 20 7b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 7d 0a 2e 74 65 78 74 2d 63 61 70 69 74 61 6c 69 7a 65 20 7b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 63 61 70 69 74 61 6c 69 7a 65 3b 0a 7d 0a 2e 74 65 78 74 2d 6d 75 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 30 38 30 38 30 3b 0a 20 20 66 69 6c 6c 3a 20 23 38 30 38 30 38 30 3b 0a 7d 0a 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 63 66 61 66 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 66 69 6c 6c 3a 20 23 66 63 66 61 66 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 61 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 3a Data Ascii: 4000case;}.text-uppercase { text-transform: uppercase;}.text-capitalize { text-transform: capitalize;}.text-muted { color: #808080; fill: #808080;}.text-primary { color: #fcfaf5 !important; fill: #fcfaf5 !important;}a.text-primary:
2024-07-04 20:55:15 UTC	7116	IN	Data Raw: 7d 0a 2e 65 6c 65 6d 65 6e 74 20 2e 62 6f 64 79 20 61 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 63 6f 64 65 2c 0a 6b 62 64 2c 0a 70 72 65 2c 0a 73 61 6d 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4d 65 6e 6c 6f 2c 20 4d 6f 6e 61 63 6f 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 7d 0a 63 6f 64 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 25 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 37 32 35 34 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 32 66 34 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 Data Ascii: }.element .body a { text-decoration: underline;}code,kbd,pre,samp { font-family: Menlo, Monaco, Consolas, "Courier New", monospace;}code { padding: 2px 4px; font-size: 90%; color: #c7254e; background-color: #f9f2f4; border-radius: 4p
2024-07-04 20:55:15 UTC	5178	IN	Data Raw: 3a 20 36 36 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 37 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 38 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 35 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 33 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 32 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b Data Ascii: : 66.66666667%; } .col-md-7 { width: 58.33333333%; } .col-md-6 { width: 50%; } .col-md-5 { width: 41.66666667%; } .col-md-4 { width: 33.33333333%; } .col-md-3 { width: 25%; } .col-md-2 { width: 16.66666667%;
2024-07-04 20:55:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 20:55:15 UTC	4096	IN	Data Raw: 32 32 36 65 0d 0a 6e 3a 20 62 6f 74 74 6f 6d 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 65 36 65 36 65 36 3b 0a 7d 0a 2e 74 61 62 6c 65 20 3e 20 63 61 70 74 69 6f 6e 20 2b 20 74 68 65 61 64 20 3e 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 68 2c 0a 2e 74 61 62 6c 65 20 3e 20 63 6f 6c 67 72 6f 75 70 20 2b 20 74 68 65 61 64 20 3e 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 68 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 68 2c 0a 2e 74 61 62 6c 65 20 3e 20 63 61 70 74 69 6f 6e 20 2b 20 74 68 65 61 64 20 3e 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 74 64 2c 0a 2e 74 61 62 6c Data Ascii: 226en: bottom; border-bottom: 2px solid #e6e6e6;}.table > caption + thead > tr:first-child > th,.table > colgroup + thead > tr:first-child > th,.table > thead:first-child > tr:first-child > th,.table > caption + thead > tr:first-child > td,.tabl
2024-07-04 20:55:15 UTC	4724	IN	Data Raw: 6e 67 2c 0a 2e 74 61 62 6c 65 2d 68 6f 76 65 72 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 2e 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 20 3e 20 74 68 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 64 64 33 31 63 3b 0a 7d 0a 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 64 2e 64 61 6e 67 65 72 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 2e 64 61 6e 67 65 72 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 64 2e 64 61 6e 67 65 72 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 68 2e 64 61 6e 67 65 72 2c 0a 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 68 2e 64 61 6e 67 65 72 2c 0a 2e 74 61 62 6c 65 20 3e Data Ascii: ng,.table-hover > tbody > tr.warning:hover > th { background-color: #fdd31c;}.table > thead > tr > td.danger,.table > tbody > tr > td.danger,.table > tfoot > tr > td.danger,.table > thead > tr > th.danger,.table > tbody > tr > th.danger,.table >
2024-07-04 20:55:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:15 UTC	1314	OUT	GET /assets/overrides-72a980cf14267657c863ba73d3033814e028dae4381ca0e291db6ee642342be2.css HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac
2024-07-04 20:55:15 UTC	361	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Length: 283 Content-Type: text/css Date: Thu, 04 Jul 2024 20:55:15 GMT Etag: "65fdc262-11b" Expires: Fri, 04 Jul 2025 20:55:15 GMT Last-Modified: Fri, 22 Mar 2024 17:39:46 GMT Server: Caddy Server: nginx/1.14.0 (Ubuntu) Connection: close
2024-07-04 20:55:15 UTC	283	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 70 78 29 7b 2e 62 74 6e 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 2e 76 69 64 65 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 67 72 65 63 61 70 74 63 68 61 2d 62 61 64 67 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 72 65 63 61 70 74 63 68 61 20 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 7d 2e 72 65 63 61 70 74 63 68 61 20 73 6d 61 6c 6c 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 72 65 63 61 70 74 63 68 61 20 73 6d 61 6c 6c 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 63 6f 6e 66 Data Ascii: @media screen and (max-width:991px){.btn{white-space:normal}.video-background{display:none}}.grecaptcha-badge{visibility:hidden}.recaptcha small{font-size:75%}.recaptcha small a{text-decoration:underline}.recaptcha small a:hover{text-decoration:none}#conf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:15 UTC	1301	OUT	GET /assets/application-5052a1e44fbf24ac612efc53e22ba2663bc6590d52bc9d27a5861e13befea98c.js HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac
2024-07-04 20:55:15 UTC	387	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Thu, 04 Jul 2024 20:55:15 GMT Etag: W/"662b4c34-4a6e2" Expires: Fri, 04 Jul 2025 20:55:15 GMT Last-Modified: Fri, 26 Apr 2024 06:39:48 GMT Server: Caddy Server: nginx/1.14.0 (Ubuntu) Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:15 UTC	2372	IN	Data Raw: 38 30 30 30 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 61 64 65 49 6e 56 69 64 65 6f 42 61 63 6b 67 72 6f 75 6e 64 28 29 7b 24 28 22 23 62 72 65 61 6b 70 6f 69 6e 74 73 20 2e 68 69 64 64 65 6e 2d 78 73 22 29 2e 69 73 28 22 3a 68 69 64 64 65 6e 22 29 26 26 24 28 22 2e 76 69 64 65 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 22 29 2e 72 65 6d 6f 76 65 28 29 2c 24 28 22 2e 76 69 64 65 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 22 29 2e 64 65 6c 61 79 28 31 35 30 30 29 2e 66 61 64 65 49 6e 28 35 30 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 6e 50 6c 61 79 65 72 52 65 61 64 79 28 65 29 7b 65 2e 74 61 72 67 65 74 2e 70 6c 61 79 56 69 64 65 6f 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 42 6c 6f 63 6b 42 74 6e 43 6f 6c 6f 72 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 73 77 69 74 63 68 28 65 Data Ascii: 8000function fadeInVideoBackground(){$("#breakpoints .hidden-xs").is(":hidden")&&$(".video-background").remove(),$(".video-background").delay(1500).fadeIn(500)}function onPlayerReady(e){e.target.playVideo()}function getBlockBtnColor(e){var t="";switch(e
2024-07-04 20:55:15 UTC	1724	IN	Data Raw: 2d 6f 70 61 63 69 74 79 22 29 2c 63 68 61 6e 67 65 42 6c 6f 63 6b 44 6f 6d 4f 70 61 63 69 74 79 28 6f 70 61 63 69 74 79 2c 62 6c 6f 63 6b 4f 70 61 63 69 74 79 45 6c 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 6c 6f 63 6b 4f 70 61 63 69 74 79 4e 6f 42 61 63 6b 67 72 6f 75 6e 64 28 65 29 7b 76 61 72 20 74 3d 21 30 2c 6e 3d 24 28 65 2b 22 2e 6a 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 76 69 64 65 6f 2d 75 72 6c 2d 69 6e 70 75 74 22 29 2c 6f 3d 24 28 65 2b 22 2e 6a 73 2d 62 6c 6f 63 6b 2d 6f 70 61 63 69 74 79 2d 69 6e 70 75 74 22 29 3b 24 28 65 2b 22 2e 6a 73 2d 62 6c 6f 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 68 6f 74 6f 2d 70 72 65 76 69 65 77 22 29 2e 68 61 73 43 6c 61 73 73 28 22 64 2d 6e 6f 6e 65 22 29 26 26 22 22 3d 3d 6e 2e 76 61 6c 28 29 7c Data Ascii: -opacity"),changeBlockDomOpacity(opacity,blockOpacityEle))}function setBlockOpacityNoBackground(e){var t=!0,n=$(e+".js-background-video-url-input"),o=$(e+".js-block-opacity-input");$(e+".js-block-background-photo-preview").hasClass("d-none")&&""==n.val()\|
2024-07-04 20:55:15 UTC	4744	IN	Data Raw: 6e 2c 6f 29 7b 76 61 72 20 69 3d 22 62 6c 6f 63 6b 2d 22 2b 65 2e 76 61 6c 28 29 2b 22 20 22 2c 72 3d 22 22 2c 73 3d 22 22 3b 72 65 74 75 72 6e 22 66 61 6c 73 65 22 3d 3d 6e 2e 76 61 6c 28 29 3f 28 72 3d 67 65 74 42 6c 6f 63 6b 49 63 6f 6e 43 69 72 63 6c 65 43 6c 61 73 73 28 65 2e 76 61 6c 28 29 29 2c 22 77 68 69 74 65 22 3d 3d 74 26 26 28 74 3d 22 6c 69 67 68 74 22 29 2c 73 3d 22 62 67 2d 22 2b 74 2e 76 61 6c 28 29 2b 22 20 22 29 3a 73 3d 22 69 63 6f 6e 2d 22 2b 74 2e 76 61 6c 28 29 2b 22 20 22 2c 24 28 6f 2b 22 2e 6a 73 2d 62 6c 6f 63 6b 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6d 62 2d 33 20 6d 62 2d 35 20 6d 62 2d 36 22 29 2c 24 28 6f 2b 22 2e 6a 73 2d 62 6c 6f 63 6b 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 Data Ascii: n,o){var i="block-"+e.val()+" ",r="",s="";return"false"==n.val()?(r=getBlockIconCircleClass(e.val()),"white"==t&&(t="light"),s="bg-"+t.val()+" "):s="icon-"+t.val()+" ",$(o+".js-block-icon-wrapper").removeClass("mb-3 mb-5 mb-6"),$(o+".js-block-icon-wrapper
2024-07-04 20:55:15 UTC	5930	IN	Data Raw: 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 64 6d 69 6e 2d 74 6f 6f 6c 62 61 72 22 29 29 72 65 74 75 72 6e 21 31 3b 74 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 2d 2d 74 6f 6f 6c 62 61 72 2d 68 65 69 67 68 74 22 2c 65 28 22 2e 61 64 6d 69 6e 2d 74 6f 6f 6c 62 61 72 22 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 70 78 22 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 69 73 74 4f 76 65 72 6c 61 79 43 6f 6c 6f 72 73 28 29 7b 72 65 74 75 72 6e 5b 22 70 72 69 6d 61 72 79 22 2c 22 70 72 69 6d 61 72 79 2d 63 6f 75 6e 74 65 72 22 2c 22 73 65 63 6f 6e 64 61 Data Ascii: (e){const t=document.documentElement;if(!document.querySelector(".admin-toolbar"))return!1;t.style.setProperty("--toolbar-height",e(".admin-toolbar").outerHeight().toString()+"px")})}function listOverlayColors(){return["primary","primary-counter","seconda
2024-07-04 20:55:15 UTC	7116	IN	Data Raw: 26 26 21 6f 2e 68 6f 73 74 7c 7c 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6e 2e 68 6f 73 74 3d 3d 6f 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6f 2e 68 6f 73 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 2c 21 30 7d 7d 7d 2e 63 61 6c 6c 28 74 68 69 73 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3b 74 3d 65 2e 6d 61 74 63 68 65 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 29 7d 2c 65 2e 73 65 72 69 61 6c 69 7a 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 69 2c 72 3b 72 65 74 75 72 6e 20 69 3d 5b 65 5d 2c 74 28 65 2c 22 66 6f 72 6d 22 29 26 26 28 69 3d 6e 28 65 2e 65 6c 65 6d Data Ascii: &&!o.host\|\|n.protocol+"//"+n.host==o.protocol+"//"+o.host)}catch(t){return t,!0}}}.call(this),function(){var t,n;t=e.matches,n=function(e){return Array.prototype.slice.call(e)},e.serializeElement=function(e,o){var i,r;return i=[e],t(e,"form")&&(i=n(e.elem
2024-07-04 20:55:15 UTC	8302	IN	Data Raw: 21 30 7d 2c 77 69 6e 64 6f 77 2e 52 61 69 6c 73 3d 3d 3d 65 26 26 73 28 64 6f 63 75 6d 65 6e 74 2c 22 72 61 69 6c 73 3a 61 74 74 61 63 68 42 69 6e 64 69 6e 67 73 22 29 26 26 65 2e 73 74 61 72 74 28 29 7d 2e 63 61 6c 6c 28 74 68 69 73 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 26 26 64 65 66 69 6e 65 28 65 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 32 2e 32 2e 34 0a 20 2a Data Ascii: !0},window.Rails===e&&s(document,"rails:attachBindings")&&e.start()}.call(this)}).call(this),"object"==typeof module&&module.exports?module.exports=e:"function"==typeof define&&define.amd&&define(e)}).call(this),/! jQuery JavaScript Library v2.2.4 *
2024-07-04 20:55:15 UTC	2586	IN	Data Raw: 58 2c 70 2e 6f 76 65 72 66 6c 6f 77 59 5d 2c 22 69 6e 6c 69 6e 65 22 3d 3d 3d 28 22 6e 6f 6e 65 22 3d 3d 3d 28 63 3d 72 65 2e 63 73 73 28 65 2c 22 64 69 73 70 6c 61 79 22 29 29 3f 54 65 2e 67 65 74 28 65 2c 22 6f 6c 64 64 69 73 70 6c 61 79 22 29 7c 7c 53 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 3a 63 29 26 26 22 6e 6f 6e 65 22 3d 3d 3d 72 65 2e 63 73 73 28 65 2c 22 66 6c 6f 61 74 22 29 26 26 28 70 2e 64 69 73 70 6c 61 79 3d 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 29 29 2c 6e 2e 6f 76 65 72 66 6c 6f 77 26 26 28 70 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 64 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 6f 76 65 72 66 6c 6f 77 3d 6e 2e 6f 76 65 72 66 6c 6f 77 5b 30 5d 2c 70 2e 6f 76 65 72 66 6c 6f 77 58 3d 6e 2e 6f 76 65 72 66 Data Ascii: X,p.overflowY],"inline"===("none"===(c=re.css(e,"display"))?Te.get(e,"olddisplay")\|\|S(e.nodeName):c)&&"none"===re.css(e,"float")&&(p.display="inline-block")),n.overflow&&(p.overflow="hidden",d.always(function(){p.overflow=n.overflow[0],p.overflowX=n.overf
2024-07-04 20:55:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 20:55:15 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 2a 22 2c 28 65 5b 6f 5d 3d 65 5b 6f 5d 7c 7c 5b 5d 29 2e 75 6e 73 68 69 66 74 28 6e 29 29 3a 28 65 5b 6f 5d 3d 65 5b 6f 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 76 61 72 20 6c 3b 72 65 74 75 72 6e 20 72 5b 61 5d 3d 21 30 2c 72 65 2e 65 61 63 68 28 65 5b 61 5d 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 63 3d 61 28 74 2c 6e 2c 6f 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 63 7c 7c 73 7c 7c 72 5b 63 5d 3f 73 3f 21 28 6c 3d 63 29 3a 76 6f 69 64 20 30 3a 28 74 2e 64 61 74 61 54 79 70 65 73 2e 75 6e 73 68 69 66 74 28 63 29 2c 69 28 63 29 2c 21 31 29 7d 29 2c 6c 7d 76 61 72 20 72 Data Ascii: 8000*",(e[o]=e[o]\|\|[]).unshift(n)):(e[o]=e[o]\|\|[]).push(n)}}function F(e,t,n,o){function i(a){var l;return r[a]=!0,re.each(e[a]\|\|[],function(e,a){var c=a(t,n,o);return"string"!=typeof c\|\|s\|\|r[c]?s?!(l=c):void 0:(t.dataTypes.unshift(c),i(c),!1)}),l}var r
2024-07-04 20:55:15 UTC	13046	IN	Data Raw: 65 6e 64 43 68 69 6c 64 28 74 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 29 3a 6e 28 65 29 29 7d 2c 63 61 6d 65 6c 43 61 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 61 65 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 6c 65 2c 63 65 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 30 3b 69 66 28 6e 28 65 29 29 66 6f 72 28 6f 3d 65 2e 6c 65 6e 67 74 68 3b 69 3c 6f 26 26 21 Data Ascii: endChild(t).parentNode.removeChild(t)):n(e))},camelCase:function(e){return e.replace(ae,"ms-").replace(le,ce)},nodeName:function(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()},each:function(e,t){var o,i=0;if(n(e))for(o=e.length;i<o&&!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:15 UTC	1457	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMTAvMTAvMTcvNTRmNjllNTctZGMzZS00MDY1LTllYjUtZjhkZmExY2EwY2ZkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjYwMHg2MDBcdTAwM2UiXSxbInAiLCJ0cmltIl1d?sha=1b206e95ba189cd1 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac
2024-07-04 20:55:15 UTC	626	IN	HTTP/1.1 200 OK Age: 2001936 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 23655 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 16:49:39 GMT Etag: "d9138790d866e2302f40cd24820164442c395efd" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 8919d7761ca65597a9d96ffcc76c8d415a6b9ad0 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 54f7bd15-b44d-4a95-b336-3881d45b5dd2 X-Runtime: 0.345945 Connection: close
2024-07-04 20:55:15 UTC	560	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 bc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 07 80 a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a Data Ascii: JFIFHHExifMM*JR(iZHH02210100C
2024-07-04 20:55:15 UTC	2372	IN	Data Raw: 04 04 06 03 01 00 00 00 00 00 01 02 03 04 05 06 11 31 35 72 b1 07 16 21 34 36 41 53 71 81 a1 b2 d1 17 82 92 c1 12 13 32 61 14 33 51 52 a2 f0 22 42 54 91 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 9f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c e0 b8 f0 01 d2 ee 2c 74 5c b2 c1 56 f3 19 7c 4a e0 e3 a1 69 f8 d7 e1 df 68 f0 b6 9c 44 3a d4 95 a4 fc 24 64 46 5e 40 1d cb 7d 3e f8 bf 28 6f a3 df 17 e5 14 bb 3d 75 ea fc 92 45 fb 21 6b 4e 04 5f fa 57 fa 86 25 ae cd 5f e7 ba 1e b4 fc ea 7f cc 02 e8 bb e8 f7 c4 33 e6 42 9b 34 96 b8 75 71 1d 74 a9 b8 38 ad 41 56 4f 43 3f 35 86 69 e6 d5 34 c9 2d 2a 75 24 64 65 8e f9 19 8b 91 a4 f2 7e 2e f0 0c c0 00 00 f9 0c 0d 68 2f ba 1c 39 d4 10 a3 74 af 5d dc 95 ea 5a e0 4b 65 b7 1e 7d 03 2f 85 a8 62 d9 86 86 66 37 75 0c Data Ascii: 15r!46ASq2a3QR"BT?,t\V\|JihD:$dF^@}>(o=uE!kN_W%_3B4uqt8AVOC?5i4-*u$de~.h/9t]ZKe}/bf7u
2024-07-04 20:55:15 UTC	538	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 c8 c7 41 ba 9d cc d7 13 cd 99 87 aa b8 3b f1 f2 31 d0 6e a7 73 35 c4 f3 66 61 ea ae 00 a2 1a fa e5 f0 4b e8 18 8c 97 d7 2f 82 5f 40 c4 07 6a a1 bd b9 a9 3f 8e a1 3d 32 05 f4 4b 99 8a 17 d0 be dc f4 97 c7 50 9e 9d 02 fa 09 e5 f2 9f d2 03 90 00 01 f3 73 aa 7e 41 00 37 83 ba be e5 79 cd 1b e9 94 27 f9 ce 42 00 ef 17 75 8d cb f3 9a 37 d3 28 57 b8 b3 9a d3 ef 5f 7c 15 eb 6a fb 1f 77 9b 81 75 8b ca 01 df 21 50 cb d4 d5 91 fd 29 da d3 7f 70 dd af f3 7d 8f a0 7b 70 f1 0d 37 f7 0d 5b 0f 88 18 fe 28 f6 f1 a4 ec 7c d2 9e cc 37 3e 77 5e 9a ce be dc db e2 00 00 ee bc 90 00 00 00 00 00 00 00 70 7c 84 72 6d 03 fd c0 b5 ff 00 bf 23 7d 1b 62 46 cf 90 8e 4d a0 7f b8 16 bf Data Ascii: A;1ns5faK/_@j?=2KPs~A7y'Bu7(W_\|jwu!P)p}{p7[(\|7>w^p\|rm#}bFM
2024-07-04 20:55:15 UTC	4096	IN	Data Raw: 3b 1f 34 a7 b3 0d cf 9d d7 a6 b3 af b7 36 f8 80 38 51 e1 23 0c f0 32 1d d7 92 c8 d6 92 3e 26 1b e8 f0 88 b5 d5 a5 da b9 94 6e ae 9c 93 52 b5 bc d2 45 29 4c 92 15 d2 85 83 75 29 6f 79 4a 74 94 ae 29 3e 27 ba 9f c8 35 9f f6 42 de ff 00 c2 84 f8 bf e9 08 fd 01 0a b5 62 4b 25 96 d1 35 19 a5 8c 63 2c 72 5b 97 6f 07 b7 b5 e9 61 a7 6b a5 52 48 4b 3c 33 86 71 8e 7b 93 c2 6b 49 97 05 60 33 92 e0 79 10 3d fb 21 6f 87 e1 46 7c 7f f3 ed fe 80 92 6d 1c 56 95 55 6f a7 09 d4 ca ad 9f 45 d4 53 06 a7 ee b2 d3 f1 aa 23 5a 1b 26 9a 32 47 02 2e 04 6a 33 f9 47 66 ef bf ac f7 85 7f ca a7 2c 73 d2 f3 af dc 13 79 5c 16 1f e2 ed 13 cb 19 73 84 39 33 cf 97 c1 b7 c0 31 2c e4 86 42 58 ad 1c 1f 21 1c 9b 40 4b fd a0 b5 c7 9f fe d7 1d e8 db 12 36 7c 84 72 6d 03 fd c0 b5 ff 00 bf 23 7d Data Ascii: ;468Q#2>&nRE)Lu)oyJt)>'5BbK%5c,r[oakRHK<3q{kI`3y=!oF\|mVUoES#Z&2G.j3Gf,sy\s931,BX!@K6\|rm#}
2024-07-04 20:55:15 UTC	5930	IN	Data Raw: 03 34 62 e4 94 f5 5b 30 96 4b ce 2e 9f 71 c7 ba 16 22 16 db 7b ea 27 cb 79 5b a9 e2 78 fa 45 94 8f aa 29 09 aa ef 74 d7 50 5f 8c 49 c7 ae b8 03 75 cb 6c 3e ae 4d 44 47 0f 41 e3 cd b7 7f 5e 2c 13 a3 9b b1 55 5f 1d 9c 36 ca e9 d6 c5 04 55 3c fe 16 21 d8 ef a9 d0 c6 c4 3e 5b 8b 79 a2 dd 41 a9 5b be c5 09 cf 1e 27 91 4a 14 fd b1 3e 51 71 2d 9a de e2 6d 8a f8 be 33 f9 42 20 06 f4 00 00 01 f2 31 a7 fa f9 f7 1d 35 07 e6 9b de 91 b1 b8 03 c7 ef ed ab 2b dd a3 9b 85 6a 0e 75 f5 ba 55 3c a5 50 3f 54 bb 17 b2 3b 1b 2a 23 df e8 f7 93 bd d5 e5 92 01 46 75 2b 2b 57 02 e7 e0 21 eb 36 04 cc f5 d5 65 f8 17 f8 77 28 ef 7f cb 9a 13 58 7b 0f 61 14 b5 19 ea 2d de 7f e4 61 7f 4b 1d aa 83 d8 c9 0d 43 df 0a 32 b3 4d ff 00 76 60 72 19 ec 1c d3 b1 4e 91 26 c9 fe c7 7d 0e ee 6f 76 Data Ascii: 4b[0K.q"{'y[xE)tP_Iul>MDGA^,U_6U<!>[yA['J>Qq-m3B 15+juU<P?T;*#Fu++W!6ew(X{a-aKC2Mv`rN&}ov
2024-07-04 20:55:15 UTC	7116	IN	Data Raw: ad 8a 66 ed df 3a 19 6f 9a e0 a2 a4 f0 33 76 da 35 75 5c 65 e5 b0 a5 11 78 d2 f2 08 cf c4 42 14 0a 85 ad 89 45 fe e4 67 7f 9a 5f fd 11 30 9b 19 29 e9 f4 9b 68 05 cb 76 6f 23 8f 95 36 e5 be 71 28 5c 5c 13 8d 12 8f b3 e1 4f 04 6a 49 16 7b f8 20 16 4c 00 00 00 00 01 c1 f5 45 21 35 5d ee 9a ea 0b f1 89 38 f5 d7 05 de cf aa 29 09 aa ef 74 d7 50 5f 8c 49 c7 ae b8 03 c0 53 f6 c4 f9 45 c4 76 6b a8 bb 49 b6 28 b3 c7 ea 7c 67 f2 84 40 a7 69 1e 14 46 36 16 90 d5 6e a3 ed fd b6 95 d2 14 4d ea ab a9 6a 5e 5c 85 22 02 59 2e 9b ad 98 78 74 a9 6a 59 92 52 5c 0b 2a 52 8c fc 66 60 2e e9 bc 5e 12 fc a3 9c 97 84 bf 28 a5 77 ec e0 d5 d7 fe b1 55 df e7 f7 47 1f b3 83 57 5f fa c5 57 7f 9f dd 01 75 2c 97 84 78 2e aa 3d cd 1b ff 00 f8 bd 9c 7a 93 a2 00 b6 77 6a 8b 51 37 27 6b 85 Data Ascii: f:o3v5u\exBEg_0)hvo#6q(\\OjI{ LE!5]8)tP_ISEvkI(\|g@iF6nMj^\"Y.xtjYR\*Rf`.^(wUGW_Wu,x.=zwjQ7'k
2024-07-04 20:55:15 UTC	3043	IN	Data Raw: c3 87 9e 03 f1 f4 45 23 bb 74 86 cd eb 7b 43 de ba 69 da 66 b7 a6 61 d7 29 36 5e 8f 62 28 df 84 69 58 86 70 96 d2 d6 58 26 8d 08 c1 9e 48 db 30 1b 66 a2 cb 66 47 c8 c6 a1 6a 0f 43 ba 76 d4 b4 ef ea f5 c3 a4 16 c5 5e 4d 13 3f 5c 72 38 b3 82 8e 5a 12 5b a9 27 14 44 68 78 93 c0 8b a4 4a 8c 88 88 8b 96 06 de a8 b2 81 0c 72 28 ed a8 5a 67 9e 4c 29 96 ad ec 97 53 56 dd 31 af 7d 47 88 6e 70 4b 8d 84 60 dc 52 90 d9 3c b5 b6 f9 11 24 c8 88 9c 6d c2 4e 08 92 ac 10 0d 7f d4 2e 94 ee b6 cf 1b 6b 0d 7f 74 e1 7e ea 37 29 29 64 de 1d 99 bd 37 3a 59 1a 09 0f 2c 9b 6c dc 42 0f a0 89 6c d6 69 42 92 a6 d2 a2 25 11 91 e4 8c ca 73 ac bd c1 4d d6 d2 75 b6 b9 45 06 52 e5 54 f4 dc 1c d5 c8 42 c9 93 0b 79 94 ad 6d 91 99 f1 22 51 99 11 f3 32 2c 98 89 3b 8d 44 6b db 5e 4a 91 db 4b Data Ascii: E#t{Cifa)6^b(iXpX&H0ffGjCv^M?\r8Z['DhxJr(ZgL)SV1}GnpK`R<$mN.kt~7))d7:Y,lBliB%sMuERTBym"Q2,;Dk^JK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:15 UTC	775	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTUvMjAvMjUvMzgvZGYwOTM1Y2EtYTYzNC00OWU3LWExZmQtMmU0YzhkZmU3MjY1L1BhcmVudGluZyBcdTAwMjYgRmFtaWx5LnBuZyJdXQ/Parenting%20%26%20Family.png?sha=3338acc4386c5eb9 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:15 UTC	582	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:15 GMT Content-Type: image/png Content-Length: 55890 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4321523 X-Request-Id: 3d099c5e-ca32-4877-a49e-7f6790080f56 Content-Disposition: filename="Parenting & Family.png" X-Content-Digest: d297cab551cd9f40748594a5f8666936d9359ec5 ETag: "b551cd9b3ffc344c71ca7d2ee3d1ec7513cd0140" X-Runtime: 0.408798 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:15 UTC	15802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 06 00 00 00 ec 10 6c 8f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 80 00 49 44 41 54 78 da ec dd 77 98 54 d5 fd c7 f1 cf ce 4e db 9d ed 8d 26 08 0a 08 0a 08 36 c0 de 7b 8d b1 25 b6 58 a2 46 63 89 51 a3 31 d1 24 c6 9a 58 f2 33 f6 a8 31 31 96 c4 a8 49 8c d8 7b 41 25 2a a2 08 82 05 a9 5b d9 72 77 77 ee dc 9d fd fd 31 6b 07 81 dd 39 73 66 ee bc 5f cf c3 b3 c4 3c 7b ce e7 5c 96 cb bd df 39 45 02 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR88lgAMAa cHRMz&u0`:pQ<bKGDpHYs+IDATxwTN&6{%XFcQ1$X311I{A%*[rww1k9sf_<{\9E
2024-07-04 20:55:15 UTC	10458	IN	Data Raw: 22 85 d7 db c0 e4 25 41 3f 45 c6 98 f9 b7 33 41 81 03 18 88 a3 3d d7 e1 c3 f4 7e a0 c0 d1 3f fb 48 62 ab 7b a0 9f bc 65 8b 8c b4 1b 19 3d d1 f6 d0 b0 1a 26 3e b9 35 35 83 a3 a7 b5 59 ed cf fe cb e8 f5 a8 3a e2 c7 bc ec f9 58 d9 5e 47 28 3a 6e 8a d1 3e ba de 99 69 64 b6 85 67 68 86 5d 74 bc d9 eb 81 fe 8b 9a 9a 65 67 78 19 21 e0 73 a3 24 71 ec 54 3f 50 e0 e8 9f 63 6d 07 00 72 99 a9 bd 13 38 85 22 7b 99 f8 b3 31 f5 49 73 db a3 66 97 a6 a4 f6 dd d8 d7 68 1f b0 af e6 84 f3 8d ef c7 d1 fa 9f bf a6 bd 4d 53 7f af a2 dc 9f b3 96 a9 7f 3b bd a6 15 19 39 ed 0a f0 b1 93 6d 07 c8 45 14 38 d6 91 e7 3a 35 92 f6 b6 9d 03 c8 55 a6 1e 9e 0b 2b 6b 99 ee 9f c5 8c ad f1 6e 58 96 d6 f6 7a 56 36 1a 9d bd 51 58 56 a9 ea 63 cf 31 d6 3e b2 47 a0 a4 5c 35 27 5c 60 b4 8f ae d9 af Data Ascii: "%A?E3A=~?Hb{e=&>55Y:X^G(:n>idgh]tegx!s$qT?Pcmr8"{1IsfhMS;9mE8:5U+knXzV6QXVc1>G\5'\`
2024-07-04 20:55:15 UTC	16384	IN	Data Raw: eb 7f e5 43 b7 6b e9 2f 8e 55 e7 5b 2f d9 be 14 39 ab a7 7d a5 9a ef ba 5a cb 2f 3d 4d 5e 63 e6 8f e4 0d d6 0e 55 ed 8f 7e 65 fb 32 00 00 f2 d3 48 db 01 d2 c9 6f fb 55 8c b4 1d 00 00 24 29 d9 d9 a1 5e b7 5b c9 78 b7 7a e3 dd ea 8d 77 f5 fd be eb ab ff 3d 11 5f a7 76 0b 0a 83 2a 08 85 a5 60 48 05 c1 90 0a 42 e1 be af 7d ff 3b 52 ac c2 ca 1a 05 ab ea 6c 5f 82 bc 12 db 6a 27 25 96 7d a2 b6 47 ef b1 d2 bf d7 b0 4c 8d 37 fd 5a d1 b1 93 54 71 c8 c9 0a 0f df d0 f6 25 c9 19 6d 8f de a3 d6 47 ef 51 af bb 6e 7f 17 d3 25 10 2b 53 dd 19 97 29 50 5c 62 fb 52 e4 95 de 78 b7 bc c6 65 ea 71 da d5 eb 76 ab d7 4b 48 09 57 bd 5e 22 f5 2b 91 50 af e7 aa 37 91 90 7a 93 6b df 70 41 40 81 48 54 05 91 a8 0a 22 45 0a 84 a3 2a 88 16 a9 20 1c fd e2 bf 87 a3 0a 44 8a 54 10 89 da be Data Ascii: Ck/U[/9}Z/=M^cU~e2HoU$)^[xzw=_v`HB};Rl_j'%}GL7ZTq%mGQn%+S)P\bRxeqvKHW^"+P7zkpA@HT"E DT
2024-07-04 20:55:15 UTC	13246	IN	Data Raw: 2b d5 7a db 6f 62 bd 46 e3 51 a7 aa 72 fc 44 eb a9 02 c0 a0 55 6e 34 49 8d 1f fa 78 ac d7 e8 59 b2 50 ad 25 78 82 15 06 88 2d 2a c0 50 dd 6f 1d 20 6e 99 2f 38 1c d7 5b 22 e9 35 eb 1c 40 fc f8 36 23 ab 56 ff e1 e7 ea ef 89 ef 90 bb ca f1 13 d5 78 d4 69 d6 d3 04 80 21 6b 3c e6 74 39 63 36 8e f5 1a ad 77 fc 4e e1 8a 37 ac a7 0a 89 15 1c c0 d0 bc 56 bc 37 ce b4 cc 17 1c 45 8f 59 07 00 80 a1 e8 7a f6 71 75 cc 7e 28 d6 6b 8c 3a f3 1b d6 d3 04 80 61 6b 2e c1 e3 ad 57 fd e6 72 eb 69 02 c0 50 e5 e2 9e 98 82 03 00 12 aa bf a7 5b 2b 7f 7d 59 ac d7 a8 3f e8 78 b9 9b 6c 61 3d 55 00 18 36 77 b3 0f a8 fe c0 63 63 bd 46 d7 f3 b3 63 2f 9d 31 00 6c 51 01 86 22 17 f7 c4 14 1c 00 90 50 ad 7f bd 51 bd ab 97 c7 36 7e 45 43 93 1a 8f 39 dd 7a 9a 00 10 99 c6 63 3f a9 f2 ba c6 58 Data Ascii: +zobFQrDUn4IxYP%x-*Po n/8["5@6#Vxi!k<t9c6wN7V7EYzqu~(k:ak.WriP[+}Y?xla=U6wccFc/1lQ"PQ6~EC9zc?X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	23.53.114.19	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:15 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 20:55:16 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=36528 Date: Thu, 04 Jul 2024 20:55:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49753	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:16 UTC	757	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDcvMjIvYTNkYzhhODQtODZkOC00ZmRkLWEyMzItYWUyYTQ5MTgwOTNjL0NoaWxkIGJlaGF2aW91ci5wbmciXV0/Child%20behaviour.png?sha=56fe014ed47e4e25 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:16 UTC	579	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:16 GMT Content-Type: image/png Content-Length: 57025 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4319191 X-Request-Id: e6efb570-75d4-4f65-a5f8-c5a46cbaa537 Content-Disposition: filename="Child behaviour.png" X-Content-Digest: 8846de2d00337df3326b7c5681621cca502d0d8a ETag: "49a0e00cbd7f3125f7f8824b2b5e20e0aea0f132" X-Runtime: 0.362966 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:16 UTC	15805	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 06 00 00 00 ec 10 6c 8f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 80 00 49 44 41 54 78 da ec dd 77 98 54 e5 f9 c6 f1 7b 67 67 67 66 77 b6 b3 2c 55 9a 08 a2 58 b0 f7 5e 63 c3 18 5b 62 2f d1 44 13 35 d1 5f 4c d5 c4 d8 a3 31 c5 de 5b ec b1 f7 86 b1 60 af a8 20 20 08 48 5b d8 7e 76 67 ce 9c 9d fd fd b1 1b 63 a1 2c 70 ce 3c 53 be 9f eb e2 c2 fa 9c fb 99 85 65 ce 33 ef 79 5f 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR88lgAMAa cHRMz&u0`:pQ<bKGDpHYs+IDATxwT{gggfw,UX^c[b/D5_L1[` H[~vgc,p<Se3y_
2024-07-04 20:55:16 UTC	16379	IN	Data Raw: 4e 5c 3d fb 6f 00 40 f0 d2 69 5f cb 15 85 d9 3a c8 2f a1 f2 2a 5f eb a5 13 1d 19 ef 21 ed f8 fb c9 69 51 34 96 f1 1e 00 64 56 a8 34 ee 6b 3d 56 70 00 fa 61 ef 3d 26 56 13 03 8e 35 73 b0 7a 36 84 01 80 c0 75 a7 bb 7c ad 57 54 5c 6c dd 52 de 08 c5 2b fc 2d e8 f3 d7 ba 4f 97 f4 79 05 47 51 d8 df c7 76 00 64 9f 22 bf 07 1c 8e bf df 87 80 1c d4 5f 3d f7 98 58 4d 0c 38 d6 cc 31 d6 01 00 14 10 56 70 64 ad e2 78 a5 af f5 ba 7d fe 5a f7 e9 9a 5d 9e af f5 fc de 97 04 40 f6 f1 7d 05 07 03 0e 40 e2 1e 73 8d 30 e0 58 4d 9e eb 0c 97 b4 83 75 0e 00 05 a4 3b f3 37 bd e8 9b a2 d2 32 7f 0b 1a ac e0 f0 7b e0 c5 80 03 c8 7f a1 98 df 03 0e f6 e0 00 24 ed e0 b9 ce 48 eb 10 b9 8a 01 c7 ea 3b 56 52 91 75 08 00 85 a3 28 e2 ef 9e 06 e9 64 c2 ba a5 bc d1 ed ba 3e 17 ec ce 78 0f 45 Data Ascii: N\=o@i_:/*_!iQ4dV4k=Vpa=&V5sz6u\|WT\lR+-OyGQvd"_=XM81Vpdx}Z]@}@s0XMu;72{$H;VRu(d>xE
2024-07-04 20:55:16 UTC	16384	IN	Data Raw: 9e 54 28 56 a6 d2 09 db 2a be f9 4e 8a ad 17 cc 3e 33 00 cc e4 f4 3d 76 ae ef c1 01 20 87 b4 3c f1 2f 79 8d 8b 03 a9 1d 1d 3d de f4 a6 ed bf 1a ae 3d 4f dd c9 84 75 0c 60 b9 1a 6f fd 8b ba 9a 1a 4c 33 94 6d b6 a3 22 23 c6 06 52 db 9d 3b 53 ce 6b cf 98 f6 b7 2c 15 3b ec 1b 48 dd ae d6 26 35 dd 93 7d 03 1d 4b de 92 85 81 0d d3 cb b6 d8 c5 ba bd 95 72 de 7c 41 f3 cf 39 5e 0d ff fc 9d 6f c3 8d 6f 4b 27 3a e4 4c 7e 56 8b ff fe 5b cd ff ed 51 72 de 7c c1 ba 6d 00 fe 61 c0 61 28 a7 5f 7c a0 90 74 35 2d 51 eb 93 77 07 56 bf f6 88 d3 ad 5b 54 d3 7d d7 28 35 7f b6 75 8c 15 cb de c5 05 f9 23 0b 37 19 fd ba 74 a2 53 0d d7 fd d9 3a 86 fa 1d 79 46 60 b5 9b 1f ba 49 dd 6e d2 ba c5 6f 28 ae a9 53 7c 8b 9d 03 a9 ed bc f1 bc 3a de f9 8f 75 8b 59 63 e9 cd 97 04 f6 f5 af d8 Data Ascii: T(V*N>3=v </y==Ou`oL3m"#R;Sk,;H&5}Kr\|A9^ooK':L~V[Qr\|maa(_\|t5-QwV[T}(5u#7tS:yF`Ino(S\|:uYc
2024-07-04 20:55:16 UTC	8457	IN	Data Raw: 00 00 00 00 88 96 4e 49 33 ac 43 80 82 23 14 72 ab 38 7e 62 9d 03 00 00 00 00 30 60 b7 38 ae d7 60 1d 02 14 1c 61 72 85 58 c5 01 00 00 00 00 51 c2 ea 8d 10 a1 e0 08 09 c7 f5 3e 10 ab 38 00 00 00 00 20 4a 58 bd 11 22 14 1c e1 c2 2a 0e 00 00 00 00 88 06 56 6f 84 0c 05 47 88 b0 8a 03 00 00 00 00 22 83 d5 1b 21 43 c1 11 3e ac e2 00 00 00 00 80 70 63 f5 46 08 51 70 84 0c ab 38 00 00 00 00 20 f4 58 bd 11 42 14 1c e1 c4 2a 0e 00 00 00 00 08 27 56 6f 84 14 05 47 08 b1 8a 03 00 00 00 00 42 8b d5 1b 21 45 c1 11 5e ac e2 00 00 00 00 80 70 61 f5 46 88 51 70 84 14 ab 38 00 00 00 00 20 74 58 bd 11 62 14 1c e1 c6 2a 0e 00 00 00 00 08 87 16 b1 7a 23 d4 28 38 42 8c 55 1c 00 00 00 00 10 1a b3 59 bd 11 6e 14 1c e1 c7 2a 0e 00 00 00 00 b0 d5 22 e9 1a eb 10 58 3f 0a 8e 90 63 Data Ascii: NI3C#r8~b0`8`arXQ>8 JX"VoG"!C>pcFQp8 XB'VoGB!E^paFQp8 tXbz#(8BUYn"X?c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:16 UTC	739	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDkvMTIvNDZhNmJhMWEtM2VjMy00ZTNkLTgwZGQtNjBjMzIyMWM4MzdiL05ld2NvbWVyLnBuZyJdXQ/Newcomer.png?sha=e0aec34076deb024 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:16 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:16 GMT Content-Type: image/png Content-Length: 60121 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4318938 X-Request-Id: b8d140d9-a941-4367-ab00-61864277f4b7 Content-Disposition: filename="Newcomer.png" X-Content-Digest: 9fdca2d4a11b845906763b2db1a95e715e64234a ETag: "af6cafefd0e61b0ca8692ee3455ae1aecd678e10" X-Runtime: 0.361879 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:16 UTC	15812	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 06 00 00 00 ec 10 6c 8f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 80 00 49 44 41 54 78 da ec dd 77 78 1c c5 e1 c6 f1 57 a7 d3 9d a4 93 ac ee 6e e3 06 d8 06 0c 0e d5 f4 4e 08 24 40 08 a4 d1 42 0f 10 02 a1 fe e8 35 81 50 02 09 10 7a 27 24 a1 26 40 20 10 d3 c1 74 83 31 36 d8 18 1b db d8 56 b7 ca 4a 77 ab d5 e9 f7 87 64 aa 8b ca ec cd dd de f7 f3 3c 7e 00 5b 37 fb ce d9 c8 da 57 3b 33 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR88lgAMAa cHRMz&u0`:pQ<bKGDpHYs+IDATxwxWnN$@B5Pz'$&@ t16VJwd<~[7W;3
2024-07-04 20:55:16 UTC	16379	IN	Data Raw: f7 48 e8 ea 70 15 9f f3 ae da de 7f 4d ed 1f cc 50 b2 ad d5 b7 39 e5 e4 45 54 bc fb 81 2a f9 c1 cf d9 8b a5 0f ba 3a 5c 2d 3d fd 20 75 25 e2 c6 c7 0e e5 17 68 e8 f9 b7 64 fd 32 31 00 f0 01 cb 54 7a 81 82 a3 17 58 9e 02 f8 63 c5 ef 4f 94 bb f8 53 5f af 51 7e c8 29 2a da 7e 6f db 53 0d 9c 15 97 9f 28 77 89 bf bf 77 e9 2c 94 5f a8 dc 8a 21 0a 97 0f 56 b8 62 88 72 cb ab 14 2e 1f a2 dc b2 4a 85 8a 4a 94 5b 54 a2 50 ac d8 76 cc 94 49 b6 3b 6a 9f f5 86 da de 7d 45 f1 b9 ef a9 ab 23 b5 47 36 e7 0d 5f 4f 55 bf be 48 e1 aa e1 b6 df 8a 8c 60 ea a4 9d d5 a9 fa f5 45 2a d8 d4 bf 65 4e 00 90 c5 58 a6 d2 0b 14 1c eb c0 f2 14 c0 3f 9d 4d f5 5a 71 d9 09 ea 6c 59 e9 eb 75 86 9e 73 a3 22 a3 27 d8 9e 6e a0 78 d5 4b b5 fc b2 13 52 7e 23 9b 69 72 8b 4b 15 2a 1a d4 fd cf d8 a0 Data Ascii: HpMP9ET:\-= u%hd21TzXcOS_Q~)~oS(ww,_!Vbr.JJ[TPvI;j}E#G6_OUH`EeNX?MZqlYus"'nxKR~#irK
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: 6d 3b 1e 80 14 c9 f4 82 23 a3 db 25 00 e8 ad d6 d7 fe 6b 7c cc 50 61 91 0a 37 db ce f8 b8 39 91 a8 72 22 51 75 b9 09 23 e3 75 d4 2e eb d3 c7 b7 cf 9a 21 e7 ed 97 d4 3e 6b 46 bf 6f a2 e2 9f bc af 15 7f f8 8d 86 9c 76 b5 72 4b ca 57 fb 31 f9 86 4f 51 e9 4f 69 c0 66 9a e6 98 5e 72 94 ce 4a 7e f0 73 b5 bd 39 5d 5e 43 4d 4a af db 51 bd 34 25 d7 c9 9f 38 35 a5 f3 b2 25 6f d8 68 e5 0d 1b ad e2 5d f6 93 24 c5 e7 be a7 f8 dc 99 6a 9f fd a6 3a 96 7d 6e 3b 9e 75 5e 43 8d 5a 5f f9 8f 5a 5f f9 8f c2 55 c3 54 fe f3 df b0 8c 05 e8 9d 8c 7e 04 8e 82 03 00 32 80 1f 9b 8b f6 66 19 46 7f 85 cb aa 8c dd cc b8 9f cd 59 e7 c7 c4 e7 cd 92 f3 ea d3 6a fb e0 75 63 df 19 f6 6a be 50 cd f5 ff a7 61 17 dc b2 c6 8f 09 15 c4 8c ee 8b e2 2e 59 a0 c8 a8 f1 bd fe f8 74 2f 38 fc de ef 61 Data Ascii: m;#%k\|Pa79r"Qu#u.!>kFovrKW1OQOif^rJ~s9]^CMJQ4%85%oh]$j:}n;u^CZ_Z_UT~2fFYjucjPa.Yt/8a
2024-07-04 20:55:17 UTC	11546	IN	Data Raw: b2 07 d5 d3 b6 dd 3a 4e 51 d4 9c 72 b6 bc a6 99 4a 9f 74 ba 75 14 0c 40 fd bc cb e5 d4 8f 0f fd 61 f5 60 82 0d eb b4 f5 da af 51 72 94 a9 5c eb 16 ed 7e f0 ae d0 af 5b 37 7b ae f5 ad 01 00 4a ef 2e eb 00 e5 82 15 1c fd 94 0b fc 33 24 b5 58 e7 00 e2 a6 37 d3 21 7f f9 83 f2 97 de af 60 fd 5a eb 38 45 51 75 f4 71 f2 ce 78 9f 6a a6 bf 57 a9 b4 67 1d 07 43 60 71 c2 0a 2b 39 ca 53 31 56 fd 30 5c 14 00 12 eb 64 c7 f5 56 59 87 28 07 14 1c fd 94 0b fc 0a 49 cf 4b 7a 97 75 16 20 0e b2 6b 5a e4 b7 dc af cc ca c7 ac a3 14 c5 b0 51 63 e5 9d f1 3e d5 36 cf 92 33 f6 70 eb 38 08 51 76 d5 12 b5 2e b8 aa a4 27 ac a4 6a 6a 35 ee 2b df 67 3b 53 99 c8 b5 6e d1 6b 5f ff 74 e8 d7 1d 77 e9 95 aa 6e 68 b4 be 3d 00 40 69 b1 3d 65 00 d8 a2 d2 4f 8e eb f5 e5 02 ff 37 62 9b 0a 30 68 Data Ascii: :NQrJtu@a`Qr\~[7{J.3$X7!`Z8EQuqxjWgC`q+9S1V0\dVY(IKzu kZQc>63p8Qv.'jj5+g;Snk_twnh=@i=eO7b0h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:16 UTC	743	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMTIvMDMvNDkwYTkzMTMtODcxYy00ODIwLThlOTQtNDExYzk5YzdkMDYyL0RlcHJlc3Npb24ucG5nIl1d/Depression.png?sha=eb4824c07f6dd1eb HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:17 UTC	574	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:16 GMT Content-Type: image/png Content-Length: 50687 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4318938 X-Request-Id: b4007591-9f47-4b96-82fa-957954fd2136 Content-Disposition: filename="Depression.png" X-Content-Digest: b07f4496ddf888d73c4f1ef9695f61a9008d4de5 ETag: "ecbb07c8febbcc846b7b8b694ef063d81bf86a1a" X-Runtime: 0.427587 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:17 UTC	15810	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 06 00 00 00 ec 10 6c 8f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 80 00 49 44 41 54 78 da ec fd 7f 7c 9c 67 5e df fb bf 33 19 df f2 e8 96 50 a4 71 64 93 95 d9 60 77 b5 6c 7b 56 32 87 b6 ec 08 0a 5b bb 36 14 bc 65 05 38 d0 9e 38 da d2 d2 55 d2 9e b2 9b 38 29 ed e6 fb 4d 7c 0e 81 76 1d 27 70 7a be 1b 6d e9 2f ff e8 b7 34 06 1c 8a b7 50 bb 36 cb 69 6b 85 02 45 d6 d2 b2 28 55 9a 45 26 44 8e c7 8a 56 ba 25 f9 f6 9d c9 f9 63 34 8e Data Ascii: PNGIHDR88lgAMAa cHRMz&u0`:pQ<bKGDpHYs+IDATx\|g^3Pqd`wl{V2[6e88U8)M\|v'pzm/4P6ikE(UE&DV%c4
2024-07-04 20:55:17 UTC	16379	IN	Data Raw: 09 80 6d 2a b7 c5 29 2a b7 47 c0 81 5c 8b aa d3 56 8e 10 b5 75 94 1c de af b6 30 af cb 23 07 5d 97 91 48 2d 29 b9 13 c8 e9 2a e6 45 d5 69 55 8f 1c d6 eb 9f 7b a8 3e 10 31 61 27 34 d4 83 97 63 7a fd c9 21 cd 9e 3a 9e b8 fa 80 3b a9 6f bf 32 ff 3b 96 23 63 01 49 ac 51 6f 8b 80 63 05 6c 4f 01 64 e5 a4 0d bf b2 3b f1 77 cd b3 e4 d2 f3 4f b0 38 ca 00 42 0e 33 6a 0b f3 9a 39 31 72 3d d8 48 ba da c2 3c 41 07 52 cb c6 cd 0c 1b 5d a5 40 0a f5 2f af 55 71 0b 04 1c 2b fb a4 eb 02 00 d7 82 97 2d 0c 17 65 f6 46 6c 82 d1 d3 46 87 24 c2 2d 42 8e e6 2c 8e 9d d7 1b cf 3c 92 ca 23 92 1b 41 c7 1b cf 3c a2 c5 b1 f3 ae cb 01 56 a5 71 5a 90 49 51 75 9a cf 00 50 f7 49 d7 05 24 15 01 c7 ca 68 fd 41 ae d9 68 db 6e e9 ed 93 b7 75 bb eb 4b cb 85 fa 82 e8 b8 eb 32 60 18 21 c7 da d5 Data Ascii: m)G\Vu0#]H-)*EiU{>1a'4cz!:;o2;#cIQoclOd;wO8B3j91r=H<AR]@/Uq+-eFlF$-B,<#A<VqZIQuPI$hAhnuK2`!
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: 75 3f 7a 68 4d e1 4b 4b 6f 1f e1 c6 0a 08 37 92 67 ee 9c bd 80 d5 66 17 47 38 35 a9 ea 51 7b c3 52 b1 3a 36 83 a6 8e bd 0f aa 58 de ec fa 12 01 d8 13 a9 be 86 ce 8c 4c 05 1c 45 cf 8f 24 fd b1 eb 3a 00 d8 51 da 31 a0 52 7f c5 da e3 5f 49 e1 17 75 93 01 c7 dd 9b b6 b8 be 9c 15 35 42 8e 8e bd 0f de f6 8e 74 b1 ab 5b 9d fb 86 b5 99 70 63 45 84 1b c9 13 8c 9e b1 36 0b c8 af ec b1 3a 3c 78 71 ec 3c f3 38 1c 9a 79 d1 5e 38 ef f5 6c b3 36 ac 16 40 62 fc f1 f2 1a 3a 33 32 15 70 2c 7b cd 75 01 00 ec 29 0f 1d b0 b6 55 25 9c 9a d4 ec a9 63 ae 2f 11 2b 68 9c 0c 71 df 4f 1f d3 bd c3 4f a9 63 ef 83 37 fd b3 e5 73 5f d0 7d 3f 7d 8c bd e2 b7 11 8c 9e 26 dc 48 28 9b db e4 6c fe de 94 a4 af f3 7b b3 69 eb 39 36 78 69 62 dc 6a f7 4f 17 5b 53 80 3c 78 cd 75 01 a6 11 70 00 48 Data Ascii: u?zhMKKo7gfG85Q{R:6XLE$:Q1R_Iu5Bt[pcE6:<xq<8y^8l6@b:32p,{u)U%c/+hqOOc7s_}?}&H(l{i96xibjO[S<xupH
2024-07-04 20:55:17 UTC	2114	IN	Data Raw: 82 03 98 79 8a 0e 00 26 9c 62 03 20 0a 0e 80 07 29 3a 00 98 30 8a 0d 80 87 51 70 00 3c ca 7c d1 f1 f6 24 2f 29 9d 05 00 f6 43 b1 01 b0 1f 0a 0e 80 03 e8 bb f6 25 19 4d 74 bc a4 74 16 00 48 f2 f1 24 6f 56 6c 00 ec 9f 82 03 e0 10 fa ae fd d1 24 bf 91 e4 82 24 8f 2f 9d 07 80 99 f2 dd 24 7f 9e e4 ff a8 ea e6 1f 4a 87 01 18 32 05 07 c0 61 ea bb f6 fb 92 fc 4a 92 f5 49 be b7 74 1e 00 a6 da 3f 27 b9 3a c9 7f ae ea e6 db a5 c3 00 4c 02 05 07 c0 11 ea bb f6 b8 24 17 25 79 7d 92 17 94 ce 03 c0 54 b9 25 c9 95 49 de 53 d5 cd bd a5 c3 00 4c 12 05 07 c0 31 e8 bb f6 45 19 15 1d af 4c f2 b8 d2 79 00 98 48 f7 25 79 7f 92 3f a8 ea e6 13 a5 c3 00 4c 2a 05 07 c0 02 e8 bb f6 69 49 7e 2d c9 2f 27 59 51 3a 0f 00 13 61 47 92 ff 92 e4 0f ab ba b9 bd 74 18 80 49 a7 e0 00 58 40 7d Data Ascii: y&b ):0Qp<\|$/)C%MttH$oVl$$/$J2aJIt?':L$%y}T%ISL1ELyH%y?L*iI~-/'YQ:aGtIX@}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49758	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	1566	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjkvMjAvMDMvMzYvZmY1ZjVhNDgtZTlhNi00YmFmLWEzYzctYzBlMzlkNjQ1YzU4L0xpdmV3aXNlIEJhbm5lci5qcGciXSxbInAiLCJ0b193ZWJwIl0sWyJwIiwidGh1bWIiLCIxNjAweFx1MDAzZSJdXQ?sha=70838abb427ebf2a HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/assets/application-b2dfc1aad05e45e6756e097b15c026c250a3e30a8cab4651d613dd0a09ef5569.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=M0poZkRtOFNWeVhmQ0Q0a2t5bDlWaEFvTkIrakpmd1Q2TitBQVZVdmlJczB1WjJ2OXFTRTczaFdTdkNqZmlmV240SXJuQ0U5anFlbVN5cUhEV1QzRDMrQzdxN0RWbGtxNXk0ZGxrS0htemJOK29kNDlxdkZQdlVIcEhiTFVobUNrMHNZMjNUU1dFeENCbXBJTmVHWXlQTXNZVHNidTh5cEJPR3FpNTcrZjVBSUVnYWREeDZXWEM4MUd4Q25ZQlhWbjlVT3JrNDNhdHlqSlNCeDVvS29GU1NtS0pIZ05Ka1dLMDRUb3NGQkU4ZCtZcHBWT3pBVFczOE01cFhTb2tSMDhrZUJadllPU0U2OHVxbkF5NnNKc0RINW9yZ2t3b3lIb0hVeloyVjRzMWwzMmsrVVFZMktsU3B5aFBFWDlmNWViN1dXUFpuVHFmRGpMVyt3a3lwWVRuNUQ1ek5HVjcrbHNYS3pKaXlYYkNLYWdSMHh0bm5hR2l3NGhzYy9zbjlWVFhuODFnQm1YUUJKOWRYaCtZMk5nMmE3ZHBNeXVIZFBlaVB1RHlRNlE0d285OVpzeDIzdU5IVmtnN1crTzcxVS0tSGRDTjZOc01iVFVBbFkyWGd1NnA1UT09--56968e23bbbced720d8e367d320a9f1560a16dac
2024-07-04 20:55:17 UTC	628	IN	HTTP/1.1 200 OK Age: 2001718 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Livewise Banner.jpg" Content-Length: 161094 Content-Type: image/jpeg Date: Tue, 11 Jun 2024 16:53:19 GMT Etag: "1572137a9385bb7393d87b5a53843b7ee4cd91a1" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 77ee1181b34e32f6761f8e13aaeb154e3215738b X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: e3c6a6c9-6c13-4a3e-890a-8358bd8f4e6d X-Runtime: 0.541086 Connection: close
2024-07-04 20:55:17 UTC	558	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 56 00 00 00 00 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 33 31 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 03 00 01 00 00 00 80 07 00 00 03 a0 03 00 01 00 00 00 f4 01 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 00 ff e1 05 15 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 Data Ascii: JFIF``ExifII*(iV02310100``http://ns.adobe.com/xap/1.0/<x:xmpmeta x
2024-07-04 20:55:17 UTC	2372	IN	Data Raw: 6e 6e 65 72 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 41 74 74 72 69 62 3d 27 68 74 74 70 3a 2f 2f 6e 73 2e 61 74 74 72 69 62 75 74 69 6f 6e 2e 63 6f 6d 2f 61 64 73 2f 31 2e 30 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 41 74 74 72 69 62 3a 41 64 73 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 53 65 71 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 27 52 65 73 6f 75 72 63 Data Ascii: nner</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> <rdf:Description rdf:about='' xmlns:Attrib='http://ns.attribution.com/ads/1.0/'> <Attrib:Ads> <rdf:Seq> <rdf:li rdf:parseType='Resourc
2024-07-04 20:55:17 UTC	538	IN	Data Raw: 21 98 33 7d 45 0e 0e 28 06 c6 0d 0d 52 5d 8c 0a d9 c8 35 dd 70 d1 e1 42 bb a2 08 ca ca ca ca 42 32 b2 b2 b2 90 8c ac cd 6e b9 2e 80 79 c9 c7 50 29 b2 84 6c 73 5c 91 93 8a 05 73 9a 4a b6 97 10 9f 62 79 14 55 eb d4 46 5d ee 4b ed 77 80 e0 85 28 02 2a 2d a1 07 55 84 f5 15 d2 76 91 d3 34 48 dd 22 95 2d 05 d4 ee 18 1c e4 0c fb 1a 0e 45 d9 88 d8 09 75 27 39 23 9a 6d c2 14 54 94 ed 38 14 18 eb 44 bf 6b 36 9c 05 38 9e 9c 90 78 cd 08 99 ad 29 5b 7b d4 95 7a 54 f2 84 0a f9 c5 06 6b 6f 12 a1 eb cd 73 4b 22 32 b0 9c 56 eb 85 f0 69 c4 69 47 22 b9 ad 93 9a d5 21 19 59 59 59 48 46 56 56 56 0e b4 84 70 e2 8a 78 1e 74 17 e7 9a 11 ef ae 83 a4 23 2b 2b 2b 29 08 ca ca ca ca 42 32 97 f4 5f fc ee bf fa a3 fe 14 81 4b fa 2f fe 77 5f fd 51 ff 00 0a 42 1f 66 a0 e8 b7 78 f2 a5 c9 Data Ascii: !3}E(R]5pBB2n.yP)ls\sJbyUF]Kw(*-Uv4H"-Eu'9#mT8Dk68x)[{zTkosK"2ViiG"!YYYHFVVVpxt#+++)B2_K/w_QBfx
2024-07-04 20:55:17 UTC	4096	IN	Data Raw: 48 41 96 fa 8f b5 08 50 08 e7 9a 0d 0b e4 70 28 60 e7 96 05 33 10 09 6c 72 31 40 96 c2 01 a3 a4 e4 d1 67 ba 9f bd 48 60 14 a0 51 80 9e 00 a0 b6 f8 73 42 a0 6e 03 3d 29 08 d2 91 c5 04 af 05 19 d8 00 cd 04 f1 e3 18 e2 90 84 c4 39 97 94 70 9c 1f 51 47 a3 2f 76 09 db 8f b5 14 4a 12 db c7 8c e6 84 68 90 a5 27 ca 90 cc 53 68 a4 f0 31 f9 8a c7 17 b4 f3 8c 7d a8 80 dc 93 d7 8a 30 09 52 79 a4 30 2f 7c d2 d0 ae 80 e2 8b 46 da 50 a3 b4 72 6b 85 a3 21 5c 91 8f 4a 11 a6 c0 65 27 38 a4 23 a5 44 4b 9f 84 66 b8 30 92 3f 0f 34 71 07 02 ba dd c6 7a 7d a9 08 2a cc 64 82 38 34 60 b0 9f 40 6b bc e7 cc 9f bd 68 9c 52 10 1a 9b 48 c7 02 82 90 c2 31 5d b8 ae 73 e5 41 a8 ef c6 4d 21 05 1c 65 20 1e 28 3f 95 41 03 20 fe b4 6d d4 e1 95 0c 66 83 47 89 23 ca 90 80 44 66 d2 3e 9c fd cd Data Ascii: HAPp(`3lr1@gH`QsBn=)9pQG/vJh'Sh1}0Ry0/\|FPrk!\Je'8#DKf0?4qz}*d84`@khRH1]sAM!e (?A mfG#Df>
2024-07-04 20:55:17 UTC	5930	IN	Data Raw: 8f 5e d0 b4 4b a9 8f 73 78 6a 08 58 ee c4 69 e0 85 00 9e 77 05 0f 32 3d 6a f6 76 21 f1 51 a3 bb 6c 81 11 11 65 b3 6e bf 3c de 55 6d 79 c0 30 af ee 93 d7 ed 5e 2c c1 94 59 61 e2 a5 b8 15 b3 c3 e2 c6 29 4f 4e ea 49 36 2b 9c 49 50 a4 3f 15 f6 94 1e 42 d0 b3 bc 28 1f ad 35 35 20 72 81 ef c3 a8 2d 9f c4 9f 65 26 b5 55 07 e1 73 e3 82 d3 ad 6d b0 f4 de ba 9e 63 6a 55 af bb 8b 35 40 25 89 09 c7 09 24 fe 3f bf 15 6f 9b 48 53 61 43 0a 6c 8c 85 85 64 62 ac 27 c0 26 b0 65 66 6b a2 9d a7 15 9b 69 88 e4 0d 74 18 f3 a1 ca 46 28 35 23 1c d3 0e 00 af a8 d6 57 44 03 e7 59 b4 52 19 9c 1e 94 19 4e 68 72 91 8a e0 8c 0a 44 40 0a 7c 55 c2 d2 7d 68 c6 28 25 0a 43 85 56 93 5c 29 3d 68 75 a7 14 1a a9 08 37 a6 c7 ff 00 59 2d 7f f6 94 7f 3a 9c 53 d7 f3 a8 4b 4d 7f eb 15 af fe d2 8f Data Ascii: ^KsxjXiw2=jv!Qlen<Umy0^,Ya)ONI6+IP?B(55 r-e&UsmcjU5@%$?oHSaCldb'&efkitF(5#WDYRNhrD@\|U}h(%CV\)=hu7Y-:SKM
2024-07-04 20:55:17 UTC	7116	IN	Data Raw: f0 ed ab 35 0b 91 d4 20 98 e5 49 04 27 39 38 3e 66 ac c7 65 5f 0a 31 ec b6 f0 f5 d1 a3 3a 5f 07 72 d3 c2 7d aa b5 ba c8 56 b0 b9 65 da 7c 7d 93 79 7c 14 a2 ed 68 9c b5 a5 06 1a d2 84 a7 ae c3 95 52 79 81 39 94 a5 a5 34 b6 d0 ae 70 47 a5 7a 1d 7a ec 5a 22 65 11 dc 86 db c6 36 80 38 a6 85 f7 b1 18 8e 36 54 de d2 81 9c 6e 48 e0 d5 25 e4 e0 de 1a 35 9f 88 f6 e7 25 1e 48 31 9e 51 52 13 b8 f1 c8 fa 68 a3 88 2e 1d a9 1e 2f 5a 9f 35 97 62 52 e3 bc e7 70 db 6b c9 dd c0 c5 45 97 1d 1b 2a 22 9d f0 2c 28 70 07 95 5e af 55 5d 8b 86 65 59 a1 b6 1f 43 40 c7 5a 16 52 52 ad e3 91 c7 95 76 eb c1 5b 36 8d 83 1c a7 d6 8f 4d 8e fb 58 0e 6f dc 06 dc ab ad 27 2d 38 50 24 79 d5 a8 c9 4b a3 3e 51 94 5e 1a 34 94 a9 f5 e7 38 cf 1f 6a d7 72 a4 af 1b f2 3f 5a e7 bc 53 64 ed 38 cd 66 Data Ascii: 5 I'98>fe_1:_r}Ve\|}y\|hRy94pGzzZ"e686TnH%5%H1QRh./Z5bRpkE*",(p^U]eYC@ZRRv[6MXo'-8P$yK>Q^48jr?ZSd8f
2024-07-04 20:55:17 UTC	8302	IN	Data Raw: 27 ad be 16 e3 e8 74 cf 4f 6d 77 94 4d 48 29 56 4e 38 cd 29 07 d6 b0 3d 2a 1b ec 7b 50 3d 7c b5 47 90 b5 1e 52 0f de a6 16 ce d6 f9 ae a3 4f 37 38 6e 63 83 6e 51 f4 ad 28 ed 19 3d 2b 9d e2 81 92 b3 dc 1c 1e 95 60 59 08 5d 2f a8 b7 b6 a5 b8 b4 84 8a 47 85 ae 62 4a 38 4b 83 d8 d4 69 db 56 a9 72 c3 6c 75 60 84 82 33 92 6a b2 d9 3b 70 7d a9 8a 05 7e 10 ac 0f 15 60 ea 75 b2 ae 7b 50 b2 7a 01 06 fa dc a5 01 bc 12 69 59 a7 92 b4 8c 71 55 c3 b2 9d 74 e6 a5 6d 2a c8 27 ef 56 02 d6 e1 5b 48 27 8c 8a d1 d3 5a ed 5b 98 85 40 73 5d 85 00 07 9d 04 95 0c 57 5b aa f2 10 2a 4e 45 6e b8 42 c6 2b a0 42 ba 54 84 6e b4 33 8c 79 92 07 35 be b4 9d a8 f5 14 1d 21 63 9b 79 ba 49 44 1b 74 26 cb af 48 7b 21 28 03 a7 3e a7 8c 54 5c 94 56 59 28 ad cf 02 4c 28 6a 76 f5 75 b8 3a 3c 6f Data Ascii: 'tOmwMH)VN8)={P=\|GRO78ncnQ(=+`Y]/GbJ8KiVrlu`3j;p}~`u{PziYqUtm'V[H'Z[@s]W[*NEnB+BTn3y5!cyIDt&H{!(>T\VY(L(jvu:<o
2024-07-04 20:55:17 UTC	7366	IN	Data Raw: 7c 83 77 78 ac 90 06 e4 05 1c 55 88 ed 4e f1 0a 16 f5 2f c1 c7 5e 95 15 69 0b ca f5 0e a5 62 0d b9 09 71 c7 14 52 a7 16 3a 0c f9 55 6e 63 34 93 34 e1 05 38 6e 68 74 76 53 d9 24 4d 0d 18 2d 0a 4b f2 57 85 38 f2 d2 01 38 a2 df 10 57 85 a3 4d 38 02 b2 36 90 79 a9 5e 1e 9f bd 37 70 2c 5c 0c 56 22 25 1c 60 e0 8a 8b bb 6f b0 a1 fb 5b ec e5 2f f8 08 56 d5 03 f9 f1 47 b1 c9 ac 22 15 ad d6 75 d1 e7 e5 c5 a5 bf 39 c0 e0 51 6d 4b f0 ec fc 3c d3 d2 cb 62 b5 b7 a5 24 d9 17 2d f8 7f 34 a0 e2 a5 29 94 29 6a c6 78 2a eb d2 91 35 35 99 fb 35 cd 65 2d a9 71 94 a3 e5 9e 69 ed a4 63 31 76 80 da b2 5c 46 71 e0 03 93 e8 7d 2a c7 ab b2 20 5d 2a c6 e3 62 22 89 bd 91 fe c8 81 2d 10 ae b1 1d 2a 70 38 87 02 70 b0 00 e9 91 e5 5c 59 ae 32 d8 88 ab 64 fd aa c7 85 2a 1c 82 3f 3a b1 8c Data Ascii: \|wxUN/^ibqR:Unc448nhtvS$M-KW88WM86y^7p,\V"%`o[/VG"u9QmK<b$-4))jx555e-qic1v\Fq} ]b"-p8p\Y2d*?:
2024-07-04 20:55:17 UTC	10674	IN	Data Raw: 99 b7 7b c3 70 da 93 2e 43 9d cc 48 cd 95 15 f9 67 14 3a ee 05 b6 d4 b7 09 2d 91 8e 2a 0b ed 6f b4 17 5c 9c ce 97 b7 28 05 4d fd da dc dd 94 80 54 00 18 f5 eb fa d1 b4 f4 3b a7 85 fd 95 f5 57 c2 98 66 44 c5 d9 74 e9 3a 93 49 4d 68 ce 36 e8 d7 37 56 64 06 18 fd f3 a3 a0 1d e7 e0 49 15 66 bb 07 ec 81 5a 5e 2a 2e b3 90 96 14 94 29 b8 10 90 78 8e 83 f5 38 ac fe 35 0f e1 f7 aa 63 67 bf 3f d9 a5 c6 c1 69 0e 3c dc 19 69 5b 82 43 a3 72 1c 5a 54 12 a4 a7 d3 1c 71 ef 56 e7 b3 ae d1 a7 7c bb 49 0b 4c 96 ca 77 6e 4a b2 54 3f 3f 4e 38 3e b5 dc e9 7f c7 a6 a1 fa a9 63 9e 8e 03 5d fe 47 07 27 a5 86 78 ec 9e 3e 58 20 92 06 33 cd 66 d3 b7 a5 22 5a 75 43 57 16 52 42 90 a0 47 00 1c 11 f9 79 52 a7 cf 02 4e 32 40 1e 5c d4 2c d3 d9 57 cd 14 21 74 2c 59 8b 31 f6 c8 00 79 f9 57 Data Ascii: {p.CHg:-o\(MT;WfDt:IMh67VdIfZ^.)x85cg?i<i[CrZTqV\|ILwnJT??N8>c]G'x>X 3f"ZuCWRBGyRN2@\,W!t,Y1yW
2024-07-04 20:55:17 UTC	11860	IN	Data Raw: 07 ce a3 3b 06 ae 62 6b 68 52 57 e1 3c 71 4f 18 77 64 2f cc 56 cc 39 46 54 96 18 ec 69 63 27 9c d0 85 58 f2 a4 36 27 03 f4 9e 7d e8 f2 66 2b 68 39 02 89 86 0d bc 07 77 fb 1a d1 5e 68 a0 98 55 f8 85 75 f3 07 d6 a5 b5 8b 72 0c 83 eb 59 b8 50 1d fe 46 4f 26 b4 5e 18 e4 d3 2e f2 c6 72 fb 0c f5 4e 41 e9 55 96 f0 ea 65 de ae 2e 1f 1a 1d 7d c3 f9 64 e2 ac 4d ca e4 88 16 c9 32 14 70 19 6d 4b 27 19 07 8e 05 56 b4 1d db 97 c8 0b f1 60 fb f3 58 3e 4e 6b 18 47 43 e2 a3 2e 65 21 22 df 3f fc 9a bb 24 49 1f e6 6b 39 0a e7 8a 91 ae 53 e0 4e 80 95 b5 b5 61 c6 c6 15 e4 7f 3a 66 3b 05 17 05 6c 5e 4a 52 33 8f 6a 6d df 21 5d 74 ec 15 ae d8 b2 fc 7c e5 4c ac fd 3f 6a c5 8d fb 63 b7 07 42 ea 53 96 72 22 6b a4 c6 f9 c7 92 de c2 39 ea 32 33 e9 50 c6 a3 8a dc 64 b8 e3 58 04 d2 e6 Data Ascii: ;bkhRW<qOwd/V9FTic'X6'}f+h9w^hUurYPFO&^.rNAUe.}dM2pmK'V`X>NkGC.e!"?$Ik9SNa:f;l^JR3jm!]t\|L?jcBSr"k923PdX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49756	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	741	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMTUvMDYvYWIxYWVmM2YtMmY4NC00MDUyLWIzYzEtNDBiZmFhMzA4Y2Q2L2lkeC1pY29uMS5wbmciXV0/idx-icon1.png?sha=a2aaeccf5041060e HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:17 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:17 GMT Content-Type: image/png Content-Length: 1886 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4415374 X-Request-Id: fc261f26-435b-476a-bd80-ecb17a19bb9e Content-Disposition: filename="idx-icon1.png" X-Content-Digest: 3e8ab0a3c73ae63870f3e395ab693b763d427019 ETag: "1cc07c6ec4c56dffcbbce61c618c7c5298e462b0" X-Runtime: 0.245863 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:17 UTC	1886	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 40 50 4c 54 45 ff ff ff de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de Data Ascii: PNGIHDR<<")@gAMAa cHRMz&u0`:pQ<@PLTEa<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	655	OUT	GET /2024/07/01/13/03/25/1cd889c5-c2f2-461f-8589-711d110760f1/MH%202.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:17 UTC	682	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 87713 Connection: close Last-Modified: Mon, 01 Jul 2024 13:03:26 GMT x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"MH+2.jpg"} x-amz-version-id: nldqYf9hK4wU21GDr5mW8lKlbqnLGoij Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 20:55:18 GMT ETag: "4f9d27c91c9335246fce3d4ad108a392" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cf45fdeb5348a5648604f5f9e4f2b8a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: tadaxSdOj0KtrsCDlFlfOW-aEApEvtiAph43ybUaePPxvaKFOg1_sA== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 5e 02 9e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 08 02 01 00 09 ff c4 00 5a 10 00 01 02 04 04 03 04 06 06 06 06 06 07 06 05 05 01 02 03 00 04 05 11 06 07 12 21 13 31 41 08 22 51 61 14 32 71 81 91 a1 15 23 Data Ascii: JFIFvvCC^Z!1A"Qa2q#
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: 46 f8 43 85 a7 28 b6 63 14 7e d6 0a c4 ce ba b7 db e0 2c ab 64 38 77 3e d8 e0 f5 14 ea c5 de f7 3d 3f 49 56 8d 55 6b 58 2d 37 da 66 62 93 49 7c b2 86 42 d2 92 52 ab 6d 78 08 4a ab 7c 51 a2 ac 28 c5 39 3c 99 b0 ed 77 99 b5 99 d4 49 d2 97 2e 1c 5a fb a4 35 ad 43 ca d1 d4 49 41 5e 72 3c f3 9c ea cb 8d 38 23 4a a4 66 16 72 b9 2c cc c5 6a ad 2b 2a ca b7 0d 96 c1 0a f6 83 0b 7d 54 13 c1 a2 3d 2d 6d c9 a4 32 0c 68 d6 2e 97 54 bd 65 52 f2 53 ed 8b 87 25 97 f5 4e 0b 73 b7 31 ec 8c d5 1a 9b e4 8d d4 94 a0 ac d0 99 8c a8 8c 31 4f 52 da 5f 19 c7 1b 3a 94 48 3d 2f a7 db 12 1e d6 8b ac af 16 72 46 34 c3 f3 35 1c 4b f4 7d 32 45 e9 b9 a7 4e 96 65 e5 db 52 d6 b3 d4 00 39 f3 e7 e5 1d ea 52 4a 37 91 e3 ba 8a 6e 53 e3 05 93 69 ec 75 95 18 d8 66 7b f3 cd cc 3d 86 65 29 65 09 Data Ascii: FC(c~,d8w>=?IVUkX-7fbI\|BRmxJ\|Q(9<wI.Z5CIA^r<8#Jfr,j+*}T=-m2h.TeRS%Ns11OR_:H=/rF45K}2ENeR9RJ7nSiuf{=e)e
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: 6c 23 95 b3 55 89 69 ba 93 f2 ae b5 2d 3e d9 48 48 97 52 38 44 01 de b0 05 04 75 00 13 cf c6 1d 29 5a c6 58 d3 e5 76 fc 9c cb 8c 69 6a a3 62 59 e9 72 95 69 0e 15 21 45 1a 02 d2 79 28 0f 03 e2 23 a5 07 ca 28 e3 54 5c 64 d1 46 5d cb 9b 14 c1 71 b8 b5 24 82 72 0f 4d 48 9b a0 2f 84 4d c9 00 91 f2 85 ca 1f 28 74 2a 71 d3 1d a8 f8 99 2c b2 35 b8 95 10 36 0a 37 8c 93 a6 ef 83 ab 4b a8 49 16 a4 2b 33 d5 7a 9d e4 a5 1e 9a 52 3a 36 d9 29 1e d3 c8 7b c8 82 54 5d ac 80 97 55 ee b8 66 9b 4c 5c ed 2a a3 49 42 9b 9b 7d d5 17 e6 5c 97 3a 9b 6c dc a9 2d 05 72 51 bd c9 23 6e 40 5e d7 3d 4a 30 e3 1b 1c 8a b5 14 e4 da 3e e4 66 30 96 c1 b8 cd b9 2a 8b 01 f9 0a a2 9b 48 d4 a5 7d 5b 81 60 85 25 23 9a bc 3f 9c 63 ea a0 da e4 bc 1a 3a 3a 9c 25 c5 f9 3b 8b 0e b7 2b 86 1d a9 4b ce Data Ascii: l#Ui->HHR8Du)ZXvijbYri!Ey(#(T\dF]q$rMH/M(tq,567KI+3zR:6){T]UfL\IB}\:l-rQ#n@^=J0>f0*H}[`%#?c::%;+K
2024-07-04 20:55:17 UTC	14808	IN	Data Raw: d5 fd 90 dd 45 3b 32 d6 ca 57 b4 c5 3d e4 db c0 a4 a5 43 e4 0c 68 e8 25 fb 56 bf 07 3b eb f0 bf 4b 19 7c 35 fc ee 38 63 47 ff 00 eb e6 98 ab dc 89 b5 1f fd 33 1d 2a 8f dc 78 58 f8 18 b3 f5 f1 e8 54 14 da fa 94 df cd 62 19 53 48 a4 49 9e ed 97 30 83 68 4d c8 d2 b3 6f 74 4a bd a9 20 96 00 d8 f5 d0 70 7d 25 00 14 80 db 20 fe c0 84 cd da c1 2c a0 0e 0f 6c 8c ae 75 5c ac d3 ff 00 c4 61 77 ba 1d 1d 1a bf 64 04 85 65 9d 6c 8b 5d 55 07 bf 84 46 aa 3d a6 69 ec 54 c9 b4 06 73 02 be 94 9b 7d 78 ff 00 7a 06 1d c1 2d 03 a5 a6 c0 ed 08 eb 3a af a6 55 d5 db a8 37 02 2b ff 00 21 5e 00 58 dd 2b 56 28 6c 0d ed 54 64 11 e4 56 0f f3 80 78 64 da 1e f3 7e 6c b5 4a 6c de e3 84 b8 64 ca f2 09 a2 cc 03 95 d2 d7 49 0a f4 44 da fe 17 81 5d a1 3c 31 07 22 65 78 b8 f3 18 28 0b de 49 Data Ascii: E;2W=Ch%V;K\|58cG3*xXTbSHI0hMotJ p}% ,lu\awdel]UF=iTs}xz-:U7+!^X+V(lTdVxd~lJldID]<1"ex(I
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: aa 52 a3 2f 2f 3c d1 ff 00 05 f6 c2 d3 bf 91 1f 38 b8 c9 c5 de 2e c2 6a 52 85 45 c6 a4 53 5f 93 91 f3 57 21 ab 58 62 7e a3 52 a1 cb 26 72 82 2e f2 1b 6d 77 76 5d 1c d4 92 93 b9 09 f1 17 db 9c 7a 0e 9f ad 8c d2 8c f0 cf 9d fd 4b e8 55 28 4a 55 68 2b c3 7f 95 fd cc 8e 4e af 3b 4e 7b 89 2e ea d9 58 ea da ad f9 47 45 49 ad 1e 4d c1 30 aa 71 c5 50 90 5e 53 8f 5b aa 8d e0 f9 dc 8a 3f 0c 6e c3 3d a0 ab 58 59 a2 d3 32 ed 38 d9 37 21 c1 bd fd b0 7e a6 2c 4f 4d de e8 67 97 ed 5f 3e bd 22 6e 8d 2e f0 ea 75 10 62 bd 5f 94 47 16 26 e6 be 34 97 c7 33 54 da dc 9b 49 97 6c 36 65 dc 68 24 02 da b9 d8 db a1 1b 8f c5 01 56 d3 57 41 c1 b5 81 5a 5d d5 4e d1 55 2e 81 a9 d4 38 87 10 3a 9f b2 47 ce 31 e1 4a ec e8 46 4e 74 5c 16 d3 4d 7f 43 6d c0 12 4a c3 f2 f2 ed 29 05 5c 34 8b Data Ascii: R//<8.jRES_W!Xb~R&r.mwv]zKU(JUh+N;N{.XGEIM0qP^S[?n=XY287!~,OMg_>"n.ub_G&43TIl6eh$VWAZ]NU.8:G1JFNt\MCmJ)\4
2024-07-04 20:55:17 UTC	7369	IN	Data Raw: e1 6e 3f 21 a9 32 c8 9f 6c ae c5 56 57 22 3c 60 38 b0 f9 04 18 9c 50 46 c3 50 f2 80 b5 83 bb 2d 07 43 9b 1d e2 8b 24 4d c9 d9 57 b1 eb fe 71 65 9e d4 d0 71 36 b5 cf 58 84 17 b1 6e 05 a5 e2 c9 44 b3 52 96 4b aa 6c eb 65 f4 80 1d 61 5f a4 85 74 3f 28 38 54 95 37 78 b1 73 a7 0a aa d3 57 31 5a e6 15 ae e5 92 96 e2 81 ab 51 14 a2 a7 66 b4 6a 52 6f b0 e2 27 ec db f4 81 b7 b3 94 74 e1 5a 35 b0 f0 ce 54 e8 4e 86 63 94 0f 94 c6 f4 49 f5 29 12 f3 68 52 99 d9 d0 84 92 13 7f 3e 47 dd ef b4 3d d3 9a 57 68 4a ad 4d bb 45 85 25 31 25 2d a1 a9 b9 91 30 d2 fd 5b ab 61 ec 3d 20 1a 63 54 e2 b4 15 95 ad ca a9 76 4b 8d b6 55 6b 28 2b 55 fd a6 01 a6 31 35 e0 33 2d 58 25 69 25 61 7a 46 e0 0d 88 f3 bc 29 c1 5b 03 94 df 91 8e 42 a3 c6 40 09 41 6e fb ec 7f e6 d1 9a 51 b3 c8 e8 b0 Data Ascii: n?!2lVW"<`8PFP-C$MWqeq6XnDRKlea_t?(8T7xsW1ZQfjRo'tZ5TNcI)hR>G=WhJME%1%-0[a= cTvKUk(+U153-X%i%azF)[B@AnQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	666	OUT	GET /2024/06/01/18/19/58/9042732b-3e9c-4dd8-927d-343bc7ce15e5/self%20compassion.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:17 UTC	664	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 67216 Connection: close Date: Thu, 04 Jul 2024 20:55:18 GMT Last-Modified: Sat, 01 Jun 2024 18:19:59 GMT ETag: "e53d0c18c0e8e583b734d7acd54c28d0" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"self+compassion.jpg"} x-amz-version-id: bY7Yj2sAMGRKS1tvjq1f6abVvg1j21QA Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 045d55468661252b6be78e701e36b492.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: XRox8EfOPIZ3kfyAXzZfaBt5mTztt3wh2nX9Oo2j8Q6t4C0RCUcXVg== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:17 UTC	1439	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 5e 02 9e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 51 10 00 01 03 03 03 01 05 04 06 06 07 05 05 08 02 03 01 02 03 04 00 05 11 06 12 21 31 07 13 22 41 51 14 32 61 71 15 23 42 52 81 91 Data Ascii: JFIFvvCC^Q!1"AQ2aq#BR
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: d4 36 97 52 a6 c9 18 ef 08 3c e0 9e a4 f4 cf ff 00 aa f6 31 48 f0 b3 c7 73 d1 96 3e d4 ed 72 6c f6 c1 73 7c 39 35 f7 3b d9 0d 46 49 51 48 3d 01 19 f0 e1 38 00 67 38 e7 ce b7 cd d4 c6 1b 33 2c 1d 1e 4c 9b c5 1e b1 ec 72 6a 26 e9 87 14 27 09 ce 87 d5 9d c0 85 b6 93 ca 52 a0 79 1c 63 e1 53 8d a7 6d 18 67 8b 84 aa 46 81 5b 9c e0 a0 01 40 02 80 05 00 0a 00 14 00 28 00 50 00 a0 01 40 02 80 05 00 0a 00 14 00 28 00 50 00 a0 01 40 02 80 05 00 0a 00 14 00 28 00 50 01 5c f7 15 f2 a4 f8 02 85 ac ce 44 41 9f 22 6b 9a 47 5c 0a ea c7 15 06 a1 5a fd 60 a0 0b 3b de 2b 3b bc fd 9a d1 18 32 3b b1 45 7f 55 be 23 d2 61 ff 00 f1 ad 62 60 cd 36 b4 24 14 00 28 00 50 00 a0 01 40 02 80 05 00 0a 00 14 00 28 00 50 00 a0 01 40 02 80 05 00 0a 00 14 00 28 00 50 00 a0 01 40 02 80 05 00 Data Ascii: 6R<1Hs>rls\|95;FIQH=8g83,Lrj&'RycSmgF[@(P@(P@(P\DA"kG\Z`;+;2;EU#ab`6$(P@(P@(P@
2024-07-04 20:55:17 UTC	1024	IN	Data Raw: 77 d0 03 a9 dc 19 75 38 70 0f 55 0f b3 f2 3c d4 e9 6c 4e 69 33 1d ed 1b 47 bd 6c 97 fd 5e 70 59 49 ca 92 a1 d6 b2 b4 9d 1a 34 e4 ad 14 17 10 f3 47 73 bb b1 8e 98 e9 5a a3 9d 87 6f 6c 80 37 a4 83 ea 29 db 4c 9e 48 9d 47 a4 a3 de e3 96 e4 24 0c 8e 1d 48 e4 57 4e 2c cf 1b b4 73 e5 c1 1c aa 99 99 ae 15 ef b3 5b dc 79 cd b8 ec 77 19 70 2e 35 c6 29 c7 cb 3e 87 1c 73 c1 1c 1a f6 f1 66 86 65 48 f9 bc fd 3c fa 79 5b e3 c9 ec 3e c3 7b 74 b3 f6 8e 81 6e be da 66 42 bc a5 03 64 ab 15 c5 c8 ed ca 23 af d5 6f 01 0b f3 c7 43 e5 e9 57 a6 8c d4 b5 1a dc 9d 2b 69 94 94 77 3d 9e 6a 5b ea 81 ca 55 7b 98 14 ce 7e 25 e7 c8 ff 00 94 d4 b8 85 8f 1d 89 a9 e2 db 4f b6 49 b1 e8 1b 4b 59 dc 22 a9 32 1c 42 7f e2 28 25 96 ff 00 ca aa c1 a3 4b 63 3d 39 3e 24 89 0f bb a3 2d cf 5e ae 0f Data Ascii: wu8pU<lNi3Gl^pYI4GsZol7)LHG$HWN,s[ywp.5)>sfeH<y[>{tnfBd#oCW+iw=j[U{~%OIKY"2B(%Kc=9>$-^
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: 81 74 b7 5b a1 05 6c f6 85 93 9c 20 66 b1 b8 c5 0d c9 23 ac 7e 90 3a 53 4f 48 f6 4b a9 4d bd 5d 3f ac b6 50 3f 32 31 58 3e bb 06 27 59 1d 7d ce 69 64 8b ee 51 7b 52 ed 2b 47 dc df 89 3e 38 62 5f 76 b0 a4 f7 24 2b 27 c8 8c 56 eb aa e9 da d5 a9 18 4e 51 69 15 09 fd b6 5f 9b 60 c5 b4 dc 24 22 32 b3 cb e9 04 a4 7a 0a f9 ce bb e2 b9 22 f4 f4 e6 4e 5e 0a 2a 2d ba 83 5a 5c 8a 23 ae 64 e9 0b 56 54 a4 ac e0 1f 89 f2 af 9a 86 0c dd 6c db ab 7e 49 f7 3e 0f 59 7e 8e 5d 9c df b4 7a 15 32 e9 71 90 f9 71 bd 9e ce eb aa 5a 12 38 3c 67 ce be a7 a1 f8 7c fa 29 29 24 9b 7c 9d b0 4f 4f b9 9a ce b2 b0 23 51 41 5b 45 4a 0a 29 db e1 3c e2 8f 8b 74 4f aa 4e 4b 9a 3b 70 4d 43 da ca 75 9e d8 e6 97 84 62 27 7b 89 4e 71 de 12 4f e7 5f 06 9f 55 d2 5c 1c 6c f5 52 c7 25 b3 27 ec 6f 77 Data Ascii: t[l f#~:SOHKM]?P?21X>'Y}idQ{R+G>8b_v$+'VNQi_`$"2z"N^*-Z\#dVTl~I>Y~]z2qqZ8<g\|))$\|OO#QA[EJ)<tONK;pMCub'{NqO_U\lR%'ow
2024-07-04 20:55:18 UTC	15990	IN	Data Raw: 05 10 1c 6c 91 9c 74 55 28 f6 33 73 fc 5d cd b2 48 85 69 29 88 cb 0d a1 11 d2 1b 09 28 1e 12 07 20 7e 39 af 99 ea b3 42 39 64 a3 e4 f5 b0 c6 52 82 6f b8 d2 4d d7 be 05 29 3b 89 ae 09 66 bd 91 d2 b1 8c 58 61 c7 d7 b9 d3 84 8f 2a e7 51 72 77 23 56 d2 5b 0f fb dd ad 77 6d 24 13 f0 ae bd 5b 54 51 85 5e ec 6e f3 26 32 37 ac e1 7d 76 d6 6d 38 2b 65 a7 7b 22 02 75 c9 4e ba 1a ee ca 94 a3 80 94 8c 93 5c 13 cc db d3 47 5c 71 d2 bb 26 ed 16 04 46 68 48 b8 2c 0c 72 96 07 f3 ae fc 38 14 56 ac 87 2e 5c b6 f4 c0 95 de f5 d5 41 28 fa a8 c3 80 07 15 d7 72 c9 b2 e0 e7 da 1c f2 3f f6 88 f6 74 27 69 4e 47 53 5a 5c 71 99 d3 98 c5 dd 50 f5 c5 e2 86 93 e1 f5 ac ff 00 88 73 74 8d 3d 15 05 6c 55 b6 15 24 0d eb e3 a9 19 ad 6b 52 dc 8e 09 76 66 31 6c 6c 24 28 28 e3 ae 79 ae 84 d4 Data Ascii: ltU(3s]Hi)( ~9B9dRoM);fXa*Qrw#V[wm$[TQ^n&27}vm8+e{"uN\G\q&FhH,r8V.\A(r?t'iNGSZ\qPst=lU$kRvf1ll$((y
2024-07-04 20:55:18 UTC	2442	IN	Data Raw: 5a 5b f2 52 52 38 24 71 9e 33 c1 a8 ea e1 eb 74 d3 f2 b7 46 38 65 e9 e7 5e 1e c3 27 26 f7 68 5b ab 00 21 3d 01 af 89 be e7 d2 57 62 b9 75 d4 01 c4 64 37 b5 3d 30 13 5c f3 c9 7d 8e 88 63 ae 48 47 2e 0e 3a 9c 06 d2 15 e5 9a cf 53 68 d2 a8 28 53 8e a8 a5 44 27 8c f8 6b 48 c5 b7 42 6d 25 61 1f 1e 1c 28 78 45 29 78 63 8b 1a 96 42 46 41 c0 3e 55 14 50 83 9b 52 40 eb eb 59 ba 29 08 c9 9a 03 7d d2 70 3f 1a 99 4f 6a 45 a8 90 72 50 66 4d 43 20 8d bf 6b e5 5c 8d 6a 95 1d 0b db 1b 1e c9 c1 01 08 f0 a1 3c 0c 56 92 56 4a f2 c6 2f 29 bc 67 1b 8f ad 61 2a 35 88 d5 e5 94 a3 24 65 3d 31 59 3e 0d 55 76 18 ba 94 85 12 38 f4 ac 1a 35 10 dc 93 9d c4 ab e1 4a d5 0c 45 69 da 41 f3 27 8a 82 84 dd 58 51 ce 78 03 9f 9d 5e c2 12 de b5 60 0f 74 79 e2 a6 c7 5b 8b b6 fa 76 f1 d7 d7 a5 Data Ascii: Z[RR8$q3tF8e^'&h[!=Wbud7=0\}cHG.:Sh(SD'kHBm%a(xE)xcBFA>UPR@Y)}p?OjErPfMC k\j<VVJ/)ga*5$e=1Y>Uv85JEiA'XQx^`ty[v
2024-07-04 20:55:18 UTC	13553	IN	Data Raw: c6 72 43 69 77 d9 e1 32 0e c2 a0 0e 3c 3e 94 69 48 5b f7 3e 81 db 6e 8f 5f 2d ec 4e 94 f3 92 df 79 01 4a 79 d3 95 2a b9 4e e4 b6 1e b7 15 47 2a e7 8f 77 e1 48 a4 82 29 04 a5 cc 83 b8 f9 93 40 04 53 3b 1b 07 6f 8b 1e 7f c6 81 8c e5 b0 86 8a 94 31 de a9 39 1f 1f 8d 00 71 6c 24 b2 97 12 bd eb db d3 ef 7c a8 00 ac ba 1f 69 09 7b c5 8f b5 e9 f0 a4 d7 70 0b dd 89 0c a9 a5 2b 23 77 03 1c e3 e3 48 a1 46 23 a3 c6 de d2 94 e3 03 e3 40 08 2b fa b9 42 46 08 19 cf fd 28 11 c0 e6 77 03 d0 f3 f2 ff 00 ad 26 50 d2 68 43 8c 85 24 92 b7 0e 30 7a 1f 9d 2b 13 42 11 22 a5 82 e3 9b b2 af 74 e7 ce 86 34 26 d8 48 9c a2 54 41 09 e7 27 81 f2 a4 3e e2 1e ce 24 2d 2b 40 f7 0e 76 e7 a7 c6 81 50 9c 54 ad 5b c9 51 40 0a 3c 27 8c fc 69 80 ab 80 3b 15 63 0a 56 7a 1f 35 52 18 c1 86 f8 75 Data Ascii: rCiw2<>iH[>n_-NyJyNGwH)@S;o19ql$\|i{p+#wHF#@+BF(w&PhC$0z+B"t4&HTA'>$-+@vPT[Q@<'i;cVz5Ru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	692	OUT	GET /2024/05/15/21/23/39/91ec8626-356f-41d7-be64-215088e533ec/Small%20leaf%20sprouting%20out%20of%20dirt.jpeg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:17 UTC	712	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 123361 Connection: close Last-Modified: Wed, 15 May 2024 21:23:40 GMT x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"Small+leaf+sprouting+out+of+dirt.jpeg"} x-amz-version-id: LVJDOT0sW2gWXlmTuSkWO8.epouZTpZt Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 20:55:18 GMT ETag: "007df99502cdac350621ce1c3f1c5027" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 19f569e782b5b925c41d8bc4e292cc7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: 2m0j4qZGunuGPpSvmWmd0-KONGKnCE-Sj9fAwPMzTPOySQMW1pOANA== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: 00 fd 71 ca ab e1 a2 43 80 8d 20 9e 37 26 64 9e db 6d 8e 5c a7 d3 da 40 8f 22 64 00 3e f4 98 1d b6 fa 63 97 22 22 da 12 12 0a 04 f0 3c c3 bc f1 f8 e2 a7 e2 6c 6e bb 65 82 e8 02 16 74 a4 49 1b 99 e7 9e 46 1a a6 f8 1b 2e 50 6a e8 82 d0 01 48 d8 c9 dc 01 c1 f4 f7 c3 22 b3 40 f4 41 74 82 7c d2 bd 6b 09 48 20 a4 73 11 c8 8e d8 91 70 d3 b6 21 55 08 fb 2a 14 a3 e4 06 49 d8 c0 06 30 60 e1 05 c7 98 dd 72 df fb bd 04 03 a1 23 b8 dc 4c 11 1b fb ce 04 2b 30 ba 26 61 54 93 0e f7 d1 64 dd b9 52 af 21 89 11 b8 d8 6f 87 69 d5 6c 6d b7 9a 01 07 70 73 f6 53 9b b5 f8 9b 00 04 c1 20 91 22 76 e7 0e 77 d2 c8 95 21 a4 08 8f b2 fa f5 94 a0 24 a9 09 58 54 c0 d4 49 1b 77 07 16 6b b5 4f 92 ed b1 d1 0a 7e ce 9d 3b 30 98 db 6d 87 bc f3 e9 8b 2e dd 00 a8 b3 83 30 cf f2 fb 98 1f df fd Data Ascii: qC 7&dm\@"d>c""<lnetIF.PjH"@At\|kH sp!U*I0`r#L+0&aTdR!oilmpsS "vw!$XTIwkO~;0m.0
2024-07-04 20:55:17 UTC	16384	IN	Data Raw: 24 70 06 fb fa 63 21 f4 f6 93 29 e6 46 86 b4 72 4f 56 e2 8d 20 cc 99 fc 3b 98 fa 61 77 51 92 48 76 36 4f 53 74 69 03 74 c8 cb 6d b8 80 35 71 b8 26 37 3f f1 dc fa e2 3f 2c 31 0e 2d 84 57 bc 48 33 05 6c 21 29 3b 10 0a 46 f1 e9 bc c4 7b c6 20 db 88 cb b5 7b f2 4a 55 79 2e c1 f9 af ca b8 b6 c2 41 76 20 ed 3b 4f e4 71 76 d2 60 18 fe 7f 54 ab aa 3b fe de fe 6b 5f ef 36 d7 2a 41 48 4e ad b5 11 24 7c c9 c5 ff 00 28 1f ea 11 9b 55 d1 82 bc 3b a5 4e 87 90 04 27 79 1c 1f ca 7d b1 ed 6a 50 07 e2 db aa cb fc c0 eb 3f 44 e9 45 54 ea 14 d8 99 8f 52 7f 5c e1 33 6d 24 c7 bf ba b0 a8 1c 5a 49 c2 b4 ec 57 27 da 28 71 0b 52 54 90 02 8c f2 26 20 4f eb 6c 2c fb 61 8d 62 1d e6 11 fb c6 b5 cd 3b ab 6a d7 99 ea 59 09 22 a1 44 0e 50 a5 92 01 da 40 1e fb 63 2a bd ab 9b 90 0c 23 9a Data Ascii: $pc!)FrOV ;awQHv6OStitm5q&7??,1-WH3l!);F{ {JUy.Av ;Oqv`T;k_6AHN$\|(U;N'y}jP?DETR\3m$ZIW'(qRT& Ol,ab;jY"DP@c#
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: e6 89 d5 27 6f 7e f6 5e 46 da ec b7 2b ed 1f 80 aa a0 87 af c5 db bd d2 e1 5c e0 48 09 4b ab 79 6e 2e 0c 82 a7 96 4c 49 3b 0c 7c c3 b5 7d a2 75 c7 13 22 d6 96 ba 8e 90 08 9d 3b f3 59 2e bb 79 70 05 90 4a e9 6e 96 64 eb 65 ae 81 8a db 45 92 e1 99 ae 76 8a c3 77 6a f3 56 45 ba cd 49 58 cb 7f c3 5a 02 fc f5 b1 e6 d0 11 c2 94 15 db 0c f0 6e ca d8 f1 ab 4e fb b4 9a 8d c1 71 ff 00 89 99 a6 59 02 0c 98 cf 22 8b 4d ce a9 f1 78 4f 25 db 99 7e ef 4f 9e ad c6 b6 f7 4f 6e b4 de 90 84 9a 8b 92 ed e6 e3 52 da da 10 91 ff 00 76 a5 17 09 8d b7 48 83 c6 3e 91 c0 fb 37 c1 38 4d 1a 76 fc 3a 97 77 6d 4e 61 ba 1b 89 de 08 13 9f 34 27 d2 7c 81 de 1f b2 5e ae cc 96 bb 45 4b b4 ce d6 3b 7d 5a 98 72 9d 55 4e 5a 51 4a 1b 49 05 07 42 5b 64 84 01 db 1e ba 9f 71 4e 41 a2 2a 0d 84 e4 Data Ascii: 'o~^F+\HKyn.LI;\|}u";Y.ypJndeEvwjVEIXZnNqY"MxO%~OOnRvH>78Mv:wmNa4'\|^EK;}ZrUNZQJIB[dqNA*
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: 79 a5 4a cc e7 0e 38 84 05 f8 80 c2 41 90 20 77 9f 9e 2a 5b f0 8f ba 22 d5 4b 7b ab ae 75 b1 0a 20 1e 65 4a 81 06 76 8d b0 ad 4a 40 4c 61 72 68 45 c5 9a 0d 2a 79 05 4a 56 fb e9 00 6e 26 36 f9 e0 02 99 d5 ba e4 51 9b cd 3d 74 68 42 34 0e 04 73 1b 10 44 7a 1c 05 cc 2d 3a 5a 57 21 35 d6 1a 2a 97 92 ea 1c 43 4b 99 09 4f 22 77 d2 7d 77 c4 1a 85 b2 1c 54 82 47 38 50 dd b2 bc 13 fc 34 97 55 20 a5 3a 78 1e b2 36 c5 dd 50 16 00 0c 14 40 09 1a a2 4a 85 fb ba a1 23 49 61 c8 ed e5 1e a6 64 47 ae 16 35 aa 4c 4e 12 dd dc b8 93 82 93 ef 94 0e 21 d8 14 a4 02 24 92 9e e4 ef f4 c3 54 aa 8c ea 76 55 da d8 c0 ca 18 72 e2 2a 18 53 c4 24 82 09 8d 1b cc 73 31 87 1b 5c 37 1f aa be 87 74 41 93 6f 65 95 16 5d 69 21 27 b2 92 9d d3 04 7a 6f 89 ef 89 38 20 7d d7 69 77 45 5d e6 bc 9f Data Ascii: yJ8A w["K{u eJvJ@LarhEyJVn&6Q=thB4sDz-:ZW!5CKO"w}wTG8P4U :x6P@J#IadG5LN!$TvUrS$s1\7tAoe]i!'zo8 }iwE]
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: d8 40 09 d0 61 41 45 03 62 00 c2 ce a0 fa 81 da 77 47 6d 6a 74 81 2f 5a 6f 9d 44 e9 8d ad 46 87 34 dd 69 50 5b 48 45 21 0d aa b1 f7 6a 4f 95 2d ba d8 fb 89 d4 7e 58 5f fd ba ef 6d 1b 22 8b fa 0c c3 9d 01 1c b6 52 65 4c c8 1a 6d 17 6a 9b 73 4e b3 e3 34 a6 d4 aa 3a 36 92 13 a9 2a dc 1d c8 d3 03 04 16 57 a3 21 a4 15 57 df d1 23 c2 e9 1e 5f e5 1e 66 ef 91 ec 6d 78 55 d7 0b 9d c5 a6 7c a9 79 90 1e 41 dc 80 95 3a 79 df fa e3 9d 61 7e f1 aa 0a 8f ce db b4 8d 47 0b 55 45 46 48 ab 26 be 8f c4 a5 5a e1 41 2f 15 21 69 ee 9d 81 de 49 c0 bf db 2f 1c e0 5d 2a 5f 7d 62 ee 92 3d 3d f5 f9 a4 3c f3 d4 9b 85 9e 8d a6 d9 a8 75 14 8c 90 5b 75 50 a4 98 ef 26 7c a2 07 7e 30 f5 3e 13 70 e8 d5 96 94 95 5e 27 6f 4d c0 53 38 f7 0a b7 7f e2 37 3a 37 44 1b b5 aa df 73 a5 12 9a a5 97 Data Ascii: @aAEbwGmjt/ZoDF4iP[HE!jO-~X_m"ReLmjsN4:6W!W#_fmxU\|yA:ya~GUEFH&ZA/!iI/]_}b==<u[uP&\|~0>p^'oMS87:7Ds
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: 2a 7d 5f 57 69 1b 6d 4e 53 2d 28 85 28 8d 45 3b e9 99 20 7a 6f 82 db f0 6d 70 74 11 b7 24 23 77 23 71 29 45 3d 78 a2 15 4a fb 4d 43 65 33 ba 35 27 d7 7d a7 98 07 f1 c6 81 e0 45 a0 11 8e a8 2e bd 7c 80 32 47 d1 6b cc 3d 60 b5 d6 d2 6a 60 a9 f5 3a de 86 9a 49 f2 b6 08 80 a3 07 98 c0 0f 0f 60 71 00 49 1e 69 81 75 a5 9a 86 4f bf 9a a1 da cd f7 aa 5b 8a eb 92 b4 a1 ad 6a 52 10 09 24 0d 52 37 f5 c6 ad 0e 0f 6d 51 ba 9c d9 8f 7c d2 55 38 c3 e9 12 1b fc a5 dc d7 d5 dc c7 e3 38 b5 dc 16 d5 03 a8 53 2b d4 b2 0c 14 e9 00 89 fb bc 60 37 3d 9e b6 34 8b 18 00 71 ca 10 e3 8f a9 e1 76 4f cd 79 0d f1 15 74 16 dc f3 49 7a b6 dc 9c a4 af 35 06 ad 6e d3 54 14 87 b4 b8 08 0e 25 0a f3 0d cf 38 63 82 8a 9c 3d ee b5 68 2e 15 39 ee 02 3d 2a ae a8 75 38 fc 4b d2 2f 82 6f 8b 0b 3d Data Ascii: }_WimNS-((E; zompt$#w#q)E=xJMCe35'}E.\|2Gk=`j`:I`qIiuO[jR$R7mQ\|U88S+`7=4qvOytIz5nT%8c=h.9=u8K/o=
2024-07-04 20:55:18 UTC	8673	IN	Data Raw: a7 bc 24 a8 a5 c5 25 1e 63 a4 13 04 ff 00 9c 7a 6a 55 b5 37 7e 4b 3d e2 0a d6 da 1b 53 80 f2 13 11 e9 13 f9 ed 89 6d 47 e2 7e 10 83 dd f9 a2 6b 54 69 4a 07 97 83 1f 2c 37 4d ed 2d 19 dd 51 f4 c9 c0 43 9c f1 94 a3 c9 e2 60 18 1b 77 db 0d 06 b4 85 4d 10 3c fa ff 00 84 34 87 02 f7 04 71 be fd c1 88 c7 43 46 09 fe 65 10 34 9d c9 85 31 a7 1f 6e 08 79 63 70 20 2b 60 3e 5f 4c 05 cc 69 33 bc 2b 8a 6d 1c 96 f5 d6 bb a4 cb 8a 02 09 8e 01 8e d0 3e b8 82 d8 2d 81 85 47 8d 27 01 06 ad b8 ea 42 9b 41 f3 6c 63 7e 40 f5 ef fe f1 7d b2 10 ce 04 f3 49 37 17 df 74 24 24 49 49 ec 4c c4 ed 1e 98 61 84 e1 c5 24 ed 6e 74 c6 11 3b 4b 6a 79 a0 a5 a3 4a b8 dc 7e bd b9 f5 c5 cb cf 2c 22 b2 4b 20 6e a4 d4 5a d6 e1 30 04 41 d8 0f 53 fa fc 31 7d 4d e6 65 71 a4 5d 24 ce 7c b0 b5 d3 5a Data Ascii: $%czjU7~K=SmG~kTiJ,7M-QC`wM<4qCFe41nycp +`>_Li3+m>-G'BAlc~@}I7t$$IILa$nt;KjyJ~,"K nZ0AS1}Meq]$\|Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	23.53.114.19	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 20:55:17 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=36435 Date: Thu, 04 Jul 2024 20:55:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-04 20:55:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49763	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	1221	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMTAvMTAvMTcvNTRmNjllNTctZGMzZS00MDY1LTllYjUtZjhkZmExY2EwY2ZkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjYwMHg2MDBcdTAwM2UiXSxbInAiLCJ0cmltIl1d?sha=1b206e95ba189cd1 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac
2024-07-04 20:55:17 UTC	626	IN	HTTP/1.1 200 OK Age: 2001938 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 23655 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 16:49:39 GMT Etag: "d9138790d866e2302f40cd24820164442c395efd" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 8919d7761ca65597a9d96ffcc76c8d415a6b9ad0 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 54f7bd15-b44d-4a95-b336-3881d45b5dd2 X-Runtime: 0.345945 Connection: close
2024-07-04 20:55:17 UTC	560	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 bc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 07 80 a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a Data Ascii: JFIFHHExifMM*JR(iZHH02210100C
2024-07-04 20:55:17 UTC	2372	IN	Data Raw: 04 04 06 03 01 00 00 00 00 00 01 02 03 04 05 06 11 31 35 72 b1 07 16 21 34 36 41 53 71 81 a1 b2 d1 17 82 92 c1 12 13 32 61 14 33 51 52 a2 f0 22 42 54 91 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 9f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c e0 b8 f0 01 d2 ee 2c 74 5c b2 c1 56 f3 19 7c 4a e0 e3 a1 69 f8 d7 e1 df 68 f0 b6 9c 44 3a d4 95 a4 fc 24 64 46 5e 40 1d cb 7d 3e f8 bf 28 6f a3 df 17 e5 14 bb 3d 75 ea fc 92 45 fb 21 6b 4e 04 5f fa 57 fa 86 25 ae cd 5f e7 ba 1e b4 fc ea 7f cc 02 e8 bb e8 f7 c4 33 e6 42 9b 34 96 b8 75 71 1d 74 a9 b8 38 ad 41 56 4f 43 3f 35 86 69 e6 d5 34 c9 2d 2a 75 24 64 65 8e f9 19 8b 91 a4 f2 7e 2e f0 0c c0 00 00 f9 0c 0d 68 2f ba 1c 39 d4 10 a3 74 af 5d dc 95 ea 5a e0 4b 65 b7 1e 7d 03 2f 85 a8 62 d9 86 86 66 37 75 0c Data Ascii: 15r!46ASq2a3QR"BT?,t\V\|JihD:$dF^@}>(o=uE!kN_W%_3B4uqt8AVOC?5i4-*u$de~.h/9t]ZKe}/bf7u
2024-07-04 20:55:17 UTC	538	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 c8 c7 41 ba 9d cc d7 13 cd 99 87 aa b8 3b f1 f2 31 d0 6e a7 73 35 c4 f3 66 61 ea ae 00 a2 1a fa e5 f0 4b e8 18 8c 97 d7 2f 82 5f 40 c4 07 6a a1 bd b9 a9 3f 8e a1 3d 32 05 f4 4b 99 8a 17 d0 be dc f4 97 c7 50 9e 9d 02 fa 09 e5 f2 9f d2 03 90 00 01 f3 73 aa 7e 41 00 37 83 ba be e5 79 cd 1b e9 94 27 f9 ce 42 00 ef 17 75 8d cb f3 9a 37 d3 28 57 b8 b3 9a d3 ef 5f 7c 15 eb 6a fb 1f 77 9b 81 75 8b ca 01 df 21 50 cb d4 d5 91 fd 29 da d3 7f 70 dd af f3 7d 8f a0 7b 70 f1 0d 37 f7 0d 5b 0f 88 18 fe 28 f6 f1 a4 ec 7c d2 9e cc 37 3e 77 5e 9a ce be dc db e2 00 00 ee bc 90 00 00 00 00 00 00 00 70 7c 84 72 6d 03 fd c0 b5 ff 00 bf 23 7d 1b 62 46 cf 90 8e 4d a0 7f b8 16 bf Data Ascii: A;1ns5faK/_@j?=2KPs~A7y'Bu7(W_\|jwu!P)p}{p7[(\|7>w^p\|rm#}bFM
2024-07-04 20:55:17 UTC	4096	IN	Data Raw: 3b 1f 34 a7 b3 0d cf 9d d7 a6 b3 af b7 36 f8 80 38 51 e1 23 0c f0 32 1d d7 92 c8 d6 92 3e 26 1b e8 f0 88 b5 d5 a5 da b9 94 6e ae 9c 93 52 b5 bc d2 45 29 4c 92 15 d2 85 83 75 29 6f 79 4a 74 94 ae 29 3e 27 ba 9f c8 35 9f f6 42 de ff 00 c2 84 f8 bf e9 08 fd 01 0a b5 62 4b 25 96 d1 35 19 a5 8c 63 2c 72 5b 97 6f 07 b7 b5 e9 61 a7 6b a5 52 48 4b 3c 33 86 71 8e 7b 93 c2 6b 49 97 05 60 33 92 e0 79 10 3d fb 21 6f 87 e1 46 7c 7f f3 ed fe 80 92 6d 1c 56 95 55 6f a7 09 d4 ca ad 9f 45 d4 53 06 a7 ee b2 d3 f1 aa 23 5a 1b 26 9a 32 47 02 2e 04 6a 33 f9 47 66 ef bf ac f7 85 7f ca a7 2c 73 d2 f3 af dc 13 79 5c 16 1f e2 ed 13 cb 19 73 84 39 33 cf 97 c1 b7 c0 31 2c e4 86 42 58 ad 1c 1f 21 1c 9b 40 4b fd a0 b5 c7 9f fe d7 1d e8 db 12 36 7c 84 72 6d 03 fd c0 b5 ff 00 bf 23 7d Data Ascii: ;468Q#2>&nRE)Lu)oyJt)>'5BbK%5c,r[oakRHK<3q{kI`3y=!oF\|mVUoES#Z&2G.j3Gf,sy\s931,BX!@K6\|rm#}
2024-07-04 20:55:17 UTC	5930	IN	Data Raw: 03 34 62 e4 94 f5 5b 30 96 4b ce 2e 9f 71 c7 ba 16 22 16 db 7b ea 27 cb 79 5b a9 e2 78 fa 45 94 8f aa 29 09 aa ef 74 d7 50 5f 8c 49 c7 ae b8 03 75 cb 6c 3e ae 4d 44 47 0f 41 e3 cd b7 7f 5e 2c 13 a3 9b b1 55 5f 1d 9c 36 ca e9 d6 c5 04 55 3c fe 16 21 d8 ef a9 d0 c6 c4 3e 5b 8b 79 a2 dd 41 a9 5b be c5 09 cf 1e 27 91 4a 14 fd b1 3e 51 71 2d 9a de e2 6d 8a f8 be 33 f9 42 20 06 f4 00 00 01 f2 31 a7 fa f9 f7 1d 35 07 e6 9b de 91 b1 b8 03 c7 ef ed ab 2b dd a3 9b 85 6a 0e 75 f5 ba 55 3c a5 50 3f 54 bb 17 b2 3b 1b 2a 23 df e8 f7 93 bd d5 e5 92 01 46 75 2b 2b 57 02 e7 e0 21 eb 36 04 cc f5 d5 65 f8 17 f8 77 28 ef 7f cb 9a 13 58 7b 0f 61 14 b5 19 ea 2d de 7f e4 61 7f 4b 1d aa 83 d8 c9 0d 43 df 0a 32 b3 4d ff 00 76 60 72 19 ec 1c d3 b1 4e 91 26 c9 fe c7 7d 0e ee 6f 76 Data Ascii: 4b[0K.q"{'y[xE)tP_Iul>MDGA^,U_6U<!>[yA['J>Qq-m3B 15+juU<P?T;*#Fu++W!6ew(X{a-aKC2Mv`rN&}ov
2024-07-04 20:55:17 UTC	7116	IN	Data Raw: ad 8a 66 ed df 3a 19 6f 9a e0 a2 a4 f0 33 76 da 35 75 5c 65 e5 b0 a5 11 78 d2 f2 08 cf c4 42 14 0a 85 ad 89 45 fe e4 67 7f 9a 5f fd 11 30 9b 19 29 e9 f4 9b 68 05 cb 76 6f 23 8f 95 36 e5 be 71 28 5c 5c 13 8d 12 8f b3 e1 4f 04 6a 49 16 7b f8 20 16 4c 00 00 00 00 01 c1 f5 45 21 35 5d ee 9a ea 0b f1 89 38 f5 d7 05 de cf aa 29 09 aa ef 74 d7 50 5f 8c 49 c7 ae b8 03 c0 53 f6 c4 f9 45 c4 76 6b a8 bb 49 b6 28 b3 c7 ea 7c 67 f2 84 40 a7 69 1e 14 46 36 16 90 d5 6e a3 ed fd b6 95 d2 14 4d ea ab a9 6a 5e 5c 85 22 02 59 2e 9b ad 98 78 74 a9 6a 59 92 52 5c 0b 2a 52 8c fc 66 60 2e e9 bc 5e 12 fc a3 9c 97 84 bf 28 a5 77 ec e0 d5 d7 fe b1 55 df e7 f7 47 1f b3 83 57 5f fa c5 57 7f 9f dd 01 75 2c 97 84 78 2e aa 3d cd 1b ff 00 f8 bd 9c 7a 93 a2 00 b6 77 6a 8b 51 37 27 6b 85 Data Ascii: f:o3v5u\exBEg_0)hvo#6q(\\OjI{ LE!5]8)tP_ISEvkI(\|g@iF6nMj^\"Y.xtjYR\*Rf`.^(wUGW_Wu,x.=zwjQ7'k
2024-07-04 20:55:17 UTC	3043	IN	Data Raw: c3 87 9e 03 f1 f4 45 23 bb 74 86 cd eb 7b 43 de ba 69 da 66 b7 a6 61 d7 29 36 5e 8f 62 28 df 84 69 58 86 70 96 d2 d6 58 26 8d 08 c1 9e 48 db 30 1b 66 a2 cb 66 47 c8 c6 a1 6a 0f 43 ba 76 d4 b4 ef ea f5 c3 a4 16 c5 5e 4d 13 3f 5c 72 38 b3 82 8e 5a 12 5b a9 27 14 44 68 78 93 c0 8b a4 4a 8c 88 88 8b 96 06 de a8 b2 81 0c 72 28 ed a8 5a 67 9e 4c 29 96 ad ec 97 53 56 dd 31 af 7d 47 88 6e 70 4b 8d 84 60 dc 52 90 d9 3c b5 b6 f9 11 24 c8 88 9c 6d c2 4e 08 92 ac 10 0d 7f d4 2e 94 ee b6 cf 1b 6b 0d 7f 74 e1 7e ea 37 29 29 64 de 1d 99 bd 37 3a 59 1a 09 0f 2c 9b 6c dc 42 0f a0 89 6c d6 69 42 92 a6 d2 a2 25 11 91 e4 8c ca 73 ac bd c1 4d d6 d2 75 b6 b9 45 06 52 e5 54 f4 dc 1c d5 c8 42 c9 93 0b 79 94 ad 6d 91 99 f1 22 51 99 11 f3 32 2c 98 89 3b 8d 44 6b db 5e 4a 91 db 4b Data Ascii: E#t{Cifa)6^b(iXpX&H0ffGjCv^M?\r8Z['DhxJr(ZgL)SV1}GnpK`R<$mN.kt~7))d7:Y,lBliB%sMuERTBym"Q2,;Dk^JK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49765	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	741	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjIvNTQvZmVkN2YwY2EtNWM1ZC00N2E5LWIyMWMtNjExZjU5ODJkMjQ3L2lkeC1pY29uMi5wbmciXV0/idx-icon2.png?sha=16346d852e6f1d45 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 2618 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4415143 X-Request-Id: 375b8854-57b6-4b01-a915-fb215401e911 Content-Disposition: filename="idx-icon2.png" X-Content-Digest: 24fbf78830db3476c75f04a4bfbbda764c172d83 ETag: "33678524a1c3fcb2e4c47b4014060099a51f20af" X-Runtime: 0.253036 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	2618	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 c4 50 4c 54 45 ff ff ff de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de Data Ascii: PNGIHDR<<")@gAMAa cHRMz&u0`:pQ<PLTEa<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49764	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:17 UTC	540	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTUvMjAvMjUvMzgvZGYwOTM1Y2EtYTYzNC00OWU3LWExZmQtMmU0YzhkZmU3MjY1L1BhcmVudGluZyBcdTAwMjYgRmFtaWx5LnBuZyJdXQ/Parenting%20%26%20Family.png?sha=3338acc4386c5eb9 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	582	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 55890 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4321526 X-Request-Id: 3d099c5e-ca32-4877-a49e-7f6790080f56 Content-Disposition: filename="Parenting & Family.png" X-Content-Digest: d297cab551cd9f40748594a5f8666936d9359ec5 ETag: "b551cd9b3ffc344c71ca7d2ee3d1ec7513cd0140" X-Runtime: 0.408798 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	15802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 06 00 00 00 ec 10 6c 8f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 80 00 49 44 41 54 78 da ec dd 77 98 54 d5 fd c7 f1 cf ce 4e db 9d ed 8d 26 08 0a 08 0a 08 36 c0 de 7b 8d b1 25 b6 58 a2 46 63 89 51 a3 31 d1 24 c6 9a 58 f2 33 f6 a8 31 31 96 c4 a8 49 8c d8 7b 41 25 2a a2 08 82 05 a9 5b d9 72 77 77 ee dc 9d fd fd 31 6b 07 81 dd 39 73 66 ee bc 5f cf c3 b3 c4 3c 7b ce e7 5c 96 cb bd df 39 45 02 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR88lgAMAa cHRMz&u0`:pQ<bKGDpHYs+IDATxwTN&6{%XFcQ1$X311I{A%*[rww1k9sf_<{\9E
2024-07-04 20:55:18 UTC	16379	IN	Data Raw: 22 85 d7 db c0 e4 25 41 3f 45 c6 98 f9 b7 33 41 81 03 18 88 a3 3d d7 e1 c3 f4 7e a0 c0 d1 3f fb 48 62 ab 7b a0 9f bc 65 8b 8c b4 1b 19 3d d1 f6 d0 b0 1a 26 3e b9 35 35 83 a3 a7 b5 59 ed cf fe cb e8 f5 a8 3a e2 c7 bc ec f9 58 d9 5e 47 28 3a 6e 8a d1 3e ba de 99 69 64 b6 85 67 68 86 5d 74 bc d9 eb 81 fe 8b 9a 9a 65 67 78 19 21 e0 73 a3 24 71 ec 54 3f 50 e0 e8 9f 63 6d 07 00 72 99 a9 bd 13 38 85 22 7b 99 f8 b3 31 f5 49 73 db a3 66 97 a6 a4 f6 dd d8 d7 68 1f b0 af e6 84 f3 8d ef c7 d1 fa 9f bf a6 bd 4d 53 7f af a2 dc 9f b3 96 a9 7f 3b bd a6 15 19 39 ed 0a f0 b1 93 6d 07 c8 45 14 38 d6 91 e7 3a 35 92 f6 b6 9d 03 c8 55 a6 1e 9e 0b 2b 6b 99 ee 9f c5 8c ad f1 6e 58 96 d6 f6 7a 56 36 1a 9d bd 51 58 56 a9 ea 63 cf 31 d6 3e b2 47 a0 a4 5c 35 27 5c 60 b4 8f ae d9 af Data Ascii: "%A?E3A=~?Hb{e=&>55Y:X^G(:n>idgh]tegx!s$qT?Pcmr8"{1IsfhMS;9mE8:5U+knXzV6QXVc1>G\5'\`
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: d3 c7 5d e5 7a 81 23 a7 2f 3e 90 2b 92 4e 9b 1a 6e b8 28 e3 fd 96 ef f3 7d d5 9e fa 6b 15 44 a2 b6 2f 01 32 a4 e2 c0 e3 54 73 c2 f9 19 ed b3 e9 cf bf 53 fc c3 b9 b6 87 0e f4 5b 6f 22 75 1c 6c b2 bd 35 e3 7d 97 6c b3 a7 06 ff fc 8f 2a ac a8 b1 7d 19 60 58 41 28 ac 9a 13 7f ae 8a 83 8e cf 68 bf 49 a7 4d 0d 37 fd ca f6 f0 01 e4 08 0a 1c 00 d6 a8 e1 a6 5f 67 fc d3 93 9a 13 7f ae f2 fd 8e b6 3d 74 58 50 bc c5 8e 1a f4 93 ab 14 88 16 65 ac cf 86 1b 2f 52 4f 6b b3 ed a1 03 fd d2 78 eb 65 4a 2c f9 28 e3 fd 56 1c 70 ac aa 8e 3a cb f6 f0 91 61 65 7b 1c 9a fa f0 21 9c b9 c7 70 f7 e3 f9 6a be e7 7a db 43 07 f2 45 4e bf 63 e7 7a 81 03 80 61 2b 1f be 53 f1 0f de c9 58 7f 81 58 99 06 ff ec ff ac 4c 83 45 f6 88 8c 9d a4 41 e7 5e a7 c2 b2 ca 8c f4 97 6c 6f e5 13 42 e4 a4 Data Ascii: ]z#/>+Nn(}kD/2TsS[o"ul5}l*}`XA(hIM7_g=tXPe/ROkxeJ,(Vp:ae{!pjzCENcza+SXXLEA^loB
2024-07-04 20:55:18 UTC	7325	IN	Data Raw: 30 f0 1f 95 b4 87 75 0e 00 00 00 00 48 38 1e 0b 9b 31 ac e0 c8 9e f3 ac 03 00 00 00 00 40 c2 f5 4a fa 8a 75 08 44 8b 82 23 63 1c d7 7b 4c d2 e5 d6 39 00 00 00 00 20 c1 ae e4 b1 b0 d9 c3 16 95 0c 0a 03 bf 4e d2 73 92 26 58 67 01 00 00 00 80 84 59 2c e9 03 8e eb b5 5b 07 41 b4 58 c1 91 41 c5 bf a8 5f b4 ce 01 00 00 00 00 09 f4 05 ca 8d 6c 62 05 47 86 85 81 3f 5d d2 b1 d6 39 00 00 00 00 20 21 fe e2 b8 de 71 d6 21 10 0f 0a 8e 0c 0b 03 7f 82 0a 5b 55 ea ac b3 00 00 00 00 80 b1 76 15 b6 a6 2c b6 0e 82 78 b0 45 25 c3 1c d7 5b 24 e9 3b d6 39 00 00 00 00 20 01 be 43 b9 91 6d ac e0 c8 b8 30 f0 2b 24 cd 94 34 cd 3a 0b 00 00 00 00 18 99 2d 69 57 c7 f5 7a ad 83 20 3e ac e0 c8 b8 e2 5f e0 cf aa f0 9c 67 00 00 00 00 c8 9b 40 d2 a7 28 37 b2 8f 82 23 07 1c d7 7b 42 d2 8f Data Ascii: 0uH81@JuD#c{L9 Ns&XgY,[AXA_lbG?]9 !q![Uv,xE%[$;9 Cm0+$4:-iWz >_g@(7#{B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49773	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	1243	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjkvMjAvMDMvMzYvZmY1ZjVhNDgtZTlhNi00YmFmLWEzYzctYzBlMzlkNjQ1YzU4L0xpdmV3aXNlIEJhbm5lci5qcGciXSxbInAiLCJ0b193ZWJwIl0sWyJwIiwidGh1bWIiLCIxNjAweFx1MDAzZSJdXQ?sha=70838abb427ebf2a HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac
2024-07-04 20:55:18 UTC	628	IN	HTTP/1.1 200 OK Age: 2001719 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Livewise Banner.jpg" Content-Length: 161094 Content-Type: image/jpeg Date: Tue, 11 Jun 2024 16:53:19 GMT Etag: "1572137a9385bb7393d87b5a53843b7ee4cd91a1" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 77ee1181b34e32f6761f8e13aaeb154e3215738b X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: e3c6a6c9-6c13-4a3e-890a-8358bd8f4e6d X-Runtime: 0.541086 Connection: close
2024-07-04 20:55:18 UTC	558	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 56 00 00 00 00 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 33 31 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 03 00 01 00 00 00 80 07 00 00 03 a0 03 00 01 00 00 00 f4 01 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 00 ff e1 05 15 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 Data Ascii: JFIF``ExifII*(iV02310100``http://ns.adobe.com/xap/1.0/<x:xmpmeta x
2024-07-04 20:55:18 UTC	2372	IN	Data Raw: 6e 6e 65 72 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 41 74 74 72 69 62 3d 27 68 74 74 70 3a 2f 2f 6e 73 2e 61 74 74 72 69 62 75 74 69 6f 6e 2e 63 6f 6d 2f 61 64 73 2f 31 2e 30 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 41 74 74 72 69 62 3a 41 64 73 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 53 65 71 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 27 52 65 73 6f 75 72 63 Data Ascii: nner</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> <rdf:Description rdf:about='' xmlns:Attrib='http://ns.attribution.com/ads/1.0/'> <Attrib:Ads> <rdf:Seq> <rdf:li rdf:parseType='Resourc
2024-07-04 20:55:18 UTC	538	IN	Data Raw: 21 98 33 7d 45 0e 0e 28 06 c6 0d 0d 52 5d 8c 0a d9 c8 35 dd 70 d1 e1 42 bb a2 08 ca ca ca ca 42 32 b2 b2 b2 90 8c ac cd 6e b9 2e 80 79 c9 c7 50 29 b2 84 6c 73 5c 91 93 8a 05 73 9a 4a b6 97 10 9f 62 79 14 55 eb d4 46 5d ee 4b ed 77 80 e0 85 28 02 2a 2d a1 07 55 84 f5 15 d2 76 91 d3 34 48 dd 22 95 2d 05 d4 ee 18 1c e4 0c fb 1a 0e 45 d9 88 d8 09 75 27 39 23 9a 6d c2 14 54 94 ed 38 14 18 eb 44 bf 6b 36 9c 05 38 9e 9c 90 78 cd 08 99 ad 29 5b 7b d4 95 7a 54 f2 84 0a f9 c5 06 6b 6f 12 a1 eb cd 73 4b 22 32 b0 9c 56 eb 85 f0 69 c4 69 47 22 b9 ad 93 9a d5 21 19 59 59 59 48 46 56 56 56 0e b4 84 70 e2 8a 78 1e 74 17 e7 9a 11 ef ae 83 a4 23 2b 2b 2b 29 08 ca ca ca ca 42 32 97 f4 5f fc ee bf fa a3 fe 14 81 4b fa 2f fe 77 5f fd 51 ff 00 0a 42 1f 66 a0 e8 b7 78 f2 a5 c9 Data Ascii: !3}E(R]5pBB2n.yP)ls\sJbyUF]Kw(*-Uv4H"-Eu'9#mT8Dk68x)[{zTkosK"2ViiG"!YYYHFVVVpxt#+++)B2_K/w_QBfx
2024-07-04 20:55:18 UTC	4096	IN	Data Raw: 48 41 96 fa 8f b5 08 50 08 e7 9a 0d 0b e4 70 28 60 e7 96 05 33 10 09 6c 72 31 40 96 c2 01 a3 a4 e4 d1 67 ba 9f bd 48 60 14 a0 51 80 9e 00 a0 b6 f8 73 42 a0 6e 03 3d 29 08 d2 91 c5 04 af 05 19 d8 00 cd 04 f1 e3 18 e2 90 84 c4 39 97 94 70 9c 1f 51 47 a3 2f 76 09 db 8f b5 14 4a 12 db c7 8c e6 84 68 90 a5 27 ca 90 cc 53 68 a4 f0 31 f9 8a c7 17 b4 f3 8c 7d a8 80 dc 93 d7 8a 30 09 52 79 a4 30 2f 7c d2 d0 ae 80 e2 8b 46 da 50 a3 b4 72 6b 85 a3 21 5c 91 8f 4a 11 a6 c0 65 27 38 a4 23 a5 44 4b 9f 84 66 b8 30 92 3f 0f 34 71 07 02 ba dd c6 7a 7d a9 08 2a cc 64 82 38 34 60 b0 9f 40 6b bc e7 cc 9f bd 68 9c 52 10 1a 9b 48 c7 02 82 90 c2 31 5d b8 ae 73 e5 41 a8 ef c6 4d 21 05 1c 65 20 1e 28 3f 95 41 03 20 fe b4 6d d4 e1 95 0c 66 83 47 89 23 ca 90 80 44 66 d2 3e 9c fd cd Data Ascii: HAPp(`3lr1@gH`QsBn=)9pQG/vJh'Sh1}0Ry0/\|FPrk!\Je'8#DKf0?4qz}*d84`@khRH1]sAM!e (?A mfG#Df>
2024-07-04 20:55:18 UTC	5930	IN	Data Raw: 8f 5e d0 b4 4b a9 8f 73 78 6a 08 58 ee c4 69 e0 85 00 9e 77 05 0f 32 3d 6a f6 76 21 f1 51 a3 bb 6c 81 11 11 65 b3 6e bf 3c de 55 6d 79 c0 30 af ee 93 d7 ed 5e 2c c1 94 59 61 e2 a5 b8 15 b3 c3 e2 c6 29 4f 4e ea 49 36 2b 9c 49 50 a4 3f 15 f6 94 1e 42 d0 b3 bc 28 1f ad 35 35 20 72 81 ef c3 a8 2d 9f c4 9f 65 26 b5 55 07 e1 73 e3 82 d3 ad 6d b0 f4 de ba 9e 63 6a 55 af bb 8b 35 40 25 89 09 c7 09 24 fe 3f bf 15 6f 9b 48 53 61 43 0a 6c 8c 85 85 64 62 ac 27 c0 26 b0 65 66 6b a2 9d a7 15 9b 69 88 e4 0d 74 18 f3 a1 ca 46 28 35 23 1c d3 0e 00 af a8 d6 57 44 03 e7 59 b4 52 19 9c 1e 94 19 4e 68 72 91 8a e0 8c 0a 44 40 0a 7c 55 c2 d2 7d 68 c6 28 25 0a 43 85 56 93 5c 29 3d 68 75 a7 14 1a a9 08 37 a6 c7 ff 00 59 2d 7f f6 94 7f 3a 9c 53 d7 f3 a8 4b 4d 7f eb 15 af fe d2 8f Data Ascii: ^KsxjXiw2=jv!Qlen<Umy0^,Ya)ONI6+IP?B(55 r-e&UsmcjU5@%$?oHSaCldb'&efkitF(5#WDYRNhrD@\|U}h(%CV\)=hu7Y-:SKM
2024-07-04 20:55:18 UTC	7116	IN	Data Raw: f0 ed ab 35 0b 91 d4 20 98 e5 49 04 27 39 38 3e 66 ac c7 65 5f 0a 31 ec b6 f0 f5 d1 a3 3a 5f 07 72 d3 c2 7d aa b5 ba c8 56 b0 b9 65 da 7c 7d 93 79 7c 14 a2 ed 68 9c b5 a5 06 1a d2 84 a7 ae c3 95 52 79 81 39 94 a5 a5 34 b6 d0 ae 70 47 a5 7a 1d 7a ec 5a 22 65 11 dc 86 db c6 36 80 38 a6 85 f7 b1 18 8e 36 54 de d2 81 9c 6e 48 e0 d5 25 e4 e0 de 1a 35 9f 88 f6 e7 25 1e 48 31 9e 51 52 13 b8 f1 c8 fa 68 a3 88 2e 1d a9 1e 2f 5a 9f 35 97 62 52 e3 bc e7 70 db 6b c9 dd c0 c5 45 97 1d 1b 2a 22 9d f0 2c 28 70 07 95 5e af 55 5d 8b 86 65 59 a1 b6 1f 43 40 c7 5a 16 52 52 ad e3 91 c7 95 76 eb c1 5b 36 8d 83 1c a7 d6 8f 4d 8e fb 58 0e 6f dc 06 dc ab ad 27 2d 38 50 24 79 d5 a8 c9 4b a3 3e 51 94 5e 1a 34 94 a9 f5 e7 38 cf 1f 6a d7 72 a4 af 1b f2 3f 5a e7 bc 53 64 ed 38 cd 66 Data Ascii: 5 I'98>fe_1:_r}Ve\|}y\|hRy94pGzzZ"e686TnH%5%H1QRh./Z5bRpkE*",(p^U]eYC@ZRRv[6MXo'-8P$yK>Q^48jr?ZSd8f
2024-07-04 20:55:18 UTC	8302	IN	Data Raw: 27 ad be 16 e3 e8 74 cf 4f 6d 77 94 4d 48 29 56 4e 38 cd 29 07 d6 b0 3d 2a 1b ec 7b 50 3d 7c b5 47 90 b5 1e 52 0f de a6 16 ce d6 f9 ae a3 4f 37 38 6e 63 83 6e 51 f4 ad 28 ed 19 3d 2b 9d e2 81 92 b3 dc 1c 1e 95 60 59 08 5d 2f a8 b7 b6 a5 b8 b4 84 8a 47 85 ae 62 4a 38 4b 83 d8 d4 69 db 56 a9 72 c3 6c 75 60 84 82 33 92 6a b2 d9 3b 70 7d a9 8a 05 7e 10 ac 0f 15 60 ea 75 b2 ae 7b 50 b2 7a 01 06 fa dc a5 01 bc 12 69 59 a7 92 b4 8c 71 55 c3 b2 9d 74 e6 a5 6d 2a c8 27 ef 56 02 d6 e1 5b 48 27 8c 8a d1 d3 5a ed 5b 98 85 40 73 5d 85 00 07 9d 04 95 0c 57 5b aa f2 10 2a 4e 45 6e b8 42 c6 2b a0 42 ba 54 84 6e b4 33 8c 79 92 07 35 be b4 9d a8 f5 14 1d 21 63 9b 79 ba 49 44 1b 74 26 cb af 48 7b 21 28 03 a7 3e a7 8c 54 5c 94 56 59 28 ad cf 02 4c 28 6a 76 f5 75 b8 3a 3c 6f Data Ascii: 'tOmwMH)VN8)={P=\|GRO78ncnQ(=+`Y]/GbJ8KiVrlu`3j;p}~`u{PziYqUtm'V[H'Z[@s]W[*NEnB+BTn3y5!cyIDt&H{!(>T\VY(L(jvu:<o
2024-07-04 20:55:18 UTC	7366	IN	Data Raw: 7c 83 77 78 ac 90 06 e4 05 1c 55 88 ed 4e f1 0a 16 f5 2f c1 c7 5e 95 15 69 0b ca f5 0e a5 62 0d b9 09 71 c7 14 52 a7 16 3a 0c f9 55 6e 63 34 93 34 e1 05 38 6e 68 74 76 53 d9 24 4d 0d 18 2d 0a 4b f2 57 85 38 f2 d2 01 38 a2 df 10 57 85 a3 4d 38 02 b2 36 90 79 a9 5e 1e 9f bd 37 70 2c 5c 0c 56 22 25 1c 60 e0 8a 8b bb 6f b0 a1 fb 5b ec e5 2f f8 08 56 d5 03 f9 f1 47 b1 c9 ac 22 15 ad d6 75 d1 e7 e5 c5 a5 bf 39 c0 e0 51 6d 4b f0 ec fc 3c d3 d2 cb 62 b5 b7 a5 24 d9 17 2d f8 7f 34 a0 e2 a5 29 94 29 6a c6 78 2a eb d2 91 35 35 99 fb 35 cd 65 2d a9 71 94 a3 e5 9e 69 ed a4 63 31 76 80 da b2 5c 46 71 e0 03 93 e8 7d 2a c7 ab b2 20 5d 2a c6 e3 62 22 89 bd 91 fe c8 81 2d 10 ae b1 1d 2a 70 38 87 02 70 b0 00 e9 91 e5 5c 59 ae 32 d8 88 ab 64 fd aa c7 85 2a 1c 82 3f 3a b1 8c Data Ascii: \|wxUN/^ibqR:Unc448nhtvS$M-KW88WM86y^7p,\V"%`o[/VG"u9QmK<b$-4))jx555e-qic1v\Fq} ]b"-p8p\Y2d*?:
2024-07-04 20:55:18 UTC	10674	IN	Data Raw: 99 b7 7b c3 70 da 93 2e 43 9d cc 48 cd 95 15 f9 67 14 3a ee 05 b6 d4 b7 09 2d 91 8e 2a 0b ed 6f b4 17 5c 9c ce 97 b7 28 05 4d fd da dc dd 94 80 54 00 18 f5 eb fa d1 b4 f4 3b a7 85 fd 95 f5 57 c2 98 66 44 c5 d9 74 e9 3a 93 49 4d 68 ce 36 e8 d7 37 56 64 06 18 fd f3 a3 a0 1d e7 e0 49 15 66 bb 07 ec 81 5a 5e 2a 2e b3 90 96 14 94 29 b8 10 90 78 8e 83 f5 38 ac fe 35 0f e1 f7 aa 63 67 bf 3f d9 a5 c6 c1 69 0e 3c dc 19 69 5b 82 43 a3 72 1c 5a 54 12 a4 a7 d3 1c 71 ef 56 e7 b3 ae d1 a7 7c bb 49 0b 4c 96 ca 77 6e 4a b2 54 3f 3f 4e 38 3e b5 dc e9 7f c7 a6 a1 fa a9 63 9e 8e 03 5d fe 47 07 27 a5 86 78 ec 9e 3e 58 20 92 06 33 cd 66 d3 b7 a5 22 5a 75 43 57 16 52 42 90 a0 47 00 1c 11 f9 79 52 a7 cf 02 4e 32 40 1e 5c d4 2c d3 d9 57 cd 14 21 74 2c 59 8b 31 f6 c8 00 79 f9 57 Data Ascii: {p.CHg:-o\(MT;WfDt:IMh67VdIfZ^.)x85cg?i<i[CrZTqV\|ILwnJT??N8>c]G'x>X 3f"ZuCWRBGyRN2@\,W!t,Y1yW
2024-07-04 20:55:18 UTC	11860	IN	Data Raw: 07 ce a3 3b 06 ae 62 6b 68 52 57 e1 3c 71 4f 18 77 64 2f cc 56 cc 39 46 54 96 18 ec 69 63 27 9c d0 85 58 f2 a4 36 27 03 f4 9e 7d e8 f2 66 2b 68 39 02 89 86 0d bc 07 77 fb 1a d1 5e 68 a0 98 55 f8 85 75 f3 07 d6 a5 b5 8b 72 0c 83 eb 59 b8 50 1d fe 46 4f 26 b4 5e 18 e4 d3 2e f2 c6 72 fb 0c f5 4e 41 e9 55 96 f0 ea 65 de ae 2e 1f 1a 1d 7d c3 f9 64 e2 ac 4d ca e4 88 16 c9 32 14 70 19 6d 4b 27 19 07 8e 05 56 b4 1d db 97 c8 0b f1 60 fb f3 58 3e 4e 6b 18 47 43 e2 a3 2e 65 21 22 df 3f fc 9a bb 24 49 1f e6 6b 39 0a e7 8a 91 ae 53 e0 4e 80 95 b5 b5 61 c6 c6 15 e4 7f 3a 66 3b 05 17 05 6c 5e 4a 52 33 8f 6a 6d df 21 5d 74 ec 15 ae d8 b2 fc 7c e5 4c ac fd 3f 6a c5 8d fb 63 b7 07 42 ea 53 96 72 22 6b a4 c6 f9 c7 92 de c2 39 ea 32 33 e9 50 c6 a3 8a dc 64 b8 e3 58 04 d2 e6 Data Ascii: ;bkhRW<qOwd/V9FTic'X6'}f+h9w^hUurYPFO&^.rNAUe.}dM2pmK'V`X>NkGC.e!"?$Ik9SNa:f;l^JR3jm!]t\|L?jcBSr"k923PdX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	522	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDcvMjIvYTNkYzhhODQtODZkOC00ZmRkLWEyMzItYWUyYTQ5MTgwOTNjL0NoaWxkIGJlaGF2aW91ci5wbmciXV0/Child%20behaviour.png?sha=56fe014ed47e4e25 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	579	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 57025 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4319193 X-Request-Id: e6efb570-75d4-4f65-a5f8-c5a46cbaa537 Content-Disposition: filename="Child behaviour.png" X-Content-Digest: 8846de2d00337df3326b7c5681621cca502d0d8a ETag: "49a0e00cbd7f3125f7f8824b2b5e20e0aea0f132" X-Runtime: 0.362966 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	3574	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 06 00 00 00 ec 10 6c 8f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 80 00 49 44 41 54 78 da ec dd 77 98 54 e5 f9 c6 f1 7b 67 67 67 66 77 b6 b3 2c 55 9a 08 a2 58 b0 f7 5e 63 c3 18 5b 62 2f d1 44 13 35 d1 5f 4c d5 c4 d8 a3 31 c5 de 5b ec b1 f7 86 b1 60 af a8 20 20 08 48 5b d8 7e 76 67 ce 9c 9d fd fd b1 1b 63 a1 2c 70 ce 3c 53 be 9f eb e2 c2 fa 9c fb 99 85 65 ce 33 ef 79 5f 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR88lgAMAa cHRMz&u0`:pQ<bKGDpHYs+IDATxwT{gggfw,UX^c[b/D5_L1[` H[~vgc,p<Se3y_
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: c3 04 49 1f 78 ae 73 8c 75 10 00 99 c1 0a 0e 20 cf 79 ae 53 2f e9 06 49 fb 59 67 01 00 00 30 f2 a8 a4 13 c2 91 f8 62 eb 20 00 82 c3 80 03 c8 63 9e eb ec a7 9e e1 46 bd 75 16 00 00 00 63 8b d5 33 e4 78 d4 3a 08 80 60 30 e0 00 f2 90 e7 3a e5 92 2e 97 74 a2 75 16 00 00 80 2c 73 9d a4 d3 c2 91 78 c2 3a 08 00 7f 31 e0 00 f2 8c e7 3a eb 48 7a 40 d2 06 d6 59 00 00 00 b2 d4 47 92 0e 0a 47 e2 d3 ad 83 00 f0 0f 9b 8c 02 79 c4 73 9d 1f 48 7a 47 0c 37 00 00 00 56 64 03 49 ef f4 be 77 02 90 27 58 c1 01 e4 01 cf 75 8a 25 5d 26 e9 34 eb 2c 00 00 00 39 e6 0a 49 67 86 23 f1 2e eb 20 00 d6 0c 03 0e 20 c7 79 ae 33 50 d2 dd 92 76 b4 ce 02 00 00 90 a3 5e 92 74 58 38 12 5f 68 1d 04 c0 ea 63 c0 01 e4 30 cf 75 76 54 cf 70 63 a0 75 16 00 00 80 1c b7 50 d2 01 e1 48 fc 4d eb 20 00 Data Ascii: Ixsu yS/IYg0b cFuc3x:`0:.tu,sx:1:Hz@YGGysHzG7VdIw'Xu%]&4,9Ig#. y3Pv^tX8_hc0uvTpcuPHM
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: 83 8a 2b aa ad e3 64 8d f8 d6 7b 28 14 af f0 bd ae 3b 77 86 12 1f b3 8a 03 b0 d0 f2 d8 ed 81 d4 2d df f9 00 eb d6 80 42 54 b0 f7 ba 0c 38 00 00 cb 54 5c 55 ab ba e3 cf d6 80 b3 2e 57 c9 e0 11 d6 71 32 2e be c5 2e 1a 74 ee 0d 6c 8c b7 1c 15 01 3d 53 df fc 10 ab 38 80 4c 6b 9b f4 88 ba 5a 9b 7c af 1b 59 6b 6d 45 47 8e b3 6e 0f 28 44 05 7b af 5b 90 03 0e cf 75 46 48 2a cc dd e1 00 60 15 45 d7 5e 5f 83 fe 70 ad 6a 0e f9 49 41 6c 42 5a b6 e9 0e 1a 74 ce f5 ea 77 dc af 02 59 a5 90 2f ca 03 3a f2 d1 9d 3b 43 9d 53 de b2 6e 0f 28 28 ad 4f fc 2b 90 ba 15 bb 1c 68 dd 1a 50 a8 c6 f6 de f3 16 9c b0 75 00 23 3c 44 0d 00 ab a8 62 97 89 aa d8 65 a2 9c 37 9e 57 eb 93 77 2b b5 70 8e 75 24 5f 95 4d d8 56 55 fb 1e a9 92 21 23 ad a3 e4 84 e2 ca 1a c5 b7 d8 59 ce 9b 2f fa 5e Data Ascii: +d{(;w-BT8T\U.Wq2..tl=S8LkZ\|YkmEGn(D{[uFH*`E^_pjIAlBZtwY/:;CSn((O+hPu#<Dbe7Ww+pu$_MVU!#Y/^
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: bf f4 4d 95 6e bb 6b 5e c7 58 79 f7 cd 4a 2f fe e8 f6 b4 ce 57 9e 56 e3 55 67 07 b6 75 63 35 a7 7a d4 7a af bb cc b7 a6 3b ae ca fb d9 3d ab 95 ed f0 39 d5 4f bd 3e b0 c3 31 e3 a0 ea db 27 aa f6 d4 1f a9 a0 b8 24 ef 63 a5 17 bd a9 0f 2e 3e 45 9d af f5 ff ac 1a bf 8d 3c f6 dc c1 7d bd 19 a0 ca 2f 7d d3 f7 d7 ec 7e 7f 61 de 73 03 d8 20 56 70 18 0a f6 3b 28 00 6b d5 eb f3 f2 db 82 a2 60 6f b0 6e ba 7d 66 de 1f c8 6a 4e 98 a6 82 62 77 10 6f 46 a0 6f 05 fc 50 10 8e 0f 5a cd b1 e7 e6 bd 2c 6c fa e9 a5 ea eb ce fe ac 21 f5 c4 c3 5a 7a dd 34 f5 75 07 fb 7d 91 3b 76 73 d5 4d bd 5e f5 e7 5f a7 f2 9d f7 0a 74 ec 35 b5 fd fd 4f 6a 9c 75 a6 ef 5b f6 d6 3a e7 4d b6 d2 e8 1f fe c4 ec ac a2 a8 70 46 d6 a9 fe c2 9b 54 f9 e5 43 02 19 2f 35 ff 51 35 5c 3a 51 3d cd cb 4d e6 Data Ascii: Mnk^XyJ/WVUguc5zz;=9O>1'$c.>E<}/}~as Vp;(k`on}fjNbwoFoPZ,l!Zz4u};vsM^_t5Oju[:MpFTC/5Q5\:Q=M
2024-07-04 20:55:18 UTC	4299	IN	Data Raw: db b9 ef 35 01 0c 10 05 07 30 48 8e eb 65 24 1d 22 e9 06 eb 2c 00 00 00 88 bc 1b 24 1d 9d fb 1e 13 c0 20 70 4d 2c e0 83 4c 3a 75 9a a4 eb c4 df 29 00 00 00 0c 4c 9f a4 49 8e eb f1 43 33 60 88 78 18 03 7c 92 49 a7 0e 96 f4 0b 49 e5 d6 59 00 00 00 10 09 ed 92 be eb b8 de ef ad 83 00 71 40 c1 01 f8 28 93 4e ed 22 e9 2f 92 6a ac b3 00 00 00 20 d4 96 4b fa 9a e3 7a cf 58 07 01 e2 82 33 38 00 1f e5 be 40 8d 97 f4 8a 75 16 00 00 00 84 d6 2b 92 c6 53 6e 00 fe 62 05 07 90 07 99 74 6a b8 a4 fb 25 ed 65 9d 05 00 00 00 a1 f2 b8 a4 03 1d d7 6b b1 0e 02 c4 0d 2b 38 80 3c c8 7d c1 da 57 d2 cf ad b3 00 00 00 20 34 7e 2e 69 5f ca 0d 20 3f 28 38 80 3c 71 5c 2f ed b8 de d1 92 2e b1 ce 02 00 00 00 73 97 39 ae 77 b4 e3 7a 69 eb 20 40 5c b1 45 05 08 40 26 9d fa 9e a4 9f 4a 72 Data Ascii: 50He$",$ pM,L:u)LIC3`x\|IIYq@(N"/j KzX38@u+Snbtj%ek+8<}W 4~.i_ ?(8<q\/.s9wzi @\E@&Jr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49770	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	741	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjMvMjMvNTgwNjgxNGItMjExMy00YzlkLTk4NWUtOWM1NWUzZDk0Yjk0L2lkeC1pY29uMy5wbmciXV0/idx-icon3.png?sha=612460af434d2817 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 1982 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4414998 X-Request-Id: c71cebd5-c405-4051-ac4a-ee82ddd69b7c Content-Disposition: filename="idx-icon3.png" X-Content-Digest: 1bc0344bedd96442e2e46c03a8c90a659a05fe10 ETag: "650846f4944562c2b7ab0818d9498c2db79430da" X-Runtime: 0.247198 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	1982	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 55 50 4c 54 45 ff ff ff de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de Data Ascii: PNGIHDR<<")@gAMAa cHRMz&u0`:pQ<UPLTEa<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49768	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	504	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMDkvMTIvNDZhNmJhMWEtM2VjMy00ZTNkLTgwZGQtNjBjMzIyMWM4MzdiL05ld2NvbWVyLnBuZyJdXQ/Newcomer.png?sha=e0aec34076deb024 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 60121 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4318940 X-Request-Id: b8d140d9-a941-4367-ab00-61864277f4b7 Content-Disposition: filename="Newcomer.png" X-Content-Digest: 9fdca2d4a11b845906763b2db1a95e715e64234a ETag: "af6cafefd0e61b0ca8692ee3455ae1aecd678e10" X-Runtime: 0.361879 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	15812	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 06 00 00 00 ec 10 6c 8f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 80 00 49 44 41 54 78 da ec dd 77 78 1c c5 e1 c6 f1 57 a7 d3 9d a4 93 ac ee 6e e3 06 d8 06 0c 0e d5 f4 4e 08 24 40 08 a4 d1 42 0f 10 02 a1 fe e8 35 81 50 02 09 10 7a 27 24 a1 26 40 20 10 d3 c1 74 83 31 36 d8 18 1b db d8 56 b7 ca 4a 77 ab d5 e9 f7 87 64 aa 8b ca ec cd dd de f7 f3 3c 7e 00 5b 37 fb ce d9 c8 da 57 3b 33 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR88lgAMAa cHRMz&u0`:pQ<bKGDpHYs+IDATxwxWnN$@B5Pz'$&@ t16VJwd<~[7W;3
2024-07-04 20:55:18 UTC	52	IN	Data Raw: f7 48 e8 ea 70 15 9f f3 ae da de 7f 4d ed 1f cc 50 b2 ad d5 b7 39 e5 e4 45 54 bc fb 81 2a f9 c1 cf d9 8b a5 0f ba 3a 5c 2d 3d fd 20 75 25 e2 c6 c7 0e e5 17 Data Ascii: HpMP9ET*:\-= u%
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: 68 e8 f9 b7 64 fd 32 31 00 f0 01 cb 54 7a 81 82 a3 17 58 9e 02 f8 63 c5 ef 4f 94 bb f8 53 5f af 51 7e c8 29 2a da 7e 6f db 53 0d 9c 15 97 9f 28 77 89 bf bf 77 e9 2c 94 5f a8 dc 8a 21 0a 97 0f 56 b8 62 88 72 cb ab 14 2e 1f a2 dc b2 4a 85 8a 4a 94 5b 54 a2 50 ac d8 76 cc 94 49 b6 3b 6a 9f f5 86 da de 7d 45 f1 b9 ef a9 ab 23 b5 47 36 e7 0d 5f 4f 55 bf be 48 e1 aa e1 b6 df 8a 8c 60 ea a4 9d d5 a9 fa f5 45 2a d8 d4 bf 65 4e 00 90 c5 58 a6 d2 0b 14 1c eb c0 f2 14 c0 3f 9d 4d f5 5a 71 d9 09 ea 6c 59 e9 eb 75 86 9e 73 a3 22 a3 27 d8 9e 6e a0 78 d5 4b b5 fc b2 13 52 7e 23 9b 69 72 8b 4b 15 2a 1a d4 fd cf d8 a0 ee 27 43 56 fd 7b 51 89 72 07 75 ff 7b a6 2d 8f 71 97 7e 26 6f c5 62 79 b5 cb 15 ff e4 83 b4 d8 7c 36 94 5f a0 f2 23 ce 50 e1 66 db d9 8e 92 f6 6a fe 7c 8e Data Ascii: hd21TzXcOS_Q~)~oS(ww,_!Vbr.JJ[TPvI;j}E#G6_OUH`EeNX?MZqlYus"'nxKR~#irK*'CV{Qru{-q~&oby\|6_#Pfj\|
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: 46 bf 6f a2 e2 9f bc af 15 7f f8 8d 86 9c 76 b5 72 4b ca 57 fb 31 f9 86 4f 51 e9 4f 69 c0 66 9a e6 98 5e 72 94 ce 4a 7e f0 73 b5 bd 39 5d 5e 43 4d 4a af db 51 bd 34 25 d7 c9 9f 38 35 a5 f3 b2 25 6f d8 68 e5 0d 1b ad e2 5d f6 93 24 c5 e7 be a7 f8 dc 99 6a 9f fd a6 3a 96 7d 6e 3b 9e 75 5e 43 8d 5a 5f f9 8f 5a 5f f9 8f c2 55 c3 54 fe f3 df b0 8c 05 e8 9d 8c 7e 04 8e 82 03 00 32 80 1f 9b 8b f6 66 19 46 7f 85 cb aa 8c dd cc b8 9f cd 59 e7 c7 c4 e7 cd 92 f3 ea d3 6a fb e0 75 63 df 19 f6 6a be 50 cd f5 ff a7 61 17 dc b2 c6 8f 09 15 c4 8c ee 8b e2 2e 59 a0 c8 a8 f1 bd fe f8 74 2f 38 fc de ef 61 4d ba 97 0f 61 4d 72 f2 a2 aa 3c e1 62 55 5f 79 8a ba 3a cc 14 91 e9 a4 60 d3 69 b6 23 58 91 3f e9 7b ca 9f f4 3d 95 fe f8 28 75 36 37 aa fd 83 19 dd a5 c7 c7 33 95 ec c7 Data Ascii: FovrKW1OQOif^rJ~s9]^CMJQ4%85%oh]$j:}n;u^CZ_Z_UT~2fFYjucjPa.Yt/8aMaMr<bU_y:`i#X?{=(u673
2024-07-04 20:55:18 UTC	11489	IN	Data Raw: 7b ae f5 ad 01 00 4a ef 2e eb 00 e5 82 15 1c fd 94 0b fc 33 24 b5 58 e7 00 e2 a6 37 d3 21 7f f9 83 f2 97 de af 60 fd 5a eb 38 45 51 75 f4 71 f2 ce 78 9f 6a a6 bf 57 a9 b4 67 1d 07 43 60 71 c2 0a 2b 39 ca 53 31 56 fd 30 5c 14 00 12 eb 64 c7 f5 56 59 87 28 07 14 1c fd 94 0b fc 0a 49 cf 4b 7a 97 75 16 20 0e b2 6b 5a e4 b7 dc af cc ca c7 ac a3 14 c5 b0 51 63 e5 9d f1 3e d5 36 cf 92 33 f6 70 eb 38 08 51 76 d5 12 b5 2e b8 aa a4 27 ac a4 6a 6a 35 ee 2b df 67 3b 53 99 c8 b5 6e d1 6b 5f ff 74 e8 d7 1d 77 e9 95 aa 6e 68 b4 be 3d 00 40 69 b1 3d 65 00 d8 a2 d2 4f 8e eb f5 e5 02 ff 37 62 9b 0a 30 68 c1 86 17 e5 b7 3c 20 ff f1 07 d5 bb bb dd 3a 4e e8 2a aa aa 55 73 f2 59 f2 ce 78 9f aa df 7d b2 75 1c 14 49 7a 6a b3 c6 d5 5f 59 d2 63 64 7b 33 1d 7b b7 ab 50 72 44 5f fb Data Ascii: {J.3$X7!`Z8EQuqxjWgC`q+9S1V0\dVY(IKzu kZQc>63p8Qv.'jj5+g;Snk_twnh=@i=eO7b0h< :N*UsYx}uIzj_Ycd{3{PrD_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49771	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	741	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjMvNDUvMThhMDhkYTctN2M2NC00MTdjLTg4N2ItNDIyMjA0ODZiMTgxL2lkeC1pY29uNC5wbmciXV0/idx-icon4.png?sha=5992698387238b95 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 2004 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4414904 X-Request-Id: bd4bf8c1-6cd0-4f2c-82d6-0c339d54ffbc Content-Disposition: filename="idx-icon4.png" X-Content-Digest: fc1044f719ae0e6c3dcd258f2c93889f904ea73c ETag: "dbf85730ecd6d7b2b2532bc73559ca5561a1ed99" X-Runtime: 0.290205 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	2004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 64 50 4c 54 45 ff ff ff de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de Data Ascii: PNGIHDR<<")@gAMAa cHRMz&u0`:pQ<dPLTEa<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	775	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvMjIvZDJkNzU4MzctNWQyYi00MzQzLWE1YTAtOTVkODVhZjA2M2JlL1BzeWNob2xvZ3kgVG9kYXkgTG9nby5qcGVnIl1d/Psychology%20Today%20Logo.jpeg?sha=68aaec49b29fcca1 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	587	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/jpeg Content-Length: 14539 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4918062 X-Request-Id: 6062fa96-0a7b-4da2-a079-8b7db77446d5 Content-Disposition: filename="Psychology Today Logo.jpeg" X-Content-Digest: 51b779b776b92032df1012d95910956beebb3028 ETag: "48f7f95db434dd8850703b478ffeee6820316ea4" X-Runtime: 0.306662 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	14539	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49769	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	508	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTUvMjEvMTIvMDMvNDkwYTkzMTMtODcxYy00ODIwLThlOTQtNDExYzk5YzdkMDYyL0RlcHJlc3Npb24ucG5nIl1d/Depression.png?sha=eb4824c07f6dd1eb HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	574	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 50687 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4318940 X-Request-Id: b4007591-9f47-4b96-82fa-957954fd2136 Content-Disposition: filename="Depression.png" X-Content-Digest: b07f4496ddf888d73c4f1ef9695f61a9008d4de5 ETag: "ecbb07c8febbcc846b7b8b694ef063d81bf86a1a" X-Runtime: 0.427587 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	3579	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 06 00 00 00 ec 10 6c 8f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 80 00 49 44 41 54 78 da ec fd 7f 7c 9c 67 5e df fb bf 33 19 df f2 e8 96 50 a4 71 64 93 95 d9 60 77 b5 6c 7b 56 32 87 b6 ec 08 0a 5b bb 36 14 bc 65 05 38 d0 9e 38 da d2 d2 55 d2 9e b2 9b 38 29 ed e6 fb 4d 7c 0e 81 76 1d 27 70 7a be 1b 6d e9 2f ff e8 b7 34 06 1c 8a b7 50 bb 36 cb 69 6b 85 02 45 d6 d2 b2 28 55 9a 45 26 44 8e c7 8a 56 ba 25 f9 f6 9d c9 f9 63 34 8e Data Ascii: PNGIHDR88lgAMAa cHRMz&u0`:pQ<bKGDpHYs+IDATx\|g^3Pqd`wl{V2[6e88U8)M\|v'pzm/4P6ikE(UE&DV%c4
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: 4f 14 06 ff 47 14 06 1b 5c 17 03 20 5e 74 70 00 39 12 85 c1 47 54 3f fe f5 5b 5d d7 02 00 00 60 d9 ef 49 fa e1 a2 e7 bf ea ba 10 00 f1 a0 83 03 c8 89 28 0c fe 77 49 ff 55 84 1b 00 00 20 1f be 55 d2 85 28 0c 3e e5 ba 10 00 f1 a0 83 03 c8 b8 28 0c ba 25 fd 53 49 9f 70 5d 0b 00 00 80 23 bf 2a e9 6f 16 3d ff 92 eb 42 00 d8 43 c0 01 64 58 14 06 9f 50 3d dc e8 76 5d 0b 00 00 80 63 97 54 0f 39 7e d5 75 21 00 ec 20 e0 00 32 28 0a 83 36 49 cf 49 fa 71 d7 b5 00 00 00 24 cc 3f 91 f4 13 45 cf 5f 72 5d 08 00 b3 08 38 80 8c 89 c2 e0 43 92 7e 49 d2 47 5d d7 02 00 00 90 50 5f 91 f4 43 45 cf 7f c5 75 21 00 cc 61 c8 28 90 21 51 18 fc b0 a4 df 15 e1 06 00 00 c0 ed 7c 54 d2 ef 2e 7f 77 02 90 11 74 70 00 19 10 85 c1 dd 92 0e 4b fa 09 d7 b5 00 00 00 a4 cc cf 4a 3a 50 f4 fc b7 Data Ascii: OG\ ^tp9GT?[]`I(wIU U(>(%SIp]#*o=BCdXP=v]cT9~u! 2(6IIq$?E_r]8C~IG]P_CEu!a(!Q\|T.wtpKJ:P
2024-07-04 20:55:18 UTC	16384	IN	Data Raw: e5 e0 1a 81 55 e1 68 c4 e4 9b 39 f1 c5 dc 7d a1 27 e4 68 0e 21 47 f3 aa 47 0e 13 72 ac 12 21 07 e2 62 f2 a4 36 de 43 c0 4d 0a 92 3e ea ba 08 db 17 98 65 3b 5c 17 00 24 85 c9 80 a3 d8 d5 ed fa 72 32 67 71 ec 7c 6e 17 59 84 1c cd 21 e4 68 1e 21 c7 ea 11 72 00 40 ea 65 7a 9b 4a d6 03 8e 4c ff f0 00 57 ee de 94 f9 23 b4 63 55 5b 98 d7 cc 89 7c cf 02 20 e4 68 0e 21 47 f3 08 39 56 8f 90 03 b6 15 4a 9c d4 06 58 94 e9 35 32 01 07 00 38 36 77 ee 24 5b 88 44 c8 d1 2c 42 8e e6 11 72 ac 1e 21 07 6c da 60 78 90 39 ef 1d e0 26 3b 5c 17 60 53 d1 75 01 96 ed 70 5d 00 90 14 d7 2e be ea ba 04 dc 42 6d 61 5e 73 e7 5e 8a ed f9 8a 5d dd 6a f9 70 bf 36 f6 f6 e9 ee f2 16 79 3d db 54 68 6d 53 54 9d be 1e b2 5c 9b 9a 54 78 71 52 8b 63 e7 55 8b 79 38 5b 63 71 19 e7 a2 d6 36 bf b2 Data Ascii: Uh9}'h!GGr!b6CM>e;\$r2gq\|nY!h!r@ezJLW#cU[\| h!G9VJX5286w$[D,Br!l`x9&;\`Sup].Bma^s^]jp6y=ThmST\TxqRcUy8[cq6
2024-07-04 20:55:18 UTC	14340	IN	Data Raw: c2 0d c4 25 ce 70 a3 a5 b7 4f 9b 1f 3d e4 fa 92 01 e4 d3 55 49 1d cb a7 84 e6 1a 1d 1c ba 7e 5c ec cb ae eb 00 90 3f 71 77 72 c4 f9 65 1f b8 15 c2 0d c4 a1 b6 30 af 37 47 0e c6 f6 fb ce eb d9 a6 7b 87 9f 72 7d d9 00 f2 eb cb 84 1b 75 04 1c ef a2 a5 07 80 13 71 86 1c 52 bc 77 34 81 1b 11 6e 20 0e 8d 6d 79 8b 63 e7 63 79 3e af 67 9b ba 1f 3d a4 42 6b 9b eb 4b 07 90 5f ac 65 97 11 70 bc 8b 37 05 00 67 5c 84 1c 73 e7 e2 19 b8 07 48 84 1b 88 47 dc 33 87 08 37 00 24 04 6b d9 65 cc e0 58 16 85 c1 5d 92 5e 93 f4 4d ae 6b 01 90 5f 71 ce e4 90 ea c7 d6 96 87 1e 73 7d d9 c8 38 c2 0d c4 81 70 03 40 4e 7d ad e8 f9 f7 bb 2e 22 29 e8 e0 58 56 f4 fc 77 24 fd 86 eb 3a 00 e4 5b dc 9d 1c 71 2e 3c 91 4f 84 1b 88 43 38 35 a9 37 9e 79 84 70 03 40 1e d1 bd 71 03 02 8e 9b f1 e6 Data Ascii: %pO=UI~\?qwre07G{r}uqRw4n myccy>g=BkK_ep7g\sHG37$keX]^Mk_qs}8p@N}.")XVw$:[q.<OC857yp@q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49767	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	506	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMTUvMDYvYWIxYWVmM2YtMmY4NC00MDUyLWIzYzEtNDBiZmFhMzA4Y2Q2L2lkeC1pY29uMS5wbmciXV0/idx-icon1.png?sha=a2aaeccf5041060e HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:18 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 1886 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4415375 X-Request-Id: fc261f26-435b-476a-bd80-ecb17a19bb9e Content-Disposition: filename="idx-icon1.png" X-Content-Digest: 3e8ab0a3c73ae63870f3e395ab693b763d427019 ETag: "1cc07c6ec4c56dffcbbce61c618c7c5298e462b0" X-Runtime: 0.245863 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:18 UTC	1886	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 40 50 4c 54 45 ff ff ff de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de Data Ascii: PNGIHDR<<")@gAMAa cHRMz&u0`:pQ<@PLTEa<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49774	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	757	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDgvMTAvNTY1OWVjNzAtYTBiYS00OTQ2LWI4ODAtOGJiM2ZiN2ZhMjE3L1N1biBMaWZlIExvZ28uanBlZyJdXQ/Sun%20Life%20Logo.jpeg?sha=a80bd69ae9f8cb13 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:19 UTC	579	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/jpeg Content-Length: 13891 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4917946 X-Request-Id: d8689190-73c5-4d93-a476-0a290bdbe88d Content-Disposition: filename="Sun Life Logo.jpeg" X-Content-Digest: e139f8773eda0c850c95949c687646d125ab7838 ETag: "92b038f5245d026acbf35361d9688c7ca2339eef" X-Runtime: 0.280220 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:19 UTC	13891	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49778	104.18.7.90	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	613	OUT	GET /public/img/gottman_checkup_badge.png HTTP/1.1 Host: gottmanconnect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:19 UTC	654	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/png Content-Length: 18309 Connection: close Last-Modified: Thu, 30 Jul 2020 09:45:47 GMT ETag: "4785-5aba5896b999f" Cache-Control: public, max-age=43200 Expires: Fri, 05 Jul 2024 08:55:18 GMT CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Set-Cookie: __cf_bm=BaV.hQ4J3icq_9XUm03aupCQcKmCUm0ghyzgGbFXaQU-1720126518-1.0.1.1-PcGYBYd6LIM4zaFnlCAaKauUPZ8DT7dZm7tyi.uq4S3KkkYbDddnTnLvhHL.oA_Ua.TizzZaf2m8LKJJGSlWRg; path=/; expires=Thu, 04-Jul-24 21:25:18 GMT; domain=.gottmanconnect.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 89e203f6ed607cb1-EWR
2024-07-04 20:55:19 UTC	715	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 95 08 03 00 00 00 59 e0 b0 a4 00 00 02 fd 50 4c 54 45 4c 69 71 ff ff ff 7f 7f 7f aa aa aa bf bf bf 99 99 99 aa aa aa 91 91 91 a1 a1 a1 99 99 99 a9 a9 a9 9c 9c 9c a3 a3 a3 aa aa aa 9f 9f 9f a5 a5 a5 a0 a0 a0 a5 a5 a5 9d 9d 9d a2 a2 a2 a6 a6 a6 a3 a3 a3 9d 9d 9d a3 a3 a3 a0 a0 a0 a4 a4 a4 9f 9f 9f 9d 9d 9d a0 a0 a0 9f 9f 9f 9c 9c 9c a1 a1 a1 9e 9e 9e a2 a2 a2 a0 a0 a0 9d 9d 9d a1 a1 a1 9c 9c 9c 95 95 95 a1 a1 a1 ab ab ab c3 c3 c3 ce ce ce d9 d9 d9 dd dd dd dd dd dd bb bb bb ef ef ef f7 f7 f7 fa fa fa fc fc fc fd fd fd ff ff ff fd fd fd fb fb fb fa fa fa f4 f4 f4 e9 e9 e9 f0 f0 f0 ff ff ff c9 c9 c9 a1 a1 a1 fd fd fd ec ec ec a0 a0 a0 f3 f3 f3 e2 e2 e2 ae ae ae db de de 9f 9f 9f f3 f3 f3 f2 Data Ascii: PNGIHDRYPLTELiq
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: 9b 37 9e c1 2f 9e c4 55 9e b7 2e 9e c3 64 b6 d2 d1 e9 f1 ce e7 f0 6b b8 d4 e8 f3 f7 67 b6 d2 d3 e9 f1 c1 e1 ec f7 fa fc d7 eb f3 e3 f1 f7 93 a0 a4 9d 9d 9d 4b a5 c3 6a a6 bb 36 a1 c5 6c a7 bb 55 a5 c0 3b a1 c4 83 a5 b1 94 a2 a7 9f 9e 9e 76 a6 b6 8c 9e a3 38 9f c1 9e 9b 9b df 80 93 b3 00 00 00 ff 74 52 4e 53 00 01 02 03 04 05 06 07 08 0a 0b 0d 0e 0f 10 11 12 14 15 16 17 18 1a 1c 1d 1f 20 22 23 25 27 29 2a 2c 2e 2f 31 32 35 34 3c 4f 65 72 78 7b 46 a8 d1 e5 f4 fc fe f8 ed df c0 96 af ff 58 39 f6 a2 36 b4 92 43 87 3b b2 b6 4b 3e 41 59 a9 44 ca d6 46 99 4c d7 47 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 7/U.dkgKj6lU;v8tRNS "#%')*,./1254<Oerx{FX96C;K>AYDFLG
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: ec 1c 43 ab 0f b0 3f cd f7 60 71 8b 66 01 4b 77 90 8e 62 58 7e 34 7c f9 16 43 ab 0f 70 f0 f8 cd 8b fb 49 e0 98 2a 7f 86 54 09 d8 55 4c db 4f b2 47 f8 07 ae 13 f0 90 04 4c 43 c7 d4 7a 2d 16 50 2a 15 90 77 90 20 b9 ff e8 1d 66 56 27 10 f0 fd cb 59 71 09 6c 94 ad c1 f9 12 ac 99 4e 98 42 c0 7a 01 1f de e7 5b 08 0b 78 bb 5c c0 06 09 d8 77 21 e0 55 00 01 33 b1 06 b7 9b 55 02 b6 8b 25 18 02 d6 0c 04 a4 53 74 f1 17 32 5f c0 6c f6 1c 02 d6 0a 04 fc f8 e6 cb 1d a6 44 40 be 43 df 26 01 0d 16 f0 09 04 ac 1f 08 98 14 87 40 08 f8 4f 01 01 4d 21 e0 f5 32 01 9b 2c a0 1f 0d af 44 40 00 01 f3 4b f4 cd 12 01 6f 16 02 c6 57 20 20 80 80 f7 ff 33 02 02 08 f8 09 33 03 b5 0a f8 9e 3f 83 ff 29 01 01 04 fc bc a8 80 f6 3f 26 20 40 02 76 fe 62 97 0e 89 00 00 40 00 88 05 a0 7f 5f 3c Data Ascii: C?`qfKwbX~4\|CpITULOGLCz-Pw fV'YqlNBz[x\w!U3U%St2_lD@C&@OM!2,D@KoW 33?)?& @vb@_<
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: 32 02 91 db 4e 67 6b d9 3f e6 bd ce d0 55 a9 7a 19 6d a9 00 97 db f3 7c 35 d6 8c 00 26 57 10 3d fd b5 c1 01 e0 fd 89 0f 41 64 bd d9 ad b3 17 46 ca 35 3a 00 c5 22 02 00 15 8b c5 ae 4d f9 a8 f1 af 22 c4 00 73 57 7f 85 f3 5c 72 a7 ee af a7 4c 7b 37 7b fd a6 15 41 52 5a e0 96 c7 9d b6 22 71 d8 ed 36 04 ad 91 4b 41 29 6f 4c 7e 3b 84 80 4b b2 03 08 6d c6 ea 6a 78 76 a5 18 5c 95 c7 4f 6d 45 70 f3 22 d6 6e 77 dc 13 c0 16 3b 15 c4 80 f2 c7 19 16 42 7c 93 1b 98 fb f0 e2 16 00 a7 af 35 61 a9 a6 e9 e7 7f 15 8b 04 00 c8 d5 35 d1 56 ba 33 16 2e ea 3a ab 55 89 17 ec e8 fa 35 2b ed 42 be 19 4b 55 d0 62 a2 38 3f 3d fa db da 4d 73 12 88 12 87 ef cd 7c ea f0 9e 8e dc a4 00 08 c1 f1 62 4c 08 e0 78 f6 48 77 d3 96 04 22 76 be 5f e0 4c 10 5c 2f fb 5f cb 5a d1 d3 2f b3 1c b2 9c Data Ascii: 2Ngk?Uzm\|5&W=AdF5:"M"sW\rL{7{ARZ"q6KA)oL~;Kmjxv\OmEp"nw;B\|5a5V3.:U5+BKUb8?=Ms\|bLxHw"v_L\/_Z/
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: 26 0e 47 10 4f a4 14 40 6c d3 85 05 a6 0d 58 29 08 6a 46 62 c2 90 3d 94 14 fb 48 a5 15 4f 4e 4b 00 ac ab 09 f2 3a 6e 03 70 fa 23 e1 bf 9c 8a 9d a7 69 e2 0b 0f a0 6b 49 2d f9 d2 ca 44 3e d6 a1 5f ce 85 5d b2 19 d5 b5 ca 2b 4d c7 be 14 e5 79 60 47 99 e1 ba 00 62 69 6c a5 ea c6 bc a4 66 01 30 f5 1b 46 4e 51 64 ba 95 f1 0a 6d 65 f3 e6 ab ec f8 88 89 a4 bb 64 e6 6d 17 72 6e 34 00 20 4d f4 08 df fb 94 20 6b ab c2 a1 6f 06 59 17 cb 6d 34 72 70 d0 2e 2a e4 71 00 9d f2 00 22 c9 d6 e0 9b 6e e8 7a 36 7e 0b 80 00 15 05 d6 85 30 70 1c 0a ce b3 8f 16 90 be 4d 3a cf 32 40 0d 23 01 b0 9e 26 1f 3a 7d 72 07 80 63 46 c4 8f b7 d5 2f 16 55 a6 40 3d 2c 9d 13 0f 87 ab 01 f4 f4 26 6e 56 68 11 7b 20 84 73 54 61 79 a2 2e 03 88 8c 63 62 b7 c6 a2 95 6c 5d 00 a9 46 7a 2e 67 44 4f 0d Data Ascii: &GO@lX)jFb=HONK:np#ikI-D>_]+My`Gbilf0FNQdmedmrn4 M koYm4rp.*q"nz6~0pM:2@#&:}rcF/U@=,&nVh{ sTay.cbl]Fz.gDO
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: 5d 00 c6 7a 5b 2e c4 1d b2 ea 46 ba c1 7b 03 48 33 d2 65 20 93 9e ff 28 9a 07 40 f5 01 8b 1d 47 b1 7a 0e 70 df 8e 79 00 b9 aa d3 b0 44 7c 72 96 a0 99 81 87 04 50 e1 46 6b 5b 62 c4 5e 5b 1f 10 40 f9 67 44 8d ed 7c 3c 68 dd 97 f8 88 9d 39 83 66 4c 02 60 7d 4d 77 02 b8 1b 42 a4 5b 25 19 31 d2 34 b1 28 bb 0b c0 dd 59 04 16 44 d2 47 3d 88 7d 79 6f 00 b1 5b f2 af 16 1d 27 18 cd 26 9b 0d 40 d9 a8 06 61 9d a9 de ff ef 68 89 cb 51 01 50 96 0b 23 87 c4 a7 f7 ea a8 be 4d f6 a0 00 ea a4 9d dd 6f 44 f4 01 01 3c 02 d4 93 2f ff bd 6f a5 1e f1 27 b5 fb 15 a2 93 0e 09 80 5b 9c a6 4e b1 26 27 a2 77 02 28 3b 60 a9 24 6a 8e 6d 5a 91 b1 ff 4e 00 e5 fb b6 9b dd 35 de 36 c2 df 03 20 c0 33 62 da 56 0d d4 b5 dd 84 bf 8c b0 13 c0 c4 d3 a7 96 de cf 15 90 6e 36 c0 03 18 db b4 91 39 Data Ascii: ]z[.F{H3e (@GzpyD\|rPFk[b^[@gD\|<h9fL`}MwB[%14(YDG=}yo['&@ahQP#MoD</o'[N&'w(;`$jmZN56 3bVn69
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: be d6 23 95 ea b9 b0 9e 4f f3 6a 9e 81 8a 85 34 b1 5a a7 b9 b8 ff 84 2c 73 cf fc e6 99 25 93 89 6f 39 f0 2e 4a f4 2e f9 29 f3 fa ab 8d 49 b7 db ed 1b f2 c7 42 0b 00 48 df 82 f9 f0 73 59 89 db 86 b5 03 b1 d8 e6 dc eb 03 cb 15 84 27 d6 37 63 9d 8b 59 9c 3d ff ac 9c c5 36 d7 ef 5d d0 1b ad 33 67 d3 65 f1 b6 c9 9c bf 9c 8b cc 9f e6 26 eb b7 5b cc f6 2f fd 1d 8b 8d ed df 83 ee 8b d1 f6 fa 6c a6 70 71 a1 f4 81 79 a1 3c 13 8d 0f cc 4d 8f ed 95 ab 54 e6 d0 8a be d7 d1 81 35 9a be 74 86 31 33 f1 f4 34 76 7e 3b 5d f7 c3 cb 24 07 b3 e6 85 d4 77 69 aa 2f a5 a9 01 d2 74 a1 54 f7 f9 05 4e bf 8a d1 cb e2 30 d7 95 25 31 9e 6f 08 cd c4 62 67 ba e1 a3 32 70 32 0b e6 7c 79 cd 89 2e 98 b3 f1 4b e5 b1 f0 f4 3c a3 63 9d ba 9e cb 39 6d 6d 32 eb cb fd a6 16 cc 07 98 64 fb 91 d9 Data Ascii: #Oj4Z,s%o9.J.)IBHsY'7cY=6]3ge&[/lpqy<MT5t134v~;]$wi/tTN0%1obg2p2\|y.K<c9mm2d
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: ec 86 ec fe 54 71 fc 25 ec fc 49 2a 80 d4 62 18 4a 89 0f af 6b 90 a4 4c 8b 43 1c d8 19 3c fc 0d 00 4c e7 da b0 b3 e5 f7 9a 1f a0 9a 6b c5 ce 76 1e 28 07 10 f8 9b 02 fe fc bd 46 44 00 80 70 98 fe fd 4b 4c a0 eb 91 85 50 00 27 f0 f8 97 9f cc 19 d0 0f 14 2c 0c 61 3f a7 26 f2 01 ec 6d c7 ce 5a 17 4d e8 07 8a 2f 4e 72 b8 a0 e2 8a 01 04 fe f8 12 7f 44 00 08 0a 76 fb 39 1c db cd 64 02 98 d9 e4 f1 28 52 2b a3 8a c4 f7 bd a2 1f ae 35 41 3c 80 b6 80 80 6b d6 62 5c 86 b3 10 38 e3 87 76 af 01 a0 bd ee 09 8e 7f 8d 46 44 12 80 88 e9 fd 84 63 c6 a3 34 89 00 52 b9 24 f0 97 5c 32 21 19 4a 0d b8 a0 a9 5a 4d 11 0e e0 67 9d 1b f7 ff 42 b2 1a 9f be 4e 3c 14 3e 7b ae 08 40 e0 6f a7 bc fd 25 07 40 c4 bc 9b c4 69 fb 93 44 00 0f 36 f0 40 a9 53 23 f3 04 3f 0f 01 b3 9b 70 00 1d f3 Data Ascii: Tq%I*bJkLC<Lkv(FDpKLP',a?&mZM/NrDv9d(R+5A<kb\8vFDc4R$\2!JZMgBN<>{@o%@iD6@S#?p
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: b6 af f2 23 e9 3a a2 32 00 47 03 0a d4 e1 93 06 90 13 e4 e8 8f 8d 5f 02 e0 a0 b9 13 da df 77 69 71 b2 07 bf f8 f9 76 91 22 09 c0 72 71 82 37 d0 6f 42 44 02 f8 d4 83 7b 4a 37 3b 0d a3 7b 1e 95 2d 43 e2 07 3b a4 4e ce cb d1 68 ec a8 0c c0 fd 5b 69 82 b9 97 cd 3e 88 7f 22 7f 28 ad c5 03 91 b5 5e 42 01 e4 78 3e 12 28 64 ec 88 4c 00 5f 14 07 21 04 3f 09 59 3f b2 c9 d0 43 2b 55 1e db 01 c0 d5 9b 1c 84 5c 88 2b b6 bf a0 e8 a9 13 90 3a ce 13 07 20 c7 b3 f7 9d e1 8e 37 09 0d b9 9f 69 18 07 00 9b 33 e8 fa 22 73 87 d4 8f 00 60 4c 73 c3 00 8a ed 2f c4 3f 51 b3 01 fc fb 88 e6 8e 00 e4 d8 0a e2 69 77 b2 ad e5 78 2c 34 3c 1b 27 f9 43 35 0d 30 11 3d 78 a4 ba 67 c1 05 a8 5a 3b d6 9b 05 10 e2 df 67 f4 4d 13 b0 01 12 e7 d5 fd ef 6e 00 6c dd b9 a2 e3 e6 c0 e6 c8 a3 fa ae 61 Data Ascii: #:2G_wiqv"rq7oBD{J7;{-C;Nh[i>"(^Bx>(dL_!?Y?C+U\+: 7i3"s`Ls/?Qiwx,4<'C50=xgZ;gMnla
2024-07-04 20:55:19 UTC	1369	IN	Data Raw: 63 02 2f 4b f0 6d 5b 2a fb fd 0b a6 02 8f f5 32 92 a4 c3 31 7c cb a0 66 00 4d cf f0 26 3b be 93 cc 0f f9 eb 69 e7 e1 60 a8 e1 44 03 88 a2 03 34 76 f6 46 23 6b 1f 51 51 63 5f d0 f5 01 44 e9 9c 17 38 6e fd 5a 31 e5 86 2d a8 14 9e 37 d1 1f 56 a0 7b 90 d9 fc 50 2f 52 33 80 e8 01 de 64 87 73 8f e8 91 a4 e2 e3 98 3f c1 ef 40 e4 03 88 0e 07 05 4c e0 c0 2c 92 94 65 05 f3 27 0c 66 d1 cf 00 88 52 03 4e b8 d0 7c e5 ae 67 13 de 50 a6 4d 67 41 d2 aa 1b c4 55 e2 99 45 dd 00 da 87 5b 70 58 73 be 6a 94 f2 a3 09 b5 c2 81 fc 50 03 f3 3b 00 68 ec 7e 89 9d 79 62 4d 52 ce 32 4b cb d8 59 7b 37 f3 73 00 22 7d 33 be 67 ec a8 f2 02 7e 1f fc 1d d6 a5 90 84 28 f3 13 0e 57 f6 2c 52 37 80 28 bd 82 b3 9f e6 d6 72 55 9b e1 cf 0b 33 49 3c d5 1f d6 fe 8f ec ad 39 4a ce b4 61 0e 3b 1b 7d Data Ascii: c/Km[*21\|fM&;i`D4vF#kQQc_D8nZ1-7V{P/R3ds?@L,e'fRN\|gPMgAUE[pXsjP;h~ybMR2KY{7s"}3g~(W,R7(rU3I<9Ja;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49775	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	759	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvNTQvNThkZDVmYzQtZGViMi00NDUxLWE0NGItZDg0NjEzZWZlMTE3L0dyZWVuc3BhY2UgTG9nby5qcGVnIl1d/Greenspace%20Logo.jpeg?sha=28914c691fff0ece HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:19 UTC	581	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:18 GMT Content-Type: image/jpeg Content-Length: 11672 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4917926 X-Request-Id: 74695652-0431-4727-b8e7-61a82a858e05 Content-Disposition: filename="Greenspace Logo.jpeg" X-Content-Digest: d56793f396dd5a6d29e4f7a444766f0c21b4a39d ETag: "54e4ed12a654abda9b2903266ce4a7b4f823fc11" X-Runtime: 0.288143 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:19 UTC	11668	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
2024-07-04 20:55:19 UTC	4	IN	Data Raw: 20 22 ff d9 Data Ascii: "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49777	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	743	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDgvMjMvZDVhMTFkYTktMDMyZC00NWJjLWE3ODctMmM1ZmM2NjJjMzYxL1RISSBMb2dvLmpwZWciXV0/THI%20Logo.jpeg?sha=c2807b442533c69c HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:19 UTC	573	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:19 GMT Content-Type: image/jpeg Content-Length: 4050 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4917909 X-Request-Id: 084cf9c5-7806-4b4f-9b82-fa551fb8b6bf Content-Disposition: filename="THI Logo.jpeg" X-Content-Digest: 048d433b62505e6cad6d33313c0948102df8ceb0 ETag: "061c74d1763b72117b9a06bf2affb8301ec0f2ba" X-Runtime: 0.256871 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:19 UTC	4050	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49776	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:18 UTC	669	OUT	GET /2023/06/21/18/45/50/4760ed29-ec7e-461c-88b6-d85cc5eb9f2b/Clinic%20Sites%20PNG.png HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:19 UTC	692	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 6940 Connection: close Last-Modified: Wed, 21 Jun 2023 18:45:51 GMT x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"Clinic+Sites+PNG.png"} x-amz-version-id: q78XrIpFonp8sM6fADKDi8ZTrMwutaex Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 20:55:20 GMT ETag: "aee69ba3904fb1eb42293f1a65dc282b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 29676c2ee539645954aa742bde1ce894.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: arFFnek-g8t9hTB3FBBV2lboi-oED-J6c4sZVR3FuGwRuw-pqNzXMA== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:19 UTC	6940	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 54 08 06 00 00 00 38 7b 0a 6d 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 07 74 49 4d 45 07 e4 05 0e 17 09 24 9d 96 e1 1a 00 00 1a 0b 49 44 41 54 78 da ed 9d 79 9c 5c 55 99 f7 bf a7 aa ba 3b e9 24 a4 03 04 12 42 16 b2 87 55 56 85 41 65 95 45 0c 88 cc 28 cc c8 a6 23 20 3a e3 e0 32 2e ef 3b 3a 8e 3a e3 32 8e a3 ce 3b 88 28 af 20 20 88 02 63 a2 c8 96 10 59 47 16 43 42 02 d9 77 12 b2 93 a4 b7 aa 3a bf f9 e3 39 95 ba 55 5d dd 5d dd e9 Data Ascii: PNGIHDR,T8{mgAMAa cHRMz&u0`:pQ<bKGDpHYs.#.#x?vtIME$IDATxy\U;$BUVAeE(# :2.;::2;( cYGCBw:9U]]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49779	54.212.237.39	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:19 UTC	775	OUT	GET /df_media/W1siZiIsIjIwMjQvMDYvMDYvMTUvMzgvMTEvM2M2MGRiMWMtYTFmNi00NTgyLWE1NDMtZWQzNDNmNzhmMTIzL1VudGl0bGVkIGRlc2lnbiAoMTUpLnBuZyJdXQ/Untitled%20design%20%2815%29.png?sha=802242b28522858a HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:20 GMT Content-Type: image/png Content-Length: 14713 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 2438207 X-Request-Id: fca68d62-ad94-4eea-b4dd-1caff5cd1a50 Content-Disposition: filename="Untitled design (15).png" X-Content-Digest: e91adfd7e885a51b63e7aeb949b37b393be766e0 ETag: "aca5f3d5b7c8d273cd46ebb6c874e16260972191" X-Runtime: 0.292662 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:20 UTC	14713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 04 00 00 00 78 08 06 00 00 00 14 9f 8c 04 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 38 7b 49 44 41 54 78 da ed bd 79 98 5d e7 5d e7 f9 79 cf 76 f7 5b 55 b7 56 95 aa b4 2f 96 2d d9 96 2d 79 4b ec 6c d8 21 84 10 96 24 90 99 87 ad a1 09 d0 d0 3d dd d3 f3 f0 4c 0f 43 d3 0f 4f 13 02 01 c2 10 18 08 dd 0d 43 20 84 4e 6c b2 90 04 93 c5 b1 65 cb 96 e2 45 b6 f6 5d 55 2a d5 5e 77 5f ce bd 67 79 e7 8f 73 ce 5d 4a 55 92 bc 08 49 55 e7 ab e7 aa ee 72 96 f7 Data Ascii: PNGIHDRxgAMAa cHRMz&u0`:pQ<bKGDpHYs+8{IDATxy]]yv[UV/--yKl!$=LCOC NleE]U*^w_gys]JUIUr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49785	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	506	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjIvNTQvZmVkN2YwY2EtNWM1ZC00N2E5LWIyMWMtNjExZjU5ODJkMjQ3L2lkeC1pY29uMi5wbmciXV0/idx-icon2.png?sha=16346d852e6f1d45 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:20 GMT Content-Type: image/png Content-Length: 2618 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4415145 X-Request-Id: 375b8854-57b6-4b01-a915-fb215401e911 Content-Disposition: filename="idx-icon2.png" X-Content-Digest: 24fbf78830db3476c75f04a4bfbbda764c172d83 ETag: "33678524a1c3fcb2e4c47b4014060099a51f20af" X-Runtime: 0.253036 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:20 UTC	2618	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 c4 50 4c 54 45 ff ff ff de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de Data Ascii: PNGIHDR<<")@gAMAa cHRMz&u0`:pQ<PLTEa<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49780	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	1397	OUT	GET /assets/print-bb89f3a9f649ea98721f77ef41f0a87b3ca29599150e7f4fdd2d56a8fc6ea7e0.css HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac; _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517
2024-07-04 20:55:20 UTC	371	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: text/css Date: Thu, 04 Jul 2024 20:55:20 GMT Etag: W/"65284afc-c9a" Expires: Fri, 04 Jul 2025 20:55:20 GMT Last-Modified: Thu, 12 Oct 2023 19:37:32 GMT Server: Caddy Server: nginx/1.14.0 (Ubuntu) Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:20 UTC	2372	IN	Data Raw: 63 39 61 0d 0a 2f 2a 0a 50 72 69 6e 74 20 53 74 79 6c 65 73 0a 0a 0a 2a 2f 0a 0a 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2e 63 6f 6c 2d 70 72 69 6e 74 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 33 33 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 6f 6c 2d 70 72 69 6e 74 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 6f 6c 2d 70 72 69 6e 74 2d 33 7b 77 69 64 74 68 3a 32 35 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 6f 6c 2d 70 72 69 6e 74 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 6f 6c 2d 70 72 69 6e 74 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 Data Ascii: c9a/Print Styles/@media print{.col-print-1{width:8.3333333333%;float:left}.col-print-2{width:16.6666666667%;float:left}.col-print-3{width:25%;float:left}.col-print-4{width:33.3333333333%;float:left}.col-print-5{width:41.6666666667%;float:left}.c
2024-07-04 20:55:20 UTC	861	IN	Data Raw: 74 65 6e 74 2c 2e 6e 65 77 73 6c 65 74 74 65 72 2d 64 69 73 70 6c 61 79 20 2e 6e 65 77 73 6c 65 74 74 65 72 2d 73 65 63 74 69 6f 6e 20 2e 6e 65 77 73 6c 65 74 74 65 72 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6e 65 77 73 6c 65 74 74 65 72 2d 73 68 6f 77 20 2e 6e 65 77 73 6c 65 74 74 65 72 2d 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 2e 6e 65 77 73 6c 65 74 74 65 72 2d 69 6d 61 67 65 2c 2e 6e 65 77 73 6c 65 74 74 65 72 2d 64 69 73 70 6c 61 79 20 2e 6e 65 77 73 6c 65 74 74 65 72 2d 73 65 63 74 69 6f 6e 20 74 61 62 6c 65 2e 6e 65 77 73 6c 65 74 74 65 72 2d 69 6d 61 67 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 6e 65 77 73 6c 65 74 74 65 72 2d 73 68 6f 77 Data Ascii: tent,.newsletter-display .newsletter-section .newsletter-content{display:block}.newsletter-show .newsletter-section table.newsletter-image,.newsletter-display .newsletter-section table.newsletter-image{display:block;float:left;width:300px}.newsletter-show
2024-07-04 20:55:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49786	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	506	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjMvNDUvMThhMDhkYTctN2M2NC00MTdjLTg4N2ItNDIyMjA0ODZiMTgxL2lkeC1pY29uNC5wbmciXV0/idx-icon4.png?sha=5992698387238b95 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:20 GMT Content-Type: image/png Content-Length: 2004 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4414906 X-Request-Id: bd4bf8c1-6cd0-4f2c-82d6-0c339d54ffbc Content-Disposition: filename="idx-icon4.png" X-Content-Digest: fc1044f719ae0e6c3dcd258f2c93889f904ea73c ETag: "dbf85730ecd6d7b2b2532bc73559ca5561a1ed99" X-Runtime: 0.290205 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:20 UTC	2004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 64 50 4c 54 45 ff ff ff de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de Data Ascii: PNGIHDR<<")@gAMAa cHRMz&u0`:pQ<dPLTEa<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49788	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	506	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMTQvMTgvMjMvMjMvNTgwNjgxNGItMjExMy00YzlkLTk4NWUtOWM1NWUzZDk0Yjk0L2lkeC1pY29uMy5wbmciXV0/idx-icon3.png?sha=612460af434d2817 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:20 GMT Content-Type: image/png Content-Length: 1982 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4415000 X-Request-Id: c71cebd5-c405-4051-ac4a-ee82ddd69b7c Content-Disposition: filename="idx-icon3.png" X-Content-Digest: 1bc0344bedd96442e2e46c03a8c90a659a05fe10 ETag: "650846f4944562c2b7ab0818d9498c2db79430da" X-Runtime: 0.247198 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:20 UTC	1982	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 55 50 4c 54 45 ff ff ff de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de 61 3c de Data Ascii: PNGIHDR<<")@gAMAa cHRMz&u0`:pQ<UPLTEa<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49787	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	540	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvMjIvZDJkNzU4MzctNWQyYi00MzQzLWE1YTAtOTVkODVhZjA2M2JlL1BzeWNob2xvZ3kgVG9kYXkgTG9nby5qcGVnIl1d/Psychology%20Today%20Logo.jpeg?sha=68aaec49b29fcca1 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	587	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:20 GMT Content-Type: image/jpeg Content-Length: 14539 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4918064 X-Request-Id: 6062fa96-0a7b-4da2-a079-8b7db77446d5 Content-Disposition: filename="Psychology Today Logo.jpeg" X-Content-Digest: 51b779b776b92032df1012d95910956beebb3028 ETag: "48f7f95db434dd8850703b478ffeee6820316ea4" X-Runtime: 0.306662 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:20 UTC	3566	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
2024-07-04 20:55:20 UTC	10973	IN	Data Raw: 10 f7 9e fd c0 df 5b e3 7d 11 72 fa fe 03 66 5c 7a cb 2f 51 61 56 4b 3d b9 ae 16 7a 0a 88 0c eb 2f 31 3d 4c 10 0c ce db e2 1a 1a 4a 87 9b 4a 19 a5 e6 4b 5c 7a 14 34 fe 4c 41 50 77 76 5d 32 c4 be 42 c4 87 e4 d3 39 db b0 9e 20 18 4a 9b 86 2a 28 08 b5 7c a1 43 dc 2e 5a b8 54 a3 df e9 d4 5b a8 b1 0d d7 a2 5d ce 86 be 48 50 9b 63 67 d4 34 ae b6 ba 6d 8b f3 c7 6c 29 7a fe 01 ed 96 ca f2 3e 35 ec c3 d6 f1 31 c4 05 5c aa da 2e 35 15 1c 3e 58 09 d3 a2 69 10 c7 37 4f 70 7e cd e6 2f 8d 5d 73 0c 86 cf 8b d8 e2 09 af 17 d9 c2 9a 98 0e 50 84 0a 59 1f 41 62 92 47 10 06 f5 91 3b 0b 2d 6d de eb 47 64 b6 57 5d ee 06 51 d0 db e3 79 65 71 02 32 60 1e fd 00 19 c8 be e6 67 75 48 78 e7 da 0f c0 fd bd b5 64 35 ae 95 b0 b1 83 d9 3b 2e 65 fd 8a 45 b3 ad 6b 37 41 56 fb 70 67 08 89 Data Ascii: [}rf\z/QaVK=z/1=LJJK\z4LAPwv]2B9 J*(\|C.ZT[]HPcg4ml)z>51\.5>Xi7Op~/]sPYAbG;-mGdW]Qyeq2`guHxd5;.eEk7AVpg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49783	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	420	OUT	GET /2024/07/01/13/03/25/1cd889c5-c2f2-461f-8589-711d110760f1/MH%202.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	683	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 87713 Connection: close Last-Modified: Mon, 01 Jul 2024 13:03:26 GMT x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"MH+2.jpg"} x-amz-version-id: nldqYf9hK4wU21GDr5mW8lKlbqnLGoij Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 20:55:18 GMT ETag: "4f9d27c91c9335246fce3d4ad108a392" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 34833e1e6b760bb81603c4fa1e0bb5d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: dGya-re09ZVWvpxIxLx1P_9qmP-G0gasCOU_KFn1_HDmKWkqpukbJA== Age: 3 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:20 UTC	15701	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 5e 02 9e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 08 02 01 00 09 ff c4 00 5a 10 00 01 02 04 04 03 04 06 06 06 06 06 07 06 05 05 01 02 03 00 04 05 11 06 07 12 21 13 31 41 08 22 51 61 14 32 71 81 91 a1 15 23 Data Ascii: JFIFvvCC^Z!1A"Qa2q#
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: ca 9b 60 31 e8 2d 8d 92 90 0e 95 a9 5d 02 95 70 34 f7 b5 0b ed ce 11 7b 48 d2 97 b7 27 3e 66 4d 5d dc d3 c5 14 fa 75 49 b9 91 3b 28 9b 17 aa 23 84 a6 59 09 0b 2a 28 f5 ad a0 8b 93 cc ef b9 8a cc 7d cc a7 6a b6 8a 42 c6 67 63 9a 4b f5 d4 33 4e 61 2f b3 4d 68 36 87 5b 4d b5 2a db 91 b6 c9 f2 f2 bc 1c 53 b0 9a d2 8f 2c 78 32 49 aa a4 cd 69 c7 5c 98 74 a8 92 34 a4 0b 0f 00 3d 80 43 6c 64 93 6f 65 ca 56 17 9d a8 cc b6 10 c2 bb ea 20 af 98 06 dc 87 9f e5 17 fa 82 b3 83 d4 db b3 72 f5 54 ad 04 cb 94 bc 03 65 66 e0 90 07 bb 78 89 84 d3 bd c9 ea 0c 4f c9 57 e6 13 2a 13 4f 7e 61 b3 a8 30 b0 50 41 17 b2 48 27 ba 76 82 cd f0 0d cd 1b b3 ae 61 af 29 71 14 86 26 5c 92 67 18 4a d6 c3 ed 2b 75 14 1b 05 90 3a 5b 6d cf b3 78 c5 d4 c1 d4 a7 c6 3b 3a 9d 0d 48 d1 a9 ca 7a 78 Data Ascii: `1-]p4{H'>fM]uI;(#Y(}jBgcK3Na/Mh6[MS,x2Ii\t4=CldoeV rTefxOW*O~a0PAH'va)q&\gJ+u:[mx;:Hzx
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: 16 e4 d6 46 28 c6 58 f2 58 93 cc aa 35 6d 84 a6 a4 0c b8 22 c9 71 e4 8f 92 c6 df 13 16 a7 16 53 a7 28 e8 a5 50 c3 fe 84 bf a4 a9 4f 89 b9 4f 59 49 6f 98 1e 24 7f 38 ab 5b 28 25 2b e1 88 f9 a3 49 35 8c 38 fc c3 64 ba c1 4e b5 32 a3 ea 91 cf 68 55 55 ca 2c 6d 27 69 59 94 32 33 10 26 66 8b c0 03 48 41 2d a9 17 da e3 ac 07 4f 2f 6d 83 ea 23 9b 8e 35 e9 25 25 e0 eb 64 05 80 53 b8 be c7 f9 c6 89 21 31 67 94 34 97 65 52 8d 16 d0 02 45 8f 2d a2 8a 78 77 28 ae 4d 47 ba a1 a8 44 b0 69 8b d5 4a 32 90 e1 5b 2d 81 ec 36 80 68 bb 82 26 e5 e6 78 25 21 29 1e 44 c0 d8 bd 23 f9 33 9c b4 f9 ca 3e 71 e2 b4 4c 36 b9 59 c6 6a b3 0e e9 3c c2 54 e1 5a 4f b3 7d bd b0 f8 f6 9c 9a 89 fa 8c 9b 0b 56 05 35 52 7e 94 4a 24 2a 13 4a 6d df d1 4a b6 29 58 f0 29 24 9f 61 22 09 12 f6 de 80 Data Ascii: F(XX5m"qS(POOYIo$8[(%+I58dN2hUU,m'iY23&fHA-O/m#5%%dS!1g4eRE-xw(MGDiJ2[-6h&x%!)D#3>qL6Yj<TZO}V5R~J$*JmJ)X)$a"
2024-07-04 20:55:20 UTC	15491	IN	Data Raw: 94 95 06 26 44 d0 29 2d 0b 1d 87 8d c5 88 20 f4 06 f0 9f a7 ff 00 ba 9d 4e 35 3b 56 4d 1f 57 8f 47 4a 8d e9 bb c9 e3 fc fd 0a 2d e5 d6 1f 5a 8e 89 77 50 91 ff 00 77 36 f0 bf ef 47 a8 c9 e0 b8 a2 29 dc 97 c2 95 04 82 f4 ac c1 b7 3b 4e bc 2f fb d1 56 2e d1 20 5e 5f d1 f0 1d 0e 71 34 79 77 1b f4 a7 13 c4 0e 3e b7 35 14 83 6f 58 9b 73 3c a3 91 f5 0c 71 3d 87 fa 79 25 2a 9f bb fe ce 7f c4 72 a5 15 29 83 61 b7 74 69 f0 8c 50 78 3d 84 90 ab a1 c4 3c 77 4a 54 92 40 52 8e e2 1e 8c 96 77 0e 52 aa 6c b2 9d 13 4a 2f 6a e6 6d b4 53 43 62 d2 56 2c d6 29 72 b5 89 42 c2 24 78 81 40 d8 8f e5 15 19 34 15 48 29 c6 cd 5c ca e7 e5 2b d9 6b 56 4c eb 32 ce 09 3d 5b 90 3d 5f 78 8d c9 c2 b4 6c f6 79 aa b1 af d0 54 e7 05 78 04 31 df d1 38 d6 93 4e c4 cc 14 49 cc 4a ba 83 3c 90 8d Data Ascii: &D)- N5;VMWGJ-ZwPw6G);N/V. ^_q4yw>5oXs<q=y%*r)atiPx=<wJT@RwRlJ/jmSCbV,)rB$x@4H)\+kVL2=[=_xlyTx18NIJ<
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: aa 52 a3 2f 2f 3c d1 ff 00 05 f6 c2 d3 bf 91 1f 38 b8 c9 c5 de 2e c2 6a 52 85 45 c6 a4 53 5f 93 91 f3 57 21 ab 58 62 7e a3 52 a1 cb 26 72 82 2e f2 1b 6d 77 76 5d 1c d4 92 93 b9 09 f1 17 db 9c 7a 0e 9f ad 8c d2 8c f0 cf 9d fd 4b e8 55 28 4a 55 68 2b c3 7f 95 fd cc 8e 4e af 3b 4e 7b 89 2e ea d9 58 ea da ad f9 47 45 49 ad 1e 4d c1 30 aa 71 c5 50 90 5e 53 8f 5b aa 8d e0 f9 dc 8a 3f 0c 6e c3 3d a0 ab 58 59 a2 d3 32 ed 38 d9 37 21 c1 bd fd b0 7e a6 2c 4f 4d de e8 67 97 ed 5f 3e bd 22 6e 8d 2e f0 ea 75 10 62 bd 5f 94 47 16 26 e6 be 34 97 c7 33 54 da dc 9b 49 97 6c 36 65 dc 68 24 02 da b9 d8 db a1 1b 8f c5 01 56 d3 57 41 c1 b5 81 5a 5d d5 4e d1 55 2e 81 a9 d4 38 87 10 3a 9f b2 47 ce 31 e1 4a ec e8 46 4e 74 5c 16 d3 4d 7f 43 6d c0 12 4a c3 f2 f2 ed 29 05 5c 34 8b Data Ascii: R//<8.jRES_W!Xb~R&r.mwv]zKU(JUh+N;N{.XGEIM0qP^S[?n=XY287!~,OMg_>"n.ub_G&43TIl6eh$VWAZ]NU.8:G1JFNt\MCmJ)\4
2024-07-04 20:55:20 UTC	7369	IN	Data Raw: e1 6e 3f 21 a9 32 c8 9f 6c ae c5 56 57 22 3c 60 38 b0 f9 04 18 9c 50 46 c3 50 f2 80 b5 83 bb 2d 07 43 9b 1d e2 8b 24 4d c9 d9 57 b1 eb fe 71 65 9e d4 d0 71 36 b5 cf 58 84 17 b1 6e 05 a5 e2 c9 44 b3 52 96 4b aa 6c eb 65 f4 80 1d 61 5f a4 85 74 3f 28 38 54 95 37 78 b1 73 a7 0a aa d3 57 31 5a e6 15 ae e5 92 96 e2 81 ab 51 14 a2 a7 66 b4 6a 52 6f b0 e2 27 ec db f4 81 b7 b3 94 74 e1 5a 35 b0 f0 ce 54 e8 4e 86 63 94 0f 94 c6 f4 49 f5 29 12 f3 68 52 99 d9 d0 84 92 13 7f 3e 47 dd ef b4 3d d3 9a 57 68 4a ad 4d bb 45 85 25 31 25 2d a1 a9 b9 91 30 d2 fd 5b ab 61 ec 3d 20 1a 63 54 e2 b4 15 95 ad ca a9 76 4b 8d b6 55 6b 28 2b 55 fd a6 01 a6 31 35 e0 33 2d 58 25 69 25 61 7a 46 e0 0d 88 f3 bc 29 c1 5b 03 94 df 91 8e 42 a3 c6 40 09 41 6e fb ec 7f e6 d1 9a 51 b3 c8 e8 b0 Data Ascii: n?!2lVW"<`8PFP-C$MWqeq6XnDRKlea_t?(8T7xsW1ZQfjRo'tZ5TNcI)hR>G=WhJME%1%-0[a= cTvKUk(+U153-X%i%azF)[B@AnQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49784	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	431	OUT	GET /2024/06/01/18/19/58/9042732b-3e9c-4dd8-927d-343bc7ce15e5/self%20compassion.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	671	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 67216 Connection: close Date: Thu, 04 Jul 2024 20:55:18 GMT Last-Modified: Sat, 01 Jun 2024 18:19:59 GMT ETag: "e53d0c18c0e8e583b734d7acd54c28d0" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"self+compassion.jpg"} x-amz-version-id: bY7Yj2sAMGRKS1tvjq1f6abVvg1j21QA Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 acee7e60faaea7b7699fe033930a0164.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: uoohJZZT_Iyv5nAcChmasfLVFbusyOSGErvzXEAJJ-NHXTTT441rlQ== Age: 3 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 5e 02 9e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 51 10 00 01 03 03 03 01 05 04 06 06 07 05 05 08 02 03 01 02 03 04 00 05 11 06 12 21 31 07 13 22 41 51 14 32 61 71 15 23 42 52 81 91 Data Ascii: JFIFvvCC^Q!1"AQ2aq#BR
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: 6e 9f 44 59 2c 8d ae df 16 f0 ea 12 e3 af 3a a5 15 4c 96 da 57 94 85 b8 e1 50 ef 17 90 12 92 12 0e 72 34 bd 88 a1 c5 da 6e 80 b7 5d 03 70 62 5c 3b 48 bf a0 f0 e2 96 bb a2 92 bf ef a8 f7 2d 7e ec 53 4d b1 6c 89 f6 67 48 79 a6 e7 6a a7 11 67 84 d2 92 18 b6 b1 f5 c9 8e be a8 04 24 1e fd f3 d4 36 90 52 8e b8 51 e6 9f d8 7f 72 c9 1b 52 df f4 e5 86 73 fa 63 b3 e7 22 42 4a 14 fa e5 5e e5 86 24 4a 20 13 b8 b6 9d ee b8 b5 1c 63 79 49 e7 ca 94 be e5 46 fb 22 b3 a1 ed 1a 63 b5 fb a4 9b f4 79 d2 ec 3a e9 ac 19 52 22 95 45 9b 1d 58 c0 43 ac af 85 a0 0e 30 b4 94 90 38 34 45 49 6c 26 d4 9d 9a 1a f5 1d e3 b3 e8 2d c1 ed 1d a8 17 0b 1c c5 08 ad ea 28 c8 08 65 45 7c 25 32 98 56 7b ad de ee f0 54 82 48 07 6e 6b 5a 55 b1 16 d7 26 6e c6 9d 95 a6 f5 0d c6 d1 09 ce f7 4a 36 df Data Ascii: nDY,:LWPr4n]pb\;H-~SMlgHyjg$6RQrRsc"BJ^$J cyIF"cy:R"EXC084EIl&-(eE\|%2V{THnkZU&nJ6
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: 82 52 21 ed b9 47 74 f6 b8 b8 69 cd 4a 59 bf 3a 8f a5 21 c5 cc f5 b2 08 66 ef 6f cf 82 73 09 e8 16 da 8e 1c 47 54 e5 43 dd 28 35 17 a7 8e 07 57 b1 cb 72 86 9a d4 32 f4 63 52 bd 9a 14 84 ae f1 a5 6e 0d 72 1a 46 72 f3 08 f5 ee 56 bd c1 3d 0b 4e 6d e8 93 44 9d 7b 82 3e 18 cb 54 5d 66 ea 7b 63 7a aa d5 15 0d eb 4d 36 eb 91 e6 db 90 78 94 94 80 5f 89 f1 43 a9 29 71 b2 7a 2b 61 fb d5 0e 49 94 95 08 b3 7f b5 6a 8b 63 7a 76 72 d5 2f 49 6a 78 be d3 66 99 ca 14 c1 c0 59 60 2b 3e 17 10 40 71 b3 c1 4e d2 3e c5 4a 97 62 9c 7b a2 22 dd 74 bc 38 e4 d0 e9 32 75 be 9a 42 58 9c 84 20 27 e9 bb 79 ca 9b 75 29 f2 52 80 51 4f dd 71 2e 23 a2 ab 39 3a 65 a4 32 99 36 1e 92 bb 33 af ac 8e a5 5a 66 ec 1b fa 65 b4 0c 25 05 58 0d cd c7 96 33 b1 cf 3d b8 27 94 56 6f 7d bb 95 5b 8d 3b Data Ascii: R!GtiJY:!fosGTC(5Wr2cRnrFrV=NmD{>T]f{czM6x_C)qz+aIjczvr/IjxfY`+>@qN>Jb{"t82uBX 'yu)RQOq.#9:e263Zfe%X3='Vo}[;
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: 58 8b 92 ae 32 56 9b 95 e2 5a fc 4e 29 8e f5 3d e3 ef 2b ef bc e1 09 19 f2 0a c7 09 ac e5 bd c9 97 1a 55 14 25 6f 07 fa 57 da 12 5c 05 41 fb bd 8e 3a 42 f0 39 0c b6 78 f8 7a 55 76 8f e6 4f 79 7e 46 79 ab d5 26 f7 a4 5c 66 22 8a df d4 7a aa 53 e9 c1 e5 2c c7 7d c7 55 8f c1 86 c7 f8 ab 48 ed 2b 7d 91 9c b7 5b 77 66 c1 d9 fe ed 25 6d 60 b4 8f a5 bb 34 bd f0 f3 63 97 2c ab 75 5e fa 78 e6 39 59 19 4f 56 94 72 3c 20 ed c6 75 2f b9 aa f6 ef d8 53 57 87 d7 19 8d 5d 6b 69 c7 6f 7a 65 e7 a1 dd 21 a7 f5 92 a2 21 64 48 68 8f 35 a7 01 e4 7c 46 3e dd 61 1f e5 7d ce 99 3f c6 bf d4 69 92 9d 45 b7 4e db 75 9d 82 67 7a 94 96 ee 53 98 61 43 bb 99 11 49 0d ad dc 7d f4 a1 2d ac 2b cc 34 47 9d 6b f8 52 ee 64 f6 93 7d 87 f1 6c ae af 52 3f 63 86 d2 a1 69 74 4d 4d d6 48 4e 02 64 Data Ascii: X2VZN)=+U%oW\A:B9xzUvOy~Fy&\f"zS,}UH+}[wf%m`4c,u^x9YOVr< u/SW]kioze!!dHh5\|F>a}?iENugzSaCI}-+4GkRd}lR?citMMHNd
2024-07-04 20:55:20 UTC	1680	IN	Data Raw: 03 e1 52 c6 2b 0d dc b6 ad a3 ea c6 3c fd e3 e4 2b 37 b1 4b 76 4f da 01 69 69 24 e7 9c 9c 57 34 9d ee 5b 46 d1 29 f5 c8 ec e2 22 40 2b 5a e6 25 40 01 9f 08 6d 43 f9 d7 a6 bd dd 3a 4f cf f6 3e 6f 2f b7 a8 6f e8 57 d5 5f a7 9f 97 04 ea 6a a8 0c 03 f4 a7 9e a4 c0 81 10 0f 0a d6 9c 9f c6 b5 c7 c9 12 7b 1e 58 ed 01 ed ae b4 8f 20 9a e9 91 93 d8 d2 3f 44 5b 6a 24 6a a9 72 95 c9 46 00 ac 32 70 5c 57 73 d7 f3 9d c8 35 89 a9 5a 9e e9 0a 35 28 08 29 ea dc 08 f5 a0 0f 5a f6 4d 18 1d 05 6d f1 a8 65 a4 ff 00 0a 0e 88 f0 5d 11 04 00 37 2c a8 7a 52 29 6e 04 47 08 65 cd aa 3f 8d 03 18 b6 bc 36 12 a1 b8 67 02 81 72 34 1e 06 d5 84 8e bf be 81 91 c9 79 69 53 89 73 0a 29 ea 47 f2 a4 c0 62 e3 8e 2a 5a 94 ad a5 27 8d be 82 90 e8 40 2d 0b 70 e1 1e 00 93 e1 27 af ce 81 8c 5e 92 Data Ascii: R+<+7KvOii$W4[F)"@+Z%@mC:O>o/oW_j{X ?D[j$jrF2p\Ws5Z5()ZMme]7,zR)nGe?6gr4yiSs)Gb*Z'@-p'^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49782	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	457	OUT	GET /2024/05/15/21/23/39/91ec8626-356f-41d7-be64-215088e533ec/Small%20leaf%20sprouting%20out%20of%20dirt.jpeg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	713	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 123361 Connection: close Last-Modified: Wed, 15 May 2024 21:23:40 GMT x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"Small+leaf+sprouting+out+of+dirt.jpeg"} x-amz-version-id: LVJDOT0sW2gWXlmTuSkWO8.epouZTpZt Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 20:55:18 GMT ETag: "007df99502cdac350621ce1c3f1c5027" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d0b402ca7e5fc6514bdd05f23e206b58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: _9nnQ5YusuBOgWGqgm5IQ6LY0J3Dly7_q7fOiK6jHxC3UxSqw-NuNQ== Age: 3 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: 00 fd 71 ca ab e1 a2 43 80 8d 20 9e 37 26 64 9e db 6d 8e 5c a7 d3 da 40 8f 22 64 00 3e f4 98 1d b6 fa 63 97 22 22 da 12 12 0a 04 f0 3c c3 bc f1 f8 e2 a7 e2 6c 6e bb 65 82 e8 02 16 74 a4 49 1b 99 e7 9e 46 1a a6 f8 1b 2e 50 6a e8 82 d0 01 48 d8 c9 dc 01 c1 f4 f7 c3 22 b3 40 f4 41 74 82 7c d2 bd 6b 09 48 20 a4 73 11 c8 8e d8 91 70 d3 b6 21 55 08 fb 2a 14 a3 e4 06 49 d8 c0 06 30 60 e1 05 c7 98 dd 72 df fb bd 04 03 a1 23 b8 dc 4c 11 1b fb ce 04 2b 30 ba 26 61 54 93 0e f7 d1 64 dd b9 52 af 21 89 11 b8 d8 6f 87 69 d5 6c 6d b7 9a 01 07 70 73 f6 53 9b b5 f8 9b 00 04 c1 20 91 22 76 e7 0e 77 d2 c8 95 21 a4 08 8f b2 fa f5 94 a0 24 a9 09 58 54 c0 d4 49 1b 77 07 16 6b b5 4f 92 ed b1 d1 0a 7e ce 9d 3b 30 98 db 6d 87 bc f3 e9 8b 2e dd 00 a8 b3 83 30 cf f2 fb 98 1f df fd Data Ascii: qC 7&dm\@"d>c""<lnetIF.PjH"@At\|kH sp!U*I0`r#L+0&aTdR!oilmpsS "vw!$XTIwkO~;0m.0
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: 24 70 06 fb fa 63 21 f4 f6 93 29 e6 46 86 b4 72 4f 56 e2 8d 20 cc 99 fc 3b 98 fa 61 77 51 92 48 76 36 4f 53 74 69 03 74 c8 cb 6d b8 80 35 71 b8 26 37 3f f1 dc fa e2 3f 2c 31 0e 2d 84 57 bc 48 33 05 6c 21 29 3b 10 0a 46 f1 e9 bc c4 7b c6 20 db 88 cb b5 7b f2 4a 55 79 2e c1 f9 af ca b8 b6 c2 41 76 20 ed 3b 4f e4 71 76 d2 60 18 fe 7f 54 ab aa 3b fe de fe 6b 5f ef 36 d7 2a 41 48 4e ad b5 11 24 7c c9 c5 ff 00 28 1f ea 11 9b 55 d1 82 bc 3b a5 4e 87 90 04 27 79 1c 1f ca 7d b1 ed 6a 50 07 e2 db aa cb fc c0 eb 3f 44 e9 45 54 ea 14 d8 99 8f 52 7f 5c e1 33 6d 24 c7 bf ba b0 a8 1c 5a 49 c2 b4 ec 57 27 da 28 71 0b 52 54 90 02 8c f2 26 20 4f eb 6c 2c fb 61 8d 62 1d e6 11 fb c6 b5 cd 3b ab 6a d7 99 ea 59 09 22 a1 44 0e 50 a5 92 01 da 40 1e fb 63 2a bd ab 9b 90 0c 23 9a Data Ascii: $pc!)FrOV ;awQHv6OStitm5q&7??,1-WH3l!);F{ {JUy.Av ;Oqv`T;k_6AHN$\|(U;N'y}jP?DETR\3m$ZIW'(qRT& Ol,ab;jY"DP@c#
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: e6 89 d5 27 6f 7e f6 5e 46 da ec b7 2b ed 1f 80 aa a0 87 af c5 db bd d2 e1 5c e0 48 09 4b ab 79 6e 2e 0c 82 a7 96 4c 49 3b 0c 7c c3 b5 7d a2 75 c7 13 22 d6 96 ba 8e 90 08 9d 3b f3 59 2e bb 79 70 05 90 4a e9 6e 96 64 eb 65 ae 81 8a db 45 92 e1 99 ae 76 8a c3 77 6a f3 56 45 ba cd 49 58 cb 7f c3 5a 02 fc f5 b1 e6 d0 11 c2 94 15 db 0c f0 6e ca d8 f1 ab 4e fb b4 9a 8d c1 71 ff 00 89 99 a6 59 02 0c 98 cf 22 8b 4d ce a9 f1 78 4f 25 db 99 7e ef 4f 9e ad c6 b6 f7 4f 6e b4 de 90 84 9a 8b 92 ed e6 e3 52 da da 10 91 ff 00 76 a5 17 09 8d b7 48 83 c6 3e 91 c0 fb 37 c1 38 4d 1a 76 fc 3a 97 77 6d 4e 61 ba 1b 89 de 08 13 9f 34 27 d2 7c 81 de 1f b2 5e ae cc 96 bb 45 4b b4 ce d6 3b 7d 5a 98 72 9d 55 4e 5a 51 4a 1b 49 05 07 42 5b 64 84 01 db 1e ba 9f 71 4e 41 a2 2a 0d 84 e4 Data Ascii: 'o~^F+\HKyn.LI;\|}u";Y.ypJndeEvwjVEIXZnNqY"MxO%~OOnRvH>78Mv:wmNa4'\|^EK;}ZrUNZQJIB[dqNA*
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: 79 a5 4a cc e7 0e 38 84 05 f8 80 c2 41 90 20 77 9f 9e 2a 5b f0 8f ba 22 d5 4b 7b ab ae 75 b1 0a 20 1e 65 4a 81 06 76 8d b0 ad 4a 40 4c 61 72 68 45 c5 9a 0d 2a 79 05 4a 56 fb e9 00 6e 26 36 f9 e0 02 99 d5 ba e4 51 9b cd 3d 74 68 42 34 0e 04 73 1b 10 44 7a 1c 05 cc 2d 3a 5a 57 21 35 d6 1a 2a 97 92 ea 1c 43 4b 99 09 4f 22 77 d2 7d 77 c4 1a 85 b2 1c 54 82 47 38 50 dd b2 bc 13 fc 34 97 55 20 a5 3a 78 1e b2 36 c5 dd 50 16 00 0c 14 40 09 1a a2 4a 85 fb ba a1 23 49 61 c8 ed e5 1e a6 64 47 ae 16 35 aa 4c 4e 12 dd dc b8 93 82 93 ef 94 0e 21 d8 14 a4 02 24 92 9e e4 ef f4 c3 54 aa 8c ea 76 55 da d8 c0 ca 18 72 e2 2a 18 53 c4 24 82 09 8d 1b cc 73 31 87 1b 5c 37 1f aa be 87 74 41 93 6f 65 95 16 5d 69 21 27 b2 92 9d d3 04 7a 6f 89 ef 89 38 20 7d d7 69 77 45 5d e6 bc 9f Data Ascii: yJ8A w["K{u eJvJ@LarhEyJVn&6Q=thB4sDz-:ZW!5CKO"w}wTG8P4U :x6P@J#IadG5LN!$TvUrS$s1\7tAoe]i!'zo8 }iwE]
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: d8 40 09 d0 61 41 45 03 62 00 c2 ce a0 fa 81 da 77 47 6d 6a 74 81 2f 5a 6f 9d 44 e9 8d ad 46 87 34 dd 69 50 5b 48 45 21 0d aa b1 f7 6a 4f 95 2d ba d8 fb 89 d4 7e 58 5f fd ba ef 6d 1b 22 8b fa 0c c3 9d 01 1c b6 52 65 4c c8 1a 6d 17 6a 9b 73 4e b3 e3 34 a6 d4 aa 3a 36 92 13 a9 2a dc 1d c8 d3 03 04 16 57 a3 21 a4 15 57 df d1 23 c2 e9 1e 5f e5 1e 66 ef 91 ec 6d 78 55 d7 0b 9d c5 a6 7c a9 79 90 1e 41 dc 80 95 3a 79 df fa e3 9d 61 7e f1 aa 0a 8f ce db b4 8d 47 0b 55 45 46 48 ab 26 be 8f c4 a5 5a e1 41 2f 15 21 69 ee 9d 81 de 49 c0 bf db 2f 1c e0 5d 2a 5f 7d 62 ee 92 3d 3d f5 f9 a4 3c f3 d4 9b 85 9e 8d a6 d9 a8 75 14 8c 90 5b 75 50 a4 98 ef 26 7c a2 07 7e 30 f5 3e 13 70 e8 d5 96 94 95 5e 27 6f 4d c0 53 38 f7 0a b7 7f e2 37 3a 37 44 1b b5 aa df 73 a5 12 9a a5 97 Data Ascii: @aAEbwGmjt/ZoDF4iP[HE!jO-~X_m"ReLmjsN4:6W!W#_fmxU\|yA:ya~GUEFH&ZA/!iI/]_}b==<u[uP&\|~0>p^'oMS87:7Ds
2024-07-04 20:55:20 UTC	16384	IN	Data Raw: 2a 7d 5f 57 69 1b 6d 4e 53 2d 28 85 28 8d 45 3b e9 99 20 7a 6f 82 db f0 6d 70 74 11 b7 24 23 77 23 71 29 45 3d 78 a2 15 4a fb 4d 43 65 33 ba 35 27 d7 7d a7 98 07 f1 c6 81 e0 45 a0 11 8e a8 2e bd 7c 80 32 47 d1 6b cc 3d 60 b5 d6 d2 6a 60 a9 f5 3a de 86 9a 49 f2 b6 08 80 a3 07 98 c0 0f 0f 60 71 00 49 1e 69 81 75 a5 9a 86 4f bf 9a a1 da cd f7 aa 5b 8a eb 92 b4 a1 ad 6a 52 10 09 24 0d 52 37 f5 c6 ad 0e 0f 6d 51 ba 9c d9 8f 7c d2 55 38 c3 e9 12 1b fc a5 dc d7 d5 dc c7 e3 38 b5 dc 16 d5 03 a8 53 2b d4 b2 0c 14 e9 00 89 fb bc 60 37 3d 9e b6 34 8b 18 00 71 ca 10 e3 8f a9 e1 76 4f cd 79 0d f1 15 74 16 dc f3 49 7a b6 dc 9c a4 af 35 06 ad 6e d3 54 14 87 b4 b8 08 0e 25 0a f3 0d cf 38 63 82 8a 9c 3d ee b5 68 2e 15 39 ee 02 3d 2a ae a8 75 38 fc 4b d2 2f 82 6f 8b 0b 3d Data Ascii: }_WimNS-((E; zompt$#w#q)E=xJMCe35'}E.\|2Gk=`j`:I`qIiuO[jR$R7mQ\|U88S+`7=4qvOytIz5nT%8c=h.9=u8K/o=
2024-07-04 20:55:20 UTC	8673	IN	Data Raw: a7 bc 24 a8 a5 c5 25 1e 63 a4 13 04 ff 00 9c 7a 6a 55 b5 37 7e 4b 3d e2 0a d6 da 1b 53 80 f2 13 11 e9 13 f9 ed 89 6d 47 e2 7e 10 83 dd f9 a2 6b 54 69 4a 07 97 83 1f 2c 37 4d ed 2d 19 dd 51 f4 c9 c0 43 9c f1 94 a3 c9 e2 60 18 1b 77 db 0d 06 b4 85 4d 10 3c fa ff 00 84 34 87 02 f7 04 71 be fd c1 88 c7 43 46 09 fe 65 10 34 9d c9 85 31 a7 1f 6e 08 79 63 70 20 2b 60 3e 5f 4c 05 cc 69 33 bc 2b 8a 6d 1c 96 f5 d6 bb a4 cb 8a 02 09 8e 01 8e d0 3e b8 82 d8 2d 81 85 47 8d 27 01 06 ad b8 ea 42 9b 41 f3 6c 63 7e 40 f5 ef fe f1 7d b2 10 ce 04 f3 49 37 17 df 74 24 24 49 49 ec 4c c4 ed 1e 98 61 84 e1 c5 24 ed 6e 74 c6 11 3b 4b 6a 79 a0 a5 a3 4a b8 dc 7e bd b9 f5 c5 cb cf 2c 22 b2 4b 20 6e a4 d4 5a d6 e1 30 04 41 d8 0f 53 fa fc 31 7d 4d e6 65 71 a4 5d 24 ce 7c b0 b5 d3 5a Data Ascii: $%czjU7~K=SmG~kTiJ,7M-QC`wM<4qCFe41nycp +`>_Li3+m>-G'BAlc~@}I7t$$IILa$nt;KjyJ~,"K nZ0AS1}Meq]$\|Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49795	104.18.7.90	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	545	OUT	GET /public/img/gottman_checkup_badge.png HTTP/1.1 Host: gottmanconnect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=BaV.hQ4J3icq_9XUm03aupCQcKmCUm0ghyzgGbFXaQU-1720126518-1.0.1.1-PcGYBYd6LIM4zaFnlCAaKauUPZ8DT7dZm7tyi.uq4S3KkkYbDddnTnLvhHL.oA_Ua.TizzZaf2m8LKJJGSlWRg
2024-07-04 20:55:20 UTC	377	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:20 GMT Content-Type: image/png Content-Length: 18309 Connection: close Last-Modified: Thu, 30 Jul 2020 09:45:47 GMT ETag: "4785-5aba5896b999f" Cache-Control: public, max-age=43200 Expires: Fri, 05 Jul 2024 08:55:20 GMT CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Server: cloudflare CF-RAY: 89e204023d748ce9-EWR
2024-07-04 20:55:20 UTC	992	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 95 08 03 00 00 00 59 e0 b0 a4 00 00 02 fd 50 4c 54 45 4c 69 71 ff ff ff 7f 7f 7f aa aa aa bf bf bf 99 99 99 aa aa aa 91 91 91 a1 a1 a1 99 99 99 a9 a9 a9 9c 9c 9c a3 a3 a3 aa aa aa 9f 9f 9f a5 a5 a5 a0 a0 a0 a5 a5 a5 9d 9d 9d a2 a2 a2 a6 a6 a6 a3 a3 a3 9d 9d 9d a3 a3 a3 a0 a0 a0 a4 a4 a4 9f 9f 9f 9d 9d 9d a0 a0 a0 9f 9f 9f 9c 9c 9c a1 a1 a1 9e 9e 9e a2 a2 a2 a0 a0 a0 9d 9d 9d a1 a1 a1 9c 9c 9c 95 95 95 a1 a1 a1 ab ab ab c3 c3 c3 ce ce ce d9 d9 d9 dd dd dd dd dd dd bb bb bb ef ef ef f7 f7 f7 fa fa fa fc fc fc fd fd fd ff ff ff fd fd fd fb fb fb fa fa fa f4 f4 f4 e9 e9 e9 f0 f0 f0 ff ff ff c9 c9 c9 a1 a1 a1 fd fd fd ec ec ec a0 a0 a0 f3 f3 f3 e2 e2 e2 ae ae ae db de de 9f 9f 9f f3 f3 f3 f2 Data Ascii: PNGIHDRYPLTELiq
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d7 4b dc 9f 4c d7 ff 99 ff ff ff ff ff ff ff ff ff ff ff ff 48 49 ce 93 f8 89 b4 ef 6f 5c 50 7b 64 e3 52 21 eb fc 62 00 00 43 38 49 44 41 54 78 01 ec d2 b5 01 02 01 10 00 b0 77 df 7f dd 97 3b 1c 2a ac 4a 66 48 f1 77 00 00 00 00 00 00 00 00 00 94 17 15 bc 52 a6 a2 fc c5 bd 2a d4 a1 81 27 75 ba 54 fc de be ea 90 ed da d0 3d 81 36 44 c5 cb c2 e2 53 d7 7c d1 ae 1f d2 f8 00 86 d4 47 c5 cb c2 f2 f3 7e 99 af ef 8f 76 d3 61 3e 5b 60 37 9f 4d 87 a8 d8 47 c2 2c 58 7e d2 af ae 37 f6 cc 02 49 6e 25 08 a2 21 f3 b0 78 c4 b8 1a 5c 66 1a 33 33 dd ff 2c bf aa 25 b3 a5 21 ed 27 e7 3b 42 c5 8b cc ae 6a b6 8f e5 63 f1 da 9d 4e a7 db 2b 01 Data Ascii: KLHIo\P{dR!bC8IDATxw;JfHwR'uT=6DS\|G~va>[`7MG,X~7In%!x\f33,%!';BjcN+
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: 10 10 01 41 40 04 04 01 11 10 04 44 40 10 10 01 c9 11 10 01 41 40 04 04 01 11 10 04 44 40 10 10 01 41 40 04 04 01 11 10 04 44 40 10 90 63 d9 39 f7 b6 34 72 b7 8f bf 30 5e 07 43 45 2b 28 10 03 a8 78 16 51 02 24 43 97 83 5b 5b b5 c6 b3 14 2a 28 1e 50 40 04 14 ab e0 da c3 da 95 a5 6c 4f cf 9b 79 06 85 61 66 c0 15 7b b9 bf d2 bd f6 fe cb 99 cc 24 df 24 9f b9 73 e7 20 ff 5a 00 e5 8c e2 51 8b 52 a9 6c 6d 7b dc ae 52 ff 4f 6b f9 9f fd 07 60 47 a7 52 a3 d5 81 ae ae 2e a8 37 18 bb 7b da e5 b2 9f d9 98 5e 93 c4 fa fa 99 7b 54 69 60 d0 d4 3b 74 ff 62 87 7b 4d 23 a3 ff 5c ad cc 63 26 93 e5 56 df 30 ae 30 99 3a e5 3f 27 80 72 c5 84 c1 0a 21 b2 d9 ed 76 07 86 90 b0 4e e5 13 f3 4f 0c 60 df 2f 76 97 d8 dc 1e ef e4 a3 a1 46 3d fb af 4f ad ba a9 fb 17 ab d0 39 f4 bd ff 5c Data Ascii: A@D@A@D@A@D@c94r0^CE+(xQ$C[[*(P@lOyaf{$$s ZQRlm{ROk`GR.7{^{Ti`;tb{M#\c&V00:?'r!vNO`/vF=O9\
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: d4 1a 9e 69 69 6b fb 34 a9 09 50 a4 7b 7b d3 fd bd 4e a3 f1 17 00 dc 46 ce 5a e4 d9 79 a3 31 ec 02 ec 31 77 35 bb 51 02 d0 dd 55 50 cc 02 90 ee 5e 6a 6b 6b 09 b9 31 9a eb 34 c7 d3 d0 65 fc bc d8 b6 b3 e0 0d 12 3c cf 54 3b ed c0 8d 88 2e 72 b4 d8 d6 d6 f3 da 1b 20 c8 30 32 ce 87 ab 1c 14 17 cb 50 5f 78 fd a5 ed cb 42 44 87 69 a0 25 75 2f 00 93 21 82 fc 59 be c7 4c 73 14 e9 4f 7f fb d4 b6 a3 9c d5 02 a4 3f 4a d6 05 70 fa 46 d3 66 59 13 e6 34 a9 af 3d a0 d2 68 f4 f8 80 55 cb 55 f5 f4 fa e9 b1 63 e8 de e2 47 c4 96 65 44 59 ff fa a7 b6 b6 67 13 1e 17 02 c6 33 5e 51 0f 0b 67 ce 33 0e 9c ee de 6e 6b bb f8 e8 71 11 ac c9 0b 56 66 29 98 9b e1 52 16 37 57 7c 04 45 b7 53 55 00 d7 c7 be da 41 f8 e4 a0 ad 6d 7b e2 d8 4e 40 e6 77 be 3a af 01 9e 2c 3f 99 fb 05 19 c7 fa Data Ascii: iik4P{{NFZy11w5QUP^jkk14e<T;.r 02P_xBDi%u/!YLsO?JpFfY4=hUUcGeDYg3^Qg3nkqVf)R7W\|ESUAm{N@w:,?
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: a6 1c 97 f6 97 0e 71 24 dd 0d 20 32 f4 89 01 ac 70 cb 03 08 2e 2a ee d1 6c 16 3b a5 ed 84 10 c0 c4 4b b1 fc 09 28 ed 65 81 07 d4 3e 3d ad 9a 53 cb 12 ec 0b 59 f8 ec 07 03 7c e4 c9 db 90 bf 4b 6b 91 02 58 a3 49 5d d5 74 3b 80 67 01 aa 93 06 d7 6a a5 0d 69 98 32 80 70 65 58 94 a8 88 a2 f2 f8 9c d5 20 6c 3c 4b d5 df 8a 83 b3 e2 38 68 8a 03 70 a8 fe 10 fc 4d 9a 45 de 83 82 f1 e6 02 d0 bc 00 24 1e 70 d0 38 c7 5b da 07 50 e4 a6 99 de 6b 51 a0 46 fb d5 29 4a f4 34 00 20 7c 77 29 01 30 c2 48 00 dc ae 37 ef 89 25 db 17 8f 31 15 00 a8 7f d5 30 80 24 f1 61 b8 6a c9 ac 65 f1 90 25 b4 c0 2b 39 48 c0 43 e9 0c 5a 95 81 81 11 29 80 e2 12 6f 34 dd 0d e0 81 9d fa 9f 48 df 8e 47 61 38 5f 01 70 76 e0 16 00 c7 b7 59 8c b5 9b 16 95 ba 1e 80 27 72 29 80 f5 3d 20 49 ec 48 5f df Data Ascii: q$ 2p.*l;K(e>=SY\|KkXI]t;gji2peX l<K8hpME$p8[PkQF)J4 \|w)0H7%10$aje%+9HCZ)o4HGa8_pvY'r)= IH_
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: 07 a0 85 07 03 70 fc ad bd 7a 06 20 17 a6 b6 75 95 30 b5 c7 77 3d d4 f1 00 56 34 25 7a c4 9a ac a0 01 00 af 0a 08 cc 66 45 a7 cf 0d c4 b1 2f bf 13 40 d9 a3 00 0d ee 88 20 8b 22 8e e5 fb 03 18 bc 10 3e 3b 9a c1 c8 d9 de 7c 00 ca 54 5c 83 02 63 3c 25 ee da be 02 70 1c 99 aa 00 ca fa fd 08 6b ce ab 9c 0e 4d 38 a8 3b 5e 1d 95 c0 91 5c 78 22 fa 5d fb 77 00 98 cc 40 7c 28 e8 b4 ec 11 0b 6c 0f 08 a0 f9 13 5b 3d 7f 9b da b3 62 9f 72 b7 ca df d9 31 b1 7d ee 90 02 c8 11 46 32 52 4d a2 d3 30 ac 49 0c 20 7f fc 9f ba d6 ab 15 57 6f f9 09 d2 6c c8 ee 06 90 c9 20 72 7a 29 28 71 16 a0 c2 d0 fd 67 c1 2c d1 9a 52 d5 5c 3e db 89 fe 62 bc 09 01 94 8d ce 02 4c 0c ad a3 55 71 e6 ec 76 98 80 50 76 ca 57 05 d0 3c 62 a0 c0 d9 bb 6b be 71 88 5b b3 2e ca 2a 63 15 12 94 76 f4 f5 ba Data Ascii: pz u0w=V4%zfE/@ ">;\|T\c<%pkM8;^\x"]w@\|(l[=br1}F2RM0I Wol rz)(qg,R\>bLUqvPvW<bkq[.*cv
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: de 86 86 86 1e f3 83 e7 14 aa 2e 26 6e 32 99 d2 15 dc 50 26 53 9c f9 76 98 c5 64 a2 d0 b5 64 a7 2c 65 97 32 5a 2c 0c ba 3d 31 c1 73 43 71 ca 7e ed 34 d9 cf 2f 10 34 4a 9e 69 a1 ae 91 ae 38 4e 97 72 61 00 f1 fd 4d 38 e5 bf 0c c0 9a 6a 02 00 a5 55 03 b0 a6 1a 80 35 d5 00 ac 01 58 53 0d c0 9a d4 a2 1a 80 35 d5 00 ac a9 06 e0 fd bb 03 b0 a6 9a 1c cb ff 6e e4 ef 0a c0 9a 6a b2 6d 3f d3 69 ee 0a c0 9a 6a b2 33 0c 83 08 03 b0 a6 9a c8 07 b0 a6 9a 6a 00 d6 54 03 d0 4e 99 32 fa 03 47 dd c2 42 9d e3 f0 48 13 34 22 55 08 9c 59 bf 39 eb 4b 13 e7 ac 06 a0 31 3a db fb f4 d1 d8 ab 8e b5 a1 e5 48 64 f9 62 47 a8 01 5d 77 3e c5 a0 df 5d 4c 54 bf ab 15 9d b5 62 67 9b 27 ba c4 9f 51 72 20 ac 01 c8 f4 99 73 67 1b ad 3e 81 65 05 9e e7 ce c5 f3 02 cb ba c2 a3 ab b9 3a 83 5d 12 Data Ascii: .&n2P&Svdd,e2Z,=1sCq~4/4Ji8NraM8jU5XS5njm?ij3jTN2GBH4"UY9K1:HdbG]w>]LTbg'Qr sg>e:]
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: 2d ca db 4f 20 80 c1 39 27 04 b4 8e 03 85 21 93 1f 31 10 0d 60 fc 8d 0b d2 39 95 97 eb ac 18 32 4f 2c 0a 01 74 00 7f c2 06 c4 3f c2 00 44 4d b8 2f bc 4e 91 07 e0 de 28 d4 fa 70 41 76 49 1f 1d 0b 30 b3 e4 20 1a c0 ba 16 1c a9 5f db 91 4c e9 07 61 1c 31 9a 55 06 a0 e3 18 e2 df c6 ae 11 91 08 a0 e1 8c 15 0f 8e 19 88 03 90 5a c2 61 62 46 7e a6 30 fb 1e f1 1c 4f 8e 21 18 c0 f4 1c ee d1 8d 44 e5 e7 46 08 9a 03 df 0b a3 12 00 31 7f c2 a7 5d 06 11 09 a0 71 31 29 1e 3c 78 44 1c 80 b3 83 ac 58 4a 7f 4d 23 f9 ca 42 5f 89 5d 8d 12 0c e0 9f 7e 41 74 d6 3e a1 a4 db b8 06 ce 66 4c 0a 00 dc 2b c5 3f 06 91 09 20 5a 10 73 99 6f a9 23 0e c0 2e 3c a9 32 a2 24 38 c7 b7 c4 62 12 e6 0f 08 06 f0 23 1e dc 9f 5a 90 7c 99 ce 44 0b ec 46 5e 3e 80 d9 66 69 fe 48 00 50 2f 86 0c 2e 32 Data Ascii: -O 9'!1`92O,t?DM/N(pAvI0 _La1UZabF~0O!DF1]q1)<xDXJM#B_]~At>fL+? Zso#.<2$8b#Z\|DF^>fiHP/.2
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: 06 20 8c 3f ca 1a 7b 66 1c fe e1 ff ea b9 9b d7 32 3b 33 5f ca 75 f1 99 38 d3 ff 70 ae 11 0e 20 14 3e 37 94 55 1d 80 c3 11 e8 ad e5 6f 16 40 18 ff 96 c9 34 e7 86 7f 3a 1c a4 3d 09 21 1f 40 d8 09 85 8b ec aa 0e c0 05 58 8e 35 69 be 59 00 b9 96 af df 95 f7 e3 55 60 93 db 7c 2c 17 40 45 63 a3 ae 24 ad 5a 00 67 3b 60 d9 66 c1 ae 36 00 f3 e2 ce 44 5c db eb 1b 05 90 9b ac f4 b1 0d 87 1f a6 3f dd 1f 0c f2 00 14 14 cd 7b 15 7c ea 05 30 f5 ea be 48 cc 92 5a 97 e4 7b 74 cc cd 3e 09 a9 34 5c 63 7a 5a 21 3c 46 0a 94 3c 00 03 7d 8a 1e d8 03 80 56 15 02 18 c7 fb 16 8e c5 d5 06 a0 69 15 9c 0d 04 6f f1 b5 cc a2 82 a1 24 9e 8f 6e 94 05 20 fb 4a 83 e4 6b 11 66 94 8e 33 2a 04 90 da 76 89 26 9a 33 6a 03 30 fd 81 c6 eb b1 7e 01 80 48 d3 89 87 c8 cd 0f 90 a4 72 90 df 4f 94 e4 Data Ascii: ?{f2;3_u8p >7Uo@4:=!@X5iYU`\|,@Ec$Zg;`f6D\?{\|0HZ{t>4\czZ!<F<}Vio$n Jkf3*v&3j0~HrO
2024-07-04 20:55:20 UTC	1369	IN	Data Raw: 06 db 9c f7 24 5f dd 9c 61 fc 53 31 49 5d 8c da 01 44 26 dd 5b 4c 20 ef 8d f5 6b 2a 01 14 3c 5c 5a e3 70 96 bc d5 99 d0 af 02 70 fb a1 4d be 2c df a7 69 c9 cb 15 9d 6d 76 f7 d9 2b 39 3b 58 6f 29 3a 0b e7 e2 e8 a7 01 a4 56 80 7a ae ed 29 25 f5 c0 84 73 0d ae 58 2b 23 68 6a da 0a e3 38 ea 9b 33 21 d5 03 88 a2 a1 08 4f 83 f8 c8 e6 ca a1 89 29 77 9b 32 af 7f f2 14 19 5d d6 19 d0 af 02 90 fe 6b 43 be 3a 76 d1 77 7a be 5d ac 5b 1c bf bc 5a c8 7f e7 ac f1 bf 79 27 3e 42 68 cd 99 d0 cf 03 88 0c 8f dc 70 c7 96 e1 4a c4 33 89 16 01 df d0 db ac dd 33 5c 41 c8 1e b4 26 4e 5a 68 5c 6f 9c 23 19 a4 6e 00 41 26 ed 4b b6 b4 af 57 f2 d3 4c 6e 78 ef a8 cf 14 4c 07 2d a9 a3 ec bd 50 ec a5 4b a0 41 42 cb 8a 05 fd 3a 00 39 56 be dc fd 95 52 b5 ff d7 25 67 1b 67 da e9 6c c9 d9 Data Ascii: $_aS1I]D&[L k*<\ZppM,imv+9;Xo):Vz)%sX+#hj83!O)w2]kC:vwz][Zy'>BhpJ33\A&NZh\o#nA&KWLnxL-PKAB:9VR%ggl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49792	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	524	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDcvNTQvNThkZDVmYzQtZGViMi00NDUxLWE0NGItZDg0NjEzZWZlMTE3L0dyZWVuc3BhY2UgTG9nby5qcGVnIl1d/Greenspace%20Logo.jpeg?sha=28914c691fff0ece HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	581	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:20 GMT Content-Type: image/jpeg Content-Length: 11672 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4917928 X-Request-Id: 74695652-0431-4727-b8e7-61a82a858e05 Content-Disposition: filename="Greenspace Logo.jpeg" X-Content-Digest: d56793f396dd5a6d29e4f7a444766f0c21b4a39d ETag: "54e4ed12a654abda9b2903266ce4a7b4f823fc11" X-Runtime: 0.288143 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:20 UTC	11672	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49793	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	508	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDgvMjMvZDVhMTFkYTktMDMyZC00NWJjLWE3ODctMmM1ZmM2NjJjMzYxL1RISSBMb2dvLmpwZWciXV0/THI%20Logo.jpeg?sha=c2807b442533c69c HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:20 UTC	573	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:20 GMT Content-Type: image/jpeg Content-Length: 4050 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4917910 X-Request-Id: 084cf9c5-7806-4b4f-9b82-fa551fb8b6bf Content-Disposition: filename="THI Logo.jpeg" X-Content-Digest: 048d433b62505e6cad6d33313c0948102df8ceb0 ETag: "061c74d1763b72117b9a06bf2affb8301ec0f2ba" X-Runtime: 0.256871 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:20 UTC	4050	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49794	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	434	OUT	GET /2023/06/21/18/45/50/4760ed29-ec7e-461c-88b6-d85cc5eb9f2b/Clinic%20Sites%20PNG.png HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:21 UTC	693	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 6940 Connection: close Last-Modified: Wed, 21 Jun 2023 18:45:51 GMT x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"Clinic+Sites+PNG.png"} x-amz-version-id: q78XrIpFonp8sM6fADKDi8ZTrMwutaex Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 04 Jul 2024 20:55:20 GMT ETag: "aee69ba3904fb1eb42293f1a65dc282b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: 4vvCs0oS1y8BuTfNNbic0CYElZfxBtpn1WW2ZA1OrO3WS9T1-EWAdA== Age: 1 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:21 UTC	6940	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 54 08 06 00 00 00 38 7b 0a 6d 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 07 74 49 4d 45 07 e4 05 0e 17 09 24 9d 96 e1 1a 00 00 1a 0b 49 44 41 54 78 da ed 9d 79 9c 5c 55 99 f7 bf a7 aa ba 3b e9 24 a4 03 04 12 42 16 b2 87 55 56 85 41 65 95 45 0c 88 cc 28 cc c8 a6 23 20 3a e3 e0 32 2e ef 3b 3a 8e 3a e3 32 8e a3 ce 3b 88 28 af 20 20 88 02 63 a2 c8 96 10 59 47 16 43 42 02 d9 77 12 b2 93 a4 b7 aa 3a bf f9 e3 39 95 ba 55 5d dd 5d dd e9 Data Ascii: PNGIHDR,T8{mgAMAa cHRMz&u0`:pQ<bKGDpHYs.#.#x?vtIME$IDATxy\U;$BUVAeE(# :2.;::2;( cYGCBw:9U]]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49796	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:20 UTC	522	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMDgvMjIvNDgvMTAvNTY1OWVjNzAtYTBiYS00OTQ2LWI4ODAtOGJiM2ZiN2ZhMjE3L1N1biBMaWZlIExvZ28uanBlZyJdXQ/Sun%20Life%20Logo.jpeg?sha=a80bd69ae9f8cb13 HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:21 UTC	579	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:21 GMT Content-Type: image/jpeg Content-Length: 13891 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 4917949 X-Request-Id: d8689190-73c5-4d93-a476-0a290bdbe88d Content-Disposition: filename="Sun Life Logo.jpeg" X-Content-Digest: e139f8773eda0c850c95949c687646d125ab7838 ETag: "92b038f5245d026acbf35361d9688c7ca2339eef" X-Runtime: 0.280220 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:21 UTC	11670	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c Data Ascii: JFIFExifII*+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
2024-07-04 20:55:21 UTC	2221	IN	Data Raw: 90 75 f4 48 4d b3 1f b8 c0 76 da 5e 2f bc 53 75 f7 8d 5d 2b b0 a8 35 de e4 a8 df 55 b8 45 58 ec 35 ad 47 37 cf ec 73 a2 28 7b ba cc 7a e2 0e b6 32 b3 48 5b 50 bb db a3 89 17 5e 49 13 c4 25 3b 06 c1 c1 df 2c e4 cd d3 73 9c 2b 8f e3 2f 9a a7 97 9e 39 a4 c7 bc 64 2e db 18 ca fb b8 36 c5 a3 36 ae 03 b1 16 dd be ef fb ae bf 78 f7 17 bf c7 2a c9 56 ae 63 ce 84 99 f4 8a 58 58 99 8d fc b0 03 39 19 d8 8d e3 8e 36 06 10 18 41 fb f7 81 10 b1 28 b1 cd fe 04 3a d3 97 fb 5e 63 bd a9 1d e9 a8 ec 5b a6 d7 66 da 76 3b c4 2d ab 93 e6 13 d7 f6 84 f7 54 d2 d3 bb 0a 25 38 88 1d f0 d9 cd 7d a9 a4 55 4d 58 d3 b4 75 83 b2 34 7a 04 3f d4 a1 f3 22 b6 f5 be 4b 46 ee 3e 3c 6c b8 d9 06 18 45 99 9d a6 6d 99 83 ae be 71 7f 06 1f 5e fd bf c7 dc a2 f1 dc 2b 29 8c cb da cc 57 cc 40 53 da Data Ascii: uHMv^/Su]+5UEX5G7s({z2H[P^I%;,s+/9d.66x*VcXX96A(:^c[fv;-T%8}UMXu4z?"KF><lEmq^+)W@S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49799	52.26.250.4	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:21 UTC	540	OUT	GET /df_media/W1siZiIsIjIwMjQvMDYvMDYvMTUvMzgvMTEvM2M2MGRiMWMtYTFmNi00NTgyLWE1NDMtZWQzNDNmNzhmMTIzL1VudGl0bGVkIGRlc2lnbiAoMTUpLnBuZyJdXQ/Untitled%20design%20%2815%29.png?sha=802242b28522858a HTTP/1.1 Host: livewiseasso3873.clinicsites.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:21 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:21 GMT Content-Type: image/png Content-Length: 14713 Connection: close Status: 200 OK Cache-Control: public, max-age=31536000 Age: 2438208 X-Request-Id: fca68d62-ad94-4eea-b4dd-1caff5cd1a50 Content-Disposition: filename="Untitled design (15).png" X-Content-Digest: e91adfd7e885a51b63e7aeb949b37b393be766e0 ETag: "aca5f3d5b7c8d273cd46ebb6c874e16260972191" X-Runtime: 0.292662 X-Content-Type-Options: nosniff X-Rack-Cache: fresh X-Powered-By: Phusion Passenger(R) 6.0.14 Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14
2024-07-04 20:55:21 UTC	3569	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 04 00 00 00 78 08 06 00 00 00 14 9f 8c 04 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 38 7b 49 44 41 54 78 da ed bd 79 98 5d e7 5d e7 f9 79 cf 76 f7 5b 55 b7 56 95 aa b4 2f 96 2d d9 96 2d 79 4b ec 6c d8 21 84 10 96 24 90 99 87 ad a1 09 d0 d0 3d dd d3 f3 f0 4c 0f 43 d3 0f 4f 13 02 01 c2 10 18 08 dd 0d 43 20 84 4e 6c b2 90 04 93 c5 b1 65 cb 96 e2 45 b6 f6 5d 55 2a d5 5e 77 5f ce bd 67 79 e7 8f 73 ce 5d 4a 55 92 bc 08 49 55 e7 ab e7 aa ee 72 96 f7 Data Ascii: PNGIHDRxgAMAa cHRMz&u0`:pQ<bKGDpHYs+8{IDATxy]]yv[UV/--yKl!$=LCOC NleE]U*^w_gys]JUIUr
2024-07-04 20:55:21 UTC	11144	IN	Data Raw: 89 67 2e 94 29 37 1c 96 eb bf d2 34 5a 76 8c b3 55 70 35 54 2d 6e 7e 84 84 70 03 21 a5 67 ac 0b 5e cb f5 50 a0 2d 80 a8 fd 05 8b 8b 95 be f9 a7 b5 a7 3d 08 be 77 b1 4c b9 e1 02 de b8 46 bb 22 c4 75 05 47 76 a6 39 b7 af d9 2a 0e 7f f9 38 17 1d 4a 6b 99 8e e3 0f 49 e3 46 23 f4 32 5c 47 2c d5 1a d1 2b 1e d2 fa 20 96 98 04 ae 94 d8 2e 34 6c 17 d3 92 54 2d 87 62 dd a1 50 77 28 37 5c cc 86 4b c9 72 28 99 0e a7 e7 aa fe be 82 99 fa c6 49 a1 3d 56 e1 74 b6 ce 74 c9 f2 9a bd 00 77 af 49 b0 a5 2f c6 44 b1 d1 3a ae a0 8d 1c 50 30 6d be 71 32 cf b9 ac 49 5c 53 88 47 54 62 ba 4a 97 a1 d0 15 55 49 18 2a 31 5d 21 a2 09 74 55 a0 88 d6 ba 4b 8d 7a 29 72 e8 38 77 21 ae 0b 42 42 78 13 58 5c 4c 54 b6 15 14 09 be 77 a5 f7 72 5c af 17 82 ed 4a 1c d7 0b 1d ce d5 6c 16 aa 36 05 Data Ascii: g.)74ZvUp5T-n~p!g^P-=wLF"uGv98JkIF#2\G,+ .4lT-bPw(7\Kr(I=VttwI/D:P0mq2I\SGTbJUI1]!tUKz)r8w!BBxX\LTwr\Jl6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49805	216.239.32.181	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:21 UTC	1243	OUT	POST /g/collect?v=2&tid=G-7KWN4PCCYC&gtm=45je4730v9100741783za200zb9186823250&_p=1720126515277&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=1060836916.1720126517&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1720126520&sct=1&seg=0&dl=https%3A%2F%2Flivewiseinc.com%2F&dt=Empowering%20Wellness%20in%20Pickering%3A%20Mental%20Health%20%26%20Therapy%20Services&en=page_view&_fv=1&_ss=1&_ee=1&tfd=9354&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://livewiseinc.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:22 UTC	449	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://livewiseinc.com Date: Thu, 04 Jul 2024 20:55:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49804	74.125.133.157	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:22 UTC	807	OUT	POST /g/collect?v=2&tid=G-7KWN4PCCYC&cid=1060836916.1720126517&gtm=45je4730v9100741783za200zb9186823250&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://livewiseinc.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:22 UTC	449	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://livewiseinc.com Date: Thu, 04 Jul 2024 20:55:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49806	142.250.185.194	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:22 UTC	944	OUT	GET /td/ga/rul?tid=G-7KWN4PCCYC&gacid=1060836916.1720126517&gtm=45je4730v9100741783za200zb9186823250&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=579395402 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:22 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 04-Jul-2024 21:10:22 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:22 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-04 20:55:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49807	142.250.185.194	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:23 UTC	1378	OUT	GET /td/rul/16526066952?random=1720126521927&cv=11&fst=1720126521927&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2F&hn=www.googleadservices.com&frm=0&tiba=Empowering%20Wellness%20in%20Pickering%3A%20Mental%20Health%20%26%20Therapy%20Services&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-04 20:55:23 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmCxI7-FJgVJaXKvhWvlz6PXSEbFF12QwS-Zz2X5IskPn7xdzQixAw4vbow; expires=Sat, 04-Jul-2026 20:55:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:23 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-04 20:55:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49808	216.58.206.34	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:23 UTC	1254	OUT	GET /pagead/viewthroughconversion/16526066952/?random=1720126521927&cv=11&fst=1720126521927&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2F&hn=www.googleadservices.com&frm=0&tiba=Empowering%20Wellness%20in%20Pickering%3A%20Mental%20Health%20%26%20Therapy%20Services&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-04 20:55:23 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkn0vK_HQFkC3ve5Q4f4ThneP4kdJEsL04qS_jWgxiBtDDRhZnZcLgq9UgQ; expires=Sat, 04-Jul-2026 20:55:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:23 UTC	379	IN	Data Raw: 61 35 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a58(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-04 20:55:23 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 61 2e 69 6e 64 65 78 4f 66 28 64 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 20 61 2e 69 6e 64 65 78 4f 66 28 64 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 Data Ascii: unction(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("Cr
2024-07-04 20:55:23 UTC	886	IN	Data Raw: 35 32 36 30 36 36 39 35 32 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 32 30 31 32 36 35 32 31 39 32 37 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 32 30 31 32 33 32 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 37 33 30 7a 38 39 31 38 32 33 36 34 37 38 39 7a 61 32 30 31 7a 62 39 31 38 32 33 36 34 37 38 39 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 74 61 67 5f 65 78 70 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 Data Ascii: 526066952/?random\x3d1720126521927\x26cv\x3d11\x26fst\x3d1720123200000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be4730z89182364789za201zb9182364789\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26tag_exp\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhtt
2024-07-04 20:55:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49810	142.250.185.196	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:24 UTC	1360	OUT	GET /pagead/1p-user-list/16526066952/?random=1720126521927&cv=11&fst=1720123200000&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2F&hn=www.googleadservices.com&frm=0&tiba=Empowering%20Wellness%20in%20Pickering%3A%20Mental%20Health%20%26%20Therapy%20Services&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL7QXNLz1e_1ALIki43oNL6L42E1u9yok0AoZ8IS74hdZx57rM&random=4097759590&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49811	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:25 UTC	1688	OUT	GET /df_media/W1siZiIsIjIwMjQvMDYvMTAvMTcvNDMvNTcvNzFjNmEzZTEtZDhjMS00ZmE2LTk2MGItMWI4ZTUyMjdhYmFmL0RlZW5hIEhha2lubSwgRC5DLiAoMTIpLnBuZyJdLFsicCIsInRodW1iIiwiNjR4Il1d?sha=54b88a30c58378ae HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=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--56968e23bbbced720d8e367d320a9f1560a16dac; _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0
2024-07-04 20:55:25 UTC	633	IN	HTTP/1.1 200 OK Age: 2019753 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Deena Hakinm, D.C. (12).png" Content-Length: 2599 Content-Type: image/png Date: Tue, 11 Jun 2024 11:52:52 GMT Etag: "dbb25ef8bf31f8177bf6eaa5773b7c573b6eeeeb" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 7cd6d92e13a8103013b677431ad7cbee3327eb0a X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 1de9a47b-4fb9-4349-94ee-1a4ca6901895 X-Runtime: 0.251542 Connection: close
2024-07-04 20:55:25 UTC	553	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e8 06 0a 11 2b 39 e2 af 9a ad 00 00 09 16 49 44 41 54 78 da ed 5a 5d 88 1d 49 15 fe 4e 55 f7 fd 49 b2 93 99 24 33 71 92 b0 cb b8 41 96 5d 14 56 12 c5 2c 08 fe a0 2f 3e 04 82 ab 21 2f 2e 8a 2e 3e 09 9a c7 c5 bf 27 09 28 b2 8f 46 c8 ab 20 8e 4f 4b 60 55 dc f8 b2 64 11 61 d4 7d 31 31 c6 9d 60 36 9b 64 7e 92 7b ef dc ee ae fa 7c a8 ea be dd f7 Data Ascii: PNGIHDR@@iqgAMAa cHRMz&u0`:pQ<bKGDpHYs+tIME+9IDATxZ]INUI$3qA]V,/>!/..>'(F OK`Uda}11`6d~{\|
2024-07-04 20:55:25 UTC	2046	IN	Data Raw: 79 d1 49 0c 8a 56 61 d4 6e d6 ba ad 06 c4 b9 98 85 80 dd 76 c3 5a 2b da d8 89 ed 47 23 42 60 ba d0 51 4b 87 dd f6 9e 30 ee ee 01 00 0a 40 cd 30 ee 46 41 d3 24 40 3c ba 29 35 46 f7 a4 03 7b f0 81 00 54 42 08 6d 3a bb 08 82 00 2c 40 0a 49 54 00 40 08 40 00 0a a5 38 89 05 f4 57 11 40 86 e8 b9 2d 00 44 64 64 23 45 04 dc 6f 3a 05 e1 34 14 50 20 81 00 6a 1c c8 07 24 48 8d 14 a7 23 01 a1 ef c9 a9 20 04 cc 16 74 af 44 9d 1e 58 e9 05 42 00 74 c3 d4 7b 4e 62 1b 70 6e 02 b4 f7 22 52 00 11 50 b9 be bc b7 51 7a 63 31 1a ca b1 0c 95 c2 ef 4c 2f 0a 40 8a 38 07 cc 1c 32 fb 0e 18 d0 6a 71 71 11 a7 4f 9f c6 f1 e3 c7 3f d5 6e b7 3f 2a 22 74 6d 51 9a cd e6 fa fc fc fc 1b 51 14 ad 5f bd 7a b5 d7 df 4a 0d 60 e2 3d 80 39 8c 09 88 d3 c0 d0 7b c6 4e 00 90 72 c0 00 17 78 17 90 d4 Data Ascii: yIVanvZ+G#B`QK0@0FA$@<)5F{TBm:,@IT@@8W@-Ddd#Eo:4P j$H# tDXBt{Nbpn"RPQzc1L/@82jqqO?n?*"tmQQ_zJ`=9{Nrx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49812	172.217.16.132	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:25 UTC	1125	OUT	GET /pagead/1p-user-list/16526066952/?random=1720126521927&cv=11&fst=1720123200000&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2F&hn=www.googleadservices.com&frm=0&tiba=Empowering%20Wellness%20in%20Pickering%3A%20Mental%20Health%20%26%20Therapy%20Services&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooL7QXNLz1e_1ALIki43oNL6L42E1u9yok0AoZ8IS74hdZx57rM&random=4097759590&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:25 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49813	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:26 UTC	1452	OUT	GET /df_media/W1siZiIsIjIwMjQvMDYvMTAvMTcvNDMvNTcvNzFjNmEzZTEtZDhjMS00ZmE2LTk2MGItMWI4ZTUyMjdhYmFmL0RlZW5hIEhha2lubSwgRC5DLiAoMTIpLnBuZyJdLFsicCIsInRodW1iIiwiNjR4Il1d?sha=54b88a30c58378ae HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=M0poZkRtOFNWeVhmQ0Q0a2t5bDlWaEFvTkIrakpmd1Q2TitBQVZVdmlJczB1WjJ2OXFTRTczaFdTdkNqZmlmV240SXJuQ0U5anFlbVN5cUhEV1QzRDMrQzdxN0RWbGtxNXk0ZGxrS0htemJOK29kNDlxdkZQdlVIcEhiTFVobUNrMHNZMjNUU1dFeENCbXBJTmVHWXlQTXNZVHNidTh5cEJPR3FpNTcrZjVBSUVnYWREeDZXWEM4MUd4Q25ZQlhWbjlVT3JrNDNhdHlqSlNCeDVvS29GU1NtS0pIZ05Ka1dLMDRUb3NGQkU4ZCtZcHBWT3pBVFczOE01cFhTb2tSMDhrZUJadllPU0U2OHVxbkF5NnNKc0RINW9yZ2t3b3lIb0hVeloyVjRzMWwzMmsrVVFZMktsU3B5aFBFWDlmNWViN1dXUFpuVHFmRGpMVyt3a3lwWVRuNUQ1ek5HVjcrbHNYS3pKaXlYYkNLYWdSMHh0bm5hR2l3NGhzYy9zbjlWVFhuODFnQm1YUUJKOWRYaCtZMk5nMmE3ZHBNeXVIZFBlaVB1RHlRNlE0d285OVpzeDIzdU5IVmtnN1crTzcxVS0tSGRDTjZOc01iVFVBbFkyWGd1NnA1UT09--56968e23bbbced720d8e367d320a9f1560a16dac; _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0
2024-07-04 20:55:26 UTC	633	IN	HTTP/1.1 200 OK Age: 2019754 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Deena Hakinm, D.C. (12).png" Content-Length: 2599 Content-Type: image/png Date: Tue, 11 Jun 2024 11:52:52 GMT Etag: "dbb25ef8bf31f8177bf6eaa5773b7c573b6eeeeb" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 7cd6d92e13a8103013b677431ad7cbee3327eb0a X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 1de9a47b-4fb9-4349-94ee-1a4ca6901895 X-Runtime: 0.251542 Connection: close
2024-07-04 20:55:26 UTC	553	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e8 06 0a 11 2b 39 e2 af 9a ad 00 00 09 16 49 44 41 54 78 da ed 5a 5d 88 1d 49 15 fe 4e 55 f7 fd 49 b2 93 99 24 33 71 92 b0 cb b8 41 96 5d 14 56 12 c5 2c 08 fe a0 2f 3e 04 82 ab 21 2f 2e 8a 2e 3e 09 9a c7 c5 bf 27 09 28 b2 8f 46 c8 ab 20 8e 4f 4b 60 55 dc f8 b2 64 11 61 d4 7d 31 31 c6 9d 60 36 9b 64 7e 92 7b ef dc ee ae fa 7c a8 ea be dd f7 Data Ascii: PNGIHDR@@iqgAMAa cHRMz&u0`:pQ<bKGDpHYs+tIME+9IDATxZ]INUI$3qA]V,/>!/..>'(F OK`Uda}11`6d~{\|
2024-07-04 20:55:26 UTC	2046	IN	Data Raw: 79 d1 49 0c 8a 56 61 d4 6e d6 ba ad 06 c4 b9 98 85 80 dd 76 c3 5a 2b da d8 89 ed 47 23 42 60 ba d0 51 4b 87 dd f6 9e 30 ee ee 01 00 0a 40 cd 30 ee 46 41 d3 24 40 3c ba 29 35 46 f7 a4 03 7b f0 81 00 54 42 08 6d 3a bb 08 82 00 2c 40 0a 49 54 00 40 08 40 00 0a a5 38 89 05 f4 57 11 40 86 e8 b9 2d 00 44 64 64 23 45 04 dc 6f 3a 05 e1 34 14 50 20 81 00 6a 1c c8 07 24 48 8d 14 a7 23 01 a1 ef c9 a9 20 04 cc 16 74 af 44 9d 1e 58 e9 05 42 00 74 c3 d4 7b 4e 62 1b 70 6e 02 b4 f7 22 52 00 11 50 b9 be bc b7 51 7a 63 31 1a ca b1 0c 95 c2 ef 4c 2f 0a 40 8a 38 07 cc 1c 32 fb 0e 18 d0 6a 71 71 11 a7 4f 9f c6 f1 e3 c7 3f d5 6e b7 3f 2a 22 74 6d 51 9a cd e6 fa fc fc fc 1b 51 14 ad 5f bd 7a b5 d7 df 4a 0d 60 e2 3d 80 39 8c 09 88 d3 c0 d0 7b c6 4e 00 90 72 c0 00 17 78 17 90 d4 Data Ascii: yIVanvZ+G#B`QK0@0FA$@<)5F{TBm:,@IT@@8W@-Ddd#Eo:4P j$H# tDXBt{Nbpn"RPQzc1L/@82jqqO?n?*"tmQQ_zJ`=9{Nrx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	64625	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:33 UTC	1574	OUT	GET /about HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _engage_session=M0poZkRtOFNWeVhmQ0Q0a2t5bDlWaEFvTkIrakpmd1Q2TitBQVZVdmlJczB1WjJ2OXFTRTczaFdTdkNqZmlmV240SXJuQ0U5anFlbVN5cUhEV1QzRDMrQzdxN0RWbGtxNXk0ZGxrS0htemJOK29kNDlxdkZQdlVIcEhiTFVobUNrMHNZMjNUU1dFeENCbXBJTmVHWXlQTXNZVHNidTh5cEJPR3FpNTcrZjVBSUVnYWREeDZXWEM4MUd4Q25ZQlhWbjlVT3JrNDNhdHlqSlNCeDVvS29GU1NtS0pIZ05Ka1dLMDRUb3NGQkU4ZCtZcHBWT3pBVFczOE01cFhTb2tSMDhrZUJadllPU0U2OHVxbkF5NnNKc0RINW9yZ2t3b3lIb0hVeloyVjRzMWwzMmsrVVFZMktsU3B5aFBFWDlmNWViN1dXUFpuVHFmRGpMVyt3a3lwWVRuNUQ1ek5HVjcrbHNYS3pKaXlYYkNLYWdSMHh0bm5hR2l3NGhzYy9zbjlWVFhuODFnQm1YUUJKOWRYaCtZMk5nMmE3ZHBNeXVIZFBlaVB1RHlRNlE0d285OVpzeDIzdU5IVmtnN1crTzcxVS0tSGRDTjZOc01iVFVBbFkyWGd1NnA1UT09--56968e23bbbced720d8e367d320a9f1560a16dac; _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0
2024-07-04 20:55:33 UTC	1175	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: must-revalidate, private, max-age=0 Content-Type: text/html; charset=utf-8 Date: Thu, 04 Jul 2024 20:55:33 GMT Etag: W/"8647d3859e3e6aa9b11da0042f8224cd" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Set-Cookie: _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; path=/; HttpOnly Status: 200 OK Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: miss
2024-07-04 20:55:33 UTC	155	IN	Data Raw: 58 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 62 62 66 38 33 62 35 36 2d 31 61 38 62 2d 34 63 38 33 2d 62 63 61 61 2d 30 38 36 38 30 37 66 32 35 32 65 63 0d 0a 58 2d 52 75 6e 74 69 6d 65 3a 20 30 2e 32 39 38 36 31 32 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: X-Request-Id: bbf83b56-1a8b-4c83-bcaa-086807f252ecX-Runtime: 0.298612X-Xss-Protection: 1; mode=blockConnection: closeTransfer-Encoding: chunked
2024-07-04 20:55:33 UTC	3558	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 69 76 65 57 69 73 65 20 41 73 73 6f 63 69 61 74 65 73 22 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 Data Ascii: 4000<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta content="IE=edge" http-equiv="X-UA-Compatible"/> <meta content="width=device-width, initial-scale=1.0" name="viewport"/> <meta content="LiveWise Associates" name="author"
2024-07-04 20:55:33 UTC	538	IN	Data Raw: 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2d 35 30 35 32 61 31 65 34 34 66 62 66 32 34 61 63 36 31 32 65 66 63 35 33 65 32 32 62 61 32 36 36 33 62 63 36 35 39 30 64 35 32 62 63 39 64 32 37 61 35 38 36 31 65 31 33 62 65 66 65 61 39 38 63 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 74 69 6e 79 6d 63 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 20 74 69 6e 79 6d 63 65 2e 75 74 69 6c 2e 58 48 52 2e 6f 6e 28 27 62 65 66 6f 72 65 53 65 6e 64 27 2c 20 73 65 74 75 70 54 69 6e 79 4d 43 45 48 65 61 64 65 72 73 29 3b 20 7d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 20 20 20 20 20 20 3c 73 63 72 69 Data Ascii: <script src="/assets/application-5052a1e44fbf24ac612efc53e22ba2663bc6590d52bc9d27a5861e13befea98c.js"></script> <script> if (typeof tinymce !== 'undefined') { tinymce.util.XHR.on('beforeSend', setupTinyMCEHeaders); } </script> <scri
2024-07-04 20:55:33 UTC	5930	IN	Data Raw: 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 20 20 20 20 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 2d 35 32 43 4a 30 4e 47 47 42 37 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 2d 37 4b 57 4e 34 50 43 43 59 43 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 47 54 4d 2d 50 52 39 42 34 50 56 58 27 29 3b 0a 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 0a 3c 2f 68 65 61 64 3e 0a 0a 20 20 3c 62 6f 64 79 0a 20 20 20 20 63 6c 61 73 73 3d 22 0a 20 20 20 20 20 20 62 6f 64 79 5f 70 61 67 65 5f 31 0a 20 Data Ascii: {dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-52CJ0NGGB7'); gtag('config', 'G-7KWN4PCCYC'); gtag('config', 'GTM-PR9B4PVX'); </script> </head> <body class=" body_page_1
2024-07-04 20:55:33 UTC	6364	IN	Data Raw: 69 76 3e 0a 0a 20 20 0a 20 20 3c 21 2d 2d 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 73 20 70 6f 73 2d 62 2d 31 20 70 6f 73 2d 6c 2d 31 22 3e 0a 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 6a 73 2d 70 6c 61 79 2d 76 69 64 65 6f 2d 62 75 74 74 6f 6e 20 70 2d 32 20 62 67 2d 6e 6f 6e 65 20 62 6f 72 64 65 72 2d 30 20 64 2d 6e 6f 6e 65 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 22 3e 0a 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 6a 73 2d 70 61 75 73 65 2d 76 69 64 65 6f 2d 62 75 74 74 6f 6e 20 70 2d 32 20 62 67 2d 6e 6f 6e 65 20 62 6f 72 64 65 72 2d 30 20 64 2d 6e 6f 6e 65 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 22 3e 0a 20 20 20 20 3c 2f 62 75 Data Ascii: iv> ...<div class="pos pos-b-1 pos-l-1"> <button class="js-play-video-button p-2 bg-none border-0 d-none" style="opacity: 0.5;"> </button> <button class="js-pause-video-button p-2 bg-none border-0 d-none" style="opacity: 0.5;"> </bu
2024-07-04 20:55:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 20:55:33 UTC	4096	IN	Data Raw: 34 30 30 30 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 72 2d 73 6d 2d 33 20 70 75 6c 6c 2d 73 6d 2d 6c 65 66 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 22 20 68 72 65 66 3d 22 2f 75 73 65 72 73 2f 73 68 61 77 6e 2d 6d 6f 68 61 6d 6d 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 32 74 36 6f 30 36 76 72 33 63 6d 34 30 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 32 30 32 34 2f 30 35 2f 32 39 2f 31 38 2f 32 35 2f 35 32 2f 38 61 65 62 66 39 64 64 2d 36 34 34 39 2d 34 35 61 30 2d 61 31 65 39 2d 66 39 37 61 36 34 33 39 35 36 37 38 2f 66 69 6c 65 22 20 61 6c 74 3d 22 46 69 6c 65 22 20 2f 3e 0a 3c 2f 61 Data Ascii: 4000 <div class="mr-sm-3 pull-sm-left"> <a style="display: block" href="/users/shawn-mohammed"> <img src="https://d2t6o06vr3cm40.cloudfront.net/2024/05/29/18/25/52/8aebf9dd-6449-45a0-a1e9-f97a64395678/file" alt="File" /></a
2024-07-04 20:55:33 UTC	10674	IN	Data Raw: 20 20 20 20 20 20 20 4d 72 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 75 67 75 73 74 69 6e 65 20 4a 61 74 6f 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4d 53 57 2c 20 52 53 57 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 33 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 20 6d 62 2d 30 22 3e 0a 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 22 3e 48 65 2f 48 69 6d 2f 48 69 73 3c 2f 6c 69 3e 0a 20 20 3c 2f 75 6c 3e 0a 0a 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d Data Ascii: Mr. Augustine Jatoe MSW, RSW </h3> <ul class="list-unstyled mb-0"> <li class="text-muted">He/Him/His</li> </ul></a> </div> </div> </div> <div id=
2024-07-04 20:55:33 UTC	1620	IN	Data Raw: 62 6c 6f 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 20 6a 73 2d 62 6c 6f 63 6b 2d 6f 70 61 63 69 74 79 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a 20 31 2e 30 3b 22 20 64 61 74 61 2d 62 6c 6f 63 6b 2d 6f 76 65 72 6c 61 79 3e 20 3c 2f 64 69 76 3e 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 2d 66 6c 65 78 22 3e 0a 0a 20 20 3c 64 69 76 0a 20 20 20 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 36 20 6a 73 2d 62 6c 6f 63 6b 2d 68 65 69 67 68 74 22 0a 20 20 20 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 68 65 69 67 68 74 3a 20 34 35 76 68 3b 22 0a 20 20 3e 0a 0a 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 63 6c 61 73 73 3d 22 62 67 2d 63 6f 76 65 72 20 70 6f 73 20 70 6f 73 2d 74 2d 30 20 70 6f 73 2d 6c 2d 30 20 70 6f 73 2d Data Ascii: block-background js-block-opacity" style="opacity: 1.0;" data-block-overlay> </div> <div class="row-flex"> <div class="col-sm-6 js-block-height" style="min-height: 45vh;" > <div class="bg-cover pos pos-t-0 pos-l-0 pos-
2024-07-04 20:55:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	64626	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:34 UTC	1671	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMTAvMDAvZThiODgyMTktMDkwNS00YjI0LTgxMTctNjRiNDcwNWExNGQ1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjbiJdXQ?sha=34644bba1454c484 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03
2024-07-04 20:55:34 UTC	625	IN	HTTP/1.1 200 OK Age: 1992379 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 9235 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:15 GMT Etag: "488996cc5c53b18309be066fe3eeb21ce4d7ed1f" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: f9226c3dae6b3f1037eeab02e0116cd1a5caebf3 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: dc8b26b0-439f-43d6-b948-f8717a52a405 X-Runtime: 0.344411 Connection: close
2024-07-04 20:55:34 UTC	561	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff e1 00 58 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 02 01 12 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 26 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 06 9c a0 03 00 04 00 00 00 01 00 00 09 ea 00 00 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e6 00 01 00 01 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFHH8Photoshop 3.08BIM8BIM%B~XExifMM*i&(ICC_PROFILEapplmntrRGB XYZ acspAPPLAPPL
2024-07-04 20:55:34 UTC	2372	IN	Data Raw: 30 00 32 00 32 58 59 5a 20 00 00 00 00 00 00 f6 d5 00 01 00 00 00 00 d3 2c 58 59 5a 20 00 00 00 00 00 00 83 df 00 00 3d bf ff ff ff bb 58 59 5a 20 00 00 00 00 00 00 4a bf 00 00 b1 37 00 00 0a b9 58 59 5a 20 00 00 00 00 00 00 28 38 00 00 11 0b 00 00 c8 b9 70 61 72 61 00 00 00 00 00 03 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 73 66 33 32 00 00 00 00 00 01 0c 42 00 00 05 de ff ff f3 26 00 00 07 93 00 00 fd 90 ff ff fb a2 ff ff fd a3 00 00 03 dc 00 00 c0 6e ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 Data Ascii: 022XYZ ,XYZ =XYZ J7XYZ (8paraffY[sf32B&nCC
2024-07-04 20:55:34 UTC	538	IN	Data Raw: 33 80 5d d0 1e 9f 15 ed fc 36 d2 34 fa cb 88 d6 9a fa 68 65 66 9f b1 cd df d3 cd 51 01 89 d5 d5 5c a4 34 b5 ae 00 88 e3 69 71 c9 00 b9 ce 1b 61 b9 39 d7 6a 2d 03 3d da 8e cf 77 a4 86 39 ae 56 69 1d 51 0d 3b b6 6d 4b 0b 71 2c 04 fe 1e 76 f4 3e 0e 0d 29 f9 b8 b2 b5 fc 12 f3 23 58 ec 16 db e5 05 25 19 b6 47 0b 61 aa 1f 69 24 47 1f 47 f7 b1 ef 00 5b 9d b7 f7 41 f2 57 e9 6c 1f b5 16 4b dd 05 de 9a 23 59 15 3c b2 52 5c 61 1c 92 b0 b1 a5 cd 90 3c 61 cd 3b 67 19 f1 c1 ca c9 ec 15 3c 3c 9e 8a 1a ba bb fd 2d 9e 77 fb d2 51 5d 1e 69 65 61 f2 73 4e 01 23 cc 12 0f 81 57 e8 59 67 d5 d4 b5 76 cd 34 f6 d4 53 d4 b0 d3 4f 70 a7 63 bb 98 a2 76 d2 16 bc 81 ce e2 dc 80 1b 9d ce 49 00 6f 1f 9b 2b 94 b6 70 b5 d1 8c c6 c9 79 fe 1a 7b 7a e1 3e b3 d7 5a 8e c5 65 92 b1 f5 75 d5 56 Data Ascii: 3]64hefQ\4iqa9j-=w9ViQ;mKq,v>)#X%Gai$GG[AWlK#Y<R\a<a;g<<-wQ]ieasN#WYgv4SOpcvIo+py{z>ZeuV
2024-07-04 20:55:34 UTC	4096	IN	Data Raw: 9f 85 ae 75 95 90 18 8c ed 8d d8 74 bc e4 34 48 73 21 3b c8 e7 12 72 79 8e f8 ae ec 3b aa 2a 2e dc 3c bc e9 ea 87 87 36 cd 5a e3 09 7f fc 1a 88 dd 96 b7 e1 20 27 e6 57 9e 7b 40 f8 55 57 c3 1e 3c df a3 65 64 97 4a 4b 83 cd da 2a 89 de 5e f6 32 67 12 62 24 92 72 d3 91 83 8d b0 40 dd 61 dc 01 e3 db 38 55 a6 ae d4 52 50 4b 51 df 19 e4 6b a9 5c 1a f7 ca f8 9a c8 f9 c9 fc 2c c3 c8 c7 8b f3 be 17 93 a9 d7 76 6b bd b3 9a e8 74 7b 66 bd b2 e5 78 8e 96 db ab a3 96 82 82 4a 91 8e 68 98 5f 90 36 3c a3 65 15 ef 55 b2 e3 50 2d d6 96 c3 4c f0 de 6a 8a b7 34 7d 93 07 f5 3e 01 79 87 0b b5 44 da cb 86 5a 3a e9 57 20 74 d5 d6 aa 79 66 76 76 e7 e5 c3 8f e6 0a b3 eb ea 79 a9 6e 94 6c 74 d5 4c b5 73 f7 95 1f 40 88 c9 33 bc b2 06 76 f9 2e 0e ce 66 cb 8b ea 74 f1 75 cc a7 97 a4 Data Ascii: ut4Hs!;ry;.<6Z 'W{@UW<edJK^2gb$r@a8URPKQk\,vkt{fxJh_6<eUP-Lj4}>yDZ:W tyfvvynltLs@3v.ftu
2024-07-04 20:55:34 UTC	1668	IN	Data Raw: 82 50 a8 c8 c2 b5 db b7 b6 ba 1a 1f b3 56 a2 63 24 e4 aa bd 49 15 aa 2c 1c 12 1e ee 69 31 ff 00 d6 c7 7e 6b 62 4f 55 ce 1f 6a bf 10 dc ed 4d a2 f4 64 4f fb 2a 5a 49 6e b3 80 7a c9 2b bb b8 f3 f0 6c 6f ff 00 99 6b aa 73 9c 46 5e 27 2e 7d dd 25 ef a7 79 23 a9 ca b6 bd be 47 f3 55 35 32 f3 38 e7 75 49 26 49 d9 74 ab 08 86 46 ec a8 aa 19 cc d7 b1 db b5 c3 0a b5 c0 f9 aa 3a ac ff 00 e1 66 d2 29 ac 47 33 3c 3b 62 c6 90 7e 39 57 70 3d ef 25 67 b3 65 b5 95 87 3b 1e 5c 7e b9 57 86 1d d4 63 e8 fb 48 4e c1 1c c9 a4 e1 35 ce dd 59 07 39 c0 f4 4c e7 29 a4 94 80 fe 6a 12 7f 31 29 41 db d1 42 d9 0b 5d d1 4b cd 91 90 10 3b 9f a2 7b 71 90 54 00 6f 95 33 76 c2 98 24 3e f2 89 cd df 65 26 51 81 82 89 53 9e b8 43 d8 1f ee 8d bd 52 bc 61 d9 4d 7c 98 69 23 cb 75 02 92 8d c5 b7 Data Ascii: PVc$I,i1~kbOUjMdO*ZInz+loksF^'.}%y#GU528uI&ItF:f)G3<;b~9Wp=%ge;\~WcHN5Y9L)j1)AB]K;{qTo3v$>e&QSCRaM\|i#u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	64628	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:34 UTC	1846	OUT	GET /df_media/W1siZiIsImN1c3RvbWVyX2ltYWdlcy8xMzQwMC8yMDI0LzAyLzIxLzE4LzAxLzQ4LzkyODY3ZTM4LTdiZDEtNGIzNi1hODE4LTdhNzJmNjdhMzZiZS9BZXN0aGV0aWMgMTUuanBnIl0sWyJwIiwidG9fd2VicCJdLFsicCIsInRodW1iIiwiMjAwMHgxNTAwXHUwMDNlIl1d/Aesthetic%2015.jpg?sha=c1b21970f376057b HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/assets/application-b2dfc1aad05e45e6756e097b15c026c250a3e30a8cab4651d613dd0a09ef5569.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=cTZ0TzAxTjFrTHJPcmtrSHloKzRSVXBVRnlxVlJwbm10Vk9XQVZadW4rTXlURDlDTzBmL1FHcUorR1NXTGwzd2doRWFVOVZhZTFQTU9xTlZlTXlhNElkc2ZzVDlQZktOV3R4b2F1QWlVRWdiVEthMVZhTURhQ2JDVlRzUkJpR0xHVVVmVGhTSUJTbTFiUlVaNUhaejFOWXZNTkp5NmZ6M2NwOGZjSzRxaVpzek05V1B2cm1OaXFMVExrTDdPNVMyb0szVisxa2pIT25EVmJkK0lWZit0WE9rZGZFSnVEbjErTjFFc29LZHlxU1AwOUsyZG5rT09palJWeVpLajZ4NHZVQVhyL2tmb3pjcnJ6ODlRZnBzZGNNY3BVSDYxZkJ3c0YvSnEvejVKSmZVOTBBd1BtQUpObURtclUxbzRjY0J0bnNxWWszMGhXRVNaRUMxT0VvdHZ4aXJkak5wd1FiSjliekxEaTh3Wm5URXFXTHdKTzlvT2htVTJGVDFjN0lFMlR4Rmw3bjU1dzZycUhPKzRTSFo3OWZiK2ErQU03RHZ2cVJLSHRPbmtiVEMwb2tMUW9sSk9EdlpFQ1BidFRGdy0tcmw5UFlRd213WEhYS2hGTFhDc2RKUT09--7fb1ca1fd007bbb235fc0a63bac6654010d5db03
2024-07-04 20:55:34 UTC	625	IN	HTTP/1.1 200 OK Age: 1992429 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Aesthetic 15.jpg" Content-Length: 241357 Content-Type: image/jpeg Date: Tue, 11 Jun 2024 19:28:25 GMT Etag: "b93a7b9cb9e1984112d8de233f195b438b22e579" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 9ee7b71892df78ce070f0966c066c3417b545b7a X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: f590099d-d993-4cbb-b63d-c684128a768e X-Runtime: 0.559448 Connection: close
2024-07-04 20:55:34 UTC	561	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 00 7a 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 42 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 05 00 19 41 65 73 74 68 65 74 69 63 73 20 2d 20 41 65 73 74 68 65 74 69 63 20 31 35 1c 02 50 00 10 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 6e 38 42 49 4d 04 25 00 00 00 00 00 10 c5 ae 67 67 d0 17 27 a1 ae f3 22 41 42 cf 88 88 ff e1 00 fa 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 06 00 00 00 66 01 3b 00 02 00 00 00 11 00 00 00 6c 87 69 00 04 00 00 00 01 00 00 00 7e 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 Data Ascii: JFIF,,zPhotoshop 3.08BIMBZ%GAesthetics - Aesthetic 15PChristine Bergen8BIM%gg'"ABExifMM*V^(1f;li~,,
2024-07-04 20:55:34 UTC	2372	IN	Data Raw: 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 43 61 6e 76 61 22 3e 20 3c 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 6e 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 53 65 Data Ascii: df="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Bergen</rdf:li> </rdf:Se
2024-07-04 20:55:34 UTC	538	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 Data Ascii: <?xpacket end="w"?>CC
2024-07-04 20:55:34 UTC	4096	IN	Data Raw: 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 db e5 3a 49 81 94 02 c8 4b 95 2c 04 e8 06 88 94 c7 ee 9c e1 31 00 7a a0 11 da 52 23 e8 99 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 3e f7 4c 94 42 01 24 92 79 b2 01 92 49 38 25 00 c9 Data Ascii: $@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$I:IK,1zR#$I$$@$II$I$>LB$yI8%
2024-07-04 20:55:34 UTC	5930	IN	Data Raw: 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 94 5c 60 14 05 4d 66 b1 ad d2 d5 7c e0 10 3d 57 97 7b 53 c5 9f fe cb e2 e0 12 d1 f4 5d c7 14 aa 19 a2 e5 98 e6 74 4c 2f 33 e3 4d 35 f5 a4 93 f0 b5 c4 90 14 5b ce 35 78 73 fe 8f ec de aa a6 9b 54 2b 93 35 5f 70 0e d7 5e b5 c2 2a 3b fd 36 97 4f 33 af 1f 35 e4 de c8 72 ea b8 8c b8 61 c0 01 dd 7b 06 8f 94 ff 00 c8 b3 6c 0a 7d 5f d2 3c b3 d2 d2 49 24 95 98 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 Data Ascii: @$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$\`Mf\|=W{S]tL/3M5[5xsT+5_p^*;6O35ra{l}_<I$I$I$$@$II$
2024-07-04 20:55:35 UTC	7116	IN	Data Raw: 99 30 a0 5d 01 31 75 94 0b d0 0e e7 a0 d4 aa 99 ef b2 a9 56 a5 8d ee 80 23 eb 44 a0 ba be d3 85 4e ae a3 ba 01 d4 db 2a 78 5e af 3a b9 51 3a 85 41 d5 fb a1 9a ff 00 55 32 21 a5 fe c0 3b 8b a8 3f 52 02 cd 76 a0 80 83 53 54 7a a9 ff 00 f8 9e 34 aa 6b 05 ae 82 ed 5c ee 16 4d 4d 59 93 78 41 76 b2 f9 50 38 d7 7e ab 17 f4 40 a9 aa 95 96 ed 6d f2 80 fd 74 0c a3 bc 1c 68 d4 d5 e6 ea a5 4d 67 75 9b 5f 5e 23 3f 25 4e be b4 c1 bd a5 45 d0 e3 4a be b8 0d ee 76 59 b5 f5 9c c4 df 6e aa 9d 4a e5 cd cc ed 05 56 7d 62 27 7e b2 92 d3 48 b1 53 52 60 df 28 06 b7 3c 49 ec 4a 19 74 8b 9b 74 51 2f 6c 75 bc c2 8f 91 e6 53 75 4c 99 be ea 0e 74 cc 88 50 35 66 6f 71 60 45 e3 ba 19 7c 5a d6 16 ea 97 a7 f8 88 e3 39 30 82 e7 7e d1 1e 75 4c 6a 12 60 99 9b a8 3d bc c4 03 1d 01 c2 8e a6 Data Ascii: 0]1uV#DN*x^:Q:AU2!;?RvSTz4k\MMYxAvP8~@mthMgu_^#?%NEJvYnJV}b'~HSR`(<IJttQ/luSuLtP5foq`E\|Z90~uLj`=
2024-07-04 20:55:35 UTC	8302	IN	Data Raw: 73 87 f0 b1 ad a1 49 b1 2e 26 64 8b 12 63 f6 42 ad a6 a9 5e bb 09 20 92 04 5e 3e 5d b6 f0 ae b7 85 f0 df 74 c1 50 08 07 6c 95 a7 1a f8 f8 d9 fc 98 fe c3 fb 31 c1 59 41 a2 00 b6 48 83 36 5d d7 0d a1 ee dc d8 00 88 8e fe 67 ec b3 b8 2e 8c 36 9b ac 44 c9 90 2e 57 4b c3 b4 4e a8 58 01 37 ed bf 45 83 7a ba d0 92 48 b9 fe b4 d3 04 09 06 d2 a6 dd 28 22 47 ac 2d 86 f0 fe 5a 22 6e 40 02 52 6e 92 29 f2 81 27 75 66 67 09 7d b9 dd 67 0d 15 e9 99 69 df d4 a4 b7 75 74 85 16 dc 00 05 d2 4e 4f 6f a6 52 49 25 ec de 44 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 Data Ascii: sI.&dcB^ ^>]tPl1YAH6]g.6D.WKNX7EzH("G-Z"n@Rn)'ufg}giutNOoRI%DI$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@
2024-07-04 20:55:35 UTC	7366	IN	Data Raw: e6 63 28 43 fa 32 0a 67 3a 00 d8 77 df b2 12 24 fd 27 e8 98 be 0e 7d 6e 50 f9 e6 0c 7a 28 f3 58 6d bc a5 e2 60 85 d2 2d 21 bd d4 1d 52 f7 c4 db b2 89 76 05 e3 2a 05 f1 91 37 50 3a 23 aa c9 20 4f ca e9 bd e1 00 01 6b 60 fa 20 cc 49 eb f8 4f cf f0 df b9 86 c8 40 b4 57 3c 8b 60 5a dd 14 09 2e 9c c3 84 98 4c 5c 37 b9 2a 0e 73 43 4f fe c3 a9 42 09 c4 b6 40 02 6e 65 30 37 10 64 cd 81 f3 b2 5c c0 db e9 1f 9f c2 89 77 c4 4c 81 07 6c 7a a1 3d 39 74 4d bb a8 97 5c fa 49 18 9f 25 37 34 8e ca 21 c5 b1 13 23 60 32 a2 c4 f5 32 7e 2c c8 d9 37 33 45 f3 1d 77 42 7b e0 01 33 63 1b 24 2a 9b 66 73 7f 55 25 ef 04 2e 16 db 72 0e e9 c3 81 03 70 4e 7f 64 3f 78 04 5f 69 3f 44 b9 c0 71 8b b7 6e 85 20 ef a1 79 a3 69 89 93 81 ba 7b 12 00 3d ad 08 41 d2 d8 b1 b8 30 a4 5c 09 17 b5 bb Data Ascii: c(C2g:w$'}nPz(Xm`-!Rv7P:# Ok` IO@W<`Z.L\7sCOB@ne07d\wLlz=9tM\I%74!#`22~,73EwB{3c$*fsU%.rpNd?x_i?Dqn yi{=A0\
2024-07-04 20:55:35 UTC	10674	IN	Data Raw: 4e 10 83 e2 6f 06 27 aa 5c d7 16 83 d3 e6 8a 69 46 0e 83 7b 8d a4 cf 99 52 69 81 12 4c 18 bc 74 c7 dd 03 9e f3 e7 97 53 e7 b4 c9 ee 00 4b 52 33 4f c2 60 81 6b 9c cd d4 f9 af 11 6c 12 6f b2 00 a9 31 3f 9e df ca 97 36 06 d9 bf 97 40 1b 9a 2d 39 36 39 bf 85 38 a8 63 70 3a cd 90 05 4f 91 88 8e 89 83 c4 c4 e7 cf d9 45 89 ea d0 ab 11 7c 26 0e 9c 10 46 22 55 7f 79 07 33 27 e7 e7 ec 9f df 4d bd 2f 95 1c 30 f3 cd 61 fd 27 15 0c 0b 00 33 6c 20 7b c0 7a 04 e2 a0 99 dc 74 47 11 6a c0 7e 6d 6e f8 09 c4 10 0c 4e e2 76 ba 01 a8 08 f9 29 87 48 da 07 d5 47 38 9e fb 10 1e 6c 44 c7 a2 70 e8 27 73 b2 18 70 20 48 11 ea 91 7c 5a 6e 2e a3 89 ea 4e 75 cd e3 36 29 a6 c7 79 20 28 97 c1 36 22 d6 9d 94 4b c3 6d 1f 50 a5 1d f6 94 c0 17 32 73 b9 4d cd 60 62 d9 f5 50 73 a2 63 1d fe 6a Data Ascii: No'\iF{RiLtSKR3O`klo1?6@-9698cp:OE\|&F"Uy3'M/0a'3l {ztGj~mnNv)HG8lDp'sp H\|Zn.Nu6)y (6"KmP2sM`bPscj
2024-07-04 20:55:35 UTC	11860	IN	Data Raw: 6e 22 e3 f5 a4 0c f7 84 33 aa 75 a4 90 7f 2a bf 2c e3 aa 83 9a 4c c1 33 89 ca 94 7c 60 ce d4 97 48 06 7a a1 54 ae 7a ef 06 54 1d f0 83 90 80 fa 90 62 08 bc 61 4c 45 92 0a e7 99 99 f5 e9 e8 93 5f 88 8f a2 af cf ca 2e 60 4f d7 c9 4e da 9d 37 de 65 4a 16 41 07 b9 10 53 f3 ef 20 75 dd 57 6b c9 26 6d fb 27 2f e6 22 d8 c0 03 ec 9d 1d 58 e6 b8 eb bf 5c 25 cd 7e 9b fa aa fe f4 e3 25 3f bd 04 98 36 8b 93 8d 90 8f 43 87 dc 08 ef d5 30 30 62 2d d3 a2 07 3f 29 33 33 30 67 3e 89 1a 98 dc 9d fc f4 42 07 e6 30 2f b5 e5 31 7c 13 1e b7 ca 01 ab 27 b8 3d 36 48 d5 06 6c 73 b2 9e 01 8d 4b 88 32 4f cb cc 25 ce 77 77 73 38 28 3e f0 67 d7 e6 a3 cd 63 16 ef 94 70 2c 87 82 7a 60 1f 54 e1 e0 1c ce d3 60 ab 0a b9 eb dc 66 e9 c3 c9 36 3f ba 80 b0 5f 13 68 ec 9c d5 8c 9b e0 75 55 fd Data Ascii: n"3u*,L3\|`HzTzTbaLE_.`ON7eJAS uWk&m'/"X\%~%?6C00b-?)330g>B0/1\|'=6HlsK2O%wws8(>gcp,z`T`f6?_huU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	64629	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:34 UTC	1747	OUT	GET /df_media/W1siZiIsIjIwMjQvMDYvMDMvMTgvMzMvMTAvNmM1MzJlMjQtMDk5NS00ZWE3LWJmZTctZWQ0ZWVhZDA3NzliL0Fzc29jaWF0ZS1MZW1veS1Qcm9maWxlLVBpY3R1cmUuanBnIl0sWyJwIiwidGh1bWIiLCIyNDB4MjQwIyJdXQ/Associate-Lemoy-Profile-Picture.jpg?sha=2fb954a5bd1c5504 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03
2024-07-04 20:55:34 UTC	643	IN	HTTP/1.1 200 OK Age: 1992379 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Associate-Lemoy-Profile-Picture.jpg" Content-Length: 46079 Content-Type: image/jpeg Date: Tue, 11 Jun 2024 19:29:15 GMT Etag: "84c714f314de8a8dea574f63d881a5fa087c15ea" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: d4f4e9404489b719b465d986297f1e4ac0c56b92 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: b3f60fa0-dd10-49cc-9436-056d9005d953 X-Runtime: 0.392133 Connection: close
2024-07-04 20:55:34 UTC	543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 8c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 0e 00 02 00 00 00 29 00 00 00 4a 01 1a 00 05 00 00 00 01 00 00 00 74 01 1b 00 05 00 00 00 01 00 00 00 7c 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 41 73 20 73 65 65 6e 20 6f 6e 20 61 20 53 75 73 73 65 78 20 44 69 72 65 63 74 6f 72 69 65 73 20 49 6e 63 20 73 69 74 65 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 01 02 02 02 02 02 02 02 02 02 02 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 02 02 Data Ascii: JFIFHHExifMM*)Jt\|(As seen on a Sussex Directories Inc siteHHCC
2024-07-04 20:55:34 UTC	2372	IN	Data Raw: 10 68 82 0d 10 41 a2 08 34 41 06 88 20 d1 04 1a 20 83 44 11 8c ac d6 a9 16 e5 22 a5 5f af d5 69 b4 2a 1d 1a 0c aa 95 62 b5 59 9f 16 97 48 a4 d3 61 32 a9 13 6a 35 3a 94 e7 50 cc 08 0c c7 42 dc 79 e7 56 96 db 42 0a 94 40 1a 00 2a 20 24 39 3a 36 f0 79 e9 1e 75 5f 1a cf 8c 4e e5 78 fb ba 2f 2d 81 d9 0a 4a 28 be 14 b6 aa a3 5c b8 62 56 22 4f 7d 55 5d d6 a9 db 8a 9d 40 a6 de 17 1a d8 7d 4c c9 a3 3b 21 73 5f b7 e8 d1 d9 79 49 44 96 ea 72 5e 72 4a 19 4c 59 79 14 e2 40 39 4e 79 8a 4d cf af b2 39 9f 9f 4d e2 aa 27 f7 8a c8 f9 50 0f 99 27 63 d0 6b af 9c 50 0a 2e db 4f 6d 29 d6 0d 4e 83 32 6c a6 25 43 95 69 dc 75 a5 3e 5d 94 eb 86 23 15 a9 88 69 b6 bf 9b 05 a4 cb 8f c9 d8 80 79 4a 44 66 82 d6 5d 0a 25 7c c2 5a 50 52 6f 70 7c b5 6e 97 17 84 40 cd 9d 24 0c ad 98 6d 7e Data Ascii: hA4A D"_ibYHa2j5:PByVB@ $9:6yu_Nx/-J(\bV"O}U]@}L;!s_yIDr^rJLYy@9NyM9M'P'ckP.Om)N2l%Ciu>]#iyJDf]%\|ZPRop\|n@$m~
2024-07-04 20:55:34 UTC	538	IN	Data Raw: 1e 1a ec aa 9f 89 af 13 56 c5 b8 85 bc ab 46 90 e3 35 8d c4 a7 ca 44 86 dc cd ad 2a 33 11 a1 4e 62 5b 41 62 6c 89 aa f9 67 db 23 3c 01 52 ca 8a 50 4e 19 c7 38 f7 f4 9c 1e 7a 90 b2 9a 9a bf c1 43 38 29 27 da 5b 6a 32 a5 f7 d5 a3 60 76 73 c3 c9 c6 71 d9 06 6a 1e 87 0f ff 00 b8 9b b8 20 16 96 8e 44 29 7e 5e 10 75 8d d0 76 b2 85 02 df 81 02 32 1a 6a 2b 2c b1 1d 2c c6 60 70 43 29 08 43 7c 1b 4a 3a 0d 84 a7 23 af a7 b0 f6 d7 39 c8 99 de ac 94 8b 6e 79 9d 6f bb f9 ef 1d 27 39 39 42 f3 00 c4 b7 22 03 6b ea 3d d1 34 2d ba f8 8b 19 b4 a1 64 a5 b4 80 90 95 ab 98 f4 a7 29 1d e0 e7 df f5 ff 00 0d 64 b4 d5 0b 42 58 16 24 b9 6f a7 6d 85 b5 88 5a a9 01 44 72 3f 56 eb f0 f5 85 6b b7 1a 17 19 5e 62 10 14 12 ac 29 78 03 a4 f6 70 93 d6 7e a3 d8 fb f5 9d 48 26 b6 61 48 65 04 Data Ascii: VF5D*3Nb[Ablg#<RPN8zC8)'[j2`vsqj D)~^uv2j+,,`pC)C\|J:#9nyo'99B"k=4-d)dBX$omZDr?Vk^b)xp~H&aHe
2024-07-04 20:55:34 UTC	4096	IN	Data Raw: 29 52 1e 28 f9 83 92 10 a5 44 4a 9a ca 1c 59 19 51 ca 2c c4 ab cb cb e9 f9 73 8c 2c 0b aa e3 66 3a d8 6c fb 81 61 cf dd 17 df fc 2d be 2d 2d dd 84 f1 a3 7a f8 63 7e d6 bd 3f b3 1e 2e 68 f4 fa 25 2e f2 95 54 a9 cf a4 53 b7 83 67 e9 17 5d cf 01 ba ac 12 95 47 42 eb 16 8c aa d4 6f 98 47 07 63 bb 4d 84 c2 92 63 ba b5 34 ce a9 01 52 81 03 d8 bb 97 be 8e 3e 0f 0e 69 d4 53 33 22 b5 50 e6 de 56 fa 7f 28 f4 40 04 28 05 0f 62 01 1f b1 19 1a 8e 87 d1 fb a2 08 34 41 06 88 20 d1 04 1a 20 83 44 10 68 82 0d 10 41 a2 08 34 41 06 88 20 d1 04 1a 20 83 44 10 68 82 0d 10 45 12 ff 00 11 f6 e6 af 6e be 15 1b d3 4b 8b 6f c3 b8 2a db ad 75 6d a6 d7 51 53 36 a4 69 e9 a3 d4 2a b7 54 7b 8c 5c 2c 34 d2 d2 ed 4e 54 48 d6 bc 8f 2a 3b 5c bf 99 25 2f 3c 93 1d 97 48 73 46 fd ea 88 53 64 Data Ascii: )R(DJYQ,s,f:la---zc~?.h%.TSg]GBoGcMc4R>iS3"PV(@(b4A DhA4A DhEnKoumQS6iT{\,4NTH*;\%/<HsFSd
2024-07-04 20:55:34 UTC	5930	IN	Data Raw: f9 0a c4 c9 2c ba d3 90 97 0d d9 6a 45 3b e6 0a 4f 96 e3 69 f2 5d 75 b2 f2 db 0b 57 23 72 d6 1b 38 56 52 1c f4 d3 71 cb e7 17 cb 49 74 80 97 16 1e 5e 65 9f d3 d2 26 e7 83 5f 0d b5 ad d0 a7 50 e7 2a a7 36 8f 16 85 5b 45 5d 0c 47 81 0a a9 4c 2f 85 b1 52 48 95 4e 9e c2 9a a9 20 c8 6d 01 6c ba 92 95 34 82 12 01 51 23 55 71 1f 11 27 0b a8 a8 94 89 29 5c c9 e9 cb 9a e1 40 5d f2 9d 03 be ad 7d 1f 78 dc fc 23 c3 47 15 a1 a4 9d 3e a1 48 93 4e b2 be ee c5 0b 36 03 32 5e fa 3b 38 6d 5a 2f 47 c3 4f 84 7b 67 6e ae bb 96 ef 83 41 91 49 91 72 bf 5f 7a a0 a8 52 24 d3 e9 4a 8d 77 ce 89 56 b9 a9 94 0b 32 2b df 23 6e d2 a7 54 21 b0 ec 96 51 e6 17 32 59 58 f9 6e 2d 0c 42 b3 8b 55 3e 9b 24 c9 ac 89 6c 40 7b 05 0d 15 ae bd 7d e4 c6 61 4f c2 94 b4 b5 7d e5 1c a0 b9 cb d5 4c 1d Data Ascii: ,jE;Oi]uW#r8VRqIt^e&_P*6[E]GL/RHN ml4Q#Uq')\@]}x#G>HN62^;8mZ/GO{gnAIr_zR$JwV2+#nT!Q2YXn-BU>$l@{}aO}L
2024-07-04 20:55:35 UTC	7116	IN	Data Raw: da 44 75 a5 e7 63 a2 a6 98 0e 4b 7d ea 54 d5 07 96 82 54 7c b7 9a e4 91 c1 49 e3 aa ad 80 05 ae 96 37 2f 7f 71 8b 50 93 95 61 f3 33 68 ef f1 d7 cb 57 f3 8f 42 df e1 b6 f8 84 41 f1 4f e1 31 ff 00 0e d7 de eb 53 b7 07 7f 3c 2f a6 15 26 6a 1a a6 b5 4b 95 23 64 6a ce 08 bb 5f 30 39 1c 96 eb 3f 85 aa 1d 4a 81 21 f4 25 2e a5 34 88 0b 92 14 ec 8f 31 6c 2a e5 b1 13 52 01 0a 67 63 f9 bf 91 7b 6e f0 f6 9e 61 52 72 ab da 1f 11 1b 21 69 a4 38 83 44 10 68 82 0d 10 41 a2 08 34 41 06 88 20 d1 04 1a 20 83 44 10 68 82 0d 10 41 a2 08 34 41 1a da 7f 14 2e d8 5d bb 89 e0 33 6b aa 16 bd 36 b9 52 8d 62 f8 a5 db cb 8a eb 72 25 42 44 6b 6e 89 6d 4b b5 2f aa 31 ae 5d d1 a3 93 e6 42 4d 6e 6d 22 24 49 0e 21 4d c5 9b 58 69 6b 53 61 cf 30 3c a3 23 32 c6 a4 80 de fd 8f ce 1b cf 0a 64 Data Ascii: DucK}TT\|I7/qPa3hWBAO1S</&jK#dj_09?J!%.41l*Rgc{naRr!i8DhA4A DhA4A.]3k6Rbr%BDknmK/1]BMnm"$I!MXikSa0<#2d
2024-07-04 20:55:35 UTC	8302	IN	Data Raw: 8d 80 29 d0 f0 12 e2 51 ea 28 71 d0 32 a8 e0 81 9f bf d7 ad 27 2a ae 55 33 94 27 34 c7 62 a3 ef b0 bf 4f 15 87 48 73 36 91 75 60 3a fb b9 36 f0 f3 1a 17 23 a6 c0 98 92 fb 65 e1 c5 a6 68 14 9d c9 bf 5b fe c7 6c 92 e7 cb a4 3b 77 38 fd 31 9a ed c7 36 98 84 39 2a d4 da ea 24 f5 17 2e 5b d9 f4 ac a6 33 65 a4 c3 6f cb 75 e9 12 12 96 88 32 d4 f2 17 32 4a 31 3c 51 6a a5 c2 42 94 f3 1c 15 ac a5 b3 22 52 77 99 70 c4 80 97 70 4e d1 19 2b ef 18 86 33 4b c1 dc 1b 41 fd 6f 8b ab d7 2e 54 8a 74 05 65 4a a6 be 59 95 53 00 09 97 25 09 05 73 0e 62 52 80 54 43 3b 38 9b 97 b8 d5 6b e9 9a 1d 3d 6c 8a 1d 85 b7 94 69 36 ee d4 6d e4 47 dd 76 87 b7 96 b3 ce 26 43 f4 fa 6f 9a b5 38 fd 56 64 96 c4 ba 94 b7 5c 71 d9 13 24 2b 82 91 1d 0c b4 8c 53 1f c6 27 e2 eb 4a 94 0c 8a 0a 40 51 Data Ascii: )Q(q2'U3'4bOHs6u`:6#eh[l;w8169$.[3eou22J1<QjB"RwppN+3KAo.TteJYS%sbRTC;8k=li6mGv&Co8Vd\q$+S'J@Q
2024-07-04 20:55:35 UTC	7366	IN	Data Raw: 7b 8b f3 68 96 99 5a 15 94 bf 55 90 cf cc cb 47 47 e4 22 b6 d9 ca 66 11 ad 49 da 7f 12 8a 5a 74 70 d5 22 da a2 b1 21 75 44 16 28 92 fe 19 6e f6 33 4e bf fb 60 8b 85 c7 a4 1f 60 9e c3 7f ad e2 f5 3d b5 71 25 27 79 86 60 13 26 52 e0 52 d6 1d 33 b1 00 00 a9 ae 62 18 a6 81 0a ee 64 2a e3 ef 73 14 bb 1a 78 d7 2a ab 51 85 4b 84 fc f9 f2 19 85 0d 83 fc e7 5d eb 92 94 ae 2d b4 da 06 14 fb ca 51 01 08 4e 56 a5 2f 88 1a d0 aa 52 24 82 a5 a8 25 29 e9 fa 16 77 e4 1f c8 6d eb 54 89 6b 9b 31 32 d3 e3 98 74 e4 07 32 58 80 3a ef f9 5c 98 48 22 04 9b 95 e6 2a 35 d6 5c 89 48 64 a2 4d 32 df 75 49 52 9c 5a 02 54 dd 42 bc 81 9e 4f 64 02 d4 53 e8 67 3c 9d e4 e7 49 6a 12 aa 82 26 cf 01 09 4d d2 97 3e 8a 57 fb 9b 6e 5a 16 b9 93 33 25 d3 4b 54 9a 63 9e 79 f0 ad 6c c3 52 72 a0 36 Data Ascii: {hZUGG"fIZtp"!uD(n3N``=q%'y`&RR3bdsxQK]-QNV/R$%)wmTk12t2X:\H"*5\HdM2uIRZTBOdSg<Ij&M>WnZ3%KTcylRr6
2024-07-04 20:55:35 UTC	9816	IN	Data Raw: d3 a1 9d 0c 95 a4 a1 b7 25 9d b9 9d fc c6 b0 ce 60 44 d4 59 41 72 d6 1b 51 a5 f5 1a 82 7a f3 e7 1e 85 5a ed 78 f9 6a 83 44 10 68 82 0d 10 41 a2 08 c6 d6 2b 14 9b 7e 99 3a b7 5d a9 d3 e8 b4 6a 5c 57 67 54 aa d5 59 b1 a9 d4 da 7c 26 07 27 e5 cd 9d 31 c4 35 16 3a 13 92 a5 ad 41 20 0e ce ad 52 d2 84 a9 4a 21 29 4d c9 24 00 07 32 4b 00 22 f9 72 e6 4e 98 89 52 90 66 4c 98 40 4a 52 0a 94 a2 74 00 00 49 27 60 23 58 df 8b 85 cd 4a f1 a3 72 6d a5 b3 b5 3b a3 6f 37 b7 5b 61 4f b8 2a 72 26 cc a5 57 dc a6 dc 97 d5 c0 fb 30 4c 88 52 1a 6d 09 99 4c 89 43 80 db 6c c8 4b 6e 25 6e 54 5f f2 f2 da 42 d5 ab 38 e0 c9 c6 c5 34 89 18 82 13 4f 4c 95 a8 80 95 2b 3a d7 e1 d4 16 64 a4 6a 01 7c c4 69 1d af f6 68 e3 ba 1e c7 69 38 82 a7 15 e1 5a cc 47 1b e2 09 d2 13 de 4a 9d 4f 2c 48 Data Ascii: %`DYArQzZxjDhA+~:]j\WgTY\|&'15:A RJ!)M$2K"rNRfL@JRtI'`#XJrm;o7[aO*r&W0LRmLClKn%nT_B84OL+:dj\|ihi8ZGJO,H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	64630	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:34 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTkvNzg4NzA3ZjktNTQ3Mi00M2EwLWE1YjMtYWU0YTdkYzVmZmNkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=37d5cab959016bd1 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03
2024-07-04 20:55:34 UTC	626	IN	HTTP/1.1 200 OK Age: 1992379 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 60543 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:15 GMT Etag: "1a70981e26e7280f7edf5d8d8ccf0dd13da28783" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: ebb4d2d83a9c1229d1735597cf294991072c1d15 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: a4c6c5cc-b1a7-434e-addb-d81af9033ac0 X-Runtime: 0.479476 Connection: close
2024-07-04 20:55:34 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 3b 89 b2 83 a3 00 00 80 00 49 44 41 54 78 da ec fd 59 90 a5 69 7a df 87 fd de ed db ce 92 5b 2d 5d bd 0d a6 67 c3 32 d8 41 80 00 08 70 01 45 52 5c 6c 99 92 e5 20 29 d1 26 6d d9 8c b0 14 0e 46 e8 c6 4b f8 ca 61 df f9 c6 56 28 6c 47 c8 61 4b 72 58 96 19 a2 11 26 21 71 05 69 50 20 02 c2 c6 01 48 0c 80 c1 6c 3d dd 5d 4b 56 2e e7 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDpHYstIME;IDATxYiz[-]g2ApER\l )&mFKaV(lGaKrX&!qiP Hl=]KV.
2024-07-04 20:55:34 UTC	2372	IN	Data Raw: 26 cc 13 cb 34 91 52 62 bd de 40 ce a4 e8 c9 31 b0 5a ad a1 14 62 0c 2c f3 c8 32 1e 70 6d c7 fa fc 01 cd b0 26 87 88 2a 85 9c 33 29 45 6c e3 c8 a5 48 10 c7 c0 ee f2 31 e3 cd 73 52 f0 74 dd 8a b6 6d 29 a5 50 72 06 05 6d d7 83 d2 a0 20 a7 44 8e 11 6d 34 29 25 94 82 b8 cc 2c f3 88 d1 86 a1 ef 69 9a 06 45 66 e8 1a 4e d6 2b b6 43 c7 c3 b3 15 4d 37 f0 95 cb 89 27 57 7b 6e 6e 6f 58 42 00 ad 09 de a3 8c a5 ed 06 72 c9 68 ad 49 31 91 a2 c7 ba 06 63 1d d6 3a 62 8a 28 63 4a 0c b3 77 9d 7b af 3f bb f7 1f d2 0e ff 5e 58 c2 d7 fc 78 38 f8 18 a3 71 ca 68 55 b4 d1 e4 92 73 2c 39 15 ad 29 39 17 7e f9 af ff b5 17 fd 93 fe 67 f2 d8 17 fd 02 7e 27 9f d5 ef fa 1f f1 43 3f fc 31 6e 9f ed 9d 35 e1 7b e2 34 ff d9 e5 70 f8 b1 31 a7 37 a3 f7 c3 b3 0f de 57 7e 1c 71 ae 21 07 2f 4f Data Ascii: &4Rb@1Zb,2pm&*3)ElH1sRtm)Prm Dm4)%,iEfN+CM7'W{nnoXBrhI1c:b(cJw{?^Xx8qhUs,9)9~g~'C?1n5{4p17W~q!/O
2024-07-04 20:55:34 UTC	538	IN	Data Raw: 2b 6b 1a 05 29 46 82 f7 a4 18 99 0f 7b c9 30 7e 66 dc 5d b1 8c 7b fc bc c7 75 3d c3 e6 84 61 b3 25 46 4f f2 0b c6 5a e6 c3 5e 32 ba 52 32 dd 2d d4 41 51 8f 6b 5a ac 73 ac 4e cf 58 9d 9d 4b 49 9a 22 46 2b 8c 52 b4 eb 0d dd 6a 43 3b ac 00 79 c8 34 7d 47 c9 32 09 2f 39 11 e6 a9 56 0c 06 d0 b8 7e c0 2f 13 7e dc 43 ce 12 78 da a2 9b 16 d3 f6 94 54 28 5a 83 56 38 ab 71 56 51 4a a6 c4 58 4b 69 45 4c 89 42 41 2b 55 11 64 0b 29 78 72 8a 92 7d 53 60 59 26 59 6c a9 42 0a 0b aa ae b9 a8 43 2d a5 34 28 85 75 96 a1 1f 08 c1 9b b8 2c 0f 9c 73 57 6d db fe da b2 f8 43 29 e4 7f e9 4f ff 1a 5f fc f5 35 4f be f6 fc 45 5f 9d 17 72 be 11 c0 1f 39 df fa 2f fe 45 ba b6 e1 6f fc fc d7 f8 f8 a3 ed 89 d3 e9 4f a4 fd d5 bf b1 7b fa f8 fb 2f 1f bf 6f af 9e 3e e6 b0 bf 25 c7 40 d7 76 Data Ascii: +k)F{0~f]{u=a%FOZ^2R2-AQkZsNXKI"F+RjC;y4}G2/9V~/~CxT(ZV8qVQJXKiELBA+Ud)xr}S`Y&YlBC-4(u,sWmC)O_5OE_r9/EoO{/o>%@v
2024-07-04 20:55:34 UTC	4096	IN	Data Raw: 61 bd e1 f4 de 43 d6 db 73 e6 69 64 59 26 8c 75 84 e0 d9 3f bf 64 77 f9 44 20 8f b7 57 f8 e5 40 98 26 72 4e d8 b6 67 d8 9e b2 3a bd e0 e4 b5 b7 50 d6 71 b8 b9 26 c5 40 d3 b4 a4 9c ea d4 38 31 dd 3c 87 52 e8 37 5b da 7e 85 75 8e 7e bd a5 5f af 31 da d0 0e 03 fd 7a 43 4e 89 14 fc dd b4 39 e7 44 f2 0b f3 4e 86 43 29 46 19 e0 2a c5 b8 bb 16 a0 85 b5 28 a5 99 f6 b2 9e 2a 39 d3 0c 2b 4c d3 92 62 c4 c7 48 56 8a 18 02 cb 32 53 10 70 88 d5 e0 8c a2 75 8e a2 1d 63 c8 cc 3e 00 9a 94 0b 21 45 fc 22 15 8a b3 8e 52 03 b6 e4 4c 2e 05 63 34 5a 69 82 0f c4 fa ba a4 74 86 9c 73 2d e9 65 6e 90 52 c4 68 8d 56 5c 18 e7 36 ae ed 7e 31 f8 f8 0c a5 d4 97 7e fd ba 3c 7f 1e 38 7f fd 11 57 ef bf ff a2 af d1 6f eb f9 46 00 d7 f3 e6 1f fa d7 f8 9e 4f bf cd 5f f9 b7 fe 2e 6f 7f cf eb Data Ascii: aCsidY&u?dwD W@&rNg:Pq&@81<R7[~u~_1zCN9DNC)F(9+LbHV2Spuc>!E"RL.c4Zits-enRhV\6~1~<8WoFO_.o
2024-07-04 20:55:34 UTC	5930	IN	Data Raw: db 3a 08 43 21 6d 4a 65 2f ad b7 02 69 f5 95 37 6d b4 c1 59 dd 34 ce fc 1c e8 5f d7 4a 45 63 ad b2 ce 96 52 0a 0f 1f dd e3 d9 e3 97 83 3f fc 4a 65 e0 94 13 bd 86 29 62 73 29 8d d5 ba 5f 0f dd b7 ea b4 fc cb 71 dc 7d 26 fb 40 db 0d 80 fa 10 b3 5b 87 59 b9 64 50 1a eb 5a b4 b5 b8 ae 47 a1 58 c6 91 65 b9 42 5b d9 f1 ce b7 d7 74 7d cf bc bf c1 f5 6b 56 67 67 64 0a 61 19 d1 56 64 5b 49 91 b6 1f 08 53 26 85 40 28 85 38 8f 92 6d 53 02 63 e8 4f ce 50 28 54 8c 38 ad d0 4d cb d0 36 9c af 7b b6 7d 8b d6 0a 4d 61 d5 35 bc f5 e8 35 4e 4f b7 98 46 c0 0f 5a 6b 34 48 80 38 8b 71 4e 86 70 c6 56 e2 3e a4 a5 40 2a 18 2b 95 84 36 46 82 b3 14 54 10 28 a5 b5 96 ac 80 6c a1 24 f4 d0 de c9 e1 68 25 25 ae d1 9a b6 71 94 a4 b0 39 61 91 fe b8 51 05 d5 58 01 62 c4 44 29 10 75 c6 97 Data Ascii: :C!mJe/i7mY4_JEcR?Je)bs)_q}&@[YdPZGXeB[t}kVggdaVd[IS&@(8mScOP(T8M6{}Ma55NOFZk4H8qNpV>@*+6FT(l$h%%q9aQXbD)u
2024-07-04 20:55:35 UTC	7116	IN	Data Raw: 22 a7 0a a0 cc 05 e7 2c 1a 25 20 8f 2c 2b a5 8a d8 46 ab 2c 1e c4 15 e0 61 75 ad 42 b4 01 c2 dd be d7 87 0f fb 72 f9 d9 2b 52 4c 58 63 31 5a b1 5d b7 b7 5a f1 ab 87 eb eb 70 fe e8 91 ac bd 5e 82 f3 d2 06 70 01 8c 8a 28 a5 4b ce 59 2b 4a 26 97 00 a5 d7 c6 9c aa 0a 07 3c aa fe ab 0a 31 d4 68 8c 3b 52 f2 34 c3 f6 9c cd bd d7 b9 7e f2 55 5c db b3 3a 39 c5 b6 1d 7e 1a 2b 30 c2 d0 b4 03 ae 13 61 b9 e5 f6 4a 5c 0d b5 c5 8f 3b 0a 82 36 6a 9c c5 69 8d 53 85 de 19 7a a7 d8 f4 86 8b ed 40 63 35 7d eb 68 9d a1 71 b2 22 71 d6 88 3d 89 d3 15 63 1c 31 d6 d5 d2 59 63 9c 93 20 22 72 bb f7 ec a2 e3 d6 5b 9e 1d f6 3c b9 39 88 91 76 a9 9a 55 29 90 e3 cc 7b c1 d3 f7 1d f7 ef 5f 30 cf 33 f3 ee 96 75 df 31 74 0d a7 e7 a7 c4 db 2b b4 3f d0 99 cc ca 05 5c 9e 69 6a b9 7d a4 05 2a Data Ascii: ",% ,+F,auBr+RLXc1Z]Zp^p(KY+J&<1h;R4~U\:9~+0aJ\;6jiSz@c5}hq"q=c1Yc "r[<9vU){_03u1t+?\ij}*
2024-07-04 20:55:35 UTC	8302	IN	Data Raw: ce db 8a e4 6e a1 50 52 04 63 b1 6d 87 6d 7b 6c d3 e1 5c a0 ef 02 e7 db 0d 3e 26 ae c7 85 25 2b 94 05 9d 23 84 85 be 6b d8 3e 38 e3 f5 b3 15 69 99 c8 31 54 3e f2 81 7c b9 23 7a 71 49 b4 44 36 eb 35 9d 13 91 bd 3b 85 ce 18 46 53 d2 fb aa e4 a8 94 2e 2d 1f aa a7 bc 2a e7 95 08 e0 c6 1a 94 52 4a ab ac 62 2c d9 68 95 73 c9 3e f9 f9 6b 8d 73 3f dd 34 cd f7 a5 65 b9 d0 4a 11 72 c6 1a 43 32 b6 fa 0a 67 4e 3b 47 8e 91 5f fe da 53 a2 9f f8 d8 45 cf a3 07 a7 b4 5d c7 e6 64 4b 3f f4 8c 87 91 2f fd e6 57 69 fb 96 d5 fd 73 ba d6 d1 0f 0d 07 9f 18 43 55 f0 c8 a9 82 f1 2b 1b 07 85 51 54 b7 81 52 55 64 0b 64 4f 89 33 c4 86 a2 65 7a ab 8c 01 d3 54 a5 ca 82 31 2d 45 cd f5 ed ea a1 94 32 71 9e c8 cb cc 61 b7 63 9e 67 96 18 f1 21 12 53 12 ab 15 ef 85 15 14 44 ee a6 ef 1a de Data Ascii: nPRcmm{l\>&%+#k>8i1T>\|#zqID65;FS.-*RJb,hs>ks?4eJrC2gN;G_SE]dK?/WisCU+QTRUddO3ezT1-E2qacg!SD
2024-07-04 20:55:35 UTC	7366	IN	Data Raw: 5f 45 6c 6c 88 2a 53 d6 69 85 65 b0 9a 1d 0f 11 aa 17 e6 2a a6 aa 03 d1 b4 d9 5f 7f 76 4e 55 2b 89 74 ca 9f 77 3a 53 88 91 90 fa 01 c3 a0 23 3b fb ae c7 95 4b cf e2 33 9f bc 82 2b 57 af e1 fc d9 f3 b8 eb 22 b0 35 eb 4d 64 80 10 5c 40 13 1a b0 73 18 86 41 79 db 59 74 48 9c 75 d8 b3 b5 3d 22 27 ac 56 6b 1c ac 96 46 8b d4 16 c8 fe a0 c7 e1 e1 01 fa be b3 69 85 6c 21 b9 20 83 30 0c 40 68 1b 50 1b e0 c9 21 63 8d 10 04 cc 0e 7d 4c e8 53 c6 2c 4b ed 9b 06 04 c4 0c df f8 cb 1c e8 5f be ee 75 ef 3a fc 77 ff fe 67 f0 93 3f ff 99 9b 7d cb dc d4 75 cb 80 8f 2c ef 1d da d9 0c dd da d1 d0 f7 9c b3 34 02 84 21 e6 d8 34 dc c0 85 fb 83 f0 22 70 46 96 64 22 6d 6a 9c 29 53 0d 75 a7 1e 52 79 c9 da 51 e4 59 8d 2b 12 d0 0d 11 6d 60 a4 4c 63 79 84 b4 6d 10 15 81 d5 5b 5e 60 ec Data Ascii: _EllSie_vNU+tw:S#;K3+W"5Md\@sAyYtHu="'VkFil! 0@hP!c}LS,K_u:wg?}u,4!4"pFd"mj)SuRyQY+m`Lcym[^`
2024-07-04 20:55:35 UTC	10674	IN	Data Raw: 89 29 02 60 44 ed 71 06 1b 52 7d e5 60 8d bd 75 8f 99 77 d8 69 03 66 81 ad b5 71 9c cd 34 96 85 74 88 9b 7e 4b a3 c1 02 b5 fb a9 09 1e cd cc c9 d6 56 b8 be bb d3 fc 5b e7 dc ff 90 86 e1 67 3d 73 ff 17 7e e2 17 6f f6 65 fb b2 5a b7 0c f8 f3 5c df f3 5d df 81 ff e9 6d 3d fe c4 af fa 57 6e fb f4 83 0b 47 df b8 08 5c 9c 17 54 a6 b9 a8 6e a8 cc 6a ce 62 aa 14 a5 0f 56 29 8f 02 01 b1 c7 6c b1 40 b7 5a a3 eb 3a 10 a9 91 65 cb 61 ab 96 94 63 b8 a4 a4 cc 1c 93 aa 41 4a 06 49 36 a6 97 2a 7c 28 50 95 c0 60 15 96 13 51 e5 0f 22 84 e2 2d cd 4b a6 0c 74 43 42 37 24 1c 76 03 66 c1 61 ee b5 ce 5c ca 5e 65 e9 fc e4 51 44 40 cc 2b b7 6d 23 67 ce 2c 96 4d e3 ae cd da f0 44 d3 b8 8f 80 f2 fb 5d 90 9f 3f 38 7c fa e9 e0 e7 f2 d7 ff fe 03 37 fb b2 7d d9 ad 5b 06 fc 79 ac ff f4 Data Ascii: )`DqR}`uwifq4t~KV[g=s~oeZ\]m=WnG\TnjbV)l@Z:eacAJI6*\|(P`Q"-KtCB7$vfa\^eQD@+m#g,MD]?8\|7}[y
2024-07-04 20:55:35 UTC	11860	IN	Data Raw: f5 3d 4a c4 c0 36 50 9c 88 36 ea af 55 9c cf d8 4f b5 7d d2 5c e8 66 48 59 c6 a1 4c 58 62 f5 33 b2 e5 c7 da 10 51 ca 30 65 26 53 3d cf 95 ae 39 91 a5 3d 92 bb 82 26 c6 53 ae 81 bd 5e 51 5a 29 ed a0 3a 7a 46 7b 85 73 25 93 08 1c e5 0a a4 95 96 45 66 ae 39 f5 72 3d 60 8d 80 33 e7 6f c3 6c d6 aa 98 bf d5 ce 8b b8 60 05 b7 78 d3 2b 8f c7 55 40 d5 02 96 b9 85 e4 cc 6d 08 ef 0f ce 1d be fb 6b de 89 7f fd 33 bf 70 b3 6d f4 b3 ae df 96 07 3e 58 67 38 47 b3 98 e2 f7 a5 9c bf 5d 44 fc 78 93 d3 46 84 47 f5 77 b6 db 02 1a e2 d8 cd 53 01 4b 43 31 db a6 41 db 04 74 fd 80 c3 83 25 f6 6e 1c 60 be 68 31 6b db b1 7e 67 37 78 c6 a4 58 6f 77 c5 31 05 8f 8d 30 58 db de 34 7a 24 cc 9a 06 0c c2 30 44 44 22 a5 00 32 a3 6d 1a 9c bf ff cd 38 7c ea 21 5c fe e8 cf 40 52 bf 01 88 f8 Data Ascii: =J6P6UO}\fHYLXb3Q0e&S=9=&S^QZ):zF{s%Ef9r=`3ol`x+U@mk3pm>Xg8G]DxFGwSKC1At%n`h1k~g7xXow10X4z$0DD"2m8\|!\@R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	64631	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:34 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTgvZjA2MWM0NDgtOWQyOC00MzA1LWIxY2MtNmExYTlkZGM0YzMxL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=c987c3b7f740d138 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=cTZ0TzAxTjFrTHJPcmtrSHloKzRSVXBVRnlxVlJwbm10Vk9XQVZadW4rTXlURDlDTzBmL1FHcUorR1NXTGwzd2doRWFVOVZhZTFQTU9xTlZlTXlhNElkc2ZzVDlQZktOV3R4b2F1QWlVRWdiVEthMVZhTURhQ2JDVlRzUkJpR0xHVVVmVGhTSUJTbTFiUlVaNUhaejFOWXZNTkp5NmZ6M2NwOGZjSzRxaVpzek05V1B2cm1OaXFMVExrTDdPNVMyb0szVisxa2pIT25EVmJkK0lWZit0WE9rZGZFSnVEbjErTjFFc29LZHlxU1AwOUsyZG5rT09palJWeVpLajZ4NHZVQVhyL2tmb3pjcnJ6ODlRZnBzZGNNY3BVSDYxZkJ3c0YvSnEvejVKSmZVOTBBd1BtQUpObURtclUxbzRjY0J0bnNxWWszMGhXRVNaRUMxT0VvdHZ4aXJkak5wd1FiSjliekxEaTh3Wm5URXFXTHdKTzlvT2htVTJGVDFjN0lFMlR4Rmw3bjU1dzZycUhPKzRTSFo3OWZiK2ErQU03RHZ2cVJLSHRPbmtiVEMwb2tMUW9sSk9EdlpFQ1BidFRGdy0tcmw5UFlRd213WEhYS2hGTFhDc2RKUT09--7fb1ca1fd007bbb235fc0a63bac6654010d5db03
2024-07-04 20:55:34 UTC	626	IN	HTTP/1.1 200 OK Age: 1992380 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 73433 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:14 GMT Etag: "8e9628e709ac864e17a80064d00dad9abe861bc3" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 13f8bf2e1a2f2d36e9130ab9f938cb80f19306ab X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 9a5e9ac0-1241-49d5-a771-6656bbe94c7d X-Runtime: 0.079075 Connection: close
2024-07-04 20:55:34 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 3a fe b5 b3 35 00 00 80 00 49 44 41 54 78 da d4 fd 79 b4 6d 5b 7e df 85 7d 7e b3 59 6b ed 7d ba 7b ee bd af 6f aa 2f 95 4b 55 92 aa 51 df 5b b2 84 2d cb c6 d8 d8 06 83 c1 03 1c 18 01 92 98 c0 20 19 21 23 0e 83 04 42 00 8f 30 20 c4 8c c0 08 8c 64 84 78 c0 a0 09 5d 8c 05 96 85 91 2d db b2 2c 55 49 2a 55 a9 da 57 af 7f ef 36 a7 d9 7b ad d9 e5 8f df 5c eb ec 7b de ee ce 7d af 1c b2 6b 9c 7a Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME:5IDATxym[~}~Yk}{o/KUQ[- !#B0 dx]-,UI*UW6{\{}kz
2024-07-04 20:55:34 UTC	2372	IN	Data Raw: 35 1c 38 01 b1 f4 02 c1 18 84 82 15 43 cc 91 94 02 43 d1 e9 a9 b0 9a 3a d3 42 29 60 8d a1 14 48 97 3d a1 29 34 4d 03 36 63 2d 18 63 91 ac 8b 93 52 a0 40 e3 1c 46 e7 fe 54 8e f1 1f ce e4 c3 5f fe c2 6f fe ef 45 e4 2b a5 ac bb ad 7b 1d 8e 37 7d 0e 37 11 e6 4d 7b f5 26 7b e9 71 f7 2a 1b de db 34 9f e9 df 02 50 6f e8 a6 09 af 5b d8 3e 37 54 07 15 61 e5 81 ed 73 0d 59 f3 b7 75 d7 98 c6 5f 59 c3 ea fc fe 87 b8 06 01 ca 87 9f 7d de 0d 61 f8 1e d7 b8 7f 22 97 f4 d3 c6 c8 69 ca 09 04 9c b3 08 86 52 04 e7 1c d6 79 86 18 89 c3 40 c9 65 d2 84 a5 14 4a 49 14 20 e5 44 a9 da d1 3b c7 30 2c e9 43 a0 94 4c 23 85 b9 37 1c b5 2d 77 4f 6f 63 9c e7 95 d7 df e4 7c b9 24 66 18 86 40 08 81 2c 10 8b 8e ad 87 80 59 b9 8e 0a ac 31 86 9c f5 60 b1 d6 4e 7f 2b a5 e0 bd c7 5b 8b 94 ab Data Ascii: 58CC:B)`H=)4M6c-cR@FT_oE+{7}7M{&{q*4Po[>7TasYu_Y}a"iRy@eJI D;0,CL#7-wOoc\|$f@,Y1`N+[
2024-07-04 20:55:34 UTC	538	IN	Data Raw: bf ee 1a fb 6a d2 f7 7c 0d 22 52 9e bb 73 3a 8b 25 ff 49 eb ec 3f 6b 8c 3c 61 ad 81 22 68 48 08 52 d4 c8 b3 18 47 d3 34 38 ef 28 59 53 31 d6 1a bc 6f 18 73 b3 58 43 11 f5 67 2d 85 9c 22 cb e5 40 ca 85 62 84 58 72 cd bd aa af eb 72 a6 45 e8 ac e1 b0 35 dc 3a 68 e9 9c 61 e6 85 27 4f 8f b8 75 34 e7 60 d6 52 4a e1 f5 b7 de e6 c1 d9 82 b3 8b 9e c5 72 e0 7c 48 9c 65 cb 90 0a 7d 16 16 b1 90 c4 82 a8 a9 6d 8d 41 aa 5f 5e ab 26 c8 a5 10 52 a6 88 e0 bc a7 6d 3a c0 4c c2 1b 42 98 d2 60 6a 32 1b 04 b0 4e cd 67 67 34 78 36 e6 af db b6 19 ac b3 ff 6e 29 fc 73 ff ed 2f fc 95 97 ae dd e7 f7 6a 2f 6d db 07 37 49 e9 ac 03 7a dc 74 af 3e ee 1a a6 df e5 1a 0e 7a d3 c5 f6 99 d8 ae 70 fc ba c9 ac 5b c8 ae 89 5f ff db be 0f e4 5b ba 06 11 e1 ef ff a3 ff a0 fc c5 ff f6 3f ff 7e Data Ascii: j\|"Rs:%I?k<a"hHRG48(YS1osXCg-"@bXrrE5:ha'Ou4`RJr\|He}mA_^&Rm:LB`j2Ngg4x6n)s/j/m7Izt>zp[_[?~
2024-07-04 20:55:34 UTC	4096	IN	Data Raw: b5 c2 dc 19 8e bb 19 c7 9d 67 e6 0d 8d 13 0e 3a cf 41 e7 98 79 cb d1 a1 1e 1c 0f cf 2e 78 78 76 c9 d9 62 09 58 8a 6b 79 e3 62 c1 1b f7 cf b8 77 be a4 cf 8e 6c 1c b1 64 62 8a a4 94 19 86 40 42 70 ad 0a 69 91 42 4a 6a ce c7 5a 31 a5 42 ac 7e 71 08 81 a1 ef a7 c2 87 9c 20 84 01 63 2b fc 33 67 9c 11 ba b6 55 b0 87 51 6d 6c 8d fd 2b 22 e6 4f 7d f4 13 1f fd ab 7f f6 ff f2 ef 95 15 a4 d6 3e cf f9 dd ec a5 7d ac b4 5d e3 bf ab bd b4 c7 1a 1e f9 fe a6 20 96 6c 19 84 1d 9f d9 76 03 ae 5f 63 9b b3 bf cb b4 d8 f7 26 7f cb d7 50 4a 29 9f f8 c4 47 da fe a2 ff 99 9c d2 df 09 cc 9a a6 a9 e6 2d 08 46 8b 01 44 53 2d ce 7b 12 49 cd 63 6b 2b ee 50 68 1b 4f d3 68 8a 25 84 b0 a2 b9 32 c6 0a b3 d9 8c 03 df 42 18 30 45 f0 62 48 71 c0 10 99 b7 96 93 83 8e e3 59 c7 61 d7 71 d8 7a Data Ascii: g:Ay.xxvbXkybwldb@BpiBJjZ1B~q c+3gUQml+"O}>}] lv_c&PJ)G-FDS-{Ick+PhOh%2B0EbHqYaqz
2024-07-04 20:55:34 UTC	5930	IN	Data Raw: 57 37 be 0c ac 55 e9 d7 27 bb ee bd 6d 17 94 2d 63 6c 12 fa 75 ce fb be 5a f4 dd ac 61 9f 53 59 44 84 f3 8b 8b 0f c7 18 7e 30 e7 d4 96 0a 54 18 85 77 24 6a 1f 86 9e 52 f2 c4 a3 6c 2b 74 30 c6 00 15 ff dc 7a 87 2d 09 9b 23 ad 81 93 99 e3 f6 61 cb e9 61 cb bc 75 34 63 43 30 ab 1a 55 8c 68 5a a8 9a c7 19 a6 7c ae 0a a2 fe 5d 5b 8f 52 cb f5 54 c0 8d 71 93 70 ab ed 5c cd 6a 31 d3 e3 2f 8c dd 92 50 29 1e cd f0 fa d9 b1 4f b1 75 d5 ef 16 83 f5 0e df b5 1c 1d 1d f2 f4 93 77 79 ee e9 bb 3c fb c4 6d 9e 3c 39 e0 b8 31 1c 38 e8 5c 21 85 25 fd e2 82 1c 83 d6 fc 36 9e 92 13 a6 5e c6 59 43 e3 ae 38 c0 aa 0b 5e 83 7d fa b8 9c f3 18 33 fa cc e9 b0 ef 87 ef cb a5 bc f8 f3 5f f8 2f 78 e6 d6 93 6c 78 a6 bb f6 d2 b6 bd 7a 93 bd b4 d5 fd dc 72 8d 5d b2 50 d6 fc fb 1d f2 b0 2e Data Ascii: W7U'm-cluZaSYD~0Tw$jRl+t0z-#aau4cC0UhZ\|][RTqp\j1/P)Ouwy<m<918\!%6^YC8^}3_/xlxzr]P.
2024-07-04 20:55:35 UTC	7116	IN	Data Raw: 5a 72 08 08 da 4e c5 19 cf ac 6d 98 b5 9e ce 3b 66 8d b2 6d 78 e7 b8 b8 5c f0 cd 57 5e e1 72 d1 f3 e2 0b 4f f2 a1 f7 bf 9f e7 9f 7e 8a 5b 07 33 5a 5b 68 3b 87 71 02 52 b0 ad c3 98 39 05 4b 29 81 e5 62 c1 fd 07 17 bc fe e6 03 5e 7b eb 3e 67 97 03 cb 45 4f ea 7b 5c ba c4 65 4b 5e 0e 5c dc 1b b8 e8 12 17 33 68 bc c1 4a 46 2a 86 da 1a 07 62 31 45 eb 97 73 d6 94 17 92 71 5e 98 75 1e 27 47 90 e7 ea f3 67 c1 cf e6 f8 6e 46 db b5 88 29 78 a7 a9 b2 fb 0f 1f 62 8d 68 50 4e 0a 56 0c de 05 da a6 9d 3a 44 20 85 92 03 8e 8c 71 60 1a 78 e2 89 5b c4 e5 05 0f 1f 9c 63 8b e5 70 de 70 7c d8 f2 c6 d9 25 43 50 86 8e 0c 13 03 c7 08 59 0d b5 fc 30 a5 5e 5d 19 e7 30 b9 10 47 6a 23 eb 30 8d 7b de 18 f3 81 34 0b 9f e3 d1 74 d2 be 41 d7 75 7b 69 9d 29 7e d3 a0 ed ba f1 57 ff 7b 13 Data Ascii: ZrNm;fmx\W^rO~[3Z[h;qR9K)b^{>gEO{\eK^\3hJF*b1Esq^u'GgnF)xbhPNV:D q`x[cpp\|%CPY0^]0Gj#0{4tAu{i)~W{
2024-07-04 20:55:35 UTC	8302	IN	Data Raw: 93 bd 3e fe a6 9c f3 ba 31 f6 5d 43 79 ea 85 67 5d 09 f9 19 23 72 18 43 20 f4 7d 05 4a 5c 01 35 c4 28 75 69 1f e2 a4 d1 6c ed 8e a7 79 de 8c 31 09 db 34 58 29 cc 66 2d 36 19 2e 17 67 9c 5d 5c b2 1c 06 62 9a 5d f9 a5 31 92 25 a8 39 ca 28 9f 46 03 5b 53 bb cf 5a 0f bb 72 17 8a 54 ac d3 58 14 50 34 6d 95 62 54 93 79 18 88 41 89 e9 74 ff 4a a5 c4 75 58 e7 6a 5f e1 2a 54 b2 1a 36 16 04 ab 3c d0 06 8a 04 4a 4e 64 8a 02 42 b2 1e 10 48 05 72 38 d4 ef 75 16 6c c5 35 5f 63 f7 e0 1d ff ad 26 77 56 d3 9a 32 2e aa c6 01 80 10 02 97 97 0b 52 2a e4 02 cb 3e d0 b5 16 63 85 18 06 1c 0d 08 e4 1c 48 a9 4c bc d7 40 ed 8a 51 b0 b5 eb 62 ce 09 0c 6a e1 94 8c b3 06 eb 1d a2 f7 cb 97 5c be c3 60 7e f4 fe ab f9 65 e0 62 c7 5e da 77 af 3e 8e 3c ec 2b bc 6b e5 61 17 16 7a e3 c6 df Data Ascii: >1]Cyg]#rC }J\5(uily14X)f-6.g]\b]1%9(F[SZrTXP4mbTyAtJuXj_T6<JNdBHr8ul5_c&wV2.R>cHL@Qbj\`~eb^w><+kaz
2024-07-04 20:55:35 UTC	7366	IN	Data Raw: ea 36 06 e7 1d 31 0c 58 23 68 fd 29 a4 1a b5 f4 de 63 8a a3 1f 7a 5d 82 94 4a 24 f7 ce e5 68 f7 c0 d1 3d 2e 95 54 2e 4e 8b 9f a8 58 2b f4 11 63 08 e2 79 ed 61 cf df fa e2 37 78 f2 b0 e5 f0 b9 bb 58 29 74 44 1a 1b b1 c6 91 82 26 fa 4c 25 26 1f d9 e4 0a 3a 17 63 46 18 a5 de c1 ac 2e 38 ce 78 0e 6e 79 9a ae e5 e2 e2 82 7e d9 73 ef fc 3e b3 d4 31 9b cd 31 e2 26 5f d5 18 83 c5 a9 29 59 d4 7c 9d cf e6 1c 1c cd f1 ad 27 49 d2 7b 58 31 0c 8a b7 96 2a c0 a3 60 55 e8 a4 19 d1 6a da 58 7c cc 10 68 d3 b2 cc bd 65 e2 af 7c ee 8b fc c5 bf fa 6b dc bf 48 14 e7 c1 44 b2 d4 c3 01 4b 2e a2 48 2c 13 11 19 51 66 a8 eb 50 49 0e c6 67 6c 44 1b 80 03 c4 ac e9 a4 18 e3 24 a0 63 4a d1 d6 34 d2 68 49 e5 15 3f d9 50 31 dc 94 ab 18 46 49 13 51 41 01 8c f7 cf 7a df fe 50 ce e9 e7 8e Data Ascii: 61X#h)cz]J$h=.T.NX+cya7xX)tD&L%&:cF.8xny~s>11&_)Y\|'I{X1*`UjX\|he\|kHDK.H,QfPIglD$cJ4hI?P1FIQAzP
2024-07-04 20:55:35 UTC	10674	IN	Data Raw: 15 08 c1 11 53 25 97 5f d3 d4 88 14 0a c1 c8 24 8d c2 07 48 88 01 b8 d9 75 b8 de 76 e8 7c 80 27 06 94 ca b5 52 d7 58 fc 88 95 87 33 67 a5 21 3a b9 55 18 ab 24 73 04 63 70 f4 88 88 b2 ea 49 05 b8 1d c1 3b 11 f3 16 3a 1e 2b ce 11 40 5e a6 93 c8 09 19 82 4a a5 90 88 23 2f 1b 07 9d ce 44 9f dc c4 07 9e 0b 5e d0 62 50 02 3c ab 32 db 22 58 0a 55 76 e1 56 05 bf 55 5d d7 48 f9 0c c5 66 fa ce 46 61 6b d7 61 9a 26 40 15 1f 42 08 c8 29 21 3b 87 69 9a 65 f4 50 37 c3 79 9a c0 25 c3 75 1d 08 c0 38 0e f8 ce 77 be f3 72 9a d3 3f fc de 8b 17 b7 97 6f 67 0f 8f 85 ce e7 36 f0 4f 63 6f f7 7e 77 1e 42 9f 3f de 66 97 78 d3 73 6f 1b fb 2f 5f 8c dc 06 84 af 38 e7 3a 41 cb 88 37 9d c6 11 94 3d a6 69 ae aa 07 51 d5 d4 bd 17 16 05 d2 45 29 2d 8f 80 ed 76 0b 1b a7 8b 21 e0 62 b7 45 Data Ascii: S%_$Huv\|'RX3g!:U$scpI;:+@^J#/D^bP<2"XUvVU]HfFaka&@B)!;ieP7y%u8wr?og6Oco~wB?fxso/_8:A7=iQE)-v!bE
2024-07-04 20:55:35 UTC	11860	IN	Data Raw: db 34 4f 52 10 f3 0e c3 34 89 4a 43 d3 c0 35 1d 5c 4e f0 25 ab f1 ca 77 1a c7 09 c3 30 d4 f4 40 06 2c 48 85 b1 1b c4 52 30 b0 47 62 42 c3 05 ad 2b f8 f0 66 83 27 db 80 e8 a0 63 90 0e 8d f3 e0 32 23 6f 76 38 0e 7b 04 4f e8 3b 8f e0 0b 40 92 a7 31 02 c0 72 23 89 a5 a2 5d 70 ea 85 89 5c fd b3 2e 66 f2 b5 c5 b4 e4 c0 cb 62 3e 0d a3 ef 83 45 48 59 3d ed df 79 75 cf 00 e5 92 b2 40 8d 65 57 a9 64 71 5a e9 2f 75 a8 42 23 01 17 40 94 51 32 e1 70 3b 21 50 8f 67 ef 3c c5 93 9b 2b b8 d6 21 01 c8 73 00 15 20 92 47 e1 19 5d 64 b4 5d 03 f2 11 cc 11 99 73 45 99 b1 97 51 4b 63 ec 64 8d 3a 58 6b 10 0e a1 c2 50 6d 9c d0 11 a3 89 a2 5e 19 b4 5b 51 4a c1 38 38 cc 2e 20 cd a9 76 49 a6 79 06 a5 82 59 d1 75 d7 d7 d7 b8 b9 b9 86 f7 0e 87 c3 01 c7 61 40 99 59 99 4d b5 35 ca 0c 17 Data Ascii: 4OR4JC5\N%w0@,HR0GbB+f'c2#ov8{O;@1r#]p\.fb>EHY=yu@eWdqZ/uB#@Q2p;!Pg<+!s G]d]sEQKcd:XkPm^[QJ88. vIyYua@YM5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	64633	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:34 UTC	1671	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTcvYzc3Y2Q5ZDMtYzVlZS00MDdlLWI4OTctM2E5OTkwODEwMmM4L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjbiJdXQ?sha=ee9ece7bf4ed9477 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03
2024-07-04 20:55:34 UTC	626	IN	HTTP/1.1 200 OK Age: 1992378 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 22978 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:16 GMT Etag: "3d2832ae69e516a9418a37b685d8b4f9d1bb84dc" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: b5247282241cd33d0081482f62443a0f39812202 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 23134acf-429a-4f56-8e53-0c2b103cce62 X-Runtime: 0.310756 Connection: close
2024-07-04 20:55:34 UTC	560	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 b0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 02 00 04 00 00 00 01 00 00 00 dd a0 03 00 04 00 00 00 01 00 00 01 40 a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e6 00 01 00 01 00 00 00 00 00 00 61 63 73 Data Ascii: JFIFHHExifMM*JR(iZHH02210100@(ICC_PROFILEapplmntrRGB XYZ acs
2024-07-04 20:55:34 UTC	2372	IN	Data Raw: 00 74 00 20 00 41 00 70 00 70 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 2c 00 20 00 32 00 30 00 32 00 32 58 59 5a 20 00 00 00 00 00 00 f6 d5 00 01 00 00 00 00 d3 2c 58 59 5a 20 00 00 00 00 00 00 83 df 00 00 3d bf ff ff ff bb 58 59 5a 20 00 00 00 00 00 00 4a bf 00 00 b1 37 00 00 0a b9 58 59 5a 20 00 00 00 00 00 00 28 38 00 00 11 0b 00 00 c8 b9 70 61 72 61 00 00 00 00 00 03 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 73 66 33 32 00 00 00 00 00 01 0c 42 00 00 05 de ff ff f3 26 00 00 07 93 00 00 fd 90 ff ff fb a2 ff ff fd a3 00 00 03 dc 00 00 c0 6e ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 03 02 02 02 02 02 04 03 03 02 03 05 04 05 05 05 04 04 04 05 06 07 06 05 05 07 06 04 04 06 09 06 07 08 08 08 08 08 05 06 09 0a 09 Data Ascii: t Apple Inc., 2022XYZ ,XYZ =XYZ J7XYZ (8paraffY[sf32B&nC
2024-07-04 20:55:34 UTC	538	IN	Data Raw: 1a 34 68 42 34 68 d1 a1 08 d7 03 a4 27 cc 7a 01 d4 eb 9f 5a dd dd 57 6a 81 6c 5c 95 d7 d0 e3 8c c2 a7 c9 96 b4 a0 e1 4a 4a 1b 52 88 07 df a6 84 2f 2b 7f 8f a6 ed d1 77 5f 8d db 86 05 22 a3 31 f8 94 a8 f2 4b a1 d5 0c 87 64 ca 50 56 7d 8a 44 5c 75 eb 82 35 04 75 39 2d 41 0b 79 6f fc d4 46 93 cc 3f 95 44 76 03 ed a7 27 c4 fe e1 d4 b7 5f 7f b7 42 eb 9f e1 a6 65 46 bb 50 ca 43 a5 ce 46 84 d7 ca 01 59 fa 88 4a b0 7e fa 69 f7 9b cb 6d f6 69 98 24 b8 e0 2b 50 c7 61 d8 7b 0f ce 9e a2 3d 38 b7 24 58 2f 7e d5 2b 3f 0a cd a6 5d e9 77 dd 3b 97 55 a7 89 af 83 e0 c1 42 91 cc 02 b3 d5 7f e5 80 3f 1a b5 36 d8 6d 65 45 b8 6c ad d8 c2 44 95 10 7a 9f a3 d8 1f 41 a8 6f f8 6c 45 a6 6c cf 0f d6 fc 96 a8 9f de bd d3 af ba a6 ed ea 24 7c 17 a6 bc 7a f3 a8 7e d6 51 9c a9 67 00 63 Data Ascii: 4hB4h'zZWjl\JJR/+w_"1KdPV}D\u5u9-AyoF?Dv'_BeFPCFYJ~imi$+Pa{=8$X/~+?]w;UB?6meElDzAolEl$\|z~Qgc
2024-07-04 20:55:34 UTC	4096	IN	Data Raw: 85 26 14 bb 96 72 14 af 01 c5 8e ed 83 e4 40 4e 32 4a 8f e3 5a 7e c6 f0 91 53 dc 58 d4 eb bb 8c 0d e8 ba b7 e2 7b c5 5f 31 6e 47 98 b6 e8 a9 74 f7 43 c4 60 ba 07 b0 e8 35 b2 cf ac d3 58 b3 e5 df 95 b7 59 6a d5 f1 4a 91 16 30 f0 93 3d d0 70 47 28 ef 83 d3 af 7d 46 4e f0 fc 4f ef 1a 25 6a ad b6 3b 67 6d 3d 52 ad 34 a5 c7 4c 7a 5c 72 e9 69 5c bd 02 50 d8 52 d4 a0 3a ab a6 ad 1b 25 a4 4b 10 c8 0d f9 50 3b 95 4c 30 48 4c ee 25 4e 25 cd b1 1c 2e d3 a9 f0 ed f8 db 2b b6 54 6a 6a 13 86 d0 cc 50 0f 28 1e ab 27 98 ff 00 9e 92 ca 16 c6 da 14 fb a2 34 ad 93 b8 d3 66 ba ce 13 22 9d ce 5f 81 3d 07 f6 ad a5 13 8c 7f 30 ed aa d8 d6 38 a8 e2 c7 76 6a 4f 22 91 66 6e c4 e9 94 78 66 4d 45 14 c4 48 53 b1 db 00 7f 15 c6 48 e7 48 18 cf 54 fa f6 d6 d5 c3 97 18 fb ab 1e f6 8d 16 Data Ascii: &r@N2JZ~SX{_1nGtC`5XYjJ0=pG(}FNO%j;gm=R4Lz\ri\PR:%KP;L0HL%N%.+TjjP('4f"_=08vjO"fnxfMEHSHHT
2024-07-04 20:55:35 UTC	5930	IN	Data Raw: 96 b6 ba e2 79 ca 85 b3 2b f6 c5 7f ea 76 09 3e 9c bd 56 80 7b 8c fb 6a b1 d6 36 1e 7e d0 ce de 55 a9 a1 f5 16 3f d2 3c f7 ec 9a f5 7e 34 ad b6 db 8b 8a ab 41 a6 4a a9 cd 4c 35 4a 8e d3 4a c1 79 d0 32 53 93 d8 fb 6a 24 b7 37 79 b8 ad fe ec 42 99 16 dd 66 8c 6a 05 72 22 d3 91 2b 95 72 13 8f 2b 6e be 7e 97 09 e8 47 6d 4d 9d 26 a4 cd 5a 3d 56 db 9c d2 5c 65 d4 a9 39 27 ab 7c dd 01 c6 93 bb 8f 66 ed cb 9e d6 5d a5 5e 81 e2 a1 0a 3e 13 c7 a2 b1 e9 85 0f 5d 43 6d d2 b2 29 32 f1 90 ad bb 75 5b 44 99 77 0a 3e 78 6c b6 b6 d7 78 a8 d4 27 f7 c3 8b 0b 8b 87 3b cc ca 43 53 ed c9 34 82 84 0f e7 4b 53 95 e5 71 43 d1 43 a6 a6 2a c3 f8 78 70 a9 71 22 a5 e2 71 2f 77 5e b4 cc 36 b6 9c 8d 70 32 d6 10 a4 83 85 90 72 4e 73 9d 46 1d 5b 67 77 0f 6d df 42 29 d4 96 b7 0a d7 0e 67 Data Ascii: y+v>V{j6~U?<~4AJL5JJy2Sj$7yBfjr"+r+n~GmM&Z=V\e9'\|f]^>]Cm)2u[Dw>xlx';CS4KSqCC*xpq"q/w^6p2rNsF[gwmB)g
2024-07-04 20:55:35 UTC	7116	IN	Data Raw: ec 8a c5 3e fe dc 8b 46 0d 9f 6a 41 90 17 1d 97 a4 a0 cb 93 29 64 25 28 4b 68 1d 12 3a 9e 62 75 23 bb df 29 e3 b5 54 06 4b 96 b9 a7 8c ac 6c 36 42 eb ac 0f d9 ea 04 72 9d 0d 89 b3 d3 a9 14 fb 7a e4 b5 42 51 71 d3 5d 98 c3 e8 50 c7 cf b0 40 58 43 a3 f7 20 8e 60 3d b1 ad df 74 4c 69 d6 d4 59 cd c4 71 ef 19 e8 33 db 4f 86 54 63 c8 6d d0 0a 7e c4 0c f4 f6 1a 77 d6 1d 9c ba 18 db 9a 8c e8 e5 10 14 d3 4c 49 f7 24 a7 95 2a 27 d4 e1 44 7f 5d 60 77 bb 68 53 0e 95 2e bf 4e 6a 73 f4 e8 32 da 95 32 22 3a 22 52 42 b1 ff 00 ea ac 1e a7 db 5f 3b a6 9d cf 79 2e f7 5d cd 49 86 c7 b1 6a 1c 55 dd ac 4a d9 aa c5 c0 56 25 d3 67 51 64 52 98 6d 23 3f 34 1f 53 6d a9 40 7f da 5c 23 f1 a9 00 e0 72 d7 95 6a 6c 06 dc d0 6a 4d f8 55 03 15 b9 ab 40 47 2f 86 82 02 5b 1f 9e 44 27 51 51 Data Ascii: >FjA)d%(Kh:bu#)TKl6BrzBQq]P@XC `=tLiYq3OTcm~wLI$*'D]`whS.Njs22":"RB_;y.]IjUJV%gQdRm#?4Sm@\#rjljMU@G/[D'QQ
2024-07-04 20:55:35 UTC	2366	IN	Data Raw: ab c9 11 f6 c7 55 39 cc 47 98 74 58 e5 23 52 03 f0 f8 f8 60 5e 97 d4 fb 43 75 f7 5a 96 e5 b1 4b 86 3e 7e 8d 42 92 14 87 5d 2a 04 09 33 c0 ea 10 a0 7c b1 fb 9c e5 58 c6 b6 7b 02 d7 db fe 38 3e 26 bc 52 71 6f 52 a5 52 65 6c c5 97 59 8f 49 a3 b2 96 d3 e1 55 a7 45 60 25 32 5f ff 00 f2 24 04 97 02 8f 7c 81 e8 35 60 de 16 37 02 97 b9 74 19 cf 41 71 b1 51 6e 7a dd 92 82 00 25 9e 81 a5 24 7f 29 48 38 3e 9a 89 54 ea 39 fe c4 1e d6 e1 cf ef f0 ae 8a 0d 35 0c 0e de ce c0 9c 24 5e 5f 05 fb cd 6f c3 bc 2b f4 8a d5 2a a5 4d 90 cb 52 03 10 19 4b 4f 34 1a 6c a4 06 59 56 10 8c 83 8c 8f 6c eb 9e a1 c3 43 95 6b 3e d3 da ce 21 a8 36 ed d0 db b1 da 6f 9a b2 da 3e 72 5a d0 03 a9 0d 38 90 52 a7 c7 2a 53 e4 39 52 73 d3 5d ed c7 f8 90 ee ce c3 5f 35 eb 1f 76 b8 77 91 6b 51 da 9a Data Ascii: U9GtX#R`^CuZK>~B]3\|X{8>&RqoRRelYIUE`%2_$\|5`7tAqQnz%$)H8>T95$^_o+MRKO4lYVlCk>!6o>rZ8R*S9Rs]_5vwkQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	64632	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:34 UTC	649	OUT	GET /2024/05/29/18/25/52/8aebf9dd-6449-45a0-a1e9-f97a64395678/file HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:35 UTC	663	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 71067 Connection: close Date: Thu, 04 Jul 2024 20:55:36 GMT Last-Modified: Wed, 29 May 2024 18:25:53 GMT ETag: "09f7c490b77831331077a34084d50736" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"file"} x-amz-version-id: tTmOBb7GgqAa2XtHvcFDW5.v5ndM62E6 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b0062bb33b961b53be87d688f2bdd9f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: 6uT28a0AEctJBqjvN5cJMbVEHvgpvHUNxCkFt1fggRqfbDEvhxjf0w== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:35 UTC	15777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 38 10 bb d2 19 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME8zTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:35 UTC	12792	IN	Data Raw: 8c 07 96 d5 29 70 18 27 e2 10 68 5d ab 3b 75 2b 34 15 65 a5 0f 99 5c f1 e7 26 f7 5d 13 9d b5 1b 6b ec fd ae 6b ce fa 6e f5 53 f3 7e f6 81 18 a7 b3 3b 9b d7 e2 27 d3 49 f9 10 19 79 cb a3 45 1b fc c5 ce 23 15 c0 29 3d 01 f1 35 8e dc bb 64 1c 4b 49 b9 9c 83 bc de 76 dd ed 54 ca 32 84 e8 da b6 15 63 2d 31 aa 6c e9 e1 92 56 35 0e a5 de 35 88 b1 4c d3 70 b0 cf 4c 71 c4 b9 8e b6 55 e1 b6 c5 ac 63 39 6f 98 f5 2d 4d 63 b0 26 e1 c4 80 75 98 02 4e f6 60 8b fa 61 ea 3a 45 b4 54 06 1e d4 b8 fb 8c 98 0b 49 12 25 4e d8 52 b0 07 bb 17 2d 95 35 f8 72 35 12 4b 94 aa 0f a5 59 34 51 f6 c2 5a 3c 40 12 eb f2 a6 3e 00 f6 ff 76 ff fb a4 a6 de 24 15 ea 2b d5 f0 3b ef 6d 63 4a 06 a9 e5 6f 55 99 3c 64 d5 fa 5d 8c 14 fd be 59 a7 dd 45 5b dd 43 2f 2e f5 d5 d7 9a 46 77 ee 28 5e dc 38 Data Ascii: )p'h];u+4e\&]kknS~;'IyE#)=5dKIvT2c-1lV55LpLqUc9o-Mc&uN`a:ETI%NR-5r5KY4QZ<@>v$+;mcJoU<d]YE[C/.Fw(^8
2024-07-04 20:55:35 UTC	16384	IN	Data Raw: c0 5a fa be e7 fa d5 2b 5c 3e 5a 11 24 b1 2b 03 d2 b6 d5 8c 1b 4a 0a 84 22 0c 53 64 bd 1d 19 86 89 d5 ea 98 c7 1e 53 41 79 2b 85 34 0d 74 de b1 9c f5 34 56 d5 37 6d 9d b0 53 c9 0c 93 08 81 91 50 1f 2e da 8a 0b 06 83 b5 e5 80 12 b3 49 87 57 ca 59 4e 95 32 58 fe 67 1f 29 a5 c3 24 3a 55 f1 81 5c 32 22 96 e5 f1 11 37 4a 33 8e b6 7f 21 fb 7b ef bb 77 7a fe 73 af 9f dd 19 00 5e fc f8 eb 17 7d 65 3e eb e7 cd 00 fe 37 9c f9 ef fb 1f b9 fc 9b ff 12 ff ea b7 bc bd cc 37 4f fc 7f d8 fb f3 30 4b 93 fc ae 0f fd 44 c4 bb 9c 2d 4f ee 4b ed 55 5d dd d5 cb 74 f7 4c 77 cf be 69 df 8c 41 20 40 32 5c 04 d8 17 19 ae b1 b9 de 00 81 31 06 db 18 8c 2f 17 3d e0 6b 8c 0c b6 74 cd 23 63 81 75 11 42 02 0b 49 83 66 10 a3 d9 7b 9d 5e ab ba f6 dc 97 b3 bf 4b 2c f7 8f 88 f7 9c 93 59 59 Data Ascii: Z+\>Z$+J"SdSAy+4t4V7mSP.IWYN2Xg)$:U\2"7J3!{wzs^}e>77O0KD-OKU]tLwiA @2\1/=kt#cuBIf{^K,YY
2024-07-04 20:55:35 UTC	5640	IN	Data Raw: e8 88 7a 6b 81 d5 8b 4b 64 f1 88 83 fd 5b 58 21 68 35 62 4a 9d 7b 78 a3 64 e2 b2 86 52 4f a2 22 8c 55 e8 d2 e1 9c 19 73 5b 55 6e 6e 05 e4 a8 60 94 2e 18 99 92 13 64 96 f7 18 2a fa 1d e7 5d 74 57 d5 71 c3 29 26 42 2a 6b 8a 4c ce 3a 87 b3 66 fc 38 17 e8 6d 7d b3 85 a5 28 2c c3 91 a5 d7 cb d8 de ef b1 dd e9 d3 2f 2d 3a ae 71 ea 91 47 f9 e8 f7 7c 2f 8b cd 79 06 3b 7d ea aa c6 5b 2f be 44 b6 1e 33 77 72 0d 59 4f 69 2f 2d 70 f2 a1 f3 ec 74 3a c8 f5 9b 94 c5 88 18 d0 54 c9 b4 b1 65 de 61 b4 d3 1e d3 d1 fc c6 a4 b1 62 92 c0 bc 73 7e 03 5d 48 a0 00 b2 81 8b d7 33 9f f8 fa b1 ad bc 30 3c 13 68 f5 70 0f 58 01 94 27 6a c0 39 54 52 23 b1 46 e8 b2 54 ce 19 65 b4 4e 4d 59 cc 59 67 2f 0a 21 72 87 1a 3a e7 0e ac 65 03 ed 2e 83 bd 5c e4 6c 38 37 58 df dd ec ec dd 17 03 9e Data Ascii: zkKd[X!h5bJ{xdRO"Us[Unn`.d]tWq)&BkL:f8m}(,/-:qG\|/y;}[/D3wrYOi/-pt:Teabs~]H30<hpX'j9TR#FTeNMYYg/!r:e.\l87X
2024-07-04 20:55:35 UTC	16384	IN	Data Raw: 57 69 ca 84 24 d7 9c 59 39 41 54 af 93 cb 08 1d a7 94 91 84 58 b2 b6 b6 c2 5c a3 c1 c2 cc 0c 42 0a 5e 7d eb 4d de bc 79 83 83 fe 00 27 14 91 88 02 85 6e 35 0f 32 94 5f a6 0c e1 1d e6 ae 22 51 ab c4 cc ab 86 0d 1c 48 55 6d f2 c7 57 26 8e 9b 7f ff bb f1 4e 72 57 c3 bc db da 9f 6e aa 99 fe 52 00 cf 24 73 1c bc e7 34 51 da 88 6f dc da fc 44 7f 54 fc b0 76 e2 ac 90 51 85 99 0e ea 74 9a 28 aa 92 39 13 23 aa 6e 4e 75 b3 38 72 01 c7 ed 48 d3 2c 07 f7 0a d8 ef 34 1a 37 be 19 55 42 a8 12 b7 3a 54 ea 39 94 c0 38 3e 41 76 74 d2 aa d3 b7 72 ed 4d 50 f0 4b 92 e4 5d c5 bf c7 4d c0 71 49 2d 67 03 5a c9 59 ef ae 0b 45 d1 e9 51 ee ed 33 8f 62 46 5b f2 dd 3d f2 fe 80 61 9e 13 b5 1a 2c 9d 39 cd 85 c7 2e b1 72 f2 04 5b 3b db dc b8 7d 93 9d 83 3d 6e 6e de 66 f5 cc 29 e6 57 97 Data Ascii: Wi$Y9ATX\B^}My'n52_"QHUmW&NrWnR$s4QoDTvQt(9#nNu8rH,47UB:T98>AvtrMPK]MqI-gZYEQ3bF[=a,9.r[;}=nnf)W
2024-07-04 20:55:35 UTC	4090	IN	Data Raw: f1 dd 4e 6a 07 4f 07 31 73 bc 32 07 6e 9e 94 cb 1a cc e9 33 e5 cc 20 ce f7 b5 65 7d 17 e2 d3 33 6f 7c ca 91 a5 9a c9 d4 7f 01 28 52 42 14 63 09 8d 25 d5 40 f4 5d 84 d3 23 d2 07 a8 03 87 3e 5d 8a f5 75 e2 10 3a 37 6d a4 ad f3 e4 f3 7d 72 25 0b b5 64 a2 18 3a f5 fa 32 7d d1 e7 a6 d5 41 e8 1a 4e 12 b2 f9 74 8b b5 8d 75 f4 83 2a be 48 58 dd d9 62 79 65 99 9b 77 1f 39 fb e3 f7 d4 06 03 d4 a6 87 71 76 0a 7e 48 78 73 41 4f 37 c8 d5 eb a8 6a 82 45 42 d1 cc d1 44 e3 aa e7 a0 44 31 b9 6a 89 64 b9 4a 61 63 9d c2 ca 1a 0a 02 23 80 82 66 11 b7 6e d8 aa e7 69 89 80 db db 16 96 11 d2 fd c5 e1 fd bb b7 d8 a1 86 e3 2b a8 42 50 dd df c4 b0 2d c2 30 40 28 02 4b d5 59 ad 35 d0 74 83 96 d3 27 b1 2d a2 92 0d 42 61 79 75 05 c5 d9 60 30 f4 10 41 c4 d1 4f af 71 8e 2f 89 2e ae 51 Data Ascii: NjO1s2n3 e}3o\|(RBc%@]#>]u:7m}r%d:2}ANtu*HXbyew9qv~HxsAO7jEBDD1jdJac#fni+BP-0@(KY5t'-Bayu`0AOq/.Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	64635	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:35 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTUvYzQ2OTQ1YmYtMDliNy00MTIwLWE2NmYtZjM0NmVkMTVkNmFhL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=64b05b453234c3bb HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_52CJ0NGGB7=GS1.1.1720126517.1.0.1720126517.0.0.0; _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03
2024-07-04 20:55:35 UTC	626	IN	HTTP/1.1 200 OK Age: 1992380 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 65683 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:15 GMT Etag: "eec77880461e9788c44ce61f0f699500bf59d82b" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: ff7a5c9e8892be56c32d912a757ac07586927614 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 046486a1-6730-4a1b-9a12-992b6d1d8e34 X-Runtime: 0.068686 Connection: close
2024-07-04 20:55:35 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 37 80 04 cf 88 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME7zTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:35 UTC	2372	IN	Data Raw: d7 8d 38 4d 6f fe 06 9c 96 b9 ef 5d e6 46 4e ff 00 88 13 00 ff 0c 31 73 c2 00 00 80 00 49 44 41 54 78 da ec fd 79 bc 6d eb 59 d7 89 7e 9f b7 19 63 cc 39 57 b3 bb d3 e6 a4 45 20 40 e8 09 48 a3 a0 a2 d2 28 75 2d 29 11 29 b1 0a b5 28 af 7e 4a 2d eb 72 ad ba 58 b7 aa 2c ab f4 73 d5 5b 5a 96 55 e5 55 ac 2a 3b 50 54 14 21 a1 13 85 40 48 02 04 12 20 24 24 39 c9 39 27 a7 d9 ed 6a e6 9c 63 8c b7 bd 7f 3c ef 9c 7b c3 47 ba 90 64 25 64 3d 9f b3 cf 6e d6 5e 6b cf b5 d6 fb 8c f7 69 7e 8d 70 19 1f 94 f8 df be f5 9f f2 bf fd f5 ff 85 cf 78 f5 67 ac ee dc 3d ff bc 93 3b f7 fe f3 10 c2 6f eb ba de cf d3 cc 7a bb c6 86 11 97 32 4b eb 38 58 f6 3c 72 b8 e0 fa c1 40 df 7b 8e 97 3d ab ce 63 28 c4 69 a6 d4 4a e7 2c d4 82 37 86 de 19 4a ad cc 73 04 23 e4 92 99 62 24 86 4c 48 19 Data Ascii: 8Mo]FN1sIDATxymY~c9WE @H(u-))(~J-rX,s[ZUU*;PT!@H $$99'jc<{Gd%d=n^ki~pxg=;oz2K8X<r@{=c(iJ,7Js#b$LH
2024-07-04 20:55:35 UTC	538	IN	Data Raw: 70 d1 1e 00 8a e6 82 c2 1c 32 22 95 4a 6d b7 b2 be 5e 5b 33 4e 0a de eb 5e 39 88 f6 d9 eb 58 98 63 c5 58 38 18 7a 9c eb d9 cc 11 e6 89 f3 10 88 b1 55 12 e8 4e d8 b5 fd 70 2a 19 31 42 4c 01 63 84 03 bf 30 4c f9 55 f3 0b cf ff 97 4f 4a 9e 3e fd 13 3f e3 35 bf fd 0f 7c 55 ac ef 7c 12 f9 0d 2f bf e8 63 70 e1 71 59 42 bf 1f f1 55 ff fd 7f cf d9 fb 9e e5 ea a3 8f 2d cf ee dd fb 4f 6a 98 7f cf 52 6a ff e2 ab c7 bc fc b1 87 78 d1 8d 1b 2c 87 0e 67 8c ee 67 45 30 25 ef 6f 60 6b cc be 74 d4 49 ac 02 1a ac 68 42 52 f4 70 8b 55 e8 64 ad 15 63 1d 52 ef c3 13 05 41 c4 b4 89 b3 d1 d5 8d 08 39 27 9d 28 4b eb 67 ab a2 b4 72 d1 c9 b0 33 16 c5 73 14 4a d6 9b 79 07 7f dc 4d 89 a5 7d 7c 80 d2 86 56 b5 ad 90 32 90 73 d1 8a b7 96 fd d7 c4 88 ec f7 d6 18 f0 ce d2 39 8b 48 65 2e Data Ascii: p2"Jm^[3N^9XcX8zUNp*1BLc0LUOJ>?5\|U\|/cpqYBU-OjRjx,ggE0%o`ktIhBRpUdcRA9'(Kgr3sJyM}\|V2s9He.
2024-07-04 20:55:35 UTC	4096	IN	Data Raw: fc cd df 2f 31 fc de 43 6f fd 8b af 5f e3 f1 87 1e e2 f8 60 c5 6a e8 e9 bc c3 19 d3 56 45 19 2b 09 6b 5a 19 5c 77 e8 a4 72 1f 21 55 35 c9 74 1d 64 75 78 65 6d 4b 3e db 92 d9 62 ac 26 33 2d 49 c5 da 76 8d d7 fb 43 2a 01 69 09 6f ac c1 1a 05 83 58 b3 bb b1 f5 df 04 f6 37 f9 6e 9a ac ab 29 28 ec 92 52 93 39 95 42 8c 51 6f ed 5a f6 7b dd fd 03 a4 0d d4 10 bd dd bd b5 4a 80 48 a9 25 b3 96 fe a5 54 36 31 12 72 a6 50 a8 b5 e8 ca ab bd 1e 63 1a e9 a1 56 aa 81 62 40 ac ae ce ac 88 74 25 3f 61 53 ee 3e ed 37 7d f1 1b de f8 a3 3f b2 f9 af ff dc ff c0 f7 7c e7 bf bc e8 63 71 61 71 99 c0 bf ca f8 9a 3f f2 c7 78 e7 33 37 c9 21 be 2c ae d7 7f 66 51 f3 c7 bd e8 da 55 5e fe d8 a3 3c 74 7c c4 72 b1 a0 73 ae 0d aa da ad 4b c6 50 a0 16 4c cd 48 9b 10 4b fb 33 c5 04 ef ee be Data Ascii: /1Co_`jVE+kZ\wr!U5tduxemK>b&3-IvC*ioX7n)(R9BQoZ{JH%T61rPcVb@t%?aS>7}?\|cqaq?x37!,fQU^<t\|rsKPLHK3
2024-07-04 20:55:35 UTC	5930	IN	Data Raw: 47 29 f9 c5 25 05 ba be 67 e9 3d 07 5e 95 26 ed ce 2a 13 4d 20 b3 43 3c ec 38 bb ba 13 42 dc 7d 4f 22 9a 6c 95 de 5c 45 d7 49 a5 34 00 7e da d3 ff 48 ec 4b 5a c4 34 3d e6 8c b4 32 7a 8f 49 6e 37 b3 0e c4 75 6f 5b 73 c6 b8 5d 1f dd 56 41 4d 34 5d da 8d 79 7f 98 d6 78 c5 6d 57 2c d6 37 99 9f d6 03 17 7d 58 38 e7 28 35 91 0b 54 76 c3 a6 42 2a 85 90 2b d6 2b 20 c3 24 21 c4 48 c9 0d 31 56 9b c7 52 ad f4 56 a1 a4 de 39 c4 08 43 e7 f5 eb 51 a0 e4 c2 26 a9 cb 83 11 c1 39 4b 0c 91 2a da 3f 8b 15 6c 11 72 d3 bd ad b9 62 c5 34 e2 88 96 ed 49 90 6a c5 75 39 8a ec 5f e3 af ff b8 ec 81 7f 41 7c dd b7 7f 1b d7 4e ce f8 e2 af fe 6a 9b a6 f1 95 39 c6 eb b5 56 16 43 c7 f1 6a e0 60 b9 64 e8 3d c6 d8 36 b9 2d ad ec a3 91 13 9a 82 a4 75 60 1d 62 3d 58 07 62 a9 62 28 ba 64 52 Data Ascii: G)%g=^&M C<8B}O"l\EI4~HKZ4=2zIn7uo[s]VAM4]yxmW,7}X8(5TvB++ $!H1VRV9CQ&9K*?lrb4Iju9_A\|Nj9VCj`d=6-u`b=Xbb(dR
2024-07-04 20:55:35 UTC	7116	IN	Data Raw: a7 10 66 9c ef f0 ce b1 f4 0e 3b f4 f8 9c 91 92 c9 b9 90 72 62 9a 23 b7 ee 9d 71 6f b3 65 75 e5 06 57 8e af 33 e5 cc c9 ad 3b bc fb 99 a7 59 6f d7 2c 16 3d c7 d7 6f 70 a7 2c 78 e7 d3 ef 63 95 02 07 62 58 7a c7 d1 c2 73 b4 58 d0 77 03 c3 b0 c4 2d 96 e4 38 71 3e 46 ee ac 47 0e 0e 16 5c c3 ee 05 d3 6b c8 e4 a9 3d 38 52 62 0c 33 53 88 8c d3 c8 76 9a db c4 39 13 63 93 a3 45 88 ad 84 76 d6 32 f4 1d c7 87 47 2c 86 25 eb b3 35 b7 4e 4e 18 a7 51 95 45 0e 8f 79 f9 c7 bf 92 a3 e3 ab fc f4 4f bd 9d d3 9b cf 11 4e 6e f3 d4 f9 5d 36 eb 53 3a 6b 39 72 ba bf 1d 4b c5 58 c7 79 88 9c cc 89 a5 77 0c 06 ee 8e 91 54 27 1e 3d 58 30 78 95 cd 6d ba 99 6a 48 61 da b0 cb aa 83 45 a1 59 c8 34 07 45 50 dd 4d 69 a6 de d6 98 e6 99 f4 f3 dc 6b 1a c7 58 6f 61 d3 f4 bc 3a a7 5a 63 e1 f4 Data Ascii: f;rb#qoeuW3;Yo,=op,xcbXzsXw-8q>FG\k=8Rb3Sv9cEv2G,%5NNQEyONn]6S:k9rKXywT'=X0xmjHaEY4EPMikXoa:Zc
2024-07-04 20:55:35 UTC	8302	IN	Data Raw: 68 4d 1b 9e 04 f2 bc 55 63 70 6b 08 63 a4 94 8c 73 16 aa c5 3a 8b ef 3c 5d 37 20 ae e3 64 b3 e1 de c9 09 a0 a5 e3 94 20 36 4c 61 6f 84 83 55 cf d0 39 ac a8 3b 41 ac 91 31 ce dc 3d df 72 eb 64 cd 9d d3 0d 27 51 d5 33 62 8c 4c 31 13 53 6c 25 ac 69 4c 1f b0 52 31 52 1a 3b 4a d1 49 d7 56 4b 6e 2c 07 96 56 da db 1b 71 c0 1a 2d d0 53 24 8e 13 b5 6b 0f a7 52 f7 03 26 63 15 b4 62 44 6d 54 ad 75 84 12 db 44 59 7b d9 58 ee 4b e4 88 69 c2 f4 4d 94 60 47 e4 77 cd a7 a9 09 75 68 6e 66 a5 35 22 3b 65 ca 48 2d 95 5e cc 5e 93 2b e8 f3 0c 29 85 21 66 66 89 ca b7 36 42 88 33 e3 76 4b ce 19 bf 58 92 72 e5 2c c5 1f 3f 1d ae 7e db b5 37 fd 9b 79 fa 82 2f 61 fd 31 af b8 e8 a3 f6 01 89 cb 04 fe 05 f1 8e 70 ce 3b ce 22 37 e7 fc fc c3 8b ee ad 1d f2 39 35 47 c9 bb be ae 99 6b d5 Data Ascii: hMUcpkcs:<]7 d 6LaoU9;A1=rd'Q3bL1Sl%iLR1R;JIVKn,Vq-S$kR&cbDmTuDY{XKiM`Gwuhnf5";eH-^^+)!ff6B3vKXr,?~7y/a1p;"795Gk
2024-07-04 20:55:35 UTC	7366	IN	Data Raw: eb 3c 72 f5 8a de b6 07 2b 8e 56 4b d6 e3 c4 c1 d0 69 5f 5c 32 eb 69 6c 2b 2b e1 78 b5 62 8e a9 61 8f 0b db 18 d5 80 2c 67 02 2a b9 93 72 a6 16 c3 1c 15 a4 b1 9e 66 c6 39 32 35 b8 64 c8 95 d3 29 b0 0d 89 b9 61 98 77 d2 af b1 56 e6 94 09 a9 a0 4e 48 2a 9d 93 9a 64 ad 1a 9c 37 70 65 1b 3a f7 ce f2 e8 d1 8a e3 65 af 36 a2 02 74 fd 0f 76 37 5e fc 2f 2c c4 9f 7a fe 47 e1 fc a2 bf db 1f de 71 99 c0 ef 67 bc e7 c7 5f cf 27 fe d6 2f a7 bf 76 e3 76 0e 5b 9b 62 7c f5 34 4f cb 98 f2 7e 70 73 3e 4e 9c cf 91 58 68 82 e7 99 be 11 18 0e 16 03 ab 45 4f ef 3b d6 e3 c4 f9 38 e3 9c c5 5a c7 ad f3 91 9b e7 1b 9e ba 79 87 bb e7 1b b6 73 c4 3a a5 12 1a 31 5c 39 58 72 bc 5a b0 9d 66 30 06 eb 2c d3 34 53 51 5b d2 29 eb a4 5a d8 25 50 a2 50 d9 86 c8 94 32 be 53 85 c8 31 26 8a 18 Data Ascii: <r+VKi_\2il++xba,grf925d)awVNHd7pe:e6tv7^/,zGqg_'/vv[b\|4O~ps>NXhEO;8Zys:1\9XrZf0,4SQ[)Z%PP2S1&
2024-07-04 20:55:35 UTC	10674	IN	Data Raw: 96 1a 41 25 ef e1 c7 11 9e eb 92 5a 6b 78 1f e1 3d 4d 9f 07 24 5c 94 3c b6 a0 d1 de 07 0c c3 88 e3 c3 23 3c ff ec 93 38 f8 fc e7 a0 10 30 6f 2c 66 8d 43 eb 1a 74 ad 25 23 e0 72 09 31 a3 22 62 f0 40 8c 1c 92 93 a7 24 0f 46 47 84 52 14 7e 5b a6 1b 1a da dd 9c 3f c7 cc 3f 96 d2 4e 8a 09 de 53 0e ed 43 c8 a0 95 12 a3 55 1a d6 58 a6 3b 8a 62 46 22 6e 33 1b b3 51 a0 3e 5e a6 43 02 8a 85 04 12 a0 12 9c d5 7c 1d 82 03 a4 9c df 8b 47 0e 5a 63 f7 15 af c1 c5 07 5f 09 d7 34 08 31 a1 1f 02 06 1f 30 0e 1e a7 7d 8f 15 eb 56 7b 4f 0a 9e a2 22 42 6b c0 07 26 b8 96 ce 64 93 18 23 b6 96 3b d8 de de 86 e3 be ea 94 48 94 c0 39 07 e7 0c ba c6 c1 18 6d 0c 70 66 3d 0c af 4a da be 6e 77 e7 dc f6 df ff 07 ff e7 c9 72 fb dc d1 8b 4d 37 bc fe 4d ef c1 e3 1f fb ed d5 e5 f4 1f ad 01 Data Ascii: A%Zkx=M$\<#<80o,fCt%#r1"b@$FGR~[??NSCUX;bF"n3Q>^C\|GZc_410}V{O"Bk&d#;H9mpf=JnwrM7M
2024-07-04 20:55:35 UTC	11860	IN	Data Raw: 85 88 94 88 dc 90 38 2a 41 02 fc f2 26 6c bf ea ed d8 da dd c1 e3 bf fa 2b 78 f6 b9 e7 61 4c 87 38 8e cc ad a6 f0 96 06 8a 69 a4 14 e0 87 9e bc 37 7b 25 eb 1a 68 eb f2 38 19 89 2a 48 29 43 da f3 2c a0 15 94 a2 88 41 9a 29 44 b0 de b5 0e d6 39 34 1a 38 39 bc 82 f5 30 a2 9b ed 62 39 9f 61 b1 98 a1 9b 75 e8 9a 06 8e a7 36 66 22 4a 7d d8 57 ac b4 c4 25 47 ab a6 7b 7c 2a 57 cb 5d 66 c6 40 c5 80 e4 6c ce 7d 53 e2 83 98 d1 eb 08 ca ec 02 62 69 2f 55 74 04 79 9e 75 6c 6d c1 22 88 50 97 a0 12 f5 7f 6b b0 ee 56 04 ac 32 d0 29 a1 b1 06 c3 40 4d 15 5a 83 40 bb 7e 80 0f 1e ab f5 1a bb 3b bb b8 78 66 ff d7 6f c0 7f fc 4f ff 97 f8 e7 ff e4 ff db be fb 9d 5f f9 e1 33 7b e7 7e 50 39 7b 9b 49 94 cb 09 ed 2e 78 4f 2a 83 21 e4 f0 23 23 c9 52 17 82 30 a4 68 da 80 d4 ec 84 41 Data Ascii: 8A&l+xaL8i7{%h8H)C,A)D94890b9au6f"J}W%G{\|W]f@l}Sbi/Utyulm"PkV2)@MZ@~;xfoO_3{~P9{I.xO!##R0hA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	64634	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:35 UTC	649	OUT	GET /2024/06/12/16/56/27/4bf0ffc3-dcee-4f4f-8992-46e2b20e4b25/file HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:36 UTC	663	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 68746 Connection: close Date: Thu, 04 Jul 2024 20:55:36 GMT Last-Modified: Wed, 12 Jun 2024 16:56:29 GMT ETag: "704a3874a4a3024b07b923c9363d3b27" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"file"} x-amz-version-id: 4vLGcUO3T.fwnXZzhEwyHVJ0OP.uB2Ss Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 19f569e782b5b925c41d8bc4e292cc7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: 6f9r07hQ8QvjipqapD2Qf4xeYmRbQfP0NHEHGrMKi3ayo9PqGiHwzA== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:36 UTC	7585	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 33 87 69 0b 91 00 00 80 00 49 44 41 54 78 da ec fd 79 d4 6d 69 5e d7 09 7e 9e 69 0f 67 78 a7 3b c6 1c 19 19 39 92 4c 02 26 66 0b 5d a2 88 02 65 29 a2 88 a0 50 2a 62 29 da 96 65 bb b4 9a ae ee b5 ba db ee 55 ab ab 7a ad 2e d7 6a cb a2 2c 0b cb 46 6d 51 2c c5 72 51 a8 20 f3 94 90 03 39 47 66 64 cc 71 c7 77 3c e7 ec fd 4c fd c7 ef 79 f6 39 37 32 51 50 c8 9b 70 63 c3 9b 37 de f9 9c f3 3e bf Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME3iIDATxymi^~igx;9L&f]e)P*b)eUz.j,FmQ,rQ 9Gfdqw<Ly972QPpc7>
2024-07-04 20:55:36 UTC	16384	IN	Data Raw: 70 5a 02 29 06 b2 1f 69 4c e6 60 6f c1 c3 0f 5d e1 ca d1 3e 6d 23 c3 26 67 1b ac 6b 31 4d 87 eb 66 60 5b 4e 57 23 77 cf ce 39 5f 6f 48 79 ab 53 a5 93 64 f4 b6 6d 98 f5 82 d2 52 c8 4e 95 94 88 09 42 16 d5 0a 83 4c 9e 73 16 a2 bb dc 60 24 a7 c6 29 43 c9 90 ab ee 94 75 31 07 53 94 00 ab 59 59 55 71 3c 35 e9 58 4d 0a 1e 6c 77 cd 79 07 42 4a 41 7c c9 8d 24 17 99 1c 41 a6 65 25 c4 fd 54 57 59 65 52 9d 4a af 2e 32 ba 32 54 73 c6 d0 58 68 8b 2c 10 95 fc 9f 03 b9 3c 06 63 b5 a8 70 a4 44 52 c2 60 2a 10 b4 89 3f bc bb 42 db 2d 9d eb 95 8b bc 6d 8e 11 b4 c6 19 5b 2c 5e c3 5e 0c fe 0b 09 f9 91 ef fc cf fe 8b db 7f f7 1f 7d 4f fe a3 df f8 c7 f8 ee ef f9 9b f7 fb 08 fe 3b 5d af 07 30 25 4b a5 22 0a 97 93 b6 c6 a8 58 78 b8 a8 32 9d 2d a0 fa 1c 3d 3a 47 ba c6 71 74 b0 c7 Data Ascii: pZ)iL`o]>m#&gk1Mf`[NW#w9_oHySdmRNBLs`$)Cu1SYYUq<5XMlwyBJA\|$Ae%TWYeRJ.22TsXh,<cpDR`*?B-m[,^^}O;]0%K"Xx2-=:Gqt
2024-07-04 20:55:36 UTC	1024	IN	Data Raw: d6 26 bd f8 89 57 b9 fc c4 1b ef eb b9 7e 60 02 38 2b 45 56 36 c7 34 e4 48 14 73 13 b3 65 1d d5 83 52 f7 92 b9 88 c1 9d 9c 9e 31 78 5f 20 77 52 be 29 53 d2 ac 66 f2 eb 01 aa eb b6 64 23 a3 51 49 33 35 dd 21 71 76 7a c1 f9 c5 80 d1 ed d4 97 a9 14 e9 1a c7 a2 ef c9 26 61 72 22 2a 5d 94 1c cf 31 da d2 f5 3d 5d d7 a3 5d 43 56 ba 48 ea 08 07 39 47 18 d7 81 9c e2 34 05 ce 75 c0 63 40 35 60 9c 00 46 e6 f3 9e bd 83 3d 96 cb 45 d9 43 3b 8c 35 42 ed f3 42 7e 48 31 91 82 d0 05 33 65 87 aa 24 ab ef 28 4f a3 12 28 9d ee 09 ba 9c b7 fa 5f 95 ac 3f fd 9b b7 2a 21 95 e6 57 f5 c2 a8 37 81 9a 41 53 c6 d5 e9 33 5b 90 c7 ae 37 70 fd fa aa db 55 9f 73 0d fa 5d e5 c9 a9 04 67 47 ef 7a d7 44 ed 1e 01 00 b1 be c9 b9 30 bc 50 18 db 28 6d 1b e3 ba de e4 31 f4 31 e5 dc cf e6 e9 ad Data Ascii: &W~`8+EV64HseR1x_ wR)Sfd#QI35!qvz&ar"]1=]]CVH9G4uc@5`F=EC;5BB~H13e$(O(_?!W7AS3[7pUs]gGzD0P(m11
2024-07-04 20:55:36 UTC	16384	IN	Data Raw: 53 e6 86 10 00 35 61 a1 f5 6b 7a 5f 81 8d 86 49 ec 60 3b fc 2a df 1f 03 64 43 db b6 13 f4 b4 ea 4b 57 0b 54 63 0c 86 8a b2 cc 8c c3 60 9a 5e af 9d eb 4e ad 36 31 c6 80 1f 47 fe cb ff fb 5f e7 2f fd 95 3f 75 df ce f4 83 13 c0 39 a1 c8 da 7b 7f 64 a3 be 12 43 36 ab f5 9a fd 3d f1 ae 0d 21 d0 75 dd 3d 53 cc 8c e2 f4 fc 82 3b c7 c7 3c 79 fd 60 e7 9e 5d 20 95 53 e9 58 fe 55 65 30 bb c3 49 55 0a ac 51 cc 67 3d b3 7e 8f be e9 45 91 32 29 fa c5 82 db c7 77 70 ce f1 f8 13 4f d0 76 8e d9 a2 67 ff ea 15 8e d7 17 1c 3d f2 10 6f 79 db 5b 99 f7 33 3e f2 a1 8f b0 79 f6 79 be e0 cd 6f e6 b7 2e 17 bc fc fc 0b 7c e8 43 1f e2 93 cf 3e cb b8 19 09 21 0a b4 b3 6d 51 19 d6 17 17 f8 d1 8b 87 92 16 b4 d3 e8 03 94 36 c1 16 b9 1d 6d 35 39 08 9c f1 ee e9 39 ea e5 57 99 1f ec b1 58 Data Ascii: S5akz_I`;*dCKWTc`^N61G_/?u9{dC6=!u=S;<y`] SXUe0IUQg=~E2)wpOvg=oy[3>yyo.\|C>!mQ6m599WX
2024-07-04 20:55:36 UTC	1024	IN	Data Raw: af 01 4a c4 a4 de b1 b0 df c4 13 6a 4a 52 ae d1 35 cc 2e 5b ca 74 49 ce 35 16 c1 f8 24 a5 30 bd ff 5c 15 67 64 d9 c8 d4 49 c5 3f 8a f7 cf 22 99 5b 8e 5f 38 e1 52 8a 04 99 d6 c7 f8 fe 80 f8 f5 40 7e 2a c7 b8 78 fd b5 37 68 18 07 fc 1b df f9 47 be 20 6b fe b1 32 e0 9c 81 ff f4 6f ff 03 fc 89 7f f7 cf c1 87 e9 20 c4 f0 25 20 7a d2 30 59 b9 50 0f 49 74 a0 64 cd ce 96 0a f5 32 42 9a 47 12 75 8a 88 94 a2 d4 6a b9 c5 ce 5a f6 64 29 4e a0 1c b1 5e f6 38 3e 58 62 b9 68 b0 ec 5b 2c ba 06 d6 f0 07 30 03 4a 1e 92 14 d7 f9 ae e6 a9 ea 11 52 85 50 ef 33 bf f6 7b 68 d5 18 f6 73 e5 3a 67 ae 0d bd 0e 99 15 69 be 2e 9c b4 7b b9 b6 be 5f 4c 49 d4 27 67 46 54 14 b4 7b 37 74 9f 59 58 35 7b e9 51 ac ab 47 52 28 e5 9a 91 31 0c 00 ee f0 3e 85 53 ca 8d cc 4c 67 8c 01 a3 86 ef 35 Data Ascii: JjJR5.[tI5$0\gdI?"[_8R@~*x7hG k2o % z0YPItd2BGujZd)N^8>Xbh[,0JRP3{hs:gi.{_LI'gFT{7tYX5{QGR(1>SLg5
2024-07-04 20:55:36 UTC	16384	IN	Data Raw: 2d bf b1 2e 03 88 fa 44 78 91 6c fe d2 29 0c 17 19 e9 9f b4 64 de ba 7d eb f9 a8 dd 59 ff ac 8f c7 ca 03 5f 5c 6e f0 d5 ef ff 10 85 38 dd 34 06 ef 42 c6 89 25 83 b6 ed b8 01 9d c0 c2 3a 46 a9 94 51 d4 15 23 40 09 24 4f f5 ae 39 07 16 38 6f 08 ce 11 ac 01 e7 be 08 68 6c c6 c1 b2 c3 8d e3 35 0e 16 1d 56 5d 8b 65 b7 c0 b2 5b a2 6b 3a 38 e3 4a d3 81 f2 21 73 15 8a e6 ac 2a 20 b9 b0 97 52 b5 b8 d9 41 73 43 be 40 c3 fc ef cc 71 24 c9 13 39 21 8b b4 6c 8e 11 59 c6 af 18 b0 e2 86 82 68 9c 7a e7 e2 62 48 a5 38 65 0e 12 84 81 d5 38 82 33 7c ae 1a 2b c4 18 31 f9 20 2a 20 b5 f1 64 58 ca 00 22 48 f5 3e a4 bd ce 35 2d 8b e0 29 7d 31 cf cd 05 19 09 21 45 21 53 60 be 3e c2 fb de dd 42 c5 a0 0c 95 08 85 08 25 0c a6 1a a1 97 7c 3b 04 ce 5d 59 58 81 40 c6 21 8b 04 ec 4c 95 Data Ascii: -.Dxl)d}Y_\n84B%:FQ#@$O98ohl5V]e[k:8J!s* RAsC@q$9!lYhzbH8e83\|+1 * dX"H>5-)}1!E!S`>B%\|;]YX@!L
2024-07-04 20:55:36 UTC	9961	IN	Data Raw: dc 2d c3 d4 01 f7 fe 8e b9 3f a9 4f ff 66 5e d0 bb c7 73 dd ce ac 5f 0b 49 9e 57 aa 70 af e5 ef b2 8c fe 34 da 54 60 10 6c 90 7a 6d dc 59 34 dc 0c c1 8d 82 21 04 96 5e a5 79 86 ad 55 46 94 50 1d 63 02 b2 86 e7 aa 13 05 a1 9d fa 00 0a a9 88 eb 69 49 7d 67 11 17 16 17 78 63 54 24 b6 3a 67 48 8e 9c e4 2b a4 74 a2 9b 29 33 ee 14 20 93 b2 9c 6e aa cc be 29 4a 27 e5 ab ca c1 1a 42 d7 f7 98 3c 87 a3 4d d3 60 3b 6c 10 63 c4 62 b1 40 b8 08 08 d2 cc df 76 0d a2 8f 88 36 82 40 e8 da 0e cb e5 12 83 67 54 bf 69 1c ec c4 a3 44 99 e2 59 e3 11 33 9e 52 6a c3 d5 52 22 89 9a 72 9e 35 bd f4 be eb bd d5 08 43 f5 a8 f4 9c b5 d9 a6 8e ee ae 52 37 e7 ef b5 e6 0b 88 3a 48 e0 f0 78 b5 e0 d6 4b 65 7e 59 63 10 62 c4 66 b3 41 77 78 c8 65 a1 10 d1 76 16 8b a6 c3 76 c8 38 58 af 30 4d Data Ascii: -?Of^s_IWp4T`lzmY4!^yUFPciI}gxcT$:gH+t)3 n)J'B<M`;lcb@v6@gTiDY3RjR"r5CR7:HxKe~YcbfAwxevv8X0M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	64636	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:35 UTC	1430	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMTAvMDAvZThiODgyMTktMDkwNS00YjI0LTgxMTctNjRiNDcwNWExNGQ1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjbiJdXQ?sha=34644bba1454c484 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:35 UTC	625	IN	HTTP/1.1 200 OK Age: 1992380 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 9235 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:15 GMT Etag: "488996cc5c53b18309be066fe3eeb21ce4d7ed1f" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: f9226c3dae6b3f1037eeab02e0116cd1a5caebf3 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: dc8b26b0-439f-43d6-b948-f8717a52a405 X-Runtime: 0.344411 Connection: close
2024-07-04 20:55:35 UTC	561	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff e1 00 58 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 02 01 12 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 26 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 06 9c a0 03 00 04 00 00 00 01 00 00 09 ea 00 00 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e6 00 01 00 01 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFHH8Photoshop 3.08BIM8BIM%B~XExifMM*i&(ICC_PROFILEapplmntrRGB XYZ acspAPPLAPPL
2024-07-04 20:55:35 UTC	2372	IN	Data Raw: 30 00 32 00 32 58 59 5a 20 00 00 00 00 00 00 f6 d5 00 01 00 00 00 00 d3 2c 58 59 5a 20 00 00 00 00 00 00 83 df 00 00 3d bf ff ff ff bb 58 59 5a 20 00 00 00 00 00 00 4a bf 00 00 b1 37 00 00 0a b9 58 59 5a 20 00 00 00 00 00 00 28 38 00 00 11 0b 00 00 c8 b9 70 61 72 61 00 00 00 00 00 03 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 73 66 33 32 00 00 00 00 00 01 0c 42 00 00 05 de ff ff f3 26 00 00 07 93 00 00 fd 90 ff ff fb a2 ff ff fd a3 00 00 03 dc 00 00 c0 6e ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 Data Ascii: 022XYZ ,XYZ =XYZ J7XYZ (8paraffY[sf32B&nCC
2024-07-04 20:55:35 UTC	538	IN	Data Raw: 33 80 5d d0 1e 9f 15 ed fc 36 d2 34 fa cb 88 d6 9a fa 68 65 66 9f b1 cd df d3 cd 51 01 89 d5 d5 5c a4 34 b5 ae 00 88 e3 69 71 c9 00 b9 ce 1b 61 b9 39 d7 6a 2d 03 3d da 8e cf 77 a4 86 39 ae 56 69 1d 51 0d 3b b6 6d 4b 0b 71 2c 04 fe 1e 76 f4 3e 0e 0d 29 f9 b8 b2 b5 fc 12 f3 23 58 ec 16 db e5 05 25 19 b6 47 0b 61 aa 1f 69 24 47 1f 47 f7 b1 ef 00 5b 9d b7 f7 41 f2 57 e9 6c 1f b5 16 4b dd 05 de 9a 23 59 15 3c b2 52 5c 61 1c 92 b0 b1 a5 cd 90 3c 61 cd 3b 67 19 f1 c1 ca c9 ec 15 3c 3c 9e 8a 1a ba bb fd 2d 9e 77 fb d2 51 5d 1e 69 65 61 f2 73 4e 01 23 cc 12 0f 81 57 e8 59 67 d5 d4 b5 76 cd 34 f6 d4 53 d4 b0 d3 4f 70 a7 63 bb 98 a2 76 d2 16 bc 81 ce e2 dc 80 1b 9d ce 49 00 6f 1f 9b 2b 94 b6 70 b5 d1 8c c6 c9 79 fe 1a 7b 7a e1 3e b3 d7 5a 8e c5 65 92 b1 f5 75 d5 56 Data Ascii: 3]64hefQ\4iqa9j-=w9ViQ;mKq,v>)#X%Gai$GG[AWlK#Y<R\a<a;g<<-wQ]ieasN#WYgv4SOpcvIo+py{z>ZeuV
2024-07-04 20:55:35 UTC	4096	IN	Data Raw: 9f 85 ae 75 95 90 18 8c ed 8d d8 74 bc e4 34 48 73 21 3b c8 e7 12 72 79 8e f8 ae ec 3b aa 2a 2e dc 3c bc e9 ea 87 87 36 cd 5a e3 09 7f fc 1a 88 dd 96 b7 e1 20 27 e6 57 9e 7b 40 f8 55 57 c3 1e 3c df a3 65 64 97 4a 4b 83 cd da 2a 89 de 5e f6 32 67 12 62 24 92 72 d3 91 83 8d b0 40 dd 61 dc 01 e3 db 38 55 a6 ae d4 52 50 4b 51 df 19 e4 6b a9 5c 1a f7 ca f8 9a c8 f9 c9 fc 2c c3 c8 c7 8b f3 be 17 93 a9 d7 76 6b bd b3 9a e8 74 7b 66 bd b2 e5 78 8e 96 db ab a3 96 82 82 4a 91 8e 68 98 5f 90 36 3c a3 65 15 ef 55 b2 e3 50 2d d6 96 c3 4c f0 de 6a 8a b7 34 7d 93 07 f5 3e 01 79 87 0b b5 44 da cb 86 5a 3a e9 57 20 74 d5 d6 aa 79 66 76 76 e7 e5 c3 8f e6 0a b3 eb ea 79 a9 6e 94 6c 74 d5 4c b5 73 f7 95 1f 40 88 c9 33 bc b2 06 76 f9 2e 0e ce 66 cb 8b ea 74 f1 75 cc a7 97 a4 Data Ascii: ut4Hs!;ry;.<6Z 'W{@UW<edJK^2gb$r@a8URPKQk\,vkt{fxJh_6<eUP-Lj4}>yDZ:W tyfvvynltLs@3v.ftu
2024-07-04 20:55:35 UTC	1668	IN	Data Raw: 82 50 a8 c8 c2 b5 db b7 b6 ba 1a 1f b3 56 a2 63 24 e4 aa bd 49 15 aa 2c 1c 12 1e ee 69 31 ff 00 d6 c7 7e 6b 62 4f 55 ce 1f 6a bf 10 dc ed 4d a2 f4 64 4f fb 2a 5a 49 6e b3 80 7a c9 2b bb b8 f3 f0 6c 6f ff 00 99 6b aa 73 9c 46 5e 27 2e 7d dd 25 ef a7 79 23 a9 ca b6 bd be 47 f3 55 35 32 f3 38 e7 75 49 26 49 d9 74 ab 08 86 46 ec a8 aa 19 cc d7 b1 db b5 c3 0a b5 c0 f9 aa 3a ac ff 00 e1 66 d2 29 ac 47 33 3c 3b 62 c6 90 7e 39 57 70 3d ef 25 67 b3 65 b5 95 87 3b 1e 5c 7e b9 57 86 1d d4 63 e8 fb 48 4e c1 1c c9 a4 e1 35 ce dd 59 07 39 c0 f4 4c e7 29 a4 94 80 fe 6a 12 7f 31 29 41 db d1 42 d9 0b 5d d1 4b cd 91 90 10 3b 9f a2 7b 71 90 54 00 6f 95 33 76 c2 98 24 3e f2 89 cd df 65 26 51 81 82 89 53 9e b8 43 d8 1f ee 8d bd 52 bc 61 d9 4d 7c 98 69 23 cb 75 02 92 8d c5 b7 Data Ascii: PVc$I,i1~kbOUjMdO*ZInz+loksF^'.}%y#GU528uI&ItF:f)G3<;b~9Wp=%ge;\~WcHN5Y9L)j1)AB]K;{qTo3v$>e&QSCRaM\|i#u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	64637	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:35 UTC	1430	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTcvYzc3Y2Q5ZDMtYzVlZS00MDdlLWI4OTctM2E5OTkwODEwMmM4L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjbiJdXQ?sha=ee9ece7bf4ed9477 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:35 UTC	626	IN	HTTP/1.1 200 OK Age: 1992379 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 22978 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:16 GMT Etag: "3d2832ae69e516a9418a37b685d8b4f9d1bb84dc" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: b5247282241cd33d0081482f62443a0f39812202 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 23134acf-429a-4f56-8e53-0c2b103cce62 X-Runtime: 0.310756 Connection: close
2024-07-04 20:55:35 UTC	560	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 b0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 02 00 04 00 00 00 01 00 00 00 dd a0 03 00 04 00 00 00 01 00 00 01 40 a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 61 70 70 6c 04 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e6 00 01 00 01 00 00 00 00 00 00 61 63 73 Data Ascii: JFIFHHExifMM*JR(iZHH02210100@(ICC_PROFILEapplmntrRGB XYZ acs
2024-07-04 20:55:35 UTC	2372	IN	Data Raw: 00 74 00 20 00 41 00 70 00 70 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 2c 00 20 00 32 00 30 00 32 00 32 58 59 5a 20 00 00 00 00 00 00 f6 d5 00 01 00 00 00 00 d3 2c 58 59 5a 20 00 00 00 00 00 00 83 df 00 00 3d bf ff ff ff bb 58 59 5a 20 00 00 00 00 00 00 4a bf 00 00 b1 37 00 00 0a b9 58 59 5a 20 00 00 00 00 00 00 28 38 00 00 11 0b 00 00 c8 b9 70 61 72 61 00 00 00 00 00 03 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 73 66 33 32 00 00 00 00 00 01 0c 42 00 00 05 de ff ff f3 26 00 00 07 93 00 00 fd 90 ff ff fb a2 ff ff fd a3 00 00 03 dc 00 00 c0 6e ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 03 02 02 02 02 02 04 03 03 02 03 05 04 05 05 05 04 04 04 05 06 07 06 05 05 07 06 04 04 06 09 06 07 08 08 08 08 08 05 06 09 0a 09 Data Ascii: t Apple Inc., 2022XYZ ,XYZ =XYZ J7XYZ (8paraffY[sf32B&nC
2024-07-04 20:55:35 UTC	538	IN	Data Raw: 1a 34 68 42 34 68 d1 a1 08 d7 03 a4 27 cc 7a 01 d4 eb 9f 5a dd dd 57 6a 81 6c 5c 95 d7 d0 e3 8c c2 a7 c9 96 b4 a0 e1 4a 4a 1b 52 88 07 df a6 84 2f 2b 7f 8f a6 ed d1 77 5f 8d db 86 05 22 a3 31 f8 94 a8 f2 4b a1 d5 0c 87 64 ca 50 56 7d 8a 44 5c 75 eb 82 35 04 75 39 2d 41 0b 79 6f fc d4 46 93 cc 3f 95 44 76 03 ed a7 27 c4 fe e1 d4 b7 5f 7f b7 42 eb 9f e1 a6 65 46 bb 50 ca 43 a5 ce 46 84 d7 ca 01 59 fa 88 4a b0 7e fa 69 f7 9b cb 6d f6 69 98 24 b8 e0 2b 50 c7 61 d8 7b 0f ce 9e a2 3d 38 b7 24 58 2f 7e d5 2b 3f 0a cd a6 5d e9 77 dd 3b 97 55 a7 89 af 83 e0 c1 42 91 cc 02 b3 d5 7f e5 80 3f 1a b5 36 d8 6d 65 45 b8 6c ad d8 c2 44 95 10 7a 9f a3 d8 1f 41 a8 6f f8 6c 45 a6 6c cf 0f d6 fc 96 a8 9f de bd d3 af ba a6 ed ea 24 7c 17 a6 bc 7a f3 a8 7e d6 51 9c a9 67 00 63 Data Ascii: 4hB4h'zZWjl\JJR/+w_"1KdPV}D\u5u9-AyoF?Dv'_BeFPCFYJ~imi$+Pa{=8$X/~+?]w;UB?6meElDzAolEl$\|z~Qgc
2024-07-04 20:55:35 UTC	4096	IN	Data Raw: 85 26 14 bb 96 72 14 af 01 c5 8e ed 83 e4 40 4e 32 4a 8f e3 5a 7e c6 f0 91 53 dc 58 d4 eb bb 8c 0d e8 ba b7 e2 7b c5 5f 31 6e 47 98 b6 e8 a9 74 f7 43 c4 60 ba 07 b0 e8 35 b2 cf ac d3 58 b3 e5 df 95 b7 59 6a d5 f1 4a 91 16 30 f0 93 3d d0 70 47 28 ef 83 d3 af 7d 46 4e f0 fc 4f ef 1a 25 6a ad b6 3b 67 6d 3d 52 ad 34 a5 c7 4c 7a 5c 72 e9 69 5c bd 02 50 d8 52 d4 a0 3a ab a6 ad 1b 25 a4 4b 10 c8 0d f9 50 3b 95 4c 30 48 4c ee 25 4e 25 cd b1 1c 2e d3 a9 f0 ed f8 db 2b b6 54 6a 6a 13 86 d0 cc 50 0f 28 1e ab 27 98 ff 00 9e 92 ca 16 c6 da 14 fb a2 34 ad 93 b8 d3 66 ba ce 13 22 9d ce 5f 81 3d 07 f6 ad a5 13 8c 7f 30 ed aa d8 d6 38 a8 e2 c7 76 6a 4f 22 91 66 6e c4 e9 94 78 66 4d 45 14 c4 48 53 b1 db 00 7f 15 c6 48 e7 48 18 cf 54 fa f6 d6 d5 c3 97 18 fb ab 1e f6 8d 16 Data Ascii: &r@N2JZ~SX{_1nGtC`5XYjJ0=pG(}FNO%j;gm=R4Lz\ri\PR:%KP;L0HL%N%.+TjjP('4f"_=08vjO"fnxfMEHSHHT
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: 96 b6 ba e2 79 ca 85 b3 2b f6 c5 7f ea 76 09 3e 9c bd 56 80 7b 8c fb 6a b1 d6 36 1e 7e d0 ce de 55 a9 a1 f5 16 3f d2 3c f7 ec 9a f5 7e 34 ad b6 db 8b 8a ab 41 a6 4a a9 cd 4c 35 4a 8e d3 4a c1 79 d0 32 53 93 d8 fb 6a 24 b7 37 79 b8 ad fe ec 42 99 16 dd 66 8c 6a 05 72 22 d3 91 2b 95 72 13 8f 2b 6e be 7e 97 09 e8 47 6d 4d 9d 26 a4 cd 5a 3d 56 db 9c d2 5c 65 d4 a9 39 27 ab 7c dd 01 c6 93 bb 8f 66 ed cb 9e d6 5d a5 5e 81 e2 a1 0a 3e 13 c7 a2 b1 e9 85 0f 5d 43 6d d2 b2 29 32 f1 90 ad bb 75 5b 44 99 77 0a 3e 78 6c b6 b6 d7 78 a8 d4 27 f7 c3 8b 0b 8b 87 3b cc ca 43 53 ed c9 34 82 84 0f e7 4b 53 95 e5 71 43 d1 43 a6 a6 2a c3 f8 78 70 a9 71 22 a5 e2 71 2f 77 5e b4 cc 36 b6 9c 8d 70 32 d6 10 a4 83 85 90 72 4e 73 9d 46 1d 5b 67 77 0f 6d df 42 29 d4 96 b7 0a d7 0e 67 Data Ascii: y+v>V{j6~U?<~4AJL5JJy2Sj$7yBfjr"+r+n~GmM&Z=V\e9'\|f]^>]Cm)2u[Dw>xlx';CS4KSqCC*xpq"q/w^6p2rNsF[gwmB)g
2024-07-04 20:55:36 UTC	7116	IN	Data Raw: ec 8a c5 3e fe dc 8b 46 0d 9f 6a 41 90 17 1d 97 a4 a0 cb 93 29 64 25 28 4b 68 1d 12 3a 9e 62 75 23 bb df 29 e3 b5 54 06 4b 96 b9 a7 8c ac 6c 36 42 eb ac 0f d9 ea 04 72 9d 0d 89 b3 d3 a9 14 fb 7a e4 b5 42 51 71 d3 5d 98 c3 e8 50 c7 cf b0 40 58 43 a3 f7 20 8e 60 3d b1 ad df 74 4c 69 d6 d4 59 cd c4 71 ef 19 e8 33 db 4f 86 54 63 c8 6d d0 0a 7e c4 0c f4 f6 1a 77 d6 1d 9c ba 18 db 9a 8c e8 e5 10 14 d3 4c 49 f7 24 a7 95 2a 27 d4 e1 44 7f 5d 60 77 bb 68 53 0e 95 2e bf 4e 6a 73 f4 e8 32 da 95 32 22 3a 22 52 42 b1 ff 00 ea ac 1e a7 db 5f 3b a6 9d cf 79 2e f7 5d cd 49 86 c7 b1 6a 1c 55 dd ac 4a d9 aa c5 c0 56 25 d3 67 51 64 52 98 6d 23 3f 34 1f 53 6d a9 40 7f da 5c 23 f1 a9 00 e0 72 d7 95 6a 6c 06 dc d0 6a 4d f8 55 03 15 b9 ab 40 47 2f 86 82 02 5b 1f 9e 44 27 51 51 Data Ascii: >FjA)d%(Kh:bu#)TKl6BrzBQq]P@XC `=tLiYq3OTcm~wLI$*'D]`whS.Njs22":"RB_;y.]IjUJV%gQdRm#?4Sm@\#rjljMU@G/[D'QQ
2024-07-04 20:55:36 UTC	2366	IN	Data Raw: ab c9 11 f6 c7 55 39 cc 47 98 74 58 e5 23 52 03 f0 f8 f8 60 5e 97 d4 fb 43 75 f7 5a 96 e5 b1 4b 86 3e 7e 8d 42 92 14 87 5d 2a 04 09 33 c0 ea 10 a0 7c b1 fb 9c e5 58 c6 b6 7b 02 d7 db fe 38 3e 26 bc 52 71 6f 52 a5 52 65 6c c5 97 59 8f 49 a3 b2 96 d3 e1 55 a7 45 60 25 32 5f ff 00 f2 24 04 97 02 8f 7c 81 e8 35 60 de 16 37 02 97 b9 74 19 cf 41 71 b1 51 6e 7a dd 92 82 00 25 9e 81 a5 24 7f 29 48 38 3e 9a 89 54 ea 39 fe c4 1e d6 e1 cf ef f0 ae 8a 0d 35 0c 0e de ce c0 9c 24 5e 5f 05 fb cd 6f c3 bc 2b f4 8a d5 2a a5 4d 90 cb 52 03 10 19 4b 4f 34 1a 6c a4 06 59 56 10 8c 83 8c 8f 6c eb 9e a1 c3 43 95 6b 3e d3 da ce 21 a8 36 ed d0 db b1 da 6f 9a b2 da 3e 72 5a d0 03 a9 0d 38 90 52 a7 c7 2a 53 e4 39 52 73 d3 5d ed c7 f8 90 ee ce c3 5f 35 eb 1f 76 b8 77 91 6b 51 da 9a Data Ascii: U9GtX#R`^CuZK>~B]3\|X{8>&RqoRRelYIUE`%2_$\|5`7tAqQnz%$)H8>T95$^_o+MRKO4lYVlCk>!6o>rZ8R*S9Rs]_5vwkQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	64638	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:35 UTC	1506	OUT	GET /df_media/W1siZiIsIjIwMjQvMDYvMDMvMTgvMzMvMTAvNmM1MzJlMjQtMDk5NS00ZWE3LWJmZTctZWQ0ZWVhZDA3NzliL0Fzc29jaWF0ZS1MZW1veS1Qcm9maWxlLVBpY3R1cmUuanBnIl0sWyJwIiwidGh1bWIiLCIyNDB4MjQwIyJdXQ/Associate-Lemoy-Profile-Picture.jpg?sha=2fb954a5bd1c5504 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=cTZ0TzAxTjFrTHJPcmtrSHloKzRSVXBVRnlxVlJwbm10Vk9XQVZadW4rTXlURDlDTzBmL1FHcUorR1NXTGwzd2doRWFVOVZhZTFQTU9xTlZlTXlhNElkc2ZzVDlQZktOV3R4b2F1QWlVRWdiVEthMVZhTURhQ2JDVlRzUkJpR0xHVVVmVGhTSUJTbTFiUlVaNUhaejFOWXZNTkp5NmZ6M2NwOGZjSzRxaVpzek05V1B2cm1OaXFMVExrTDdPNVMyb0szVisxa2pIT25EVmJkK0lWZit0WE9rZGZFSnVEbjErTjFFc29LZHlxU1AwOUsyZG5rT09palJWeVpLajZ4NHZVQVhyL2tmb3pjcnJ6ODlRZnBzZGNNY3BVSDYxZkJ3c0YvSnEvejVKSmZVOTBBd1BtQUpObURtclUxbzRjY0J0bnNxWWszMGhXRVNaRUMxT0VvdHZ4aXJkak5wd1FiSjliekxEaTh3Wm5URXFXTHdKTzlvT2htVTJGVDFjN0lFMlR4Rmw3bjU1dzZycUhPKzRTSFo3OWZiK2ErQU03RHZ2cVJLSHRPbmtiVEMwb2tMUW9sSk9EdlpFQ1BidFRGdy0tcmw5UFlRd213WEhYS2hGTFhDc2RKUT09--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:35 UTC	643	IN	HTTP/1.1 200 OK Age: 1992380 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Associate-Lemoy-Profile-Picture.jpg" Content-Length: 46079 Content-Type: image/jpeg Date: Tue, 11 Jun 2024 19:29:15 GMT Etag: "84c714f314de8a8dea574f63d881a5fa087c15ea" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: d4f4e9404489b719b465d986297f1e4ac0c56b92 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: b3f60fa0-dd10-49cc-9436-056d9005d953 X-Runtime: 0.392133 Connection: close
2024-07-04 20:55:35 UTC	543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 8c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 0e 00 02 00 00 00 29 00 00 00 4a 01 1a 00 05 00 00 00 01 00 00 00 74 01 1b 00 05 00 00 00 01 00 00 00 7c 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 41 73 20 73 65 65 6e 20 6f 6e 20 61 20 53 75 73 73 65 78 20 44 69 72 65 63 74 6f 72 69 65 73 20 49 6e 63 20 73 69 74 65 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 01 02 02 02 02 02 02 02 02 02 02 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 02 02 Data Ascii: JFIFHHExifMM*)Jt\|(As seen on a Sussex Directories Inc siteHHCC
2024-07-04 20:55:35 UTC	2372	IN	Data Raw: 10 68 82 0d 10 41 a2 08 34 41 06 88 20 d1 04 1a 20 83 44 11 8c ac d6 a9 16 e5 22 a5 5f af d5 69 b4 2a 1d 1a 0c aa 95 62 b5 59 9f 16 97 48 a4 d3 61 32 a9 13 6a 35 3a 94 e7 50 cc 08 0c c7 42 dc 79 e7 56 96 db 42 0a 94 40 1a 00 2a 20 24 39 3a 36 f0 79 e9 1e 75 5f 1a cf 8c 4e e5 78 fb ba 2f 2d 81 d9 0a 4a 28 be 14 b6 aa a3 5c b8 62 56 22 4f 7d 55 5d d6 a9 db 8a 9d 40 a6 de 17 1a d8 7d 4c c9 a3 3b 21 73 5f b7 e8 d1 d9 79 49 44 96 ea 72 5e 72 4a 19 4c 59 79 14 e2 40 39 4e 79 8a 4d cf af b2 39 9f 9f 4d e2 aa 27 f7 8a c8 f9 50 0f 99 27 63 d0 6b af 9c 50 0a 2e db 4f 6d 29 d6 0d 4e 83 32 6c a6 25 43 95 69 dc 75 a5 3e 5d 94 eb 86 23 15 a9 88 69 b6 bf 9b 05 a4 cb 8f c9 d8 80 79 4a 44 66 82 d6 5d 0a 25 7c c2 5a 50 52 6f 70 7c b5 6e 97 17 84 40 cd 9d 24 0c ad 98 6d 7e Data Ascii: hA4A D"_ibYHa2j5:PByVB@ $9:6yu_Nx/-J(\bV"O}U]@}L;!s_yIDr^rJLYy@9NyM9M'P'ckP.Om)N2l%Ciu>]#iyJDf]%\|ZPRop\|n@$m~
2024-07-04 20:55:35 UTC	538	IN	Data Raw: 1e 1a ec aa 9f 89 af 13 56 c5 b8 85 bc ab 46 90 e3 35 8d c4 a7 ca 44 86 dc cd ad 2a 33 11 a1 4e 62 5b 41 62 6c 89 aa f9 67 db 23 3c 01 52 ca 8a 50 4e 19 c7 38 f7 f4 9c 1e 7a 90 b2 9a 9a bf c1 43 38 29 27 da 5b 6a 32 a5 f7 d5 a3 60 76 73 c3 c9 c6 71 d9 06 6a 1e 87 0f ff 00 b8 9b b8 20 16 96 8e 44 29 7e 5e 10 75 8d d0 76 b2 85 02 df 81 02 32 1a 6a 2b 2c b1 1d 2c c6 60 70 43 29 08 43 7c 1b 4a 3a 0d 84 a7 23 af a7 b0 f6 d7 39 c8 99 de ac 94 8b 6e 79 9d 6f bb f9 ef 1d 27 39 39 42 f3 00 c4 b7 22 03 6b ea 3d d1 34 2d ba f8 8b 19 b4 a1 64 a5 b4 80 90 95 ab 98 f4 a7 29 1d e0 e7 df f5 ff 00 0d 64 b4 d5 0b 42 58 16 24 b9 6f a7 6d 85 b5 88 5a a9 01 44 72 3f 56 eb f0 f5 85 6b b7 1a 17 19 5e 62 10 14 12 ac 29 78 03 a4 f6 70 93 d6 7e a3 d8 fb f5 9d 48 26 b6 61 48 65 04 Data Ascii: VF5D*3Nb[Ablg#<RPN8zC8)'[j2`vsqj D)~^uv2j+,,`pC)C\|J:#9nyo'99B"k=4-d)dBX$omZDr?Vk^b)xp~H&aHe
2024-07-04 20:55:35 UTC	4096	IN	Data Raw: 29 52 1e 28 f9 83 92 10 a5 44 4a 9a ca 1c 59 19 51 ca 2c c4 ab cb cb e9 f9 73 8c 2c 0b aa e3 66 3a d8 6c fb 81 61 cf dd 17 df fc 2d be 2d 2d dd 84 f1 a3 7a f8 63 7e d6 bd 3f b3 1e 2e 68 f4 fa 25 2e f2 95 54 a9 cf a4 53 b7 83 67 e9 17 5d cf 01 ba ac 12 95 47 42 eb 16 8c aa d4 6f 98 47 07 63 bb 4d 84 c2 92 63 ba b5 34 ce a9 01 52 81 03 d8 bb 97 be 8e 3e 0f 0e 69 d4 53 33 22 b5 50 e6 de 56 fa 7f 28 f4 40 04 28 05 0f 62 01 1f b1 19 1a 8e 87 d1 fb a2 08 34 41 06 88 20 d1 04 1a 20 83 44 10 68 82 0d 10 41 a2 08 34 41 06 88 20 d1 04 1a 20 83 44 10 68 82 0d 10 45 12 ff 00 11 f6 e6 af 6e be 15 1b d3 4b 8b 6f c3 b8 2a db ad 75 6d a6 d7 51 53 36 a4 69 e9 a3 d4 2a b7 54 7b 8c 5c 2c 34 d2 d2 ed 4e 54 48 d6 bc 8f 2a 3b 5c bf 99 25 2f 3c 93 1d 97 48 73 46 fd ea 88 53 64 Data Ascii: )R(DJYQ,s,f:la---zc~?.h%.TSg]GBoGcMc4R>iS3"PV(@(b4A DhA4A DhEnKoumQS6iT{\,4NTH*;\%/<HsFSd
2024-07-04 20:55:35 UTC	5930	IN	Data Raw: f9 0a c4 c9 2c ba d3 90 97 0d d9 6a 45 3b e6 0a 4f 96 e3 69 f2 5d 75 b2 f2 db 0b 57 23 72 d6 1b 38 56 52 1c f4 d3 71 cb e7 17 cb 49 74 80 97 16 1e 5e 65 9f d3 d2 26 e7 83 5f 0d b5 ad d0 a7 50 e7 2a a7 36 8f 16 85 5b 45 5d 0c 47 81 0a a9 4c 2f 85 b1 52 48 95 4e 9e c2 9a a9 20 c8 6d 01 6c ba 92 95 34 82 12 01 51 23 55 71 1f 11 27 0b a8 a8 94 89 29 5c c9 e9 cb 9a e1 40 5d f2 9d 03 be ad 7d 1f 78 dc fc 23 c3 47 15 a1 a4 9d 3e a1 48 93 4e b2 be ee c5 0b 36 03 32 5e fa 3b 38 6d 5a 2f 47 c3 4f 84 7b 67 6e ae bb 96 ef 83 41 91 49 91 72 bf 5f 7a a0 a8 52 24 d3 e9 4a 8d 77 ce 89 56 b9 a9 94 0b 32 2b df 23 6e d2 a7 54 21 b0 ec 96 51 e6 17 32 59 58 f9 6e 2d 0c 42 b3 8b 55 3e 9b 24 c9 ac 89 6c 40 7b 05 0d 15 ae bd 7d e4 c6 61 4f c2 94 b4 b5 7d e5 1c a0 b9 cb d5 4c 1d Data Ascii: ,jE;Oi]uW#r8VRqIt^e&_P*6[E]GL/RHN ml4Q#Uq')\@]}x#G>HN62^;8mZ/GO{gnAIr_zR$JwV2+#nT!Q2YXn-BU>$l@{}aO}L
2024-07-04 20:55:35 UTC	7116	IN	Data Raw: da 44 75 a5 e7 63 a2 a6 98 0e 4b 7d ea 54 d5 07 96 82 54 7c b7 9a e4 91 c1 49 e3 aa ad 80 05 ae 96 37 2f 7f 71 8b 50 93 95 61 f3 33 68 ef f1 d7 cb 57 f3 8f 42 df e1 b6 f8 84 41 f1 4f e1 31 ff 00 0e d7 de eb 53 b7 07 7f 3c 2f a6 15 26 6a 1a a6 b5 4b 95 23 64 6a ce 08 bb 5f 30 39 1c 96 eb 3f 85 aa 1d 4a 81 21 f4 25 2e a5 34 88 0b 92 14 ec 8f 31 6c 2a e5 b1 13 52 01 0a 67 63 f9 bf 91 7b 6e f0 f6 9e 61 52 72 ab da 1f 11 1b 21 69 a4 38 83 44 10 68 82 0d 10 41 a2 08 34 41 06 88 20 d1 04 1a 20 83 44 10 68 82 0d 10 41 a2 08 34 41 1a da 7f 14 2e d8 5d bb 89 e0 33 6b aa 16 bd 36 b9 52 8d 62 f8 a5 db cb 8a eb 72 25 42 44 6b 6e 89 6d 4b b5 2f aa 31 ae 5d d1 a3 93 e6 42 4d 6e 6d 22 24 49 0e 21 4d c5 9b 58 69 6b 53 61 cf 30 3c a3 23 32 c6 a4 80 de fd 8f ce 1b cf 0a 64 Data Ascii: DucK}TT\|I7/qPa3hWBAO1S</&jK#dj_09?J!%.41l*Rgc{naRr!i8DhA4A DhA4A.]3k6Rbr%BDknmK/1]BMnm"$I!MXikSa0<#2d
2024-07-04 20:55:35 UTC	8302	IN	Data Raw: 8d 80 29 d0 f0 12 e2 51 ea 28 71 d0 32 a8 e0 81 9f bf d7 ad 27 2a ae 55 33 94 27 34 c7 62 a3 ef b0 bf 4f 15 87 48 73 36 91 75 60 3a fb b9 36 f0 f3 1a 17 23 a6 c0 98 92 fb 65 e1 c5 a6 68 14 9d c9 bf 5b fe c7 6c 92 e7 cb a4 3b 77 38 fd 31 9a ed c7 36 98 84 39 2a d4 da ea 24 f5 17 2e 5b d9 f4 ac a6 33 65 a4 c3 6f cb 75 e9 12 12 96 88 32 d4 f2 17 32 4a 31 3c 51 6a a5 c2 42 94 f3 1c 15 ac a5 b3 22 52 77 99 70 c4 80 97 70 4e d1 19 2b ef 18 86 33 4b c1 dc 1b 41 fd 6f 8b ab d7 2e 54 8a 74 05 65 4a a6 be 59 95 53 00 09 97 25 09 05 73 0e 62 52 80 54 43 3b 38 9b 97 b8 d5 6b e9 9a 1d 3d 6c 8a 1d 85 b7 94 69 36 ee d4 6d e4 47 dd 76 87 b7 96 b3 ce 26 43 f4 fa 6f 9a b5 38 fd 56 64 96 c4 ba 94 b7 5c 71 d9 13 24 2b 82 91 1d 0c b4 8c 53 1f c6 27 e2 eb 4a 94 0c 8a 0a 40 51 Data Ascii: )Q(q2'U3'4bOHs6u`:6#eh[l;w8169$.[3eou22J1<QjB"RwppN+3KAo.TteJYS%sbRTC;8k=li6mGv&Co8Vd\q$+S'J@Q
2024-07-04 20:55:35 UTC	7366	IN	Data Raw: 7b 8b f3 68 96 99 5a 15 94 bf 55 90 cf cc cb 47 47 e4 22 b6 d9 ca 66 11 ad 49 da 7f 12 8a 5a 74 70 d5 22 da a2 b1 21 75 44 16 28 92 fe 19 6e f6 33 4e bf fb 60 8b 85 c7 a4 1f 60 9e c3 7f ad e2 f5 3d b5 71 25 27 79 86 60 13 26 52 e0 52 d6 1d 33 b1 00 00 a9 ae 62 18 a6 81 0a ee 64 2a e3 ef 73 14 bb 1a 78 d7 2a ab 51 85 4b 84 fc f9 f2 19 85 0d 83 fc e7 5d eb 92 94 ae 2d b4 da 06 14 fb ca 51 01 08 4e 56 a5 2f 88 1a d0 aa 52 24 82 a5 a8 25 29 e9 fa 16 77 e4 1f c8 6d eb 54 89 6b 9b 31 32 d3 e3 98 74 e4 07 32 58 80 3a ef f9 5c 98 48 22 04 9b 95 e6 2a 35 d6 5c 89 48 64 a2 4d 32 df 75 49 52 9c 5a 02 54 dd 42 bc 81 9e 4f 64 02 d4 53 e8 67 3c 9d e4 e7 49 6a 12 aa 82 26 cf 01 09 4d d2 97 3e 8a 57 fb 9b 6e 5a 16 b9 93 33 25 d3 4b 54 9a 63 9e 79 f0 ad 6c c3 52 72 a0 36 Data Ascii: {hZUGG"fIZtp"!uD(n3N``=q%'y`&RR3bdsxQK]-QNV/R$%)wmTk12t2X:\H"*5\HdM2uIRZTBOdSg<Ij&M>WnZ3%KTcylRr6
2024-07-04 20:55:36 UTC	9816	IN	Data Raw: d3 a1 9d 0c 95 a4 a1 b7 25 9d b9 9d fc c6 b0 ce 60 44 d4 59 41 72 d6 1b 51 a5 f5 1a 82 7a f3 e7 1e 85 5a ed 78 f9 6a 83 44 10 68 82 0d 10 41 a2 08 c6 d6 2b 14 9b 7e 99 3a b7 5d a9 d3 e8 b4 6a 5c 57 67 54 aa d5 59 b1 a9 d4 da 7c 26 07 27 e5 cd 9d 31 c4 35 16 3a 13 92 a5 ad 41 20 0e ce ad 52 d2 84 a9 4a 21 29 4d c9 24 00 07 32 4b 00 22 f9 72 e6 4e 98 89 52 90 66 4c 98 40 4a 52 0a 94 a2 74 00 00 49 27 60 23 58 df 8b 85 cd 4a f1 a3 72 6d a5 b3 b5 3b a3 6f 37 b7 5b 61 4f b8 2a 72 26 cc a5 57 dc a6 dc 97 d5 c0 fb 30 4c 88 52 1a 6d 09 99 4c 89 43 80 db 6c c8 4b 6e 25 6e 54 5f f2 f2 da 42 d5 ab 38 e0 c9 c6 c5 34 89 18 82 13 4f 4c 95 a8 80 95 2b 3a d7 e1 d4 16 64 a4 6a 01 7c c4 69 1d af f6 68 e3 ba 1e c7 69 38 82 a7 15 e1 5a cc 47 1b e2 09 d2 13 de 4a 9d 4f 2c 48 Data Ascii: %`DYArQzZxjDhA+~:]j\WgTY\|&'15:A RJ!)M$2K"rNRfL@JRtI'`#XJrm;o7[aO*r&W0LRmLClKn%nT_B84OL+:dj\|ihi8ZGJO,H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	64640	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:35 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTQvMTVjZmY1MmYtYmUzMy00MzA3LWJiYWUtZjkzYmVjZDVmYmI1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=a157f78ed1fbb052 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:35 UTC	626	IN	HTTP/1.1 200 OK Age: 1992381 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 76570 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:14 GMT Etag: "042a17fadac2c5244c9f6b7835203a36f75d5aee" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 950f393136f750ef704beef95a7fea8872b464d7 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 8428cf72-57e8-4223-9b63-378bd8cad17b X-Runtime: 0.072324 Connection: close
2024-07-04 20:55:35 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 36 f7 03 ff 1e 00 00 80 00 49 44 41 54 78 da ec fd e9 af 6d 69 7a 1f 86 fd 9e 77 5a 6b ed bd cf 70 cf 9d eb d6 ad b1 bb aa 47 8a 4d 8a 14 25 8a 30 a5 48 90 21 c9 8c 93 c0 19 e0 38 0e 60 24 40 90 2f f9 03 04 44 1f 02 04 c9 97 7c c9 64 2b 4e 10 04 49 24 c0 82 83 d8 8e 13 c5 72 22 29 b2 28 53 06 45 36 bb 9b cd ae ae a1 ab 6e dd e1 8c 7b 5a c3 3b 3d f9 f0 bc 6b ed 7d aa 9b 14 bb 59 d5 55 d5 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME6IDATxmizwZkpGM%0H!8`$@/D\|d+NI$r")(SE6n{Z;=k}YU
2024-07-04 20:55:35 UTC	2372	IN	Data Raw: af 31 33 b4 52 68 9a 86 b5 d6 9c 73 56 f3 f9 2c 1a 67 bb c5 62 f1 fd 9b 37 4f de 7e fa f4 d9 57 08 68 ad b5 eb 18 d3 89 d2 da d7 4d 73 61 ac 5d d7 cd 6c 75 70 78 f0 7e 55 57 57 29 a5 26 a7 34 03 01 55 e5 be 73 74 7c fc f7 5f 7d f1 a5 47 5f 38 b9 99 f0 29 0e ba 0f f3 7c 1e c0 3f 1b 87 7f f7 07 6f bb b3 cb e5 0b d1 87 7b ce b9 6d 5d 57 ed 7a bd be ff ec d9 b3 af 5f 9d 9d 7d e9 e9 93 c7 5f b9 ba 5a de 5b 2e 2f ef 6e b7 9b 45 df 75 06 99 48 91 86 36 16 ca 68 80 19 cb e5 15 52 4a 00 11 40 04 63 0c b4 d2 50 44 70 d6 02 4a a1 1f 7a 00 04 e7 1c 8c 31 50 4a c3 1a 87 cc 09 20 c0 5a 0b a5 14 52 4e 50 4a 41 1b 03 ad 15 ac b5 f1 e8 e8 e8 2c 0c 7e d1 75 5d ed 83 4f 5a 9b 08 10 8c 35 50 46 73 5d d7 eb 83 c3 c3 b7 6e de bc f9 46 55 d7 eb a6 69 2e 39 e7 a6 ef da 17 95 52 Data Ascii: 13RhsV,gb7O~WhMsa]lupx~UWW)&4Ust\|_}G_8)\|?o{m]Wz_}_Z[./nEuH6hRJ@cPDpJz1PJ ZRNPJA,~u]OZ5PFs]nFUi.9R
2024-07-04 20:55:35 UTC	538	IN	Data Raw: df 7a f9 cd 37 df fc ab 6d bb fd 45 e7 1c af 96 cb c5 e5 c5 c5 cd ed 66 ab c7 15 10 97 41 d5 38 28 da 9f f8 8e 41 06 c8 e0 a9 aa 2a 1c 1e 1c a0 aa 1b d9 d9 c6 84 6e e8 b1 69 b7 08 65 bd a4 20 d9 f9 f0 e0 10 f3 f9 4c 40 17 00 14 20 ec a4 94 91 65 37 05 00 bb 95 53 e9 b5 c7 3d f2 98 8d a7 69 b3 0f e0 9c 81 b2 5f 06 00 30 23 e6 0c 4d 84 94 33 72 79 3d 12 b4 82 a5 16 68 a5 80 3f f6 fb f6 f1 c6 31 a2 c3 52 4a d3 e7 9a a6 c1 b6 6d 9b b7 df 7a eb d7 e7 b3 d9 5b bf fa 2f fd da bf 9f 72 9e 85 18 4e 1e 5f 5e b5 b7 0f 0e 86 8f fb 77 fe 61 9e cf 03 f8 63 3c 9e 19 cf 2e 2e e6 6d db bd 40 8a d2 a2 6e 96 db b6 3d fc de ef ff fe 9f 7d fc de 7b ff e5 10 e2 0b 4d 53 5f 2e 2f 97 77 9f 3c 7e f2 70 bb d9 56 99 59 2e f8 b1 ef 2d 17 3d 80 29 70 63 8c d3 60 ca 5a 8b 83 c3 03 34 Data Ascii: z7mEfA8(A*nie L@ e7S=i_0#M3ry=h?1RJmz[/rN_^wac<..m@n=}{MS_./w<~pVY.-=)pc`Z4
2024-07-04 20:55:35 UTC	4096	IN	Data Raw: 19 40 c4 c1 bc 01 69 87 61 88 c8 89 31 c4 04 55 40 25 e3 4d 64 9c 66 ef b7 08 3e 04 20 45 d4 d4 c0 2a 85 ca 18 70 4e 20 d6 98 d5 73 f4 dd f0 ca f7 bf f7 c6 5f 7d f0 fc f3 4f dc ac b9 da 6c b7 0f df 57 c6 df bf 71 63 f3 71 ff ee 3f ac f3 69 0b e0 4f 1a f9 fa 27 25 90 e3 5b 8f 1e db ed b6 7d c0 c0 ac 72 6e f5 f6 9b 6f be f8 e8 bd f7 fe 5a 88 f1 a1 d5 66 18 bc 5f ac 96 ab 93 67 cf 9e bd ba 5e ad 16 63 9f 99 38 ef b2 4f c9 4e 23 2c 32 94 1e d6 39 87 e3 e3 63 cc 66 33 c4 94 10 86 1e 43 c9 d6 9c 24 c8 b4 36 98 cf 67 d7 50 53 5a ed c8 04 b4 0f 89 54 34 65 bd 09 6e c9 5c 20 9a 52 c6 ea 42 2b dc ad a9 24 0b 13 00 e2 2c a0 10 ad a1 09 42 2d 34 04 ed 2c 9a aa c1 ac 76 88 49 32 f1 10 23 b0 ed 11 b2 b4 02 e3 30 6c 9c 5e 8f cc a8 5c ca ee 58 2a 91 b1 ff 57 a4 26 e4 58 Data Ascii: @ia1U@%Mdf> EpN s_}OlWqcq?iO'%[}rnoZf_g^c8ON#,29cf3C$6gPSZT4en\ RB+$,B-4,vI2#0l^\XW&X
2024-07-04 20:55:35 UTC	5930	IN	Data Raw: 75 09 ba dc c4 22 92 f0 7e e3 58 65 68 b1 2b 55 82 c8 92 21 17 c1 59 87 18 13 fa 61 80 b5 ba 00 5f 04 b4 d2 77 1d 9c b5 38 38 38 00 00 ac da 2d 42 1f c1 19 70 d6 e8 e5 95 fe e2 a3 f7 1e 3d ab 67 cd c5 7a bd fa e2 69 dd 5c 3d 38 3a 58 e3 53 30 cc fa 3c 80 7f c4 b9 68 5b bc 79 75 a5 00 90 25 50 68 7b 97 52 3e 32 d6 5e bd f6 dc 73 dd a3 f3 33 f5 68 95 f1 ea 8d 1b f8 7b ff f8 1f 3f ff ce 5b 6f fd b7 db be fb d3 87 47 47 bf 7b f7 ce bd df 61 b0 7b fa e4 c9 37 4e cf ce 7e 6e bd 5e 3f 0c 3e 34 db ed 06 ed b6 15 17 7b a5 c1 29 23 01 85 41 c3 48 b1 f4 98 42 c4 13 b8 20 4b bf 67 9d 83 2b e8 2a 94 b5 4f 8c 11 a4 e4 a2 cf 45 ec cd 39 d9 89 a6 18 d1 7a 8f e4 c5 5b c8 94 1b c0 88 7c ea 87 1e 9c 19 d1 7b 10 e7 52 ee 2a 64 45 60 ad 91 52 44 4e 11 95 b3 50 1a 00 27 cc 6b Data Ascii: u"~Xeh+U!Ya_w888-Bp=gzi\=8:XS0<h[yu%Ph{R>2^s3h{?[oGG{a{7N~n^?>4{)#AHB Kg+OE9z[\|{RdE`RDNP'k
2024-07-04 20:55:36 UTC	7116	IN	Data Raw: 3d 64 44 4b 4b bd 2d fa 56 32 15 2b 24 05 11 e9 1b 7b 6a 02 43 11 e0 b4 81 b5 1a 95 51 d2 1f 6b 82 d3 04 03 e9 95 15 32 50 4c c1 05 6d 25 3f 3f 86 50 5c 1d 12 b4 35 20 45 e8 fa 0e 5d d7 4d a0 94 a1 1f 10 7d 04 27 96 7d 72 71 a0 80 02 0e 0f 0f a7 7e 38 c7 08 df 75 18 ba 1e f3 a6 81 33 16 be 1f 60 b4 46 08 09 29 01 9b d5 f6 e6 fa 72 75 0f 89 4f 7c ef 6f c4 98 6e 3d 39 bf bc f1 71 5f c3 c0 67 38 80 df 5f 6d 28 e5 54 91 56 c1 55 ee 9a f6 d1 db 17 17 3a 71 ae 99 a0 48 0b b6 6f b3 5e df 7e fa fe e3 3f d3 77 dd 03 57 55 d4 cc 1a 30 67 44 ef a1 48 14 17 13 32 e2 a4 9f 9c 40 45 27 66 04 66 8c 04 80 eb ea 8f a2 26 31 06 ef c8 f9 15 ca 61 07 e4 d1 23 88 c5 5b b7 72 98 5b 83 5a 03 56 a1 94 ce 54 32 a9 94 aa ae 94 ab 52 32 2b 68 0d 09 60 43 30 46 a6 ca 63 26 56 1f 28 Data Ascii: =dDKK-V2+${jCQk2PLm%??P\5 E]M}'}rq~8u3`F)ruO\|on=9q_g8_m(TVU:qHo^~?wWU0gDH2@E'ff&1a#[r[ZVT2R2+h`C0Fc&V(
2024-07-04 20:55:36 UTC	8302	IN	Data Raw: 97 6b 9c f7 1e 4f 97 1d ee 1c 2f f0 dc cd 05 ee 1d 2f 70 67 5e 61 ae 59 fa 49 f1 f3 81 d2 b4 13 d2 43 16 63 ed 82 a5 dc 0f de 6b 59 78 2f a0 99 f6 3e 47 bb 1d 2d ca 2e b6 7c 75 1a 92 89 fe 15 4d c1 3b a2 ae 98 08 1e 84 2e 64 ac 87 88 65 37 e0 7c b5 c5 6a db a1 f7 22 5a 97 99 30 0c 11 29 06 90 82 a8 8d 68 a0 f7 1e 5d 5f e3 d6 bc c6 51 e3 60 ca 04 3b 33 4f 7b f7 ac b2 c8 f6 30 21 19 e0 a0 26 dc 48 16 67 43 8d 8d 0f 70 d6 c2 1a 83 94 22 52 d6 f0 c1 23 27 40 1b 03 51 50 d1 05 df 2e 19 7e 3f 13 d7 55 0d 4d 4a ac 73 62 44 d6 2c ce 17 c6 a0 aa 6b ae c5 82 b4 4a 21 36 3e 24 eb 63 aa 98 29 21 13 52 4c 0e 0a 39 87 ac b5 56 21 28 ca 40 fe d0 ab d2 cf 54 00 67 00 ac 0d 87 ae 37 ab ab ab 57 13 b3 5b 1c 1d 7c f7 e8 f0 e8 9d a1 1f 8e ce 4e cf 5e 5b 5e 5d bd 12 7d ac 08 Data Ascii: kO//pg^aYICckYx/>G-.\|uM;.de7\|j"Z0)h]_Q`;3O{0!&HgCp"R#'@QP.~?UMJsbD,kJ!6>$c)!RL9V!(@Tg7W[\|N^[^]}
2024-07-04 20:55:36 UTC	7366	IN	Data Raw: 0b c2 4b 71 46 6d 14 2a 4d a5 ef 1d 89 0c e5 b9 72 de 3d 3f ce 53 0b 30 52 fc 8a 1d 6c 41 98 70 f9 3d 0a 5e ea a0 ae a5 aa d2 7a 5a 11 69 a5 b0 5a 77 78 7a 76 85 6d 3f c8 50 4e 11 8a 35 8a ec 9a b1 0b de 91 d8 60 ac 81 b5 36 5b 63 37 39 e7 0a 00 31 67 93 72 aa 74 d6 76 08 7e 1e 43 b8 e1 ac fd ee 5f ff cb 7f 39 e1 23 ea 7f 81 8f 31 80 bf f1 2f 78 55 35 80 5f 86 4c 97 ff ae 7a 09 ed 2f fc af 01 fc 6f 01 fc ff 00 dc 84 6c 7f 7b 00 0d 24 23 b7 c0 e9 ff 0c 5f f8 e6 0d 17 d9 de 4d 39 1f 91 a2 3a 84 70 3f e7 3c 1b 5d ea 94 12 22 c0 18 90 a3 75 0a 98 8a fc 8c 00 ee c7 bb fb 18 bc a3 82 3f b0 73 21 18 83 bc 6d 5b 91 33 ad 64 c9 ef 07 2f 2b 8c d2 4f 57 ae 86 b3 06 8c 0c 2e 94 c1 0c c9 70 9a 00 82 64 76 a3 84 a4 5f c9 05 22 98 e6 9c 25 13 69 e1 b7 56 c6 a0 aa 0c ac Data Ascii: KqFm*Mr=?S0RlAp=^zZiZwxzvm?PN5`6[c791grtv~C_9#1/xU5_Lz/ol{$#_M9:p?<]"u?s!m[3d/+OW.pdv_"%iV
2024-07-04 20:55:36 UTC	10674	IN	Data Raw: 77 ff f9 3f 73 32 8e e3 ab fa 7e fc 7d 29 a5 17 05 ef 7d 2e 19 db 8b 2d 76 bb 5d a5 fb 4d 53 44 1b 9a 0a 7f bb 8c 01 2e f5 04 26 f9 10 f3 42 22 d4 07 8f 22 25 f2 12 43 ac a8 ab 22 70 3d a5 dc 39 6b 91 73 42 68 da 85 76 d4 65 56 53 10 c7 fb 94 32 63 ab 7d 40 df f7 b2 e6 21 0c e3 88 98 99 54 31 8e 13 a6 dc 62 20 c2 98 09 93 1a 6f 93 82 f2 8d 24 a5 99 1f ac ff 45 29 2c 5d 6b 94 2b ab 45 85 01 1c d8 cb 48 be 3f a6 8c 7e 98 70 b1 1b 10 53 86 73 01 77 4b d6 e4 32 dd 30 5f 59 14 e5 a6 98 70 fb d6 19 4e 4f cf 70 76 76 0e e3 0c ee b9 fb 2e dc 7b f7 5d d8 6c 78 f7 0d eb 65 f5 24 df 4f 2a d2 47 55 00 8b b3 74 62 9c 73 cd c8 56 fa 55 83 ea 61 a4 2c 23 95 89 4d f9 92 f8 5e a1 0c 32 5c a6 67 21 5e a8 4a 26 83 d7 58 fb fa ec 30 e0 b5 bf f4 30 de 7e 73 8f e8 3c 8c d8 a2 Data Ascii: w?s2~})}.-v]MSD.&B""%C"p=9ksBhveVS2c}@!T1b o$E),]k+EH?~pSswK20_YpNOpvv.{]lxe$O*GUtbsVUa,#M^2\g!^J&X00~s<
2024-07-04 20:55:36 UTC	11860	IN	Data Raw: 66 5e a3 6a 93 f3 af 5c d4 90 8c 90 b2 41 26 8b 29 03 e7 fd 84 87 6f ed f0 a6 87 6e e2 1d 8f 9d a1 84 0e 63 1a 50 0a e1 da b5 6b 38 39 b9 c2 53 f7 81 4d e0 d8 31 23 21 c5 54 39 cc d6 59 ac db 35 e0 19 f2 f8 e4 93 4f f2 3a 70 1c 61 00 4c 29 61 1a 27 ac d4 0f 38 f3 fa ce 38 76 b5 f0 46 5a 06 e7 d0 36 8d a8 85 da ea 4a a8 9f 7d 08 be 3f 3e de bc e6 e9 f7 df f7 ed cf 7a e6 33 7e ec ef 7e c7 5f db e6 fb 5f 61 7e db 9f fe 46 3c 63 b5 7e aa 63 f7 03 0f e0 33 00 5f 23 bf 37 00 f6 48 c0 13 2d f0 37 b7 97 82 17 00 be f4 2b 7e a7 6d db e6 a4 10 ad 9c 31 93 95 87 62 88 8d 99 81 11 5a 6a b2 db 42 3b 67 44 03 34 a1 81 33 0e b0 b3 dc 8d 06 8f 55 22 02 04 7e 47 54 95 1a 2b 76 19 6c cb 99 84 e4 6f 0d 43 0e 0b cd 3b 66 67 2d bb 05 46 ee 55 1b 1f e4 35 cd 1a cf 2a 41 5a 57 Data Ascii: f^j\A&)oncPk89SM1#!T9Y5O:paL)a'88vFZ6J}?>z3~~__a~F<c~c3_#7H-7+~m1bZjB;gD43U"~GT+vloC;fg-FU5*AZW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	64639	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:35 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTMvOWIwZDA4MjktYzE1Mi00ZjQ2LWI4NzAtMTVhMGRjMzAzNTkzL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=4014013dc62e3eef HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:35 UTC	626	IN	HTTP/1.1 200 OK Age: 1992379 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 65653 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:16 GMT Etag: "3f85bdb4958b83c275a9372b4f3bbd9a699a5e46" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 7f0b6720ea41d09a98f9f69f4bf3d3fc8f5334c9 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 80a72206-afce-4df8-b6a6-8b05179df941 X-Runtime: 0.462783 Connection: close
2024-07-04 20:55:35 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 36 f7 03 ff 1e 00 00 80 00 49 44 41 54 78 da ec fd d9 93 25 79 76 df 89 7d 7e 9b bb df 25 96 5c 6b ed 05 68 00 8d 9d cb 10 04 86 20 65 33 32 d3 8b 4c a6 27 3d eb 51 7f 14 cd 24 71 cc 66 c6 c6 64 a2 4c c6 19 19 39 c0 70 28 12 04 38 20 81 46 37 7a a9 de bb ab ba aa 32 2b 33 32 63 b9 8b bb ff b6 a3 87 f3 bb 37 aa 25 9a 8c 00 b2 ba ba 81 f8 b5 45 67 65 64 c4 0d 8f 08 3f 7e b6 ef 62 44 44 b8 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME6IDATx%yv}~%\kh e32L'=Q$qfdL9p(8 F7z2+32c7%Eged?~bDD
2024-07-04 20:55:35 UTC	2372	IN	Data Raw: 01 82 b5 78 ef 88 29 93 6b 01 0c ce 18 b2 ad 98 52 91 02 d5 54 8a 58 04 21 e6 84 37 8e 0f bf fd 4d fe 5f ff ed ff 15 63 1d bf f9 f7 fe 73 42 d7 7d da bf b6 9f f8 b9 0b e0 9f c2 93 73 e2 dd 6f 7c 99 1f fe fb ff 37 b2 79 c9 d0 59 96 43 47 df 02 32 f4 03 c6 7a 9c f5 58 1f 30 d6 02 60 bd c7 19 cd b2 52 2a d6 18 ac d5 9b be d4 8a 91 8a b3 16 6b 69 11 6d 91 5a c0 80 b5 16 8c 41 4c 45 c4 69 b6 d5 0f c2 60 81 8c 11 30 06 8c 58 2a 05 e7 3d 88 a5 8a 68 40 22 48 f9 f1 82 ce 58 f0 c6 53 ab 20 b5 bd 43 34 6b 87 e0 29 56 03 bd 56 8b 17 34 58 6b 45 8c 60 ad c1 56 83 35 42 f0 16 11 8b 88 3e 34 6a 2d 58 63 f9 d1 37 bf c1 3f fb 6f fe 2f 18 e7 f8 cd ff ec 77 f0 fe 6f d6 2d fd 37 eb bb fd 19 38 22 95 e7 1f bc cb 0f fe f4 0f a8 57 cf 39 e9 1c 7d e7 09 5e 83 d7 87 0e db 02 d7 Data Ascii: x)kRTX!7M_csB}so\|7yYCG2zX0`RkimZALEi`0X=h@"HXS C4k)VV4XkE`V5B>4j-Xc7?o/wo-78"W9}^
2024-07-04 20:55:35 UTC	538	IN	Data Raw: a7 83 a0 86 4e 3a 64 54 ef 3b 6e f7 b8 07 94 95 be 1d 27 cc b4 1d af 35 ed cd 1e 3e 18 e3 5d 83 3d 1a 2a 2d 7b b7 8c 8d 51 c0 46 15 d1 41 74 1b 18 29 48 44 d7 3e a1 0b 47 42 c4 6d 56 d5 a1 15 18 62 2a 0d 44 62 8e bd f1 01 22 79 f8 5e 34 d0 74 92 de 85 ee 88 1e 3b bc d6 a1 2c 3e fc fd 10 98 87 af 77 a8 76 0f 6c a8 43 c5 7e fc 99 18 f0 ce b6 96 b8 e0 ad 21 38 4b 70 96 ce e9 7f 3b a3 bb ee e7 1f 7c c8 ff fc df ff 53 de fd ce 3b fc 75 60 d2 de f5 c0 3f c1 13 e3 cc fb df fe 26 e3 c5 33 3a e7 b4 77 b3 16 6b e5 16 b6 88 0e a8 6e 3b b4 06 2f 6c 53 5c 63 34 37 db 43 19 69 4d ab 68 95 1a 68 0f 7b 55 68 9f 67 8e af 21 b5 2a fa c9 68 80 6a d0 b6 41 90 28 00 c3 a0 7d ae c1 b4 92 f6 30 d1 36 6d ba cc 31 c0 0b 3a ad 2e c7 41 f7 21 5b db 16 68 1e eb 8a 42 31 f3 a1 df 55 Data Ascii: N:dT;n'5>]=-{QFAt)HD>GBmVbDb"y^4t;,>wvlC~!8Kp;\|S;u`?&3:wkn;/lS\c47CiMhh{Uhg!*hjA(}06m1:.A![hB1U
2024-07-04 20:55:35 UTC	4096	IN	Data Raw: b7 13 27 55 b0 68 70 48 39 60 92 0e ff 13 44 0a fa e9 b6 dd d0 ba ce a9 c6 50 8c 50 51 c4 93 38 83 f5 da 4b 1f 06 58 07 a6 7f 91 da 94 30 14 d6 59 cb 81 a3 5b 8e c1 6c da e0 0c a0 96 4a 69 3c 62 63 0f 84 0a ab 81 eb 14 b3 8d 71 1f 83 5e ea ba 4b 1a 3b 4a aa a2 a8 10 dd 5d fb a6 14 62 8d 69 55 40 5b 32 7d ac c4 b5 87 69 bb 39 74 07 9a 89 8f 01 dd 7a 6e a9 ca 4d 76 c6 12 9c 63 e8 3b 7d f0 20 38 6b f0 4e 29 8d 37 2f af f8 c3 df ff 17 7c f3 ab 5f a2 e4 fc 69 df 1e 7f e9 73 57 42 ff 04 8e 88 70 f9 ec 23 9e ff f0 fb 38 23 8d 39 a4 fb 57 5c 23 06 54 b0 b6 ad 67 a4 1e 83 46 c3 ec b0 5b 95 23 cc 11 f4 26 ae dc ee 54 0f 6b 21 fd ef 46 23 14 0d 32 91 7a 04 78 98 46 92 90 96 b5 14 b0 a1 37 38 d6 52 a4 36 86 52 93 e3 39 5e 93 be f0 81 fc 70 e8 c1 ad 81 72 40 5d 89 5e Data Ascii: 'UhpH9`DPPQ8KX0Y[lJi<bcq^K;J]biU@[2}i9tznMvc;} 8kN)7/\|_isWBp#8#9W\#TgF[#&Tk!F#2zxF78R6R9^pr@]^
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: 67 a0 f3 81 55 df 31 04 c3 aa b7 3c 38 59 70 6f b9 e0 74 b5 64 b9 e8 e8 bb 4e a5 6f a5 36 cb 15 4b 8e 86 5c 32 d1 5a bc 18 26 0c 31 57 52 cd 54 d1 41 61 70 01 13 2c 2c 07 76 73 56 b2 43 a9 dc bc 7c c9 37 bf f6 65 be f8 6b bf c9 6a 7d f2 69 df 62 ff 3f e7 2e 80 5f e1 c9 29 52 e6 59 27 ce d6 e2 9d a2 aa c8 3a b0 81 b6 9f 3d 04 21 a2 0c 25 a9 48 c9 2d b8 a5 09 41 0a 85 a2 7d b4 01 a9 b6 cd a5 74 75 e4 0e 25 31 42 95 8a a1 09 b0 db 1f 17 56 a7 91 19 7e 4c 6c fd 20 cd 73 50 c1 94 5b 91 f7 22 85 9a 23 ce fb e6 5a a8 03 2c c5 47 16 ac 68 e9 6c 9b 7b 84 b1 28 96 b9 ad ca 6a ad 0d 45 56 8f d2 3c 00 a5 46 6a 4c 48 2e d4 5c c8 49 7b e1 fd 38 73 b3 9b b8 da 4f ec e6 c2 e5 76 62 2c 90 38 04 af 06 e2 e0 0c 83 f7 ac fa 8e 55 e7 59 f6 96 fb 27 03 8f cf 4f 38 5f 2d 58 f6 Data Ascii: gU1<8YpotdNo6K\2Z&1WRTAap,,vsVC\|7ekj}ib?._)RY':=!%H-A}tu%1BV~Ll sP["#Z,Ghl{(jEV<FjLH.\I{8sOvb,8UY'O8_-X
2024-07-04 20:55:36 UTC	7116	IN	Data Raw: 6a 5d 34 95 0f e5 1f ab 32 88 aa 8e 38 63 e9 42 c7 30 74 f4 7d a0 f3 8a 6e 73 06 1c 40 51 0e b6 e4 aa 2e 1a 8d 13 1c ac 63 9a 66 05 b1 78 47 a8 01 6f 13 9d ad 88 57 c4 5c c9 33 b5 28 2e 7c 7d 7e 46 7e 71 09 39 b1 b9 78 ca e6 ea f2 13 37 47 bb 0b e0 57 78 16 ab 35 c3 6a 4d 1c 6f 20 67 c5 1b 8b 1a 5d ab 89 f4 a1 1f 53 ff 5c d3 9c ec 2b 15 e3 9a 8c 4e 11 5c cb d2 ea 62 af 3c e1 14 23 c1 39 1c 41 29 84 ad ec 76 06 16 c1 d0 39 c1 db 4a f0 86 be ef d4 f1 d0 06 c8 70 75 75 c9 07 4f 9f e3 bb 05 6f 7c f6 73 84 d5 09 63 ac 8c 73 e2 6a 3b f1 a3 27 cf 79 71 79 c5 f5 cd 96 38 e9 14 d7 98 8a 33 10 aa e0 4b a5 f3 96 93 c5 82 c7 e7 67 3c 7a f4 80 e5 72 c5 ea 64 cd 30 04 86 ce b1 bd 79 a9 1d bd 75 b7 e2 7a 55 6f f2 50 b5 b4 c5 0a ce 77 7a 5d 18 42 d7 93 a6 9d 52 0d db 9b Data Ascii: j]428cB0t}ns@Q.cfxGoW\3(.\|}~F~q9x7GWx5jMo g]S\+N\b<#9A)v9JpuuOo\|scsj;'yqy83Kg<zrd0yuzUoPwz]BR
2024-07-04 20:55:36 UTC	8302	IN	Data Raw: 93 f6 ad f3 e6 86 b4 bd 61 f7 f2 19 fb ab e7 6c 37 57 8c 71 66 b1 3c 21 74 0b 8c f1 e4 58 10 d9 63 05 4a 9e 90 92 49 52 c8 a9 12 a7 cc cd 6e e6 a3 ab 0d ef 3d bb e0 f9 d5 0d bb 51 f5 ae 17 7d e0 fe d9 09 e7 27 2b a8 85 9a 33 29 25 52 11 e6 22 c4 02 bb 39 33 a5 4a b5 be 91 27 54 c8 cf 1b c5 3d 3b df dc 2d da 40 2c d7 42 2e 85 94 73 6b 51 44 d7 59 07 7b 57 1f 14 2f 5d 0a a6 56 4c 74 b8 10 f0 0d 50 92 73 c1 3a 05 72 a8 d9 7a 3d fe 7e 4a 56 62 48 4c 85 29 15 62 31 a4 aa ca d1 b5 16 76 31 72 1d 23 33 81 52 15 37 bd db ef 79 f1 f2 25 5f f9 b3 2f f1 3b bf fb bb fc fc 17 be 40 d7 f7 7f 65 86 d2 5d 00 bf 8a 23 15 2f 85 50 0b 31 15 36 17 97 7c e5 df ff 19 6f bf 78 8b 37 3e fb 3a eb d3 53 ba e5 12 37 2c e9 2d 6c d3 9e 7b a7 0b 62 5e f3 62 b7 07 17 30 74 a4 14 e9 7c Data Ascii: al7Wqf<!tXcJIRn=Q}'+3)%R"93J'T=;-@,B.skQDY{W/]VLtPs:rz=~JVbHL)b1v1r#3R7y%_/;@e]#/P16\|ox7>:S7,-l{b^b0t\|
2024-07-04 20:55:36 UTC	7366	IN	Data Raw: 67 9f f1 fc 93 4f d8 ed f6 8c fb 23 ba 68 ce 4f ce f9 fa 93 27 1c 1f 3c 60 78 fe 92 53 a3 51 41 f6 ef 31 4c e2 1a 69 00 a3 70 bd a7 38 41 9e 67 1a 6a 68 94 d2 57 af 5e f1 ec d5 35 a5 5a 4a 55 12 f5 92 33 45 8b 09 7e 29 62 01 a4 b5 6e c4 99 8c b5 8e 10 22 31 15 bc 6b 69 1b cd db 2c 97 2c 12 c6 5c 70 46 ec 81 e7 9b 77 1c 07 62 8c af 5b e8 bf 6d a7 5f ad b9 f7 e1 d7 18 9e 7e cc ea fa 9a e9 27 9f f2 93 9f fc 14 7f 7e c2 fa c1 5d bc 31 10 23 4e 09 13 28 37 9e 2f b9 e0 ac a6 d3 86 43 8c 38 67 19 c7 09 6d 1d 7e bd e1 72 3f 72 1c 26 ac d1 e8 9c 60 9c d8 1f 27 bc aa 58 db 49 a6 91 50 0b c8 18 52 85 c3 18 19 c3 c4 21 67 b6 ab 0e af 20 c6 82 31 1e a5 35 de af 70 5d 41 97 c0 f3 8b 3d 87 29 33 a5 89 29 24 b6 a7 a7 54 db 51 62 e5 e9 f3 0b 8e 87 81 12 a3 98 d2 a5 42 a8 Data Ascii: gO#hO'<`xSQA1Lip8AgjhW^5ZJU3E~)bn"1ki,,\pFwb[m_~'~]1#N(7/C8gm~r?r&`'XIPR!g 15p]A=)3)$TQbB
2024-07-04 20:55:36 UTC	10674	IN	Data Raw: 38 02 95 f5 7a c3 f6 e4 e4 b5 2f f4 7f 8d c7 5a c7 c3 47 8f 78 ef 2b 1f f1 d9 8f 7f c8 78 3c d0 67 d1 ac 52 e4 b6 1c c6 89 5c 2a be eb e9 ba 8e aa 60 18 27 c9 fc 9d f3 7b 4a 82 2c f3 ad 31 86 69 9a 96 59 18 90 62 6d f3 59 ce 92 5d 2b 20 92 dc 3c c6 1a ac 77 68 0d 29 46 72 92 19 bc d4 42 cc b2 e5 1d c6 91 6c 34 d9 6a e2 54 85 1d 76 1c d8 f6 1d 79 18 38 09 91 74 bd c3 78 01 e2 3a 2f 2d ac ef 24 21 62 4a 69 89 37 19 c7 49 8c e4 a2 04 b4 d5 46 a8 18 87 81 94 8b e8 71 4b c5 7a cb ab 57 97 a2 01 36 1a e3 9d 88 1e 82 90 55 8a 52 68 e7 18 87 80 eb 7a 5c 96 c8 16 db f5 0c f1 20 e0 9b 31 4c 21 cb 3c 8c ac d9 fa 7e 45 a2 52 53 6e 82 06 71 9a 14 6f 2b 99 b5 b5 69 2b a4 10 e8 bc 67 e5 d6 a4 29 12 53 14 bf ab 29 a0 75 2b ee 2c 7b e1 da fc a1 6b 01 63 35 be eb 39 3b 3f Data Ascii: 8z/ZGx+x<gR\*`'{J,1iYbmY]+ <wh)FrBl4jTvy8tx:/-$!bJi7IFqKzW6URhz\ 1L!<~ERSnqo+i+g)S)u+,{kc59;?
2024-07-04 20:55:36 UTC	11860	IN	Data Raw: c9 ff f6 bf f2 e9 f7 fe 03 21 44 4e b4 c6 03 14 59 05 d1 d2 08 20 a3 54 a5 92 db 9c aa 5a 50 59 c5 5a 8d 51 8a 69 4a 18 0a ca 2a 8c 71 d2 e2 0b d6 4c cc a0 4a 12 6e b1 91 16 3c 55 da 1e ba b9 5c 16 29 f0 54 32 56 19 54 2d 72 fb b5 77 9e 5e 9a e7 8a d2 75 51 0f 59 0d 4a dd 08 34 b4 91 22 95 7c 26 96 0c 22 e9 12 34 5a c9 1c eb b5 a2 73 16 a3 e4 a5 61 ad 15 12 8a 96 d9 98 2a 9d 01 b5 90 a9 e8 36 27 69 6d 31 5a 66 7c ef bc b0 d9 42 e0 3a 5e f2 83 ef ff 19 c3 30 f2 c1 57 be c2 83 07 0f fe ca e6 e2 d7 05 fc 9f 39 02 26 99 e6 d4 ef b8 31 53 13 00 44 71 e3 05 0c 2c eb a0 db ad 31 f0 b9 c2 9a 5b e4 1b 34 74 ae f9 ba a4 d7 cf 0f da 0c 7c 29 35 af 9d 8a 70 8d 97 95 85 5e 52 07 8c 91 ac 5b 6b 65 3e b6 e6 46 c0 ae 95 22 2b 49 44 30 d6 52 4b a6 73 96 6c 0d 29 04 cc e9 Data Ascii: !DNY TZPYZQiJqLJn<U\)T2VT-rw^uQYJ4"\|&"4Zsa6'im1Zf\|B:^0W9&1SDq,1[4t\|)5p^R[ke>F"+ID0RKsl)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	64641	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:35 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTkvNzg4NzA3ZjktNTQ3Mi00M2EwLWE1YjMtYWU0YTdkYzVmZmNkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=37d5cab959016bd1 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=cTZ0TzAxTjFrTHJPcmtrSHloKzRSVXBVRnlxVlJwbm10Vk9XQVZadW4rTXlURDlDTzBmL1FHcUorR1NXTGwzd2doRWFVOVZhZTFQTU9xTlZlTXlhNElkc2ZzVDlQZktOV3R4b2F1QWlVRWdiVEthMVZhTURhQ2JDVlRzUkJpR0xHVVVmVGhTSUJTbTFiUlVaNUhaejFOWXZNTkp5NmZ6M2NwOGZjSzRxaVpzek05V1B2cm1OaXFMVExrTDdPNVMyb0szVisxa2pIT25EVmJkK0lWZit0WE9rZGZFSnVEbjErTjFFc29LZHlxU1AwOUsyZG5rT09palJWeVpLajZ4NHZVQVhyL2tmb3pjcnJ6ODlRZnBzZGNNY3BVSDYxZkJ3c0YvSnEvejVKSmZVOTBBd1BtQUpObURtclUxbzRjY0J0bnNxWWszMGhXRVNaRUMxT0VvdHZ4aXJkak5wd1FiSjliekxEaTh3Wm5URXFXTHdKTzlvT2htVTJGVDFjN0lFMlR4Rmw3bjU1dzZycUhPKzRTSFo3OWZiK2ErQU03RHZ2cVJLSHRPbmtiVEMwb2tMUW9sSk9EdlpFQ1BidFRGdy0tcmw5UFlRd213WEhYS2hGTFhDc2RKUT09--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:36 UTC	626	IN	HTTP/1.1 200 OK Age: 1992381 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 60543 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:15 GMT Etag: "1a70981e26e7280f7edf5d8d8ccf0dd13da28783" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: ebb4d2d83a9c1229d1735597cf294991072c1d15 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: a4c6c5cc-b1a7-434e-addb-d81af9033ac0 X-Runtime: 0.479476 Connection: close
2024-07-04 20:55:36 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 3b 89 b2 83 a3 00 00 80 00 49 44 41 54 78 da ec fd 59 90 a5 69 7a df 87 fd de ed db ce 92 5b 2d 5d bd 0d a6 67 c3 32 d8 41 80 00 08 70 01 45 52 5c 6c 99 92 e5 20 29 d1 26 6d d9 8c b0 14 0e 46 e8 c6 4b f8 ca 61 df f9 c6 56 28 6c 47 c8 61 4b 72 58 96 19 a2 11 26 21 71 05 69 50 20 02 c2 c6 01 48 0c 80 c1 6c 3d dd 5d 4b 56 2e e7 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDpHYstIME;IDATxYiz[-]g2ApER\l )&mFKaV(lGaKrX&!qiP Hl=]KV.
2024-07-04 20:55:36 UTC	2372	IN	Data Raw: 26 cc 13 cb 34 91 52 62 bd de 40 ce a4 e8 c9 31 b0 5a ad a1 14 62 0c 2c f3 c8 32 1e 70 6d c7 fa fc 01 cd b0 26 87 88 2a 85 9c 33 29 45 6c e3 c8 a5 48 10 c7 c0 ee f2 31 e3 cd 73 52 f0 74 dd 8a b6 6d 29 a5 50 72 06 05 6d d7 83 d2 a0 20 a7 44 8e 11 6d 34 29 25 94 82 b8 cc 2c f3 88 d1 86 a1 ef 69 9a 06 45 66 e8 1a 4e d6 2b b6 43 c7 c3 b3 15 4d 37 f0 95 cb 89 27 57 7b 6e 6e 6f 58 42 00 ad 09 de a3 8c a5 ed 06 72 c9 68 ad 49 31 91 a2 c7 ba 06 63 1d d6 3a 62 8a 28 63 4a 0c b3 77 9d 7b af 3f bb f7 1f d2 0e ff 5e 58 c2 d7 fc 78 38 f8 18 a3 71 ca 68 55 b4 d1 e4 92 73 2c 39 15 ad 29 39 17 7e f9 af ff b5 17 fd 93 fe 67 f2 d8 17 fd 02 7e 27 9f d5 ef fa 1f f1 43 3f fc 31 6e 9f ed 9d 35 e1 7b e2 34 ff d9 e5 70 f8 b1 31 a7 37 a3 f7 c3 b3 0f de 57 7e 1c 71 ae 21 07 2f 4f Data Ascii: &4Rb@1Zb,2pm&*3)ElH1sRtm)Prm Dm4)%,iEfN+CM7'W{nnoXBrhI1c:b(cJw{?^Xx8qhUs,9)9~g~'C?1n5{4p17W~q!/O
2024-07-04 20:55:36 UTC	538	IN	Data Raw: 2b 6b 1a 05 29 46 82 f7 a4 18 99 0f 7b c9 30 7e 66 dc 5d b1 8c 7b fc bc c7 75 3d c3 e6 84 61 b3 25 46 4f f2 0b c6 5a e6 c3 5e 32 ba 52 32 dd 2d d4 41 51 8f 6b 5a ac 73 ac 4e cf 58 9d 9d 4b 49 9a 22 46 2b 8c 52 b4 eb 0d dd 6a 43 3b ac 00 79 c8 34 7d 47 c9 32 09 2f 39 11 e6 a9 56 0c 06 d0 b8 7e c0 2f 13 7e dc 43 ce 12 78 da a2 9b 16 d3 f6 94 54 28 5a 83 56 38 ab 71 56 51 4a a6 c4 58 4b 69 45 4c 89 42 41 2b 55 11 64 0b 29 78 72 8a 92 7d 53 60 59 26 59 6c a9 42 0a 0b aa ae b9 a8 43 2d a5 34 28 85 75 96 a1 1f 08 c1 9b b8 2c 0f 9c 73 57 6d db fe da b2 f8 43 29 e4 7f e9 4f ff 1a 5f fc f5 35 4f be f6 fc 45 5f 9d 17 72 be 11 c0 1f 39 df fa 2f fe 45 ba b6 e1 6f fc fc d7 f8 f8 a3 ed 89 d3 e9 4f a4 fd d5 bf b1 7b fa f8 fb 2f 1f bf 6f af 9e 3e e6 b0 bf 25 c7 40 d7 76 Data Ascii: +k)F{0~f]{u=a%FOZ^2R2-AQkZsNXKI"F+RjC;y4}G2/9V~/~CxT(ZV8qVQJXKiELBA+Ud)xr}S`Y&YlBC-4(u,sWmC)O_5OE_r9/EoO{/o>%@v
2024-07-04 20:55:36 UTC	4096	IN	Data Raw: 61 bd e1 f4 de 43 d6 db 73 e6 69 64 59 26 8c 75 84 e0 d9 3f bf 64 77 f9 44 20 8f b7 57 f8 e5 40 98 26 72 4e d8 b6 67 d8 9e b2 3a bd e0 e4 b5 b7 50 d6 71 b8 b9 26 c5 40 d3 b4 a4 9c ea d4 38 31 dd 3c 87 52 e8 37 5b da 7e 85 75 8e 7e bd a5 5f af 31 da d0 0e 03 fd 7a 43 4e 89 14 fc dd b4 39 e7 44 f2 0b f3 4e 86 43 29 46 19 e0 2a c5 b8 bb 16 a0 85 b5 28 a5 99 f6 b2 9e 2a 39 d3 0c 2b 4c d3 92 62 c4 c7 48 56 8a 18 02 cb 32 53 10 70 88 d5 e0 8c a2 75 8e a2 1d 63 c8 cc 3e 00 9a 94 0b 21 45 fc 22 15 8a b3 8e 52 03 b6 e4 4c 2e 05 63 34 5a 69 82 0f c4 fa ba a4 74 86 9c 73 2d e9 65 6e 90 52 c4 68 8d 56 5c 18 e7 36 ae ed 7e 31 f8 f8 0c a5 d4 97 7e fd ba 3c 7f 1e 38 7f fd 11 57 ef bf ff a2 af d1 6f eb f9 46 00 d7 f3 e6 1f fa d7 f8 9e 4f bf cd 5f f9 b7 fe 2e 6f 7f cf eb Data Ascii: aCsidY&u?dwD W@&rNg:Pq&@81<R7[~u~_1zCN9DNC)F(9+LbHV2Spuc>!E"RL.c4Zits-enRhV\6~1~<8WoFO_.o
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: db 3a 08 43 21 6d 4a 65 2f ad b7 02 69 f5 95 37 6d b4 c1 59 dd 34 ce fc 1c e8 5f d7 4a 45 63 ad b2 ce 96 52 0a 0f 1f dd e3 d9 e3 97 83 3f fc 4a 65 e0 94 13 bd 86 29 62 73 29 8d d5 ba 5f 0f dd b7 ea b4 fc cb 71 dc 7d 26 fb 40 db 0d 80 fa 10 b3 5b 87 59 b9 64 50 1a eb 5a b4 b5 b8 ae 47 a1 58 c6 91 65 b9 42 5b d9 f1 ce b7 d7 74 7d cf bc bf c1 f5 6b 56 67 67 64 0a 61 19 d1 56 64 5b 49 91 b6 1f 08 53 26 85 40 28 85 38 8f 92 6d 53 02 63 e8 4f ce 50 28 54 8c 38 ad d0 4d cb d0 36 9c af 7b b6 7d 8b d6 0a 4d 61 d5 35 bc f5 e8 35 4e 4f b7 98 46 c0 0f 5a 6b 34 48 80 38 8b 71 4e 86 70 c6 56 e2 3e a4 a5 40 2a 18 2b 95 84 36 46 82 b3 14 54 10 28 a5 b5 96 ac 80 6c a1 24 f4 d0 de c9 e1 68 25 25 ae d1 9a b6 71 94 a4 b0 39 61 91 fe b8 51 05 d5 58 01 62 c4 44 29 10 75 c6 97 Data Ascii: :C!mJe/i7mY4_JEcR?Je)bs)_q}&@[YdPZGXeB[t}kVggdaVd[IS&@(8mScOP(T8M6{}Ma55NOFZk4H8qNpV>@*+6FT(l$h%%q9aQXbD)u
2024-07-04 20:55:36 UTC	7116	IN	Data Raw: 22 a7 0a a0 cc 05 e7 2c 1a 25 20 8f 2c 2b a5 8a d8 46 ab 2c 1e c4 15 e0 61 75 ad 42 b4 01 c2 dd be d7 87 0f fb 72 f9 d9 2b 52 4c 58 63 31 5a b1 5d b7 b7 5a f1 ab 87 eb eb 70 fe e8 91 ac bd 5e 82 f3 d2 06 70 01 8c 8a 28 a5 4b ce 59 2b 4a 26 97 00 a5 d7 c6 9c aa 0a 07 3c aa fe ab 0a 31 d4 68 8c 3b 52 f2 34 c3 f6 9c cd bd d7 b9 7e f2 55 5c db b3 3a 39 c5 b6 1d 7e 1a 2b 30 c2 d0 b4 03 ae 13 61 b9 e5 f6 4a 5c 0d b5 c5 8f 3b 0a 82 36 6a 9c c5 69 8d 53 85 de 19 7a a7 d8 f4 86 8b ed 40 63 35 7d eb 68 9d a1 71 b2 22 71 d6 88 3d 89 d3 15 63 1c 31 d6 d5 d2 59 63 9c 93 20 22 72 bb f7 ec a2 e3 d6 5b 9e 1d f6 3c b9 39 88 91 76 a9 9a 55 29 90 e3 cc 7b c1 d3 f7 1d f7 ef 5f 30 cf 33 f3 ee 96 75 df 31 74 0d a7 e7 a7 c4 db 2b b4 3f d0 99 cc ca 05 5c 9e 69 6a b9 7d a4 05 2a Data Ascii: ",% ,+F,auBr+RLXc1Z]Zp^p(KY+J&<1h;R4~U\:9~+0aJ\;6jiSz@c5}hq"q=c1Yc "r[<9vU){_03u1t+?\ij}*
2024-07-04 20:55:36 UTC	8302	IN	Data Raw: ce db 8a e4 6e a1 50 52 04 63 b1 6d 87 6d 7b 6c d3 e1 5c a0 ef 02 e7 db 0d 3e 26 ae c7 85 25 2b 94 05 9d 23 84 85 be 6b d8 3e 38 e3 f5 b3 15 69 99 c8 31 54 3e f2 81 7c b9 23 7a 71 49 b4 44 36 eb 35 9d 13 91 bd 3b 85 ce 18 46 53 d2 fb aa e4 a8 94 2e 2d 1f aa a7 bc 2a e7 95 08 e0 c6 1a 94 52 4a ab ac 62 2c d9 68 95 73 c9 3e f9 f9 6b 8d 73 3f dd 34 cd f7 a5 65 b9 d0 4a 11 72 c6 1a 43 32 b6 fa 0a 67 4e 3b 47 8e 91 5f fe da 53 a2 9f f8 d8 45 cf a3 07 a7 b4 5d c7 e6 64 4b 3f f4 8c 87 91 2f fd e6 57 69 fb 96 d5 fd 73 ba d6 d1 0f 0d 07 9f 18 43 55 f0 c8 a9 82 f1 2b 1b 07 85 51 54 b7 81 52 55 64 0b 64 4f 89 33 c4 86 a2 65 7a ab 8c 01 d3 54 a5 ca 82 31 2d 45 cd f5 ed ea a1 94 32 71 9e c8 cb cc 61 b7 63 9e 67 96 18 f1 21 12 53 12 ab 15 ef 85 15 14 44 ee a6 ef 1a de Data Ascii: nPRcmm{l\>&%+#k>8i1T>\|#zqID65;FS.-*RJb,hs>ks?4eJrC2gN;G_SE]dK?/WisCU+QTRUddO3ezT1-E2qacg!SD
2024-07-04 20:55:36 UTC	7366	IN	Data Raw: 5f 45 6c 6c 88 2a 53 d6 69 85 65 b0 9a 1d 0f 11 aa 17 e6 2a a6 aa 03 d1 b4 d9 5f 7f 76 4e 55 2b 89 74 ca 9f 77 3a 53 88 91 90 fa 01 c3 a0 23 3b fb ae c7 95 4b cf e2 33 9f bc 82 2b 57 af e1 fc d9 f3 b8 eb 22 b0 35 eb 4d 64 80 10 5c 40 13 1a b0 73 18 86 41 79 db 59 74 48 9c 75 d8 b3 b5 3d 22 27 ac 56 6b 1c ac 96 46 8b d4 16 c8 fe a0 c7 e1 e1 01 fa be b3 69 85 6c 21 b9 20 83 30 0c 40 68 1b 50 1b e0 c9 21 63 8d 10 04 cc 0e 7d 4c e8 53 c6 2c 4b ed 9b 06 04 c4 0c df f8 cb 1c e8 5f be ee 75 ef 3a fc 77 ff fe 67 f0 93 3f ff 99 9b 7d cb dc d4 75 cb 80 8f 2c ef 1d da d9 0c dd da d1 d0 f7 9c b3 34 02 84 21 e6 d8 34 dc c0 85 fb 83 f0 22 70 46 96 64 22 6d 6a 9c 29 53 0d 75 a7 1e 52 79 c9 da 51 e4 59 8d 2b 12 d0 0d 11 6d 60 a4 4c 63 79 84 b4 6d 10 15 81 d5 5b 5e 60 ec Data Ascii: _EllSie_vNU+tw:S#;K3+W"5Md\@sAyYtHu="'VkFil! 0@hP!c}LS,K_u:wg?}u,4!4"pFd"mj)SuRyQY+m`Lcym[^`
2024-07-04 20:55:36 UTC	10674	IN	Data Raw: 89 29 02 60 44 ed 71 06 1b 52 7d e5 60 8d bd 75 8f 99 77 d8 69 03 66 81 ad b5 71 9c cd 34 96 85 74 88 9b 7e 4b a3 c1 02 b5 fb a9 09 1e cd cc c9 d6 56 b8 be bb d3 fc 5b e7 dc ff 90 86 e1 67 3d 73 ff 17 7e e2 17 6f f6 65 fb b2 5a b7 0c f8 f3 5c df f3 5d df 81 ff e9 6d 3d fe c4 af fa 57 6e fb f4 83 0b 47 df b8 08 5c 9c 17 54 a6 b9 a8 6e a8 cc 6a ce 62 aa 14 a5 0f 56 29 8f 02 01 b1 c7 6c b1 40 b7 5a a3 eb 3a 10 a9 91 65 cb 61 ab 96 94 63 b8 a4 a4 cc 1c 93 aa 41 4a 06 49 36 a6 97 2a 7c 28 50 95 c0 60 15 96 13 51 e5 0f 22 84 e2 2d cd 4b a6 0c 74 43 42 37 24 1c 76 03 66 c1 61 ee b5 ce 5c ca 5e 65 e9 fc e4 51 44 40 cc 2b b7 6d 23 67 ce 2c 96 4d e3 ae cd da f0 44 d3 b8 8f 80 f2 fb 5d 90 9f 3f 38 7c fa e9 e0 e7 f2 d7 ff fe 03 37 fb b2 7d d9 ad 5b 06 fc 79 ac ff f4 Data Ascii: )`DqR}`uwifq4t~KV[g=s~oeZ\]m=WnG\TnjbV)l@Z:eacAJI6*\|(P`Q"-KtCB7$vfa\^eQD@+m#g,MD]?8\|7}[y
2024-07-04 20:55:36 UTC	11860	IN	Data Raw: f5 3d 4a c4 c0 36 50 9c 88 36 ea af 55 9c cf d8 4f b5 7d d2 5c e8 66 48 59 c6 a1 4c 58 62 f5 33 b2 e5 c7 da 10 51 ca 30 65 26 53 3d cf 95 ae 39 91 a5 3d 92 bb 82 26 c6 53 ae 81 bd 5e 51 5a 29 ed a0 3a 7a 46 7b 85 73 25 93 08 1c e5 0a a4 95 96 45 66 ae 39 f5 72 3d 60 8d 80 33 e7 6f c3 6c d6 aa 98 bf d5 ce 8b b8 60 05 b7 78 d3 2b 8f c7 55 40 d5 02 96 b9 85 e4 cc 6d 08 ef 0f ce 1d be fb 6b de 89 7f fd 33 bf 70 b3 6d f4 b3 ae df 96 07 3e 58 67 38 47 b3 98 e2 f7 a5 9c bf 5d 44 fc 78 93 d3 46 84 47 f5 77 b6 db 02 1a e2 d8 cd 53 01 4b 43 31 db a6 41 db 04 74 fd 80 c3 83 25 f6 6e 1c 60 be 68 31 6b db b1 7e 67 37 78 c6 a4 58 6f 77 c5 31 05 8f 8d 30 58 db de 34 7a 24 cc 9a 06 0c c2 30 44 44 22 a5 00 32 a3 6d 1a 9c bf ff cd 38 7c ea 21 5c fe e8 cf 40 52 bf 01 88 f8 Data Ascii: =J6P6UO}\fHYLXb3Q0e&S=9=&S^QZ):zF{s%Ef9r=`3ol`x+U@mk3pm>Xg8G]DxFGwSKC1At%n`h1k~g7xXow10X4z$0DD"2m8\|!\@R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	64642	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTIvZDg0MGYyNGMtNTA4Zi00ODM2LThlMTQtZjUyNjQwYWQ1Mjc2L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=0ad5067c52cbc75c HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:36 UTC	626	IN	HTTP/1.1 200 OK Age: 1915082 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 15292 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:57:34 GMT Etag: "248889eadaadfd4536b7950a47ac100ba0307ceb" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: d7aa698f28bb0861b2f6a0ecb7da553c2e2fdadd X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 3c8c7f4e-9250-4f24-9cf2-2c4129b0d247 X-Runtime: 0.311641 Connection: close
2024-07-04 20:55:36 UTC	560	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 a9 a0 03 00 04 00 00 00 01 00 00 02 26 00 00 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 Data Ascii: JFIFHH@ExifMM*i&@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc
2024-07-04 20:55:36 UTC	2372	IN	Data Raw: 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 58 59 5a 20 00 00 00 00 00 00 9c 18 00 00 4f a5 00 00 04 fc 58 59 5a 20 00 00 00 00 00 00 34 8d 00 00 a0 2c 00 00 0f 95 58 59 5a 20 00 00 00 00 00 00 26 31 00 00 10 2f 00 00 be 9c ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 00 f0 00 f0 03 01 22 00 Data Ascii: 3curv3curv3XYZ OXYZ 4,XYZ &1/CC"
2024-07-04 20:55:36 UTC	538	IN	Data Raw: 14 51 45 00 14 51 45 00 14 51 45 00 72 4f e3 db 51 47 f8 b3 e1 0d 33 98 19 22 e1 74 90 2f 43 f5 5c ca 3f fe b5 ab 5c 3f 76 64 8d a0 e4 2f 1f 31 40 71 b9 35 68 ff 00 88 47 13 43 a6 7f 89 37 0c 5b c9 20 58 57 83 ad d6 42 c7 18 73 71 31 51 fa 1e d5 af bc 2d c4 71 b5 cc 25 5b ff 00 33 ae 40 c1 eb 8a 43 f5 3a f7 41 61 1e 9f e9 16 28 cd e4 da 0d 07 81 2d 27 e1 8b ad 57 53 6e 5b 6b 6b 77 b8 91 80 c9 fa 41 66 c8 ef b0 fd 6b 5d 65 e2 1f 0d 2c 78 80 45 73 c4 b6 90 71 7d dd d0 6b 6d 29 e7 5f 37 cb 39 3b 7b 8d b6 ea 6a f9 e2 1f 10 62 b3 f0 87 f8 0d bc d1 da 0d 42 d0 a5 c4 d2 3e 3c b4 23 1d fb 91 5a 27 ac 70 87 01 5c ea c2 fb 88 6f f4 fd 7a 69 67 56 8c d9 da 7f 35 31 b2 b9 62 ff 00 49 e9 9f 60 29 5d 75 d6 d6 de 7f a1 d5 96 58 9e ee 3f b6 74 5b 8d 78 9f 81 6c 3e 16 b8 Data Ascii: QEQEQErOQG3"t/C\?\?vd/1@q5hGC7[ XWBsq1Q-q%[3@C:Aa(-'WSn[kkwAfk]e,xEsq}km)_79;{jbB><#Z'p\ozigV51bI`)]uX?t[xl>
2024-07-04 20:55:36 UTC	4096	IN	Data Raw: 6b 8a 97 50 bc 17 26 41 20 69 3e a6 53 b6 7f 3e f5 55 eb ba af 9d ad 82 9c dc e0 7d 27 1b 10 7f d0 d6 dd 1d 0e 11 49 8b 75 da 88 ce 4d c4 e9 9f f8 7a f0 15 c7 19 fc 47 c3 71 7f 65 0c fc 3f a2 04 d6 2e 01 6c ab 48 84 8b 71 8e e7 cd 21 f1 e8 95 de c0 30 2b 95 5f e1 53 c3 f3 43 f0 c5 c7 7c 5d 2c 25 20 d4 f5 78 6d 2d 99 90 f4 82 32 5f 0c 7a 8e 69 07 d8 83 5d 56 ef 4c 6a ae 35 a7 8f 3c 8a 2e b6 56 c9 67 c2 c0 51 45 15 dc ce 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 70 b3 fc 55 78 4e 4d 33 e2 3b c3 9e 38 88 f2 c3 aa 69 12 5a 4a d9 24 f3 db c9 9e 9f f0 ca 3d 3a 57 3e 38 57 8b da de fb 49 b7 37 3f 54 88 72 dc b9 e5 c9 ea de 87 bf da bb bd fe 22 5e 0f dd f8 97 f0 3d 3f 10 69 2b 1f f1 5e 0e 9a 4d 55 87 96 5a 59 Data Ascii: kP&A i>S>U}'IuMzGqe?.lHq!0+_SC\|],% xm-2_zi]VLj5<.VgQEQEQEQEQEQEQEQEQEpUxNM3;8iZJ$=:W>8WI7?Tr"^=?i+^MUZY
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: 11 20 90 8c 77 da 9d 53 0f 4e 09 09 6e 97 a9 3c 8d 5a 96 91 a6 eb dc 3b 7f a3 ea 76 8b 7f a5 df db b4 37 36 ee a0 86 04 60 8d ff 00 63 d8 d7 20 7c 67 f0 13 53 f0 cb c4 93 0f 94 f7 3a 1d dc cc da 5e a0 ab f4 c8 bf e4 6f 47 51 b1 1f 9d 76 25 65 74 9c 84 43 e5 f7 04 67 3e bd 29 b3 88 f4 1d 17 8b b8 4a e7 4a d6 ec 13 51 b0 90 7f 36 de 64 cb 2b 7f 49 53 d4 37 a3 0d eb 96 a7 4f eb c3 8e 1a 34 69 75 2f 4f 3e 79 8f 93 8a 9a 37 09 ea 9a de bd 6b a4 68 5a 65 c6 a9 7f 2f e0 82 de 23 23 1f d3 a0 f7 3b 56 eb f8 6d f0 91 7e f2 5b 6a 5e 20 5f ff 00 0e b6 18 23 48 b0 70 d3 3f b4 92 ee 13 ec b9 3e e2 b7 13 83 7c 3a e1 4e 01 d0 de cf 40 d2 a0 d2 8c 98 33 4a a7 9a 69 cf ab b9 dc ff 00 a7 b5 4d 95 d5 46 51 0e 32 77 3d 6b 0e 9f e9 f1 87 ba c7 97 fe 0c 35 3f 53 9d 9e da d6 17 Data Ascii: wSNn<Z;v76`c \|gS:^oGQv%etCg>)JJQ6d+IS7O4iu/O>y7khZe/##;Vm~[j^ _#Hp?>\|:N@3JiMFQ2w=k5?S
2024-07-04 20:55:36 UTC	1796	IN	Data Raw: 71 27 2d bd a8 f3 e1 54 e7 21 00 e5 c9 07 6d fd bd 6b 00 c4 ce 5e e8 6a 82 19 99 23 2d 20 24 67 06 36 2d 81 bf 42 3d 7a 57 bf 3e d7 e4 db 4c 59 60 64 47 76 e6 62 ca e3 1d 14 0d b6 eb d3 d6 90 a3 cf 3d e4 c2 e5 b9 d6 39 c2 40 85 4e 19 42 64 86 07 df d7 a8 af 53 b4 66 d3 e6 2e 6d 8a 47 1e 4e 62 00 12 58 f4 19 dc 00 40 fc aa a0 65 26 35 b7 b6 8a 3c 08 9e dd dd 19 82 b1 25 8e 3b 67 03 be e6 a3 f7 77 09 6d a4 5b 2a 42 a0 36 4a bc a3 66 38 c1 3c a0 6e 31 df a5 3d c8 b6 23 4d 91 12 ec 1b b8 ed 30 ee b0 79 64 36 07 4c 7a 8d b0 29 9b 52 b2 58 b4 88 a7 f3 5a ea 48 82 b3 20 3b 90 7a 81 ed db fb 54 00 dd 29 91 6f da 49 ad a4 01 a3 55 97 cb 07 09 fe 6c 8f 61 de 91 ea 82 16 b7 96 18 e0 94 aa 66 42 c9 31 5d c9 03 3c d9 fb 76 fb d2 d9 2f 2d 64 bb 96 56 9d 6e a2 08 a8 59 Data Ascii: q'-T!mk^j#- $g6-B=zW>LY`dGvb=9@NBdSf.mGNbX@e&5<%;gwm[*B6Jf8<n1=#M0yd6Lz)RXZH ;zT)oIUlafB1]<v/-dVnY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	64643	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTEvOTk3Yjg5MjQtN2QyNi00OTE3LTk5YmItOTgxNzRkMzJjNTIwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=f297d14f93e8ab06 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:36 UTC	626	IN	HTTP/1.1 200 OK Age: 1915078 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 21699 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:57:38 GMT Etag: "c59c8708a0da4b9ac4e4680522481a783ded0657" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 7b1059c84fac89fed8b7d39d61e014d64803609d X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 57a05f22-b014-413a-ae86-5435bf7d8f4b X-Runtime: 0.317307 Connection: close
2024-07-04 20:55:36 UTC	560	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 3e 74 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 04 00 01 00 00 00 80 0b 00 00 01 01 04 00 01 00 00 00 a0 08 00 00 0f 01 02 00 08 00 00 00 9e 00 00 00 10 01 02 00 09 00 00 00 a6 00 00 00 12 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 d2 00 00 00 1b 01 05 00 01 00 00 00 da 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 0e 00 00 00 b0 00 00 00 32 01 02 00 14 00 00 00 be 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 e2 00 00 00 a8 02 00 00 73 61 6d 73 75 6e 67 00 53 4d 2d 47 39 37 33 57 00 00 47 39 37 33 57 56 4c 53 34 46 55 42 31 00 32 30 32 31 3a 30 33 3a 31 32 20 31 30 3a 31 35 3a 30 38 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 Data Ascii: JFIFHH>tExifII*(12isamsungSM-G973WG973WVLS4FUB12021:03:12 10:15:08HH
2024-07-04 20:55:36 UTC	2372	IN	Data Raw: 02 00 0c 00 00 00 9c 02 00 00 00 00 00 00 32 30 32 31 3a 30 33 3a 31 32 20 31 30 3a 31 35 3a 30 38 00 32 30 32 31 3a 30 33 3a 31 32 20 31 30 3a 31 35 3a 30 38 00 2d 30 35 3a 30 30 2d 30 35 3a 30 30 f0 00 00 00 64 00 00 00 01 00 00 00 78 00 00 00 01 00 00 00 78 00 00 00 fc 00 00 00 64 00 00 00 46 03 00 00 64 00 00 00 00 00 00 00 64 00 00 00 fc 00 00 00 64 00 00 00 7b 00 00 00 64 00 00 00 4a 01 00 00 64 00 00 00 4c 31 32 58 4c 4c 44 30 30 53 4d 00 08 00 00 01 04 00 01 00 00 00 00 02 00 00 01 01 04 00 01 00 00 00 80 01 00 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 0e 03 00 00 1b 01 05 00 01 00 00 00 16 03 00 00 28 01 03 00 01 00 00 00 02 00 00 00 01 02 04 00 01 00 00 00 1e 03 00 00 02 02 04 00 01 00 00 00 4e 3b 00 00 00 00 00 00 48 00 00 Data Ascii: 2021:03:12 10:15:082021:03:12 10:15:08-05:00-05:00dxxdFddd{dJdL12XLLD00SM(N;H
2024-07-04 20:55:36 UTC	538	IN	Data Raw: 01 c0 51 c0 18 00 62 bf a5 db cf d8 c2 ef c4 1a a5 c6 af e2 ff 00 17 35 cd e5 cc 86 59 d6 d2 dc b6 58 f5 fd fc cc bc 76 00 40 00 00 01 c5 7b 05 97 ec 67 f0 a5 30 2e 57 55 bd c7 69 af 16 35 fc 05 bc 50 91 ff 00 7d 57 e9 d8 7a 31 a6 ae f5 67 8a ea a3 f8 cc bc d6 20 87 2a 99 23 b9 ce 09 ff 00 0a f3 89 75 98 c1 fd d5 b2 7d 58 6e 3f af 1f a5 7f 78 f6 7f b2 0f c1 45 19 3e 16 57 f7 7d 43 51 6f fd ba ae a2 db f6 49 f8 29 19 ca f8 4a 1f c6 f7 50 3f ce ea bd 07 36 63 ed 23 e6 7f 01 ab a8 6a 32 f0 09 03 d0 70 3f 21 56 96 19 47 32 3d 7f a0 c4 7f b2 bf c1 b1 d3 c2 56 ff 00 f8 17 7f ff 00 c9 34 d3 fb 29 fc 16 3c 9f 08 db 1f ad dd ff 00 ff 00 25 51 ce c9 f6 88 ff 00 3e 76 d5 fc 9e 82 b9 7b af 10 ca fc 0a ff 00 43 39 ff 00 63 ef 81 f3 e7 7f 83 e0 19 ee b7 ba 8a 9f d2 ea Data Ascii: Qb5YXv@{g0.WUi5P}Wz1g *#u}Xn?xE>W}CQoI)JP?6c#j2p?!VG2=V4)<%Q>v{C9c
2024-07-04 20:55:36 UTC	4096	IN	Data Raw: 03 c5 b6 91 9c 05 07 dc 9a ec 85 37 2d 91 cf 29 a4 74 37 f7 37 58 2b 6f 19 ff 00 7b 1f ca bc 16 f3 47 bc 95 89 90 80 7f da 61 ff 00 eb af a4 2d 75 cb 3b 90 07 4c fb d3 ae 6d 21 3c 81 5f 5f 46 d0 d2 c7 cc d4 93 91 f1 fc be 18 4c 12 f2 6e f6 5f f1 35 e5 3a 86 93 12 e4 2a 11 f8 d7 db 57 30 a0 ce 05 79 26 a5 60 1c 1c 57 d4 23 cb 3e 4e 64 29 c0 ad 38 98 8e 4d 75 57 16 04 31 e2 a9 0b 53 e9 58 b8 94 99 14 72 1f 5a 16 52 5f 8a bc b0 ed e6 b2 fc c5 5d c6 b0 36 35 3e d0 6a cc 77 46 b8 a9 75 14 15 9e ba 99 ec b5 cf 73 53 b2 06 9f ba a3 cd 3a bf 10 3e f4 9c 52 83 4d 02 96 98 16 05 4c 2a 11 52 ad 6e 04 ca 6a 61 50 83 52 83 4c 09 c5 4e 0d 57 15 61 6b 70 27 06 a7 53 55 d4 d4 c0 d3 02 c0 35 30 a8 05 58 14 01 38 a9 96 ab 03 53 ad 5a 11 38 35 30 35 5c 1a 98 56 83 2c 0a 9d Data Ascii: 7-)t77X+o{Ga-u;Lm!<__FLn_5:W0y&`W#>Nd)8MuW1SXrZR_]65>jwFusS:>RMLRnjaPRLNWakp'SU50X8SZ8505\V,
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: 58 53 53 83 55 05 4e ad 5a 81 6f 34 f5 a8 01 a9 96 98 16 14 d5 91 55 96 a7 06 90 16 d6 9e 2a b8 35 38 a6 04 ca 6a c2 9a a8 0d 4f 56 04 f9 af ce 1f 8f 5f b4 cf 87 be 18 08 6d ae 61 96 f3 51 b8 87 ce 86 d6 33 b1 7c bd cc 82 49 65 20 85 52 ca c0 6d 56 63 b4 f0 07 35 fa 3a a3 35 fc 17 7e d9 9e 3d ff 00 84 83 e2 8e ac 14 af 93 a6 ac 7a 7c 58 eb b6 0c b3 e4 fa f9 cf 27 d0 60 76 af 46 9c 2e 62 dd 8d ff 00 8a 7f b5 9f 8e 3c 6f e6 43 35 d8 b0 d3 db 8f b1 59 96 8d 18 7a 4b 21 26 49 73 dc 33 6c f4 51 5f 98 d7 7a d7 5f 9b 1e c2 bc a2 eb 51 e3 83 d6 b8 7b 9b fe 0f 35 f4 31 56 db 43 98 f4 ab 8d 57 76 70 6b 15 b5 03 81 9a f2 ef b4 1f 5a 4f 3c fa d6 ba 12 7b 1c 17 de f5 d4 c5 73 b8 63 35 e0 90 dc 11 d0 d7 a3 da 5d 67 6a e7 8e a3 9e e7 00 f1 f8 0f ca 9b 42 3f 7b 3e 0d 5c Data Ascii: XSSUNZo4U*58jOV_maQ3\|Ie RmVc5:5~=z\|X'`vF.b<oC5YzK!&Is3lQ_z_Q{51VCWvpkZO<{sc5]gjB?{>\
2024-07-04 20:55:36 UTC	2361	IN	Data Raw: f8 1b e0 a8 e3 78 d7 40 d3 f6 bf 51 e4 a1 fc 8b 29 23 f0 35 fa b5 7d e1 04 39 68 1f 1f ec b7 4f ce bc 6e fb 47 9e df fd 64 64 7b f5 1f 98 aa 19 f9 bc 3e 00 f8 1e 3c ed f0 f5 8f 23 1c c2 ad ff 00 a1 03 5c 1d c7 ec e5 e0 06 39 6f 0f da f5 cf 46 1f c9 ab f4 c1 a2 aa ac a3 bd 2b 81 f9 88 7f 67 5f 00 2f 23 c3 f6 7f f7 c6 7f 99 af 41 d3 be 13 78 62 c7 02 db 46 b1 8f 1f dd b6 88 1f cf 66 7f 5a fb d4 c4 bd ea 33 0a f6 02 ab 50 3e 68 83 c3 f0 c4 36 a4 2a 83 d1 46 3f 41 57 8e 8b 0e 39 8f f4 af a1 fc a1 4c f2 47 a5 66 07 ce 03 43 88 1c ac 5c fa e2 b5 23 d1 47 04 d7 bd 1b 71 50 9b 51 48 67 91 2e 90 a2 9e 74 d4 15 ea 0d 66 2b 2e 5b 10 69 01 e7 a6 d2 31 55 59 10 70 2b b3 7b 11 e9 59 6f 67 8e 82 80 39 6f c2 98 13 9a d7 92 1c 76 aa a1 68 02 80 46 06 b5 a3 1d 8d 01 6a c4 Data Ascii: x@Q)#5}9hOnGdd{><#\9oF+g_/#AxbFfZ3P>h6*F?AW9LGfC\#GqPQHg.tf+.[i1UYp+{Yog9ovhFj
2024-07-04 20:55:36 UTC	5842	IN	Data Raw: 2d 4d 26 a3 26 80 39 5d 63 4d 5b d8 19 0f de ea a7 df ff 00 af 5f 08 6b 3a 54 91 b3 23 2f 23 a8 35 fa 25 9a e1 35 ad 1a 3b d4 24 71 20 1c 1f 5f 63 4c 0f cd db 88 99 00 04 57 30 ed b3 a5 7d 11 ab 69 25 37 2b 2e 18 76 af 15 ba b3 ea 08 ad 6e 07 9e cc ec c4 9a c8 28 49 19 ae c6 4b 7c 76 ac f6 87 90 45 58 8c 55 83 ae 4d 3f cb 20 e7 a8 ad 30 39 c5 46 dc 75 ff 00 3e d5 d1 19 19 34 67 14 e7 3e b5 76 13 92 09 a6 16 04 53 11 fb e3 a5 7b 4a 57 47 0b 40 ff d3 ff d9 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 Data Ascii: -M&&9]cM[_k:T#/#5%5;$q _cLW0}i%7+.vn(IK\|vEXUM? 09Fu>4g>vS{JWG@CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	64644	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDkvY2E1OWFmNWQtMzM5Zi00ZGRhLWI1NDktM2RlOTJmNzYxMDZjL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=812399337bf0296b HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:36 UTC	626	IN	HTTP/1.1 200 OK Age: 1915145 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 87554 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:31 GMT Etag: "c46e0508f2c30a7d08869d1aa13a39c4f9ea940a" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 3c635b51a42cc47ff6c3e71cabebd523e828e99d X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 025cc6ed-491a-437b-9914-da905d4aa1fe X-Runtime: 0.430406 Connection: close
2024-07-04 20:55:36 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 32 f0 6e 3b 07 00 00 80 00 49 44 41 54 78 da ec fd 77 9c 65 db 79 d7 09 7f 57 d8 e1 e4 53 b9 73 ba 39 67 49 57 d9 b2 90 9c 03 06 8c b1 8d c9 30 0c f0 8e c9 f0 c2 bc 30 60 3e 03 18 18 7b 3c 30 0c c1 11 6c e1 2c 70 c2 d8 b2 2d db b2 c2 b5 c2 bd ba f9 de ce 5d dd 95 eb a4 9d 56 98 3f d6 3e a7 aa 65 1b 27 f9 ad 6e 51 8f d4 9f ee ae 3e 55 75 ea ee fd ec f5 84 5f 10 1c c6 e7 5c 7c c7 57 7d 11 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME2n;IDATxweyWSs9gIW00`>{<0l,p-]V?>e'nQ>Uu_\\|W}
2024-07-04 20:55:36 UTC	2372	IN	Data Raw: 71 8c 54 0a 21 25 42 80 94 02 21 ea e4 45 20 84 40 d5 c9 0a 1e ef 3d 52 4a b4 d6 20 40 08 31 fb 98 10 62 f6 f7 69 32 43 78 0d 9e d9 c7 44 9d d0 42 0a 04 1e ef 2c b1 92 cc f5 ba cc cf 2f b0 b9 b9 c5 95 4b 57 e8 77 fb 2c cc cd 53 19 c3 da c6 06 ad 4e 97 f1 24 a7 cc 4b ce 9c 39 c9 60 38 c4 56 9e 46 da 20 1f 4f c2 fb 88 22 9c f3 58 63 51 51 44 56 1a 31 1e 8c ee f4 a6 7a f1 67 3f f4 ec 73 df f6 97 bf 8e 1f fc d0 a7 0e fa 72 fe 77 e3 30 81 3f c7 e2 5f fc b1 3f ce 3f df 29 b9 2f 4e de 3d f0 f2 af 27 cd 6e 5f 48 41 bb d3 e0 ec 99 13 8c c7 43 ae ac 5e 41 a8 88 6e af cf 6b e7 5f e3 ea ea 25 5a 4d c9 a3 0f dd c3 43 77 9f e5 dc 89 25 8e 2f cf d1 ed b4 10 42 10 c7 31 91 8e 10 08 ea ff 13 f2 cc 01 1e 29 e4 ec fb ef 4f 48 ef 3d 4a a9 d9 9f f7 bf 46 ca f0 39 fb 93 77 f6 Data Ascii: qT!%B!E @=RJ @1bi2CxDB,/KWw,SN$K9`8VF O"XcQQDV1zg?srw0?_??)/N='n_HAC^Ank_%ZMCw%/B1)OH=JF9w
2024-07-04 20:55:36 UTC	538	IN	Data Raw: 47 bf f7 a0 2f ff 4d 71 98 c0 b7 61 7c ef d7 bc 9d 5c 75 d8 5c 38 71 24 b3 ea 2b 51 8d 15 bc a7 d7 6e 30 d7 6e 52 4e 26 b4 93 06 17 5f 7e 05 55 0e 78 db 53 0f 13 4b 8f 70 0e d8 b7 a7 ad 4f 46 e7 1c ce dd 8c 9a 9a 86 ff 8c 53 77 ba 12 b2 d6 62 ad c5 33 85 56 d6 7b d9 e9 1a 68 ff 27 f9 9a e0 50 c3 22 a7 eb 26 bf ef 6b ed 9f 4a ef 4f d6 29 12 6b 76 7a cf be 9f 9c 7d cf 69 9f ee ea 87 90 10 9e 24 96 b4 1a 11 0b 73 4d 8e 1e e9 10 45 9e 32 cf d9 bc b1 45 36 ca 49 92 04 21 25 65 59 a0 94 aa a1 99 e9 de cf ab 14 c6 59 ac b7 78 a1 94 75 fe 9d 7f fb 4f ff a1 b8 ac 0e 4b e8 c3 f8 5d c6 a4 7b 92 f9 e3 77 32 77 e4 c4 7d 2a 6d 3f 26 75 aa a5 f3 9c 3e 7a 94 44 08 dc 24 83 a2 60 ed ca 45 9e 7e ea 01 e6 3a 11 c2 55 08 24 a0 ea 04 db bf c2 99 4e 89 c3 90 49 d6 28 2c 3f 43 Data Ascii: G/Mqa\|\u\8q$+Qn0nRN&_~UxSKpOFSwb3V{h'P"&kJO)kvz}i$sME2E6I!%eYYxuOK]{w2w}*m?&u>zD$`E~:U$NI(,?C
2024-07-04 20:55:36 UTC	4096	IN	Data Raw: 8a 30 d6 52 e4 05 de 5a 3a cd 94 24 52 d8 22 27 52 92 28 8a 70 d6 21 11 e4 c6 9e bc be 33 78 e0 95 4b 57 f9 9e 6f ff d6 83 be 05 66 71 98 c0 b7 61 58 9d f0 6f 9e 8a 65 7f 6e e1 c8 91 63 27 e2 ca 96 f4 e6 7a 44 cd 94 ac aa d8 b8 be c6 da f9 d7 78 e3 a3 f7 d3 69 35 ea 69 f2 74 08 14 50 4b d3 95 cc de 6e 96 9b 00 16 d3 d5 51 00 39 54 98 aa c4 54 25 d6 54 38 67 b0 c6 ec e3 f0 d6 e8 28 a6 e5 b8 bb a9 cf dd eb 89 c3 e0 69 06 bb 64 af 8d 9d 7e 2d 6b 2d ce da 7a dd e4 71 f6 e6 9e 7d 5a a3 cf 4a 6a b7 d7 73 87 3f ef 07 7a 40 bb 9d 72 74 a9 cf 91 c5 0e 89 86 6c 32 66 34 ce d8 d9 19 60 9d a7 d1 6c 52 14 05 10 26 eb 69 12 07 e6 93 31 24 51 8c 10 61 32 8e 56 ed 71 36 79 f2 27 d7 76 79 ed f5 d7 0f fa 16 98 c5 61 02 df 66 e1 81 c2 c1 c3 5f f4 fb 1b ab eb 1b 47 9c 10 d2 Data Ascii: 0RZ:$R"'R(p!3xKWofqaXoenc'zDxi5itPKnQ9TT%T8g(id~-k-zq}ZJjs?z@rtl2f4`lR&i1$Qa2Vq6y'vyaf_G
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: 66 3b 0e f6 24 ce 33 d7 d5 b4 da 0a e5 2d 02 85 14 b2 5e dd 78 8c b1 e1 97 ad c8 8a 8a 71 66 28 8d 20 2b 72 c6 93 9c 9d e1 24 4c c0 05 44 5a e0 bd a1 d9 6b 12 29 4d 1c 47 34 d2 94 66 33 21 89 62 6c 55 91 67 93 b0 e5 16 11 55 19 63 2b c7 68 9c 33 9a 64 6c 0f 3d fd ed 21 cb 8b 3d e6 7a 4d 22 1d 63 a5 a3 32 06 27 82 b4 b5 70 8e 48 09 62 a5 50 52 04 c4 95 b3 14 ce 52 38 83 c1 d1 68 24 e4 d6 33 dc 19 04 00 0b 3e 7c 3e 42 64 86 e3 bb de f3 8d ef 7e eb 41 df 22 87 09 7c 2b c7 e5 3f f0 85 dc 7f ef 7d ac 5f 3a ff b8 e9 76 16 d7 cb 8c b5 57 5e e5 e1 47 1f 24 6d 24 58 53 11 eb 18 85 e7 f8 d1 65 be fc 4b df cb fc 42 9b 49 36 40 47 c1 c5 5e d4 25 a8 b1 1e e3 05 79 61 18 67 19 45 59 52 19 cb 24 2f 29 8a 92 aa 32 75 cf aa 90 3a 62 6e be cf f2 d2 32 0f 3d a4 18 ed 8e b8 Data Ascii: f;$3-^xqf( +r$LDZk)MG4f3!blUgUc+h3dl=!=zM"c2'pHbPRR8h$3>\|>Bd~A"\|+?}_:vW^G$m$XSeKBI6@G^%yagEYR$/)2u:bn2=
2024-07-04 20:55:36 UTC	7116	IN	Data Raw: 8b 27 8f 30 c9 73 ae ad df c0 7a c1 ca 91 05 24 9e 34 8d 88 25 48 ef 5a d2 b9 a6 bb 05 32 f8 30 81 6f f1 90 5a d1 e8 74 84 90 52 7b e7 88 e2 18 3c ec 0e 46 08 19 e3 71 33 b3 4e 1d a7 08 20 1b 0d 42 8d 87 a1 d9 84 a5 c5 06 49 dc 67 79 31 9d 09 d8 55 c6 51 96 86 f1 28 a7 aa 1c c2 c7 41 6a 06 8f 77 0e 21 05 49 23 a6 3f d7 61 e5 e8 12 4b 47 e6 49 12 8d 35 39 3a 56 c1 6b 37 d6 c1 c3 b7 1e 84 49 6b f1 55 60 0c 85 10 75 f2 06 a9 58 89 46 78 cf e2 5c 9b c7 1f be 9b 67 9f 7f 9d 5f f8 e0 33 bc f1 0d 8f 72 ee cc 32 9d 46 8a a9 26 94 36 94 d3 d6 58 84 0c 3a 59 4e 3b 74 14 13 c5 71 a8 10 ea 87 42 e4 25 a6 72 28 1f 7a 6d 2f 3d 4a 45 18 27 d1 ba c9 8d ab 1b 5c 3d bf c6 5b de f4 00 0b 73 11 26 af 90 42 a1 a4 c5 e0 d0 5a 23 a4 08 30 51 29 49 92 18 15 69 d6 36 56 c9 4c c1 Data Ascii: '0sz$4%HZ20oZtR{<Fq3N BIgy1UQ(Ajw!I#?aKGI59:Vk7IkU`uXFx\g_3r2F&6X:YN;tqB%r(zm/=JE'\=[s&BZ#0Q)Ii6VL
2024-07-04 20:55:36 UTC	8302	IN	Data Raw: 3e eb 71 d8 03 df e6 f1 73 2f 5f e1 f1 a5 0e 3f f0 dd ff 71 e3 0d 6f 79 f3 99 66 bb f5 a6 29 d8 5f f8 20 e6 ee 6a 01 3b 57 4f 86 c3 5a d7 a2 b4 42 2a 45 92 24 34 db 2d a2 28 42 29 8d af 85 ef 82 81 b6 20 49 74 ad 94 61 70 b6 c2 e1 29 bd a5 74 16 2f 05 a5 0d 93 ee d2 1a c6 d9 84 ac c8 29 aa 82 c1 78 44 5e 15 38 29 88 1b 31 ad 76 42 bf df a2 d3 6b d1 ed 36 49 53 8d 12 1e ad 25 49 1c 11 47 3a 70 99 45 70 5c d0 3a 22 8a e3 e0 df eb 2c 55 ad df 35 93 01 72 b5 07 f1 4c 4e c7 62 7c 4d 73 f4 02 63 29 47 a3 f1 3f ff bb 3f fc 91 9f 7c 78 31 e6 fb 5f de 39 e8 cb f5 59 8f db 0c ba 7d 18 bf 5e 3c 06 fc e0 0f fd 1b 5e 7d f5 f5 77 3d fe 86 27 de d7 5f e8 2e 1a 53 e2 aa 20 f7 6a 8d a1 aa 7d 7b 85 f7 54 65 4e 59 e6 b3 7e 55 47 11 9d 5e 8f 24 6d 20 94 0e 2e f7 52 a2 23 15 Data Ascii: >qs/_?qoyf)_ j;WOZB*E$4-(B) Itap)t/)xD^8)1vBk6IS%IG:pEp\:",U5rLNb\|Msc)G??\|x1_9Y}^<^}w='_.S j}{TeNY~UG^$m .R#
2024-07-04 20:55:36 UTC	7366	IN	Data Raw: c4 c3 3e a0 11 c6 ce 6c 93 3c 25 ea 46 36 31 41 db 0b cd 71 1c cb 82 d2 35 82 2e 55 5d 51 d6 0d cb 24 45 56 25 5b 5b 23 8e 1f 1e 91 d5 25 b3 b2 e6 24 5d f1 c4 b5 1d be e2 0f fe 77 f4 3c c9 2f 7d f0 06 ef 7f ff 0b 2c 16 29 dd 4e 40 37 76 88 42 45 18 fa 1b f1 86 10 0a 25 1d 9a a6 c6 ac 31 39 52 51 b7 67 6c ad 6d 3a a0 35 22 d8 d9 ae 34 d8 22 45 6c f2 84 8d b0 56 44 25 04 52 ba d4 55 b5 71 4a 99 aa 05 b1 57 15 4d 63 57 4a 4f 08 94 23 a9 6b 43 d1 18 1a 47 71 f1 f1 c7 79 ea b9 e7 f0 c2 98 bc 6d a2 c9 4d c4 8b e5 47 af e3 52 0d d8 59 50 1b 0e 6e bb e1 56 92 d9 68 0b b4 37 ad a5 d1 fe cf fe bd e3 ba 78 ae 83 1f 04 24 49 42 b2 5a 52 d7 35 4e 1b c4 a6 05 78 71 f0 09 cf bc ee b5 6f db de d9 fa 91 df f7 f6 3b fc eb 9f bf fb 1b 7d e9 fe df 3e fe 5f 51 c0 ff cb bb bf Data Ascii: >l<%F61Aq5.U]Q$EV%[[#%$]w</},)N@7vBE%19RQglm:5"4"ElVD%RUqJWMcWJO#kCGqymMGRYPnVh7x$IBZR5Nxqo;}>_Q
2024-07-04 20:55:36 UTC	10674	IN	Data Raw: 4a b9 1d e3 fb 9f 2d 3c f7 1f 0e 2e 5f 7a 77 a7 13 ef fe 7f fe e5 d7 f2 25 6f 7a dd 7f 56 3d 7c 4c 15 f0 ff fe 27 df cd 5f fd e6 6f e5 17 bf e5 7f 7b e3 60 6f ff ef ca a8 f3 ce 97 ae df a4 5e a7 c8 b7 88 50 63 1a bb 6d 6e da 04 03 07 1a d1 b4 db 50 b8 70 b0 83 d1 56 fb 6b 84 a2 2e 6a f6 76 c7 5c bc 34 46 39 0d d2 71 70 95 47 55 d4 9c 1e 4f 58 2e 13 7c 2f 20 f0 02 4e 8f 8f 18 0e 62 5c a5 31 a6 a6 d4 a5 3d 33 29 85 6e 33 e8 f3 24 67 3a 39 c3 73 5c 94 74 f0 03 0f 21 9b 36 c0 da 23 d7 0d 4f bf e5 59 be ea 6b be 8a 2b 97 46 cc ef 5d c7 64 4b 94 b0 e6 02 53 d7 54 a5 4d ae 77 1c 17 a9 ec 2a b1 98 2f 08 3c cf ce 77 95 24 8a 02 82 c0 de 18 1c c7 dd 14 ef fa e2 96 42 e0 3a 56 85 a4 2c ce 02 25 6d b2 a0 c4 a0 84 44 09 d7 76 6a d7 54 8b 36 94 ac a8 35 3a ec b0 f3 ec Data Ascii: J-<._zw%ozV=\|L'_o{`o^PcmnPpVk.jv\4F9qpGUOX.\|/ Nb\1=3)n3$g:9s\t!6#OYk+F]dKSTMw*/<w$B:V,%mDvjT65:
2024-07-04 20:55:36 UTC	11860	IN	Data Raw: 47 b7 d3 76 e5 75 38 3e 99 f1 8d ff ea db 79 e9 a5 db ec ed 5f 64 b8 35 44 39 b6 93 bc e6 53 f9 be 6f d3 28 96 4b 9c 34 b7 2c b3 2b 57 5a 6e 73 41 51 14 ec 6c 6f 33 9f cf b9 7d fb 36 71 1c b3 bb bb bb 81 f5 e5 99 e5 8a 3d f5 d4 53 24 69 b2 59 10 00 e6 b3 19 57 2e 5f e2 e9 a7 9f e6 74 72 ca 78 3c 26 2b 0a 1c 47 e1 7b 2e a5 a3 08 5c 87 c5 62 ce c9 f1 11 a6 69 50 4a 52 d7 25 ab 55 d3 ee a8 24 b3 f9 82 9d 9d 1d ea ba e1 f4 f4 8c 20 f0 08 02 9f aa b2 5e ef 55 b2 62 b5 5c 12 86 41 9b a9 14 32 de da e2 f4 e4 98 28 8a 28 cb 62 93 da b8 58 cc 37 2c 6f 5d 6b a2 38 a6 2c 4a b4 d6 84 41 c0 ca 73 6d 27 1a bb 00 f8 be a2 a8 2a 42 df fd f5 51 62 7d ff ff fe ff e3 f4 a7 7e 42 ee 3f f1 f4 17 46 db 7b 9f 5b 2b 4f a4 45 21 9a 46 8b 5e 7f 80 72 7d aa ba a1 d6 35 93 c9 04 d7 Data Ascii: Gvu8>y_d5D9So(K4,+WZnsAQlo3}6q=S$iYW._trx<&+G{.\biPJR%U$ ^Ub\A2((bX7,o]k8,JAsm'*BQb}~B?F{[+OE!F^r}5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	64645	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTgvZjA2MWM0NDgtOWQyOC00MzA1LWIxY2MtNmExYTlkZGM0YzMxL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=c987c3b7f740d138 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:36 UTC	626	IN	HTTP/1.1 200 OK Age: 1992382 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 73433 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:14 GMT Etag: "8e9628e709ac864e17a80064d00dad9abe861bc3" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 13f8bf2e1a2f2d36e9130ab9f938cb80f19306ab X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 9a5e9ac0-1241-49d5-a771-6656bbe94c7d X-Runtime: 0.079075 Connection: close
2024-07-04 20:55:36 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 3a fe b5 b3 35 00 00 80 00 49 44 41 54 78 da d4 fd 79 b4 6d 5b 7e df 85 7d 7e b3 59 6b ed 7d ba 7b ee bd af 6f aa 2f 95 4b 55 92 aa 51 df 5b b2 84 2d cb c6 d8 d8 06 83 c1 03 1c 18 01 92 98 c0 20 19 21 23 0e 83 04 42 00 8f 30 20 c4 8c c0 08 8c 64 84 78 c0 a0 09 5d 8c 05 96 85 91 2d db b2 2c 55 49 2a 55 a9 da 57 af 7f ef 36 a7 d9 7b ad d9 e5 8f df 5c eb ec 7b de ee ce 7d af 1c b2 6b 9c 7a Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME:5IDATxym[~}~Yk}{o/KUQ[- !#B0 dx]-,UI*UW6{\{}kz
2024-07-04 20:55:36 UTC	2372	IN	Data Raw: 35 1c 38 01 b1 f4 02 c1 18 84 82 15 43 cc 91 94 02 43 d1 e9 a9 b0 9a 3a d3 42 29 60 8d a1 14 48 97 3d a1 29 34 4d 03 36 63 2d 18 63 91 ac 8b 93 52 a0 40 e3 1c 46 e7 fe 54 8e f1 1f ce e4 c3 5f fe c2 6f fe ef 45 e4 2b a5 ac bb ad 7b 1d 8e 37 7d 0e 37 11 e6 4d 7b f5 26 7b e9 71 f7 2a 1b de db 34 9f e9 df 02 50 6f e8 a6 09 af 5b d8 3e 37 54 07 15 61 e5 81 ed 73 0d 59 f3 b7 75 d7 98 c6 5f 59 c3 ea fc fe 87 b8 06 01 ca 87 9f 7d de 0d 61 f8 1e d7 b8 7f 22 97 f4 d3 c6 c8 69 ca 09 04 9c b3 08 86 52 04 e7 1c d6 79 86 18 89 c3 40 c9 65 d2 84 a5 14 4a 49 14 20 e5 44 a9 da d1 3b c7 30 2c e9 43 a0 94 4c 23 85 b9 37 1c b5 2d 77 4f 6f 63 9c e7 95 d7 df e4 7c b9 24 66 18 86 40 08 81 2c 10 8b 8e ad 87 80 59 b9 8e 0a ac 31 86 9c f5 60 b1 d6 4e 7f 2b a5 e0 bd c7 5b 8b 94 ab Data Ascii: 58CC:B)`H=)4M6c-cR@FT_oE+{7}7M{&{q*4Po[>7TasYu_Y}a"iRy@eJI D;0,CL#7-wOoc\|$f@,Y1`N+[
2024-07-04 20:55:36 UTC	538	IN	Data Raw: bf ee 1a fb 6a d2 f7 7c 0d 22 52 9e bb 73 3a 8b 25 ff 49 eb ec 3f 6b 8c 3c 61 ad 81 22 68 48 08 52 d4 c8 b3 18 47 d3 34 38 ef 28 59 53 31 d6 1a bc 6f 18 73 b3 58 43 11 f5 67 2d 85 9c 22 cb e5 40 ca 85 62 84 58 72 cd bd aa af eb 72 a6 45 e8 ac e1 b0 35 dc 3a 68 e9 9c 61 e6 85 27 4f 8f b8 75 34 e7 60 d6 52 4a e1 f5 b7 de e6 c1 d9 82 b3 8b 9e c5 72 e0 7c 48 9c 65 cb 90 0a 7d 16 16 b1 90 c4 82 a8 a9 6d 8d 41 aa 5f 5e ab 26 c8 a5 10 52 a6 88 e0 bc a7 6d 3a c0 4c c2 1b 42 98 d2 60 6a 32 1b 04 b0 4e cd 67 67 34 78 36 e6 af db b6 19 ac b3 ff 6e 29 fc 73 ff ed 2f fc 95 97 ae dd e7 f7 6a 2f 6d db 07 37 49 e9 ac 03 7a dc 74 af 3e ee 1a a6 df e5 1a 0e 7a d3 c5 f6 99 d8 ae 70 fc ba c9 ac 5b c8 ae 89 5f ff db be 0f e4 5b ba 06 11 e1 ef ff a3 ff a0 fc c5 ff f6 3f ff 7e Data Ascii: j\|"Rs:%I?k<a"hHRG48(YS1osXCg-"@bXrrE5:ha'Ou4`RJr\|He}mA_^&Rm:LB`j2Ngg4x6n)s/j/m7Izt>zp[_[?~
2024-07-04 20:55:36 UTC	4744	IN	Data Raw: b5 c2 dc 19 8e bb 19 c7 9d 67 e6 0d 8d 13 0e 3a cf 41 e7 98 79 cb d1 a1 1e 1c 0f cf 2e 78 78 76 c9 d9 62 09 58 8a 6b 79 e3 62 c1 1b f7 cf b8 77 be a4 cf 8e 6c 1c b1 64 62 8a a4 94 19 86 40 42 70 ad 0a 69 91 42 4a 6a ce c7 5a 31 a5 42 ac 7e 71 08 81 a1 ef a7 c2 87 9c 20 84 01 63 2b fc 33 67 9c 11 ba b6 55 b0 87 51 6d 6c 8d fd 2b 22 e6 4f 7d f4 13 1f fd ab 7f f6 ff f2 ef 95 15 a4 d6 3e cf f9 dd ec a5 7d ac b4 5d e3 bf ab bd b4 c7 1a 1e f9 fe a6 20 96 6c 19 84 1d 9f d9 76 03 ae 5f 63 9b b3 bf cb b4 d8 f7 26 7f cb d7 50 4a 29 9f f8 c4 47 da fe a2 ff 99 9c d2 df 09 cc 9a a6 a9 e6 2d 08 46 8b 01 44 53 2d ce 7b 12 49 cd 63 6b 2b ee 50 68 1b 4f d3 68 8a 25 84 b0 a2 b9 32 c6 0a b3 d9 8c 03 df 42 18 30 45 f0 62 48 71 c0 10 99 b7 96 93 83 8e e3 59 c7 61 d7 71 d8 7a Data Ascii: g:Ay.xxvbXkybwldb@BpiBJjZ1B~q c+3gUQml+"O}>}] lv_c&PJ)G-FDS-{Ick+PhOh%2B0EbHqYaqz
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: a0 a2 8e b2 fa f8 46 53 4c b1 78 4c 06 0f cc 01 73 72 88 07 66 8d e7 60 36 e3 eb af bd c5 6b f7 ce 78 b8 18 18 fa 85 06 f1 9a 86 d6 77 f4 83 76 70 b0 ce e2 29 20 54 ea 5a 25 41 88 31 23 26 13 42 c4 39 ad 2b a6 48 2d bd 8c 4f 18 13 7e c8 37 fe bf bc 73 e7 ce cb ef f1 5e da 74 10 ec da 4b 37 11 e6 6d f2 b0 2e 08 bb 71 0d d7 bb 13 6e 9a f4 b6 8b df e4 b5 75 32 5b c6 97 2d 63 6c f3 2f 1e 67 0d ef 78 c0 3f fa d9 6f 37 df 7c fd de c7 53 4c 9f c9 a9 98 0a b2 57 b2 39 5b 9b 94 a5 2b 70 7e a9 ee 65 f5 22 31 c6 28 57 b3 73 9a 0f 45 68 8d b2 46 de 3d 39 e4 d6 f1 9c c3 03 4f db 3a 6d 5d d2 78 ed 91 64 34 b5 62 ac d4 14 d1 18 51 be 6a f2 4d d1 ab 98 91 2d 92 4c 29 b5 59 59 b9 12 de 52 8b 11 30 a8 86 5b 5d b9 a9 4d d1 b8 f2 8b a7 ef e8 2f c8 08 bc 18 0b 12 ac 23 69 2c Data Ascii: FSLxLsrf`6kxwvp) TZ%A1#&B9+H-O~7s^tK7m.qnu2[-cl/gx?o7\|SLW9[+p~e"1(WsEhF=9O:m]xd4bQjM-L)YYR0[]M/#i,
2024-07-04 20:55:36 UTC	7116	IN	Data Raw: 91 90 2e b9 3c 7b c8 ed e3 23 ac 11 fa cb 25 ce 08 77 4f 0e 29 c7 33 52 98 5f 01 4a 04 42 0c 78 e7 6a 29 9e 0a b0 4d 42 29 be 02 36 2a d6 ba 5a 11 de 3b 32 99 99 b7 94 24 84 be 40 28 50 b4 69 f8 a2 8f dc 3f 7b 48 1f 12 67 e7 17 9c 9f 3d a4 6b 3a 5e bf 77 8e f3 9e 30 2c f0 4e 38 3d 39 e1 f4 e4 84 8b b3 33 6e 9d 1c 72 7e 19 98 cf 1d 27 27 73 ac 2d 78 52 bd 57 05 e7 2d 4d eb c9 01 ba 59 a3 84 7e a6 60 05 42 51 f4 57 16 2a 54 52 55 69 91 da 7c ad 92 26 e4 5c 30 ce 10 73 26 e6 a4 ae c0 90 67 39 95 0f cf e6 07 73 11 b9 2c bb 9d d5 9b b8 6c db a2 d9 37 51 16 fb b8 7d 7b c9 83 db 31 c8 3e 08 a9 5d 27 da 3e 91 e3 5d 51 c2 6d d7 da f5 da b5 86 e9 fd c3 c3 83 db 39 a5 17 4a 4e a2 01 5a 05 0b 78 ef b5 3b 40 ed 2e e8 9a 06 4a a6 6d b5 68 7d 11 06 52 c9 ca 03 6d aa 39 Data Ascii: .<{#%wO)3R_JBxj)MB)6Z;2$@(Pi?{Hg=k:^w0,N8=93nr~''s-xRW-MY~`BQWTRUi\|&\0s&g9s,l7Q}{1>]'>]Qm9JNZx;@.Jmh}Rm9
2024-07-04 20:55:36 UTC	8302	IN	Data Raw: b2 19 48 52 4b f4 2a a7 56 2a 01 83 41 1a 41 4c d4 fa 68 0d a7 30 02 9c b4 e2 2a d7 a0 19 b5 9c 50 20 17 52 35 97 19 fd fe 9c 28 51 ad 92 a1 d7 fc ed c1 e1 21 fd 32 b1 5c f6 18 a0 69 95 c6 68 39 0c 94 1c b0 4e 0f 49 a9 dc 58 61 50 7e ea 92 13 4e 2c 18 6a 8b 9b 06 8a 22 c4 4a 2e 34 be 25 0c 81 10 22 67 e7 67 07 29 e7 1f cb c8 d7 7f eb f3 7f eb d7 45 e4 f5 6b e5 86 37 da 4b ac d7 bc ef 95 3c 6c fa 9b 8c 69 a4 6d 9a 90 95 f7 36 7d 76 df c9 6c 32 2d 36 e6 b9 f6 bc c6 4d d7 00 20 cb 0c 50 ba 61 18 9e cc 29 1a 6b 2b 88 c1 1a bc 73 6a 9e a6 5c b5 4f 6d 6b 59 34 52 3a 0c 15 22 b9 12 ad cd 35 22 53 72 e2 e8 e8 80 17 df f7 22 47 b7 8e 39 5f f4 2c fb c0 10 a3 e2 9c f3 15 cd eb 44 df 33 4e bc fe df 18 dd 86 2a dc 45 11 57 e3 f8 39 45 fd a9 da 30 d5 ca 1d 19 91 5c a3 Data Ascii: HRKVAALh0P R5(Q!2\ih9NIXaP~N,j"J.4%"gg)Ek7K<lim6}vl2-6M Pa)k+sj\OmkY4R:"5"Sr"G9_,D3NEW9E0\
2024-07-04 20:55:36 UTC	3206	IN	Data Raw: 6b 0d a5 16 10 a8 04 64 ac d1 e0 97 ab dd 08 53 2e b5 0f 52 1d a3 5c f9 5f e5 91 68 e8 78 70 5c f5 b8 2d 63 97 11 0a 42 e5 27 96 9a 41 ae be 97 64 43 29 96 8b 94 f8 fc 37 de 62 3e ff 1a e5 db 3f c0 33 b7 0e 60 e8 11 5b 68 69 28 b9 45 8c ad 65 7f e3 3d 79 47 a4 72 d2 3a 49 ae 7a f9 62 74 ad ce 78 ec d8 25 70 c5 8f b7 d6 4d 0f 4f 59 36 8c 76 18 b5 f9 aa 09 b0 d1 74 4d d5 55 d3 7f c7 82 fb 6a 7f 4f 35 c2 ca 71 55 f9 ae 35 4b 43 0c 99 57 5f 7b 9b 3f ff 0b 7f 93 5f fb f2 6b 0c a3 df 0c 13 e4 34 17 21 da 5c d1 56 ef dc 30 52 5b b3 8c 01 4c 63 1d b6 71 4a db 5b 14 44 03 57 2e cf 44 7c 50 a0 af 50 d3 5c 3b ad db 15 ed 5c a8 74 4a b5 a8 a3 f3 1e 6f 1a 05 a7 0c b5 d3 c3 72 89 85 5b c3 30 1c c9 fe 11 e2 75 7b 7b 9b 1c 5d 97 87 5d 71 25 05 72 ac 11 c4 6d c2 b5 69 22 Data Ascii: kdS.R\_hxp\-cB'AdC)7b>?3`[hi(Ee=yGr:Izbtx%pMOY6vtMUjO5qU5KCW_{?_k4!\V0R[LcqJ[DW.D\|PP\;\tJor[0u{{]]q%rmi"
2024-07-04 20:55:36 UTC	10674	IN	Data Raw: 5c ed 3c a8 cc 18 13 63 cb c0 34 b5 b8 dc 78 6c 9b 16 9f 7c f2 1c cf 5f 7c 02 72 19 39 3f 45 61 19 ce 0f 2e c2 91 57 7e 2a 8f e0 04 61 a5 ca 9a 52 51 37 a2 b9 92 41 5e 1a e5 92 81 da 37 11 e2 3b 32 f0 87 f5 8c 35 a4 25 08 e5 2a e7 0c ce 19 69 1a 31 ec ef 70 dc df e1 e5 a7 2f f0 fc f9 73 84 e8 70 f3 e4 19 b6 97 17 68 db 06 4d db 20 36 2a e3 e2 92 0e 99 c8 dd 12 23 5c 99 32 b3 86 cc 82 d2 72 54 04 71 b7 da a8 2d e2 88 c1 86 00 00 80 00 49 44 41 54 65 b1 c7 1a d3 2c 83 13 12 31 e4 9c d1 b4 0d a6 79 aa 13 65 6d db 02 44 98 e7 09 f3 9c 90 93 c8 b3 04 45 72 95 bc 30 b4 48 6f 39 54 4f ad 11 db cb 54 ca ab b3 f5 fa 5b 29 5e 7d bf f6 f6 da c7 eb 8a 58 0f ed 32 6f fa 70 7a e4 58 6f 8a ef 1f fa 02 f4 8f fe fe df 0b d1 c7 27 d1 a3 13 c9 8c 2c 02 d8 0f 61 9e b1 e4 bc Data Ascii: \<c4xl\|_\|r9?Ea.W~aRQ7A^7;25%i1p/sphM 6*#\2rTq-IDATe,1yemDEr0Ho9TOT[)^}X2opzXo',a
2024-07-04 20:55:36 UTC	11860	IN	Data Raw: 30 83 59 d1 53 5a 3c 29 b9 20 a7 82 10 03 ba be 41 2e 05 f3 78 44 df 74 d8 6d 36 d8 f6 3d 38 17 1c f7 07 c9 a7 b5 a7 5b 74 14 ce 07 29 b4 cf b3 20 b2 62 8c 60 66 0c c3 11 c3 38 a2 6d 5a 34 4d 03 40 fa a2 b2 f8 16 20 7e f0 1e 51 fb 83 5c 8a f0 2e 39 87 be eb e0 49 54 e0 87 e3 51 16 af a2 b3 1c 79 04 22 34 0e d8 04 e0 66 b7 c1 ae 8d e8 a3 00 19 fa f6 02 a9 9f 71 79 75 89 18 45 9e 24 c4 45 ea f3 61 8f 29 15 e7 0a 10 b1 9c 59 17 dc aa 7e 54 c3 62 3a 93 40 5d e0 90 ab 9b b9 2a e2 2c 61 f0 fa 9e 9f 7a a7 b5 d1 3b a8 67 d4 98 e9 84 0f 8b ed 9c d6 1b 4d 01 29 4d 80 27 86 2b 09 1e 05 11 40 62 29 60 b2 f6 6a 0b 6b 7a a0 6d a0 f3 c2 56 21 23 b5 5f 24 59 88 81 a0 e7 60 94 49 5e 0b 8d 3e 78 a4 39 c1 e4 5e e6 19 f0 81 91 59 bc 25 9c 40 65 9b 26 4a 31 51 af 71 8c 51 37 Data Ascii: 0YSZ<) A.xDtm6=8[t) b`f8mZ4M@ ~Q\.9ITQy"4fqyuE$Ea)Y~Tb:@]*,az;gM)M'+@b)`jkzmV!#_$Y`I^>x9^Y%@e&J1QqQ7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	64647	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	1523	OUT	GET /df_media/W1siZiIsImN1c3RvbWVyX2ltYWdlcy8xMzQwMC8yMDI0LzAyLzIxLzE4LzAxLzQ4LzkyODY3ZTM4LTdiZDEtNGIzNi1hODE4LTdhNzJmNjdhMzZiZS9BZXN0aGV0aWMgMTUuanBnIl0sWyJwIiwidG9fd2VicCJdLFsicCIsInRodW1iIiwiMjAwMHgxNTAwXHUwMDNlIl1d/Aesthetic%2015.jpg?sha=c1b21970f376057b HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:36 UTC	625	IN	HTTP/1.1 200 OK Age: 1992431 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Aesthetic 15.jpg" Content-Length: 241357 Content-Type: image/jpeg Date: Tue, 11 Jun 2024 19:28:25 GMT Etag: "b93a7b9cb9e1984112d8de233f195b438b22e579" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 9ee7b71892df78ce070f0966c066c3417b545b7a X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: f590099d-d993-4cbb-b63d-c684128a768e X-Runtime: 0.559448 Connection: close
2024-07-04 20:55:36 UTC	561	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 00 7a 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 42 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 05 00 19 41 65 73 74 68 65 74 69 63 73 20 2d 20 41 65 73 74 68 65 74 69 63 20 31 35 1c 02 50 00 10 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 6e 38 42 49 4d 04 25 00 00 00 00 00 10 c5 ae 67 67 d0 17 27 a1 ae f3 22 41 42 cf 88 88 ff e1 00 fa 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 06 00 00 00 66 01 3b 00 02 00 00 00 11 00 00 00 6c 87 69 00 04 00 00 00 01 00 00 00 7e 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 Data Ascii: JFIF,,zPhotoshop 3.08BIMBZ%GAesthetics - Aesthetic 15PChristine Bergen8BIM%gg'"ABExifMM*V^(1f;li~,,
2024-07-04 20:55:36 UTC	2372	IN	Data Raw: 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 43 61 6e 76 61 22 3e 20 3c 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 6e 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 53 65 Data Ascii: df="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Bergen</rdf:li> </rdf:Se
2024-07-04 20:55:36 UTC	538	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 Data Ascii: <?xpacket end="w"?>CC
2024-07-04 20:55:36 UTC	4096	IN	Data Raw: 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 db e5 3a 49 81 94 02 c8 4b 95 2c 04 e8 06 88 94 c7 ee 9c e1 31 00 7a a0 11 da 52 23 e8 99 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 3e f7 4c 94 42 01 24 92 79 b2 01 92 49 38 25 00 c9 Data Ascii: $@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$I:IK,1zR#$I$$@$II$I$>LB$yI8%
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 94 5c 60 14 05 4d 66 b1 ad d2 d5 7c e0 10 3d 57 97 7b 53 c5 9f fe cb e2 e0 12 d1 f4 5d c7 14 aa 19 a2 e5 98 e6 74 4c 2f 33 e3 4d 35 f5 a4 93 f0 b5 c4 90 14 5b ce 35 78 73 fe 8f ec de aa a6 9b 54 2b 93 35 5f 70 0e d7 5e b5 c2 2a 3b fd 36 97 4f 33 af 1f 35 e4 de c8 72 ea b8 8c b8 61 c0 01 dd 7b 06 8f 94 ff 00 c8 b3 6c 0a 7d 5f d2 3c b3 d2 d2 49 24 95 98 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 Data Ascii: @$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$\`Mf\|=W{S]tL/3M5[5xsT+5_p^*;6O35ra{l}_<I$I$I$$@$II$
2024-07-04 20:55:36 UTC	7116	IN	Data Raw: 99 30 a0 5d 01 31 75 94 0b d0 0e e7 a0 d4 aa 99 ef b2 a9 56 a5 8d ee 80 23 eb 44 a0 ba be d3 85 4e ae a3 ba 01 d4 db 2a 78 5e af 3a b9 51 3a 85 41 d5 fb a1 9a ff 00 55 32 21 a5 fe c0 3b 8b a8 3f 52 02 cd 76 a0 80 83 53 54 7a a9 ff 00 f8 9e 34 aa 6b 05 ae 82 ed 5c ee 16 4d 4d 59 93 78 41 76 b2 f9 50 38 d7 7e ab 17 f4 40 a9 aa 95 96 ed 6d f2 80 fd 74 0c a3 bc 1c 68 d4 d5 e6 ea a5 4d 67 75 9b 5f 5e 23 3f 25 4e be b4 c1 bd a5 45 d0 e3 4a be b8 0d ee 76 59 b5 f5 9c c4 df 6e aa 9d 4a e5 cd cc ed 05 56 7d 62 27 7e b2 92 d3 48 b1 53 52 60 df 28 06 b7 3c 49 ec 4a 19 74 8b 9b 74 51 2f 6c 75 bc c2 8f 91 e6 53 75 4c 99 be ea 0e 74 cc 88 50 35 66 6f 71 60 45 e3 ba 19 7c 5a d6 16 ea 97 a7 f8 88 e3 39 30 82 e7 7e d1 1e 75 4c 6a 12 60 99 9b a8 3d bc c4 03 1d 01 c2 8e a6 Data Ascii: 0]1uV#DN*x^:Q:AU2!;?RvSTz4k\MMYxAvP8~@mthMgu_^#?%NEJvYnJV}b'~HSR`(<IJttQ/luSuLtP5foq`E\|Z90~uLj`=
2024-07-04 20:55:36 UTC	8302	IN	Data Raw: 73 87 f0 b1 ad a1 49 b1 2e 26 64 8b 12 63 f6 42 ad a6 a9 5e bb 09 20 92 04 5e 3e 5d b6 f0 ae b7 85 f0 df 74 c1 50 08 07 6c 95 a7 1a f8 f8 d9 fc 98 fe c3 fb 31 c1 59 41 a2 00 b6 48 83 36 5d d7 0d a1 ee dc d8 00 88 8e fe 67 ec b3 b8 2e 8c 36 9b ac 44 c9 90 2e 57 4b c3 b4 4e a8 58 01 37 ed bf 45 83 7a ba d0 92 48 b9 fe b4 d3 04 09 06 d2 a6 dd 28 22 47 ac 2d 86 f0 fe 5a 22 6e 40 02 52 6e 92 29 f2 81 27 75 66 67 09 7d b9 dd 67 0d 15 e9 99 69 df d4 a4 b7 75 74 85 16 dc 00 05 d2 4e 4f 6f a6 52 49 25 ec de 44 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 24 92 49 00 92 49 24 02 49 24 90 09 24 92 40 Data Ascii: sI.&dcB^ ^>]tPl1YAH6]g.6D.WKNX7EzH("G-Z"n@Rn)'ufg}giutNOoRI%DI$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@$II$I$$@
2024-07-04 20:55:36 UTC	7366	IN	Data Raw: e6 63 28 43 fa 32 0a 67 3a 00 d8 77 df b2 12 24 fd 27 e8 98 be 0e 7d 6e 50 f9 e6 0c 7a 28 f3 58 6d bc a5 e2 60 85 d2 2d 21 bd d4 1d 52 f7 c4 db b2 89 76 05 e3 2a 05 f1 91 37 50 3a 23 aa c9 20 4f ca e9 bd e1 00 01 6b 60 fa 20 cc 49 eb f8 4f cf f0 df b9 86 c8 40 b4 57 3c 8b 60 5a dd 14 09 2e 9c c3 84 98 4c 5c 37 b9 2a 0e 73 43 4f fe c3 a9 42 09 c4 b6 40 02 6e 65 30 37 10 64 cd 81 f3 b2 5c c0 db e9 1f 9f c2 89 77 c4 4c 81 07 6c 7a a1 3d 39 74 4d bb a8 97 5c fa 49 18 9f 25 37 34 8e ca 21 c5 b1 13 23 60 32 a2 c4 f5 32 7e 2c c8 d9 37 33 45 f3 1d 77 42 7b e0 01 33 63 1b 24 2a 9b 66 73 7f 55 25 ef 04 2e 16 db 72 0e e9 c3 81 03 70 4e 7f 64 3f 78 04 5f 69 3f 44 b9 c0 71 8b b7 6e 85 20 ef a1 79 a3 69 89 93 81 ba 7b 12 00 3d ad 08 41 d2 d8 b1 b8 30 a4 5c 09 17 b5 bb Data Ascii: c(C2g:w$'}nPz(Xm`-!Rv7P:# Ok` IO@W<`Z.L\7sCOB@ne07d\wLlz=9tM\I%74!#`22~,73EwB{3c$*fsU%.rpNd?x_i?Dqn yi{=A0\
2024-07-04 20:55:36 UTC	10674	IN	Data Raw: 4e 10 83 e2 6f 06 27 aa 5c d7 16 83 d3 e6 8a 69 46 0e 83 7b 8d a4 cf 99 52 69 81 12 4c 18 bc 74 c7 dd 03 9e f3 e7 97 53 e7 b4 c9 ee 00 4b 52 33 4f c2 60 81 6b 9c cd d4 f9 af 11 6c 12 6f b2 00 a9 31 3f 9e df ca 97 36 06 d9 bf 97 40 1b 9a 2d 39 36 39 bf 85 38 a8 63 70 3a cd 90 05 4f 91 88 8e 89 83 c4 c4 e7 cf d9 45 89 ea d0 ab 11 7c 26 0e 9c 10 46 22 55 7f 79 07 33 27 e7 e7 ec 9f df 4d bd 2f 95 1c 30 f3 cd 61 fd 27 15 0c 0b 00 33 6c 20 7b c0 7a 04 e2 a0 99 dc 74 47 11 6a c0 7e 6d 6e f8 09 c4 10 0c 4e e2 76 ba 01 a8 08 f9 29 87 48 da 07 d5 47 38 9e fb 10 1e 6c 44 c7 a2 70 e8 27 73 b2 18 70 20 48 11 ea 91 7c 5a 6e 2e a3 89 ea 4e 75 cd e3 36 29 a6 c7 79 20 28 97 c1 36 22 d6 9d 94 4b c3 6d 1f 50 a5 1d f6 94 c0 17 32 73 b9 4d cd 60 62 d9 f5 50 73 a2 63 1d fe 6a Data Ascii: No'\iF{RiLtSKR3O`klo1?6@-9698cp:OE\|&F"Uy3'M/0a'3l {ztGj~mnNv)HG8lDp'sp H\|Zn.Nu6)y (6"KmP2sM`bPscj
2024-07-04 20:55:36 UTC	11860	IN	Data Raw: 6e 22 e3 f5 a4 0c f7 84 33 aa 75 a4 90 7f 2a bf 2c e3 aa 83 9a 4c c1 33 89 ca 94 7c 60 ce d4 97 48 06 7a a1 54 ae 7a ef 06 54 1d f0 83 90 80 fa 90 62 08 bc 61 4c 45 92 0a e7 99 99 f5 e9 e8 93 5f 88 8f a2 af cf ca 2e 60 4f d7 c9 4e da 9d 37 de 65 4a 16 41 07 b9 10 53 f3 ef 20 75 dd 57 6b c9 26 6d fb 27 2f e6 22 d8 c0 03 ec 9d 1d 58 e6 b8 eb bf 5c 25 cd 7e 9b fa aa fe f4 e3 25 3f bd 04 98 36 8b 93 8d 90 8f 43 87 dc 08 ef d5 30 30 62 2d d3 a2 07 3f 29 33 33 30 67 3e 89 1a 98 dc 9d fc f4 42 07 e6 30 2f b5 e5 31 7c 13 1e b7 ca 01 ab 27 b8 3d 36 48 d5 06 6c 73 b2 9e 01 8d 4b 88 32 4f cb cc 25 ce 77 77 73 38 28 3e f0 67 d7 e6 a3 cd 63 16 ef 94 70 2c 87 82 7a 60 1f 54 e1 e0 1c ce d3 60 ab 0a b9 eb dc 66 e9 c3 c9 36 3f ba 80 b0 5f 13 68 ec 9c d5 8c 9b e0 75 55 fd Data Ascii: n"3u*,L3\|`HzTzTbaLE_.`ON7eJAS uWk&m'/"X\%~%?6C00b-?)330g>B0/1\|'=6HlsK2O%wws8(>gcp,z`T`f6?_huU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	64646	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDkvOTg2ZTEzZjgtNGZlNC00ZWQ1LTk3ZjYtMDVmZWEwZTIyNjgzL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=eb61b04775901328 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:36 UTC	625	IN	HTTP/1.1 200 OK Age: 1915139 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 6558 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:37 GMT Etag: "3287740fd065825722f2ea660ddde2a0fcc6fb3e" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: c2b64b24d614cb8f2aafe95dd979a1cc8daa86a1 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 5634b1db-f350-4aaf-bd78-9b83e39adc5d X-Runtime: 0.280004 Connection: close
2024-07-04 20:55:36 UTC	561	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 02 08 01 ff c4 00 3e 10 00 01 04 01 02 04 04 04 04 03 06 05 05 00 00 00 01 00 02 03 11 04 05 21 06 12 31 41 13 22 51 61 07 14 32 71 23 81 91 b1 15 42 52 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222">!1A"Qa2q#BR
2024-07-04 20:55:36 UTC	2372	IN	Data Raw: 1b 0b 3f 61 71 e9 6a cf a1 bc e3 ee 4f 55 c3 69 68 f4 a6 0e 4b 73 30 a1 9d bd 1e d0 7f 34 e1 66 1c 29 c5 6e c1 95 b8 b9 46 f1 9e 7a f7 61 f5 5a 6c 6f 6c 8c 0f 63 83 9a e1 60 8e e9 89 d9 2c e2 e2 ce 90 84 2d 18 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 05 cb de d8 d8 5c e2 03 40 b2 4f 65 d2 ae 71 6e a3 f2 d8 23 19 8e a7 cd d7 d9 ab 32 97 15 66 a1 1e 52 a2 b5 c4 3a d3 b5 0c a7 10 6a 08 ec 46 df 5f 75 98 f1 0f 10 47 0b 9d 03 5d 6f 3d 48 3d 14 8f 15 eb 6e c2 c3 e4 84 93 33 cf 2b 7d 96 5f 30 90 97 3a 47 12 e2 6f 73 ba 4c 3e 5b 65 92 f8 ae 28 5f 27 2f c7 79 73 8d da 6e d8 cc 87 60 92 89 a6 47 d0 0a d3 a4 e9 56 d0 e2 db b5 a9 4b 89 c8 63 72 7a 22 f1 f4 f2 40 b0 77 52 51 69 de 50 03 55 8d 9a 5b 43 6c 0d d2 f1 e0 80 46 ca 69 66 fe 16 c3 c7 4b Data Ascii: ?aqjOUihKs04f)nFzaZlolc`,-!B!B!B\@Oeqn#2fR:jF_uG]o=H=n3+}_0:GosL>[e(_'/ysn`GVKcrz"@wRQiPU[ClFifK
2024-07-04 20:55:36 UTC	538	IN	Data Raw: 28 f8 cf 1f 89 a7 43 db c8 e4 ac df 41 fe 37 e8 62 91 37 9f 4b 24 f4 ad 94 44 c3 fe 5d be c7 75 61 82 32 78 73 c6 ec d7 10 55 7f ea 89 ff 00 7b 49 83 2a c8 b4 31 27 d0 a9 1d 19 c4 6a 78 ff 00 f9 52 8f 78 a2 42 5f 4d 9b c0 ce 82 4b d8 3c 5a dc ba 15 8d d4 91 b6 69 4c e6 6b 41 e8 9f 64 63 f5 34 a3 f4 99 5a 18 d7 13 b1 16 14 96 56 4b 79 76 ee a2 74 7a bb bd 11 af 01 a9 bb f2 19 08 2e 73 aa 97 dc 89 c3 6f a2 af e7 e4 19 0f 20 3b 2c 0d 48 b7 69 b9 66 68 9a fa f2 93 b2 92 d4 58 4e 10 3d 42 87 d1 1c c6 e9 b1 b6 46 9e 66 b4 06 90 7f 75 37 91 91 0b b0 1c d1 56 b6 ba 12 f5 2d 15 7f 0c f3 ae 65 c4 0f 7f 39 e9 5b 92 95 7c cd 0e e5 f4 29 0c cc 80 f6 88 9a 76 1f 57 ba 58 f4 46 cd 0b 0c ce e5 dd bd 92 2e 89 d1 9b 61 29 eb 5b 69 4f 09 a0 59 42 66 ac 69 0e 5f 29 01 f6 0f Data Ascii: (CA7b7K$D]ua2xsU{I*1'jxRxB_MK<ZiLkAdc4ZVKyvtz.so ;,HifhXN=BFfu7V-e9[\|)vWXF.a)[iOYBfi_)
2024-07-04 20:55:36 UTC	3087	IN	Data Raw: ce 23 6c bc 9a b0 a3 e1 6b f2 32 1a da ea 52 f9 4c 71 36 9b 8d 43 f8 75 3c c4 e7 fa f2 8b 29 48 a2 4f 45 d3 0f 1f c3 80 0f 64 96 48 70 b0 0d 28 0c 1e 33 c2 c9 c8 6e 33 39 c4 a7 60 1f e5 17 f7 52 d2 9d 43 21 e2 36 e3 06 73 02 6c b9 69 aa ec 4a 7b 18 cc 28 93 cd 49 a1 99 ad 3f 55 a9 07 e8 79 92 62 89 9f 23 41 24 f9 13 a6 e8 50 63 c2 d9 4b ac b7 cc eb 58 a1 ca 71 44 5c 4e 73 c5 b5 a4 8f 55 53 d7 35 dd 41 da 83 f0 71 c8 8d 80 d5 b7 ab bd ed 5d 33 f2 f1 70 f0 66 8e 27 80 f7 ee ca f5 55 4d 33 4b 74 b9 26 69 85 c8 e3 67 d9 6f 1b 4b 6c 24 9c ba 16 d3 b1 1d 0e 19 f1 09 74 8f f3 38 95 3f a5 43 e7 6a 48 c0 03 28 04 fb 4c 6f 29 b4 b6 ed 9a aa 43 be 20 d4 59 a5 69 39 19 87 ea 8e 3a 60 f5 71 e8 b0 e6 97 3e 42 f7 1b 73 8d 93 ea 55 cb 8f f5 81 93 9a dd 3e 29 2d b1 79 a4 Data Ascii: #lk2RLq6Cu<)HOEdHp(3n39`RC!6sliJ{(I?Uyb#A$PcKXqD\NsUS5Aq]3pf'UM3Kt&igoKl$t8?CjH(Lo)C Yi9:`q>BsU>)-y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	64649	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	414	OUT	GET /2024/05/29/18/25/52/8aebf9dd-6449-45a0-a1e9-f97a64395678/file HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:36 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 71067 Connection: close Date: Thu, 04 Jul 2024 20:55:36 GMT Last-Modified: Wed, 29 May 2024 18:25:53 GMT ETag: "09f7c490b77831331077a34084d50736" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"file"} x-amz-version-id: tTmOBb7GgqAa2XtHvcFDW5.v5ndM62E6 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: 05k4GnVvdCd3XebKwjMBa7tg8qy_oYaV7_mVdCH56bdoLW449NS6dw== Age: 1 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:36 UTC	15714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 38 10 bb d2 19 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME8zTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:36 UTC	16384	IN	Data Raw: 0e 0e 01 98 25 1f 9c 15 64 ff 6f eb af 39 ab 40 5e 49 59 ad 63 72 26 93 c9 fb cf cf f9 81 e2 48 ce b5 d6 de 3f 00 f6 0f 04 c0 a4 ba b3 d6 92 2e 67 7d b8 e4 54 08 29 69 db 20 56 7b e6 0c c4 8c 07 96 d5 29 70 18 27 e2 10 68 5d ab 3b 75 2b 34 15 65 a5 0f 99 5c f1 e7 26 f7 5d 13 9d b5 1b 6b ec fd ae 6b ce fa 6e f5 53 f3 7e f6 81 18 a7 b3 3b 9b d7 e2 27 d3 49 f9 10 19 79 cb a3 45 1b fc c5 ce 23 15 c0 29 3d 01 f1 35 8e dc bb 64 1c 4b 49 b9 9c 83 bc de 76 dd ed 54 ca 32 84 e8 da b6 15 63 2d 31 aa 6c e9 e1 92 56 35 0e a5 de 35 88 b1 4c d3 70 b0 cf 4c 71 c4 b9 8e b6 55 e1 b6 c5 ac 63 39 6f 98 f5 2d 4d 63 b0 26 e1 c4 80 75 98 02 4e f6 60 8b fa 61 ea 3a 45 b4 54 06 1e d4 b8 fb 8c 98 0b 49 12 25 4e d8 52 b0 07 bb 17 2d 95 35 f8 72 35 12 4b 94 aa 0f a5 59 34 51 f6 c2 Data Ascii: %do9@^IYcr&H?.g}T)i V{)p'h];u+4e\&]kknS~;'IyE#)=5dKIvT2c-1lV55LpLqUc9o-Mc&uN`a:ETI%NR-5r5KY4Q
2024-07-04 20:55:36 UTC	12647	IN	Data Raw: ff 25 c6 06 23 e0 2d 96 1e 5b e5 ff fd f3 6f ea 1f f8 d8 e9 ad 66 7b f6 4b 85 71 cf c5 2a ba 28 84 49 45 d5 45 54 65 6a c7 75 cc 8a 77 b6 6a 33 0c 29 57 25 90 71 44 e2 52 6c 95 b8 09 d0 41 6d 4c 68 fd f3 74 b2 d9 a0 60 b8 d7 63 d0 1f 62 ad 97 dd 14 d2 62 6d 8e 50 1a a5 a2 31 26 39 8e 13 ea 69 0d 27 05 a5 d6 a8 5a 93 b9 c5 05 ea 8d 16 4a 29 cf f8 51 e4 c4 69 cc d2 da 32 8b 27 56 68 ad 2c a1 44 cc 60 7b 8f c1 70 c8 dc da 1a 8d c5 05 d2 d1 10 b9 bb 48 ab 3d cb ec ec 3c 0f d5 1b ac 9d 3a cb fa 8d db 5c bb 72 03 a9 52 df f0 5f 93 34 1b 2d e6 66 e7 98 6d b7 49 d2 38 34 ec 1b af 09 ec 54 70 89 3d 1d 4f 19 ea da 95 ae 70 a5 d4 70 08 42 19 4e 6b e3 a0 34 4e 68 67 b3 83 c1 6e f9 cb bf eb 6f f2 aa f8 ea fd 5e 12 f7 7d 3c 30 e0 7f 85 f1 b7 df da 26 07 fe f7 5f bf 99 Data Ascii: %#-[of{Kq*(IEETejuwj3)W%qDRlAmLht`cbbmP1&9i'ZJ)Qi2'Vh,D`{pH=<:\rR_4-fmI84Tp=OppBNk4Nhgno^}<0&_
2024-07-04 20:55:36 UTC	16384	IN	Data Raw: e5 3f b3 c5 8d 37 25 42 36 de 5f 88 0b 55 8a 20 5b e3 62 24 10 d7 20 d6 5a 68 e3 4f 6a 5d 16 35 5d e6 73 d6 98 13 4a f2 18 4e 0c 4c 69 b6 b2 72 b4 2e 86 e2 96 73 e6 1a b8 eb 52 0e 6f 74 3a e2 fa 07 9f fa fd db b5 54 64 2a 4e 8b 85 76 ab fc 86 33 e0 4f 9a 01 a7 6e 6e f2 3f 7e fc e3 a2 dc ea c8 83 1b 57 d4 be 78 a1 81 64 26 cb 58 b0 5a 9e 33 8e 8b c6 99 47 80 87 9d e5 24 22 5a 36 88 19 e7 48 9c aa b8 1d 45 10 16 50 38 27 3d 93 84 a9 14 e3 43 89 c0 98 71 5c 18 c0 b4 1e 26 a8 aa 52 03 87 8c b8 32 d0 38 f6 9d 38 47 17 c2 e1 51 fd de 1d f9 7f f5 b3 c0 6a 8d cd 73 74 a7 4b 7e b0 cf a5 e7 9e f2 31 f6 b5 75 da 49 8a e9 0d 69 e8 88 7a 6b 81 d5 8b 4b 64 f1 88 83 fd 5b 58 21 68 35 62 4a 9d 7b 78 a3 64 e2 b2 86 52 4f a2 22 8c 55 e8 d2 e1 9c 19 73 5b 55 6e 6e 05 e4 a8 Data Ascii: ?7%B6_U [b$ ZhOj]5]sJNLir.sRot:Td*Nv3Onn?~Wxd&XZ3G$"Z6HEP8'=Cq\&R288GQjstK~1uIizkKd[X!h5bJ{xdRO"Us[Unn
2024-07-04 20:55:36 UTC	9938	IN	Data Raw: 8c 63 90 a3 38 e6 20 09 71 5d 8d 7c be c0 b3 67 bb 38 81 cf c5 e5 39 dd d3 4b 5a 27 67 18 c3 00 b5 e7 f1 fa 5f be 23 0c 12 9e 7d fb 0d a2 58 22 51 55 94 72 95 d8 b4 09 44 48 82 82 a9 e9 84 4e 9f d7 6f de f2 fd 4f 3f f1 fc c5 73 be b6 6c 72 f9 1c a6 65 f1 fc d5 4b 0a ba 4d 12 24 d8 a5 32 57 ad 1b 7e fe f9 27 4e 0f 0f d9 5c 5b e5 6f 9e ed 51 b4 73 bc 7c b2 c7 93 42 95 81 e7 30 7c 77 44 ae d5 63 55 53 31 54 05 b3 6c d1 55 13 42 4b 62 ae 56 28 d4 4a 04 1a 2c 6b 1a cd 5e 80 3b 08 29 24 16 a6 59 c6 71 07 38 7e 4c a9 5e a0 be b9 89 db 6b d1 7a 7d 80 f3 fd 47 b4 81 8f 27 34 a2 5a 01 27 af 13 2b 92 44 51 a8 16 2a 2c 57 0a 6c 3d df 22 51 7d 42 e9 23 11 44 32 40 00 51 12 d1 ea 74 70 3d 9f 49 8e f0 79 f6 6b 16 8d cd f3 9e 00 77 c1 1a f3 e8 2f 8d 64 7f ca b3 67 9f 9b Data Ascii: c8 q]\|g89KZ'g_#}X"QUrDHNoO?slreKM$2W~'N\[oQs\|B0\|wDcUS1TlUBKbV(J,k^;)$Yq8~L^kz}G'4Z'+DQ*,Wl="Q}B#D2@Qtp=Iykw/dg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	64648	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	668	OUT	GET /2024/06/06/01/21/44/5470860f-4901-4885-a21e-ab2d27e0b2c2/AJ-Headshot-Reduced.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:37 UTC	668	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 83290 Connection: close Date: Thu, 04 Jul 2024 20:55:38 GMT Last-Modified: Thu, 06 Jun 2024 01:21:45 GMT ETag: "13a47db86c485590380056a083e554aa" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"AJ-Headshot-Reduced.jpg"} x-amz-version-id: cMn75MSVcLzCmm2mFTjLr0_8CBme0dIg Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 acee7e60faaea7b7699fe033930a0164.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: FaEylnCdJYy_o9jpdebTJJRA0LSDH3VBek1tMQjBlSYmuESjkjOCKw== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:37 UTC	15716	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 30 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 20 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e6 00 06 00 1a 00 16 00 1a 00 1e 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6b 63 70 72 74 00 00 01 68 00 00 00 23 77 74 70 74 00 00 01 8c 00 00 00 14 62 6b 70 74 00 00 01 a0 00 00 00 14 72 58 59 5a 00 00 01 b4 00 00 00 14 67 58 59 5a 00 00 01 c8 00 00 00 14 62 58 59 5a 00 00 01 dc 00 00 00 14 72 Data Ascii: JFIF0ICC_PROFILE applmntrRGB XYZ acspAPPLAPPL-appldesckcprth#wtptbkptrXYZgXYZbXYZr
2024-07-04 20:55:37 UTC	1190	IN	Data Raw: 9c b8 05 b7 1b 03 f5 df eb 8e 93 c5 31 73 ff 00 af c9 d5 3e 20 f1 35 55 6b 3a ff 00 0e a1 00 2a 03 8b 82 4e c7 9f a0 fd 31 ce e3 1e 89 95 91 d6 9e 29 96 3a 8a 0a 88 a6 a2 8a 48 9e 41 23 68 da e6 d6 3f 4b 8b 5f 12 63 65 dc ac e5 9e 36 6a c7 44 78 c6 87 2e 15 b1 49 48 9f 77 36 2b 2a 39 da c7 82 be 96 c7 bb c7 9e 7a bb 7c bf 2f 8f 0b 67 c5 a3 66 55 b1 51 4a d5 30 2c 72 36 be 92 ae a0 75 8b 12 43 27 04 6e 31 ed c6 db 37 5f 3f 3c 64 bc 25 ff 00 6f 19 28 29 d2 96 20 a7 50 d6 b1 12 02 90 5b 85 e1 6f 6e 06 d8 eb 7a 73 5e 4d 9b 54 66 0c 93 29 90 4d 1d 96 17 72 14 14 0a 2e a0 02 39 01 0f fe 71 c6 ce 34 eb 2f 3b 6a 19 bd 5b ad 54 25 23 8a 46 66 f2 ac 5a 85 98 0f 5b ee 4f 07 b8 b6 18 f1 34 99 6e dd b2 e5 ba aa 5e 49 58 84 20 13 b3 70 a7 66 5b 77 db be 2d e8 c7 b5 95 Data Ascii: 1s> 5Uk:N1):HA#h?K_ce6jDx.IHw6+9z\|/gfUQJ0,r6uC'n17_?<d%o() P[onzs^MTf)Mr.9q4/;j[T%#FfZ[O4n^IX pf[w-
2024-07-04 20:55:37 UTC	12792	IN	Data Raw: 1c f8 7b 97 0c c6 a6 a6 8a a9 e7 e9 bf 50 ea 5b 18 d0 de f7 23 6d c1 bf af 23 1c b3 bc 3b 78 f0 e5 dc 7e 10 8b 2f 57 8d 04 11 a2 35 95 c1 50 2c 41 e7 8c 7c 9f 24 b9 3f 41 f4 f9 cc 38 af 46 f8 6e 8e 9e 92 9e 38 e0 08 d6 40 c5 80 06 e2 ff 00 f9 c7 ce cb 7b 7d ac 72 96 3b 57 c2 59 3e 5b 98 cd 06 ba 3a 72 36 27 a9 18 b8 c6 fc 36 e5 96 b6 f2 f9 ff 00 ce 36 bb 3a af c3 9e 18 cb 32 c7 2d 96 51 4f 26 8b c6 4c 2a 74 b7 3e 9e 83 1f 66 fc 70 c6 fb 7c 0c 72 f2 f9 33 9c e9 26 86 ba 8a 82 95 e3 a5 e8 53 a4 63 45 bb 1d fd 06 13 29 26 a2 65 86 59 5d e4 ea ef 1a 67 34 b0 d4 4c fd 50 ed a6 c3 6d ce df d7 f5 6c 7c af 34 e7 87 db f0 6e 63 aa e9 6f 15 f8 ae 1a 58 5c 04 13 b1 53 e5 27 82 0e 39 f8 fc 55 df c9 e6 92 6a 3c fd 98 78 86 5a da ca 87 8c e9 66 7b 16 1d bb ed 8f 76 38 Data Ascii: {P[#m#;x~/W5P,A\|$?A8Fn8@{}r;WY>[:r6'66:2-QO&L*t>fp\|r3&ScE)&eY]g4LPml\|4ncoX\S'9Uj<xZf{v8
2024-07-04 20:55:37 UTC	4616	IN	Data Raw: a0 ab 11 1a e9 18 ac ba fa d1 81 23 b6 f6 b9 20 0e 4d bf 3f 73 e5 bb fc 26 91 d2 38 e6 9a 96 61 4e ab f7 8d 84 b5 87 ca 40 0a 45 f6 3a b8 ed fa 70 30 d9 a4 16 9c d0 40 51 cf 58 c8 e7 40 36 11 92 40 b9 e6 e0 71 fd 5f 13 6b a6 75 a8 8a 48 22 9d 17 a8 47 ca e3 80 d7 20 71 e6 16 e6 c3 d2 dd ee 2f 24 62 ac 96 58 a7 8f ee e9 11 9d 06 8e 98 36 0c 0d af 73 7b 8b ed 73 da f6 e3 6c 27 23 27 f6 74 86 78 5d e2 f3 3c c8 22 86 e3 4b 8d 5f b0 f6 ff 00 7b e2 f5 da 76 fb e2 e9 ba 9e 1a a5 9f 4f 59 a1 ce c3 c8 92 79 6d aa 9e 40 a4 01 7b 10 41 db f3 ee 2d b9 f6 b9 df b9 5d 4d d5 81 da 0a 05 8e 9a a1 c3 87 28 d7 e9 22 8b 1f 31 ee c2 f6 b5 ad 61 b8 b1 b6 67 2d f5 cb 83 1a bc b5 7a 11 92 f1 b8 1d 3d 07 66 55 df 4d f6 3c 03 fa 71 cd d6 7e 05 85 2b 41 0d 24 57 b2 75 da 37 92 40 Data Ascii: # M?s&8aN@E:p0@QX@6@q_kuH"G q/$bX6s{sl'#'tx]<"K_{vOYym@{A-]M("1ag-z=fUM<q~+A$Wu7@
2024-07-04 20:55:37 UTC	6396	IN	Data Raw: ff 00 5c 63 5e 99 1b 28 92 a7 31 a7 56 4d 31 b1 d6 e2 52 45 f9 b7 fa 73 8e 5b 6d 69 14 22 92 b1 65 82 54 d7 1a 74 fa ec a4 05 4f f0 8b 6c 0e db 7f df 01 f6 0c be 35 45 5f ec f6 aa 2e 35 23 93 c9 20 93 73 b6 de f7 f5 f5 d8 30 d5 08 56 8d fe f7 2c 50 c8 24 01 69 ca ec 07 71 cd cf 73 db 7f 4b 79 72 3e d3 52 54 35 0d 4c 9a 1a 96 85 a3 1a 23 0a ae da 6f 6d 94 ec 2f bf 3c db d0 5b 1b e0 72 fe eb 50 b1 44 b3 4d a5 65 67 49 25 27 ce 3d 7d f8 27 d3 d7 6e 63 48 f3 e5 f1 b5 5c b0 88 ac 91 35 db 5d ce 9b 90 45 8d 89 be c3 f6 bf 65 17 d3 3b e7 87 39 64 eb 52 d4 a4 8c 69 e5 12 68 8a 58 c5 c0 23 51 37 06 ff 00 e1 e7 dc f3 73 7c eb 77 4b 3f 2f 49 7d 9a 7c 0a de 16 f0 47 f6 94 c0 8c c7 38 7f bc 4b c7 96 21 b4 4a 3d 00 50 0f d4 9c 7d 6c 31 f8 e3 23 e5 e7 95 cb 2d bb 89 64 Data Ascii: \c^(1VM1REs[mi"eTtOl5E_.5# s0V,P$iqsKyr>RT5L#om/<[rPDMegI%'=}'ncH\5]Ee;9dRihX#Q7s\|wK?/I}\|G8K!J=P}l1#-d
2024-07-04 20:55:37 UTC	11012	IN	Data Raw: 98 95 0e 44 6a ec c9 7e ed 04 af 34 e7 46 a4 52 15 58 90 2f e6 02 e7 61 db fc 23 4d c8 50 d2 b3 a5 1a 45 1b a4 60 2c 93 29 05 51 d5 94 25 b9 d9 87 6b 1d cf 7b 92 3e 66 74 76 ed 1f 80 19 0c 79 a7 8e 60 a9 68 f5 c7 49 13 4d ac 9e 1a e5 54 6d f5 3f a7 03 1e af 04 e6 d7 9b cf 78 91 ea 79 76 8a df 35 f9 04 e3 d8 f0 31 bb e9 22 ea 6d 6d 88 18 d3 4c aa 09 8c 0e c7 d4 5b 19 65 f1 a3 2a 01 45 de fd 8f ef 83 4e 0c 19 1a 34 d2 34 5b 7f 6f 4f eb db 01 c0 b3 2e f2 20 37 d8 da db 8c 69 97 15 0c c6 e8 84 01 be fc 9f e8 7e b8 34 e3 a5 ec 9b 10 45 f7 1c 60 39 46 ad 26 f6 bd bf 4c 02 5f 39 22 dc 71 b5 f0 19 94 00 06 9d 22 fb 5f d7 00 77 3a ae 15 48 3b 5f 19 1d 55 f1 fb c6 12 65 1e 1c 19 35 24 ff 00 76 ae cc 47 9a 5d 37 e9 c2 08 d4 7f ea e0 7d 0f a6 3c fe 6c be 33 5f 97 a3 Data Ascii: Dj~4FRX/a#MPE`,)Q%k{>ftvy`hIMTm?xyv51"mmL[e*EN44[oO. 7i~4E`9F&L_9"q"_w:H;_Ue5$vG]7}<l3_
2024-07-04 20:55:37 UTC	12792	IN	Data Raw: 74 cd 99 c9 0f 5e 58 e9 c9 d6 25 85 17 e4 f3 58 b7 b0 24 7b fd 3b 59 c4 da 5e 56 92 49 15 14 cf 3f de 9b 56 a2 5c d8 6e 79 df 81 c8 bd f6 df fc 3a 7f 85 3a 89 1a c6 65 5c af 3f 49 84 5d 29 24 d3 ac 5f a9 2d ed dc 8b de da 86 f6 e4 f1 73 8b 67 b5 97 9d 23 78 9a 2d 5e 0c ae ab aa 42 8b 15 36 98 a2 37 50 cd 73 72 58 db 70 6c 01 b6 db 6f d9 de cd 70 ac cb a2 19 ce 5a b4 f2 41 18 a8 fb b0 86 36 56 f2 cb 60 02 e9 bf 7b 91 c6 db a8 1d f0 bd ec 9d 39 54 66 72 25 0c 30 06 78 e4 24 94 86 35 0c fe 5f 4b 6d dc 9b 8e 45 ef 7b 8c 22 a9 fc 33 45 16 65 9d 66 d5 32 39 a5 86 1b 44 90 a8 2c c4 86 2c 4d f9 fa fe 5e 98 d5 e2 6d 9e db 65 28 35 10 c1 d1 3d 38 08 37 86 cc 34 b6 c4 d8 ee 76 bd fb fe 23 6f 98 11 a5 d1 a8 9c 65 57 86 34 92 a5 54 05 5b f9 c5 ad 6b 8e 6d 7d ed bf 03 Data Ascii: t^X%X${;Y^VI?V\ny::e\?I])$_-sg#x-^B67PsrXplopZA6V`{9Tfr%0x$5_KmE{"3Eef29D,,M^me(5=874v#oeW4T[km}
2024-07-04 20:55:37 UTC	6396	IN	Data Raw: ed eb 8f 3d bb e9 ec 4d 83 21 fb dd 03 ab aa c6 a0 b3 07 2d 6d 47 bd bd 71 37 cf 26 98 28 5a 2c bf a6 cd 4f 23 53 92 da 9e 34 37 1e b7 1f ed eb 85 bc 05 64 90 4b ae 78 82 21 52 c5 51 d6 ce 57 b0 37 ef 71 7f a6 39 b6 85 98 89 e6 74 8e 69 3a 08 c8 1c 06 22 d7 b1 dc 6d c1 ff 00 5c 19 d3 51 ce ea 7e f9 4c 1a f7 68 d5 6e dc 92 45 b7 db 1b 9b 4a 9f 91 56 89 69 41 56 0e 80 ee a7 df b6 3a b0 be c9 92 0c c5 5a 38 d8 08 03 00 a8 db 31 36 be de f6 ed 8e 79 f4 b8 f0 b2 5a 66 8f 33 a6 a8 92 45 89 e5 92 e6 2b 17 6b 0b da d6 06 c7 83 71 be 39 fa e1 a6 e5 4e 24 0f d7 8a 97 ad 23 c8 01 91 be 65 07 6e 01 da c7 7e fc 9b 9b ed 8c ce 9a ac 34 14 4b 2d 4a b5 4a 07 bb 30 58 63 e4 5c fa ee 14 ed b5 fd fd 31 aa 9f b6 fb f0 d3 33 88 f8 b2 9f ee c8 60 85 e4 2f 20 91 42 ee 6c 37 1d Data Ascii: =M!-mGq7&(Z,O#S47dKx!RQW7q9ti:"m\Q~LhnEJViAV:Z816yZf3E+kq9N$#en~4K-JJ0Xc\13`/ Bl7
2024-07-04 20:55:37 UTC	12380	IN	Data Raw: 22 78 e4 69 1b ac b7 65 05 6e 2e 7b dd 98 71 dc 8e 2e 35 ef f5 51 f7 3a aa aa 8e ae 13 4e 44 6a 80 b9 16 b9 0c 6d 7b 90 34 81 62 36 f4 b7 6b 5a 70 45 75 6b ca 2a 59 d2 a1 84 6e 40 79 02 ff 00 ca be 8e c0 6e 2e 07 7e c2 dc 03 84 1c 27 9a 4a 6f 0c b4 6e fd 52 b2 22 2c 42 21 a4 5d 40 04 6c 7f cf 72 3d 06 d6 17 8e c1 96 5a 45 ca 2a 5a 19 84 ca ee 80 b1 5e 01 b3 79 4d c0 b8 00 92 6f e9 c5 c1 0b 39 b3 47 b4 c7 cc 96 ba 9e a2 46 99 11 15 5b 58 65 55 51 b9 bf 96 ff 00 fc 8f ff 00 76 e3 91 23 4d 7a 7c d2 34 47 69 a3 2c e5 d9 5e 45 37 00 0d 81 1f 9a 7d 06 92 7b 6d 64 bb 66 ad da 2a 47 8e 9e 78 21 8f ef 41 5b a7 23 97 d4 0d cd ee 76 f4 16 00 fa fb e1 4c 75 bd 55 0d 6c 6f 4a d5 6d a9 18 4b 1f 4e 24 2a c1 9a e4 ea 2b fe 6e 38 f5 20 db 9c 51 b1 64 f9 2d 1e 51 96 bc 8f Data Ascii: "xien.{q.5Q:NDjm{4b6kZpEukYn@yn.~'JonR",B!]@lr=ZEZ^yMo9GF[XeUQv#Mz\|4Gi,^E7}{mdfGx!A[#vLuUloJmKN$+n8 Qd-Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	64650	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:36 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTUvYzQ2OTQ1YmYtMDliNy00MTIwLWE2NmYtZjM0NmVkMTVkNmFhL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=64b05b453234c3bb HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:36 UTC	626	IN	HTTP/1.1 200 OK Age: 1992381 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 65683 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:15 GMT Etag: "eec77880461e9788c44ce61f0f699500bf59d82b" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: ff7a5c9e8892be56c32d912a757ac07586927614 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 046486a1-6730-4a1b-9a12-992b6d1d8e34 X-Runtime: 0.068686 Connection: close
2024-07-04 20:55:36 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 37 80 04 cf 88 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME7zTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:36 UTC	2372	IN	Data Raw: d7 8d 38 4d 6f fe 06 9c 96 b9 ef 5d e6 46 4e ff 00 88 13 00 ff 0c 31 73 c2 00 00 80 00 49 44 41 54 78 da ec fd 79 bc 6d eb 59 d7 89 7e 9f b7 19 63 cc 39 57 b3 bb d3 e6 a4 45 20 40 e8 09 48 a3 a0 a2 d2 28 75 2d 29 11 29 b1 0a b5 28 af 7e 4a 2d eb 72 ad ba 58 b7 aa 2c ab f4 73 d5 5b 5a 96 55 e5 55 ac 2a 3b 50 54 14 21 a1 13 85 40 48 02 04 12 20 24 24 39 c9 39 27 a7 d9 ed 6a e6 9c 63 8c b7 bd 7f 3c ef 9c 7b c3 47 ba 90 64 25 64 3d 9f b3 cf 6e d6 5e 6b cf b5 d6 fb 8c f7 69 7e 8d 70 19 1f 94 f8 df be f5 9f f2 bf fd f5 ff 85 cf 78 f5 67 ac ee dc 3d ff bc 93 3b f7 fe f3 10 c2 6f eb ba de cf d3 cc 7a bb c6 86 11 97 32 4b eb 38 58 f6 3c 72 b8 e0 fa c1 40 df 7b 8e 97 3d ab ce 63 28 c4 69 a6 d4 4a e7 2c d4 82 37 86 de 19 4a ad cc 73 04 23 e4 92 99 62 24 86 4c 48 19 Data Ascii: 8Mo]FN1sIDATxymY~c9WE @H(u-))(~J-rX,s[ZUU*;PT!@H $$99'jc<{Gd%d=n^ki~pxg=;oz2K8X<r@{=c(iJ,7Js#b$LH
2024-07-04 20:55:36 UTC	538	IN	Data Raw: 70 d1 1e 00 8a e6 82 c2 1c 32 22 95 4a 6d b7 b2 be 5e 5b 33 4e 0a de eb 5e 39 88 f6 d9 eb 58 98 63 c5 58 38 18 7a 9c eb d9 cc 11 e6 89 f3 10 88 b1 55 12 e8 4e d8 b5 fd 70 2a 19 31 42 4c 01 63 84 03 bf 30 4c f9 55 f3 0b cf ff 97 4f 4a 9e 3e fd 13 3f e3 35 bf fd 0f 7c 55 ac ef 7c 12 f9 0d 2f bf e8 63 70 e1 71 59 42 bf 1f f1 55 ff fd 7f cf d9 fb 9e e5 ea a3 8f 2d cf ee dd fb 4f 6a 98 7f cf 52 6a ff e2 ab c7 bc fc b1 87 78 d1 8d 1b 2c 87 0e 67 8c ee 67 45 30 25 ef 6f 60 6b cc be 74 d4 49 ac 02 1a ac 68 42 52 f4 70 8b 55 e8 64 ad 15 63 1d 52 ef c3 13 05 41 c4 b4 89 b3 d1 d5 8d 08 39 27 9d 28 4b eb 67 ab a2 b4 72 d1 c9 b0 33 16 c5 73 14 4a d6 9b 79 07 7f dc 4d 89 a5 7d 7c 80 d2 86 56 b5 ad 90 32 90 73 d1 8a b7 96 fd d7 c4 88 ec f7 d6 18 f0 ce d2 39 8b 48 65 2e Data Ascii: p2"Jm^[3N^9XcX8zUNp*1BLc0LUOJ>?5\|U\|/cpqYBU-OjRjx,ggE0%o`ktIhBRpUdcRA9'(Kgr3sJyM}\|V2s9He.
2024-07-04 20:55:36 UTC	4096	IN	Data Raw: fc cd df 2f 31 fc de 43 6f fd 8b af 5f e3 f1 87 1e e2 f8 60 c5 6a e8 e9 bc c3 19 d3 56 45 19 2b 09 6b 5a 19 5c 77 e8 a4 72 1f 21 55 35 c9 74 1d 64 75 78 65 6d 4b 3e db 92 d9 62 ac 26 33 2d 49 c5 da 76 8d d7 fb 43 2a 01 69 09 6f ac c1 1a 05 83 58 b3 bb b1 f5 df 04 f6 37 f9 6e 9a ac ab 29 28 ec 92 52 93 39 95 42 8c 51 6f ed 5a f6 7b dd fd 03 a4 0d d4 10 bd dd bd b5 4a 80 48 a9 25 b3 96 fe a5 54 36 31 12 72 a6 50 a8 b5 e8 ca ab bd 1e 63 1a e9 a1 56 aa 81 62 40 ac ae ce ac 88 74 25 3f 61 53 ee 3e ed 37 7d f1 1b de f8 a3 3f b2 f9 af ff dc ff c0 f7 7c e7 bf bc e8 63 71 61 71 99 c0 bf ca f8 9a 3f f2 c7 78 e7 33 37 c9 21 be 2c ae d7 7f 66 51 f3 c7 bd e8 da 55 5e fe d8 a3 3c 74 7c c4 72 b1 a0 73 ae 0d aa da ad 4b c6 50 a0 16 4c cd 48 9b 10 4b fb 33 c5 04 ef ee be Data Ascii: /1Co_`jVE+kZ\wr!U5tduxemK>b&3-IvC*ioX7n)(R9BQoZ{JH%T61rPcVb@t%?aS>7}?\|cqaq?x37!,fQU^<t\|rsKPLHK3
2024-07-04 20:55:36 UTC	5930	IN	Data Raw: 47 29 f9 c5 25 05 ba be 67 e9 3d 07 5e 95 26 ed ce 2a 13 4d 20 b3 43 3c ec 38 bb ba 13 42 dc 7d 4f 22 9a 6c 95 de 5c 45 d7 49 a5 34 00 7e da d3 ff 48 ec 4b 5a c4 34 3d e6 8c b4 32 7a 8f 49 6e 37 b3 0e c4 75 6f 5b 73 c6 b8 5d 1f dd 56 41 4d 34 5d da 8d 79 7f 98 d6 78 c5 6d 57 2c d6 37 99 9f d6 03 17 7d 58 38 e7 28 35 91 0b 54 76 c3 a6 42 2a 85 90 2b d6 2b 20 c3 24 21 c4 48 c9 0d 31 56 9b c7 52 ad f4 56 a1 a4 de 39 c4 08 43 e7 f5 eb 51 a0 e4 c2 26 a9 cb 83 11 c1 39 4b 0c 91 2a da 3f 8b 15 6c 11 72 d3 bd ad b9 62 c5 34 e2 88 96 ed 49 90 6a c5 75 39 8a ec 5f e3 af ff b8 ec 81 7f 41 7c dd b7 7f 1b d7 4e ce f8 e2 af fe 6a 9b a6 f1 95 39 c6 eb b5 56 16 43 c7 f1 6a e0 60 b9 64 e8 3d c6 d8 36 b9 2d ad ec a3 91 13 9a 82 a4 75 60 1d 62 3d 58 07 62 a9 62 28 ba 64 52 Data Ascii: G)%g=^&M C<8B}O"l\EI4~HKZ4=2zIn7uo[s]VAM4]yxmW,7}X8(5TvB++ $!H1VRV9CQ&9K*?lrb4Iju9_A\|Nj9VCj`d=6-u`b=Xbb(dR
2024-07-04 20:55:36 UTC	7116	IN	Data Raw: a7 10 66 9c ef f0 ce b1 f4 0e 3b f4 f8 9c 91 92 c9 b9 90 72 62 9a 23 b7 ee 9d 71 6f b3 65 75 e5 06 57 8e af 33 e5 cc c9 ad 3b bc fb 99 a7 59 6f d7 2c 16 3d c7 d7 6f 70 a7 2c 78 e7 d3 ef 63 95 02 07 62 58 7a c7 d1 c2 73 b4 58 d0 77 03 c3 b0 c4 2d 96 e4 38 71 3e 46 ee ac 47 0e 0e 16 5c c3 ee 05 d3 6b c8 e4 a9 3d 38 52 62 0c 33 53 88 8c d3 c8 76 9a db c4 39 13 63 93 a3 45 88 ad 84 76 d6 32 f4 1d c7 87 47 2c 86 25 eb b3 35 b7 4e 4e 18 a7 51 95 45 0e 8f 79 f9 c7 bf 92 a3 e3 ab fc f4 4f bd 9d d3 9b cf 11 4e 6e f3 d4 f9 5d 36 eb 53 3a 6b 39 72 ba bf 1d 4b c5 58 c7 79 88 9c cc 89 a5 77 0c 06 ee 8e 91 54 27 1e 3d 58 30 78 95 cd 6d ba 99 6a 48 61 da b0 cb aa 83 45 a1 59 c8 34 07 45 50 dd 4d 69 a6 de d6 98 e6 99 f4 f3 dc 6b 1a c7 58 6f 61 d3 f4 bc 3a a7 5a 63 e1 f4 Data Ascii: f;rb#qoeuW3;Yo,=op,xcbXzsXw-8q>FG\k=8Rb3Sv9cEv2G,%5NNQEyONn]6S:k9rKXywT'=X0xmjHaEY4EPMikXoa:Zc
2024-07-04 20:55:36 UTC	8302	IN	Data Raw: 68 4d 1b 9e 04 f2 bc 55 63 70 6b 08 63 a4 94 8c 73 16 aa c5 3a 8b ef 3c 5d 37 20 ae e3 64 b3 e1 de c9 09 a0 a5 e3 94 20 36 4c 61 6f 84 83 55 cf d0 39 ac a8 3b 41 ac 91 31 ce dc 3d df 72 eb 64 cd 9d d3 0d 27 51 d5 33 62 8c 4c 31 13 53 6c 25 ac 69 4c 1f b0 52 31 52 1a 3b 4a d1 49 d7 56 4b 6e 2c 07 96 56 da db 1b 71 c0 1a 2d d0 53 24 8e 13 b5 6b 0f a7 52 f7 03 26 63 15 b4 62 44 6d 54 ad 75 84 12 db 44 59 7b d9 58 ee 4b e4 88 69 c2 f4 4d 94 60 47 e4 77 cd a7 a9 09 75 68 6e 66 a5 35 22 3b 65 ca 48 2d 95 5e cc 5e 93 2b e8 f3 0c 29 85 21 66 66 89 ca b7 36 42 88 33 e3 76 4b ce 19 bf 58 92 72 e5 2c c5 1f 3f 1d ae 7e db b5 37 fd 9b 79 fa 82 2f 61 fd 31 af b8 e8 a3 f6 01 89 cb 04 fe 05 f1 8e 70 ce 3b ce 22 37 e7 fc fc c3 8b ee ad 1d f2 39 35 47 c9 bb be ae 99 6b d5 Data Ascii: hMUcpkcs:<]7 d 6LaoU9;A1=rd'Q3bL1Sl%iLR1R;JIVKn,Vq-S$kR&cbDmTuDY{XKiM`Gwuhnf5";eH-^^+)!ff6B3vKXr,?~7y/a1p;"795Gk
2024-07-04 20:55:36 UTC	7366	IN	Data Raw: eb 3c 72 f5 8a de b6 07 2b 8e 56 4b d6 e3 c4 c1 d0 69 5f 5c 32 eb 69 6c 2b 2b e1 78 b5 62 8e a9 61 8f 0b db 18 d5 80 2c 67 02 2a b9 93 72 a6 16 c3 1c 15 a4 b1 9e 66 c6 39 32 35 b8 64 c8 95 d3 29 b0 0d 89 b9 61 98 77 d2 af b1 56 e6 94 09 a9 a0 4e 48 2a 9d 93 9a 64 ad 1a 9c 37 70 65 1b 3a f7 ce f2 e8 d1 8a e3 65 af 36 a2 02 74 fd 0f 76 37 5e fc 2f 2c c4 9f 7a fe 47 e1 fc a2 bf db 1f de 71 99 c0 ef 67 bc e7 c7 5f cf 27 fe d6 2f a7 bf 76 e3 76 0e 5b 9b 62 7c f5 34 4f cb 98 f2 7e 70 73 3e 4e 9c cf 91 58 68 82 e7 99 be 11 18 0e 16 03 ab 45 4f ef 3b d6 e3 c4 f9 38 e3 9c c5 5a c7 ad f3 91 9b e7 1b 9e ba 79 87 bb e7 1b b6 73 c4 3a a5 12 1a 31 5c 39 58 72 bc 5a b0 9d 66 30 06 eb 2c d3 34 53 51 5b d2 29 eb a4 5a d8 25 50 a2 50 d9 86 c8 94 32 be 53 85 c8 31 26 8a 18 Data Ascii: <r+VKi_\2il++xba,grf925d)awVNHd7pe:e6tv7^/,zGqg_'/vv[b\|4O~ps>NXhEO;8Zys:1\9XrZf0,4SQ[)Z%PP2S1&
2024-07-04 20:55:36 UTC	10674	IN	Data Raw: 96 1a 41 25 ef e1 c7 11 9e eb 92 5a 6b 78 1f e1 3d 4d 9f 07 24 5c 94 3c b6 a0 d1 de 07 0c c3 88 e3 c3 23 3c ff ec 93 38 f8 fc e7 a0 10 30 6f 2c 66 8d 43 eb 1a 74 ad 25 23 e0 72 09 31 a3 22 62 f0 40 8c 1c 92 93 a7 24 0f 46 47 84 52 14 7e 5b a6 1b 1a da dd 9c 3f c7 cc 3f 96 d2 4e 8a 09 de 53 0e ed 43 c8 a0 95 12 a3 55 1a d6 58 a6 3b 8a 62 46 22 6e 33 1b b3 51 a0 3e 5e a6 43 02 8a 85 04 12 a0 12 9c d5 7c 1d 82 03 a4 9c df 8b 47 0e 5a 63 f7 15 af c1 c5 07 5f 09 d7 34 08 31 a1 1f 02 06 1f 30 0e 1e a7 7d 8f 15 eb 56 7b 4f 0a 9e a2 22 42 6b c0 07 26 b8 96 ce 64 93 18 23 b6 96 3b d8 de de 86 e3 be ea 94 48 94 c0 39 07 e7 0c ba c6 c1 18 6d 0c 70 66 3d 0c af 4a da be 6e 77 e7 dc f6 df ff 07 ff e7 c9 72 fb dc d1 8b 4d 37 bc fe 4d ef c1 e3 1f fb ed d5 e5 f4 1f ad 01 Data Ascii: A%Zkx=M$\<#<80o,fCt%#r1"b@$FGR~[??NSCUX;bF"n3Q>^C\|GZc_410}V{O"Bk&d#;H9mpf=JnwrM7M
2024-07-04 20:55:37 UTC	11860	IN	Data Raw: 85 88 94 88 dc 90 38 2a 41 02 fc f2 26 6c bf ea ed d8 da dd c1 e3 bf fa 2b 78 f6 b9 e7 61 4c 87 38 8e cc ad a6 f0 96 06 8a 69 a4 14 e0 87 9e bc 37 7b 25 eb 1a 68 eb f2 38 19 89 2a 48 29 43 da f3 2c a0 15 94 a2 88 41 9a 29 44 b0 de b5 0e d6 39 34 1a 38 39 bc 82 f5 30 a2 9b ed 62 39 9f 61 b1 98 a1 9b 75 e8 9a 06 8e a7 36 66 22 4a 7d d8 57 ac b4 c4 25 47 ab a6 7b 7c 2a 57 cb 5d 66 c6 40 c5 80 e4 6c ce 7d 53 e2 83 98 d1 eb 08 ca ec 02 62 69 2f 55 74 04 79 9e 75 6c 6d c1 22 88 50 97 a0 12 f5 7f 6b b0 ee 56 04 ac 32 d0 29 a1 b1 06 c3 40 4d 15 5a 83 40 bb 7e 80 0f 1e ab f5 1a bb 3b bb b8 78 66 ff d7 6f c0 7f fc 4f ff 97 f8 e7 ff e4 ff db be fb 9d 5f f9 e1 33 7b e7 7e 50 39 7b 9b 49 94 cb 09 ed 2e 78 4f 2a 83 21 e4 f0 23 23 c9 52 17 82 30 a4 68 da 80 d4 ec 84 41 Data Ascii: 8A&l+xaL8i7{%h8H)C,A)D94890b9au6f"J}W%G{\|W]f@l}Sbi/Utyulm"PkV2)@MZ@~;xfoO_3{~P9{I.xO!##R0hA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	64653	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDgvMjc2OWI5MzMtNDNmYS00Njk4LTk1YWQtYjkxMzMzMTQzN2UxL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=b7a469a71aceaff8 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1915135 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 79775 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:42 GMT Etag: "99dd260bc51d447796e2c9c2eb8b60c8c02fde77" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 0ff2f3d71ca3dae80cc27fc4ac337628bc15d0b6 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: b50ea362-aa2d-48b8-8c9b-7544be12a13c X-Runtime: 0.418272 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 30 1e 60 5a 2b 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME0`Z+zTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: d7 8d 38 4d 6f fe 06 9c 96 b9 ef 5d e6 46 4e ff 00 88 13 00 ff 0c 31 73 c2 00 00 80 00 49 44 41 54 78 da ec fd 79 b8 6d d9 59 17 0a ff 46 37 e7 5c cd 6e 4e 53 75 aa af 54 25 95 4a 43 1a 20 0d 10 a4 0b 11 85 80 d2 88 22 78 bd 7a 1f 2f 3d 88 82 57 f4 53 40 11 54 94 cf eb 67 7f f5 f3 13 7c 1e 91 8b 60 8f 0a 82 11 84 d0 89 60 4c 68 12 d2 56 aa 39 cd 3e 7b ef b5 e6 9c a3 7b df ef 8f 77 8c 39 d7 3e 29 7c 2e 92 64 9f 53 71 e4 d9 39 a7 f6 d9 7b ed b5 d6 1e ef 18 6f f3 6b 14 3e d2 97 02 c0 c0 97 fe 8e 3f 80 97 bc 72 7d f8 ae 77 bd eb 73 9e 7e f2 e9 af dc 9c 6c 5e 11 bc 6f 8d 31 38 d8 3f 84 52 0a 9b cd 06 21 04 30 b3 7c ab d6 d0 46 83 99 91 99 90 33 21 c6 0c 22 82 d2 0a ce 3a 18 ad 11 62 04 51 86 b1 1a 8b c5 02 5d d7 01 00 bc f7 18 47 8f 94 32 88 32 98 09 c6 58 58 Data Ascii: 8Mo]FN1sIDATxymYF7\nNSuT%JC "xz/=WS@Tg\|``LhV9>{{w9>)\|.dSq9{ok>?r}ws~l^o18?R!0\|F3!":bQ]G22XX
2024-07-04 20:55:37 UTC	538	IN	Data Raw: a8 82 ee c8 94 d1 b6 12 40 31 46 c4 18 40 cc 30 d6 4a 4d 58 3a af 31 46 30 11 9c 35 e8 9a 06 cb e5 02 7b eb 3d 58 25 9d 6a 09 7a 20 46 c6 36 47 84 20 20 0a 05 b9 2d 9b a6 85 b5 32 27 5e 2d 97 58 2d 57 68 1a 19 2b 49 43 ca c0 6a 0d 63 2c 28 67 00 0c f6 1e 91 e5 e6 ec 8c 81 52 46 52 58 eb d0 34 0e 8b b6 c1 e8 47 78 ef e1 83 8c ad 9c d6 d0 06 88 20 2c 5a 07 bd bf 87 ae 71 a5 f6 65 c4 28 c1 36 7a 8f a5 73 58 35 0e 63 0c 18 43 44 88 19 63 8c 18 7d 00 e5 84 c1 7b d8 de 60 7f bd 44 db 34 c8 21 20 73 96 5a 58 19 a8 4e 23 a6 05 36 9b 2d 94 02 72 22 0c fd 00 67 0c da a6 d5 e3 38 de 77 f5 ea b5 cf 38 bc 70 f8 73 1f ff f1 57 7e 66 d5 be 24 ef 77 17 70 32 1e 9d f7 16 b9 a3 d6 47 54 00 7f cb 9f fe 3e 28 fe 97 d8 c4 a5 39 3a 3a 79 d1 d0 fb df 92 62 be cb 18 ab ad 6b 10 Data Ascii: @1F@0JMX:1F05{=X%jz F6G -2'^-X-Wh+ICjc,(gRFRX4Gx ,Zqe(6zsX5cCDc}{`D4! sZXN#6-r"g8w8psW~f$wp2GT>(9::ybk
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: 50 49 af 8d d6 e8 9a 46 02 d8 da 02 b8 30 00 58 6e bf 31 60 18 03 62 88 c8 94 01 10 c0 0c 6d 0d 8c b1 70 b6 41 db 2d b0 ec 3a 2c db 0e ab ae c3 7a b9 c2 6a b1 c0 de 6a 8d e5 62 01 a3 b4 20 b6 98 c1 44 d0 50 d0 1a 50 90 e7 00 a5 64 e4 a4 95 cc 86 99 41 9c 0b bc 53 9a 5f 31 25 f8 71 9c 5e 5b ce 19 39 13 52 ca 25 fd 97 2c 22 85 08 ef 03 bc 1f 31 86 11 63 08 e8 b2 46 eb 2c ba 66 c4 e0 03 7c ca 18 52 c6 18 13 72 ca 48 49 46 4b 9a 01 63 34 52 4a d0 4e c3 35 2d 5a 65 91 b9 03 7a 85 10 3c 72 96 ee bd 74 ae 95 da 6c b6 77 3d fd d4 53 6f 58 af d7 3f ff fb 5f f2 f3 3f fc bf 7e c3 bf f0 5f f7 f7 be f4 bc b7 ca 1d b5 3e 62 02 78 b5 bf c1 2b c2 80 bf fd ef ff ac 79 6a 73 f4 d8 66 73 f2 3a 1f fc dd c6 18 ad 8d 45 df 8f f0 05 80 00 05 38 d7 80 89 91 42 84 62 40 3b 07 d7 Data Ascii: PIF0Xn1`bmpA-:,zjjb DPPdAS_1%q^[9R%,"1cF,f\|RrHIFKc4RJN5-Zez<rtlw=SoX?_?~_>bx+yjsfs:E8Bb@;
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: d0 cb f0 d2 57 3f 74 de 5b ec b6 5a cf b9 00 3e 3c 38 c5 8d b0 c6 f7 be e9 6f 5b 40 5f d1 5a df 6b b4 6e c0 98 7c 83 88 01 6d 0d 9a 56 c6 3d 28 1e 47 aa 8c 64 42 8c 05 e4 21 37 85 56 42 c4 6f 8b be 32 4a 33 46 6b 3d 4b ed 4c e0 07 4c 6c 23 05 60 1c 07 18 63 b0 bf bf 8f 45 b7 98 d2 e7 33 75 a8 d1 bf 4e 50 8a 37 d2 b3 cd 7c cf 8e 8d 00 28 de b9 6d a7 2f de 99 19 cd 35 73 fd fe 19 46 a9 e6 06 d6 b3 10 22 7e 3d 92 84 d6 66 22 7c 88 16 57 03 67 9d a4 c5 46 63 b5 e8 a4 d1 67 0d 72 4e 18 c6 11 99 19 ca 08 9a 2d 85 00 cd 80 06 17 17 8a f9 fd 4b 39 63 18 46 77 72 72 72 ef e9 76 f3 0a ef c3 dd 3f f4 9d df ad bf f6 5b fe 26 56 7b dd 79 6f b3 db 66 3d e7 02 78 b5 30 78 c5 13 6f c6 d6 8f 6d 8c e9 81 14 d3 dd d1 47 9b 72 2e 4e 0b 51 46 16 c6 c0 3a 5b 66 9e 52 9f 6a 2b Data Ascii: W?t[Z><8o[@_Zkn\|mV=(GdB!7VBo2J3Fk=KLLl#`cE3uNP7\|(m/5sF"~=f"\|WgFcgrN-K9cFwrrrv?[&V{yof=x0xomGr.NQF:[fRj+
2024-07-04 20:55:37 UTC	7116	IN	Data Raw: 18 32 16 d2 06 3a 93 38 0b 14 04 95 62 55 c0 0f e2 59 4b 85 9b ab 95 d4 af e2 3a 50 9d fd 80 5d 89 8d 67 75 4f a8 8f 5d bf 62 47 34 ae 0a 0b 0c 83 c7 66 db e3 f8 74 83 be 1f 8b 31 36 61 bd 5a c3 3a 69 06 49 47 78 44 4a 09 4d e3 b0 5c 74 58 2e 96 68 1b 07 e7 da 33 e3 1f 66 40 b9 4a d3 00 c0 0c 5b 54 21 4d 71 02 d4 5a 4d 92 3d 55 8a 96 79 87 7e 98 09 99 65 02 6e 9d 85 b6 52 0e 34 6e ee c2 13 11 86 41 a4 77 63 f0 f0 61 2c c1 19 8b be b6 06 b3 88 be b7 6d 0b a3 a5 99 55 19 4b 21 0a ed 70 ca 06 a8 f6 1f c4 8d a1 52 3e 53 4e a2 af 55 18 4c 31 11 9a a2 f2 21 e9 79 83 18 93 39 dd 9c de b5 77 b0 7f df 0a 2b fb f8 82 f0 56 a5 f1 da 4f fe 1c fc d4 9b fe f9 79 6f cf 0f cb ba a3 03 f8 c6 e2 12 cc e2 09 6c d7 2b e0 14 00 b3 23 26 5b 95 1e 72 ce 60 e8 c2 fd 85 20 ac 76 Data Ascii: 2:8bUYK:P]guO]bG4ft16aZ:iIGxDJM\tX.h3f@J[T!MqZM=Uy~enR4nAwca,mUK!pR>SNUL1!y9w+VOyol+#&[r` v
2024-07-04 20:55:37 UTC	8302	IN	Data Raw: 05 9b 9e 82 57 e3 38 5a ef fd 5d e3 30 be 20 7a ba 5b 3d f8 a0 69 d3 1a 27 2f b9 78 de 5b f8 83 be ee a8 2e f4 a3 8f ee e3 e1 c7 56 6a 31 36 5a 79 0a 29 79 17 63 b8 08 a5 5a bd 63 9b 32 39 cf ef e8 62 31 66 59 9d 8a 44 42 89 eb 94 33 58 2b 68 e7 b0 da df 43 0c 1e 61 d8 4a 03 2b 8b 96 71 ae fe 4a 98 1b 55 93 81 57 fd 79 45 c9 a2 8e 37 24 e6 e6 59 e7 ad 35 b3 ac 8a a7 46 81 32 60 4a cb 27 1b 53 ec fc 1c 48 e7 9a 51 03 1b 53 30 4d a9 6d a5 46 c2 42 d5 e1 2e b3 f8 20 11 17 7c f6 7c b3 6a 08 f4 d1 39 87 45 d7 81 28 63 b3 3d 45 0a 01 60 86 b3 56 c4 f3 8a 96 b4 36 1a 13 9c e5 d7 03 2b f2 f4 d2 ca ed 7c b6 73 2e 6e 19 bc 03 3b ad 4a 99 d2 fd ce e5 fd 19 43 c6 a6 1f 71 f1 70 1f b6 69 91 b2 a8 67 52 ce d2 dc 53 0a 0a 22 35 eb 8c 11 ff 25 1f cc 30 0c 97 bb 45 fb a8 Data Ascii: W8Z]0 z[=i'/x[.Vj16Zy)ycZc29b1fYDB3X+hCaJ+qJUWyE7$Y5F2`J'SHQS0MmFB. \|\|j9E(c=E`V6+\|s.n;JCqpigRS"5%0E
2024-07-04 20:55:37 UTC	7366	IN	Data Raw: f5 ad ef a0 3c 1f a6 0c ca 22 4f 1b 52 91 cd f1 19 4f 5f bb 89 eb 47 a7 88 39 4f 31 38 4f e6 cc f4 fc 80 ca 8e 94 df 05 e5 8c 6a 56 47 99 60 9d 11 81 fa 52 d2 cc dd 6f 11 b1 cf c4 f0 e5 30 6d ac 34 fc 9c 73 e8 fb 01 4a 13 8c 6b a6 e7 2f 65 83 81 d5 5a 2b a5 f6 58 a9 0b 04 dd 99 4b 5f 38 7c cc f3 ef c5 3b df 73 67 39 a0 dd 7e 29 f4 2f 02 3f f1 c4 27 e1 42 13 ec a2 5b 36 6e e5 94 37 23 a7 14 1d 13 75 c4 d4 31 b3 93 49 4c bd 11 a8 0a 6e 60 a2 f6 15 a4 11 17 aa 5e 5d 95 cd 33 23 70 05 7c 00 c8 89 6e ca 77 0b 93 c5 4c b7 5e b5 19 d1 a5 8e ce c4 08 31 e1 78 b3 45 ef 3d 36 c3 88 6b 47 c7 38 3e dd c8 6c 35 8a 06 72 88 b1 68 42 a5 49 fd 51 08 ee d2 50 a2 22 41 b3 5b cb 63 67 bb ef da ab cc 4b 6e 3f 46 46 e6 88 cc a9 04 1a 15 3c a8 7c b0 22 64 24 64 4e 88 14 10 29 Data Ascii: <"ORO_G9O18OjVG`Ro0m4sJk/eZ+XK_8\|;sg9~)/?'B[6n7#u1ILn`^]3#p\|nwL^1xE=6kG8>l5rhBIQP"A[cgKn?FF<\|"d$dN)
2024-07-04 20:55:37 UTC	10674	IN	Data Raw: fe 4f 7e 07 de f8 8e ef c6 6b 9f 78 8a cf 7f 42 2a e7 70 e7 38 4d df b0 df 1f 7e c5 74 9c 3e 77 38 1c ef 2f cb a2 bc a3 a6 94 54 92 1f d4 53 09 54 ed 75 d3 34 a1 eb 2c c6 61 40 f0 9e 4e 47 a5 e1 83 87 36 74 42 a4 44 23 97 9c 33 86 61 40 cf 25 74 55 41 d5 c5 59 1b 63 d5 a2 08 a0 9d 5e 52 4a 74 7d df 16 c8 ba ae 30 c6 b2 95 91 5d 3f 7c 72 a4 a6 d3 2e a7 60 71 9e 1d a7 18 50 72 6a e6 87 4a b1 a4 cd c1 c0 18 4b 42 05 7e 70 7f 7a 0c ea 79 a3 8b 24 9f a4 0b d6 1c b2 ad a4 6a 4c 65 55 95 5a 4a 41 32 f8 4f 69 4d 24 0b 43 7f 17 95 e7 aa 81 f9 a4 a8 a7 be e0 d2 be 54 39 36 67 16 2b 08 a9 01 21 91 a0 e0 0b 30 fb 88 79 0d 88 a9 20 05 92 6e 86 9c e1 b9 2c 6f 37 61 3e 69 4f 5f 27 21 65 23 77 e6 ea 34 52 6d b3 aa 0b be 96 f1 54 39 49 32 88 68 49 ba e7 52 da 24 41 f1 46 Data Ascii: O~kxB*p8M~t>w8/TSTu4,a@NG6tBD#3a@%tUAYc^RJt}0]?\|r.`qPrjJKB~pzy$jLeUZJA2OiM$CT96g+!0y n,o7a>iO_'!e#w4RmT9I2hIR$AF
2024-07-04 20:55:37 UTC	11860	IN	Data Raw: 50 da 22 17 60 5d 16 ac c7 19 97 97 1a c6 5a 38 7f 44 ca 64 43 cc d0 b0 d6 60 75 8e ec 9f 99 9a 8c 7d df 9f 4e e2 9c 80 44 a2 16 82 07 64 b8 c5 21 74 1e 43 37 c0 6a 4d 42 21 4e 8f 70 5c 09 65 ab 55 d7 8f 2f 3f 78 f0 f2 b7 7b 1f 7e 3c b8 f9 fd fc d7 bf 7a fd 67 bf e5 35 fc 6c 96 b0 ba b5 97 f8 1f fc 2b bf 1e dd ef fe bf 88 af 3c 7e e7 f2 c9 93 27 9f 3e 4e cb f7 5c dd bd ff 1d 1f fd d8 c7 df fc f0 6b 6f 5c ee ae ee 76 d2 74 32 26 3a bd ea 10 1c a0 a6 4e df 77 d4 95 63 32 81 e6 18 8f d5 11 8c ae b3 06 5a 02 d7 ef bf 8b f7 ff d6 4f 42 fa 80 24 80 c7 d3 11 cf 97 05 49 69 14 45 52 c4 ce 74 18 87 81 ca 3b f6 72 26 36 77 5b 43 d8 14 12 64 28 58 ad 90 33 9d 64 86 09 94 15 78 06 e6 53 39 ce c8 f5 ac 07 06 7f 3f 14 40 2b 09 6b c9 0f 5a 5f 7b d7 f5 24 2a 99 a6 26 95 Data Ascii: P"`]Z8DdC`u}NDd!tC7jMB!Np\eU/?x{~<zg5l+<~'>N\ko\vt2&:Nwc2ZOB$IiERt;r&6w[Cd(X3dxS9?@+kZ_{$*&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	64655	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDcvNzRhYzA0M2MtYmI1MS00ZWYwLTllNGItMDgzOWJiMDg1NjMwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=e2973f1666078d3c HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	627	IN	HTTP/1.1 200 OK Age: 1915132 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 104364 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:45 GMT Etag: "e157634bac7477aec863185df0d584ad6ef990e5" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 98e03882746a156be24f919d7bb2ec56faf7fcc4 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 55338d34-1ceb-429d-981a-44f95dca0763 X-Runtime: 0.521287 Connection: close
2024-07-04 20:55:37 UTC	559	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2f 93 68 57 de 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME/hWzTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: a5 d7 8d 38 4d 6f fe 06 9c 96 b9 ef 5d e6 46 4e ff 00 88 13 00 ff 0c 31 73 c2 00 00 80 00 49 44 41 54 78 da ec fd 77 98 a5 db 55 df 89 7f 76 7a d3 09 15 3a 77 df be 59 59 48 98 2c 92 10 22 a7 01 63 b0 0d 0e c0 3c 1e 0c 36 8c 71 c0 04 1b 83 09 36 18 8f 70 1c 1b a7 31 d8 c2 71 7e b6 8c 09 c2 98 9c 05 16 42 42 f1 ea a6 be 9d bb aa 4e 7c c3 4e f3 c7 de e7 74 8b 31 f3 03 c4 f3 54 4b aa d5 4f 3d 5d 5d 5d 75 ea 54 9d 77 bd 6b ed b5 be 41 70 12 bf a3 f8 1b af f9 3b 7c fd d7 fc ef fc d9 af f9 ea 8f 78 ee e9 67 bf 57 09 5e 3e 3b 38 88 a6 aa 18 8f c6 62 bd 5c 30 b4 2b a2 ed 89 31 22 04 0c 5d 8b f7 1e eb 3d 65 55 32 0c 96 88 60 36 9b 51 56 05 5d db d1 75 1e 29 61 77 77 87 a6 2e 08 21 b0 58 ae 11 42 d0 75 1d e3 f1 98 51 d3 30 9f cd 59 2c 16 8c 46 23 42 08 c4 18 d0 52 Data Ascii: 8Mo]FN1sIDATxwUvz:wYYH,"c<6q6p1q~BBN\|Nt1TKO=]]]uTwkAp;\|xgW^>;8b\0+1"]=eU2`6QV]u)aww.!XBuQ0Y,F#BR
2024-07-04 20:55:37 UTC	538	IN	Data Raw: 7f 9f d1 68 44 55 57 54 65 85 56 3a 57 52 43 55 96 db c4 d7 4a 61 f2 34 5a 6a 85 cc 03 24 ad d4 f6 6b 36 ab 25 21 04 46 49 b4 90 20 c0 98 32 9f 7d 25 42 a6 a9 76 4a 76 40 49 b4 d1 08 04 e4 5d ef a6 ca 3b 1f 52 b7 20 23 ce d9 04 b8 88 31 03 30 2c 7d df b3 5e ad e8 d6 2d c3 30 e0 bc 4f 1f 6b 5b 66 f3 39 47 47 07 1c cc 8e b8 7e eb 0e 07 b3 25 9d 0d 69 95 a5 75 fa 9e b9 1a 77 43 3a ff 0a 24 91 34 d0 83 88 52 92 d2 28 bc 73 74 c3 80 0b 69 e0 17 f2 8d 69 6f 77 d7 9d bf 78 f9 bf 3e f4 fc 17 7e fd 3f fe de 7f fa d6 7f fe 7d ff 92 2f fb 13 7f f2 b8 2f 91 fb 2a 4e a6 d0 f7 c4 b7 fc 8d ef e4 5b be e1 eb f8 c8 57 bc e2 f2 e1 ed 9b 7f f8 e0 e6 b5 cf bb 79 ed ea cb 67 47 47 63 6b ad f0 ce d3 75 3d dd 30 80 96 e8 a2 20 78 9f 91 46 02 2d 15 4a a5 d6 b1 2e 4b ce 9e 3d c3 Data Ascii: hDUWTeV:WRCUJa4Zj$k6%!FI 2}%BvJv@I];R #10,}^-0Ok[f9GG~%iuwC:$4R(stiiowx>~?}//*N[WygGGcku=0 xF-J.K=
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: 21 91 a6 b4 7a 3b b5 4e 55 15 40 aa 54 99 95 52 a9 6a 4b 95 f6 b8 c6 20 89 a9 7d 17 a9 4d 06 b6 15 70 83 b2 22 83 28 84 20 fd 9b cd ba 36 7d 3c e4 76 42 e4 c7 d6 52 53 e8 82 d0 78 bc 4f 48 b1 10 22 93 e9 94 75 db d2 ae c7 4c 26 53 9a d1 18 53 1a b4 7e 8a 9b 77 66 cc d7 3d 5d 37 50 16 26 7d af 5c 51 8d d1 28 9d 40 28 1e 83 f7 1e ef 42 6a a1 ad c5 18 8d 31 45 06 8d 04 fa 61 10 9d 75 cf 8c a6 3b b7 56 8b a3 8f 7f c9 07 bd ec 75 57 ae 5f 1d 8e fb 5a b9 9f e2 a4 02 93 2e f0 5f fe 95 37 70 e9 85 2f 95 77 ae 3c f5 e1 77 6e 5c fd e2 9b d7 ae 7d c4 62 be 18 b5 6d 2b a4 94 34 4d 93 aa 5c 99 a6 c9 eb e5 8a 6e bd 42 e4 15 91 cc 55 cd 14 86 c9 78 c4 43 0f 3e c8 99 b3 e7 69 46 3b 98 a2 4c 5f 6b 8a b4 46 d2 8a d2 14 18 9d 76 ae 4a 88 b4 1f 96 f9 22 97 32 57 72 b5 05 82 Data Ascii: !z;NU@TRjK }Mp"( 6}<vBRSxOH"uL&SS~wf=]7P&}\Q(@(Bj1Eau;VuW_Z._7p/w<wn\}bm+4M\nBUxC>iF;L_kFvJ"2Wr
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: 90 ba 69 b2 f1 5b 77 a6 b4 ee 51 ef 43 51 94 85 73 de cf 4d 55 fd f8 64 77 ef 66 bb 9a b3 8a 27 68 ca 93 16 9a af 22 84 8e 2b b3 28 63 0c fb 65 51 1a a9 15 3e b8 ec e7 03 55 59 50 95 e5 16 fe 08 77 77 b3 de a7 a4 75 71 b3 3a da 00 2c e2 96 2f fc 1e 50 c9 e0 f1 22 26 02 83 cc 15 32 ba 54 bd 36 40 8a f4 0d d8 0c b8 36 38 69 62 7e dc e0 b7 e7 ec 94 e8 31 99 9e e5 95 14 31 6c 5b f9 ed f3 95 92 28 55 06 69 28 50 7a 9b 94 db 49 72 46 71 21 12 3a 2d 69 03 44 44 0c 88 18 b6 a2 78 70 f7 28 b0 d1 bf 16 59 15 04 1f b2 e0 40 24 7a 97 2a b4 77 c8 18 30 46 e2 bc 05 91 5a f7 c5 6a 85 73 99 a9 64 34 88 b0 25 54 68 a3 51 82 66 79 78 f0 d2 f5 7a 79 26 46 d7 38 c2 5b ea c9 de 0f fd e0 7f fa c1 56 28 cd 8f bd ee 3f 1d f7 c5 73 ec 71 52 81 f9 3a 42 fc 7b fc f7 d7 ff b0 1a ac Data Ascii: i[wQCQsMUdwf'h"+(ceQ>UYPwwuq:,/P"&2T6@68ib~11l[(Ui(PzIrFq!:-iDDxp(Y@$z*w0FZjsd4%ThQfyxzy&F8[V(?sqR:B{
2024-07-04 20:55:37 UTC	7116	IN	Data Raw: 89 52 9a 52 29 94 10 49 51 c3 d9 2c f1 e3 09 31 26 ee 31 69 a5 64 a4 4e f4 40 21 e8 7a cb ea 68 ce 90 57 5e 5a 6b 5c 8c 30 f4 20 13 23 4a 8f 2a 74 55 a3 8a 0a a9 0b a4 d6 a8 42 a0 88 49 7d 24 7a a4 8a c8 d2 40 59 50 29 89 77 16 01 68 25 d1 46 27 be 71 70 f7 48 06 c9 ed 4a 69 3c 1e 53 95 15 b6 0f c8 28 10 2e 60 62 44 e2 a1 90 28 ad f0 2a a0 47 63 fc 6a 89 44 d5 28 79 fa 91 f3 17 18 6e 9e d4 df 7b e3 24 81 ef 09 67 a7 08 21 f8 ca 4f 79 a5 57 52 c6 66 3c 12 c6 e8 ac e5 9c 50 4e 02 81 16 91 bd c9 24 f1 81 85 42 18 8d 68 0a 4a 3d 45 86 64 13 1a b5 46 15 05 d3 a9 c4 47 cf d0 b7 8c eb 8a f1 64 42 51 36 48 5d e5 33 a3 c1 48 99 c4 e0 45 e2 16 8b b0 d9 29 43 70 09 dd 95 84 de 22 dd e0 08 01 9a ba 62 54 55 14 46 e3 01 77 0f d9 3f 49 ee 40 14 11 61 34 52 80 21 60 bd Data Ascii: RR)IQ,1&1idN@!zhW^Zk\0 #JtUBI}$z@YP)wh%F'qpHJi<S(.`bD(GcjD(yn{$g!OyWRf<PN$BhJ=EdFGdBQ6H]3HE)Cp"bTUFw?I@a4R!`
2024-07-04 20:55:37 UTC	8302	IN	Data Raw: 8c d0 31 26 e1 f7 b2 40 1b 4d 2b 15 65 51 12 6c c0 97 9e 18 24 c2 46 ea ba 62 ba bf 43 a1 0a f4 3a 12 75 c4 37 82 7e d1 e3 fa 43 90 09 97 0c 09 72 e9 7d 96 c0 f5 01 29 57 04 ef e9 fa 81 db 8b 05 b7 d6 0b da f5 8a 4a 49 aa 42 d0 54 c9 1a 26 6c 14 2c 33 d2 ac a8 34 32 b7 e6 2e c6 ed 20 cf 98 22 4d b6 33 90 45 88 c0 7a bd a0 5f cf 91 92 05 b2 78 5b 1f e2 52 f4 96 67 9e 7d e6 b8 5f d2 f7 e9 38 49 e0 df 65 fc a3 7f f2 bd fc e5 af fd 1a ea d1 68 b0 31 5e 95 4a 06 6d 94 74 4e 90 e4 35 62 d6 4d 16 89 40 10 12 6f d6 e4 bd ea c8 0d 28 11 69 ea 9a f1 a8 a2 69 6a a4 50 cc 8f 56 14 41 21 7a 4b d7 77 2c bb 16 19 23 d3 a2 40 22 a9 4a cd ce 99 09 ed ac 63 58 f7 cc ad 67 a8 2c d6 7a 5c 37 30 ad 1a 18 3c 4d 5d e1 4c 89 a9 48 f8 62 1f b2 66 16 0c b6 23 48 47 18 12 20 a4 3a Data Ascii: 1&@M+eQl$FbC:u7~Cr})WJIBT&l,342. "M3Ez_x[Rg}_8Ieh1^JmtN5bM@o(iijPVA!zKw,#@"JcXg,z\70<M]LHbf#HG :
2024-07-04 20:55:37 UTC	7366	IN	Data Raw: 59 f7 7d 74 57 df dd 73 f6 cc 60 80 19 0c 80 05 16 8b 25 b8 5c 12 b4 b8 61 8a b6 29 da 5c 1e 0a 4b 8a 10 45 89 a4 b4 a2 18 2b 8a b6 2c 07 6d 5a 36 23 1c b2 45 91 cb 25 89 c5 b9 c0 00 98 fb ea 99 e9 bb eb be 2b ef 3b df 37 df fb f5 1f 59 dd d8 0d f9 88 20 77 77 d6 fa 45 54 64 65 47 45 56 76 77 7d eb f9 3d cf f3 3d 3e 8f d9 19 30 6c 77 f9 e8 77 be c7 cc 85 8b b4 8e 0e 69 9f d6 10 45 91 4e 69 0c 35 1a 65 50 6b 10 95 55 9a c3 26 be ae 93 4c a5 05 bb db 95 ea 8d 66 7a 50 6b bc 20 47 f4 c9 e4 44 7e fe 39 55 fa 1f 8c b4 7b ff 9f fd e3 7f e6 7c d0 dd e6 ef fd 95 ff e0 b3 fe 31 fd 63 71 fe d8 00 f8 af fc c6 df a5 e8 82 15 06 62 bb 7c 9c 89 27 72 53 72 a8 5c 39 3d 3c fc 13 43 c7 9b cc cc ce 2a 6d b3 bf 58 6b d6 34 35 93 22 aa e8 44 12 49 62 5a 04 23 2b 62 2b 12 c3 Data Ascii: Y}tWs`%\a)\KE+,mZ6#E%+;7Y wwETdeGEVvw}==>0lwwiENi5ePkU&LfzPk GD~9U{\|1cqb\|'rSr\9=<C*mXk45"DIbZ#+b+
2024-07-04 20:55:37 UTC	10674	IN	Data Raw: 9d 0f df a7 b6 7b c0 c2 53 4f f1 ec 9f f8 2a fd 46 85 5b ff fd 6f a1 ca 11 c6 ce ad 91 5e 98 a6 30 31 ce d1 dd 3b 7c fc a3 d7 19 fa 21 f1 4c 86 48 2a c3 c2 d5 4b 1c 7c f4 3e 0f 7f fa 26 6a 2c 4e e9 fc 2a c9 e2 18 aa 2a 53 db dd 27 5e 28 89 4b cf dd 88 2b a2 34 8f ed 26 67 3b f6 83 5f d7 fe fd e6 7f f3 85 df e4 bb 3f fc de 67 8d c3 3f 1a 00 bf fc 0f fe 03 ae fa 79 9c 98 ac 0a ed ee ab 92 e9 fe 7a 32 99 9e 36 1b 4d 61 68 0c 88 8f 17 19 34 1b 84 84 e8 f1 38 47 bb 5b 9c 1e 1f a0 a4 d3 84 8a 42 28 4b f4 4d 03 27 f0 49 97 26 89 25 53 8c 2f 2e 32 b1 b8 42 bb d3 e4 e4 e4 80 20 08 68 9c 96 39 da 7e 84 33 34 f0 6d 8b ca ee 36 bd 5a 1d 3d 16 c3 76 2c 86 43 93 f1 d9 79 c6 67 e6 47 3e c7 b1 18 13 33 f3 68 3e f4 5b 0d aa a7 c7 ec 6f 3d c4 30 7b 44 e3 49 fa bd de c8 03 Data Ascii: {SOF[o^01;\|!LHK\|>&j,N**S'^(K+4&g;_?g?yz26Mah48G[B(KM'I&%S/.2B h9~34m6Z=v,CygG>3h>[o=0{DI
2024-07-04 20:55:37 UTC	11860	IN	Data Raw: 66 2f 9e 67 e3 c3 f7 d8 7c fb 1d fa cd 36 c5 85 45 ae 7c e9 55 c6 17 e6 f0 91 c8 4c cd 52 5a 59 65 68 0f c9 a6 13 88 42 c8 f4 da 79 ae 7c ee 45 b4 88 82 17 8a 24 73 19 8e ef dd 66 eb ed f7 90 b5 28 e9 52 9e 66 f9 04 2d 12 67 ed b9 a7 49 17 72 44 d3 39 d6 6f be 40 a2 90 27 33 31 c1 ca 33 cf 12 8b ea dc fb f1 ef 32 68 77 c9 4d 8d e3 0b 02 99 b9 79 4a 8b cb 94 f7 b6 d8 be 7d 9b 4e b3 41 fd f8 90 7b ef bd cb f1 c1 01 bd 56 9b 89 7c 91 a9 e9 69 52 13 e3 4c 3f 75 8d e2 dc 3c 47 1f df e2 d6 ef 7c 17 d7 f5 b8 fa ca 17 58 b8 72 89 44 a9 c8 cc a5 0b 44 c7 0b cc 5d bd 82 22 c2 07 bf f5 db dc ff d9 9b 24 27 66 78 e6 57 fe 04 e3 e7 57 50 a3 1a 93 0b f3 34 8f 8e 38 fa f0 23 ac 6a 9d d3 3b 0f 38 7a b4 49 7a 66 96 f9 1b 97 11 86 0e c7 1b 1b 74 4f aa e0 78 42 10 84 d3 82 Data Ascii: f/g\|6E\|ULRZYehBy\|E$sf(Rf-gIrD9o@'3132hwMyJ}NA{V\|iRL?u<G\|XrDD]"$'fxWWP48#j;8zIzftOxB

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	64652	52.89.243.208	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTQvMTVjZmY1MmYtYmUzMy00MzA3LWJiYWUtZjkzYmVjZDVmYmI1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=a157f78ed1fbb052 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1992383 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 76570 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:14 GMT Etag: "042a17fadac2c5244c9f6b7835203a36f75d5aee" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 950f393136f750ef704beef95a7fea8872b464d7 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 8428cf72-57e8-4223-9b63-378bd8cad17b X-Runtime: 0.072324 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 36 f7 03 ff 1e 00 00 80 00 49 44 41 54 78 da ec fd e9 af 6d 69 7a 1f 86 fd 9e 77 5a 6b ed bd cf 70 cf 9d eb d6 ad b1 bb aa 47 8a 4d 8a 14 25 8a 30 a5 48 90 21 c9 8c 93 c0 19 e0 38 0e 60 24 40 90 2f f9 03 04 44 1f 02 04 c9 97 7c c9 64 2b 4e 10 04 49 24 c0 82 83 d8 8e 13 c5 72 22 29 b2 28 53 06 45 36 bb 9b cd ae ae a1 ab 6e dd e1 8c 7b 5a c3 3b 3d f9 f0 bc 6b ed 7d aa 9b 14 bb 59 d5 55 d5 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME6IDATxmizwZkpGM%0H!8`$@/D\|d+NI$r")(SE6n{Z;=k}YU
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: af 31 33 b4 52 68 9a 86 b5 d6 9c 73 56 f3 f9 2c 1a 67 bb c5 62 f1 fd 9b 37 4f de 7e fa f4 d9 57 08 68 ad b5 eb 18 d3 89 d2 da d7 4d 73 61 ac 5d d7 cd 6c 75 70 78 f0 7e 55 57 57 29 a5 26 a7 34 03 01 55 e5 be 73 74 7c fc f7 5f 7d f1 a5 47 5f 38 b9 99 f0 29 0e ba 0f f3 7c 1e c0 3f 1b 87 7f f7 07 6f bb b3 cb e5 0b d1 87 7b ce b9 6d 5d 57 ed 7a bd be ff ec d9 b3 af 5f 9d 9d 7d e9 e9 93 c7 5f b9 ba 5a de 5b 2e 2f ef 6e b7 9b 45 df 75 06 99 48 91 86 36 16 ca 68 80 19 cb e5 15 52 4a 00 11 40 04 63 0c b4 d2 50 44 70 d6 02 4a a1 1f 7a 00 04 e7 1c 8c 31 50 4a c3 1a 87 cc 09 20 c0 5a 0b a5 14 52 4e 50 4a 41 1b 03 ad 15 ac b5 f1 e8 e8 e8 2c 0c 7e d1 75 5d ed 83 4f 5a 9b 08 10 8c 35 50 46 73 5d d7 eb 83 c3 c3 b7 6e de bc f9 46 55 d7 eb a6 69 2e 39 e7 a6 ef da 17 95 52 Data Ascii: 13RhsV,gb7O~WhMsa]lupx~UWW)&4Ust\|_}G_8)\|?o{m]Wz_}_Z[./nEuH6hRJ@cPDpJz1PJ ZRNPJA,~u]OZ5PFs]nFUi.9R
2024-07-04 20:55:37 UTC	538	IN	Data Raw: df 7a f9 cd 37 df fc ab 6d bb fd 45 e7 1c af 96 cb c5 e5 c5 c5 cd ed 66 ab c7 15 10 97 41 d5 38 28 da 9f f8 8e 41 06 c8 e0 a9 aa 2a 1c 1e 1c a0 aa 1b d9 d9 c6 84 6e e8 b1 69 b7 08 65 bd a4 20 d9 f9 f0 e0 10 f3 f9 4c 40 17 00 14 20 ec a4 94 91 65 37 05 00 bb 95 53 e9 b5 c7 3d f2 98 8d a7 69 b3 0f e0 9c 81 b2 5f 06 00 30 23 e6 0c 4d 84 94 33 72 79 3d 12 b4 82 a5 16 68 a5 80 3f f6 fb f6 f1 c6 31 a2 c3 52 4a d3 e7 9a a6 c1 b6 6d 9b b7 df 7a eb d7 e7 b3 d9 5b bf fa 2f fd da bf 9f 72 9e 85 18 4e 1e 5f 5e b5 b7 0f 0e 86 8f fb 77 fe 61 9e cf 03 f8 63 3c 9e 19 cf 2e 2e e6 6d db bd 40 8a d2 a2 6e 96 db b6 3d fc de ef ff fe 9f 7d fc de 7b ff e5 10 e2 0b 4d 53 5f 2e 2f 97 77 9f 3c 7e f2 70 bb d9 56 99 59 2e f8 b1 ef 2d 17 3d 80 29 70 63 8c d3 60 ca 5a 8b 83 c3 03 34 Data Ascii: z7mEfA8(A*nie L@ e7S=i_0#M3ry=h?1RJmz[/rN_^wac<..m@n=}{MS_./w<~pVY.-=)pc`Z4
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: 19 40 c4 c1 bc 01 69 87 61 88 c8 89 31 c4 04 55 40 25 e3 4d 64 9c 66 ef b7 08 3e 04 20 45 d4 d4 c0 2a 85 ca 18 70 4e 20 d6 98 d5 73 f4 dd f0 ca f7 bf f7 c6 5f 7d f0 fc f3 4f dc ac b9 da 6c b7 0f df 57 c6 df bf 71 63 f3 71 ff ee 3f ac f3 69 0b e0 4f 1a f9 fa 27 25 90 e3 5b 8f 1e db ed b6 7d c0 c0 ac 72 6e f5 f6 9b 6f be f8 e8 bd f7 fe 5a 88 f1 a1 d5 66 18 bc 5f ac 96 ab 93 67 cf 9e bd ba 5e ad 16 63 9f 99 38 ef b2 4f c9 4e 23 2c 32 94 1e d6 39 87 e3 e3 63 cc 66 33 c4 94 10 86 1e 43 c9 d6 9c 24 c8 b4 36 98 cf 67 d7 50 53 5a ed c8 04 b4 0f 89 54 34 65 bd 09 6e c9 5c 20 9a 52 c6 ea 42 2b dc ad a9 24 0b 13 00 e2 2c a0 10 ad a1 09 42 2d 34 04 ed 2c 9a aa c1 ac 76 88 49 32 f1 10 23 b0 ed 11 b2 b4 02 e3 30 6c 9c 5e 8f cc a8 5c ca ee 58 2a 91 b1 ff 57 a4 26 e4 58 Data Ascii: @ia1U@%Mdf> EpN s_}OlWqcq?iO'%[}rnoZf_g^c8ON#,29cf3C$6gPSZT4en\ RB+$,B-4,vI2#0l^\XW&X
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: 75 09 ba dc c4 22 92 f0 7e e3 58 65 68 b1 2b 55 82 c8 92 21 17 c1 59 87 18 13 fa 61 80 b5 ba 00 5f 04 b4 d2 77 1d 9c b5 38 38 38 00 00 ac da 2d 42 1f c1 19 70 d6 e8 e5 95 fe e2 a3 f7 1e 3d ab 67 cd c5 7a bd fa e2 69 dd 5c 3d 38 3a 58 e3 53 30 cc fa 3c 80 7f c4 b9 68 5b bc 79 75 a5 00 90 25 50 68 7b 97 52 3e 32 d6 5e bd f6 dc 73 dd a3 f3 33 f5 68 95 f1 ea 8d 1b f8 7b ff f8 1f 3f ff ce 5b 6f fd b7 db be fb d3 87 47 47 bf 7b f7 ce bd df 61 b0 7b fa e4 c9 37 4e cf ce 7e 6e bd 5e 3f 0c 3e 34 db ed 06 ed b6 15 17 7b a5 c1 29 23 01 85 41 c3 48 b1 f4 98 42 c4 13 b8 20 4b bf 67 9d 83 2b e8 2a 94 b5 4f 8c 11 a4 e4 a2 cf 45 ec cd 39 d9 89 a6 18 d1 7a 8f e4 c5 5b c8 94 1b c0 88 7c ea 87 1e 9c 19 d1 7b 10 e7 52 ee 2a 64 45 60 ad 91 52 44 4e 11 95 b3 50 1a 00 27 cc 6b Data Ascii: u"~Xeh+U!Ya_w888-Bp=gzi\=8:XS0<h[yu%Ph{R>2^s3h{?[oGG{a{7N~n^?>4{)#AHB Kg+OE9z[\|{RdE`RDNP'k
2024-07-04 20:55:37 UTC	7116	IN	Data Raw: 3d 64 44 4b 4b bd 2d fa 56 32 15 2b 24 05 11 e9 1b 7b 6a 02 43 11 e0 b4 81 b5 1a 95 51 d2 1f 6b 82 d3 04 03 e9 95 15 32 50 4c c1 05 6d 25 3f 3f 86 50 5c 1d 12 b4 35 20 45 e8 fa 0e 5d d7 4d a0 94 a1 1f 10 7d 04 27 96 7d 72 71 a0 80 02 0e 0f 0f a7 7e 38 c7 08 df 75 18 ba 1e f3 a6 81 33 16 be 1f 60 b4 46 08 09 29 01 9b d5 f6 e6 fa 72 75 0f 89 4f 7c ef 6f c4 98 6e 3d 39 bf bc f1 71 5f c3 c0 67 38 80 df 5f 6d 28 e5 54 91 56 c1 55 ee 9a f6 d1 db 17 17 3a 71 ae 99 a0 48 0b b6 6f b3 5e df 7e fa fe e3 3f d3 77 dd 03 57 55 d4 cc 1a 30 67 44 ef a1 48 14 17 13 32 e2 a4 9f 9c 40 45 27 66 04 66 8c 04 80 eb ea 8f a2 26 31 06 ef c8 f9 15 ca 61 07 e4 d1 23 88 c5 5b b7 72 98 5b 83 5a 03 56 a1 94 ce 54 32 a9 94 aa ae 94 ab 52 32 2b 68 0d 09 60 43 30 46 a6 ca 63 26 56 1f 28 Data Ascii: =dDKK-V2+${jCQk2PLm%??P\5 E]M}'}rq~8u3`F)ruO\|on=9q_g8_m(TVU:qHo^~?wWU0gDH2@E'ff&1a#[r[ZVT2R2+h`C0Fc&V(
2024-07-04 20:55:37 UTC	8302	IN	Data Raw: 97 6b 9c f7 1e 4f 97 1d ee 1c 2f f0 dc cd 05 ee 1d 2f 70 67 5e 61 ae 59 fa 49 f1 f3 81 d2 b4 13 d2 43 16 63 ed 82 a5 dc 0f de 6b 59 78 2f a0 99 f6 3e 47 bb 1d 2d ca 2e b6 7c 75 1a 92 89 fe 15 4d c1 3b a2 ae 98 08 1e 84 2e 64 ac 87 88 65 37 e0 7c b5 c5 6a db a1 f7 22 5a 97 99 30 0c 11 29 06 90 82 a8 8d 68 a0 f7 1e 5d 5f e3 d6 bc c6 51 e3 60 ca 04 3b 33 4f 7b f7 ac b2 c8 f6 30 21 19 e0 a0 26 dc 48 16 67 43 8d 8d 0f 70 d6 c2 1a 83 94 22 52 d6 f0 c1 23 27 40 1b 03 51 50 d1 05 df 2e 19 7e 3f 13 d7 55 0d 4d 4a ac 73 62 44 d6 2c ce 17 c6 a0 aa 6b ae c5 82 b4 4a 21 36 3e 24 eb 63 aa 98 29 21 13 52 4c 0e 0a 39 87 ac b5 56 21 28 ca 40 fe d0 ab d2 cf 54 00 67 00 ac 0d 87 ae 37 ab ab ab 57 13 b3 5b 1c 1d 7c f7 e8 f0 e8 9d a1 1f 8e ce 4e cf 5e 5b 5e 5d bd 12 7d ac 08 Data Ascii: kO//pg^aYICckYx/>G-.\|uM;.de7\|j"Z0)h]_Q`;3O{0!&HgCp"R#'@QP.~?UMJsbD,kJ!6>$c)!RL9V!(@Tg7W[\|N^[^]}
2024-07-04 20:55:37 UTC	7366	IN	Data Raw: 0b c2 4b 71 46 6d 14 2a 4d a5 ef 1d 89 0c e5 b9 72 de 3d 3f ce 53 0b 30 52 fc 8a 1d 6c 41 98 70 f9 3d 0a 5e ea a0 ae a5 aa d2 7a 5a 11 69 a5 b0 5a 77 78 7a 76 85 6d 3f c8 50 4e 11 8a 35 8a ec 9a b1 0b de 91 d8 60 ac 81 b5 36 5b 63 37 39 e7 0a 00 31 67 93 72 aa 74 d6 76 08 7e 1e 43 b8 e1 ac fd ee 5f ff cb 7f 39 e1 23 ea 7f 81 8f 31 80 bf f1 2f 78 55 35 80 5f 86 4c 97 ff ae 7a 09 ed 2f fc af 01 fc 6f 01 fc ff 00 dc 84 6c 7f 7b 00 0d 24 23 b7 c0 e9 ff 0c 5f f8 e6 0d 17 d9 de 4d 39 1f 91 a2 3a 84 70 3f e7 3c 1b 5d ea 94 12 22 c0 18 90 a3 75 0a 98 8a fc 8c 00 ee c7 bb fb 18 bc a3 82 3f b0 73 21 18 83 bc 6d 5b 91 33 ad 64 c9 ef 07 2f 2b 8c d2 4f 57 ae 86 b3 06 8c 0c 2e 94 c1 0c c9 70 9a 00 82 64 76 a3 84 a4 5f c9 05 22 98 e6 9c 25 13 69 e1 b7 56 c6 a0 aa 0c ac Data Ascii: KqFm*Mr=?S0RlAp=^zZiZwxzvm?PN5`6[c791grtv~C_9#1/xU5_Lz/ol{$#_M9:p?<]"u?s!m[3d/+OW.pdv_"%iV
2024-07-04 20:55:37 UTC	10674	IN	Data Raw: 77 ff f9 3f 73 32 8e e3 ab fa 7e fc 7d 29 a5 17 05 ef 7d 2e 19 db 8b 2d 76 bb 5d a5 fb 4d 53 44 1b 9a 0a 7f bb 8c 01 2e f5 04 26 f9 10 f3 42 22 d4 07 8f 22 25 f2 12 43 ac a8 ab 22 70 3d a5 dc 39 6b 91 73 42 68 da 85 76 d4 65 56 53 10 c7 fb 94 32 63 ab 7d 40 df f7 b2 e6 21 0c e3 88 98 99 54 31 8e 13 a6 dc 62 20 c2 98 09 93 1a 6f 93 82 f2 8d 24 a5 99 1f ac ff 45 29 2c 5d 6b 94 2b ab 45 85 01 1c d8 cb 48 be 3f a6 8c 7e 98 70 b1 1b 10 53 86 73 01 77 4b d6 e4 32 dd 30 5f 59 14 e5 a6 98 70 fb d6 19 4e 4f cf 70 76 76 0e e3 0c ee b9 fb 2e dc 7b f7 5d d8 6c 78 f7 0d eb 65 f5 24 df 4f 2a d2 47 55 00 8b b3 74 62 9c 73 cd c8 56 fa 55 83 ea 61 a4 2c 23 95 89 4d f9 92 f8 5e a1 0c 32 5c a6 67 21 5e a8 4a 26 83 d7 58 fb fa ec 30 e0 b5 bf f4 30 de 7e 73 8f e8 3c 8c d8 a2 Data Ascii: w?s2~})}.-v]MSD.&B""%C"p=9ksBhveVS2c}@!T1b o$E),]k+EH?~pSswK20_YpNOpvv.{]lxe$O*GUtbsVUa,#M^2\g!^J&X00~s<
2024-07-04 20:55:37 UTC	11860	IN	Data Raw: 66 5e a3 6a 93 f3 af 5c d4 90 8c 90 b2 41 26 8b 29 03 e7 fd 84 87 6f ed f0 a6 87 6e e2 1d 8f 9d a1 84 0e 63 1a 50 0a e1 da b5 6b 38 39 b9 c2 53 f7 81 4d e0 d8 31 23 21 c5 54 39 cc d6 59 ac db 35 e0 19 f2 f8 e4 93 4f f2 3a 70 1c 61 00 4c 29 61 1a 27 ac d4 0f 38 f3 fa ce 38 76 b5 f0 46 5a 06 e7 d0 36 8d a8 85 da ea 4a a8 9f 7d 08 be 3f 3e de bc e6 e9 f7 df f7 ed cf 7a e6 33 7e ec ef 7e c7 5f db e6 fb 5f 61 7e db 9f fe 46 3c 63 b5 7e aa 63 f7 03 0f e0 33 00 5f 23 bf 37 00 f6 48 c0 13 2d f0 37 b7 97 82 17 00 be f4 2b 7e a7 6d db e6 a4 10 ad 9c 31 93 95 87 62 88 8d 99 81 11 5a 6a b2 db 42 3b 67 44 03 34 a1 81 33 0e b0 b3 dc 8d 06 8f 55 22 02 04 7e 47 54 95 1a 2b 76 19 6c cb 99 84 e4 6f 0d 43 0e 0b cd 3b 66 67 2d bb 05 46 ee 55 1b 1f e4 35 cd 1a cf 2a 41 5a 57 Data Ascii: f^j\A&)oncPk89SM1#!T9Y5O:paL)a'88vFZ6J}?>z3~~__a~F<c~c3_#7H-7+~m1bZjB;gD43U"~GT+vloC;fg-FU5*AZW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	64651	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDUvNWFiNWQ5ZWYtNTdjYi00ZWIxLTk1N2UtZTczZmU3MWZhNGI1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=a3b2a23b5ff3b050 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1915126 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 85916 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:51 GMT Etag: "e5feb6caffaacdd458426b7b9e64597819e9f581" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: c22a316a71c6e35beda71f97e2aa5a32855e08c7 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 252a49f7-be6d-4a00-903f-c4521e88b0f1 X-Runtime: 0.477976 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2e e4 6f 67 48 00 00 80 00 49 44 41 54 78 da ec fd 57 b3 2c 49 b2 a5 89 7d c6 dc 3d d8 26 87 24 b9 77 ee cc a0 31 82 b7 11 3c f5 ff ff 03 20 22 18 01 1e 31 dd 7d ab 2a c9 39 67 f3 88 70 62 04 0f aa 66 ee 3b ab 9a 42 80 2e 92 2e b2 25 4f 6e 12 c4 c3 cc 54 75 e9 5a 4b 4d 29 a5 00 8c e3 c8 bf fe eb 7f e0 ff f5 ff fc df f8 7f fc 5f ff 2f fc 6f ff b7 ff 3b cf 0f 4f f4 bb 81 c3 e9 44 29 85 52 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME.ogHIDATxW,I}=&$w1< "1}*9gpbf;B..%OnTuZKM)_/o;OD)R
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: 99 18 23 ce 3a ac b1 58 6b f1 de 63 ad c1 7a c3 d0 07 0e c7 3d ff cb ff f1 df f0 6f ff ed bf e5 7f fd 5f ff cf fc cb bf fc 8f 7c fe fc 99 ae eb 30 c6 f0 fb f5 df 76 79 80 18 23 2f cf cf fc fa cb cf fc f2 d3 9f f8 f5 e7 5f b8 5e 46 42 f0 ec fa 1e 63 0c 39 67 ac b5 a4 9c f5 03 5b 30 25 e3 6d 90 45 45 c1 3a 4b ce 85 5c 0a 39 67 a6 79 62 49 89 ac 1f 50 8a 99 98 12 d6 7b ee ee ef 08 7d 4f ca 19 0b 2c cb 02 18 42 e8 e5 79 52 24 2d 91 94 67 a6 71 a6 14 70 ce 61 ad a5 94 82 03 32 45 16 89 75 ed 35 ce d3 84 b5 86 69 9a 98 a7 91 2e 74 38 6b 18 97 89 69 ba e0 8c c5 38 07 25 33 74 3d b6 80 2d 99 34 cf f4 bd e7 76 bf e3 bb fb 1b ee 8f 7b ee 4f 03 b7 a7 81 d3 61 e0 ee 74 64 b7 eb 70 c1 62 5d c0 5a 8f 73 0e 83 3c b7 f5 b2 71 0b 60 75 03 5b 67 01 64 13 1a 8b 37 16 ac a3 Data Ascii: #:Xkcz=o_\|0vy#/_^FBc9g[0%mEE:K\9gybIP{}O,ByR$-gqpa2Eu5i.t8ki8%3t=-4v{Oatdpb]Zs<q`u[gd7
2024-07-04 20:55:37 UTC	538	IN	Data Raw: 32 71 91 da 37 95 a4 6d 2b 27 c0 59 49 e4 25 29 c0 b2 48 1b a5 77 14 05 54 c6 71 c2 80 2c 22 6b e8 2d 7c bc d9 f3 c3 87 5b 3e dd 1c 38 f4 81 de 3b 86 ae 63 bf db 31 0c 03 21 74 f8 10 b0 ba 21 6a b4 af 91 a6 a6 d0 ef 52 58 de b7 ba b6 5f 40 fb 3d f9 ff 82 41 da 3e c6 18 8c 73 14 53 48 ac 9b 34 25 23 1b 21 27 cd 20 a0 08 f4 2b e8 b4 c9 38 fb 9b 2c c0 96 96 41 6d d3 7c d9 e4 92 85 58 2a 4a ac e7 82 b5 18 2b 87 88 75 19 9b 0b 83 b7 dc 1f 3a ee 0e 3d d7 f9 42 2c 92 59 51 3c b3 f6 ae 4d 31 ef 3f 2b 2b 8f 4f 6b 1b c6 76 70 48 76 62 15 00 83 b7 b7 33 bf fc f2 0b 3f fd f4 33 3f fc f0 4f 1c 8f 27 bc f7 2d 30 fc 7e fd 97 5d fe eb af bf f0 fc f0 c0 f9 f5 8d 18 e5 c3 ad 8b 30 25 21 16 60 56 10 a4 a6 39 b5 fe b5 ce 52 c8 18 5b 1b 48 fa bd 5c 1a 4a 2b 75 ac c3 7b df 5a Data Ascii: 2q7m+'YI%)HwTq,"k-\|[>8;c1!t!jRX_@=A>sSH4%#!' +8,Am\|X*J+u:=B,YQ<M1?++OkvpHvb3?3?O'-0~]0%!`V9R[H\J+u{Z
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: 49 44 9b e7 59 22 79 59 81 9f a8 1b 4f 0e 07 a3 fd 5e 39 d5 bd f3 f4 5d 87 f7 9e 79 5e 48 5a 63 d7 1a 7c 59 16 41 aa 31 72 82 7b 4f 70 0e 03 c2 fc 1a 47 9c 35 74 de 12 4c 61 df 39 be bb 3f f1 dd fd 89 e3 e0 e8 3c f4 9d 67 37 0c ec 76 03 5d 17 30 ce e8 7b 2b da db a6 b1 8b 84 61 f4 3e 95 ae d9 ca 36 f2 ca df ac 11 b7 fe 6e bd 8c 59 ff 6d 37 75 b5 35 d2 f2 32 d6 ca e6 32 6b 1b 6c 0b 92 d5 e7 65 f3 b7 14 d3 fe df b6 03 c8 28 d9 45 70 0a 61 b7 19 9c 32 cf 1c 42 8a 59 5f 83 66 17 26 e3 ad e1 76 3f 70 bb eb f1 16 01 db 72 02 0c 64 5a 56 56 df fb b2 2c e4 94 f0 c6 62 72 c1 16 fd 9b 28 19 54 52 8c c4 20 78 c9 eb f3 33 bf fe f2 0b bf fe fa 0b 2f 2f 2f f2 f7 9b c3 f1 f7 eb 3f 7f f9 2f 3f ff 89 97 a7 27 a6 69 a6 94 42 d7 f5 18 65 5c c5 28 2d a3 5c b2 46 56 87 cd 42 Data Ascii: IDY"yYO^9]y^HZc\|YA1r{OpG5tLa9?<g7v]0{+a>6nYm7u522kle(Epa2BY_f&v?prdZVV,br(TR x3///?/?'iBe\(-\FVB
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: ac 85 06 b6 55 6c 00 9c 37 f4 c5 b3 1b 02 63 ba 12 c8 ec 3a 4b 17 00 44 d0 9f b3 a4 de 46 a3 66 d2 ac 23 84 d0 68 b1 f3 22 ec 2d e7 50 17 4b 35 1a a4 f0 f6 fa c6 cb 93 6c e2 e7 e7 27 a6 f9 c7 26 59 fc 7d 03 ff f9 e5 73 c9 ad 15 54 72 6e ad c8 5c 45 f5 c5 36 34 b1 82 30 d2 b4 5f 44 08 ae 8e 8f 56 c4 85 d2 c3 35 b4 b4 7a 9e 16 c6 79 12 01 82 59 79 d3 29 d5 ff 56 30 cc e0 8c 44 c3 8c 21 95 48 49 4b 03 86 72 29 4a 52 a8 40 97 00 4b 69 1e e9 5c e1 34 0c 7c be bf e5 f3 87 5b 76 3b 21 6c 38 2b 24 95 be eb f1 ce e3 5d c0 b9 80 75 b2 89 57 e1 80 da ce da ba c1 64 93 58 a3 00 8a 22 dd d9 fc 46 eb 6b 68 59 c5 16 ad cf 6d f3 d2 2c 6c 64 6f 29 c9 45 0f bb 0a 6c 15 4d b1 0b 95 32 ba 6e fc ca 57 6e 1f 8c 29 5a 5b d7 f6 d5 fa 61 ca 02 97 74 54 ac 88 14 45 e4 fd de af a2 Data Ascii: Ul7c:KDFf#h"-PK5l'&Y}sTrn\E640_DV5zyYy)V0D!HIKr)JR@Ki\4\|[v;!l8+$]uWdX"FkhYm,ldo)ElM2nWn)Z[atTE
2024-07-04 20:55:37 UTC	6462	IN	Data Raw: 9d b0 37 ba 88 a4 0e 7d ff e6 57 f2 7b 5d 94 6a 17 ab 2d 0d f9 1d 4d 27 8d 25 84 8e 82 f8 fb 8e e3 28 5e c2 21 70 3c 1e d9 ef 76 5c af 57 de 5e df e4 6f 73 d1 49 82 b4 88 5e 25 8a 02 48 00 14 9c 33 ec fa c0 dd cd 81 4f b7 37 dc 1f 7a 8e bd d7 54 51 16 e7 65 9e 79 7a 3b f3 f8 fa ca e5 32 32 8f 91 a5 82 71 ca 7c 4a 25 31 15 99 72 ef ad 23 2d 9a 7e a7 44 89 91 97 e7 33 87 fd c0 30 04 82 46 e1 7d e7 99 a6 05 ef 0a fb 21 50 72 af e3 50 33 06 19 54 2e 13 29 8c f6 3b e5 30 ac 53 03 df dd 43 6a 1b a9 34 86 59 2d 03 1a b9 42 ef 49 49 15 69 16 80 b1 aa a7 52 ca 9a 56 27 e5 af e7 56 ea d4 72 77 c9 46 5a 3f c5 30 e7 cc 75 89 8c 09 c6 54 78 9b a2 6c e0 71 66 9c 16 39 d4 7c c0 16 d1 5f 8f d3 c2 b4 24 8c 0b 74 bb 6e 55 06 c5 0c 39 b2 55 46 39 e7 c8 b1 f0 76 b9 92 d2 82 Data Ascii: 7}W{]j-M'%(^!p<v\W^osI^%H3O7zTQeyz;22q\|J%1r#-~D30F}!PrP3T.);0SCj4Y-BIIiRV'VrwFZ?0uTxlqf9\|_$tnU9UF9v
2024-07-04 20:55:37 UTC	8302	IN	Data Raw: f5 f1 89 97 d7 17 e2 12 49 cf 85 eb 34 73 7b 7b c7 61 bf c7 94 84 c9 51 4d 06 a4 05 14 82 61 d7 39 86 ce b1 0b 8e 2e 78 28 46 85 0f e2 89 10 bc a3 ef 7a 92 f5 58 1b 30 8a ba 1b e5 c8 cb 7d 50 dc 65 a2 05 88 5c 45 fe d9 34 66 5e 2c 49 d3 fc 7a 30 d6 f1 af 42 c1 bc bc 9d 79 7b 79 e6 e9 f1 81 d3 cd 2d a7 d3 2d a7 bf 53 bb 1d 5f 34 ca b6 41 d0 ba e0 0c 96 94 16 0d 36 ba b1 b5 36 49 29 49 2d 58 2a d0 12 99 17 b1 b0 71 38 e5 fe aa 04 31 27 4c 91 c1 de 52 66 d9 36 d8 d9 2a 92 19 53 c4 78 4f df 05 51 d3 10 14 c8 59 08 c1 8b b7 73 e8 e8 7c c7 e1 b0 67 3f f4 42 23 34 52 c3 15 75 ef 08 5d 90 09 8a e3 c8 97 5f 7f e5 f9 f1 81 e7 c7 67 42 e8 31 3e 60 d5 95 03 ef d8 df 9e b8 fb 78 cf e1 74 e2 df 87 c0 b7 9f 7f e6 df fd e9 57 ce 97 2b df 7d ba e1 b8 0f ea 2b 1d c4 e8 ce Data Ascii: I4s{{aQMa9.x(FzX0}Pe\E4f^,Iz0By{y--S_4A66I)I-Xq81'LRf6SxOQYs\|g?B#4Ru]_gB1>`xtW+}+
2024-07-04 20:55:37 UTC	8082	IN	Data Raw: f0 ac 54 19 5e 51 a8 6e 73 22 ce 51 cc 03 72 a6 52 0e 2c 05 57 12 83 35 dc 0e 9e 9d 07 67 16 9c c9 cd 6f 8a 0d 28 52 a3 4d cc ab 1c 0e 14 3c da f4 89 d7 05 f6 3e 52 b5 f6 45 16 12 82 bc 56 89 be 31 cb 34 c0 14 53 2b 2f 84 5b bc 39 3c f2 76 63 6a d4 d7 65 5e f9 cb 15 e4 a9 bc 67 a9 8f 57 b8 77 e5 3b 9b 4d 9a 5a 7b a8 f5 dd ac 91 75 3b bd b0 1e 2c 4d 0d f4 9b f7 b5 7d df a2 de 5a eb ff da af 2e 8d 4f be e9 5d 57 70 4a d3 86 c2 3a f6 a5 95 19 2d 20 d7 e7 96 03 b9 68 94 6e c4 c9 b2 46 d6 a5 c8 10 6f eb 7d 7b 0c 67 1d 7d 90 99 cc ed 88 2b 32 4c ce 7a 71 db 68 8f a7 07 96 0c 21 90 a3 c6 7b a7 ec 3c 11 d6 e4 1a 5c 72 16 d7 cb 0a 26 18 d9 b8 72 10 8a db 65 d1 ba 5b 18 84 57 5e 9f 9e 78 7d 7c e4 e9 e1 1b 5f bf 7e e1 7c 3e ff 47 4b 93 bf a6 cb cb 7c 57 db da 26 68 Data Ascii: T^Qns"QrR,W5go(RM<>REV14S+/[9<vcje^gWw;MZ{u;,M}Z.O]WpJ:- hnFo}{g}+2Lzqh!{<\r&re[W^x}\|_~\|>GK\|W&h
2024-07-04 20:55:37 UTC	10674	IN	Data Raw: ef ab da 0c 79 db 99 4e 18 7d c5 04 e5 83 1f 29 0e dc a3 6a 4b fd a8 ee d2 43 aa 1c e8 82 5c 9a 80 4b 87 6e 99 37 8f 45 69 9c 85 9b 70 a9 9d 77 98 85 2e 99 f6 1d 76 70 b8 3c 3f e1 f9 f9 85 39 45 3b 19 6f fb be c3 18 48 a8 3c 2f fc 20 44 1b da 22 91 17 9f 62 94 c3 49 11 44 a9 15 71 df e1 6b 85 11 4d ba 1e 1e 7d 7d a5 55 6c 31 c2 05 87 d1 07 aa dc e4 63 2f b5 c2 3a c3 d5 63 4c 70 06 04 2e 93 85 01 51 7f 22 f2 7c 2f af d7 1b 2a 80 61 9c 70 7a 7a c6 7c be 08 9b ec 38 60 3f ff 6c fe 8b b6 d3 5e 93 12 ac 58 ea d4 58 45 4a 38 d2 35 c1 26 0c e3 48 15 50 db c9 f8 81 87 4d 0e 5a 2a ad b3 08 43 80 db 3d 81 9a 54 51 db 06 eb 02 bc 71 b0 02 38 38 49 33 80 95 37 a9 64 24 d3 e0 0b b0 e7 d8 bd 7e ad e5 82 5d 15 4a d6 b2 bd f6 b5 c1 55 2b b2 b2 d2 1f 96 26 3b e7 5a b2 2c Data Ascii: yN})jKC\Kn7Eipw.vp<?9E;oH</ D"bIDqkM}}Ul1c/:cLp.Q"\|/apzz\|8`?l^XXEJ85&HPMZC=TQq88I37d$~]JU+&;Z,
2024-07-04 20:55:37 UTC	5710	IN	Data Raw: 7e 08 14 d0 ea 66 ed 5d 94 af 19 c2 a6 73 9f 15 b8 52 fa e4 16 13 de 96 15 bf bd be e3 8f 7f fe 0d d7 65 47 69 16 be 09 12 66 68 14 38 86 01 e3 3c 09 d8 59 a1 39 bc 5a e1 54 25 3e 0c 1e a3 a3 29 5d 31 87 1d 52 4a 87 b9 e0 91 75 45 46 58 18 e4 3d ac a4 f9 b6 d6 ba 07 5b 7d c8 fd 25 a8 b8 a0 d6 26 3b 54 75 1c 71 54 d0 c1 c2 59 df 7b 0f 7a 82 1d 5c 82 e0 1d 09 4d 96 59 4c 06 da 75 36 99 e5 03 f1 12 31 79 f4 92 24 62 8c 39 4c 0e c1 ce d0 80 a9 92 6c a9 79 71 78 2f de 63 8d d2 c9 5c 0b 6c f1 80 61 a5 05 18 0a b7 6e 3b 6e ef 6f 38 9f 4e 98 de bf 61 5b 6e b8 df de 71 be bc d0 7c 63 18 99 cc 60 c5 9f 79 18 78 73 a6 3d cb e1 15 32 c2 43 76 b0 b6 39 c3 30 10 1c 30 bc 81 92 ec 1c 4a e5 8c a5 7b b4 6d df f1 f6 fe 8e f9 7c c6 f3 cb 0b 65 8a 25 21 17 92 1b bc f3 78 f9 Data Ascii: ~f]sReGifh8<Y9ZT%>)]1RJuEFX=[}%&;TuqTY{z\MYLu61y$b9Llyqx/c\lan;no8Na[nq\|c`yxs=2Cv900J{m\|e%!x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	64656	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDQvY2E4YzQ1NzAtYTVlNS00ZDY0LWI5ZGMtNzMwZDUwNzVkYzkwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=6906302e733c4b9c HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1915120 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 71195 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:57 GMT Etag: "2bb88288e8484663501a1788e37ae100be49a079" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 6f0b00373daf43350192018684ec18b1ff5b798f X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 961dccc0-71c0-4edd-9dab-b3637a99d499 X-Runtime: 0.428147 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2d 7d 66 36 f2 00 00 80 00 49 44 41 54 78 da ec fd 79 b0 e6 db 7a d7 87 7d d6 f4 1b de 61 cf dd a7 bb cf b9 e7 dc ab e1 ea 0e 12 42 18 81 90 30 0a 02 83 9d 38 a6 62 88 03 01 9c 38 24 2a 0c d8 11 14 15 5c 10 33 19 1c 5b 2e ec 18 39 31 e0 14 54 5c d8 8e 21 a6 e2 38 06 19 e1 14 33 08 84 84 40 57 c3 9d cf d4 a7 87 3d be d3 6f 58 c3 93 3f d6 fa bd bb 2f b9 80 ff d0 51 53 dd bd a4 f7 ee ee dd Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME-}f6IDATxyz}aB08b8$*\3[.91T\!83@W=oX?/QS
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: a0 1d da 56 28 53 81 76 28 e3 50 b6 2a 01 5f 02 4b 12 00 4a ef cf 89 fc 77 a5 50 e5 10 31 da a0 b5 06 5d 5e 9b 02 a3 14 1a 40 4a 50 ee 0f 82 7c 00 a9 f2 1c 88 02 34 a0 f6 bf 8f e2 f6 a3 62 3a a4 12 20 08 09 85 80 ca 5f 6f a6 f7 41 24 bf e6 67 de 57 91 e9 51 fe 4d c8 df a7 75 3e 98 34 68 a3 d1 2a 1f 82 82 76 43 92 85 a0 57 46 eb cf fd ad ff f2 8b 2b 5d 29 7e e3 2f ff 2e fe c4 5f fc 2b cf 7b 9b 3c b7 65 9f f7 0b f8 27 79 fd c0 f7 fc 7a 62 0a bc bd ae d4 49 e3 cf 74 dd 7e 9b a9 dd a7 45 a7 3a a9 84 31 0a 63 75 de e2 29 5f 45 8a 1c 1c 4a 29 ca 7d b8 0f 5e 41 81 36 25 f0 34 5a d7 28 65 f2 a6 2f 97 5c 12 ca 0d ab f3 2d a5 14 4a 19 b4 9a 6e e7 98 37 7b 09 07 41 90 94 0f 11 14 f9 b9 28 01 0d a0 f2 73 a6 24 48 4c 90 40 a4 04 97 48 7e 1e ad f2 4d 98 14 1a 9d 5f 67 Data Ascii: V(Sv(P_KJwP1]^@JP\|4b: _oA$gWQMu>4hvCWF+])~/._+{<e'yzbIt~E:1cu)_EJ)}^A6%4Z(e/\-Jn7{A(s$HL@H~M_g
2024-07-04 20:55:37 UTC	538	IN	Data Raw: 00 85 a4 8c 98 12 25 68 91 0c 9b 4c 42 01 fd e6 f1 8b b5 60 cb c8 69 4a 9b 95 42 95 da 31 4d bd ed f2 6f 79 3d 83 61 7e 26 0b 86 4c ae d0 fb c6 74 ae db bf 02 82 49 ae 77 f7 c3 b0 29 f6 cc 34 b5 2d 37 bb 48 09 44 75 fb fc 13 ca 4c 04 4d da cf a6 9f cd 1e b4 29 1d ef 28 7b dc 73 3e 7c 74 6e ba a7 d2 b2 57 e4 af 53 b7 c1 a7 c8 5d eb a9 36 4f 4a 32 01 84 84 56 19 e3 dd 38 a3 0e 97 fa 2c 75 c3 37 c8 b6 5f d8 d6 ee 94 1f 9e f7 36 fa 19 5d af 6e e0 67 56 8c 89 ef fa 8e 25 ed ac aa b4 b3 6f b6 8b c5 47 74 e5 6c 40 32 a2 a9 d4 bd 2a e6 b4 57 03 da 28 22 91 31 78 22 82 94 99 ac b3 15 ce 56 68 65 90 98 6f 32 35 75 51 89 88 04 3c 0a af 2d d1 3a 92 b1 19 be 08 19 21 25 42 4a 31 e3 85 93 22 95 f6 ee 9e 34 51 6e 48 ad 34 46 d9 3d 3c 51 52 79 48 ee 24 65 cc 44 ae b5 89 Data Ascii: %hLB`iJB1Moy=a~&LtIw)4-7HDuLM)({s>\|tnWS]6OJ2V8,u7_6]ngV%oGtl@2*W("1x"Vheo25uQ<-:!%BJ1"4QnH4F=<QRyH$eD
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: a5 e9 a7 f6 37 b8 90 c7 5b d6 5a 62 08 b5 92 f8 35 95 95 8f 89 13 67 75 24 8c bb e7 bd 95 7e c6 d6 ab 00 2e eb fb 7f d3 bf 88 49 3d ff e5 af fc c5 4a 24 9e 09 f2 29 41 0e b5 ce 4d ab 18 43 be 11 a7 da 6c 4a 15 61 3f 12 99 6e e8 9c 72 aa 82 ad 48 84 14 9f 61 f3 4c 10 46 9d 79 af b6 42 5b 97 bb cb 65 93 4e c3 a0 dc e9 c9 c1 96 a7 c3 b7 6b aa 15 f7 09 b3 9a 12 61 b5 af 79 f7 5f 2f b7 69 ef 57 3e 03 39 b5 9f a8 89 85 9b 9b 7c 80 90 20 4a 3e 00 62 42 42 2a 7f 16 54 02 a3 74 06 8a 26 41 a5 84 51 0a 67 0c 46 67 88 65 0a 3e 1f 64 14 fa a2 9a ea ee db 34 7e 2a 05 f6 14 c5 69 96 ce d4 1d 4f 85 d0 20 38 a5 b1 4c f4 c2 52 4f 6b a8 da ca cc 0e 16 f7 eb 79 fd 75 56 c7 d6 d5 16 df 5f 3d ef ed f4 33 b6 5e d5 c0 65 69 89 48 e8 39 3c 6a ab 14 fd d7 89 a4 af 43 51 43 66 c3 Data Ascii: 7[Zb5gu$~.I=J$)AMClJa?nrHaLFyB[eNkay_/iW>9\| J>bBBTt&AQgFge>d4~iO 8LROkyuV_=3^eiH9<jCQCf
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: 21 66 25 4b 62 40 a7 88 4e 09 23 09 4b d6 68 9e 3c 08 95 94 59 b0 4c 3d 03 d9 73 7b 65 3f 41 9b 9c 16 cd ad 48 fc be de cf 2f 25 09 c4 54 84 0a f6 67 c1 d4 23 90 7d 0d 3f 61 bf d3 a4 97 ad 95 4e 22 07 43 f0 4b 30 4a 5e f0 31 d2 4b 1f c0 1a e1 53 df f1 9d 28 52 15 c6 71 e9 47 ef 52 88 cf 04 6c e9 ce 4e aa 17 e5 46 50 6a 62 1b 95 5a 71 ca 2a 4b 40 dc 2a 28 92 01 07 13 60 43 df ea 44 4b d9 ec ba cc 4c 75 31 f3 ca 8e 7c 19 78 a1 01 62 44 ab 72 8b a6 1c dc 69 0a e0 94 e9 88 99 28 90 39 b3 b9 be 2c 46 6c 25 88 a6 71 d1 6d 6d 3c 1d 4e b7 98 ac 1c 73 59 bb 7a 42 5b 85 e0 b3 ae 95 c4 a2 97 25 45 59 56 50 d9 6a a2 c0 23 23 12 62 4e f5 53 cc fc e2 e9 32 dd 03 40 6e e1 92 f9 b0 33 68 93 1f 46 4f 7f b6 59 8a b7 a0 c7 a6 1b 39 8f bb 6f 45 e8 f3 7f 19 9e 49 44 6e 91 5c Data Ascii: !f%Kb@N#Kh<YL=s{e?AH/%Tg#}?aN"CK0J^1KS(RqGRlNFPjbZqK@(`CDKLu1\|xbDri(9,Fl%qmm<NsYzB[%EYVPj##bNS2@n3hFOY9oEIDn\
2024-07-04 20:55:37 UTC	7116	IN	Data Raw: 9f 00 81 34 7a df cc 66 4f ab a6 5a 49 36 fa 53 ce 58 a2 37 6c b7 3e 93 13 b2 31 12 95 cb 6a 12 59 de 26 64 2a 5e 61 c3 30 99 78 89 61 1c f3 dc 34 2b 4c 6a 92 ae 10 37 c3 b6 91 45 3d cb aa 15 29 22 da 65 7a 9f 78 ac cd b7 b6 d5 0a 63 34 d1 8f 05 4e 59 c0 16 bb 31 93 f6 b1 28 15 b3 40 ba 28 8c a9 30 09 62 7f cb df 1d c6 9e be 1b b8 bc d8 71 74 90 d8 ee 46 4e 8e 4f 71 cd 12 d1 0d 49 d7 24 55 31 8a 26 04 30 41 63 ab 96 f9 ec 80 0b 74 26 c5 87 44 3d 5f 72 78 ac a8 9b 05 a4 31 93 21 74 56 c4 b0 ce 66 f2 46 2c 58 64 ab d1 16 ac 53 d4 f5 8c 61 1c f0 a3 c7 7b 4f 8c 11 eb 2c 5a 69 ac 35 18 dd d2 0f 1d 29 69 6c b5 c4 88 10 8b 1c ec 10 34 1e 30 c5 18 ad b2 94 43 41 61 44 10 c9 3a 5b 12 46 92 4f 88 07 27 2a bf df 29 16 7b 95 cc 77 8e 31 31 fa 48 ad 50 d6 3a 63 9c d1 Data Ascii: 4zfOZI6SX7l>1jY&d^a0xa4+Lj7E=)"ezxc4NY1(@(0bqtFNOqI$U1&0Act&D=_rx1!tVfF,XdSa{O,Zi5)il40CAaD:[FO'){w11HP:c
2024-07-04 20:55:37 UTC	8302	IN	Data Raw: df 42 08 1d 7e dc 50 1f 1f a0 8c c5 8b c1 35 73 a2 1f d8 ed b6 24 6d d0 d6 66 82 03 05 df a2 40 52 45 d2 82 2a bd 05 91 4c 6a c8 b7 71 f6 56 ca 41 2d 65 a4 2e 28 93 21 97 c3 30 10 7b 9f 67 d7 62 18 c7 84 6b 1d ae 99 33 84 31 2b 84 0c 3e f5 9b dd 26 8e 7e fb e0 13 1f 91 2f 7d fe bd e7 bd bd 3e d4 f5 2a 80 c9 49 af 92 c8 d8 ad 47 3f 0c 9f 95 61 f7 b9 a8 ec 37 c4 38 d6 bb 6e 8b 51 8a a3 a3 43 9e 3e 59 b3 d9 ae 39 3d 6d d1 0a 46 df 93 a4 25 25 4d 98 90 11 00 08 5a 5b 62 cc f8 64 37 a9 51 a6 c9 b1 40 50 c9 63 52 47 1c 37 c4 7e 87 1f 7a 7c 8c 58 9d 47 3d 01 87 4e 16 a3 6b 24 09 bb 4d 87 df 05 8e e6 c7 68 ab b8 b9 79 cc 30 8e dc ac 76 18 97 b5 95 63 1a b9 ba b9 64 f4 03 d6 29 ee dc bd c3 e1 91 46 ac 22 d1 43 eb d0 95 06 04 35 0c c4 6e c0 6f 3b f0 89 10 22 0f df Data Ascii: B~P5s$mf@RELjqVA-e.(!0{gbk31+>&~/}>IG?a78nQC>Y9=mF%%MZ[bd7Q@PcRG7~z\|XG=Nk$Mhy0vcd)F"C5no;"
2024-07-04 20:55:37 UTC	7428	IN	Data Raw: 5d 40 3b c8 46 25 f9 78 4c 9e e7 38 ef f1 3a 10 33 41 a2 25 e6 60 a9 e9 9a 05 db cd 9a 4d dd 20 4a 53 8e 4b 74 6e a8 c6 15 59 61 d2 9e 36 15 69 ad a5 ae 6b 32 95 23 21 4b a3 95 59 c1 fe 74 8f e5 3a a2 4d 64 bd 9e a3 32 c1 14 25 cf 7d ea 16 93 f2 2a 7a 2f 50 4d 66 3c 58 9c e0 bc 22 c6 c8 7a db b0 58 ad 10 a5 50 46 31 1e 4f 88 aa 62 db 59 42 dc 50 18 cd c8 c8 69 d8 ae 7f 7a 72 f5 da 33 ff ea 7f fb 1b ee ab fe d0 ef 45 7e e1 8f fc fe 3b af 57 e7 81 ff 3d 2e a5 0d 5f fc ad df 82 db 36 4d 68 bb 07 ab b3 79 dd d4 1d 57 af 5e 67 3a 3d 44 54 45 96 4d 41 72 44 17 b8 00 77 8f 1f 50 8c c6 7c de 7b be 80 c5 66 c9 b3 2f 3e cb 8d c7 ae f1 f8 13 8f 30 99 55 ec 1d 4c 19 8d 47 18 a3 c9 4c 96 66 58 95 c1 07 a1 6e 3b d6 9b 35 21 5a 10 87 ef 6a 94 6b c9 73 c8 a7 06 b5 2f 70 Data Ascii: ]@;F%xL8:3A%`M JSKtnYa6ik2#!KYt:Md2%}*z/PMf<X"zXPF1ObYBPizr3E~;W=._6MhyW^g:=DTEMArDwP\|{f/>0ULGLfXn;5!Zjks/p
2024-07-04 20:55:37 UTC	10674	IN	Data Raw: d9 15 50 69 03 83 0f 1e 15 2c a2 22 75 bd a1 a0 c4 07 4f 6b 3b 8c 28 4c 5e e2 51 d8 08 2e 0a 65 5e a4 16 4d 55 d2 18 cd 78 3a 25 2b 0b 1a e7 d0 5a a8 3b cb a4 cc 69 9d 43 19 c3 7a 3b a7 12 cd f4 60 8f 6e 5c e2 94 c1 ae 57 d4 a7 6b d6 cb 0d e6 f2 8c 2c 2b 70 4a 33 be 72 19 9a 8c c5 fc 1e 59 55 90 4d 2a 54 95 21 9d 40 91 11 8c c2 eb b4 2f 39 ab 0a bc 6b 09 a4 dd 48 c4 94 a6 6b 22 5a 81 eb 1a c6 55 45 6e f2 34 eb ab 34 55 55 e1 9c 47 88 cc 66 53 36 67 27 98 22 27 74 0d ed 76 4d e8 5a 4a 93 f4 b0 25 02 3e a6 08 2c d2 e7 41 81 48 02 c4 22 10 24 95 35 9d 0f 18 93 e3 43 c8 82 95 a3 71 31 3a 28 f2 fc f5 a6 95 2f c7 b9 5b ce 87 4f 2d bb e6 c9 ed bc fd c4 c9 ad f8 dc c7 3f f0 93 f7 aa 51 58 be e1 fb ff 50 fb 3b fe c6 1f 0e 4f fd 89 ff 85 9f cf fd e4 5f 10 06 1c 3f Data Ascii: Pi,"uOk;(L^Q.e^MUx:%+Z;iCz;`n\Wk,+pJ3rYUM*T!@/9kHk"ZUEn44UUGfS6g'"'tvMZJ%>,AH"$5Cq1:(/[O-?QXP;O_?
2024-07-04 20:55:37 UTC	11860	IN	Data Raw: 02 1e 53 08 5e 77 34 61 83 37 2d f3 ee 3e eb b3 39 8d 5b 71 f5 e0 3a 93 c3 92 66 d9 d1 d5 16 e9 05 09 bd 4f f5 a3 d2 fd 70 49 fc 2c 03 de 39 f5 c1 98 2f 90 3b 76 bf fb 1d 03 4b 24 b5 99 da ae 41 6b 43 9e 17 80 4e dc 7a 04 d5 ab 66 d2 83 56 82 41 f7 a9 b3 8a 2a d1 66 25 75 b0 63 38 2f d3 c2 85 51 8c c1 26 e4 02 20 f4 10 3b 3f 66 3d ee e2 89 d8 f4 b5 ca ef 3a 55 e6 8d e6 35 f2 df bf f9 57 56 cf 7c e2 13 d7 4e d7 db cf 8d b1 7a af 52 07 ef 45 e5 6f 53 ba 38 30 5a e7 21 1a 3a c9 f0 28 02 96 18 02 a2 34 50 01 55 ff 82 5b c0 13 94 22 90 8c 79 68 c6 0f 4a 17 e7 c3 01 89 4b 1a a5 57 f7 0d 16 fa 69 a2 d8 73 9e a3 f8 74 d0 63 aa df 42 08 49 54 4d 0b 79 9e d2 4f 1f ba f4 bd b4 1e 5a 89 e7 ef bb 7f 68 32 a0 83 17 b3 26 06 52 c7 79 d7 30 01 1a e7 6c 1a 91 40 d0 01 eb Data Ascii: S^w4a7->9[q:fOpI,9/;vK$AkCNzfVA*f%uc8/Q& ;?f=:U5WV\|NzREoS80Z!:(4PU["yhJKWistcBITMyOZh2&Ry0l@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	64659	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTMvOWIwZDA4MjktYzE1Mi00ZjQ2LWI4NzAtMTVhMGRjMzAzNTkzL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=4014013dc62e3eef HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1992381 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 65653 Content-Type: application/octet-stream Date: Tue, 11 Jun 2024 19:29:16 GMT Etag: "3f85bdb4958b83c275a9372b4f3bbd9a699a5e46" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 7f0b6720ea41d09a98f9f69f4bf3d3fc8f5334c9 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 80a72206-afce-4df8-b6a6-8b05179df941 X-Runtime: 0.462783 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 36 f7 03 ff 1e 00 00 80 00 49 44 41 54 78 da ec fd d9 93 25 79 76 df 89 7d 7e 9b bb df 25 96 5c 6b ed 05 68 00 8d 9d cb 10 04 86 20 65 33 32 d3 8b 4c a6 27 3d eb 51 7f 14 cd 24 71 cc 66 c6 c6 64 a2 4c c6 19 19 39 c0 70 28 12 04 38 20 81 46 37 7a a9 de bb ab ba aa 32 2b 33 32 63 b9 8b bb ff b6 a3 87 f3 bb 37 aa 25 9a 8c 00 b2 ba ba 81 f8 b5 45 67 65 64 c4 0d 8f 08 3f 7e b6 ef 62 44 44 b8 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME6IDATx%yv}~%\kh e32L'=Q$qfdL9p(8 F7z2+32c7%Eged?~bDD
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: 01 82 b5 78 ef 88 29 93 6b 01 0c ce 18 b2 ad 98 52 91 02 d5 54 8a 58 04 21 e6 84 37 8e 0f bf fd 4d fe 5f ff ed ff 15 63 1d bf f9 f7 fe 73 42 d7 7d da bf b6 9f f8 b9 0b e0 9f c2 93 73 e2 dd 6f 7c 99 1f fe fb ff 37 b2 79 c9 d0 59 96 43 47 df 02 32 f4 03 c6 7a 9c f5 58 1f 30 d6 02 60 bd c7 19 cd b2 52 2a d6 18 ac d5 9b be d4 8a 91 8a b3 16 6b 69 11 6d 91 5a c0 80 b5 16 8c 41 4c 45 c4 69 b6 d5 0f c2 60 81 8c 11 30 06 8c 58 2a 05 e7 3d 88 a5 8a 68 40 22 48 f9 f1 82 ce 58 f0 c6 53 ab 20 b5 bd 43 34 6b 87 e0 29 56 03 bd 56 8b 17 34 58 6b 45 8c 60 ad c1 56 83 35 42 f0 16 11 8b 88 3e 34 6a 2d 58 63 f9 d1 37 bf c1 3f fb 6f fe 2f 18 e7 f8 cd ff ec 77 f0 fe 6f d6 2d fd 37 eb bb fd 19 38 22 95 e7 1f bc cb 0f fe f4 0f a8 57 cf 39 e9 1c 7d e7 09 5e 83 d7 87 0e db 02 d7 Data Ascii: x)kRTX!7M_csB}so\|7yYCG2zX0`RkimZALEi`0X=h@"HXS C4k)VV4XkE`V5B>4j-Xc7?o/wo-78"W9}^
2024-07-04 20:55:37 UTC	538	IN	Data Raw: a7 83 a0 86 4e 3a 64 54 ef 3b 6e f7 b8 07 94 95 be 1d 27 cc b4 1d af 35 ed cd 1e 3e 18 e3 5d 83 3d 1a 2a 2d 7b b7 8c 8d 51 c0 46 15 d1 41 74 1b 18 29 48 44 d7 3e a1 0b 47 42 c4 6d 56 d5 a1 15 18 62 2a 0d 44 62 8e bd f1 01 22 79 f8 5e 34 d0 74 92 de 85 ee 88 1e 3b bc d6 a1 2c 3e fc fd 10 98 87 af 77 a8 76 0f 6c a8 43 c5 7e fc 99 18 f0 ce b6 96 b8 e0 ad 21 38 4b 70 96 ce e9 7f 3b a3 bb ee e7 1f 7c c8 ff fc df ff 53 de fd ce 3b fc 75 60 d2 de f5 c0 3f c1 13 e3 cc fb df fe 26 e3 c5 33 3a e7 b4 77 b3 16 6b e5 16 b6 88 0e a8 6e 3b b4 06 2f 6c 53 5c 63 34 37 db 43 19 69 4d ab 68 95 1a 68 0f 7b 55 68 9f 67 8e af 21 b5 2a fa c9 68 80 6a d0 b6 41 90 28 00 c3 a0 7d ae c1 b4 92 f6 30 d1 36 6d ba cc 31 c0 0b 3a ad 2e c7 41 f7 21 5b db 16 68 1e eb 8a 42 31 f3 a1 df 55 Data Ascii: N:dT;n'5>]=-{QFAt)HD>GBmVbDb"y^4t;,>wvlC~!8Kp;\|S;u`?&3:wkn;/lS\c47CiMhh{Uhg!*hjA(}06m1:.A![hB1U
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: b7 13 27 55 b0 68 70 48 39 60 92 0e ff 13 44 0a fa e9 b6 dd d0 ba ce a9 c6 50 8c 50 51 c4 93 38 83 f5 da 4b 1f 06 58 07 a6 7f 91 da 94 30 14 d6 59 cb 81 a3 5b 8e c1 6c da e0 0c a0 96 4a 69 3c 62 63 0f 84 0a ab 81 eb 14 b3 8d 71 1f 83 5e ea ba 4b 1a 3b 4a aa a2 a8 10 dd 5d fb a6 14 62 8d 69 55 40 5b 32 7d ac c4 b5 87 69 bb 39 74 07 9a 89 8f 01 dd 7a 6e a9 ca 4d 76 c6 12 9c 63 e8 3b 7d f0 20 38 6b f0 4e 29 8d 37 2f af f8 c3 df ff 17 7c f3 ab 5f a2 e4 fc 69 df 1e 7f e9 73 57 42 ff 04 8e 88 70 f9 ec 23 9e ff f0 fb 38 23 8d 39 a4 fb 57 5c 23 06 54 b0 b6 ad 67 a4 1e 83 46 c3 ec b0 5b 95 23 cc 11 f4 26 ae dc ee 54 0f 6b 21 fd ef 46 23 14 0d 32 91 7a 04 78 98 46 92 90 96 b5 14 b0 a1 37 38 d6 52 a4 36 86 52 93 e3 39 5e 93 be f0 81 fc 70 e8 c1 ad 81 72 40 5d 89 5e Data Ascii: 'UhpH9`DPPQ8KX0Y[lJi<bcq^K;J]biU@[2}i9tznMvc;} 8kN)7/\|_isWBp#8#9W\#TgF[#&Tk!F#2zxF78R6R9^pr@]^
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: 67 a0 f3 81 55 df 31 04 c3 aa b7 3c 38 59 70 6f b9 e0 74 b5 64 b9 e8 e8 bb 4e a5 6f a5 36 cb 15 4b 8e 86 5c 32 d1 5a bc 18 26 0c 31 57 52 cd 54 d1 41 61 70 01 13 2c 2c 07 76 73 56 b2 43 a9 dc bc 7c c9 37 bf f6 65 be f8 6b bf c9 6a 7d f2 69 df 62 ff 3f e7 2e 80 5f e1 c9 29 52 e6 59 27 ce d6 e2 9d a2 aa c8 3a b0 81 b6 9f 3d 04 21 a2 0c 25 a9 48 c9 2d b8 a5 09 41 0a 85 a2 7d b4 01 a9 b6 cd a5 74 75 e4 0e 25 31 42 95 8a a1 09 b0 db 1f 17 56 a7 91 19 7e 4c 6c fd 20 cd 73 50 c1 94 5b 91 f7 22 85 9a 23 ce fb e6 5a a8 03 2c c5 47 16 ac 68 e9 6c 9b 7b 84 b1 28 96 b9 ad ca 6a ad 0d 45 56 8f d2 3c 00 a5 46 6a 4c 48 2e d4 5c c8 49 7b e1 fd 38 73 b3 9b b8 da 4f ec e6 c2 e5 76 62 2c 90 38 04 af 06 e2 e0 0c 83 f7 ac fa 8e 55 e7 59 f6 96 fb 27 03 8f cf 4f 38 5f 2d 58 f6 Data Ascii: gU1<8YpotdNo6K\2Z&1WRTAap,,vsVC\|7ekj}ib?._)RY':=!%H-A}tu%1BV~Ll sP["#Z,Ghl{(jEV<FjLH.\I{8sOvb,8UY'O8_-X
2024-07-04 20:55:37 UTC	7116	IN	Data Raw: 6a 5d 34 95 0f e5 1f ab 32 88 aa 8e 38 63 e9 42 c7 30 74 f4 7d a0 f3 8a 6e 73 06 1c 40 51 0e b6 e4 aa 2e 1a 8d 13 1c ac 63 9a 66 05 b1 78 47 a8 01 6f 13 9d ad 88 57 c4 5c c9 33 b5 28 2e 7c 7d 7e 46 7e 71 09 39 b1 b9 78 ca e6 ea f2 13 37 47 bb 0b e0 57 78 16 ab 35 c3 6a 4d 1c 6f 20 67 c5 1b 8b 1a 5d ab 89 f4 a1 1f 53 ff 5c d3 9c ec 2b 15 e3 9a 8c 4e 11 5c cb d2 ea 62 af 3c e1 14 23 c1 39 1c 41 29 84 ad ec 76 06 16 c1 d0 39 c1 db 4a f0 86 be ef d4 f1 d0 06 c8 70 75 75 c9 07 4f 9f e3 bb 05 6f 7c f6 73 84 d5 09 63 ac 8c 73 e2 6a 3b f1 a3 27 cf 79 71 79 c5 f5 cd 96 38 e9 14 d7 98 8a 33 10 aa e0 4b a5 f3 96 93 c5 82 c7 e7 67 3c 7a f4 80 e5 72 c5 ea 64 cd 30 04 86 ce b1 bd 79 a9 1d bd 75 b7 e2 7a 55 6f f2 50 b5 b4 c5 0a ce 77 7a 5d 18 42 d7 93 a6 9d 52 0d db 9b Data Ascii: j]428cB0t}ns@Q.cfxGoW\3(.\|}~F~q9x7GWx5jMo g]S\+N\b<#9A)v9JpuuOo\|scsj;'yqy83Kg<zrd0yuzUoPwz]BR
2024-07-04 20:55:37 UTC	8302	IN	Data Raw: 93 f6 ad f3 e6 86 b4 bd 61 f7 f2 19 fb ab e7 6c 37 57 8c 71 66 b1 3c 21 74 0b 8c f1 e4 58 10 d9 63 05 4a 9e 90 92 49 52 c8 a9 12 a7 cc cd 6e e6 a3 ab 0d ef 3d bb e0 f9 d5 0d bb 51 f5 ae 17 7d e0 fe d9 09 e7 27 2b a8 85 9a 33 29 25 52 11 e6 22 c4 02 bb 39 33 a5 4a b5 be 91 27 54 c8 cf 1b c5 3d 3b df dc 2d da 40 2c d7 42 2e 85 94 73 6b 51 44 d7 59 07 7b 57 1f 14 2f 5d 0a a6 56 4c 74 b8 10 f0 0d 50 92 73 c1 3a 05 72 a8 d9 7a 3d fe 7e 4a 56 62 48 4c 85 29 15 62 31 a4 aa ca d1 b5 16 76 31 72 1d 23 33 81 52 15 37 bd db ef 79 f1 f2 25 5f f9 b3 2f f1 3b bf fb bb fc fc 17 be 40 d7 f7 7f 65 86 d2 5d 00 bf 8a 23 15 2f 85 50 0b 31 15 36 17 97 7c e5 df ff 19 6f bf 78 8b 37 3e fb 3a eb d3 53 ba e5 12 37 2c e9 2d 6c d3 9e 7b a7 0b 62 5e f3 62 b7 07 17 30 74 a4 14 e9 7c Data Ascii: al7Wqf<!tXcJIRn=Q}'+3)%R"93J'T=;-@,B.skQDY{W/]VLtPs:rz=~JVbHL)b1v1r#3R7y%_/;@e]#/P16\|ox7>:S7,-l{b^b0t\|
2024-07-04 20:55:37 UTC	7366	IN	Data Raw: 67 9f f1 fc 93 4f d8 ed f6 8c fb 23 ba 68 ce 4f ce f9 fa 93 27 1c 1f 3c 60 78 fe 92 53 a3 51 41 f6 ef 31 4c e2 1a 69 00 a3 70 bd a7 38 41 9e 67 1a 6a 68 94 d2 57 af 5e f1 ec d5 35 a5 5a 4a 55 12 f5 92 33 45 8b 09 7e 29 62 01 a4 b5 6e c4 99 8c b5 8e 10 22 31 15 bc 6b 69 1b cd db 2c 97 2c 12 c6 5c 70 46 ec 81 e7 9b 77 1c 07 62 8c af 5b e8 bf 6d a7 5f ad b9 f7 e1 d7 18 9e 7e cc ea fa 9a e9 27 9f f2 93 9f fc 14 7f 7e c2 fa c1 5d bc 31 10 23 4e 09 13 28 37 9e 2f b9 e0 ac a6 d3 86 43 8c 38 67 19 c7 09 6d 1d 7e bd e1 72 3f 72 1c 26 ac d1 e8 9c 60 9c d8 1f 27 bc aa 58 db 49 a6 91 50 0b c8 18 52 85 c3 18 19 c3 c4 21 67 b6 ab 0e af 20 c6 82 31 1e a5 35 de af 70 5d 41 97 c0 f3 8b 3d 87 29 33 a5 89 29 24 b6 a7 a7 54 db 51 62 e5 e9 f3 0b 8e 87 81 12 a3 98 d2 a5 42 a8 Data Ascii: gO#hO'<`xSQA1Lip8AgjhW^5ZJU3E~)bn"1ki,,\pFwb[m_~'~]1#N(7/C8gm~r?r&`'XIPR!g 15p]A=)3)$TQbB
2024-07-04 20:55:37 UTC	10674	IN	Data Raw: 38 02 95 f5 7a c3 f6 e4 e4 b5 2f f4 7f 8d c7 5a c7 c3 47 8f 78 ef 2b 1f f1 d9 8f 7f c8 78 3c d0 67 d1 ac 52 e4 b6 1c c6 89 5c 2a be eb e9 ba 8e aa 60 18 27 c9 fc 9d f3 7b 4a 82 2c f3 ad 31 86 69 9a 96 59 18 90 62 6d f3 59 ce 92 5d 2b 20 92 dc 3c c6 1a ac 77 68 0d 29 46 72 92 19 bc d4 42 cc b2 e5 1d c6 91 6c 34 d9 6a e2 54 85 1d 76 1c d8 f6 1d 79 18 38 09 91 74 bd c3 78 01 e2 3a 2f 2d ac ef 24 21 62 4a 69 89 37 19 c7 49 8c e4 a2 04 b4 d5 46 a8 18 87 81 94 8b e8 71 4b c5 7a cb ab 57 97 a2 01 36 1a e3 9d 88 1e 82 90 55 8a 52 68 e7 18 87 80 eb 7a 5c 96 c8 16 db f5 0c f1 20 e0 9b 31 4c 21 cb 3c 8c ac d9 fa 7e 45 a2 52 53 6e 82 06 71 9a 14 6f 2b 99 b5 b5 69 2b a4 10 e8 bc 67 e5 d6 a4 29 12 53 14 bf ab 29 a0 75 2b ee 2c 7b e1 da fc a1 6b 01 63 35 be eb 39 3b 3f Data Ascii: 8z/ZGx+x<gR\*`'{J,1iYbmY]+ <wh)FrBl4jTvy8tx:/-$!bJi7IFqKzW6URhz\ 1L!<~ERSnqo+i+g)S)u+,{kc59;?
2024-07-04 20:55:37 UTC	11860	IN	Data Raw: c9 ff f6 bf f2 e9 f7 fe 03 21 44 4e b4 c6 03 14 59 05 d1 d2 08 20 a3 54 a5 92 db 9c aa 5a 50 59 c5 5a 8d 51 8a 69 4a 18 0a ca 2a 8c 71 d2 e2 0b d6 4c cc a0 4a 12 6e b1 91 16 3c 55 da 1e ba b9 5c 16 29 f0 54 32 56 19 54 2d 72 fb b5 77 9e 5e 9a e7 8a d2 75 51 0f 59 0d 4a dd 08 34 b4 91 22 95 7c 26 96 0c 22 e9 12 34 5a c9 1c eb b5 a2 73 16 a3 e4 a5 61 ad 15 12 8a 96 d9 98 2a 9d 01 b5 90 a9 e8 36 27 69 6d 31 5a 66 7c ef bc b0 d9 42 e0 3a 5e f2 83 ef ff 19 c3 30 f2 c1 57 be c2 83 07 0f fe ca e6 e2 d7 05 fc 9f 39 02 26 99 e6 d4 ef b8 31 53 13 00 44 71 e3 05 0c 2c eb a0 db ad 31 f0 b9 c2 9a 5b e4 1b 34 74 ae f9 ba a4 d7 cf 0f da 0c 7c 29 35 af 9d 8a 70 8d 97 95 85 5e 52 07 8c 91 ac 5b 6b 65 3e b6 e6 46 c0 ae 95 22 2b 49 44 30 d6 52 4b a6 73 96 6c 0d 29 04 cc e9 Data Ascii: !DNY TZPYZQiJqLJn<U\)T2VT-rw^uQYJ4"\|&"4Zsa6'im1Zf\|B:^0W9&1SDq,1[4t\|)5p^R[ke>F"+ID0RKsl)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	64654	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	689	OUT	GET /2024/06/12/17/34/26/8f7b90e3-0af2-411a-a067-c630c9d163ad/Approved%20Supervisor%20-%201200x627%202.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:37 UTC	682	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 119313 Connection: close Date: Thu, 04 Jul 2024 20:55:38 GMT Last-Modified: Wed, 12 Jun 2024 17:34:27 GMT ETag: "d1215283d860c3524bf579ad188c3da6" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"Approved+Supervisor+-+1200x627+2.jpg"} x-amz-version-id: 8BX4bBLGjlh7d6ZIC_dYz3Z0SISGB4dz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: KM94relXMsTZmy0XY7-qq6Vda8Ab3gGLSrvsSZNt79WxcyMQmKL2Ig== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:37 UTC	15702	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-07-04 20:55:37 UTC	58	IN	Data Raw: bb 8c 8a 28 96 d6 7a 9d 4d 78 2d 0d 37 5a d2 df 41 a9 7e 39 7a b2 be 7b 29 7f 4a ee 43 da 47 f5 3e f3 c2 6b bd 75 41 3d ed 6d 44 a3 c4 3e 57 1f 57 89 2b d7 52 15 a2 47 c7 14 Data Ascii: (zMx-7ZA~9z{)JCG>kuA=mD>WW+RG
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: 4f 56 ca 25 90 c4 76 4b b0 e7 c9 57 40 fe 82 a3 f6 a9 97 11 c7 ff 00 53 9d cd 79 23 ab 60 ff 00 21 2f b7 cd 99 e5 40 13 41 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 04 27 5a d0 77 55 51 d5 b4 79 b2 8e 17 1f ed 01 cb e9 1f 62 02 34 80 20 24 7a 7b 53 3a 99 cc a6 ac 79 7c 07 01 b2 13 92 df 40 27 c4 7d 9e c4 04 df 39 19 1c c2 03 f5 01 e5 2c a2 28 de f7 1c 35 80 b8 9f 50 19 40 62 c9 a5 33 cc f9 5d f8 4f 71 71 f6 93 92 80 9b 69 1b 97 96 d0 f7 0f 39 92 0c 01 9e a5 be 1f 47 44 04 89 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 42 75 a5 c3 bc a9 8e 8d 87 cd 8c 71 bf da 47 21 ee 1f 6a 02 34 80 9f e9 29 fc a2 cb 10 27 26 37 18 cf b8 e4 7d 44 20 2f 88 0b 65 da e4 cb 55 13 e7 76 0b ba 31 be 92 7a 0f de Data Ascii: OV%vKW@Sy#`!/@A@@@@@'ZwUQyb4 $z{S:y\|@'}9,(5P@b3]Oqqi9GD@@@@@@BuqG!j4)'&7}D /eUv1z
2024-07-04 20:55:37 UTC	1024	IN	Data Raw: 49 ea 3d fe 1f 42 01 a3 e8 8d 4d d3 bf 23 2c 80 71 67 c3 27 20 0f b4 fb 90 12 3b 91 f2 bb a5 0d 18 e6 d6 93 51 20 f5 37 93 73 ea 25 01 e5 a9 ee c6 db 47 dd c4 71 3c d9 6b 48 ea 07 89 fd c1 01 03 40 10 04 07 dc 50 c9 53 2b 62 8d 85 ef 71 c0 00 64 e5 01 38 d3 fa 75 96 b0 26 9b 0f aa 3e 3d 43 07 a0 7a fd 25 01 20 40 10 14 55 74 90 57 d3 4b 4d 51 13 27 a7 95 a5 92 44 f0 0b 5c d2 30 41 07 a8 29 0c 4e 17 75 93 47 c6 93 56 7a 1a b7 ba fb 61 3e 84 b9 79 45 28 74 d6 6a 87 1e ea 43 92 63 27 9f 76 f3 ea f0 27 a8 f5 82 ad d4 55 8a a2 1b 3f c4 b5 e3 c4 ad 54 d3 39 11 5d 7e 17 fd b1 00 52 46 90 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 13 bd 90 fc 69 59 3d b3 7e a2 45 1d 5f f2 d1 76 79 a3 6e 8f f3 e1 ed f2 67 bf c2 53 f2 6b 93 e7 8a 5f b2 45 f3 Data Ascii: I=BM#,qg' ;Q 7s%Gq<kH@PS+bqd8u&>=Cz% @UtWKMQ'D\0A)NuGVza>yE(tjCc'v'U?T9]~RF@@@@@iY=~E_vyngSk_E
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: cd 14 6d 6c 80 11 d7 85 c0 b4 fa da 7c 15 af a3 b2 63 93 86 cb 53 16 6e ef b1 bc bb d7 99 5e c6 66 c1 32 b6 37 0e 69 59 76 a5 9f d8 c0 94 3f f5 c8 3f 48 df b4 2b 2c 5a 32 0e 1d 51 d8 8e dc bf 25 4d 79 fa 0a 6f da a1 5c 4b 01 fd 4e 57 6f 93 3a 9e 31 f2 13 39 2f 34 68 57 66 cd 88 b2 45 a7 e7 dd fd d3 3e 45 b7 76 87 17 52 d1 ca dc be f3 50 d2 43 63 63 09 1c 6c e2 18 23 a3 88 20 9c 07 91 d0 b1 4c 46 6b 99 fe 3e 83 39 b1 6a fe 95 bd bd 8e dd da eb 62 9b 41 47 2d 40 ea ea f2 96 b4 5f 53 dc b8 79 f2 b9 8d 7b 40 6f bd f7 b4 0e b9 9e f9 73 3e 4d 6f 84 18 6d b6 a8 de 4c 54 50 67 93 40 e4 0b 8e 01 73 b0 09 3e 86 86 81 29 86 e1 f2 b0 d9 3e ca 5e 6d e6 de d6 fe db 96 ce 77 66 85 6d 64 ca e9 bd 78 b2 4b 45 b9 7f 75 66 2e 53 04 51 bf bf 05 de e9 77 73 6a 7d be aa 94 e2 Data Ascii: ml\|cSn^f27iYv??H+,Z2Q%Myo\KNWo:19/4hWfE>EvRPCccl# LFk>9jbAG-@_Sy{@os>MomLTPg@s>)>^mwfmdxKEuf.SQwsj}
2024-07-04 20:55:37 UTC	1024	IN	Data Raw: a1 a4 53 d3 3b 98 c7 42 f7 81 cc 34 7d 67 90 f1 23 72 92 96 2a 98 f7 42 b5 7e 86 9d 4d 42 91 0e f6 f4 46 a7 cb 29 9a 57 c8 e0 d0 e7 b8 b8 86 b4 34 02 4e 4e 00 00 01 e8 00 60 2b a2 f8 55 8a cb cc f8 43 e0 40 10 04 01 00 40 10 04 01 00 40 4e f6 43 f1 a5 64 f6 cd fa 89 14 75 7f cb 45 d9 e6 8d ba 3f cf 87 b7 c9 9e ff 00 09 4f c9 ae 4f 9e 29 7e c9 17 ce 8b fe a1 ff 00 57 e8 7b c7 fe 4b b5 7a 9c a2 5d 7c e6 81 01 dd 6d 9a fc 50 e8 7f 98 a8 7f 67 62 fc fd 88 7c d4 df dd 17 9b 3b 2d 27 cb cb e4 bc 91 c3 2b 8f f3 85 57 e9 5d f6 95 df e1 fc 0b 91 c7 5e ac a6 5e 8f 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 Data Ascii: S;B4}g#r*B~MBF)W4NN`+UC@@@NCduE?OO)~W{Kz]\|mPgb\|;-'+W]^^@@@@@@@@@@@@@@
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: 10 04 01 01 3b d8 8f c7 7e dd ff 00 78 ad df b5 46 a3 eb fe 4e 77 ed 7e 46 ed 1f cc ca fd cb cd 1d 66 ed 8d f2 62 dc 3f 9b 8f eb 18 b8 f6 09 fa 8c 9e 7e 8c e9 b8 b7 c8 cd e5 ea 71 79 77 13 92 84 07 64 bb 0e 7c 95 74 0f e8 2a 3f 6a 99 71 1c 7f f5 39 dc d7 92 3a b6 0f f2 12 fb 7c d9 8a 77 0f fe 3b d4 5f 38 4f fa c7 29 8a 6f c8 83 92 f2 23 27 fe 6c 5c df 99 1e 5b 26 10 80 20 08 02 00 80 20 08 02 00 80 20 2f 3a 47 56 57 e8 db cc 57 1a 07 e1 ed f3 64 88 93 c3 2b 09 19 6b 87 a0 e3 af 81 e6 39 ad 7a 89 30 d4 40 e1 8b ff 00 06 59 53 62 93 17 5e 13 6c f4 86 ae a0 d6 96 58 ae 34 2f c8 3e 6c 91 12 38 a2 70 ea d7 7a c7 a7 c4 73 0a 97 3e 44 52 23 ea 45 ff 00 92 d1 26 6c 33 a1 eb 42 49 16 33 30 40 10 04 01 00 40 10 04 01 00 40 10 04 05 15 c6 85 97 2a 29 69 dd c8 3c 72 Data Ascii: ;~xFNw~Ffb?~qywd\|t?jq9:\|w;_8O)o#'l\[& /:GVWWd+k9z0@YSb^lX4/>l8pzs>DR#E&l3BI30@@@)i<r
2024-07-04 20:55:37 UTC	1024	IN	Data Raw: 67 7e dc f9 2d 7a 81 fa 7e e1 60 6d aa 2a 66 d3 c0 6a 9b 28 74 24 b9 cc 33 06 86 e2 27 73 0e 27 98 e5 d7 12 51 e0 35 31 61 70 d1 28 a1 eb 28 af 7b bb 5a cf ff 00 6d ef 9e e3 4a 1c 5e 9d 56 c5 55 d5 7d 57 0d b4 57 bd d3 df 6b 65 bc c4 f7 6d fb b0 57 f6 be 8b 75 63 a4 b9 b7 4f b6 ef 0d 71 a7 74 51 f9 5f 76 c8 da d2 38 78 cb 38 89 69 c0 e3 c6 3c 54 c4 18 6c e8 70 9f 70 6d 75 ec d5 f3 b6 6d bd d7 f0 23 a2 ad 94 f1 1f 7b 49 f5 6e 9d b2 be 96 df 6f 13 d3 b6 66 ff 00 e9 fe d0 fa f6 c9 7b d3 94 57 3a 2a 5a 1b 60 a3 91 97 48 a3 8e 42 f1 2c 8f c8 0c 91 e0 8c 3c 0c 92 0e 73 c9 7c c0 b0 d9 d8 64 98 e5 ce 69 b6 ef 95 f7 25 b5 23 e6 2f 5b 2a ba 64 31 4b 4d 24 ad 9d b7 f0 6c 9a 76 bd ed 6b a3 f7 fb 6e f4 d5 83 4f 5b ef 54 95 96 da c6 d4 4d 25 ce 08 59 1b 9a 21 74 64 34 Data Ascii: g~-z~`mfj(t$3's'Q51ap(({ZmJ^VU}WWkemWucOqtQ_v8x8i<Tlppmum#{Inof{W:Z`HB,<s\|di%#/[*d1KM$lvknO[TM%Y!td4
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: c9 cb 8b 10 86 aa 28 2c 95 f2 5a bc 9a 4d e8 9b cf bb 2c ec 45 3b 5d 6f 5d 8f 7f 77 65 9a 9b 4f d2 dc 29 28 5b 6f 86 94 c3 73 8e 38 e5 e3 61 79 27 0c 7b 86 08 70 c1 e2 cf a9 6d e0 94 13 70 ea 57 26 73 4d dd bc af 6c ed bd 2d c6 b6 2b 57 2e b6 7a 9b 2d 34 ac 96 76 de f7 37 bc f8 ec 97 bf 94 dd 9e f7 53 e3 fb 94 15 95 76 3a ba 39 68 eb a9 e8 83 5d 2b 81 c3 a3 73 5a e7 35 a4 87 b1 9d 48 c0 2e c7 a0 b1 ac 35 e2 74 de ca 5b 4a 34 d3 4d e9 b9 e9 77 a3 dd ad 8f 98 65 6a a2 9d ed 22 4d a6 ac d2 f0 2e fd b2 3b 49 50 76 8d d6 76 5a bb 1d 35 7d 25 8a d5 46 e8 60 82 e5 1b 19 2f 7c f7 93 2b c8 63 dc d0 08 6c 40 73 cf 99 cd 61 c0 b0 a8 f0 b9 31 a9 ad 38 e2 7b 2f 6b 25 96 a9 71 32 62 b8 84 35 d3 21 72 d3 50 a5 b7 5b bd 74 6f 81 35 a4 ed 6f a4 20 ec 6a ed a5 75 ba f3 fc Data Ascii: (,ZM,E;]o]weO)([os8ay'{pmpW&sMl-+W.z-4v7Sv:9h]+sZ5H.5t[J4Mwej"M.;IPvvZ5}%F`/\|+cl@sa18{/k%q2b5!rP[to5o ju
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: 46 be 30 f8 a6 85 c4 17 c6 f6 11 87 34 96 b4 91 d7 20 10 41 00 ab 4d 5d 1c 9a e9 5e c6 7a ba d7 8a 7b d7 12 bd 4d 55 32 92 67 b5 94 ec f4 e6 b7 32 7f ae fb 5a ea ad 5f a5 2e 5a 76 df 62 d2 fa 22 d5 75 71 7d cd 9a 52 d2 28 df 5e 0f 51 33 cb dc 5c 0f 8e 08 27 a1 24 12 0c 6d 3e 0d 22 44 d8 67 45 1c 51 c5 0e 9d 68 af 6e 59 23 7a 7e 29 36 6c b8 a5 43 0c 30 a8 b5 ea ab 5f 9e 6c 86 6b 5d de bc eb dd 09 a2 34 a5 c2 9a 86 1b 6e 92 8a a2 2a 19 69 e3 7b 65 95 b3 39 8e 79 94 b9 e4 12 0c 6d c7 0b 5b 81 9c e7 c3 7e 9e 86 5d 34 e9 b3 e1 6d c5 31 a6 ef 6b 65 7d 32 e3 b6 e6 ac ea a8 e7 ca 97 26 34 ad 02 69 5b 5c ed ae 7c 38 1e 9a 97 79 ef da 9f 6f f4 56 90 9e 2a 4a 5b 7e 92 7c ef b7 d5 52 b6 46 54 97 4b 20 7b 9d 23 cb cb 49 0e 03 05 ad 6e 3d 67 9a f9 2a 82 54 99 f3 6a 55 Data Ascii: F04 AM]^z{MU2g2Z_.Zvb"uq}R(^Q3\'$m>"DgEQhnY#z~)6lC0_lk]4ni{e9ym[~]4m1ke}2&4i[\\|8yoVJ[~\|RFTK {#In=g*TjU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	64657	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTIvZDg0MGYyNGMtNTA4Zi00ODM2LThlMTQtZjUyNjQwYWQ1Mjc2L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=0ad5067c52cbc75c HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1915083 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 15292 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:57:34 GMT Etag: "248889eadaadfd4536b7950a47ac100ba0307ceb" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: d7aa698f28bb0861b2f6a0ecb7da553c2e2fdadd X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 3c8c7f4e-9250-4f24-9cf2-2c4129b0d247 X-Runtime: 0.311641 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 a9 a0 03 00 04 00 00 00 01 00 00 02 26 00 00 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 Data Ascii: JFIFHH@ExifMM*i&@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 58 59 5a 20 00 00 00 00 00 00 9c 18 00 00 4f a5 00 00 04 fc 58 59 5a 20 00 00 00 00 00 00 34 8d 00 00 a0 2c 00 00 0f 95 58 59 5a 20 00 00 00 00 00 00 26 31 00 00 10 2f 00 00 be 9c ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 00 f0 00 f0 03 01 22 00 Data Ascii: 3curv3curv3XYZ OXYZ 4,XYZ &1/CC"
2024-07-04 20:55:37 UTC	538	IN	Data Raw: 14 51 45 00 14 51 45 00 14 51 45 00 72 4f e3 db 51 47 f8 b3 e1 0d 33 98 19 22 e1 74 90 2f 43 f5 5c ca 3f fe b5 ab 5c 3f 76 64 8d a0 e4 2f 1f 31 40 71 b9 35 68 ff 00 88 47 13 43 a6 7f 89 37 0c 5b c9 20 58 57 83 ad d6 42 c7 18 73 71 31 51 fa 1e d5 af bc 2d c4 71 b5 cc 25 5b ff 00 33 ae 40 c1 eb 8a 43 f5 3a f7 41 61 1e 9f e9 16 28 cd e4 da 0d 07 81 2d 27 e1 8b ad 57 53 6e 5b 6b 6b 77 b8 91 80 c9 fa 41 66 c8 ef b0 fd 6b 5d 65 e2 1f 0d 2c 78 80 45 73 c4 b6 90 71 7d dd d0 6b 6d 29 e7 5f 37 cb 39 3b 7b 8d b6 ea 6a f9 e2 1f 10 62 b3 f0 87 f8 0d bc d1 da 0d 42 d0 a5 c4 d2 3e 3c b4 23 1d fb 91 5a 27 ac 70 87 01 5c ea c2 fb 88 6f f4 fd 7a 69 67 56 8c d9 da 7f 35 31 b2 b9 62 ff 00 49 e9 9f 60 29 5d 75 d6 d6 de 7f a1 d5 96 58 9e ee 3f b6 74 5b 8d 78 9f 81 6c 3e 16 b8 Data Ascii: QEQEQErOQG3"t/C\?\?vd/1@q5hGC7[ XWBsq1Q-q%[3@C:Aa(-'WSn[kkwAfk]e,xEsq}km)_79;{jbB><#Z'p\ozigV51bI`)]uX?t[xl>
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: 6b 8a 97 50 bc 17 26 41 20 69 3e a6 53 b6 7f 3e f5 55 eb ba af 9d ad 82 9c dc e0 7d 27 1b 10 7f d0 d6 dd 1d 0e 11 49 8b 75 da 88 ce 4d c4 e9 9f f8 7a f0 15 c7 19 fc 47 c3 71 7f 65 0c fc 3f a2 04 d6 2e 01 6c ab 48 84 8b 71 8e e7 cd 21 f1 e8 95 de c0 30 2b 95 5f e1 53 c3 f3 43 f0 c5 c7 7c 5d 2c 25 20 d4 f5 78 6d 2d 99 90 f4 82 32 5f 0c 7a 8e 69 07 d8 83 5d 56 ef 4c 6a ae 35 a7 8f 3c 8a 2e b6 56 c9 67 c2 c0 51 45 15 dc ce 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 70 b3 fc 55 78 4e 4d 33 e2 3b c3 9e 38 88 f2 c3 aa 69 12 5a 4a d9 24 f3 db c9 9e 9f f0 ca 3d 3a 57 3e 38 57 8b da de fb 49 b7 37 3f 54 88 72 dc b9 e5 c9 ea de 87 bf da bb bd fe 22 5e 0f dd f8 97 f0 3d 3f 10 69 2b 1f f1 5e 0e 9a 4d 55 87 96 5a 59 Data Ascii: kP&A i>S>U}'IuMzGqe?.lHq!0+_SC\|],% xm-2_zi]VLj5<.VgQEQEQEQEQEQEQEQEQEpUxNM3;8iZJ$=:W>8WI7?Tr"^=?i+^MUZY
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: 11 20 90 8c 77 da 9d 53 0f 4e 09 09 6e 97 a9 3c 8d 5a 96 91 a6 eb dc 3b 7f a3 ea 76 8b 7f a5 df db b4 37 36 ee a0 86 04 60 8d ff 00 63 d8 d7 20 7c 67 f0 13 53 f0 cb c4 93 0f 94 f7 3a 1d dc cc da 5e a0 ab f4 c8 bf e4 6f 47 51 b1 1f 9d 76 25 65 74 9c 84 43 e5 f7 04 67 3e bd 29 b3 88 f4 1d 17 8b b8 4a e7 4a d6 ec 13 51 b0 90 7f 36 de 64 cb 2b 7f 49 53 d4 37 a3 0d eb 96 a7 4f eb c3 8e 1a 34 69 75 2f 4f 3e 79 8f 93 8a 9a 37 09 ea 9a de bd 6b a4 68 5a 65 c6 a9 7f 2f e0 82 de 23 23 1f d3 a0 f7 3b 56 eb f8 6d f0 91 7e f2 5b 6a 5e 20 5f ff 00 0e b6 18 23 48 b0 70 d3 3f b4 92 ee 13 ec b9 3e e2 b7 13 83 7c 3a e1 4e 01 d0 de cf 40 d2 a0 d2 8c 98 33 4a a7 9a 69 cf ab b9 dc ff 00 a7 b5 4d 95 d5 46 51 0e 32 77 3d 6b 0e 9f e9 f1 87 ba c7 97 fe 0c 35 3f 53 9d 9e da d6 17 Data Ascii: wSNn<Z;v76`c \|gS:^oGQv%etCg>)JJQ6d+IS7O4iu/O>y7khZe/##;Vm~[j^ _#Hp?>\|:N@3JiMFQ2w=k5?S
2024-07-04 20:55:37 UTC	1796	IN	Data Raw: 71 27 2d bd a8 f3 e1 54 e7 21 00 e5 c9 07 6d fd bd 6b 00 c4 ce 5e e8 6a 82 19 99 23 2d 20 24 67 06 36 2d 81 bf 42 3d 7a 57 bf 3e d7 e4 db 4c 59 60 64 47 76 e6 62 ca e3 1d 14 0d b6 eb d3 d6 90 a3 cf 3d e4 c2 e5 b9 d6 39 c2 40 85 4e 19 42 64 86 07 df d7 a8 af 53 b4 66 d3 e6 2e 6d 8a 47 1e 4e 62 00 12 58 f4 19 dc 00 40 fc aa a0 65 26 35 b7 b6 8a 3c 08 9e dd dd 19 82 b1 25 8e 3b 67 03 be e6 a3 f7 77 09 6d a4 5b 2a 42 a0 36 4a bc a3 66 38 c1 3c a0 6e 31 df a5 3d c8 b6 23 4d 91 12 ec 1b b8 ed 30 ee b0 79 64 36 07 4c 7a 8d b0 29 9b 52 b2 58 b4 88 a7 f3 5a ea 48 82 b3 20 3b 90 7a 81 ed db fb 54 00 dd 29 91 6f da 49 ad a4 01 a3 55 97 cb 07 09 fe 6c 8f 61 de 91 ea 82 16 b7 96 18 e0 94 aa 66 42 c9 31 5d c9 03 3c d9 fb 76 fb d2 d9 2f 2d 64 bb 96 56 9d 6e a2 08 a8 59 Data Ascii: q'-T!mk^j#- $g6-B=zW>LY`dGvb=9@NBdSf.mGNbX@e&5<%;gwm[*B6Jf8<n1=#M0yd6Lz)RXZH ;zT)oIUlafB1]<v/-dVnY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	64660	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDMvMzcwN2U5NGUtNGMwMC00ZjYyLWEzZjItOTcyNDA3MjEyNjUyL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=548868e047346673 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1915119 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 91020 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:58 GMT Etag: "3de8a0d6aea956ba5bf9f0c24e51010e0aced087" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: f1b078ce0c3b036741a29189b976af19dc38dfd4 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 0028c53f-154b-49b6-88f8-7c9f9a068c1b X-Runtime: 0.473509 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2c 0a 61 06 64 00 00 80 00 49 44 41 54 78 da ec fd d9 b3 6d d9 75 de 89 fd 66 b7 9a dd 9c ee b6 d9 37 00 08 02 20 48 b0 28 36 92 29 4b 2a 47 59 0e 47 55 d9 2f b6 c3 6f fe cb ec 07 47 39 fc e0 70 27 4b a1 90 64 35 a4 28 91 22 05 92 00 12 40 22 fb bc 79 db d3 ef 6e 35 b3 f3 c3 98 6b 9f 93 60 39 c2 2e 12 40 02 e0 42 5c e4 6d ce Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDpHYstIME,adIDATxmuf7 H(6)K*GYGU/oG9p'Kd5("@"yn5k`9.@B\m
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: dc 7d 88 ab 2a 40 01 a0 94 fa 59 df 66 7f ad cb fe ac 9f c0 cf c3 95 73 c6 fb 91 dd 66 c5 76 73 cd a3 0f 7e c8 d9 d3 a7 0c 7d 4f ac 2c 95 83 10 23 31 46 94 d6 8c 3e 10 63 04 14 3e 24 86 d1 a3 00 ab 35 99 72 5e 66 30 46 a3 50 e4 9c 50 5a 93 92 dc d0 28 20 67 72 8c 24 6d c8 28 94 52 68 40 ab 8c b3 1a 6b 34 4a 41 4a 99 98 22 2a c8 b7 3a 63 70 c6 a2 94 c2 5a 83 ab 9c 3c ff 31 60 b5 42 69 0d ca d0 d6 99 14 33 46 59 6a a7 99 d5 96 a6 a9 41 69 b4 ae 49 29 90 62 a4 71 0e 6b 0d 31 05 94 b5 44 13 69 1b 47 4c 89 be 0f a0 60 de d6 8c 21 e0 7d 20 a5 44 65 1c ce 58 16 75 83 d5 11 ab 02 31 65 42 8c a4 ac 51 4a c9 7b e2 14 39 29 52 4a f4 dd 40 5b 3b 9a ca 40 4e 84 98 08 31 b3 68 6b b6 43 e4 74 bd 25 26 cf e1 bc a2 aa 2c 8c e0 a3 46 99 8c 35 9a 10 13 31 25 b4 d5 58 6b e9 Data Ascii: }@Yfsfvs~}O,#1F>c>$5r^f0FPPZ( gr$m(Rh@k4JAJ":cpZ<1`Bi3FYjAiI)bqk1DiGL`!} DeXu1eBQJ{9)RJ@[;@N1hkCt%&,F51%Xk
2024-07-04 20:55:37 UTC	538	IN	Data Raw: b2 96 ba a9 d1 5a 53 59 87 d5 06 00 63 2d d5 bc 16 04 bc b2 cc 67 0b ba 66 4b 8a 01 48 18 eb b0 ae 42 1b 0b 39 62 9d 63 be 58 d2 f5 3d bb cd 06 ad 34 ce 3a 92 1f 99 1f 1c 72 7c 7c 42 bf ed 18 ba 9e 10 03 a3 1b c8 28 0e 17 4b 34 8a a6 a9 a9 eb 0a 45 22 91 69 ea 76 3f 03 6f 9b 96 79 e5 d0 06 86 a1 a2 ad 0d bb 5e c6 3e 07 63 4d 63 61 37 78 32 89 55 37 d0 d4 15 39 45 b6 fd c0 7a 3b 90 93 e2 68 69 a8 9d e2 aa f3 5c ad d6 dc 3f 9e d3 d6 06 ef 0d c3 10 68 aa 8a 90 04 e0 f2 3e 60 ac 8c 8d 42 88 18 a3 18 b7 1d ff f9 0f fe 35 ed 6c ce 7f f5 bf f8 df f2 e0 95 d7 51 4a ff ac 6f c7 ff bf af 5f ea 00 fe 5c e9 9c b2 cc 3d 63 c4 0f 3d be ef b8 3c 3f e5 c3 f7 de 61 e8 77 d4 95 21 46 cb 18 06 8c 56 d4 95 8c 46 46 1f e9 c6 88 73 0a eb 2c 79 1c 89 29 93 72 26 7a 4f 4a 19 43 Data Ascii: ZSYc-gfKHB9bcX=4:r\|\|B(K4E"iv?oy^>cMca7x2U79Ez;hi\?h>`B5lQJo_\=c=<?aw!FVFFs,y)r&zOJC
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: b0 ee 07 f4 30 0a b2 8b 62 0c 5e 02 38 06 50 0a 67 2c 2e 1b ac 55 a4 1c 65 9e 6a b4 64 cc ca a2 54 22 25 4f f0 23 e3 68 b0 46 a3 95 c2 55 15 56 2b 50 32 e7 75 ce e1 ac 63 de 36 c2 de 52 99 e0 7b 16 8b 23 6a bb 84 9c 50 08 f0 15 83 47 93 a4 bf d4 0e ab b5 90 3e 0c b8 ca 49 66 6f 67 a4 10 01 d0 85 a8 11 e2 28 59 da 55 68 63 64 2e 7b 20 bd b7 31 86 7a 79 80 1f 07 2a a5 b9 77 f7 2e 4e 1b 86 d1 03 32 4e 33 ce 52 35 73 ba dd 06 ab 0d 47 47 c7 a4 1c 71 95 83 1c 05 f5 76 8e 1c 64 9c 66 94 26 86 39 5d 27 e3 ad ae 1f 58 b4 33 e6 f3 2d 9c 65 48 d0 f5 42 66 59 36 33 9a ca f2 fc 6a cb 76 2b 20 d5 bc 71 ec 72 66 bd 1b 69 ac a5 76 42 39 1d bd 97 6c ab 35 c6 1a b4 42 58 5b 56 46 7f 31 27 e6 ae 61 7b 7d cd bf fa a7 ff 57 ba dd 86 7f f8 8f ff 97 bc fa e6 97 31 d6 fd ac 6f Data Ascii: 0b^8Pg,.UejdT"%O#hFUV+P2uc6R{#jPG>Ifog(YUhcd.{ 1zy*w.N2N3R5sGGqvdf&9]'X3-eHBfY63jv+ qrfivB9l5BX[VF1'a{}W1o
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: fa fd 58 ca 5a cb e1 72 c1 a6 1f 38 5b 75 58 a2 30 bf 52 26 a1 3e f7 5c a7 f7 76 18 47 b2 c9 45 9e d7 10 11 42 4d ca 59 34 ba 9c a0 fb 21 06 72 8e b8 d1 a2 f1 34 b5 c6 6a 19 f1 3d fd e4 23 3e fa c1 77 79 f3 cb 5f a3 aa 6a 21 c2 7c 01 fa e0 5f 9a 00 9e ae 1b 1a 65 62 7d 75 c6 f9 d3 4f b9 3a 7d 42 df 6f e9 87 0e 8a 1c 8d 0f 92 09 ac 31 25 38 65 ee 19 93 22 3b c9 36 21 24 7a 63 a8 ad 88 d2 d5 ce 95 1d 55 87 ab 14 db 61 a0 ef 46 b4 ce 42 e2 b7 0a 1f 47 1a 27 e0 54 08 01 53 55 b8 aa c6 38 0b 5a 23 de 05 10 52 20 0e 63 99 01 2b aa ba 91 03 22 a7 12 e4 8e 3c 46 e9 51 b3 8c c3 48 b2 79 a4 90 05 81 82 de 30 41 1d 79 2a 8b 8b 86 75 f1 26 28 a4 ff 9b c0 9b 82 73 ca a0 53 d0 de 6c e8 4c 81 3e 65 cf 8c ca f2 08 f2 2d 37 48 7d de ff 9f 54 08 2a 49 96 e5 e6 2b ca a3 c9 Data Ascii: XZr8[uX0R&>\vGEBMY4!r4j=#>wy_j!\|_eb}uO:}Bo1%8e";6!$zcUaFBG'TSU8Z#R c+"<FQHy0Ayu&(sSlL>e-7H}TI+
2024-07-04 20:55:37 UTC	7116	IN	Data Raw: 3f 6a 0e 96 73 8e ef 9e 30 5f 2e a8 9a 86 ba 9d a1 8d 23 85 50 5e 5f fa 5c f9 37 1d 54 b9 50 02 d5 ad 31 89 fc 85 41 99 aa 68 34 e7 69 30 23 e3 a1 b2 48 90 89 22 a1 8b 64 22 01 ae 33 29 4a 83 28 e3 a6 04 69 52 b5 50 fb 11 54 ce 81 14 86 92 dd 2d 59 95 92 7a 52 dd c8 94 aa 64 2f 46 2b 41 be e7 25 e7 9b 6a 49 d0 c0 1b 1a b6 56 c4 32 46 92 99 ae de 97 e9 fb e5 86 e9 75 1a 83 6b 67 58 ef a9 eb 96 7b 27 87 34 d5 53 5e ac 65 5b 2c 17 6a 68 2a 58 9e 2e 87 c0 04 6e 59 ad 08 31 30 04 4d 5b 0b 09 87 2c 4c 71 67 8d 8c 9c ac 96 5e d8 59 fa c1 73 b5 da 30 6f 05 fd 6e 67 33 ce ce 9e f3 ea 5b 5f 66 18 76 8c 43 87 31 8b cf dd 83 3f e9 eb 17 22 80 6f 66 26 37 20 96 2c b7 7b 86 dd 9a dd ea 92 f3 a7 8f 39 7d fa 94 cd ae 2f b2 29 72 33 84 24 4b fc 31 ca 1b 1e 62 e4 ee 61 43 Data Ascii: ?js0_.#P^_\7TP1Ah4i0#H"d"3)J(iRPT-YzRd/F+A%jIV2FukgX{'4S^e[,jh*X.nY10M[,Lqg^Ys0ong3[_fvC1?"of&7 ,{9}/)r3$K1baC
2024-07-04 20:55:37 UTC	8302	IN	Data Raw: 39 78 41 92 27 ff d7 31 88 72 3f 4a b8 ad 63 10 d4 d7 1a 83 73 82 4c 86 98 08 21 13 83 90 38 d2 64 37 92 c5 1c 7a d2 10 ce 65 79 3c 65 99 75 9e 3e 7b ce 07 e3 96 70 3c 67 38 38 65 d6 58 74 8a b4 5a f1 6b 87 60 0e 8f 8b 10 b9 04 95 42 d1 53 d1 aa 03 ae ae 57 8c 09 5c 55 34 86 73 82 a4 c9 51 a1 6c 21 40 65 01 de c6 61 60 0c 91 b3 f5 96 b3 f5 96 d5 ae c3 fb 40 63 2a 8e 66 35 17 dd 48 cc 19 67 32 cb 4a 63 94 a1 a9 35 8d c9 cc da 19 5f 79 ed 75 8e e6 0b e2 38 70 b2 98 31 bf 7b 48 a7 e4 c0 21 7a 76 57 57 b8 a6 e6 c1 9b 6f a0 5c 45 1c 13 fd 7a 8b ef 7a 84 a9 91 08 31 a0 b5 a2 2e be 42 31 65 51 1b 99 b7 0c fd 20 a8 f8 30 ca e8 2d 88 2a 87 b5 22 e3 6a 8d e1 95 e3 03 96 77 0f b9 dc ec d8 86 84 1f 03 7e f0 a4 94 38 b9 7f 97 5f ff ea af 30 6f 6b ae c7 81 d1 d5 ec 9a Data Ascii: 9xA'1r?JcsL!8d7zey<eu>{p<g88eXtZk`BSW\U4sQl!@ea`@cf5Hg2Jc5_yu8p1{H!zvWWo\Ezz1.B1eQ 0-"jw~8_0ok
2024-07-04 20:55:37 UTC	7366	IN	Data Raw: 57 bf 25 7f b7 9c e3 9a 06 d7 39 3a ad 18 54 36 2d 17 95 34 be 4a 86 e5 c2 cf a7 5d 75 34 2e 82 36 34 3e 26 99 a1 24 22 b4 5d 87 31 9a ca 8a e6 54 45 c9 17 f2 31 52 d8 2a d9 ae 04 b4 b6 92 15 ec 3c f7 2e 2f 79 f9 62 9b 1b 7b db 0c 47 23 ac 75 b4 5d cb 6a b9 a2 2c 2c 6d 3f 3a 4a a3 14 54 42 b6 d7 b3 45 a9 e5 b2 5f 93 3c f4 e8 74 1a 67 ff e0 28 68 b0 c1 24 33 3b 85 b6 d9 17 3a 21 d8 89 42 28 0c 2e 27 2c 2e e7 09 6d 83 ef 5a 42 70 e9 97 8c e4 82 8f f8 ce e3 5d 47 d7 b5 74 3e 12 82 c2 77 9e 56 79 74 50 74 0a 8a 6a c0 d6 c1 1e e3 bd 5d 8a 6a 40 31 a8 a4 ef 2c 07 49 43 9b 47 50 eb 2c 89 7e 16 1b a3 6c 39 da ca 7c 3b 44 a2 95 d9 9d 7c 5e 9d ca 54 0d a9 7d 28 ca 92 fd 9b b7 18 0d 2a 54 12 14 98 4c 48 49 bf 27 63 0a 21 12 3b 0f ce 09 95 b4 ac 88 85 c1 11 70 c1 d3 Data Ascii: W%9:T6-4J]u4.64>&$"]1TE1R<./yb{G#u]j,,m?:JTBE_<tg(h$3;:!B(.',.mZBp]Gt>wVytPtj]j@1,ICGP,~l9\|;D\|^T}(TLHI'c!;p
2024-07-04 20:55:37 UTC	10674	IN	Data Raw: 5a 94 7f 7a 27 a5 6e eb 1c b5 eb 68 bd 47 f2 9b 63 df 5b 2a 05 a5 56 d8 bd 1d 74 b5 0d 28 6c 69 31 5b 53 8a aa 12 93 3b e8 8d ef 63 12 21 9c cf 6b ee 9f 5e 4a ea 85 49 f3 db 7e 9f 7d f6 1e a5 db d7 87 87 f7 65 30 6b 7d b3 d6 f2 3d 42 32 74 a8 aa 52 3c d3 82 13 fe 79 88 28 b3 ee b3 6d 32 57 8c 31 52 55 25 db d3 09 de 8b 4a ee e2 fc 9c ef 7f ef 6f 79 f9 95 57 b8 7e e3 06 6f bc f1 15 5e 7f e3 6b 8c 46 63 9a ba 46 a5 b4 8a cf f5 09 bc 16 80 7b 4e 9e 3c e0 b3 0f df 61 34 d9 e1 c6 ed 17 39 7b fa 98 0f 7e f5 63 3e 79 f7 97 10 02 cf 3d ff 12 45 55 62 0a 4b 35 1a d3 b9 56 80 a5 41 45 dd cc 29 ad 25 ba 40 9b 6c 4c a2 02 17 23 6d 17 d2 e9 66 64 ae 9b 74 b1 eb f1 52 e8 51 c9 dc 9b e6 19 aa 8f 32 52 92 f5 93 46 07 89 d5 14 b4 fc 1c 9f a5 6c a9 7c fb f7 2d 62 a9 40 23 Data Ascii: Zz'nhGc[*Vt(li1[S;c!k^JI~}e0k}=B2tR<y(m2W1RU%JoyW~o^kFcF{N<a49{~c>y=EUbK5VAE)%@lL#mfdtRQ2RFl\|-b@#
2024-07-04 20:55:37 UTC	11860	IN	Data Raw: 0a 39 0d b3 46 9a a4 83 b5 69 44 25 fb 98 68 87 83 96 55 64 b2 ef 96 49 92 45 15 09 0e 7c 12 e9 4b 79 bb ee 1b 75 4c 82 c0 94 fc 98 39 e7 c4 84 98 a7 13 58 a3 51 46 4a 68 95 35 d5 31 24 88 3b dd 9f 28 46 fa be 47 77 1d 5d d7 72 b5 58 f2 b3 0f ee f3 ab 4f 1f 89 7b 68 4c 33 fb 67 44 08 eb 93 73 8d ff 0b 9b 3c 93 27 d7 b5 c1 b3 7c 7c f9 2c 72 e2 1b 93 14 45 1b 23 be 4d ad 6f 61 0d c3 aa a4 69 5b bc 17 73 44 9d be ce 18 71 69 59 cc 17 78 e7 d9 d9 dd e5 0f be fd 6d fe b3 ff fc bf e0 5b df fe 23 b6 77 76 68 9a 1a ef 1d 07 87 d7 18 8d 87 e9 59 5b 93 4a fe be 8b f8 77 b4 80 e3 33 bf 93 f2 d5 b1 9c 5f f1 f4 d1 03 5c db 30 9d 6e 71 ed d6 6d f6 8e 6e 72 fe f4 11 5d d7 70 ef d3 0f 39 b8 7e 8b b2 1a 70 71 7a c2 c9 93 47 0c 47 63 bc 3f 23 78 e9 39 64 11 da fe 04 f5 2e Data Ascii: 9FiD%hUdIE\|KyuL9XQFJh51$;(FGw]rXO{hL3gDs<'\|\|,rE#Moai[sDqiYxm[#wvhY[Jw3_\0nqmnr]p9~pqzGGc?#x9d.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	64658	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	414	OUT	GET /2024/06/12/16/56/27/4bf0ffc3-dcee-4f4f-8992-46e2b20e4b25/file HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:37 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 68746 Connection: close Date: Thu, 04 Jul 2024 20:55:36 GMT Last-Modified: Wed, 12 Jun 2024 16:56:29 GMT ETag: "704a3874a4a3024b07b923c9363d3b27" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"file"} x-amz-version-id: 4vLGcUO3T.fwnXZzhEwyHVJ0OP.uB2Ss Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c337a55bb25a3540411fbbf6c8ad1b46.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: vlznwnBzDaNXzuAP0jal5CvfLITteN_PVxeLrhq-ubzkRBGa2_mE3Q== Age: 2 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 33 87 69 0b 91 00 00 80 00 49 44 41 54 78 da ec fd 79 d4 6d 69 5e d7 09 7e 9e 69 0f 67 78 a7 3b c6 1c 19 19 39 92 4c 02 26 66 0b 5d a2 88 02 65 29 a2 88 a0 50 2a 62 29 da 96 65 bb b4 9a ae ee b5 ba db ee 55 ab ab 7a ad 2e d7 6a cb a2 2c 0b cb 46 6d 51 2c c5 72 51 a8 20 f3 94 90 03 39 47 66 64 cc 71 c7 77 3c e7 ec fd 4c fd c7 ef 79 f6 39 37 32 51 50 c8 9b 70 63 c3 9b 37 de f9 9c f3 3e bf Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME3iIDATxymi^~igx;9L&f]e)P*b)eUz.j,FmQ,rQ 9Gfdqw<Ly972QPpc7>
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: c9 0a 5a 20 a6 a9 7f 37 c5 2c 4d 19 19 64 a9 a2 f5 ac 94 ac 94 9a 2c 94 c5 f5 2a e1 83 27 78 b1 34 b5 56 e4 61 c5 63 55 b0 c7 56 81 eb 9a e2 30 b1 c5 2c a3 15 91 2a dc ee 19 83 c7 c7 a6 ac 75 14 29 69 46 9f 18 c7 91 71 10 ed ad 98 e5 26 a3 95 de 7a 35 a9 e2 21 9c 02 24 33 0d ab 26 71 f8 7c af fa 06 6c 69 86 31 45 94 d1 d3 df 6b fa fb d7 b2 bc 02 48 0a fc 52 18 66 10 63 ec 57 ab 8b 3c df 3b ba 49 ce 63 18 83 bd fd e2 ab e3 5b 3e ef 6d f7 fb e8 7e da eb 81 0b 60 00 1d 12 4d d7 ba b3 f3 b3 fe e6 ad db da c7 a8 8c 73 68 6b 89 5e 31 84 00 5a d1 f7 3d b3 f9 1c eb 64 d2 aa 8d 94 c5 4a 6d 8d bf 55 59 0d 19 2d 99 4c b2 ee d6 10 5c 15 11 f5 6a e7 a9 76 4a 3b d7 ce c9 25 9b e4 62 ae 66 8c 9e 0e 97 48 3a 42 22 15 41 bc 38 a1 92 84 bf 27 2a 8b 46 cb f0 aa 22 94 34 75 Data Ascii: Z 7,Md,'x4VacUV0,u)iFq&z5!$3&q\|li1EkHRfcW<;Ic[>m~`Mshk^1Z=dJmUY-L\jvJ;%bfH:B"A8'*F"4u
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: 20 a6 b9 cf d4 1a 46 6a 49 76 f9 d2 17 27 54 c8 72 03 a1 1a 4d 54 f8 bb 31 67 24 70 af 68 8c 19 c3 30 62 f2 0c 26 a9 12 85 9f 02 86 91 d5 1d 27 ef b1 dd 6e b1 dd 6c 30 6c d9 80 bd 9f b8 b1 3f 72 bb 5f 4e 11 86 b2 48 fd 4c e5 19 93 07 28 f3 fc df 86 0d d7 c8 40 6f 6b 35 fc 8c 48 39 0a 50 95 4b 44 a1 9e ba 69 ac cc f2 4d 6c b4 7e c4 34 8e 18 86 01 c3 30 60 1c c7 e2 75 b7 db 2d 86 71 e0 cd 47 ea e1 3e 26 4c 3e 62 71 c3 34 53 00 00 80 00 49 44 41 54 3b 4d d8 0c 13 97 8b 24 bc 9e 26 35 5e 1d 23 aa da 56 73 4e 5e 1b af a8 6b ef 84 b7 49 f2 fc ba 2c a4 25 80 3a e4 ae 3d e9 55 70 8a ae 18 b0 86 dd f3 df 54 75 e4 3a f5 a8 bc f3 bc 61 70 4d 59 7f 9f 52 c6 b0 1d 11 13 a8 5b 2c 16 c6 b9 67 62 8a b7 42 08 76 7b 7e 86 e5 e1 d1 2f c9 1a 7f ac 0d 38 a7 84 f7 3c f9 5e c4 Data Ascii: FjIv'TrMT1g$ph0b&'nl0l?r_NHL(@ok5H9PKDiMl~40`u-qG>&L>bq4SIDAT;M$&5^#VsN^kI,%:=UpTu:apMYR[,gbBv{~/8<^
2024-07-04 20:55:37 UTC	16384	IN	Data Raw: 6b c3 51 ca 72 2a dc 37 97 8e 76 86 85 ef 35 8b 14 02 88 de d7 d1 33 e5 93 64 42 07 58 d9 92 00 f4 5d 07 d7 58 fe ac 98 10 43 44 f0 13 da c6 e1 f9 e7 9f c7 3b 5e 7c 11 7e 1c 70 76 76 86 18 23 b6 9b 4b bc fd f6 db 38 3a 3e c6 d1 f1 11 c6 71 c4 c5 c5 05 9d 9f 9f af 53 8a 37 9f 7d e6 a9 4f 3d fb d4 93 9f bd 3c df ac fd 34 4d 2f bc f3 a5 e1 7b fe cd df 9f ff b9 0c f8 ff f6 bb fe 57 78 ff 1f f8 76 7c f2 2f fc 75 ba f1 ce 67 0f d6 37 6e 7c 65 72 f6 b7 5c f8 f4 3b 27 63 7f d5 e2 e0 e8 b9 83 e3 d3 65 86 35 a3 f7 08 51 4e d0 58 18 db 14 20 c8 55 35 3b ef 3d bc 67 62 c4 be 4c 69 59 74 2a 2b 2a 17 5d 1b e5 f5 22 d7 f2 28 24 5e cc 59 36 88 07 0f 1f 20 f8 11 c7 c7 47 58 2f 97 65 a4 a7 b5 3c cd 9e aa b0 d5 94 f0 59 4b 1f 73 e7 10 a3 8c 54 bc 2f db fa cc 32 d2 85 c6 ef Data Ascii: kQr7v53dBX]XCD;^\|~pvv#K8:>qS7}O=<4M/{Wxv\|/ug7n\|er\;'ce5QNX U5;=gbLiYt+*]"($^Y6 GX/e<YKsT/2
2024-07-04 20:55:37 UTC	3210	IN	Data Raw: 15 f6 1b 80 88 13 66 63 d0 75 fd 8c ea 81 ca d4 36 ad c5 f1 8e 4c 65 c7 36 32 88 2c d7 06 5c 3d cb 6b 34 da 24 36 f0 b9 f8 a8 ed 61 28 47 f8 f9 8c 6e 9f 6f bc 6f 88 8f fa d9 a3 3c d5 a3 8c 5a 6f ea 2e 51 1e 50 85 89 12 b6 49 b9 61 de f0 52 29 71 3c ea f1 f9 d0 6e 45 92 d5 90 f5 a9 e1 62 bd 60 69 ef f5 79 ef fb 1d cf 79 cd 75 51 e3 dd 25 82 d4 48 7f 49 05 67 35 52 e2 5a a7 7a 40 de dc 99 49 a7 da 59 45 a5 d3 10 96 cb 25 8e 8f 8e d9 88 53 42 eb 9a 05 1a 93 9b 00 00 0b 42 49 44 41 54 42 14 32 99 10 3d 1b ac 93 10 1c c8 b0 96 90 73 94 49 06 3c 44 4c cb 9b c0 2c 7d 0b a0 10 92 00 ad 49 db 47 5c 5f 69 88 c0 6e 29 55 cf 41 af d3 3e 21 e6 4a 2d b9 ba c6 64 76 c1 d3 28 75 63 96 0d 4e d8 6e 79 64 8a 15 0c e5 f2 f2 12 00 30 ca ec e0 9b 37 6e e0 e8 f0 08 a3 78 6d 80 Data Ascii: fcu6Le62,\=k4$6a(Gnoo<Zo.QPIaR)q<nEb`iyyuQ%HIg5RZz@IYE%SBBIDATB2=sI<DL,}IG\_in)UA>!J-dv(ucNnyd07nxm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	64661	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDIvNTkwOTIxNWUtNzIzMS00N2I4LWIxYTItMTQzMjRlNDFjM2M4L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=d83e60a674f2023d HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=cTZ0TzAxTjFrTHJPcmtrSHloKzRSVXBVRnlxVlJwbm10Vk9XQVZadW4rTXlURDlDTzBmL1FHcUorR1NXTGwzd2doRWFVOVZhZTFQTU9xTlZlTXlhNElkc2ZzVDlQZktOV3R4b2F1QWlVRWdiVEthMVZhTURhQ2JDVlRzUkJpR0xHVVVmVGhTSUJTbTFiUlVaNUhaejFOWXZNTkp5NmZ6M2NwOGZjSzRxaVpzek05V1B2cm1OaXFMVExrTDdPNVMyb0szVisxa2pIT25EVmJkK0lWZit0WE9rZGZFSnVEbjErTjFFc29LZHlxU1AwOUsyZG5rT09palJWeVpLajZ4NHZVQVhyL2tmb3pjcnJ6ODlRZnBzZGNNY3BVSDYxZkJ3c0YvSnEvejVKSmZVOTBBd1BtQUpObURtclUxbzRjY0J0bnNxWWszMGhXRVNaRUMxT0VvdHZ4aXJkak5wd1FiSjliekxEaTh3Wm5URXFXTHdKTzlvT2htVTJGVDFjN0lFMlR4Rmw3bjU1dzZycUhPKzRTSFo3OWZiK2ErQU03RHZ2cVJLSHRPbmtiVEMwb2tMUW9sSk9EdlpFQ1BidFRGdy0tcmw5UFlRd213WEhYS2hGTFhDc2RKUT09--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1915111 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 96770 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:57:06 GMT Etag: "804f91d89f9bbbede039422fff61061b27bdeb47" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 6c119ebad0a447997543477c2b128781c7ccef3f X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: c8a9f5e6-bef9-460c-a1e0-c9ca71a89931 X-Runtime: 0.414507 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2b 94 05 93 c7 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME+zTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: d7 8d 38 4d 6f fe 06 9c 96 b9 ef 5d e6 46 4e ff 00 88 13 00 ff 0c 31 73 c2 00 00 80 00 49 44 41 54 78 da ec fd 79 b4 6d db 96 d6 05 fe 46 39 e7 5c c5 2e ce 3e e5 2d 5e 5d c4 7b 2f 2a a2 0e 11 42 09 50 01 35 55 a2 05 08 82 49 80 9a 2d 2d 40 52 d3 a6 69 8a a4 b4 34 d5 84 34 21 d5 14 49 14 32 53 44 68 8d 22 4c c1 66 81 28 04 81 11 80 12 44 c4 8b ea 55 f7 dd 7b 4f b1 cf 2e 56 31 ab 51 e5 1f 63 8e b5 e7 de f7 3e 15 e3 95 36 d7 6d bb dd 73 f6 59 6b ef 55 cc 3e 7a ef 5f ff be af 0b fe 67 76 eb bf f5 9f e5 67 7e 7d ad 3e e7 f6 0f fe da 27 7f e6 bb ff fa 27 7f ea ef 7a 7a 7e f1 6d ed e8 1e 78 a8 11 ca 8c 11 d3 fb a8 07 1f 44 08 49 44 04 11 08 31 21 a5 44 29 85 14 12 29 05 62 fa b9 31 26 7c 88 28 a5 d1 5a a3 94 9a be 1f f1 de e3 bd 27 c6 88 10 02 ad 35 d6 5a ac d1 Data Ascii: 8Mo]FN1sIDATxymF9\.>-^]{/*BP5UI--@Ri44!I2SDh"Lf(DU{O.V1Qc>6msYkU>z_gvg~}>''zz~mxDID1!D))b1&\|(Z'5Z
2024-07-04 20:55:37 UTC	538	IN	Data Raw: 34 2c 6d 95 33 9b 60 02 a5 04 4a 70 e8 7d b5 54 68 a3 51 5a ce fa 62 f9 8e d7 33 7f 8e f3 c3 ca 7b 8f f3 9e d1 07 a4 f6 44 04 61 02 f5 a6 07 11 bc 43 44 89 8b 09 97 02 2e 44 86 3e 90 10 58 33 95 ca 53 8b 61 94 c4 6a 8d 52 1a 25 14 43 1a 0f 18 c1 dd f7 46 6b 7d c0 0e ca bf cd df fb f2 fe 95 80 ee fb fe 10 e0 29 25 c6 71 44 6b 7d 38 0c a4 94 f8 71 24 f8 11 ef 1d 6d 9b 0e fd 72 3f e4 83 46 a4 84 d4 9a ca 68 50 46 68 a3 b4 d4 56 8c 3e 2e 6c 48 f5 c3 93 b3 a1 32 ea fa d9 5b 9f 3b 1a bb dd 83 ab cd ee 23 2f 5f 6e ae aa aa 72 c2 57 6f 6c da ef de ff fa ff e8 0f 85 1f fa 93 19 14 ff 6a 40 a5 bf e6 50 e8 94 e0 eb 56 f0 1f 5d c0 c2 49 f1 89 f0 2d 2a c9 ea f4 e9 cb ab 8f be f5 f4 e5 b7 bf fd fc f2 db 9f 9d 5f 7d ec e2 6a f7 60 df 3b 1b 85 26 09 45 48 09 1f 02 dd d0 Data Ascii: 4,m3`Jp}ThQZb3{DaCD.D>X3SajR%CFk})%qDk}8q$mr?FhPFhV>.lH2[;#/_nrWolj@PV]I-*_}j`;&EH
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: 3c 86 27 bf 54 bf dc a8 b3 cf 3d 7b f6 89 b7 9e be f8 c5 4f 9f 5d 7c d7 d5 75 ff c1 cd ce 3d ec 46 5f 21 35 f5 62 89 50 9a 6e e8 e9 c6 e1 d0 bf c2 ed 72 f2 2e ea 3c 0f 5e e7 1c e3 e8 80 9b 60 28 59 0e 38 94 7f ef f6 73 72 e9 9d 67 98 87 ac 38 65 36 9f 22 32 25 54 0a 28 25 a8 8c 62 69 35 8d d1 58 a5 30 32 8f 80 8c d6 28 29 61 9a f5 2a 09 52 09 84 12 88 a9 6c d6 52 dd 0a d6 79 59 5f 5e 4f 09 e2 12 b8 19 d4 53 44 ad 21 41 30 f9 90 4b 31 90 62 45 0a 1e 99 22 95 12 74 e3 88 74 1e 1f e2 ec f5 4d 01 cf f4 7e c6 90 5f 97 d4 48 a9 51 42 62 8d 25 b9 c8 38 8e 28 a5 a8 a7 79 b0 31 86 aa aa 18 86 e1 d0 d2 cc fb e2 92 99 53 4a 87 4a e9 30 5f b7 16 37 e1 17 a5 d4 76 6e c4 5a c3 f1 f1 11 ce 39 76 6a 47 d7 b5 8c e3 98 47 7d 21 62 6b 4d 12 82 7e 0c 6c 77 7b 08 9e 75 63 85 Data Ascii: <'T={O]\|u=F_!5bPnr.<^`(Y8srg8e6"2%T(%bi5X02()a*RlRyY_^OSD!A0K1bE"ttM~_HQBb%8(y1SJJ0_7vnZ9vjGG}!bkM~lw{uc
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: 84 1b c6 d5 fc fd 0b 21 1c 4a e7 d5 6a 75 38 68 8b 15 4f 29 af 53 4a 07 54 5a 88 dc e2 38 e7 b8 be be 46 4a c9 30 0c 08 21 58 ad 56 48 29 e9 ba ee e0 bd d5 2c 16 78 9d 05 0e 21 26 9a 7a 91 3f 5f 25 30 55 95 ed 88 52 a4 ae 0d a2 17 88 2a a6 7a b1 8c c6 56 42 a0 2b 37 c4 b3 ad ef fd e0 45 1a 7e 76 fd fc ad b3 3f d4 fd 2b df fe e7 e3 7b b7 47 5f b6 78 f9 ea 0a 60 0b 4f cd 2f e0 77 fe fb bf 88 bf f8 6f fd 72 f1 68 79 6c f6 ed 78 76 bd ed 3f 74 b5 e9 3f d2 8f dc 0f c2 56 83 17 2a 78 27 f6 43 c0 27 98 06 35 53 26 c9 e5 73 0c 09 ef 27 8f 24 a5 a7 b9 6f 01 93 02 84 38 1b 15 c9 77 94 d4 25 20 4b d0 96 4c 5b 04 e7 e5 cf a5 87 2b d9 05 98 e6 98 39 40 7c 0c 10 03 76 ba c8 6b ad 59 56 15 4b 6b a9 b5 46 4b 91 47 3e 29 66 63 bd 04 32 65 f0 e7 40 2e a1 f4 e7 4c f3 de 0c Data Ascii: !Jju8hO)SJTZ8FJ0!XVH),x!&z?_%0URzVB+7E~v?+{G_x`O/worhylxv?t?Vx'C'5S&s'$o8w% KL[+9@\|vkYVKkFKG>)fc2e@.L
2024-07-04 20:55:37 UTC	7116	IN	Data Raw: b3 83 65 96 d3 15 03 76 45 a5 15 92 48 d7 75 5c 6d f7 9c 5f 6d 79 7a 7e c9 8b f3 0b ae 37 d7 bc f5 d6 db ec af 2f 69 cf 8e 79 7c 76 c4 d1 b2 46 0b 88 2e 80 cc 4e 92 36 09 2a 69 d0 55 2e 1f e3 10 68 fb 81 dd 7e cf 7e 9f 0d e7 76 bb 1d 97 d7 3b 2e af ae 19 fa 8e d5 72 c9 a3 07 0f b8 77 72 92 ad 81 a6 25 6c 02 88 3e e0 47 87 17 0e 2d 32 91 24 92 e8 c7 11 17 3d 52 6b 7c 4a 74 6d 47 ea 7b 84 c9 26 00 22 c3 d8 59 37 1c b8 b5 42 65 2e d9 9c cf e8 cb 7b 5f 0e b7 22 8e 98 2f a8 33 c6 b0 5a ad 0e 00 18 e4 2d 17 82 dc fb d6 cd 82 d8 78 da 9d a4 dd 6f 27 bd 70 c5 7a b5 a2 32 d9 3d f4 e8 e8 08 ad 34 97 17 97 68 a5 58 ae 8e d2 d1 d2 8e b5 4e 6d 74 bb de e8 d0 ad d6 47 d7 ab a3 f5 56 36 8d 7b f6 d1 2a 3d 49 09 77 bc 84 4d fb b5 15 c0 7c f2 23 9c ff db df cf fd df f8 47 Data Ascii: evEHu\m_myz~7/iy\|vF.N6iU.h~~v;.rwr%l>G-2$=Rk\|JtmG{&"Y7Be.{_"/3Z-xo'pz2=4hXNmtGV6{=IwM\|#G
2024-07-04 20:55:37 UTC	8302	IN	Data Raw: 2f 2e de 7f 7e 79 fd 9e cb ed f8 64 eb c4 69 3b 8c d5 e8 9d 1a cb aa ca 94 ad 69 fc f4 f7 dc 80 4c 0b c2 52 31 a2 bb 09 c2 bb 34 4a 35 21 bd 05 cc 3a 94 b8 b3 40 fd 42 a3 a0 52 56 cd c9 20 45 6a 36 1f 57 dd 9d e9 66 d6 50 bc 95 e5 d3 74 00 95 1d b8 a4 2c bc 8f 22 1c 64 86 65 e5 8b 94 82 e0 3d 75 25 59 6a 4d bf df 21 79 48 5d 57 8c dd 9e 3e 79 6a 93 35 b2 52 4a 2a a9 31 d6 e6 5d 3d a6 42 a0 20 c9 49 36 29 a8 6d 8d b5 1a 6d 04 29 39 c6 14 f1 43 06 a6 46 97 05 04 55 55 4d fb 8c f2 89 3f 3a c7 6e 73 4d bf df b1 5e ad 79 fc e0 21 c7 c7 47 d8 da 62 a6 0c 24 05 68 25 a8 b4 44 8a 88 52 91 d7 1f dd e3 3b be e9 63 f8 61 cf 5b e7 e7 bc 78 f6 82 57 df fb a1 c9 8b 79 97 4d 00 54 95 39 cd ce e7 ad 0f 24 92 ba 51 79 29 a9 b2 91 7c 54 b7 56 8c 96 5b 06 94 86 9b 6c 29 25 Data Ascii: /.~ydi;iLR14J5!:@BRV Ej6WfPt,"de=u%YjM!yH]W>yj5RJ*1]=B I6)mm)9CFUUM?:nsM^y!Gb$h%DR;ca[xWyMT9$Qy)\|TV[l)%
2024-07-04 20:55:37 UTC	7366	IN	Data Raw: c4 8d 13 89 63 36 e3 2c 5e 40 59 f8 5e 68 95 65 a9 d9 64 29 2a f3 6a ce bb b2 c0 62 44 56 a4 67 f3 fe b6 00 4a f3 12 ee ae a8 a1 04 63 b9 20 e6 08 f6 dd 20 9d 3b 17 ce 83 1e 38 00 69 45 34 3e cf 3c b7 96 42 4f 87 50 31 e9 cb 17 5f a6 54 a6 69 0e 7e 43 ee 98 00 b0 e0 51 c9 e4 3a 4c 67 3f 9c 24 b3 78 3c 90 81 ae d1 8d b4 43 47 3b f6 8c c1 83 cc bd 2d 52 11 66 cf 53 4a 85 d4 1a 29 35 08 99 75 d9 64 3b 5c ad b3 16 59 28 c5 a2 69 58 af 16 34 4d 85 95 90 42 16 9b f8 b9 ad 50 cc 95 00 14 e4 fc a6 c2 99 cf e0 cb 21 39 6f 4d 94 92 c4 98 bd a5 82 cb f8 40 70 93 96 57 e7 00 3e 1c ec 05 e5 e7 66 1b 61 8a 69 f2 bc 1a 71 ce 13 f1 84 71 cc 87 60 ca 7e 58 bb dd 2e 23 db 84 ec 04 02 87 60 2d bd 78 99 e7 ce ab b8 c2 79 2e d7 d5 9c 4a 39 37 df 2b f7 3d b0 f7 ca 8e d3 09 79 Data Ascii: c6,^@Y^hed)*jbDVgJc ;8iE4><BOP1_Ti~CQ:Lg?$x<CG;-RfSJ)5ud;\Y(iX4MBP!9oM@pW>faiqq`~X.#`-xy.J97+=y
2024-07-04 20:55:37 UTC	10674	IN	Data Raw: 25 79 04 87 88 24 64 2a 40 98 41 59 2d 40 35 41 9a 44 d0 ce eb 76 49 ce 30 48 13 e8 aa 40 95 e7 88 23 df 8e b4 90 49 6b 9b 36 83 80 31 8e 4a 5b 3c 38 78 8c e3 93 53 d4 75 8d e5 72 81 01 bc e3 01 71 04 71 1c 83 50 8a a2 aa 5a 52 87 df 1d 77 58 50 9d 6b d8 cd b6 5d e1 c1 f0 a0 dc cf 39 38 65 a8 eb 12 c6 28 c4 42 20 4d 93 a6 6d aa 01 e2 d5 26 eb ba 86 88 b8 19 8d a7 cb 3b d7 b7 0f aa b2 ca 4f 2f e6 fd 8b e5 72 ea 40 a2 38 96 34 1a f7 8b 5e 22 4e 46 7d f9 a4 97 88 19 ac d3 da 5a f4 77 a4 7b ee 83 af c0 95 ee 5d 0b de cb 00 c6 ab f8 d6 bf 97 00 80 9b ee a7 fa f8 ec 6b 33 21 fb 26 ed 59 31 e8 57 4f e2 48 cc a2 4a 65 e0 5c 72 82 b8 92 2a 16 94 52 4a 82 88 6c 33 5c 69 26 a8 41 32 95 10 bf 7f ec 06 5b f7 f1 4e 01 d7 c5 f7 76 85 c4 82 9e 6f 77 e7 da 7d 6c aa 78 74 Data Ascii: %y$d@AY-@5ADvI0H@#Ik61J[<8xSurqqPZRwXPk]98e(B Mm&;O/r@84^"NF}Zw{]k3!&Y1WOHJe\rRJl3\i&A2[Nvow}lxt
2024-07-04 20:55:37 UTC	11860	IN	Data Raw: cd 67 d2 1c a4 84 f8 b6 26 68 5a 13 62 c0 98 05 8f bd 17 d4 68 3c c5 68 34 40 9a 24 a0 c4 2b 6b e6 ca 61 59 28 9c cd 57 58 17 35 44 32 44 9c a6 5e f0 df 5a 10 e1 49 f9 ef e4 c6 d1 1d 38 76 5b 8e 2b 73 87 0d 90 4e f7 bf 43 96 b5 5a c3 6a db ca 03 27 49 72 e5 fa 76 f1 de 00 a0 b5 82 d6 0a 75 45 60 ea 12 b6 2e a0 cb b5 49 19 56 83 54 1e 8d 52 71 f7 b9 9b d7 3f fa e2 9d 1b 1f 1d a6 d1 13 a8 6a cd 08 a9 2c ed e9 65 56 18 a3 b2 aa e6 55 f5 ff 7b ed 9e 39 e4 91 fb f6 ef fa 3f b9 f7 fe 8f db f8 1b 7f ea 7b 41 30 fa ca 09 e0 72 78 13 1f f9 5b ff 21 de fb b5 db b4 28 8f 52 ad 55 3a da 9e 16 83 e1 38 83 a1 cb 28 5a e5 79 a9 a7 59 5e c4 ac 52 04 4c 24 75 55 0f 09 c0 08 81 2d f3 dc 15 a5 21 56 2b 4f 3f 33 06 d6 28 10 67 21 98 f0 16 9c 56 a3 32 ba d5 c9 da c4 2d 6f 6a Data Ascii: g&hZbh<h4@$+kaY(WX5D2D^ZI8v[+sNCZj'IrvuE`.IVTRq?j,eVU{9?{A0rx[!(RU:8(ZyY^RL$uU-!V+O?3(g!V2-oj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	64662	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:37 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNTEvOTk3Yjg5MjQtN2QyNi00OTE3LTk5YmItOTgxNzRkMzJjNTIwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=f297d14f93e8ab06 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_7KWN4PCCYC=GS1.1.1720126520.1.0.1720126520.60.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.0.1720126521.0.0.0; _engage_session=cTZ0TzAxTjFrTHJPcmtrSHloKzRSVXBVRnlxVlJwbm10Vk9XQVZadW4rTXlURDlDTzBmL1FHcUorR1NXTGwzd2doRWFVOVZhZTFQTU9xTlZlTXlhNElkc2ZzVDlQZktOV3R4b2F1QWlVRWdiVEthMVZhTURhQ2JDVlRzUkJpR0xHVVVmVGhTSUJTbTFiUlVaNUhaejFOWXZNTkp5NmZ6M2NwOGZjSzRxaVpzek05V1B2cm1OaXFMVExrTDdPNVMyb0szVisxa2pIT25EVmJkK0lWZit0WE9rZGZFSnVEbjErTjFFc29LZHlxU1AwOUsyZG5rT09palJWeVpLajZ4NHZVQVhyL2tmb3pjcnJ6ODlRZnBzZGNNY3BVSDYxZkJ3c0YvSnEvejVKSmZVOTBBd1BtQUpObURtclUxbzRjY0J0bnNxWWszMGhXRVNaRUMxT0VvdHZ4aXJkak5wd1FiSjliekxEaTh3Wm5URXFXTHdKTzlvT2htVTJGVDFjN0lFMlR4Rmw3bjU1dzZycUhPKzRTSFo3OWZiK2ErQU03RHZ2cVJLSHRPbmtiVEMwb2tMUW9sSk9EdlpFQ1BidFRGdy0tcmw5UFlRd213WEhYS2hGTFhDc2RKUT09--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0
2024-07-04 20:55:37 UTC	626	IN	HTTP/1.1 200 OK Age: 1915079 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 21699 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:57:38 GMT Etag: "c59c8708a0da4b9ac4e4680522481a783ded0657" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 7b1059c84fac89fed8b7d39d61e014d64803609d X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 57a05f22-b014-413a-ae86-5435bf7d8f4b X-Runtime: 0.317307 Connection: close
2024-07-04 20:55:37 UTC	560	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 3e 74 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0c 00 00 01 04 00 01 00 00 00 80 0b 00 00 01 01 04 00 01 00 00 00 a0 08 00 00 0f 01 02 00 08 00 00 00 9e 00 00 00 10 01 02 00 09 00 00 00 a6 00 00 00 12 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 d2 00 00 00 1b 01 05 00 01 00 00 00 da 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 0e 00 00 00 b0 00 00 00 32 01 02 00 14 00 00 00 be 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 e2 00 00 00 a8 02 00 00 73 61 6d 73 75 6e 67 00 53 4d 2d 47 39 37 33 57 00 00 47 39 37 33 57 56 4c 53 34 46 55 42 31 00 32 30 32 31 3a 30 33 3a 31 32 20 31 30 3a 31 35 3a 30 38 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 Data Ascii: JFIFHH>tExifII*(12isamsungSM-G973WG973WVLS4FUB12021:03:12 10:15:08HH
2024-07-04 20:55:37 UTC	2372	IN	Data Raw: 02 00 0c 00 00 00 9c 02 00 00 00 00 00 00 32 30 32 31 3a 30 33 3a 31 32 20 31 30 3a 31 35 3a 30 38 00 32 30 32 31 3a 30 33 3a 31 32 20 31 30 3a 31 35 3a 30 38 00 2d 30 35 3a 30 30 2d 30 35 3a 30 30 f0 00 00 00 64 00 00 00 01 00 00 00 78 00 00 00 01 00 00 00 78 00 00 00 fc 00 00 00 64 00 00 00 46 03 00 00 64 00 00 00 00 00 00 00 64 00 00 00 fc 00 00 00 64 00 00 00 7b 00 00 00 64 00 00 00 4a 01 00 00 64 00 00 00 4c 31 32 58 4c 4c 44 30 30 53 4d 00 08 00 00 01 04 00 01 00 00 00 00 02 00 00 01 01 04 00 01 00 00 00 80 01 00 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 0e 03 00 00 1b 01 05 00 01 00 00 00 16 03 00 00 28 01 03 00 01 00 00 00 02 00 00 00 01 02 04 00 01 00 00 00 1e 03 00 00 02 02 04 00 01 00 00 00 4e 3b 00 00 00 00 00 00 48 00 00 Data Ascii: 2021:03:12 10:15:082021:03:12 10:15:08-05:00-05:00dxxdFddd{dJdL12XLLD00SM(N;H
2024-07-04 20:55:37 UTC	538	IN	Data Raw: 01 c0 51 c0 18 00 62 bf a5 db cf d8 c2 ef c4 1a a5 c6 af e2 ff 00 17 35 cd e5 cc 86 59 d6 d2 dc b6 58 f5 fd fc cc bc 76 00 40 00 00 01 c5 7b 05 97 ec 67 f0 a5 30 2e 57 55 bd c7 69 af 16 35 fc 05 bc 50 91 ff 00 7d 57 e9 d8 7a 31 a6 ae f5 67 8a ea a3 f8 cc bc d6 20 87 2a 99 23 b9 ce 09 ff 00 0a f3 89 75 98 c1 fd d5 b2 7d 58 6e 3f af 1f a5 7f 78 f6 7f b2 0f c1 45 19 3e 16 57 f7 7d 43 51 6f fd ba ae a2 db f6 49 f8 29 19 ca f8 4a 1f c6 f7 50 3f ce ea bd 07 36 63 ed 23 e6 7f 01 ab a8 6a 32 f0 09 03 d0 70 3f 21 56 96 19 47 32 3d 7f a0 c4 7f b2 bf c1 b1 d3 c2 56 ff 00 f8 17 7f ff 00 c9 34 d3 fb 29 fc 16 3c 9f 08 db 1f ad dd ff 00 ff 00 25 51 ce c9 f6 88 ff 00 3e 76 d5 fc 9e 82 b9 7b af 10 ca fc 0a ff 00 43 39 ff 00 63 ef 81 f3 e7 7f 83 e0 19 ee b7 ba 8a 9f d2 ea Data Ascii: Qb5YXv@{g0.WUi5P}Wz1g *#u}Xn?xE>W}CQoI)JP?6c#j2p?!VG2=V4)<%Q>v{C9c
2024-07-04 20:55:37 UTC	4096	IN	Data Raw: 03 c5 b6 91 9c 05 07 dc 9a ec 85 37 2d 91 cf 29 a4 74 37 f7 37 58 2b 6f 19 ff 00 7b 1f ca bc 16 f3 47 bc 95 89 90 80 7f da 61 ff 00 eb af a4 2d 75 cb 3b 90 07 4c fb d3 ae 6d 21 3c 81 5f 5f 46 d0 d2 c7 cc d4 93 91 f1 fc be 18 4c 12 f2 6e f6 5f f1 35 e5 3a 86 93 12 e4 2a 11 f8 d7 db 57 30 a0 ce 05 79 26 a5 60 1c 1c 57 d4 23 cb 3e 4e 64 29 c0 ad 38 98 8e 4d 75 57 16 04 31 e2 a9 0b 53 e9 58 b8 94 99 14 72 1f 5a 16 52 5f 8a bc b0 ed e6 b2 fc c5 5d c6 b0 36 35 3e d0 6a cc 77 46 b8 a9 75 14 15 9e ba 99 ec b5 cf 73 53 b2 06 9f ba a3 cd 3a bf 10 3e f4 9c 52 83 4d 02 96 98 16 05 4c 2a 11 52 ad 6e 04 ca 6a 61 50 83 52 83 4c 09 c5 4e 0d 57 15 61 6b 70 27 06 a7 53 55 d4 d4 c0 d3 02 c0 35 30 a8 05 58 14 01 38 a9 96 ab 03 53 ad 5a 11 38 35 30 35 5c 1a 98 56 83 2c 0a 9d Data Ascii: 7-)t77X+o{Ga-u;Lm!<__FLn_5:W0y&`W#>Nd)8MuW1SXrZR_]65>jwFusS:>RMLRnjaPRLNWakp'SU50X8SZ8505\V,
2024-07-04 20:55:37 UTC	5930	IN	Data Raw: 58 53 53 83 55 05 4e ad 5a 81 6f 34 f5 a8 01 a9 96 98 16 14 d5 91 55 96 a7 06 90 16 d6 9e 2a b8 35 38 a6 04 ca 6a c2 9a a8 0d 4f 56 04 f9 af ce 1f 8f 5f b4 cf 87 be 18 08 6d ae 61 96 f3 51 b8 87 ce 86 d6 33 b1 7c bd cc 82 49 65 20 85 52 ca c0 6d 56 63 b4 f0 07 35 fa 3a a3 35 fc 17 7e d9 9e 3d ff 00 84 83 e2 8e ac 14 af 93 a6 ac 7a 7c 58 eb b6 0c b3 e4 fa f9 cf 27 d0 60 76 af 46 9c 2e 62 dd 8d ff 00 8a 7f b5 9f 8e 3c 6f e6 43 35 d8 b0 d3 db 8f b1 59 96 8d 18 7a 4b 21 26 49 73 dc 33 6c f4 51 5f 98 d7 7a d7 5f 9b 1e c2 bc a2 eb 51 e3 83 d6 b8 7b 9b fe 0f 35 f4 31 56 db 43 98 f4 ab 8d 57 76 70 6b 15 b5 03 81 9a f2 ef b4 1f 5a 4f 3c fa d6 ba 12 7b 1c 17 de f5 d4 c5 73 b8 63 35 e0 90 dc 11 d0 d7 a3 da 5d 67 6a e7 8e a3 9e e7 00 f1 f8 0f ca 9b 42 3f 7b 3e 0d 5c Data Ascii: XSSUNZo4U*58jOV_maQ3\|Ie RmVc5:5~=z\|X'`vF.b<oC5YzK!&Is3lQ_z_Q{51VCWvpkZO<{sc5]gjB?{>\
2024-07-04 20:55:37 UTC	2361	IN	Data Raw: f8 1b e0 a8 e3 78 d7 40 d3 f6 bf 51 e4 a1 fc 8b 29 23 f0 35 fa b5 7d e1 04 39 68 1f 1f ec b7 4f ce bc 6e fb 47 9e df fd 64 64 7b f5 1f 98 aa 19 f9 bc 3e 00 f8 1e 3c ed f0 f5 8f 23 1c c2 ad ff 00 a1 03 5c 1d c7 ec e5 e0 06 39 6f 0f da f5 cf 46 1f c9 ab f4 c1 a2 aa ac a3 bd 2b 81 f9 88 7f 67 5f 00 2f 23 c3 f6 7f f7 c6 7f 99 af 41 d3 be 13 78 62 c7 02 db 46 b1 8f 1f dd b6 88 1f cf 66 7f 5a fb d4 c4 bd ea 33 0a f6 02 ab 50 3e 68 83 c3 f0 c4 36 a4 2a 83 d1 46 3f 41 57 8e 8b 0e 39 8f f4 af a1 fc a1 4c f2 47 a5 66 07 ce 03 43 88 1c ac 5c fa e2 b5 23 d1 47 04 d7 bd 1b 71 50 9b 51 48 67 91 2e 90 a2 9e 74 d4 15 ea 0d 66 2b 2e 5b 10 69 01 e7 a6 d2 31 55 59 10 70 2b b3 7b 11 e9 59 6f 67 8e 82 80 39 6f c2 98 13 9a d7 92 1c 76 aa a1 68 02 80 46 06 b5 a3 1d 8d 01 6a c4 Data Ascii: x@Q)#5}9hOnGdd{><#\9oF+g_/#AxbFfZ3P>h6*F?AW9LGfC\#GqPQHg.tf+.[i1UYp+{Yog9ovhFj
2024-07-04 20:55:37 UTC	5842	IN	Data Raw: 2d 4d 26 a3 26 80 39 5d 63 4d 5b d8 19 0f de ea a7 df ff 00 af 5f 08 6b 3a 54 91 b3 23 2f 23 a8 35 fa 25 9a e1 35 ad 1a 3b d4 24 71 20 1c 1f 5f 63 4c 0f cd db 88 99 00 04 57 30 ed b3 a5 7d 11 ab 69 25 37 2b 2e 18 76 af 15 ba b3 ea 08 ad 6e 07 9e cc ec c4 9a c8 28 49 19 ae c6 4b 7c 76 ac f6 87 90 45 58 8c 55 83 ae 4d 3f cb 20 e7 a8 ad 30 39 c5 46 dc 75 ff 00 3e d5 d1 19 19 34 67 14 e7 3e b5 76 13 92 09 a6 16 04 53 11 fb e3 a5 7b 4a 57 47 0b 40 ff d3 ff d9 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 Data Ascii: -M&&9]cM[_k:T#/#5%5;$q _cLW0}i%7+.vn(IK\|vEXUM? 09Fu>4g>vS{JWG@CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	64663	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:38 UTC	1669	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMTAvMDEvYjNmNjI2YWQtNTI1Yi00MDc4LThhNzMtYjI4OTE1NWI1ZGZmL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=e7a7d525434ae295 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/about Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:38 UTC	626	IN	HTTP/1.1 200 OK Age: 1915130 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 87652 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:48 GMT Etag: "a2b4c43c1c5c50d762d26d37f1a2534a851a0d52" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 6666462e6f48ada42757ee31527c9450e8bd75a5 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: d5d81f19-f2d5-4977-af2b-82d41bff5292 X-Runtime: 0.491853 Connection: close
2024-07-04 20:55:38 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 0a 02 fd 9a 58 68 00 00 80 00 49 44 41 54 78 da ec fd 77 bc 6e e7 75 16 8a 3e e3 2d 73 ce af ad 5e 77 2f d2 d6 96 e4 ad 2e 59 2e 49 1c 1b c7 b1 43 9a 43 48 20 81 40 4e e0 84 c0 05 02 09 90 7b 53 08 e6 dc 8b 2f 29 07 c2 e1 77 80 f0 3b 81 90 1b ce 21 87 60 92 00 8e 6b b0 2d 5b 2e 92 d5 f7 de d2 ee 65 f5 f6 b5 59 de 76 ff 78 df 77 7e df da 5b 86 14 20 3f c9 9a fa 2d ed 55 be b6 be 35 c7 1c 63 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIMEXhIDATxwnu>-s^w/.Y.ICCH @N{S/)w;!`k-[.eYvxw~[ ?-U5c
2024-07-04 20:55:38 UTC	2372	IN	Data Raw: 2f 5d ba 84 63 c7 8e d1 67 3f fb d9 f4 c9 cf 3d 79 f2 dc b9 f3 7f 6a 77 a7 fb 7d eb eb 6b 8b db 9b 9b c4 39 c1 19 03 6b 81 ca 68 68 a7 51 e6 03 98 aa 02 27 8e 24 49 d0 6e 34 30 d1 6a a2 d3 6a 22 25 42 3b 15 98 6a b7 30 d9 6a a0 21 05 12 c1 c0 39 03 88 c0 18 03 23 06 ce 38 38 e3 00 0c 9c d3 70 ce c0 c1 81 20 60 2d e0 2c 40 24 40 8c 41 3b 8b a2 2c 50 96 25 88 08 9c 73 38 67 eb a0 53 c6 42 19 07 ad 2b 94 45 09 a5 35 f2 a2 82 71 0e 8e 09 54 d6 a1 d0 1a 95 b5 d0 00 2a a5 41 f0 af 07 44 b0 ce c2 11 c1 80 a1 aa 4a e4 c3 21 ac 31 00 00 c6 18 92 24 01 e0 03 b0 ac 2a 18 63 90 35 1a 10 42 84 40 05 1a cd 16 88 31 34 1a 0d 0c 06 03 f4 7a 3d 18 6d 61 8c c5 c4 c4 04 3a 9d 0e 18 63 68 b6 1a e0 9c a1 d7 eb d5 17 08 22 82 d5 0a 5a 6b 30 c6 20 84 80 14 12 d6 18 9b 35 b2 17 Data Ascii: /]cg?=yjw}k9khhQ'$In40jj"%B;j0j!9#88p `-,@$@A;,P%s8gSB+E5qTADJ!1$c5B@14z=ma:ch"Zk0 5
2024-07-04 20:55:38 UTC	538	IN	Data Raw: 28 10 1a 04 88 09 0f 26 85 0b 09 63 0c d6 21 94 c4 f0 25 b7 63 00 59 5f 3a 87 e7 f7 8f e1 03 40 08 01 63 e0 03 c7 85 fe 97 33 58 e7 01 36 c3 09 89 e4 30 c6 c1 5a 80 38 c1 39 ff 3a 9c 73 b0 b0 90 09 07 b7 04 6b 0d b4 32 70 04 70 10 5c 2a 01 18 c0 11 10 b2 5d e6 38 a4 b1 c8 ac 43 22 38 72 65 50 6a 0d 18 0d ab 35 8c 75 10 8e 60 b4 43 a9 aa 3a 43 0a 21 90 24 49 7d f1 89 19 13 40 8d 32 4b 29 eb 9e d8 18 53 07 24 e0 2f 6a 45 51 a0 d3 6a a2 dd 6e 83 88 90 e7 79 3d f3 4e d3 14 69 9a 82 88 50 56 15 12 5f 25 51 3e cc 93 9d 9d 9d 07 9e 7d f6 d9 47 5b ad d6 27 2f 3b 37 df 99 98 50 49 92 18 63 8c 7a ff fb df 5f 5d bf 7e dd d5 a3 aa ff 0e 81 fc 46 00 ff 01 8f f8 c7 01 80 eb d7 af d3 85 0b 17 c4 33 cf 3c c3 ac 31 5c 29 25 bb bd 5e 92 0f 87 60 8c 99 17 9e 7f fe c0 17 3e Data Ascii: (&c!%cY_:@c3X60Z89:sk2pp\*]8C"8rePj5u`C:C!$I}@2K)S$/jEQjny=NiPV_%Q>}G['/;7PIcz_]~F3<1\)%^`>
2024-07-04 20:55:38 UTC	4096	IN	Data Raw: 37 3b ff de 08 e0 3f e0 11 91 cc 67 9f 7b 4e 6c 6f 6d 4d 59 6b 1b dd 6e d7 16 79 ce a5 10 6e d0 eb 4f ec ed ed 4e 5e bb 72 65 ee b9 a7 9f 7e ef ee e6 e6 b7 aa 7c b0 54 18 43 04 20 6d 64 b0 0c 18 16 0a dd 7e 1f f9 70 08 66 35 96 67 66 f1 f0 e9 93 38 73 c7 11 4c b5 1a 60 32 f1 40 51 1c d5 30 16 c0 26 02 10 4b 66 0f 64 31 ce 01 f8 2c 49 14 fa 45 22 30 67 43 d6 89 48 b4 47 80 19 63 1e 98 62 0e b0 0e 8c fc e3 3a 6b 40 88 41 1f a9 9e e4 a3 d2 59 30 49 00 39 70 f2 17 0d e3 01 69 08 62 d0 24 a0 09 d0 da 23 c6 86 01 3c e1 00 07 ac b1 20 47 80 02 2a 38 58 07 70 26 01 62 70 a4 60 01 70 03 c0 3a 8f 58 13 c0 38 41 2a 0b c9 19 78 e1 e0 20 c1 08 10 49 02 47 84 52 55 10 70 28 f3 21 5c 40 c5 99 9f 91 01 00 8c 51 b0 d6 d5 fd 79 55 94 3e 2b 8f cd 95 c7 ff 9e 52 ca 3a 03 1b Data Ascii: 7;?g{NlomMYknynON^re~\|TC md~pf5gf8sL`2@Q0&Kfd1,IE"0gCHGcb:k@AY0I9pib$#< G8Xp&bp`p:X8Ax IGRUp(!\@QyU>+R:
2024-07-04 20:55:38 UTC	5930	IN	Data Raw: b7 77 c4 19 23 38 11 52 29 c0 9c 43 35 cc 61 2a 05 32 80 77 3e af 70 74 71 0e 5f f7 e6 87 b1 30 3d e1 51 67 c6 01 36 d6 fb 46 20 25 b8 33 32 78 41 7b fc 18 47 9f eb c3 37 c1 61 56 bc ff eb f1 ef ed fb 31 e2 54 c8 97 d1 0e 63 a5 36 dc ab be 07 b7 3d ed d8 eb 25 d0 7f 25 63 50 4d 36 a9 a9 8b a1 37 dd f7 38 44 01 7c 1b dd 96 0b 01 21 a3 ab 08 07 17 1c 42 70 a4 89 44 23 4d d0 94 02 cd 44 a0 91 c8 7a 7e ab b5 06 e3 bc fe 3a a2 c8 f1 5f 22 aa 33 68 cc c4 91 7d 55 96 65 9d 35 f3 3c c7 70 38 ac b3 69 bc 00 a9 c0 ea 8a 63 a4 38 82 8a d6 3e 91 a2 19 2f 0a a3 8b 13 58 5e e4 29 18 89 b2 2a e7 b6 b6 b6 8e 3e f2 e8 c3 cf 2e 1f 58 7e b1 db ed 7e e3 2f fd d2 2f 1d 75 ce 51 7c dd bf 9b e3 8d 0c fc bb 38 3e fa d1 8f e2 e3 1f f9 6d 4c 4f 4e b0 df fc f7 1f 9a bb 7c f1 e2 9d Data Ascii: w#8R)C5a2w>ptq_0=Qg6F %32xA{G7aV1Tc6=%%cPM678D\|!BpD#MDz~:_"3h}Ue5<p8ic8>/X^)>.X~~//uQ\|8>mLON\|
2024-07-04 20:55:39 UTC	7116	IN	Data Raw: c1 91 0c 71 6b cf 5c 07 28 a1 56 1b dd 5a 42 03 7e e3 c1 88 8d 15 05 11 a8 51 65 6f 03 eb 3c 61 23 c4 bb d6 16 c4 18 54 58 5f 0a ce 61 e1 2d 7d e2 25 c1 06 ad 6e 51 14 b5 ba 28 ee 16 66 6c 24 f7 8c 17 1e 9f 65 09 fb 31 03 07 63 74 fd 3b 45 fd 70 bc 6f 1c 27 45 96 56 fc 1a 20 30 46 66 6a 7a f2 d2 bd f7 de fb eb 7f f7 ef fe 2f ff f9 3f 7f f2 77 06 2b ab 2b 6f d5 c6 34 8d b5 54 95 25 cb f3 bc c9 88 cd 6f 6f 6f 97 47 8f 1c 79 f1 73 4f 7c e6 ee b2 2c ce bc 6e 33 b0 73 0e cf 3d f7 1c 7e ec c7 7e 8c fe da 5f fb 91 77 5d bc 70 e9 03 9c 73 b6 b2 b2 fa 6f 1f 7b 74 ef 3f 4e 4c 4e f4 7f f3 37 7e ab b9 b2 b2 32 b5 b3 bd d5 98 e8 b4 3b 8d f6 f4 dc cd cd 2b 90 04 dc 75 ef 9d 10 9b 9b 58 d9 dc c6 cd 95 75 00 06 9d 4e 13 87 e6 17 70 fc d0 41 4c b4 9a 98 9c 98 40 b3 d9 42 Data Ascii: qk\(VZB~Qeo<a#TX_a-}%nQ(fl$e1ct;Epo'EV 0Ffjz/?w++o4T%oooGysO\|,n3s=~~_w]pso{t?NLN7~2;+uXuNpAL@B
2024-07-04 20:55:39 UTC	8302	IN	Data Raw: 5d 04 30 11 e1 6b de fd 0d f8 df 7e e6 ef 9f b9 f4 f2 f9 3f 2f b3 ec ec 9d 67 1e f8 e8 c6 f6 4e 55 0c f3 84 08 83 f9 85 c5 8b c4 d9 b5 33 f7 3d 62 3f fa 91 df c2 bf fc 97 ff 02 32 4d f1 af 7f e9 ff 40 bb 33 b1 f9 c9 df fe f0 c7 af 5c bb f2 c8 e9 f4 f8 fc d1 c3 8b dc 16 3d 90 01 78 9a a0 d9 14 d0 d6 b3 69 26 db 13 d8 de db c3 de d6 1e da cd 49 4c 4f cd 40 24 09 6c 50 07 6d dc dc c0 f9 73 e7 51 95 0a 59 da 42 df 58 0c 75 85 aa 3f 44 7e ed 3a 4e 08 89 e9 b9 05 0c b5 c3 c6 c0 20 9d 9c 86 da db 00 ef 57 60 8e 40 d0 b0 16 e0 e0 be 5f 05 00 0a 4b cf 6e 9d c5 82 6a 57 8a 78 78 63 0f df e3 da b0 c1 8f 28 d0 28 43 a9 e9 41 2b 5f a2 9b 70 a2 21 94 84 c6 68 14 ca a2 28 c3 c2 f2 10 42 82 f9 0c 23 a4 84 e0 7e 51 b9 36 e1 b1 8c 03 2f 2a 48 29 90 24 12 32 11 48 13 01 29 Data Ascii: ]0k~?/gNU3=b?2M@3\=xi&ILO@$lPmsQYBXu?D~:N W`@_KnjWxxc((CA+_p!h(B#~Q6/*H)$2H)
2024-07-04 20:55:39 UTC	7366	IN	Data Raw: 1f 03 2e 80 4e 0a af 34 18 33 8c 23 c0 3a 13 66 90 1a c3 61 8e e1 60 08 06 0e c1 39 e0 3c c0 26 b3 14 ad e9 19 20 6d 22 b7 f0 8b af 39 83 20 86 c1 70 88 0b 17 2f 62 6b 7b 0f 9c 13 7a a5 c2 f4 c4 04 16 17 66 30 35 33 e1 fd af bb 7d 74 07 43 5c d9 d8 c2 cd cd 4d 5c 98 99 c4 a9 23 07 71 74 71 0e 13 0d 0e 46 1a 70 1a 64 08 ce 32 38 08 70 26 43 56 8d e3 a0 50 1e 33 8f d6 9b 30 f3 56 5a f9 59 32 8b 3d 22 46 b6 3a 51 72 14 8d 00 c8 af 2a 49 13 89 44 70 34 12 81 b6 05 2a d3 04 0d 2b ec 16 05 c8 7a 52 0e 63 1c cd 76 0b 69 92 41 55 15 54 59 d6 4e 1d 95 52 b5 6b 89 36 5e 2f 1c 03 91 f3 c8 63 86 e7 9e 87 d1 4f 9c f7 73 e6 a7 0f 5a 6b e4 79 ee 47 46 81 85 15 4b e7 f1 65 ec f1 67 ce 05 f1 87 08 2d 0d 17 64 b5 11 04 94 13 13 93 37 26 26 26 56 94 31 ed b3 67 cf 2e 2f 2f Data Ascii: .N43#:fa`9<& m"9 p/bk{zf053}tC\M\#qtqFpd28p&CVP30VZY2="F:QrIDp4+zRcviAUTYNRk6^/cOsZkyGFKeg-d7&&&V1g.//
2024-07-04 20:55:39 UTC	10674	IN	Data Raw: dc 01 b5 11 3c 32 1c 19 a4 62 53 f9 3c 9a 4b e7 09 36 91 18 62 29 08 fa c6 76 2d aa a2 04 2b 13 03 58 45 c7 75 ce 30 4d e4 c7 92 2c 2f f4 34 0c d3 ee 51 e6 db 0c e6 a8 96 cc 01 a5 26 5c db df c5 f7 ee 3f c6 62 dd e0 ac b5 38 6d 7a d4 25 a1 2e 75 44 69 a5 e1 d5 07 83 38 36 e4 90 89 74 ca c4 34 4c e6 13 b1 9e 25 a8 99 a2 4b 3d 0f 55 02 43 44 0d 42 08 42 c3 0c 82 f6 b2 8e 45 a9 51 89 34 0e 11 40 bd 45 b9 5c 42 3b 8f ed 40 58 c0 e0 f4 6c 89 d5 7a 05 d5 2c f1 b1 17 af e1 ea e1 2e d0 75 d0 ce c1 70 2f f2 41 ca e4 6c 04 05 40 03 d3 42 61 bb aa e0 7d 81 e0 27 70 7e 0b 9d 07 3a 1f d0 3a 1f 03 bb c3 62 d5 e2 f8 ac c1 93 b3 15 4e 57 2d 56 9d 4c e1 4d 00 26 45 09 6d 0c ce da 16 eb e5 1a 95 29 a0 35 00 76 58 2c ce d0 74 3d 02 54 b4 ea 90 00 36 09 28 c3 a2 87 d5 c4 81 Data Ascii: <2bS<K6b)v-+XEu0M,/4Q&\?b8mz%.uDi86t4L%K=UCDBBEQ4@E\B;@Xlz,.up/Al@Ba}'p~::bNW-VLM&Em)5vX,t=T6(
2024-07-04 20:55:39 UTC	11860	IN	Data Raw: 8c b0 4a 0a 79 e7 b5 05 48 63 7f 72 0d 93 c9 04 8f ef be 8b 60 09 d5 64 02 c5 80 b7 0e a1 73 60 6b a0 27 5a 76 c6 06 c2 45 1e c7 27 27 7a 62 2c af 89 c6 47 d8 f0 11 27 c8 a4 15 58 b8 67 e0 f1 7b 48 71 4f 9e a0 9c 02 76 4e 6f 6d 5e c2 a5 9d 72 06 72 24 45 dd 3c 88 08 b9 2c 4a be c8 59 85 32 b6 14 79 38 95 b3 e2 90 71 53 b6 55 32 84 16 2d ba 40 e7 2f ec b0 02 1c ef 85 c7 eb 21 0c 25 f7 b0 53 8f a2 35 e9 fb 42 00 1c 03 69 ed 1e c5 e5 83 0f 70 c1 c1 b3 17 29 60 2d 3d eb db b7 ee e0 dd bb 0f 60 aa 0a 5b d3 02 67 8b 35 9e 2c 5a 9c 9d f5 98 d5 53 4c 8a a9 64 4f 53 61 77 6f 8a ae ef 70 f7 de 7d ec ed ee a2 2e 0c 74 5d 81 b5 42 5d 56 80 f7 f0 ce 43 29 86 81 08 eb 3b 12 bc b5 57 4a 5c 0b 09 32 8c 0a 5e 48 13 4a a1 a8 4a 9c 69 60 b9 6e 00 a5 64 3a ae e2 2d 10 db 89 Data Ascii: JyHcr`ds`k'ZvE''zb,G'Xg{HqOvNom^rr$E<,JY2y8qSU2-@/!%S5Bip)`-=`[g5,ZSLdOSawop}.t]B]VC);WJ\2^HJJi`nd:-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	64665	142.250.185.194	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:38 UTC	1418	OUT	GET /td/rul/16526066952?random=1720126536948&cv=11&fst=1720126536948&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fabout&hn=www.googleadservices.com&frm=0&tiba=About%20LiveWise%20Associates%3A%20Compassionate%20Therapy%20in%20Pickering%2C%20ON&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkn0vK_HQFkC3ve5Q4f4ThneP4kdJEsL04qS_jWgxiBtDDRhZnZcLgq9UgQ
2024-07-04 20:55:39 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:39 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-04 20:55:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	64664	216.58.206.34	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:38 UTC	1294	OUT	GET /pagead/viewthroughconversion/16526066952/?random=1720126536948&cv=11&fst=1720126536948&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fabout&hn=www.googleadservices.com&frm=0&tiba=About%20LiveWise%20Associates%3A%20Compassionate%20Therapy%20in%20Pickering%2C%20ON&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkn0vK_HQFkC3ve5Q4f4ThneP4kdJEsL04qS_jWgxiBtDDRhZnZcLgq9UgQ
2024-07-04 20:55:39 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:39 UTC	687	IN	Data Raw: 61 35 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a5a(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-04 20:55:39 UTC	1390	IN	Data Raw: 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 Data Ascii: \|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);i
2024-07-04 20:55:39 UTC	580	IN	Data Raw: 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 41 62 6f 75 74 25 32 30 4c 69 76 65 57 69 73 65 25 32 30 41 73 73 6f 63 69 61 74 65 73 25 33 41 25 32 30 43 6f 6d 70 61 73 73 69 6f 6e 61 74 65 25 32 30 54 68 65 72 61 70 79 25 32 30 69 6e 25 32 30 50 69 63 6b 65 72 69 6e 67 25 32 43 25 32 30 4f 4e 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 31 30 38 34 32 35 34 37 34 38 2e 31 37 32 30 31 32 36 35 32 31 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 Data Ascii: eadservices.com\x26frm\x3d0\x26tiba\x3dAbout%20LiveWise%20Associates%3A%20Compassionate%20Therapy%20in%20Pickering%2C%20ON\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d1084254748.1720126521\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Chrome%3B117.0.5938
2024-07-04 20:55:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	64666	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:39 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDkvY2E1OWFmNWQtMzM5Zi00ZGRhLWI1NDktM2RlOTJmNzYxMDZjL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=812399337bf0296b HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:39 UTC	626	IN	HTTP/1.1 200 OK Age: 1915148 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 87554 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:31 GMT Etag: "c46e0508f2c30a7d08869d1aa13a39c4f9ea940a" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 3c635b51a42cc47ff6c3e71cabebd523e828e99d X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 025cc6ed-491a-437b-9914-da905d4aa1fe X-Runtime: 0.430406 Connection: close
2024-07-04 20:55:39 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 32 f0 6e 3b 07 00 00 80 00 49 44 41 54 78 da ec fd 77 9c 65 db 79 d7 09 7f 57 d8 e1 e4 53 b9 73 ba 39 67 49 57 d9 b2 90 9c 03 06 8c b1 8d c9 30 0c f0 8e c9 f0 c2 bc 30 60 3e 03 18 18 7b 3c 30 0c c1 11 6c e1 2c 70 c2 d8 b2 2d db b2 c2 b5 c2 bd ba f9 de ce 5d dd 95 eb a4 9d 56 98 3f d6 3e a7 aa 65 1b 27 f9 ad 6e 51 8f d4 9f ee ae 3e 55 75 ea ee fd ec f5 84 5f 10 1c c6 e7 5c 7c c7 57 7d 11 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME2n;IDATxweyWSs9gIW00`>{<0l,p-]V?>e'nQ>Uu_\\|W}
2024-07-04 20:55:39 UTC	2372	IN	Data Raw: 71 8c 54 0a 21 25 42 80 94 02 21 ea e4 45 20 84 40 d5 c9 0a 1e ef 3d 52 4a b4 d6 20 40 08 31 fb 98 10 62 f6 f7 69 32 43 78 0d 9e d9 c7 44 9d d0 42 0a 04 1e ef 2c b1 92 cc f5 ba cc cf 2f b0 b9 b9 c5 95 4b 57 e8 77 fb 2c cc cd 53 19 c3 da c6 06 ad 4e 97 f1 24 a7 cc 4b ce 9c 39 c9 60 38 c4 56 9e 46 da 20 1f 4f c2 fb 88 22 9c f3 58 63 51 51 44 56 1a 31 1e 8c ee f4 a6 7a f1 67 3f f4 ec 73 df f6 97 bf 8e 1f fc d0 a7 0e fa 72 fe 77 e3 30 81 3f c7 e2 5f fc b1 3f ce 3f df 29 b9 2f 4e de 3d f0 f2 af 27 cd 6e 5f 48 41 bb d3 e0 ec 99 13 8c c7 43 ae ac 5e 41 a8 88 6e af cf 6b e7 5f e3 ea ea 25 5a 4d c9 a3 0f dd c3 43 77 9f e5 dc 89 25 8e 2f cf d1 ed b4 10 42 10 c7 31 91 8e 10 08 ea ff 13 f2 cc 01 1e 29 e4 ec fb ef 4f 48 ef 3d 4a a9 d9 9f f7 bf 46 ca f0 39 fb 93 77 f6 Data Ascii: qT!%B!E @=RJ @1bi2CxDB,/KWw,SN$K9`8VF O"XcQQDV1zg?srw0?_??)/N='n_HAC^Ank_%ZMCw%/B1)OH=JF9w
2024-07-04 20:55:39 UTC	538	IN	Data Raw: 47 bf f7 a0 2f ff 4d 71 98 c0 b7 61 7c ef d7 bc 9d 5c 75 d8 5c 38 71 24 b3 ea 2b 51 8d 15 bc a7 d7 6e 30 d7 6e 52 4e 26 b4 93 06 17 5f 7e 05 55 0e 78 db 53 0f 13 4b 8f 70 0e d8 b7 a7 ad 4f 46 e7 1c ce dd 8c 9a 9a 86 ff 8c 53 77 ba 12 b2 d6 62 ad c5 33 85 56 d6 7b d9 e9 1a 68 ff 27 f9 9a e0 50 c3 22 a7 eb 26 bf ef 6b ed 9f 4a ef 4f d6 29 12 6b 76 7a cf be 9f 9c 7d cf 69 9f ee ea 87 90 10 9e 24 96 b4 1a 11 0b 73 4d 8e 1e e9 10 45 9e 32 cf d9 bc b1 45 36 ca 49 92 04 21 25 65 59 a0 94 aa a1 99 e9 de cf ab 14 c6 59 ac b7 78 a1 94 75 fe 9d 7f fb 4f ff a1 b8 ac 0e 4b e8 c3 f8 5d c6 a4 7b 92 f9 e3 77 32 77 e4 c4 7d 2a 6d 3f 26 75 aa a5 f3 9c 3e 7a 94 44 08 dc 24 83 a2 60 ed ca 45 9e 7e ea 01 e6 3a 11 c2 55 08 24 a0 ea 04 db bf c2 99 4e 89 c3 90 49 d6 28 2c 3f 43 Data Ascii: G/Mqa\|\u\8q$+Qn0nRN&_~UxSKpOFSwb3V{h'P"&kJO)kvz}i$sME2E6I!%eYYxuOK]{w2w}*m?&u>zD$`E~:U$NI(,?C
2024-07-04 20:55:39 UTC	4096	IN	Data Raw: 8a 30 d6 52 e4 05 de 5a 3a cd 94 24 52 d8 22 27 52 92 28 8a 70 d6 21 11 e4 c6 9e bc be 33 78 e0 95 4b 57 f9 9e 6f ff d6 83 be 05 66 71 98 c0 b7 61 58 9d f0 6f 9e 8a 65 7f 6e e1 c8 91 63 27 e2 ca 96 f4 e6 7a 44 cd 94 ac aa d8 b8 be c6 da f9 d7 78 e3 a3 f7 d3 69 35 ea 69 f2 74 08 14 50 4b d3 95 cc de 6e 96 9b 00 16 d3 d5 51 00 39 54 98 aa c4 54 25 d6 54 38 67 b0 c6 ec e3 f0 d6 e8 28 a6 e5 b8 bb a9 cf dd eb 89 c3 e0 69 06 bb 64 af 8d 9d 7e 2d 6b 2d ce da 7a dd e4 71 f6 e6 9e 7d 5a a3 cf 4a 6a b7 d7 73 87 3f ef 07 7a 40 bb 9d 72 74 a9 cf 91 c5 0e 89 86 6c 32 66 34 ce d8 d9 19 60 9d a7 d1 6c 52 14 05 10 26 eb 69 12 07 e6 93 31 24 51 8c 10 61 32 8e 56 ed 71 36 79 f2 27 d7 76 79 ed f5 d7 0f fa 16 98 c5 61 02 df 66 e1 81 c2 c1 c3 5f f4 fb 1b ab eb 1b 47 9c 10 d2 Data Ascii: 0RZ:$R"'R(p!3xKWofqaXoenc'zDxi5itPKnQ9TT%T8g(id~-k-zq}ZJjs?z@rtl2f4`lR&i1$Qa2Vq6y'vyaf_G
2024-07-04 20:55:39 UTC	5930	IN	Data Raw: 66 3b 0e f6 24 ce 33 d7 d5 b4 da 0a e5 2d 02 85 14 b2 5e dd 78 8c b1 e1 97 ad c8 8a 8a 71 66 28 8d 20 2b 72 c6 93 9c 9d e1 24 4c c0 05 44 5a e0 bd a1 d9 6b 12 29 4d 1c 47 34 d2 94 66 33 21 89 62 6c 55 91 67 93 b0 e5 16 11 55 19 63 2b c7 68 9c 33 9a 64 6c 0f 3d fd ed 21 cb 8b 3d e6 7a 4d 22 1d 63 a5 a3 32 06 27 82 b4 b5 70 8e 48 09 62 a5 50 52 04 c4 95 b3 14 ce 52 38 83 c1 d1 68 24 e4 d6 33 dc 19 04 00 0b 3e 7c 3e 42 64 86 e3 bb de f3 8d ef 7e eb 41 df 22 87 09 7c 2b c7 e5 3f f0 85 dc 7f ef 7d ac 5f 3a ff b8 e9 76 16 d7 cb 8c b5 57 5e e5 e1 47 1f 24 6d 24 58 53 11 eb 18 85 e7 f8 d1 65 be fc 4b df cb fc 42 9b 49 36 40 47 c1 c5 5e d4 25 a8 b1 1e e3 05 79 61 18 67 19 45 59 52 19 cb 24 2f 29 8a 92 aa 32 75 cf aa 90 3a 62 6e be cf f2 d2 32 0f 3d a4 18 ed 8e b8 Data Ascii: f;$3-^xqf( +r$LDZk)MG4f3!blUgUc+h3dl=!=zM"c2'pHbPRR8h$3>\|>Bd~A"\|+?}_:vW^G$m$XSeKBI6@G^%yagEYR$/)2u:bn2=
2024-07-04 20:55:39 UTC	7116	IN	Data Raw: 8b 27 8f 30 c9 73 ae ad df c0 7a c1 ca 91 05 24 9e 34 8d 88 25 48 ef 5a d2 b9 a6 bb 05 32 f8 30 81 6f f1 90 5a d1 e8 74 84 90 52 7b e7 88 e2 18 3c ec 0e 46 08 19 e3 71 33 b3 4e 1d a7 08 20 1b 0d 42 8d 87 a1 d9 84 a5 c5 06 49 dc 67 79 31 9d 09 d8 55 c6 51 96 86 f1 28 a7 aa 1c c2 c7 41 6a 06 8f 77 0e 21 05 49 23 a6 3f d7 61 e5 e8 12 4b 47 e6 49 12 8d 35 39 3a 56 c1 6b 37 d6 c1 c3 b7 1e 84 49 6b f1 55 60 0c 85 10 75 f2 06 a9 58 89 46 78 cf e2 5c 9b c7 1f be 9b 67 9f 7f 9d 5f f8 e0 33 bc f1 0d 8f 72 ee cc 32 9d 46 8a a9 26 94 36 94 d3 d6 58 84 0c 3a 59 4e 3b 74 14 13 c5 71 a8 10 ea 87 42 e4 25 a6 72 28 1f 7a 6d 2f 3d 4a 45 18 27 d1 ba c9 8d ab 1b 5c 3d bf c6 5b de f4 00 0b 73 11 26 af 90 42 a1 a4 c5 e0 d0 5a 23 a4 08 30 51 29 49 92 18 15 69 d6 36 56 c9 4c c1 Data Ascii: '0sz$4%HZ20oZtR{<Fq3N BIgy1UQ(Ajw!I#?aKGI59:Vk7IkU`uXFx\g_3r2F&6X:YN;tqB%r(zm/=JE'\=[s&BZ#0Q)Ii6VL
2024-07-04 20:55:39 UTC	8302	IN	Data Raw: 3e eb 71 d8 03 df e6 f1 73 2f 5f e1 f1 a5 0e 3f f0 dd ff 71 e3 0d 6f 79 f3 99 66 bb f5 a6 29 d8 5f f8 20 e6 ee 6a 01 3b 57 4f 86 c3 5a d7 a2 b4 42 2a 45 92 24 34 db 2d a2 28 42 29 8d af 85 ef 82 81 b6 20 49 74 ad 94 61 70 b6 c2 e1 29 bd a5 74 16 2f 05 a5 0d 93 ee d2 1a c6 d9 84 ac c8 29 aa 82 c1 78 44 5e 15 38 29 88 1b 31 ad 76 42 bf df a2 d3 6b d1 ed 36 49 53 8d 12 1e ad 25 49 1c 11 47 3a 70 99 45 70 5c d0 3a 22 8a e3 e0 df eb 2c 55 ad df 35 93 01 72 b5 07 f1 4c 4e c7 62 7c 4d 73 f4 02 63 29 47 a3 f1 3f ff bb 3f fc 91 9f 7c 78 31 e6 fb 5f de 39 e8 cb f5 59 8f db 0c ba 7d 18 bf 5e 3c 06 fc e0 0f fd 1b 5e 7d f5 f5 77 3d fe 86 27 de d7 5f e8 2e 1a 53 e2 aa 20 f7 6a 8d a1 aa 7d 7b 85 f7 54 65 4e 59 e6 b3 7e 55 47 11 9d 5e 8f 24 6d 20 94 0e 2e f7 52 a2 23 15 Data Ascii: >qs/_?qoyf)_ j;WOZB*E$4-(B) Itap)t/)xD^8)1vBk6IS%IG:pEp\:",U5rLNb\|Msc)G??\|x1_9Y}^<^}w='_.S j}{TeNY~UG^$m .R#
2024-07-04 20:55:39 UTC	7366	IN	Data Raw: c4 c3 3e a0 11 c6 ce 6c 93 3c 25 ea 46 36 31 41 db 0b cd 71 1c cb 82 d2 35 82 2e 55 5d 51 d6 0d cb 24 45 56 25 5b 5b 23 8e 1f 1e 91 d5 25 b3 b2 e6 24 5d f1 c4 b5 1d be e2 0f fe 77 f4 3c c9 2f 7d f0 06 ef 7f ff 0b 2c 16 29 dd 4e 40 37 76 88 42 45 18 fa 1b f1 86 10 0a 25 1d 9a a6 c6 ac 31 39 52 51 b7 67 6c ad 6d 3a a0 35 22 d8 d9 ae 34 d8 22 45 6c f2 84 8d b0 56 44 25 04 52 ba d4 55 b5 71 4a 99 aa 05 b1 57 15 4d 63 57 4a 4f 08 94 23 a9 6b 43 d1 18 1a 47 71 f1 f1 c7 79 ea b9 e7 f0 c2 98 bc 6d a2 c9 4d c4 8b e5 47 af e3 52 0d d8 59 50 1b 0e 6e bb e1 56 92 d9 68 0b b4 37 ad a5 d1 fe cf fe bd e3 ba 78 ae 83 1f 04 24 49 42 b2 5a 52 d7 35 4e 1b c4 a6 05 78 71 f0 09 cf bc ee b5 6f db de d9 fa 91 df f7 f6 3b fc eb 9f bf fb 1b 7d e9 fe df 3e fe 5f 51 c0 ff cb bb bf Data Ascii: >l<%F61Aq5.U]Q$EV%[[#%$]w</},)N@7vBE%19RQglm:5"4"ElVD%RUqJWMcWJO#kCGqymMGRYPnVh7x$IBZR5Nxqo;}>_Q
2024-07-04 20:55:39 UTC	10674	IN	Data Raw: 4a b9 1d e3 fb 9f 2d 3c f7 1f 0e 2e 5f 7a 77 a7 13 ef fe 7f fe e5 d7 f2 25 6f 7a dd 7f 56 3d 7c 4c 15 f0 ff fe 27 df cd 5f fd e6 6f e5 17 bf e5 7f 7b e3 60 6f ff ef ca a8 f3 ce 97 ae df a4 5e a7 c8 b7 88 50 63 1a bb 6d 6e da 04 03 07 1a d1 b4 db 50 b8 70 b0 83 d1 56 fb 6b 84 a2 2e 6a f6 76 c7 5c bc 34 46 39 0d d2 71 70 95 47 55 d4 9c 1e 4f 58 2e 13 7c 2f 20 f0 02 4e 8f 8f 18 0e 62 5c a5 31 a6 a6 d4 a5 3d 33 29 85 6e 33 e8 f3 24 67 3a 39 c3 73 5c 94 74 f0 03 0f 21 9b 36 c0 da 23 d7 0d 4f bf e5 59 be ea 6b be 8a 2b 97 46 cc ef 5d c7 64 4b 94 b0 e6 02 53 d7 54 a5 4d ae 77 1c 17 a9 ec 2a b1 98 2f 08 3c cf ce 77 95 24 8a 02 82 c0 de 18 1c c7 dd 14 ef fa e2 96 42 e0 3a 56 85 a4 2c ce 02 25 6d b2 a0 c4 a0 84 44 09 d7 76 6a d7 54 8b 36 94 ac a8 35 3a ec b0 f3 ec Data Ascii: J-<._zw%ozV=\|L'_o{`o^PcmnPpVk.jv\4F9qpGUOX.\|/ Nb\1=3)n3$g:9s\t!6#OYk+F]dKSTMw*/<w$B:V,%mDvjT65:
2024-07-04 20:55:39 UTC	11860	IN	Data Raw: 47 b7 d3 76 e5 75 38 3e 99 f1 8d ff ea db 79 e9 a5 db ec ed 5f 64 b8 35 44 39 b6 93 bc e6 53 f9 be 6f d3 28 96 4b 9c 34 b7 2c b3 2b 57 5a 6e 73 41 51 14 ec 6c 6f 33 9f cf b9 7d fb 36 71 1c b3 bb bb bb 81 f5 e5 99 e5 8a 3d f5 d4 53 24 69 b2 59 10 00 e6 b3 19 57 2e 5f e2 e9 a7 9f e6 74 72 ca 78 3c 26 2b 0a 1c 47 e1 7b 2e a5 a3 08 5c 87 c5 62 ce c9 f1 11 a6 69 50 4a 52 d7 25 ab 55 d3 ee a8 24 b3 f9 82 9d 9d 1d ea ba e1 f4 f4 8c 20 f0 08 02 9f aa b2 5e ef 55 b2 62 b5 5c 12 86 41 9b a9 14 32 de da e2 f4 e4 98 28 8a 28 cb 62 93 da b8 58 cc 37 2c 6f 5d 6b a2 38 a6 2c 4a b4 d6 84 41 c0 ca 73 6d 27 1a bb 00 f8 be a2 a8 2a 42 df fd f5 51 62 7d ff ff fe ff e3 f4 a7 7e 42 ee 3f f1 f4 17 46 db 7b 9f 5b 2b 4f a4 45 21 9a 46 8b 5e 7f 80 72 7d aa ba a1 d6 35 93 c9 04 d7 Data Ascii: Gvu8>y_d5D9So(K4,+WZnsAQlo3}6q=S$iYW._trx<&+G{.\biPJR%U$ ^Ub\A2((bX7,o]k8,JAsm'*BQb}~B?F{[+OE!F^r}5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	64670	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:39 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDkvOTg2ZTEzZjgtNGZlNC00ZWQ1LTk3ZjYtMDVmZWEwZTIyNjgzL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=eb61b04775901328 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:39 UTC	625	IN	HTTP/1.1 200 OK Age: 1915142 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 6558 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:37 GMT Etag: "3287740fd065825722f2ea660ddde2a0fcc6fb3e" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: c2b64b24d614cb8f2aafe95dd979a1cc8daa86a1 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 5634b1db-f350-4aaf-bd78-9b83e39adc5d X-Runtime: 0.280004 Connection: close
2024-07-04 20:55:39 UTC	561	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 02 08 01 ff c4 00 3e 10 00 01 04 01 02 04 04 04 04 03 06 05 05 00 00 00 01 00 02 03 11 04 05 21 06 12 31 41 13 22 51 61 07 14 32 71 23 81 91 b1 15 42 52 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222">!1A"Qa2q#BR
2024-07-04 20:55:39 UTC	2372	IN	Data Raw: 1b 0b 3f 61 71 e9 6a cf a1 bc e3 ee 4f 55 c3 69 68 f4 a6 0e 4b 73 30 a1 9d bd 1e d0 7f 34 e1 66 1c 29 c5 6e c1 95 b8 b9 46 f1 9e 7a f7 61 f5 5a 6c 6f 6c 8c 0f 63 83 9a e1 60 8e e9 89 d9 2c e2 e2 ce 90 84 2d 18 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 05 cb de d8 d8 5c e2 03 40 b2 4f 65 d2 ae 71 6e a3 f2 d8 23 19 8e a7 cd d7 d9 ab 32 97 15 66 a1 1e 52 a2 b5 c4 3a d3 b5 0c a7 10 6a 08 ec 46 df 5f 75 98 f1 0f 10 47 0b 9d 03 5d 6f 3d 48 3d 14 8f 15 eb 6e c2 c3 e4 84 93 33 cf 2b 7d 96 5f 30 90 97 3a 47 12 e2 6f 73 ba 4c 3e 5b 65 92 f8 ae 28 5f 27 2f c7 79 73 8d da 6e d8 cc 87 60 92 89 a6 47 d0 0a d3 a4 e9 56 d0 e2 db b5 a9 4b 89 c8 63 72 7a 22 f1 f4 f2 40 b0 77 52 51 69 de 50 03 55 8d 9a 5b 43 6c 0d d2 f1 e0 80 46 ca 69 66 fe 16 c3 c7 4b Data Ascii: ?aqjOUihKs04f)nFzaZlolc`,-!B!B!B\@Oeqn#2fR:jF_uG]o=H=n3+}_0:GosL>[e(_'/ysn`GVKcrz"@wRQiPU[ClFifK
2024-07-04 20:55:39 UTC	538	IN	Data Raw: 28 f8 cf 1f 89 a7 43 db c8 e4 ac df 41 fe 37 e8 62 91 37 9f 4b 24 f4 ad 94 44 c3 fe 5d be c7 75 61 82 32 78 73 c6 ec d7 10 55 7f ea 89 ff 00 7b 49 83 2a c8 b4 31 27 d0 a9 1d 19 c4 6a 78 ff 00 f9 52 8f 78 a2 42 5f 4d 9b c0 ce 82 4b d8 3c 5a dc ba 15 8d d4 91 b6 69 4c e6 6b 41 e8 9f 64 63 f5 34 a3 f4 99 5a 18 d7 13 b1 16 14 96 56 4b 79 76 ee a2 74 7a bb bd 11 af 01 a9 bb f2 19 08 2e 73 aa 97 dc 89 c3 6f a2 af e7 e4 19 0f 20 3b 2c 0d 48 b7 69 b9 66 68 9a fa f2 93 b2 92 d4 58 4e 10 3d 42 87 d1 1c c6 e9 b1 b6 46 9e 66 b4 06 90 7f 75 37 91 91 0b b0 1c d1 56 b6 ba 12 f5 2d 15 7f 0c f3 ae 65 c4 0f 7f 39 e9 5b 92 95 7c cd 0e e5 f4 29 0c cc 80 f6 88 9a 76 1f 57 ba 58 f4 46 cd 0b 0c ce e5 dd bd 92 2e 89 d1 9b 61 29 eb 5b 69 4f 09 a0 59 42 66 ac 69 0e 5f 29 01 f6 0f Data Ascii: (CA7b7K$D]ua2xsU{I*1'jxRxB_MK<ZiLkAdc4ZVKyvtz.so ;,HifhXN=BFfu7V-e9[\|)vWXF.a)[iOYBfi_)
2024-07-04 20:55:39 UTC	3087	IN	Data Raw: ce 23 6c bc 9a b0 a3 e1 6b f2 32 1a da ea 52 f9 4c 71 36 9b 8d 43 f8 75 3c c4 e7 fa f2 8b 29 48 a2 4f 45 d3 0f 1f c3 80 0f 64 96 48 70 b0 0d 28 0c 1e 33 c2 c9 c8 6e 33 39 c4 a7 60 1f e5 17 f7 52 d2 9d 43 21 e2 36 e3 06 73 02 6c b9 69 aa ec 4a 7b 18 cc 28 93 cd 49 a1 99 ad 3f 55 a9 07 e8 79 92 62 89 9f 23 41 24 f9 13 a6 e8 50 63 c2 d9 4b ac b7 cc eb 58 a1 ca 71 44 5c 4e 73 c5 b5 a4 8f 55 53 d7 35 dd 41 da 83 f0 71 c8 8d 80 d5 b7 ab bd ed 5d 33 f2 f1 70 f0 66 8e 27 80 f7 ee ca f5 55 4d 33 4b 74 b9 26 69 85 c8 e3 67 d9 6f 1b 4b 6c 24 9c ba 16 d3 b1 1d 0e 19 f1 09 74 8f f3 38 95 3f a5 43 e7 6a 48 c0 03 28 04 fb 4c 6f 29 b4 b6 ed 9a aa 43 be 20 d4 59 a5 69 39 19 87 ea 8e 3a 60 f5 71 e8 b0 e6 97 3e 42 f7 1b 73 8d 93 ea 55 cb 8f f5 81 93 9a dd 3e 29 2d b1 79 a4 Data Ascii: #lk2RLq6Cu<)HOEdHp(3n39`RC!6sliJ{(I?Uyb#A$PcKXqD\NsUS5Aq]3pf'UM3Kt&igoKl$t8?CjH(Lo)C Yi9:`q>BsU>)-y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	64669	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:39 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDMvMzcwN2U5NGUtNGMwMC00ZjYyLWEzZjItOTcyNDA3MjEyNjUyL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=548868e047346673 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:39 UTC	626	IN	HTTP/1.1 200 OK Age: 1915121 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 91020 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:58 GMT Etag: "3de8a0d6aea956ba5bf9f0c24e51010e0aced087" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: f1b078ce0c3b036741a29189b976af19dc38dfd4 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 0028c53f-154b-49b6-88f8-7c9f9a068c1b X-Runtime: 0.473509 Connection: close
2024-07-04 20:55:39 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2c 0a 61 06 64 00 00 80 00 49 44 41 54 78 da ec fd d9 b3 6d d9 75 de 89 fd 66 b7 9a dd 9c ee b6 d9 37 00 08 02 20 48 b0 28 36 92 29 4b 2a 47 59 0e 47 55 d9 2f b6 c3 6f fe cb ec 07 47 39 fc e0 70 27 4b a1 90 64 35 a4 28 91 22 05 92 00 12 40 22 fb bc 79 db d3 ef 6e 35 b3 f3 c3 98 6b 9f 93 60 39 c2 2e 12 40 02 e0 42 5c e4 6d ce Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDpHYstIME,adIDATxmuf7 H(6)K*GYGU/oG9p'Kd5("@"yn5k`9.@B\m
2024-07-04 20:55:39 UTC	2372	IN	Data Raw: dc 7d 88 ab 2a 40 01 a0 94 fa 59 df 66 7f ad cb fe ac 9f c0 cf c3 95 73 c6 fb 91 dd 66 c5 76 73 cd a3 0f 7e c8 d9 d3 a7 0c 7d 4f ac 2c 95 83 10 23 31 46 94 d6 8c 3e 10 63 04 14 3e 24 86 d1 a3 00 ab 35 99 72 5e 66 30 46 a3 50 e4 9c 50 5a 93 92 dc d0 28 20 67 72 8c 24 6d c8 28 94 52 68 40 ab 8c b3 1a 6b 34 4a 41 4a 99 98 22 2a c8 b7 3a 63 70 c6 a2 94 c2 5a 83 ab 9c 3c ff 31 60 b5 42 69 0d ca d0 d6 99 14 33 46 59 6a a7 99 d5 96 a6 a9 41 69 b4 ae 49 29 90 62 a4 71 0e 6b 0d 31 05 94 b5 44 13 69 1b 47 4c 89 be 0f a0 60 de d6 8c 21 e0 7d 20 a5 44 65 1c ce 58 16 75 83 d5 11 ab 02 31 65 42 8c a4 ac 51 4a c9 7b e2 14 39 29 52 4a f4 dd 40 5b 3b 9a ca 40 4e 84 98 08 31 b3 68 6b b6 43 e4 74 bd 25 26 cf e1 bc a2 aa 2c 8c e0 a3 46 99 8c 35 9a 10 13 31 25 b4 d5 58 6b e9 Data Ascii: }@Yfsfvs~}O,#1F>c>$5r^f0FPPZ( gr$m(Rh@k4JAJ":cpZ<1`Bi3FYjAiI)bqk1DiGL`!} DeXu1eBQJ{9)RJ@[;@N1hkCt%&,F51%Xk
2024-07-04 20:55:39 UTC	538	IN	Data Raw: b2 96 ba a9 d1 5a 53 59 87 d5 06 00 63 2d d5 bc 16 04 bc b2 cc 67 0b ba 66 4b 8a 01 48 18 eb b0 ae 42 1b 0b 39 62 9d 63 be 58 d2 f5 3d bb cd 06 ad 34 ce 3a 92 1f 99 1f 1c 72 7c 7c 42 bf ed 18 ba 9e 10 03 a3 1b c8 28 0e 17 4b 34 8a a6 a9 a9 eb 0a 45 22 91 69 ea 76 3f 03 6f 9b 96 79 e5 d0 06 86 a1 a2 ad 0d bb 5e c6 3e 07 63 4d 63 61 37 78 32 89 55 37 d0 d4 15 39 45 b6 fd c0 7a 3b 90 93 e2 68 69 a8 9d e2 aa f3 5c ad d6 dc 3f 9e d3 d6 06 ef 0d c3 10 68 aa 8a 90 04 e0 f2 3e 60 ac 8c 8d 42 88 18 a3 18 b7 1d ff f9 0f fe 35 ed 6c ce 7f f5 bf f8 df f2 e0 95 d7 51 4a ff ac 6f c7 ff bf af 5f ea 00 fe 5c e9 9c b2 cc 3d 63 c4 0f 3d be ef b8 3c 3f e5 c3 f7 de 61 e8 77 d4 95 21 46 cb 18 06 8c 56 d4 95 8c 46 46 1f e9 c6 88 73 0a eb 2c 79 1c 89 29 93 72 26 7a 4f 4a 19 43 Data Ascii: ZSYc-gfKHB9bcX=4:r\|\|B(K4E"iv?oy^>cMca7x2U79Ez;hi\?h>`B5lQJo_\=c=<?aw!FVFFs,y)r&zOJC
2024-07-04 20:55:39 UTC	4096	IN	Data Raw: b0 ee 07 f4 30 0a b2 8b 62 0c 5e 02 38 06 50 0a 67 2c 2e 1b ac 55 a4 1c 65 9e 6a b4 64 cc ca a2 54 22 25 4f f0 23 e3 68 b0 46 a3 95 c2 55 15 56 2b 50 32 e7 75 ce e1 ac 63 de 36 c2 de 52 99 e0 7b 16 8b 23 6a bb 84 9c 50 08 f0 15 83 47 93 a4 bf d4 0e ab b5 90 3e 0c b8 ca 49 66 6f 67 a4 10 01 d0 85 a8 11 e2 28 59 da 55 68 63 64 2e 7b 20 bd b7 31 86 7a 79 80 1f 07 2a a5 b9 77 f7 2e 4e 1b 86 d1 03 32 4e 33 ce 52 35 73 ba dd 06 ab 0d 47 47 c7 a4 1c 71 95 83 1c 05 f5 76 8e 1c 64 9c 66 94 26 86 39 5d 27 e3 ad ae 1f 58 b4 33 e6 f3 2d 9c 65 48 d0 f5 42 66 59 36 33 9a ca f2 fc 6a cb 76 2b 20 d5 bc 71 ec 72 66 bd 1b 69 ac a5 76 42 39 1d bd 97 6c ab 35 c6 1a b4 42 58 5b 56 46 7f 31 27 e6 ae 61 7b 7d cd bf fa a7 ff 57 ba dd 86 7f f8 8f ff 97 bc fa e6 97 31 d6 fd ac 6f Data Ascii: 0b^8Pg,.UejdT"%O#hFUV+P2uc6R{#jPG>Ifog(YUhcd.{ 1zy*w.N2N3R5sGGqvdf&9]'X3-eHBfY63jv+ qrfivB9l5BX[VF1'a{}W1o
2024-07-04 20:55:39 UTC	5930	IN	Data Raw: fa fd 58 ca 5a cb e1 72 c1 a6 1f 38 5b 75 58 a2 30 bf 52 26 a1 3e f7 5c a7 f7 76 18 47 b2 c9 45 9e d7 10 11 42 4d ca 59 34 ba 9c a0 fb 21 06 72 8e b8 d1 a2 f1 34 b5 c6 6a 19 f1 3d fd e4 23 3e fa c1 77 79 f3 cb 5f a3 aa 6a 21 c2 7c 01 fa e0 5f 9a 00 9e ae 1b 1a 65 62 7d 75 c6 f9 d3 4f b9 3a 7d 42 df 6f e9 87 0e 8a 1c 8d 0f 92 09 ac 31 25 38 65 ee 19 93 22 3b c9 36 21 24 7a 63 a8 ad 88 d2 d5 ce 95 1d 55 87 ab 14 db 61 a0 ef 46 b4 ce 42 e2 b7 0a 1f 47 1a 27 e0 54 08 01 53 55 b8 aa c6 38 0b 5a 23 de 05 10 52 20 0e 63 99 01 2b aa ba 91 03 22 a7 12 e4 8e 3c 46 e9 51 b3 8c c3 48 b2 79 a4 90 05 81 82 de 30 41 1d 79 2a 8b 8b 86 75 f1 26 28 a4 ff 9b c0 9b 82 73 ca a0 53 d0 de 6c e8 4c 81 3e 65 cf 8c ca f2 08 f2 2d 37 48 7d de ff 9f 54 08 2a 49 96 e5 e6 2b ca a3 c9 Data Ascii: XZr8[uX0R&>\vGEBMY4!r4j=#>wy_j!\|_eb}uO:}Bo1%8e";6!$zcUaFBG'TSU8Z#R c+"<FQHy0Ayu&(sSlL>e-7H}TI+
2024-07-04 20:55:39 UTC	7116	IN	Data Raw: 3f 6a 0e 96 73 8e ef 9e 30 5f 2e a8 9a 86 ba 9d a1 8d 23 85 50 5e 5f fa 5c f9 37 1d 54 b9 50 02 d5 ad 31 89 fc 85 41 99 aa 68 34 e7 69 30 23 e3 a1 b2 48 90 89 22 a1 8b 64 22 01 ae 33 29 4a 83 28 e3 a6 04 69 52 b5 50 fb 11 54 ce 81 14 86 92 dd 2d 59 95 92 7a 52 dd c8 94 aa 64 2f 46 2b 41 be e7 25 e7 9b 6a 49 d0 c0 1b 1a b6 56 c4 32 46 92 99 ae de 97 e9 fb e5 86 e9 75 1a 83 6b 67 58 ef a9 eb 96 7b 27 87 34 d5 53 5e ac 65 5b 2c 17 6a 68 2a 58 9e 2e 87 c0 04 6e 59 ad 08 31 30 04 4d 5b 0b 09 87 2c 4c 71 67 8d 8c 9c ac 96 5e d8 59 fa c1 73 b5 da 30 6f 05 fd 6e 67 33 ce ce 9e f3 ea 5b 5f 66 18 76 8c 43 87 31 8b cf dd 83 3f e9 eb 17 22 80 6f 66 26 37 20 96 2c b7 7b 86 dd 9a dd ea 92 f3 a7 8f 39 7d fa 94 cd ae 2f b2 29 72 33 84 24 4b fc 31 ca 1b 1e 62 e4 ee 61 43 Data Ascii: ?js0_.#P^_\7TP1Ah4i0#H"d"3)J(iRPT-YzRd/F+A%jIV2FukgX{'4S^e[,jh*X.nY10M[,Lqg^Ys0ong3[_fvC1?"of&7 ,{9}/)r3$K1baC
2024-07-04 20:55:39 UTC	8302	IN	Data Raw: 39 78 41 92 27 ff d7 31 88 72 3f 4a b8 ad 63 10 d4 d7 1a 83 73 82 4c 86 98 08 21 13 83 90 38 d2 64 37 92 c5 1c 7a d2 10 ce 65 79 3c 65 99 75 9e 3e 7b ce 07 e3 96 70 3c 67 38 38 65 d6 58 74 8a b4 5a f1 6b 87 60 0e 8f 8b 10 b9 04 95 42 d1 53 d1 aa 03 ae ae 57 8c 09 5c 55 34 86 73 82 a4 c9 51 a1 6c 21 40 65 01 de c6 61 60 0c 91 b3 f5 96 b3 f5 96 d5 ae c3 fb 40 63 2a 8e 66 35 17 dd 48 cc 19 67 32 cb 4a 63 94 a1 a9 35 8d c9 cc da 19 5f 79 ed 75 8e e6 0b e2 38 70 b2 98 31 bf 7b 48 a7 e4 c0 21 7a 76 57 57 b8 a6 e6 c1 9b 6f a0 5c 45 1c 13 fd 7a 8b ef 7a 84 a9 91 08 31 a0 b5 a2 2e be 42 31 65 51 1b 99 b7 0c fd 20 a8 f8 30 ca e8 2d 88 2a 87 b5 22 e3 6a 8d e1 95 e3 03 96 77 0f b9 dc ec d8 86 84 1f 03 7e f0 a4 94 38 b9 7f 97 5f ff ea af 30 6f 6b ae c7 81 d1 d5 ec 9a Data Ascii: 9xA'1r?JcsL!8d7zey<eu>{p<g88eXtZk`BSW\U4sQl!@ea`@cf5Hg2Jc5_yu8p1{H!zvWWo\Ezz1.B1eQ 0-"jw~8_0ok
2024-07-04 20:55:39 UTC	7366	IN	Data Raw: 57 bf 25 7f b7 9c e3 9a 06 d7 39 3a ad 18 54 36 2d 17 95 34 be 4a 86 e5 c2 cf a7 5d 75 34 2e 82 36 34 3e 26 99 a1 24 22 b4 5d 87 31 9a ca 8a e6 54 45 c9 17 f2 31 52 d8 2a d9 ae 04 b4 b6 92 15 ec 3c f7 2e 2f 79 f9 62 9b 1b 7b db 0c 47 23 ac 75 b4 5d cb 6a b9 a2 2c 2c 6d 3f 3a 4a a3 14 54 42 b6 d7 b3 45 a9 e5 b2 5f 93 3c f4 e8 74 1a 67 ff e0 28 68 b0 c1 24 33 3b 85 b6 d9 17 3a 21 d8 89 42 28 0c 2e 27 2c 2e e7 09 6d 83 ef 5a 42 70 e9 97 8c e4 82 8f f8 ce e3 5d 47 d7 b5 74 3e 12 82 c2 77 9e 56 79 74 50 74 0a 8a 6a c0 d6 c1 1e e3 bd 5d 8a 6a 40 31 a8 a4 ef 2c 07 49 43 9b 47 50 eb 2c 89 7e 16 1b a3 6c 39 da ca 7c 3b 44 a2 95 d9 9d 7c 5e 9d ca 54 0d a9 7d 28 ca 92 fd 9b b7 18 0d 2a 54 12 14 98 4c 48 49 bf 27 63 0a 21 12 3b 0f ce 09 95 b4 ac 88 85 c1 11 70 c1 d3 Data Ascii: W%9:T6-4J]u4.64>&$"]1TE1R<./yb{G#u]j,,m?:JTBE_<tg(h$3;:!B(.',.mZBp]Gt>wVytPtj]j@1,ICGP,~l9\|;D\|^T}(TLHI'c!;p
2024-07-04 20:55:40 UTC	10674	IN	Data Raw: 5a 94 7f 7a 27 a5 6e eb 1c b5 eb 68 bd 47 f2 9b 63 df 5b 2a 05 a5 56 d8 bd 1d 74 b5 0d 28 6c 69 31 5b 53 8a aa 12 93 3b e8 8d ef 63 12 21 9c cf 6b ee 9f 5e 4a ea 85 49 f3 db 7e 9f 7d f6 1e a5 db d7 87 87 f7 65 30 6b 7d b3 d6 f2 3d 42 32 74 a8 aa 52 3c d3 82 13 fe 79 88 28 b3 ee b3 6d 32 57 8c 31 52 55 25 db d3 09 de 8b 4a ee e2 fc 9c ef 7f ef 6f 79 f9 95 57 b8 7e e3 06 6f bc f1 15 5e 7f e3 6b 8c 46 63 9a ba 46 a5 b4 8a cf f5 09 bc 16 80 7b 4e 9e 3c e0 b3 0f df 61 34 d9 e1 c6 ed 17 39 7b fa 98 0f 7e f5 63 3e 79 f7 97 10 02 cf 3d ff 12 45 55 62 0a 4b 35 1a d3 b9 56 80 a5 41 45 dd cc 29 ad 25 ba 40 9b 6c 4c a2 02 17 23 6d 17 d2 e9 66 64 ae 9b 74 b1 eb f1 52 e8 51 c9 dc 9b e6 19 aa 8f 32 52 92 f5 93 46 07 89 d5 14 b4 fc 1c 9f a5 6c a9 7c fb f7 2d 62 a9 40 23 Data Ascii: Zz'nhGc[*Vt(li1[S;c!k^JI~}e0k}=B2tR<y(m2W1RU%JoyW~o^kFcF{N<a49{~c>y=EUbK5VAE)%@lL#mfdtRQ2RFl\|-b@#
2024-07-04 20:55:40 UTC	11860	IN	Data Raw: 0a 39 0d b3 46 9a a4 83 b5 69 44 25 fb 98 68 87 83 96 55 64 b2 ef 96 49 92 45 15 09 0e 7c 12 e9 4b 79 bb ee 1b 75 4c 82 c0 94 fc 98 39 e7 c4 84 98 a7 13 58 a3 51 46 4a 68 95 35 d5 31 24 88 3b dd 9f 28 46 fa be 47 77 1d 5d d7 72 b5 58 f2 b3 0f ee f3 ab 4f 1f 89 7b 68 4c 33 fb 67 44 08 eb 93 73 8d ff 0b 9b 3c 93 27 d7 b5 c1 b3 7c 7c f9 2c 72 e2 1b 93 14 45 1b 23 be 4d ad 6f 61 0d c3 aa a4 69 5b bc 17 73 44 9d be ce 18 71 69 59 cc 17 78 e7 d9 d9 dd e5 0f be fd 6d fe b3 ff fc bf e0 5b df fe 23 b6 77 76 68 9a 1a ef 1d 07 87 d7 18 8d 87 e9 59 5b 93 4a fe be 8b f8 77 b4 80 e3 33 bf 93 f2 d5 b1 9c 5f f1 f4 d1 03 5c db 30 9d 6e 71 ed d6 6d f6 8e 6e 72 fe f4 11 5d d7 70 ef d3 0f 39 b8 7e 8b b2 1a 70 71 7a c2 c9 93 47 0c 47 63 bc 3f 23 78 e9 39 64 11 da fe 04 f5 2e Data Ascii: 9FiD%hUdIE\|KyuL9XQFJh51$;(FGw]rXO{hL3gDs<'\|\|,rE#Moai[sDqiYxm[#wvhY[Jw3_\0nqmnr]p9~pqzGGc?#x9d.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	64667	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:39 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDgvMjc2OWI5MzMtNDNmYS00Njk4LTk1YWQtYjkxMzMzMTQzN2UxL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=b7a469a71aceaff8 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=cTZ0TzAxTjFrTHJPcmtrSHloKzRSVXBVRnlxVlJwbm10Vk9XQVZadW4rTXlURDlDTzBmL1FHcUorR1NXTGwzd2doRWFVOVZhZTFQTU9xTlZlTXlhNElkc2ZzVDlQZktOV3R4b2F1QWlVRWdiVEthMVZhTURhQ2JDVlRzUkJpR0xHVVVmVGhTSUJTbTFiUlVaNUhaejFOWXZNTkp5NmZ6M2NwOGZjSzRxaVpzek05V1B2cm1OaXFMVExrTDdPNVMyb0szVisxa2pIT25EVmJkK0lWZit0WE9rZGZFSnVEbjErTjFFc29LZHlxU1AwOUsyZG5rT09palJWeVpLajZ4NHZVQVhyL2tmb3pjcnJ6ODlRZnBzZGNNY3BVSDYxZkJ3c0YvSnEvejVKSmZVOTBBd1BtQUpObURtclUxbzRjY0J0bnNxWWszMGhXRVNaRUMxT0VvdHZ4aXJkak5wd1FiSjliekxEaTh3Wm5URXFXTHdKTzlvT2htVTJGVDFjN0lFMlR4Rmw3bjU1dzZycUhPKzRTSFo3OWZiK2ErQU03RHZ2cVJLSHRPbmtiVEMwb2tMUW9sSk9EdlpFQ1BidFRGdy0tcmw5UFlRd213WEhYS2hGTFhDc2RKUT09--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:39 UTC	626	IN	HTTP/1.1 200 OK Age: 1915137 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 79775 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:42 GMT Etag: "99dd260bc51d447796e2c9c2eb8b60c8c02fde77" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 0ff2f3d71ca3dae80cc27fc4ac337628bc15d0b6 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: b50ea362-aa2d-48b8-8c9b-7544be12a13c X-Runtime: 0.418272 Connection: close
2024-07-04 20:55:39 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 30 1e 60 5a 2b 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME0`Z+zTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:39 UTC	2372	IN	Data Raw: d7 8d 38 4d 6f fe 06 9c 96 b9 ef 5d e6 46 4e ff 00 88 13 00 ff 0c 31 73 c2 00 00 80 00 49 44 41 54 78 da ec fd 79 b8 6d d9 59 17 0a ff 46 37 e7 5c cd 6e 4e 53 75 aa af 54 25 95 4a 43 1a 20 0d 10 a4 0b 11 85 80 d2 88 22 78 bd 7a 1f 2f 3d 88 82 57 f4 53 40 11 54 94 cf eb 67 7f f5 f3 13 7c 1e 91 8b 60 8f 0a 82 11 84 d0 89 60 4c 68 12 d2 56 aa 39 cd 3e 7b ef b5 e6 9c a3 7b df ef 8f 77 8c 39 d7 3e 29 7c 2e 92 64 9f 53 71 e4 d9 39 a7 f6 d9 7b ed b5 d6 1e ef 18 6f f3 6b 14 3e d2 97 02 c0 c0 97 fe 8e 3f 80 97 bc 72 7d f8 ae 77 bd eb 73 9e 7e f2 e9 af dc 9c 6c 5e 11 bc 6f 8d 31 38 d8 3f 84 52 0a 9b cd 06 21 04 30 b3 7c ab d6 d0 46 83 99 91 99 90 33 21 c6 0c 22 82 d2 0a ce 3a 18 ad 11 62 04 51 86 b1 1a 8b c5 02 5d d7 01 00 bc f7 18 47 8f 94 32 88 32 98 09 c6 58 58 Data Ascii: 8Mo]FN1sIDATxymYF7\nNSuT%JC "xz/=WS@Tg\|``LhV9>{{w9>)\|.dSq9{ok>?r}ws~l^o18?R!0\|F3!":bQ]G22XX
2024-07-04 20:55:39 UTC	538	IN	Data Raw: a8 82 ee c8 94 d1 b6 12 40 31 46 c4 18 40 cc 30 d6 4a 4d 58 3a af 31 46 30 11 9c 35 e8 9a 06 cb e5 02 7b eb 3d 58 25 9d 6a 09 7a 20 46 c6 36 47 84 20 20 0a 05 b9 2d 9b a6 85 b5 32 27 5e 2d 97 58 2d 57 68 1a 19 2b 49 43 ca c0 6a 0d 63 2c 28 67 00 0c f6 1e 91 e5 e6 ec 8c 81 52 46 52 58 eb d0 34 0e 8b b6 c1 e8 47 78 ef e1 83 8c ad 9c d6 d0 06 88 20 2c 5a 07 bd bf 87 ae 71 a5 f6 65 c4 28 c1 36 7a 8f a5 73 58 35 0e 63 0c 18 43 44 88 19 63 8c 18 7d 00 e5 84 c1 7b d8 de 60 7f bd 44 db 34 c8 21 20 73 96 5a 58 19 a8 4e 23 a6 05 36 9b 2d 94 02 72 22 0c fd 00 67 0c da a6 d5 e3 38 de 77 f5 ea b5 cf 38 bc 70 f8 73 1f ff f1 57 7e 66 d5 be 24 ef 77 17 70 32 1e 9d f7 16 b9 a3 d6 47 54 00 7f cb 9f fe 3e 28 fe 97 d8 c4 a5 39 3a 3a 79 d1 d0 fb df 92 62 be cb 18 ab ad 6b 10 Data Ascii: @1F@0JMX:1F05{=X%jz F6G -2'^-X-Wh+ICjc,(gRFRX4Gx ,Zqe(6zsX5cCDc}{`D4! sZXN#6-r"g8w8psW~f$wp2GT>(9::ybk
2024-07-04 20:55:39 UTC	4096	IN	Data Raw: 50 49 af 8d d6 e8 9a 46 02 d8 da 02 b8 30 00 58 6e bf 31 60 18 03 62 88 c8 94 01 10 c0 0c 6d 0d 8c b1 70 b6 41 db 2d b0 ec 3a 2c db 0e ab ae c3 7a b9 c2 6a b1 c0 de 6a 8d e5 62 01 a3 b4 20 b6 98 c1 44 d0 50 d0 1a 50 90 e7 00 a5 64 e4 a4 95 cc 86 99 41 9c 0b bc 53 9a 5f 31 25 f8 71 9c 5e 5b ce 19 39 13 52 ca 25 fd 97 2c 22 85 08 ef 03 bc 1f 31 86 11 63 08 e8 b2 46 eb 2c ba 66 c4 e0 03 7c ca 18 52 c6 18 13 72 ca 48 49 46 4b 9a 01 63 34 52 4a d0 4e c3 35 2d 5a 65 91 b9 03 7a 85 10 3c 72 96 ee bd 74 ae 95 da 6c b6 77 3d fd d4 53 6f 58 af d7 3f ff fb 5f f2 f3 3f fc bf 7e c3 bf f0 5f f7 f7 be f4 bc b7 ca 1d b5 3e 62 02 78 b5 bf c1 2b c2 80 bf fd ef ff ac 79 6a 73 f4 d8 66 73 f2 3a 1f fc dd c6 18 ad 8d 45 df 8f f0 05 80 00 05 38 d7 80 89 91 42 84 62 40 3b 07 d7 Data Ascii: PIF0Xn1`bmpA-:,zjjb DPPdAS_1%q^[9R%,"1cF,f\|RrHIFKc4RJN5-Zez<rtlw=SoX?_?~_>bx+yjsfs:E8Bb@;
2024-07-04 20:55:39 UTC	5930	IN	Data Raw: d0 cb f0 d2 57 3f 74 de 5b ec b6 5a cf b9 00 3e 3c 38 c5 8d b0 c6 f7 be e9 6f 5b 40 5f d1 5a df 6b b4 6e c0 98 7c 83 88 01 6d 0d 9a 56 c6 3d 28 1e 47 aa 8c 64 42 8c 05 e4 21 37 85 56 42 c4 6f 8b be 32 4a 33 46 6b 3d 4b ed 4c e0 07 4c 6c 23 05 60 1c 07 18 63 b0 bf bf 8f 45 b7 98 d2 e7 33 75 a8 d1 bf 4e 50 8a 37 d2 b3 cd 7c cf 8e 8d 00 28 de b9 6d a7 2f de 99 19 cd 35 73 fd fe 19 46 a9 e6 06 d6 b3 10 22 7e 3d 92 84 d6 66 22 7c 88 16 57 03 67 9d a4 c5 46 63 b5 e8 a4 d1 67 0d 72 4e 18 c6 11 99 19 ca 08 9a 2d 85 00 cd 80 06 17 17 8a f9 fd 4b 39 63 18 46 77 72 72 72 ef e9 76 f3 0a ef c3 dd 3f f4 9d df ad bf f6 5b fe 26 56 7b dd 79 6f b3 db 66 3d e7 02 78 b5 30 78 c5 13 6f c6 d6 8f 6d 8c e9 81 14 d3 dd d1 47 9b 72 2e 4e 0b 51 46 16 c6 c0 3a 5b 66 9e 52 9f 6a 2b Data Ascii: W?t[Z><8o[@_Zkn\|mV=(GdB!7VBo2J3Fk=KLLl#`cE3uNP7\|(m/5sF"~=f"\|WgFcgrN-K9cFwrrrv?[&V{yof=x0xomGr.NQF:[fRj+
2024-07-04 20:55:39 UTC	7116	IN	Data Raw: 18 32 16 d2 06 3a 93 38 0b 14 04 95 62 55 c0 0f e2 59 4b 85 9b ab 95 d4 af e2 3a 50 9d fd 80 5d 89 8d 67 75 4f a8 8f 5d bf 62 47 34 ae 0a 0b 0c 83 c7 66 db e3 f8 74 83 be 1f 8b 31 36 61 bd 5a c3 3a 69 06 49 47 78 44 4a 09 4d e3 b0 5c 74 58 2e 96 68 1b 07 e7 da 33 e3 1f 66 40 b9 4a d3 00 c0 0c 5b 54 21 4d 71 02 d4 5a 4d 92 3d 55 8a 96 79 87 7e 98 09 99 65 02 6e 9d 85 b6 52 0e 34 6e ee c2 13 11 86 41 a4 77 63 f0 f0 61 2c c1 19 8b be b6 06 b3 88 be b7 6d 0b a3 a5 99 55 19 4b 21 0a ed 70 ca 06 a8 f6 1f c4 8d a1 52 3e 53 4e a2 af 55 18 4c 31 11 9a a2 f2 21 e9 79 83 18 93 39 dd 9c de b5 77 b0 7f df 0a 2b fb f8 82 f0 56 a5 f1 da 4f fe 1c fc d4 9b fe f9 79 6f cf 0f cb ba a3 03 f8 c6 e2 12 cc e2 09 6c d7 2b e0 14 00 b3 23 26 5b 95 1e 72 ce 60 e8 c2 fd 85 20 ac 76 Data Ascii: 2:8bUYK:P]guO]bG4ft16aZ:iIGxDJM\tX.h3f@J[T!MqZM=Uy~enR4nAwca,mUK!pR>SNUL1!y9w+VOyol+#&[r` v
2024-07-04 20:55:39 UTC	8302	IN	Data Raw: 05 9b 9e 82 57 e3 38 5a ef fd 5d e3 30 be 20 7a ba 5b 3d f8 a0 69 d3 1a 27 2f b9 78 de 5b f8 83 be ee a8 2e f4 a3 8f ee e3 e1 c7 56 6a 31 36 5a 79 0a 29 79 17 63 b8 08 a5 5a bd 63 9b 32 39 cf ef e8 62 31 66 59 9d 8a 44 42 89 eb 94 33 58 2b 68 e7 b0 da df 43 0c 1e 61 d8 4a 03 2b 8b 96 71 ae fe 4a 98 1b 55 93 81 57 fd 79 45 c9 a2 8e 37 24 e6 e6 59 e7 ad 35 b3 ac 8a a7 46 81 32 60 4a cb 27 1b 53 ec fc 1c 48 e7 9a 51 03 1b 53 30 4d a9 6d a5 46 c2 42 d5 e1 2e b3 f8 20 11 17 7c f6 7c b3 6a 08 f4 d1 39 87 45 d7 81 28 63 b3 3d 45 0a 01 60 86 b3 56 c4 f3 8a 96 b4 36 1a 13 9c e5 d7 03 2b f2 f4 d2 ca ed 7c b6 73 2e 6e 19 bc 03 3b ad 4a 99 d2 fd ce e5 fd 19 43 c6 a6 1f 71 f1 70 1f b6 69 91 b2 a8 67 52 ce d2 dc 53 0a 0a 22 35 eb 8c 11 ff 25 1f cc 30 0c 97 bb 45 fb a8 Data Ascii: W8Z]0 z[=i'/x[.Vj16Zy)ycZc29b1fYDB3X+hCaJ+qJUWyE7$Y5F2`J'SHQS0MmFB. \|\|j9E(c=E`V6+\|s.n;JCqpigRS"5%0E
2024-07-04 20:55:39 UTC	7366	IN	Data Raw: f5 ad ef a0 3c 1f a6 0c ca 22 4f 1b 52 91 cd f1 19 4f 5f bb 89 eb 47 a7 88 39 4f 31 38 4f e6 cc f4 fc 80 ca 8e 94 df 05 e5 8c 6a 56 47 99 60 9d 11 81 fa 52 d2 cc dd 6f 11 b1 cf c4 f0 e5 30 6d ac 34 fc 9c 73 e8 fb 01 4a 13 8c 6b a6 e7 2f 65 83 81 d5 5a 2b a5 f6 58 a9 0b 04 dd 99 4b 5f 38 7c cc f3 ef c5 3b df 73 67 39 a0 dd 7e 29 f4 2f 02 3f f1 c4 27 e1 42 13 ec a2 5b 36 6e e5 94 37 23 a7 14 1d 13 75 c4 d4 31 b3 93 49 4c bd 11 a8 0a 6e 60 a2 f6 15 a4 11 17 aa 5e 5d 95 cd 33 23 70 05 7c 00 c8 89 6e ca 77 0b 93 c5 4c b7 5e b5 19 d1 a5 8e ce c4 08 31 e1 78 b3 45 ef 3d 36 c3 88 6b 47 c7 38 3e dd c8 6c 35 8a 06 72 88 b1 68 42 a5 49 fd 51 08 ee d2 50 a2 22 41 b3 5b cb 63 67 bb ef da ab cc 4b 6e 3f 46 46 e6 88 cc a9 04 1a 15 3c a8 7c b0 22 64 24 64 4e 88 14 10 29 Data Ascii: <"ORO_G9O18OjVG`Ro0m4sJk/eZ+XK_8\|;sg9~)/?'B[6n7#u1ILn`^]3#p\|nwL^1xE=6kG8>l5rhBIQP"A[cgKn?FF<\|"d$dN)
2024-07-04 20:55:40 UTC	10674	IN	Data Raw: fe 4f 7e 07 de f8 8e ef c6 6b 9f 78 8a cf 7f 42 2a e7 70 e7 38 4d df b0 df 1f 7e c5 74 9c 3e 77 38 1c ef 2f cb a2 bc a3 a6 94 54 92 1f d4 53 09 54 ed 75 d3 34 a1 eb 2c c6 61 40 f0 9e 4e 47 a5 e1 83 87 36 74 42 a4 44 23 97 9c 33 86 61 40 cf 25 74 55 41 d5 c5 59 1b 63 d5 a2 08 a0 9d 5e 52 4a 74 7d df 16 c8 ba ae 30 c6 b2 95 91 5d 3f 7c 72 a4 a6 d3 2e a7 60 71 9e 1d a7 18 50 72 6a e6 87 4a b1 a4 cd c1 c0 18 4b 42 05 7e 70 7f 7a 0c ea 79 a3 8b 24 9f a4 0b d6 1c b2 ad a4 6a 4c 65 55 95 5a 4a 41 32 f8 4f 69 4d 24 0b 43 7f 17 95 e7 aa 81 f9 a4 a8 a7 be e0 d2 be 54 39 36 67 16 2b 08 a9 01 21 91 a0 e0 0b 30 fb 88 79 0d 88 a9 20 05 92 6e 86 9c e1 b9 2c 6f 37 61 3e 69 4f 5f 27 21 65 23 77 e6 ea 34 52 6d b3 aa 0b be 96 f1 54 39 49 32 88 68 49 ba e7 52 da 24 41 f1 46 Data Ascii: O~kxB*p8M~t>w8/TSTu4,a@NG6tBD#3a@%tUAYc^RJt}0]?\|r.`qPrjJKB~pzy$jLeUZJA2OiM$CT96g+!0y n,o7a>iO_'!e#w4RmT9I2hIR$AF
2024-07-04 20:55:40 UTC	11860	IN	Data Raw: 50 da 22 17 60 5d 16 ac c7 19 97 97 1a c6 5a 38 7f 44 ca 64 43 cc d0 b0 d6 60 75 8e ec 9f 99 9a 8c 7d df 9f 4e e2 9c 80 44 a2 16 82 07 64 b8 c5 21 74 1e 43 37 c0 6a 4d 42 21 4e 8f 70 5c 09 65 ab 55 d7 8f 2f 3f 78 f0 f2 b7 7b 1f 7e 3c b8 f9 fd fc d7 bf 7a fd 67 bf e5 35 fc 6c 96 b0 ba b5 97 f8 1f fc 2b bf 1e dd ef fe bf 88 af 3c 7e e7 f2 c9 93 27 9f 3e 4e cb f7 5c dd bd ff 1d 1f fd d8 c7 df fc f0 6b 6f 5c ee ae ee 76 d2 74 32 26 3a bd ea 10 1c a0 a6 4e df 77 d4 95 63 32 81 e6 18 8f d5 11 8c ae b3 06 5a 02 d7 ef bf 8b f7 ff d6 4f 42 fa 80 24 80 c7 d3 11 cf 97 05 49 69 14 45 52 c4 ce 74 18 87 81 ca 3b f6 72 26 36 77 5b 43 d8 14 12 64 28 58 ad 90 33 9d 64 86 09 94 15 78 06 e6 53 39 ce c8 f5 ac 07 06 7f 3f 14 40 2b 09 6b c9 0f 5a 5f 7b d7 f5 24 2a 99 a6 26 95 Data Ascii: P"`]Z8DdC`u}NDd!tC7jMB!Np\eU/?x{~<zg5l+<~'>N\ko\vt2&:Nwc2ZOB$IiERt;r&6w[Cd(X3dxS9?@+kZ_{$*&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	64668	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:39 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDIvNTkwOTIxNWUtNzIzMS00N2I4LWIxYTItMTQzMjRlNDFjM2M4L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=d83e60a674f2023d HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:39 UTC	626	IN	HTTP/1.1 200 OK Age: 1915113 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 96770 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:57:06 GMT Etag: "804f91d89f9bbbede039422fff61061b27bdeb47" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 6c119ebad0a447997543477c2b128781c7ccef3f X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: c8a9f5e6-bef9-460c-a1e0-c9ca71a89931 X-Runtime: 0.414507 Connection: close
2024-07-04 20:55:39 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2b 94 05 93 c7 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME+zTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:39 UTC	2372	IN	Data Raw: d7 8d 38 4d 6f fe 06 9c 96 b9 ef 5d e6 46 4e ff 00 88 13 00 ff 0c 31 73 c2 00 00 80 00 49 44 41 54 78 da ec fd 79 b4 6d db 96 d6 05 fe 46 39 e7 5c c5 2e ce 3e e5 2d 5e 5d c4 7b 2f 2a a2 0e 11 42 09 50 01 35 55 a2 05 08 82 49 80 9a 2d 2d 40 52 d3 a6 69 8a a4 b4 34 d5 84 34 21 d5 14 49 14 32 53 44 68 8d 22 4c c1 66 81 28 04 81 11 80 12 44 c4 8b ea 55 f7 dd 7b 4f b1 cf 2e 56 31 ab 51 e5 1f 63 8e b5 e7 de f7 3e 15 e3 95 36 d7 6d bb dd 73 f6 59 6b ef 55 cc 3e 7a ef 5f ff be af 0b fe 67 76 eb bf f5 9f e5 67 7e 7d ad 3e e7 f6 0f fe da 27 7f e6 bb ff fa 27 7f ea ef 7a 7a 7e f1 6d ed e8 1e 78 a8 11 ca 8c 11 d3 fb a8 07 1f 44 08 49 44 04 11 08 31 21 a5 44 29 85 14 12 29 05 62 fa b9 31 26 7c 88 28 a5 d1 5a a3 94 9a be 1f f1 de e3 bd 27 c6 88 10 02 ad 35 d6 5a ac d1 Data Ascii: 8Mo]FN1sIDATxymF9\.>-^]{/*BP5UI--@Ri44!I2SDh"Lf(DU{O.V1Qc>6msYkU>z_gvg~}>''zz~mxDID1!D))b1&\|(Z'5Z
2024-07-04 20:55:39 UTC	538	IN	Data Raw: 34 2c 6d 95 33 9b 60 02 a5 04 4a 70 e8 7d b5 54 68 a3 51 5a ce fa 62 f9 8e d7 33 7f 8e f3 c3 ca 7b 8f f3 9e d1 07 a4 f6 44 04 61 02 f5 a6 07 11 bc 43 44 89 8b 09 97 02 2e 44 86 3e 90 10 58 33 95 ca 53 8b 61 94 c4 6a 8d 52 1a 25 14 43 1a 0f 18 c1 dd f7 46 6b 7d c0 0e ca bf cd df fb f2 fe 95 80 ee fb fe 10 e0 29 25 c6 71 44 6b 7d 38 0c a4 94 f8 71 24 f8 11 ef 1d 6d 9b 0e fd 72 3f e4 83 46 a4 84 d4 9a ca 68 50 46 68 a3 b4 d4 56 8c 3e 2e 6c 48 f5 c3 93 b3 a1 32 ea fa d9 5b 9f 3b 1a bb dd 83 ab cd ee 23 2f 5f 6e ae aa aa 72 c2 57 6f 6c da ef de ff fa ff e8 0f 85 1f fa 93 19 14 ff 6a 40 a5 bf e6 50 e8 94 e0 eb 56 f0 1f 5d c0 c2 49 f1 89 f0 2d 2a c9 ea f4 e9 cb ab 8f be f5 f4 e5 b7 bf fd fc f2 db 9f 9d 5f 7d ec e2 6a f7 60 df 3b 1b 85 26 09 45 48 09 1f 02 dd d0 Data Ascii: 4,m3`Jp}ThQZb3{DaCD.D>X3SajR%CFk})%qDk}8q$mr?FhPFhV>.lH2[;#/_nrWolj@PV]I-*_}j`;&EH
2024-07-04 20:55:39 UTC	4096	IN	Data Raw: 3c 86 27 bf 54 bf dc a8 b3 cf 3d 7b f6 89 b7 9e be f8 c5 4f 9f 5d 7c d7 d5 75 ff c1 cd ce 3d ec 46 5f 21 35 f5 62 89 50 9a 6e e8 e9 c6 e1 d0 bf c2 ed 72 f2 2e ea 3c 0f 5e e7 1c e3 e8 80 9b 60 28 59 0e 38 94 7f ef f6 73 72 e9 9d 67 98 87 ac 38 65 36 9f 22 32 25 54 0a 28 25 a8 8c 62 69 35 8d d1 58 a5 30 32 8f 80 8c d6 28 29 61 9a f5 2a 09 52 09 84 12 88 a9 6c d6 52 dd 0a d6 79 59 5f 5e 4f 09 e2 12 b8 19 d4 53 44 ad 21 41 30 f9 90 4b 31 90 62 45 0a 1e 99 22 95 12 74 e3 88 74 1e 1f e2 ec f5 4d 01 cf f4 7e c6 90 5f 97 d4 48 a9 51 42 62 8d 25 b9 c8 38 8e 28 a5 a8 a7 79 b0 31 86 aa aa 18 86 e1 d0 d2 cc fb e2 92 99 53 4a 87 4a e9 30 5f b7 16 37 e1 17 a5 d4 76 6e c4 5a c3 f1 f1 11 ce 39 76 6a 47 d7 b5 8c e3 98 47 7d 21 62 6b 4d 12 82 7e 0c 6c 77 7b 08 9e 75 63 85 Data Ascii: <'T={O]\|u=F_!5bPnr.<^`(Y8srg8e6"2%T(%bi5X02()a*RlRyY_^OSD!A0K1bE"ttM~_HQBb%8(y1SJJ0_7vnZ9vjGG}!bkM~lw{uc
2024-07-04 20:55:39 UTC	5930	IN	Data Raw: 84 1b c6 d5 fc fd 0b 21 1c 4a e7 d5 6a 75 38 68 8b 15 4f 29 af 53 4a 07 54 5a 88 dc e2 38 e7 b8 be be 46 4a c9 30 0c 08 21 58 ad 56 48 29 e9 ba ee e0 bd d5 2c 16 78 9d 05 0e 21 26 9a 7a 91 3f 5f 25 30 55 95 ed 88 52 a4 ae 0d a2 17 88 2a a6 7a b1 8c c6 56 42 a0 2b 37 c4 b3 ad ef fd e0 45 1a 7e 76 fd fc ad b3 3f d4 fd 2b df fe e7 e3 7b b7 47 5f b6 78 f9 ea 0a 60 0b 4f cd 2f e0 77 fe fb bf 88 bf f8 6f fd 72 f1 68 79 6c f6 ed 78 76 bd ed 3f 74 b5 e9 3f d2 8f dc 0f c2 56 83 17 2a 78 27 f6 43 c0 27 98 06 35 53 26 c9 e5 73 0c 09 ef 27 8f 24 a5 a7 b9 6f 01 93 02 84 38 1b 15 c9 77 94 d4 25 20 4b d0 96 4c 5b 04 e7 e5 cf a5 87 2b d9 05 98 e6 98 39 40 7c 0c 10 03 76 ba c8 6b ad 59 56 15 4b 6b a9 b5 46 4b 91 47 3e 29 66 63 bd 04 32 65 f0 e7 40 2e a1 f4 e7 4c f3 de 0c Data Ascii: !Jju8hO)SJTZ8FJ0!XVH),x!&z?_%0URzVB+7E~v?+{G_x`O/worhylxv?t?Vx'C'5S&s'$o8w% KL[+9@\|vkYVKkFKG>)fc2e@.L
2024-07-04 20:55:40 UTC	7116	IN	Data Raw: b3 83 65 96 d3 15 03 76 45 a5 15 92 48 d7 75 5c 6d f7 9c 5f 6d 79 7a 7e c9 8b f3 0b ae 37 d7 bc f5 d6 db ec af 2f 69 cf 8e 79 7c 76 c4 d1 b2 46 0b 88 2e 80 cc 4e 92 36 09 2a 69 d0 55 2e 1f e3 10 68 fb 81 dd 7e cf 7e 9f 0d e7 76 bb 1d 97 d7 3b 2e af ae 19 fa 8e d5 72 c9 a3 07 0f b8 77 72 92 ad 81 a6 25 6c 02 88 3e e0 47 87 17 0e 2d 32 91 24 92 e8 c7 11 17 3d 52 6b 7c 4a 74 6d 47 ea 7b 84 c9 26 00 22 c3 d8 59 37 1c b8 b5 42 65 2e d9 9c cf e8 cb 7b 5f 0e b7 22 8e 98 2f a8 33 c6 b0 5a ad 0e 00 18 e4 2d 17 82 dc fb d6 cd 82 d8 78 da 9d a4 dd 6f 27 bd 70 c5 7a b5 a2 32 d9 3d f4 e8 e8 08 ad 34 97 17 97 68 a5 58 ae 8e d2 d1 d2 8e b5 4e 6d 74 bb de e8 d0 ad d6 47 d7 ab a3 f5 56 36 8d 7b f6 d1 2a 3d 49 09 77 bc 84 4d fb b5 15 c0 7c f2 23 9c ff db df cf fd df f8 47 Data Ascii: evEHu\m_myz~7/iy\|vF.N6iU.h~~v;.rwr%l>G-2$=Rk\|JtmG{&"Y7Be.{_"/3Z-xo'pz2=4hXNmtGV6{=IwM\|#G
2024-07-04 20:55:40 UTC	8302	IN	Data Raw: 2f 2e de 7f 7e 79 fd 9e cb ed f8 64 eb c4 69 3b 8c d5 e8 9d 1a cb aa ca 94 ad 69 fc f4 f7 dc 80 4c 0b c2 52 31 a2 bb 09 c2 bb 34 4a 35 21 bd 05 cc 3a 94 b8 b3 40 fd 42 a3 a0 52 56 cd c9 20 45 6a 36 1f 57 dd 9d e9 66 d6 50 bc 95 e5 d3 74 00 95 1d b8 a4 2c bc 8f 22 1c 64 86 65 e5 8b 94 82 e0 3d 75 25 59 6a 4d bf df 21 79 48 5d 57 8c dd 9e 3e 79 6a 93 35 b2 52 4a 2a a9 31 d6 e6 5d 3d a6 42 a0 20 c9 49 36 29 a8 6d 8d b5 1a 6d 04 29 39 c6 14 f1 43 06 a6 46 97 05 04 55 55 4d fb 8c f2 89 3f 3a c7 6e 73 4d bf df b1 5e ad 79 fc e0 21 c7 c7 47 d8 da 62 a6 0c 24 05 68 25 a8 b4 44 8a 88 52 91 d7 1f dd e3 3b be e9 63 f8 61 cf 5b e7 e7 bc 78 f6 82 57 df fb a1 c9 8b 79 97 4d 00 54 95 39 cd ce e7 ad 0f 24 92 ba 51 79 29 a9 b2 91 7c 54 b7 56 8c 96 5b 06 94 86 9b 6c 29 25 Data Ascii: /.~ydi;iLR14J5!:@BRV Ej6WfPt,"de=u%YjM!yH]W>yj5RJ*1]=B I6)mm)9CFUUM?:nsM^y!Gb$h%DR;ca[xWyMT9$Qy)\|TV[l)%
2024-07-04 20:55:40 UTC	7366	IN	Data Raw: c4 8d 13 89 63 36 e3 2c 5e 40 59 f8 5e 68 95 65 a9 d9 64 29 2a f3 6a ce bb b2 c0 62 44 56 a4 67 f3 fe b6 00 4a f3 12 ee ae a8 a1 04 63 b9 20 e6 08 f6 dd 20 9d 3b 17 ce 83 1e 38 00 69 45 34 3e cf 3c b7 96 42 4f 87 50 31 e9 cb 17 5f a6 54 a6 69 0e 7e 43 ee 98 00 b0 e0 51 c9 e4 3a 4c 67 3f 9c 24 b3 78 3c 90 81 ae d1 8d b4 43 47 3b f6 8c c1 83 cc bd 2d 52 11 66 cf 53 4a 85 d4 1a 29 35 08 99 75 d9 64 3b 5c ad b3 16 59 28 c5 a2 69 58 af 16 34 4d 85 95 90 42 16 9b f8 b9 ad 50 cc 95 00 14 e4 fc a6 c2 99 cf e0 cb 21 39 6f 4d 94 92 c4 98 bd a5 82 cb f8 40 70 93 96 57 e7 00 3e 1c ec 05 e5 e7 66 1b 61 8a 69 f2 bc 1a 71 ce 13 f1 84 71 cc 87 60 ca 7e 58 bb dd 2e 23 db 84 ec 04 02 87 60 2d bd 78 99 e7 ce ab b8 c2 79 2e d7 d5 9c 4a 39 37 df 2b f7 3d b0 f7 ca 8e d3 09 79 Data Ascii: c6,^@Y^hed)*jbDVgJc ;8iE4><BOP1_Ti~CQ:Lg?$x<CG;-RfSJ)5ud;\Y(iX4MBP!9oM@pW>faiqq`~X.#`-xy.J97+=y
2024-07-04 20:55:40 UTC	10674	IN	Data Raw: 25 79 04 87 88 24 64 2a 40 98 41 59 2d 40 35 41 9a 44 d0 ce eb 76 49 ce 30 48 13 e8 aa 40 95 e7 88 23 df 8e b4 90 49 6b 9b 36 83 80 31 8e 4a 5b 3c 38 78 8c e3 93 53 d4 75 8d e5 72 81 01 bc e3 01 71 04 71 1c 83 50 8a a2 aa 5a 52 87 df 1d 77 58 50 9d 6b d8 cd b6 5d e1 c1 f0 a0 dc cf 39 38 65 a8 eb 12 c6 28 c4 42 20 4d 93 a6 6d aa 01 e2 d5 26 eb ba 86 88 b8 19 8d a7 cb 3b d7 b7 0f aa b2 ca 4f 2f e6 fd 8b e5 72 ea 40 a2 38 96 34 1a f7 8b 5e 22 4e 46 7d f9 a4 97 88 19 ac d3 da 5a f4 77 a4 7b ee 83 af c0 95 ee 5d 0b de cb 00 c6 ab f8 d6 bf 97 00 80 9b ee a7 fa f8 ec 6b 33 21 fb 26 ed 59 31 e8 57 4f e2 48 cc a2 4a 65 e0 5c 72 82 b8 92 2a 16 94 52 4a 82 88 6c 33 5c 69 26 a8 41 32 95 10 bf 7f ec 06 5b f7 f1 4e 01 d7 c5 f7 76 85 c4 82 9e 6f 77 e7 da 7d 6c aa 78 74 Data Ascii: %y$d@AY-@5ADvI0H@#Ik61J[<8xSurqqPZRwXPk]98e(B Mm&;O/r@84^"NF}Zw{]k3!&Y1WOHJe\rRJl3\i&A2[Nvow}lxt
2024-07-04 20:55:40 UTC	11860	IN	Data Raw: cd 67 d2 1c a4 84 f8 b6 26 68 5a 13 62 c0 98 05 8f bd 17 d4 68 3c c5 68 34 40 9a 24 a0 c4 2b 6b e6 ca 61 59 28 9c cd 57 58 17 35 44 32 44 9c a6 5e f0 df 5a 10 e1 49 f9 ef e4 c6 d1 1d 38 76 5b 8e 2b 73 87 0d 90 4e f7 bf 43 96 b5 5a c3 6a db ca 03 27 49 72 e5 fa 76 f1 de 00 a0 b5 82 d6 0a 75 45 60 ea 12 b6 2e a0 cb b5 49 19 56 83 54 1e 8d 52 71 f7 b9 9b d7 3f fa e2 9d 1b 1f 1d a6 d1 13 a8 6a cd 08 a9 2c ed e9 65 56 18 a3 b2 aa e6 55 f5 ff 7b ed 9e 39 e4 91 fb f6 ef fa 3f b9 f7 fe 8f db f8 1b 7f ea 7b 41 30 fa ca 09 e0 72 78 13 1f f9 5b ff 21 de fb b5 db b4 28 8f 52 ad 55 3a da 9e 16 83 e1 38 83 a1 cb 28 5a e5 79 a9 a7 59 5e c4 ac 52 04 4c 24 75 55 0f 09 c0 08 81 2d f3 dc 15 a5 21 56 2b 4f 3f 33 06 d6 28 10 67 21 98 f0 16 9c 56 a3 32 ba d5 c9 da c4 2d 6f 6a Data Ascii: g&hZbh<h4@$+kaY(WX5D2D^ZI8v[+sNCZj'IrvuE`.IVTRq?j,eVU{9?{A0rx[!(RU:8(ZyY^RL$uU-!V+O?3(g!V2-oj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	64671	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:39 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDUvNWFiNWQ5ZWYtNTdjYi00ZWIxLTk1N2UtZTczZmU3MWZhNGI1L2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=a3b2a23b5ff3b050 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:39 UTC	626	IN	HTTP/1.1 200 OK Age: 1915128 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 85916 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:51 GMT Etag: "e5feb6caffaacdd458426b7b9e64597819e9f581" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: c22a316a71c6e35beda71f97e2aa5a32855e08c7 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 252a49f7-be6d-4a00-903f-c4521e88b0f1 X-Runtime: 0.477976 Connection: close
2024-07-04 20:55:39 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2e e4 6f 67 48 00 00 80 00 49 44 41 54 78 da ec fd 57 b3 2c 49 b2 a5 89 7d c6 dc 3d d8 26 87 24 b9 77 ee cc a0 31 82 b7 11 3c f5 ff ff 03 20 22 18 01 1e 31 dd 7d ab 2a c9 39 67 f3 88 70 62 04 0f aa 66 ee 3b ab 9a 42 80 2e 92 2e b2 25 4f 6e 12 c4 c3 cc 54 75 e9 5a 4b 4d 29 a5 00 8c e3 c8 bf fe eb 7f e0 ff f5 ff fc df f8 7f fc 5f ff 2f fc 6f ff b7 ff 3b cf 0f 4f f4 bb 81 c3 e9 44 29 85 52 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME.ogHIDATxW,I}=&$w1< "1}*9gpbf;B..%OnTuZKM)_/o;OD)R
2024-07-04 20:55:39 UTC	2372	IN	Data Raw: 99 18 23 ce 3a ac b1 58 6b f1 de 63 ad c1 7a c3 d0 07 0e c7 3d ff cb ff f1 df f0 6f ff ed bf e5 7f fd 5f ff cf fc cb bf fc 8f 7c fe fc 99 ae eb 30 c6 f0 fb f5 df 76 79 80 18 23 2f cf cf fc fa cb cf fc f2 d3 9f f8 f5 e7 5f b8 5e 46 42 f0 ec fa 1e 63 0c 39 67 ac b5 a4 9c f5 03 5b 30 25 e3 6d 90 45 45 c1 3a 4b ce 85 5c 0a 39 67 a6 79 62 49 89 ac 1f 50 8a 99 98 12 d6 7b ee ee ef 08 7d 4f ca 19 0b 2c cb 02 18 42 e8 e5 79 52 24 2d 91 94 67 a6 71 a6 14 70 ce 61 ad a5 94 82 03 32 45 16 89 75 ed 35 ce d3 84 b5 86 69 9a 98 a7 91 2e 74 38 6b 18 97 89 69 ba e0 8c c5 38 07 25 33 74 3d b6 80 2d 99 34 cf f4 bd e7 76 bf e3 bb fb 1b ee 8f 7b ee 4f 03 b7 a7 81 d3 61 e0 ee 74 64 b7 eb 70 c1 62 5d c0 5a 8f 73 0e 83 3c b7 f5 b2 71 0b 60 75 03 5b 67 01 64 13 1a 8b 37 16 ac a3 Data Ascii: #:Xkcz=o_\|0vy#/_^FBc9g[0%mEE:K\9gybIP{}O,ByR$-gqpa2Eu5i.t8ki8%3t=-4v{Oatdpb]Zs<q`u[gd7
2024-07-04 20:55:39 UTC	538	IN	Data Raw: 32 71 91 da 37 95 a4 6d 2b 27 c0 59 49 e4 25 29 c0 b2 48 1b a5 77 14 05 54 c6 71 c2 80 2c 22 6b e8 2d 7c bc d9 f3 c3 87 5b 3e dd 1c 38 f4 81 de 3b 86 ae 63 bf db 31 0c 03 21 74 f8 10 b0 ba 21 6a b4 af 91 a6 a6 d0 ef 52 58 de b7 ba b6 5f 40 fb 3d f9 ff 82 41 da 3e c6 18 8c 73 14 53 48 ac 9b 34 25 23 1b 21 27 cd 20 a0 08 f4 2b e8 b4 c9 38 fb 9b 2c c0 96 96 41 6d d3 7c d9 e4 92 85 58 2a 4a ac e7 82 b5 18 2b 87 88 75 19 9b 0b 83 b7 dc 1f 3a ee 0e 3d d7 f9 42 2c 92 59 51 3c b3 f6 ae 4d 31 ef 3f 2b 2b 8f 4f 6b 1b c6 76 70 48 76 62 15 00 83 b7 b7 33 bf fc f2 0b 3f fd f4 33 3f fc f0 4f 1c 8f 27 bc f7 2d 30 fc 7e fd 97 5d fe eb af bf f0 fc f0 c0 f9 f5 8d 18 e5 c3 ad 8b 30 25 21 16 60 56 10 a4 a6 39 b5 fe b5 ce 52 c8 18 5b 1b 48 fa bd 5c 1a 4a 2b 75 ac c3 7b df 5a Data Ascii: 2q7m+'YI%)HwTq,"k-\|[>8;c1!t!jRX_@=A>sSH4%#!' +8,Am\|X*J+u:=B,YQ<M1?++OkvpHvb3?3?O'-0~]0%!`V9R[H\J+u{Z
2024-07-04 20:55:39 UTC	4096	IN	Data Raw: 49 44 9b e7 59 22 79 59 81 9f a8 1b 4f 0e 07 a3 fd 5e 39 d5 bd f3 f4 5d 87 f7 9e 79 5e 48 5a 63 d7 1a 7c 59 16 41 aa 31 72 82 7b 4f 70 0e 03 c2 fc 1a 47 9c 35 74 de 12 4c 61 df 39 be bb 3f f1 dd fd 89 e3 e0 e8 3c f4 9d 67 37 0c ec 76 03 5d 17 30 ce e8 7b 2b da db a6 b1 8b 84 61 f4 3e 95 ae d9 ca 36 f2 ca df ac 11 b7 fe 6e bd 8c 59 ff 6d 37 75 b5 35 d2 f2 32 d6 ca e6 32 6b 1b 6c 0b 92 d5 e7 65 f3 b7 14 d3 fe df b6 03 c8 28 d9 45 70 0a 61 b7 19 9c 32 cf 1c 42 8a 59 5f 83 66 17 26 e3 ad e1 76 3f 70 bb eb f1 16 01 db 72 02 0c 64 5a 56 56 df fb b2 2c e4 94 f0 c6 62 72 c1 16 fd 9b 28 19 54 52 8c c4 20 78 c9 eb f3 33 bf fe f2 0b bf fe fa 0b 2f 2f 2f f2 f7 9b c3 f1 f7 eb 3f 7f f9 2f 3f ff 89 97 a7 27 a6 69 a6 94 42 d7 f5 18 65 5c c5 28 2d a3 5c b2 46 56 87 cd 42 Data Ascii: IDY"yYO^9]y^HZc\|YA1r{OpG5tLa9?<g7v]0{+a>6nYm7u522kle(Epa2BY_f&v?prdZVV,br(TR x3///?/?'iBe\(-\FVB
2024-07-04 20:55:39 UTC	5930	IN	Data Raw: ac 85 06 b6 55 6c 00 9c 37 f4 c5 b3 1b 02 63 ba 12 c8 ec 3a 4b 17 00 44 d0 9f b3 a4 de 46 a3 66 d2 ac 23 84 d0 68 b1 f3 22 ec 2d e7 50 17 4b 35 1a a4 f0 f6 fa c6 cb 93 6c e2 e7 e7 27 a6 f9 c7 26 59 fc 7d 03 ff f9 e5 73 c9 ad 15 54 72 6e ad c8 5c 45 f5 c5 36 34 b1 82 30 d2 b4 5f 44 08 ae 8e 8f 56 c4 85 d2 c3 35 b4 b4 7a 9e 16 c6 79 12 01 82 59 79 d3 29 d5 ff 56 30 cc e0 8c 44 c3 8c 21 95 48 49 4b 03 86 72 29 4a 52 a8 40 97 00 4b 69 1e e9 5c e1 34 0c 7c be bf e5 f3 87 5b 76 3b 21 6c 38 2b 24 95 be eb f1 ce e3 5d c0 b9 80 75 b2 89 57 e1 80 da ce da ba c1 64 93 58 a3 00 8a 22 dd d9 fc 46 eb 6b 68 59 c5 16 ad cf 6d f3 d2 2c 6c 64 6f 29 c9 45 0f bb 0a 6c 15 4d b1 0b 95 32 ba 6e fc ca 57 6e 1f 8c 29 5a 5b d7 f6 d5 fa 61 ca 02 97 74 54 ac 88 14 45 e4 fd de af a2 Data Ascii: Ul7c:KDFf#h"-PK5l'&Y}sTrn\E640_DV5zyYy)V0D!HIKr)JR@Ki\4\|[v;!l8+$]uWdX"FkhYm,ldo)ElM2nWn)Z[atTE
2024-07-04 20:55:40 UTC	7116	IN	Data Raw: 9d b0 37 ba 88 a4 0e 7d ff e6 57 f2 7b 5d 94 6a 17 ab 2d 0d f9 1d 4d 27 8d 25 84 8e 82 f8 fb 8e e3 28 5e c2 21 70 3c 1e d9 ef 76 5c af 57 de 5e df e4 6f 73 d1 49 82 b4 88 5e 25 8a 02 48 00 14 9c 33 ec fa c0 dd cd 81 4f b7 37 dc 1f 7a 8e bd d7 54 51 16 e7 65 9e 79 7a 3b f3 f8 fa ca e5 32 32 8f 91 a5 82 71 ca 7c 4a 25 31 15 99 72 ef ad 23 2d 9a 7e a7 44 89 91 97 e7 33 87 fd c0 30 04 82 46 e1 7d e7 99 a6 05 ef 0a fb 21 50 72 af e3 50 33 06 19 54 2e 13 29 8c f6 3b e5 30 ac 53 03 df dd 43 6a 1b a9 34 86 59 2d 03 1a b9 42 ef 49 49 15 69 16 80 b1 aa a7 52 ca 9a 56 27 e5 af e7 56 ea d4 72 77 c9 46 5a 3f c5 30 e7 cc 75 89 8c 09 c6 54 78 9b a2 6c e0 71 66 9c 16 39 d4 7c c0 16 d1 5f 8f d3 c2 b4 24 8c 0b 74 bb 6e 55 06 c5 0c 39 b2 55 46 39 e7 c8 b1 f0 76 b9 92 d2 82 Data Ascii: 7}W{]j-M'%(^!p<v\W^osI^%H3O7zTQeyz;22q\|J%1r#-~D30F}!PrP3T.);0SCj4Y-BIIiRV'VrwFZ?0uTxlqf9\|_$tnU9UF9v
2024-07-04 20:55:40 UTC	8302	IN	Data Raw: 97 8b 95 83 07 23 af b7 d5 c7 ca 74 93 f1 23 59 5d 37 67 72 4e ec 76 03 a7 9b 13 a1 eb 78 3b 5f 78 7d 7d 66 9c 46 e2 b2 88 ee b7 80 eb f7 dc 7e f8 c4 68 2c 4f d3 4c 1f 13 d9 79 22 57 6e ef ee f8 e1 fb 1f f8 e3 1f ff 95 97 97 27 b0 32 74 cc 20 93 25 6e 6e ef f8 e1 87 1f e9 42 c7 f5 f5 8d e0 2c e3 7c e6 a2 de cb fb dd 1e 63 8a 64 1e 21 e0 9c 27 f8 c2 6e 70 dc 1c 7a 6e 4e 7b 76 9d 27 78 d1 f8 8a f7 75 8d bc 1e e7 75 fe 56 ce c4 84 5a 7e 89 5c 35 66 f1 e7 72 3a 50 5c 00 4d 11 57 c4 94 64 72 86 0f 6d be 96 2d 08 75 57 07 d0 e5 6c f0 9d a3 1f 76 cc b3 94 1b d7 cb 99 eb f9 cc 78 bd 70 bd 5e b8 5c 2f 3c 3c 3c d0 75 1d a7 d3 e9 ef 2a 12 6f 6a 60 79 43 75 d0 36 3a 51 7d 9a 47 9d 80 30 d3 f5 3d 21 84 36 ae 23 2a 22 5b 72 26 6b 3a 18 63 14 a3 32 17 b0 46 58 3e 86 da Data Ascii: #t#Y]7grNvx;_x}}fF~h,OLy"Wn'2t %nnB,\|cd!'npznN{v'xuuVZ~\5fr:P\MWdrm-uWlvxp^\/<<<uoj`yCu6:Q}G0=!6#"[r&k:c2FX>
2024-07-04 20:55:40 UTC	7366	IN	Data Raw: 55 7a a4 10 0a 8a 05 e3 3c c6 7b 30 96 a2 d1 1e c4 56 d6 e6 b5 ff da 68 a6 d4 43 40 04 0c 55 61 44 13 c3 d3 30 8b a2 83 b2 73 aa 3c 66 dd 54 85 df d4 71 6b cb 48 cf bd 4d ea 5d 5a 9f 39 97 dc 22 7f c9 b9 d5 3b 52 8b 6f 01 be b2 22 ce a5 ce 3b ce 9b 0d 2b 8f 5b 69 a4 de 3b cc 9c b8 5e 47 6c 81 b4 cc ad 73 61 9d d5 b3 a5 88 9e d7 3b 01 ae 42 50 19 aa 38 a6 96 9c e9 7c 75 57 90 32 4e ea 7e 75 03 75 1b 75 97 b2 e7 42 e8 18 fa 9e 65 99 a9 f5 7f d6 b4 de eb fa be 5e 64 96 d2 eb cb 0b cf 8f 0f 7c f9 f5 17 6e 6f 6f e9 ba ee af 7a 9e 92 af d4 b4 ea b2 60 90 49 72 d6 0a 7b 25 a6 88 31 45 26 af 7b 99 ba 5e c9 de db d4 ed 5a 51 bf 52 70 41 54 26 b1 f6 49 eb 70 ef 2c 69 a3 f4 56 69 91 d0 52 38 ee 7b 6e 8e 3d fb c1 d2 7b 55 09 6d 9d 08 15 64 32 32 9d ba f1 ad 8d 5b e5 Data Ascii: Uz<{0VhC@UaD0s<fTqkHM]Z9";Ro";+[i;^Glsa;BP8\|uW2N~uuuBe^d\|nooz`Ir{%1E&{^ZQRpAT&Ip,iViR8{n={Umd22[
2024-07-04 20:55:40 UTC	10674	IN	Data Raw: 85 e8 9d d6 1e e6 f2 0a 63 1c 0f 1b 5f 14 e6 d1 61 1a 9e f0 f1 e3 4b 27 72 b4 5a 7b 87 d3 d0 7a 54 8b 35 05 c6 ca a5 61 c0 12 26 06 d4 5d 06 ac 3c 66 23 34 56 98 3e f7 13 8f e7 0b fc 4b ef ab da 0c 79 db 99 4e 18 7d c5 04 e5 83 1f 29 0e dc a3 6a 4b fd a8 ee d2 43 aa 1c e8 82 5c 9a 80 4b 87 6e 99 37 8f 45 69 9c 85 9b 70 a9 9d 77 98 85 2e 99 f6 1d 76 70 b8 3c 3f e1 f9 f9 85 39 45 3b 19 6f fb be c3 18 48 a8 3c 2f fc 20 44 1b da 22 91 17 9f 62 94 c3 49 11 44 a9 15 71 df e1 6b 85 11 4d ba 1e 1e 7d 7d a5 55 6c 31 c2 05 87 d1 07 aa dc e4 63 2f b5 c2 3a c3 d5 63 4c 70 06 04 2e 93 85 01 51 7f 22 f2 7c 2f af d7 1b 2a 80 61 9c 70 7a 7a c6 7c be 08 9b ec 38 60 3f ff 6c fe 8b b6 d3 5e 93 12 ac 58 ea d4 58 45 4a 38 d2 35 c1 26 0c e3 48 15 50 db c9 f8 81 87 4d 0e 5a 2a Data Ascii: c_aK'rZ{zT5a&]<f#4V>KyN})jKC\Kn7Eipw.vp<?9E;oH</ D"bIDqkM}}Ul1c/:cLp.Q"\|/apzz\|8`?l^XXEJ85&HPMZ
2024-07-04 20:55:40 UTC	11860	IN	Data Raw: 73 45 2c 49 28 fa 0d c1 3a 21 4e d0 00 c0 01 08 c2 09 af 68 30 72 38 00 03 eb 88 8e 36 b9 1c 8a 05 4c 2b 30 8d 7c 6e cd 1f 46 a3 3e fa 68 6d 25 31 a1 15 41 89 e5 61 6e 7a 18 1b 8d f1 80 7e 08 14 d0 ea 66 ed 5d 94 af 19 c2 a6 73 9f 15 b8 52 fa e4 16 13 de 96 15 bf bd be e3 8f 7f fe 0d d7 65 47 69 16 be 09 12 66 68 14 38 86 01 e3 3c 09 d8 59 a1 39 bc 5a e1 54 25 3e 0c 1e a3 a3 29 5d 31 87 1d 52 4a 87 b9 e0 91 75 45 46 58 18 e4 3d ac a4 f9 b6 d6 ba 07 5b 7d c8 fd 25 a8 b8 a0 d6 26 3b 54 75 1c 71 54 d0 c1 c2 59 df 7b 0f 7a 82 1d 5c 82 e0 1d 09 4d 96 59 4c 06 da 75 36 99 e5 03 f1 12 31 79 f4 92 24 62 8c 39 4c 0e c1 ce d0 80 a9 92 6c a9 79 71 78 2f de 63 8d d2 c9 5c 0b 6c f1 80 61 a5 05 18 0a b7 6e 3b 6e ef 6f 38 9f 4e 98 de bf 61 5b 6e b8 df de 71 be bc d0 7c Data Ascii: sE,I(:!Nh0r86L+0\|nF>hm%1Aanz~f]sReGifh8<Y9ZT%>)]1RJuEFX=[}%&;TuqTY{z\MYLu61y$b9Llyqx/c\lan;no8Na[nq\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	64673	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:39 UTC	433	OUT	GET /2024/06/06/01/21/44/5470860f-4901-4885-a21e-ab2d27e0b2c2/AJ-Headshot-Reduced.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:40 UTC	675	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 83290 Connection: close Date: Thu, 04 Jul 2024 20:55:38 GMT Last-Modified: Thu, 06 Jun 2024 01:21:45 GMT ETag: "13a47db86c485590380056a083e554aa" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"AJ-Headshot-Reduced.jpg"} x-amz-version-id: cMn75MSVcLzCmm2mFTjLr0_8CBme0dIg Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 00f66bc6263192200d1a0cdb83e969f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: FXIbQIXpxSZpdiaJYYcCObJ7sW8c_QijM1CQclmXLKi5sIKWNgYHFA== Age: 2 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:40 UTC	15709	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 30 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 20 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e6 00 06 00 1a 00 16 00 1a 00 1e 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6b 63 70 72 74 00 00 01 68 00 00 00 23 77 74 70 74 00 00 01 8c 00 00 00 14 62 6b 70 74 00 00 01 a0 00 00 00 14 72 58 59 5a 00 00 01 b4 00 00 00 14 67 58 59 5a 00 00 01 c8 00 00 00 14 62 58 59 5a 00 00 01 dc 00 00 00 14 72 Data Ascii: JFIF0ICC_PROFILE applmntrRGB XYZ acspAPPLAPPL-appldesckcprth#wtptbkptrXYZgXYZbXYZr
2024-07-04 20:55:40 UTC	281	IN	Data Raw: 4f 43 41 15 1a 46 c1 9c b8 05 b7 1b 03 f5 df eb 8e 93 c5 31 73 ff 00 af c9 d5 3e 20 f1 35 55 6b 3a ff 00 0e a1 00 2a 03 8b 82 4e c7 9f a0 fd 31 ce e3 1e 89 95 91 d6 9e 29 96 3a 8a 0a 88 a6 a2 8a 48 9e 41 23 68 da e6 d6 3f 4b 8b 5f 12 63 65 dc ac e5 9e 36 6a c7 44 78 c6 87 2e 15 b1 49 48 9f 77 36 2b 2a 39 da c7 82 be 96 c7 bb c7 9e 7a bb 7c bf 2f 8f 0b 67 c5 a3 66 55 b1 51 4a d5 30 2c 72 36 be 92 ae a0 75 8b 12 43 27 04 6e 31 ed c6 db 37 5f 3f 3c 64 bc 25 ff 00 6f 19 28 29 d2 96 20 a7 50 d6 b1 12 02 90 5b 85 e1 6f 6e 06 d8 eb 7a 73 5e 4d 9b 54 66 0c 93 29 90 4d 1d 96 17 72 14 14 0a 2e a0 02 39 01 0f fe 71 c6 ce 34 eb 2f 3b 6a 19 bd 5b ad 54 25 23 8a 46 66 f2 ac 5a 85 98 0f 5b ee 4f 07 b8 b6 18 f1 34 99 6e dd b2 e5 ba aa 5e 49 58 84 20 13 b3 70 a7 66 5b 77 Data Ascii: OCAF1s> 5Uk:N1):HA#h?K_ce6jDx.IHw6+9z\|/gfUQJ0,r6uC'n17_?<d%o() P[onzs^MTf)Mr.9q4/;j[T%#FfZ[O4n^IX pf[w
2024-07-04 20:55:40 UTC	16384	IN	Data Raw: e3 19 35 84 f7 55 b7 96 8e 46 d5 31 58 ca db cc 77 24 9b 6e 0e db 7a e3 58 dd b3 96 3f 17 a7 ff 00 e1 cf 98 b6 5f f6 90 f0 c2 11 d2 d7 f7 9a 7b 11 62 43 40 e6 c7 f3 1b 63 a3 9d 7e c6 e3 21 80 60 18 06 01 80 60 18 06 01 80 60 18 06 01 80 60 18 06 01 80 60 18 06 01 80 60 18 06 01 80 60 18 06 01 80 60 18 06 01 80 60 18 06 01 80 60 18 06 01 80 60 3f 30 7f e2 83 e1 2a 98 7e 29 65 19 f3 d1 a5 3d 2d 46 5c 23 8a aa 33 76 99 d0 90 41 b0 16 23 50 dc 93 b5 b7 1c 0d ce 99 f6 f0 d5 2a f4 6a e9 e5 d6 09 57 23 4f 0c b6 df 7b 6f dc ee 79 b1 f4 c6 6c dc 6e 5d 57 27 ac 6a c9 a5 92 5a b9 66 9a 35 e9 a6 bb eb 3a 76 b7 72 05 b6 1e 98 8d 2e eb fc 43 04 99 52 c1 d0 6e 92 06 97 43 28 00 16 02 e0 ed 73 62 76 24 92 2d ef 8b 38 2d dc 6a 32 57 55 6a 55 46 6f bc 99 35 a8 3b 34 9b 6e Data Ascii: 5UF1Xw$nzX?_{bC@c~!```````````?0~)e=-F\#3vA#PjW#O{oyln]W'jZf5:vr.CRnC(sbv$-8-j2WUjUFo5;4n
2024-07-04 20:55:40 UTC	1908	IN	Data Raw: 37 5d c0 bd 86 91 6e d6 b7 a9 c6 a0 d4 b3 1f 89 7e 15 f8 6f 00 39 ae 6f 49 49 3c 84 32 47 53 26 99 0f e1 05 41 3b 8b 1b dc 6c 77 e7 73 8d 4c 6e 5d 25 ca 4e d4 91 fc 6d af f1 5d 68 97 c2 5e 1e a9 cc a6 0a 01 9e a4 98 69 ad b6 dd 46 50 49 be de 55 3b 00 6f 8d cc 24 ed ce e7 6f da a4 cc a9 fe 2f 56 3c 71 2e 69 94 78 7a 29 57 43 0a 3a 35 9a 50 0a dc 69 79 35 6f 66 b0 d0 17 93 61 8d cb 8c e9 9b 8e 59 77 5c 28 7e 09 d7 66 50 f5 7c 53 e3 2c f7 c4 ae 6e c6 9e aa b2 57 8c da de 50 a1 88 03 da d6 1e c2 d8 c5 f2 35 3c 72 37 4c 9f e1 ce 45 14 13 7d c6 83 2f 8f a0 c0 04 10 2a c8 6d d9 8d b6 24 95 23 e9 ed e5 c5 b5 d3 86 d5 5e f4 99 2d 1c 82 24 48 7a 8a 00 85 2c 55 48 3b 92 47 06 ea bc fe fd e4 e6 9e 9c ab e4 58 e5 86 48 a1 d2 c9 0a 0d 69 b3 48 bc 01 d8 7a 9b 5f 9d f9 Data Ascii: 7]n~o9oII<2GS&A;lwsLn]%Nm]h^iFPIU;o$o/V<q.ixz)WC:5Piy5ofaYw\(~fP\|S,nWP5<r7LE}/*m$#^-$Hz,UH;GXHiHz_
2024-07-04 20:55:40 UTC	12792	IN	Data Raw: 34 8d 7d 67 88 d8 a8 1c 0f c8 9c 79 71 7b 6b 68 a7 92 ae 49 0c 81 d5 12 30 03 aa 02 19 6f 6d b4 ff 00 5c 63 5e 99 1b 28 92 a7 31 a7 56 4d 31 b1 d6 e2 52 45 f9 b7 fa 73 8e 5b 6d 69 14 22 92 b1 65 82 54 d7 1a 74 fa ec a4 05 4f f0 8b 6c 0e db 7f df 01 f6 0c be 35 45 5f ec f6 aa 2e 35 23 93 c9 20 93 73 b6 de f7 f5 f5 d8 30 d5 08 56 8d fe f7 2c 50 c8 24 01 69 ca ec 07 71 cd cf 73 db 7f 4b 79 72 3e d3 52 54 35 0d 4c 9a 1a 96 85 a3 1a 23 0a ae da 6f 6d 94 ec 2f bf 3c db d0 5b 1b e0 72 fe eb 50 b1 44 b3 4d a5 65 67 49 25 27 ce 3d 7d f8 27 d3 d7 6e 63 48 f3 e5 f1 b5 5c b0 88 ac 91 35 db 5d ce 9b 90 45 8d 89 be c3 f6 bf 65 17 d3 3b e7 87 39 64 eb 52 d4 a4 8c 69 e5 12 68 8a 58 c5 c0 23 51 37 06 ff 00 e1 e7 dc f3 73 7c eb 77 4b 3f 2f 49 7d 9a 7c 0a de 16 f0 47 f6 94 Data Ascii: 4}gyq{khI0om\c^(1VM1REs[mi"eTtOl5E_.5# s0V,P$iqsKyr>RT5L#om/<[rPDMegI%'=}'ncH\5]Ee;9dRihX#Q7s\|wK?/I}\|G
2024-07-04 20:55:40 UTC	16384	IN	Data Raw: 37 e7 3f 4d 76 c7 96 bc 7a aa 9a 28 59 50 94 36 6b b5 ad c5 8f 37 04 1e 4f 20 f7 b9 5d 33 56 9b c4 0c 2f a1 61 8f 74 94 47 f3 35 fd b9 b8 00 0f a7 b8 18 92 6c db 95 36 5a 7e ec 7e eb 56 d0 c8 ca 25 67 26 f6 2c 3b 0d ca 9b 00 6d c7 ae d7 d5 9b 74 d4 9b 77 bf d9 bf 23 7a 61 9c d7 d4 b4 8e ee eb 08 69 85 c9 23 93 bf 6e 31 f4 3c 13 58 ed e0 f3 dd e5 a7 79 c6 b1 83 65 16 e2 e0 1e 4e 3d 0f 32 48 8d 17 7b 9d 87 d4 60 d3 e5 c8 37 1f 91 e7 01 f4 8b 2f 27 cd e5 fe bf 5c 03 4d d6 d7 b8 6b f3 ef 80 e2 13 5e e7 61 dc 5f 13 63 ea 22 80 7c c3 51 de c7 14 09 45 d9 8d c9 37 04 fd 30 1f 15 a2 d6 48 d8 81 6b 0c 4e 46 39 66 55 27 d2 d6 04 9d b1 47 02 16 34 d4 c5 6c 14 b3 30 d8 0f 5b e0 cb c7 ff 00 11 bc 52 fe 3b f1 cd 6d 64 47 55 18 61 47 4c 56 ff 00 22 b5 89 16 e2 e4 92 4f Data Ascii: 7?Mvz(YP6k7O ]3V/atG5l6Z~~V%g&,;mtw#zai#n1<XyeN=2H{`7/'\Mk^a_c"\|QE70HkNF9fU'G4l0[R;mdGUaGLV"O
2024-07-04 20:55:40 UTC	16384	IN	Data Raw: 9a a2 30 6b aa 95 48 9c 59 6c b7 72 2d df 70 05 b7 bd f8 c7 9f cf 75 83 bf 86 6f 27 9d f2 66 92 27 4a 88 53 a5 50 81 82 07 bd 85 8e f6 24 8d 07 d0 71 72 31 f3 b6 fa 3a 4c 9b 37 60 51 e3 62 95 1c 47 22 d8 2b 0d 5b f9 c1 e7 f7 e0 5f 7b 62 6a f4 70 81 51 55 fc 27 6a 44 47 95 ac dd 0a 7b 80 0e e0 93 b5 b7 06 db 1d bf 3c 25 69 53 51 23 e6 b5 ad 42 9a 92 9e 25 7e a6 b5 27 ca c3 51 2a 4e c3 50 04 5c 7e 15 37 b5 af 87 ed 3b e1 77 9c c1 50 b2 50 2a 2c 85 e2 92 2b 30 40 a8 00 d8 8e 41 e2 fb 8d f6 3c 6e 16 43 4b 38 a8 9e 35 a6 21 96 43 2e a1 1c 45 4f 90 8b 01 b9 5b 0b 6a e0 5a fe 80 30 06 da 45 a6 5f 57 58 f0 40 d3 b2 3c 55 12 6b 76 d4 6f 62 14 b5 ae 0e e5 b7 3e fe b6 1a 27 e5 54 d5 54 3d 69 60 96 5a 8d 50 ba 4a 62 47 3a 81 07 53 02 08 3d c3 5e fb 0f d6 e5 be 34 7b Data Ascii: 0kHYlr-puo'f'JSP$qr1:L7`QbG"+[_{bjpQU'jDG{<%iSQ#B%~'QNP\~7;wPP,+0@A<nCK85!C.EO[jZ0E_WX@<Ukvob>'TT=i`ZPJbG:S=^4{
2024-07-04 20:55:40 UTC	3448	IN	Data Raw: 74 10 42 0b b0 00 91 b5 c9 04 7f bd c1 71 da 57 08 16 d5 d4 b1 54 c3 d0 14 da a7 15 12 0d 3b 72 0e c3 e9 c5 f6 22 c1 80 51 8c ef 8e 17 4b 88 c6 ba d4 8c d4 b9 a3 2d d3 30 a9 b0 52 0a 8b 85 1e f6 1c f3 60 0f fc b2 65 bc 1a e5 f4 d1 d3 4f 5a ea 48 a7 a6 52 15 22 7b b0 70 c1 77 0d aa dc 31 e2 c2 de 9b 69 1c a9 b3 10 d4 f5 90 c7 4b 50 20 95 36 22 36 d2 a1 74 dc d8 93 7b 10 ec 77 e6 d7 b7 cc 0e bb 18 92 6a 88 12 a5 b4 aa 22 10 ba 11 f4 15 61 72 4d 89 b9 b6 fb 72 2d f8 88 3a a7 44 d3 15 3d 64 d9 b4 71 21 54 58 d5 cc 64 98 b7 65 54 1c 58 1d b6 ed ea 2d f8 0e 35 cc 4e 1c 73 38 69 6b a5 42 59 e4 24 c6 8a 19 c5 94 11 62 74 f0 05 89 16 e0 8b db 62 da 24 5b d3 60 32 e9 04 24 45 1c 79 0a f4 ac 40 ef 61 b9 36 bb df 62 77 3b 13 71 26 75 bd b4 8b 54 fa b2 d7 82 8e 42 c4 Data Ascii: tBqWT;r"QK-0R`eOZHR"{pw1iKP 6"6t{wj"arMr-:D=dq!TXdeTX-5Ns8ikBY$btb$[`2$Ey@a6bw;q&uTB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	64672	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:39 UTC	454	OUT	GET /2024/06/12/17/34/26/8f7b90e3-0af2-411a-a067-c630c9d163ad/Approved%20Supervisor%20-%201200x627%202.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:39 UTC	689	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 119313 Connection: close Date: Thu, 04 Jul 2024 20:55:38 GMT Last-Modified: Wed, 12 Jun 2024 17:34:27 GMT ETag: "d1215283d860c3524bf579ad188c3da6" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"Approved+Supervisor+-+1200x627+2.jpg"} x-amz-version-id: 8BX4bBLGjlh7d6ZIC_dYz3Z0SISGB4dz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 acee7e60faaea7b7699fe033930a0164.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: 3FIEEWST1IWXBY6DduvjzgWvzLv1l9eCclocMQn4YB3WtGDqxGOgJg== Age: 2 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:39 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-07-04 20:55:40 UTC	8949	IN	Data Raw: ec 51 b2 7a 2d 82 73 a3 29 2b 0c 4d e2 7d 45 de a6 4a 96 90 3c 4b 64 79 60 f7 34 05 0f 33 1e c4 aa 1d bd a3 57 d8 92 5e 4a fe 24 ac 18 4d 0c ac fd 9a 7c db 7e 79 17 6a cd eb d8 dd 9a a5 7d 34 5a 8f 49 d8 59 18 c3 a8 ec a2 27 3d b8 f0 31 53 82 e1 ec 21 6b c3 43 89 d7 3b f5 22 8b 8b bf 9b 3d ba ca 0a 55 65 1c 2b 82 b7 92 31 46 b1 f8 4c f6 c6 c6 e9 22 b1 d0 5e 75 2c c3 3c 32 45 0b 69 a0 77 b5 d2 10 f1 ff 00 90 a9 89 1d 15 ad 9a af 36 25 0a e7 77 e1 97 89 1d 37 1f a5 83 28 13 7d 96 5e 39 f8 18 1b 5a fc 27 fa ea ed c7 16 9b d3 b6 7d 3b 03 b2 04 b5 2e 7d 64 ed f5 82 78 1b 9f 6b 0a b1 c8 e8 9d 2c 19 ce 8d c4 f8 59 2f 57 e2 42 ce e9 0d 44 7f 95 02 5c f3 7e 8b c0 d7 dd 75 da 5b 73 f7 1b bc 65 ff 00 5b 5d ea 20 93 21 d4 b4 f3 f9 35 3b 87 a0 c5 10 6b 0e 3d 60 ab 25 Data Ascii: Qz-s)+M}EJ<Kdy`43W^J$M\|~yj}4ZIY'=1S!kC;"=Ue+1FL"^u,<2Eiw6%w7(}^9Z'};.}dxk,Y/WBD\~u[se[] !5;k=`%
2024-07-04 20:55:40 UTC	16384	IN	Data Raw: b6 6b f1 43 a1 fe 62 a1 fd 9d 8b f3 f6 21 f3 53 7f 74 5e 6c ec b4 9f 2f 2f 92 f2 47 0c ae 3f ce 15 5f a5 77 da 57 7f 87 f0 2e 47 1d 7a b2 99 7a 3c 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 06 c4 76 1b d6 17 4b 46 fd d9 34 f4 15 1c 76 1d 46 65 a1 bb 5b 67 68 92 0a b8 4c 4f 20 3d 8e 18 24 11 c8 e3 38 2e 1d 09 06 b1 d2 29 10 47 43 14 e6 be 38 2c d3 59 34 ee b4 65 83 07 9b 1c 15 70 cb bf c3 16 4d 6c 6a cf 61 23 b0 51 c1 6f ec b9 da 36 9e 9a 26 41 04 3a 82 dd 14 71 b3 38 63 1b 59 86 b4 67 27 00 72 19 2b 5e 64 4e 2c 4a 89 bc db 86 2f 23 2c 10 da 86 a9 2d 14 50 f9 99 3b ff 00 c4 1f 64 bf ee 8d bb f5 72 a8 9f ff 00 43 88 fe f8 bc d1 23 0f cd d1 7e d5 e4 c8 35 27 e2 1b b5 87 f7 8a 8b ff 00 dc 1c a4 62 f9 dc 3f f6 Data Ascii: kCb!St^l//G?_wW.Gzz<@@@@@@vKF4vFe[ghLO =$8.)GC8,Y4epMlja#Qo6&A:q8cYg'r+^dN,J/#,-P;drC#~5'b?
2024-07-04 20:55:40 UTC	16384	IN	Data Raw: a0 eb 3d 76 2d e6 79 32 62 9f 15 96 9b 59 b6 3a 7e c1 45 a5 ed 10 5b ed f1 18 29 a1 e4 00 e6 e2 4f 57 38 f8 92 79 93 fb 95 2e 64 c8 a6 c4 e2 89 e6 cb 3c b8 21 97 0a 86 1d 11 79 5e 4c a1 00 40 10 04 04 67 56 d9 fc b2 9f ca a2 6e 66 84 79 c0 7e 53 7a 9f 78 ea 80 85 20 2a 60 b9 55 d3 81 dd 54 cc c1 e8 0f 20 7d 19 c2 02 e7 49 ab ee 10 38 77 85 95 0d f1 0f 00 1c 7a 88 c7 d7 94 04 86 dd ab 29 2b 9c 19 26 69 a6 e9 87 90 5a 4f a0 1f e3 84 05 f9 00 40 47 e8 48 a4 d4 b5 f4 fd 19 3b 5b 33 7d bd 0f d2 49 40 48 10 10 6d 6f 54 65 b8 45 00 3e 6c 4c c9 1e b2 72 7e a0 10 11 d4 01 01 7c d1 d1 99 2f 2d 76 39 47 1b 9c 4f bb 1f bd 01 3f 40 10 04 01 00 40 10 04 01 01 19 d6 94 66 6b 74 53 81 93 0b b0 7d 87 00 fd 60 20 21 48 02 02 a6 db 37 92 dc 29 a5 e8 19 20 27 d8 08 cf d4 80 Data Ascii: =v-y2bY:~E[)OW8y.d<!y^L@gVnfy~Szx *`UT }I8wz)+&iZO@GH;[3}I@HmoTeE>lLr~\|/-v9GO?@@fktS}` !H7) '
2024-07-04 20:55:40 UTC	16384	IN	Data Raw: 50 38 6e fa c9 e8 ed 6c f7 3d 7c cc 33 6e 86 0a 9a fa 68 aa 66 f2 6a 77 ca c6 c9 36 33 dd b4 91 97 63 c7 00 93 85 3d 1b 6a 16 d2 bb b6 84 3c 09 45 12 51 3b 26 f3 67 5d 77 8e f7 a8 fb 39 6c cd a2 0d 9c d0 b0 5f e9 a9 4b 62 31 45 13 aa 19 4f 08 00 99 9d 14 45 af 94 b8 e4 97 83 c8 92 e7 64 2e 2d 43 2e 4e 27 57 13 c4 a6 b8 5b ce f9 2b bd d7 79 2b 6e ec 47 4f ab 8e 6d 1d 3a 54 72 d3 b6 56 d6 cb 7d 96 6f fa d9 82 47 6d 6d 05 bc 3b 51 7c d2 7b cf 68 75 9a fa f7 cb 4a 61 a3 a1 96 56 46 f0 d1 c1 3b 03 b2 e8 a4 63 c9 1c 24 92 0b 79 9c 12 05 83 fc 05 5d 15 4c 13 f0 e8 ba d0 e4 ee da 5d 9b 9a 6b 6f 12 1d 62 b4 f5 32 22 93 5c ba af 34 d5 9b ed e0 d3 d9 b2 c6 08 db 6e c7 83 70 fb 3a df b7 4f f9 5c 28 05 ae 96 be a7 e2 8f 8b 7b de f7 c9 a3 73 f8 7b ee f5 bc 3c 5c 38 cf Data Ascii: P8nl=\|3nhfjw63c=j<EQ;&g]w9l_Kb1EOEd.-C.N'W[+y+nGOm:TrV}oGmm;Q\|{huJaVF;c$y]L]kob2"\4np:O\({s{<\8
2024-07-04 20:55:40 UTC	16384	IN	Data Raw: 40 ad b9 35 52 6a 25 7b 69 51 a7 06 fe 5a df 77 69 ad 36 9e 6c 88 fd 94 c8 5a 7b b9 ee df d8 64 0b c7 63 fd e2 b1 69 79 35 0d 6e 85 ae 86 d9 1c 46 69 08 96 19 26 63 00 24 97 42 d7 99 00 00 12 72 d1 81 d5 46 c3 8e 61 b3 26 7b 28 66 ab bc b4 76 ef 6a de 26 ec 58 4d 6c 30 7b 47 2d db 9a bf 75 ef e0 4d 74 0f c8 13 73 bf bc f4 3f 64 2b 4a ab f5 c9 1f b6 2f 53 72 9f f4 99 df b9 7a 13 3d ff 00 8e 4a 8d d3 ec e1 15 3e 9e 83 56 4e ed 2d 67 6c 76 3a b9 1b 1c 55 c4 bd c0 42 e7 3b cd 01 c7 91 2e 05 be 90 46 41 8e c3 22 4a 9a b5 c5 1b 81 75 a2 cd 66 d7 1c b3 ee cc de ae bb a8 a5 4a 05 13 ea ac 9e 8f 86 79 18 67 53 6c e6 b4 dc dd cc dc 29 74 de 80 8e d2 fb 35 c0 8a ed 3f 6c a8 81 ed b7 17 c8 e6 32 18 c0 70 12 79 cd 70 02 26 91 9e 80 0c 05 3d 26 ba 9a 96 9a 4a 9d 3a fd Data Ascii: @5Rj%{iQZwi6lZ{dciy5nFi&c$BrFa&{(fvj&XMl0{G-uMts?d+J/Srz=J>VN-glv:UB;.FA"JufJygSl)t5?l2pyp&=&J:
2024-07-04 20:55:40 UTC	16384	IN	Data Raw: 77 c3 4f e7 65 8f 1b 06 ca 6d d6 d4 6d 7e e5 5e f7 07 4b d4 6b 2b 96 93 d5 46 cf 4e da 5b 8c b4 42 aa 32 c6 86 07 96 bf 0c 63 8b f8 c9 00 b8 72 00 91 90 be cc af ac ac a9 91 2a 92 62 82 19 90 5d de 14 ec ee ef 6b ac de 56 dc 7c 82 8a 9e 96 44 e8 ea 20 eb 38 22 b2 cd ab ab 2b 68 f8 df 79 31 d2 3b 39 06 fd 76 63 d1 9e 49 13 f4 ce 8e b6 ea 2b bd de bc 40 e7 d5 cd 47 42 d7 48 44 30 e4 17 4b 27 09 0d 04 b4 93 82 48 27 91 d0 a8 ae 78 6e 27 36 ff 00 14 71 43 0a 57 b2 4e 2b 2c de c4 b6 be ee 26 d4 aa 45 5d 43 2d 2f 86 05 14 4d ed 69 5d e4 b7 bd 9e 3c 0c 41 b6 36 2d b2 de ed d6 d5 5a 56 d3 a3 db a7 a9 ae 56 8a 98 74 9b 9f 5f 55 24 ec ae 89 a5 f1 c9 31 74 85 ae 74 8d 0f 25 a4 70 b7 0d 68 04 e5 c6 6a b2 6d 6e 1f 4b 2e 7c c9 9d 66 9a eb e4 92 b3 c9 a5 95 d5 b6 3d 5e Data Ascii: wOemm~^Kk+FN[B2cr*b]kV\|D 8"+hy1;9vcI+@GBHD0K'H'xn'6qCWN+,&E]C-/Mi]<A6-ZVVt_U$1tt%phjmnK.\|f=^
2024-07-04 20:55:40 UTC	12060	IN	Data Raw: ea 40 69 e3 a7 7f 38 e4 1d 08 f4 13 d3 21 01 f1 67 bb c9 6a a9 0f 6e 5d 13 b0 24 8f 3c 9c 3d 23 d6 3c 0a 03 20 d2 55 c7 5d 0b 26 89 dc 71 b8 72 3f 68 23 c0 84 05 62 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 0b 45 fa c7 6f d4 b6 9a 9b 65 da 86 0b 8d ba aa 33 1c f4 b5 51 89 22 91 a7 a8 73 48 20 8f 68 5f 65 cc 8e 54 4a 64 b6 d3 5a 35 a9 8a 38 21 99 0b 86 24 9a 7a a6 73 b7 b4 ef c1 e7 5d a6 5d 57 a9 76 c6 29 6e b6 91 99 27 d3 c5 c5 f5 54 e3 a9 30 13 93 2b 47 e6 1f 3c 78 71 67 97 4d c2 7a 4b 04 db 49 ad f8 62 d9 16 c7 cf 73 e3 a7 22 91 88 60 91 4b bc da 5c d6 ed ab 96 fe 5a f3 34 8a 68 9f 04 ae 8e 46 18 e4 61 2d 73 5c 08 20 83 82 08 3c c1 07 a8 57 f4 ef 9a 29 f6 b1 e4 86 32 f9 a4 35 9d Data Ascii: @i8!gjn]$<=#< U]&qr?h#b Eoe3Q"sH h_eTJdZ58!$zs]]Wv)n'T0+G<xqgMzKIbs"`K\Z4hFa-s\ <W)25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	64674	142.250.185.196	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:40 UTC	1362	OUT	GET /pagead/1p-user-list/16526066952/?random=1720126536948&cv=11&fst=1720123200000&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fabout&hn=www.googleadservices.com&frm=0&tiba=About%20LiveWise%20Associates%3A%20Compassionate%20Therapy%20in%20Pickering%2C%20ON&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLltsJHApRilv-33D9uiLnK7k4E_XQwbLupAPvKXsni4ua65Ls&random=3896660466&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	64676	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:40 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDcvNzRhYzA0M2MtYmI1MS00ZWYwLTllNGItMDgzOWJiMDg1NjMwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=e2973f1666078d3c HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:40 UTC	627	IN	HTTP/1.1 200 OK Age: 1915135 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 104364 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:45 GMT Etag: "e157634bac7477aec863185df0d584ad6ef990e5" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 98e03882746a156be24f919d7bb2ec56faf7fcc4 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 55338d34-1ceb-429d-981a-44f95dca0763 X-Runtime: 0.521287 Connection: close
2024-07-04 20:55:40 UTC	559	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2f 93 68 57 de 00 00 01 cb 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 78 6d 70 00 00 38 8d 85 54 5b 72 e4 20 0c fc e7 14 7b 04 ac 16 92 7d 1c c6 86 bf ad ca 67 8e bf 2d 48 86 71 32 55 6b 97 5f e8 d1 ad 96 70 fa fc fb 91 fe c4 51 b0 25 9c e8 be 7b b6 cd 60 0f 2b ae 92 4d ac 98 db 61 0d 97 78 eb 8f c7 a3 8b 73 fd 30 8d 95 e2 28 7a 21 eb e5 59 41 df dd 8e a4 bb 57 67 60 81 57 6d 45 8d 4f 26 04 18 24 8e 8e 96 2b 4e df Data Ascii: PNGIHDR>U cHRMz&u0`:pQ<bKGDtIME/hWzTXtRaw profile type xmp8T[r {}g-Hq2Uk_pQ%{`+Maxs0(z!YAWg`WmEO&$+N
2024-07-04 20:55:40 UTC	2372	IN	Data Raw: a5 d7 8d 38 4d 6f fe 06 9c 96 b9 ef 5d e6 46 4e ff 00 88 13 00 ff 0c 31 73 c2 00 00 80 00 49 44 41 54 78 da ec fd 77 98 a5 db 55 df 89 7f 76 7a d3 09 15 3a 77 df be 59 59 48 98 2c 92 10 22 a7 01 63 b0 0d 0e c0 3c 1e 0c 36 8c 71 c0 04 1b 83 09 36 18 8f 70 1c 1b a7 31 d8 c2 71 7e b6 8c 09 c2 98 9c 05 16 42 42 f1 ea a6 be 9d bb aa 4e 7c c3 4e f3 c7 de e7 74 8b 31 f3 03 c4 f3 54 4b aa d5 4f 3d 5d 5d 5d 75 ea 54 9d 77 bd 6b ed b5 be 41 70 12 bf a3 f8 1b af f9 3b 7c fd d7 fc ef fc d9 af f9 ea 8f 78 ee e9 67 bf 57 09 5e 3e 3b 38 88 a6 aa 18 8f c6 62 bd 5c 30 b4 2b a2 ed 89 31 22 04 0c 5d 8b f7 1e eb 3d 65 55 32 0c 96 88 60 36 9b 51 56 05 5d db d1 75 1e 29 61 77 77 87 a6 2e 08 21 b0 58 ae 11 42 d0 75 1d e3 f1 98 51 d3 30 9f cd 59 2c 16 8c 46 23 42 08 c4 18 d0 52 Data Ascii: 8Mo]FN1sIDATxwUvz:wYYH,"c<6q6p1q~BBN\|Nt1TKO=]]]uTwkAp;\|xgW^>;8b\0+1"]=eU2`6QV]u)aww.!XBuQ0Y,F#BR
2024-07-04 20:55:40 UTC	538	IN	Data Raw: 7f 9f d1 68 44 55 57 54 65 85 56 3a 57 52 43 55 96 db c4 d7 4a 61 f2 34 5a 6a 85 cc 03 24 ad d4 f6 6b 36 ab 25 21 04 46 49 b4 90 20 c0 98 32 9f 7d 25 42 a6 a9 76 4a 76 40 49 b4 d1 08 04 e4 5d ef a6 ca 3b 1f 52 b7 20 23 ce d9 04 b8 88 31 03 30 2c 7d df b3 5e ad e8 d6 2d c3 30 e0 bc 4f 1f 6b 5b 66 f3 39 47 47 07 1c cc 8e b8 7e eb 0e 07 b3 25 9d 0d 69 95 a5 75 fa 9e b9 1a 77 43 3a ff 0a 24 91 34 d0 83 88 52 92 d2 28 bc 73 74 c3 80 0b 69 e0 17 f2 8d 69 6f 77 d7 9d bf 78 f9 bf 3e f4 fc 17 7e fd 3f fe de 7f fa d6 7f fe 7d ff 92 2f fb 13 7f f2 b8 2f 91 fb 2a 4e a6 d0 f7 c4 b7 fc 8d ef e4 5b be e1 eb f8 c8 57 bc e2 f2 e1 ed 9b 7f f8 e0 e6 b5 cf bb 79 ed ea cb 67 47 47 63 6b ad f0 ce d3 75 3d dd 30 80 96 e8 a2 20 78 9f 91 46 02 2d 15 4a a5 d6 b1 2e 4b ce 9e 3d c3 Data Ascii: hDUWTeV:WRCUJa4Zj$k6%!FI 2}%BvJv@I];R #10,}^-0Ok[f9GG~%iuwC:$4R(stiiowx>~?}//*N[WygGGcku=0 xF-J.K=
2024-07-04 20:55:40 UTC	4096	IN	Data Raw: 21 91 a6 b4 7a 3b b5 4e 55 15 40 aa 54 99 95 52 a9 6a 4b 95 f6 b8 c6 20 89 a9 7d 17 a9 4d 06 b6 15 70 83 b2 22 83 28 84 20 fd 9b cd ba 36 7d 3c e4 76 42 e4 c7 d6 52 53 e8 82 d0 78 bc 4f 48 b1 10 22 93 e9 94 75 db d2 ae c7 4c 26 53 9a d1 18 53 1a b4 7e 8a 9b 77 66 cc d7 3d 5d 37 50 16 26 7d af 5c 51 8d d1 28 9d 40 28 1e 83 f7 1e ef 42 6a a1 ad c5 18 8d 31 45 06 8d 04 fa 61 10 9d 75 cf 8c a6 3b b7 56 8b a3 8f 7f c9 07 bd ec 75 57 ae 5f 1d 8e fb 5a b9 9f e2 a4 02 93 2e f0 5f fe 95 37 70 e9 85 2f 95 77 ae 3c f5 e1 77 6e 5c fd e2 9b d7 ae 7d c4 62 be 18 b5 6d 2b a4 94 34 4d 93 aa 5c 99 a6 c9 eb e5 8a 6e bd 42 e4 15 91 cc 55 cd 14 86 c9 78 c4 43 0f 3e c8 99 b3 e7 69 46 3b 98 a2 4c 5f 6b 8a b4 46 d2 8a d2 14 18 9d 76 ae 4a 88 b4 1f 96 f9 22 97 32 57 72 b5 05 82 Data Ascii: !z;NU@TRjK }Mp"( 6}<vBRSxOH"uL&SS~wf=]7P&}\Q(@(Bj1Eau;VuW_Z._7p/w<wn\}bm+4M\nBUxC>iF;L_kFvJ"2Wr
2024-07-04 20:55:40 UTC	5930	IN	Data Raw: 90 ba 69 b2 f1 5b 77 a6 b4 ee 51 ef 43 51 94 85 73 de cf 4d 55 fd f8 64 77 ef 66 bb 9a b3 8a 27 68 ca 93 16 9a af 22 84 8e 2b b3 28 63 0c fb 65 51 1a a9 15 3e b8 ec e7 03 55 59 50 95 e5 16 fe 08 77 77 b3 de a7 a4 75 71 b3 3a da 00 2c e2 96 2f fc 1e 50 c9 e0 f1 22 26 02 83 cc 15 32 ba 54 bd 36 40 8a f4 0d d8 0c b8 36 38 69 62 7e dc e0 b7 e7 ec 94 e8 31 99 9e e5 95 14 31 6c 5b f9 ed f3 95 92 28 55 06 69 28 50 7a 9b 94 db 49 72 46 71 21 12 3a 2d 69 03 44 44 0c 88 18 b6 a2 78 70 f7 28 b0 d1 bf 16 59 15 04 1f b2 e0 40 24 7a 97 2a b4 77 c8 18 30 46 e2 bc 05 91 5a f7 c5 6a 85 73 99 a9 64 34 88 b0 25 54 68 a3 51 82 66 79 78 f0 d2 f5 7a 79 26 46 d7 38 c2 5b ea c9 de 0f fd e0 7f fa c1 56 28 cd 8f bd ee 3f 1d f7 c5 73 ec 71 52 81 f9 3a 42 fc 7b fc f7 d7 ff b0 1a ac Data Ascii: i[wQCQsMUdwf'h"+(ceQ>UYPwwuq:,/P"&2T6@68ib~11l[(Ui(PzIrFq!:-iDDxp(Y@$z*w0FZjsd4%ThQfyxzy&F8[V(?sqR:B{
2024-07-04 20:55:40 UTC	7116	IN	Data Raw: 89 52 9a 52 29 94 10 49 51 c3 d9 2c f1 e3 09 31 26 ee 31 69 a5 64 a4 4e f4 40 21 e8 7a cb ea 68 ce 90 57 5e 5a 6b 5c 8c 30 f4 20 13 23 4a 8f 2a 74 55 a3 8a 0a a9 0b a4 d6 a8 42 a0 88 49 7d 24 7a a4 8a c8 d2 40 59 50 29 89 77 16 01 68 25 d1 46 27 be 71 70 f7 48 06 c9 ed 4a 69 3c 1e 53 95 15 b6 0f c8 28 10 2e 60 62 44 e2 a1 90 28 ad f0 2a a0 47 63 fc 6a 89 44 d5 28 79 fa 91 f3 17 18 6e 9e d4 df 7b e3 24 81 ef 09 67 a7 08 21 f8 ca 4f 79 a5 57 52 c6 66 3c 12 c6 e8 ac e5 9c 50 4e 02 81 16 91 bd c9 24 f1 81 85 42 18 8d 68 0a 4a 3d 45 86 64 13 1a b5 46 15 05 d3 a9 c4 47 cf d0 b7 8c eb 8a f1 64 42 51 36 48 5d e5 33 a3 c1 48 99 c4 e0 45 e2 16 8b b0 d9 29 43 70 09 dd 95 84 de 22 dd e0 08 01 9a ba 62 54 55 14 46 e3 01 77 0f d9 3f 49 ee 40 14 11 61 34 52 80 21 60 bd Data Ascii: RR)IQ,1&1idN@!zhW^Zk\0 #JtUBI}$z@YP)wh%F'qpHJi<S(.`bD(GcjD(yn{$g!OyWRf<PN$BhJ=EdFGdBQ6H]3HE)Cp"bTUFw?I@a4R!`
2024-07-04 20:55:40 UTC	8302	IN	Data Raw: 8c d0 31 26 e1 f7 b2 40 1b 4d 2b 15 65 51 12 6c c0 97 9e 18 24 c2 46 ea ba 62 ba bf 43 a1 0a f4 3a 12 75 c4 37 82 7e d1 e3 fa 43 90 09 97 0c 09 72 e9 7d 96 c0 f5 01 29 57 04 ef e9 fa 81 db 8b 05 b7 d6 0b da f5 8a 4a 49 aa 42 d0 54 c9 1a 26 6c 14 2c 33 d2 ac a8 34 32 b7 e6 2e c6 ed 20 cf 98 22 4d b6 33 90 45 88 c0 7a bd a0 5f cf 91 92 05 b2 78 5b 1f e2 52 f4 96 67 9e 7d e6 b8 5f d2 f7 e9 38 49 e0 df 65 fc a3 7f f2 bd fc e5 af fd 1a ea d1 68 b0 31 5e 95 4a 06 6d 94 74 4e 90 e4 35 62 d6 4d 16 89 40 10 12 6f d6 e4 bd ea c8 0d 28 11 69 ea 9a f1 a8 a2 69 6a a4 50 cc 8f 56 14 41 21 7a 4b d7 77 2c bb 16 19 23 d3 a2 40 22 a9 4a cd ce 99 09 ed ac 63 58 f7 cc ad 67 a8 2c d6 7a 5c 37 30 ad 1a 18 3c 4d 5d e1 4c 89 a9 48 f8 62 1f b2 66 16 0c b6 23 48 47 18 12 20 a4 3a Data Ascii: 1&@M+eQl$FbC:u7~Cr})WJIBT&l,342. "M3Ez_x[Rg}_8Ieh1^JmtN5bM@o(iijPVA!zKw,#@"JcXg,z\70<M]LHbf#HG :
2024-07-04 20:55:40 UTC	7366	IN	Data Raw: 59 f7 7d 74 57 df dd 73 f6 cc 60 80 19 0c 80 05 16 8b 25 b8 5c 12 b4 b8 61 8a b6 29 da 5c 1e 0a 4b 8a 10 45 89 a4 b4 a2 18 2b 8a b6 2c 07 6d 5a 36 23 1c b2 45 91 cb 25 89 c5 b9 c0 00 98 fb ea 99 e9 bb eb be 2b ef 3b df 37 df fb f5 1f 59 dd d8 0d f9 88 20 77 77 d6 fa 45 54 64 65 47 45 56 76 77 7d eb f9 3d cf f3 3d 3e 8f d9 19 30 6c 77 f9 e8 77 be c7 cc 85 8b b4 8e 0e 69 9f d6 10 45 91 4e 69 0c 35 1a 65 50 6b 10 95 55 9a c3 26 be ae 93 4c a5 05 bb db 95 ea 8d 66 7a 50 6b bc 20 47 f4 c9 e4 44 7e fe 39 55 fa 1f 8c b4 7b ff 9f fd e3 7f e6 7c d0 dd e6 ef fd 95 ff e0 b3 fe 31 fd 63 71 fe d8 00 f8 af fc c6 df a5 e8 82 15 06 62 bb 7c 9c 89 27 72 53 72 a8 5c 39 3d 3c fc 13 43 c7 9b cc cc ce 2a 6d b3 bf 58 6b d6 34 35 93 22 aa e8 44 12 49 62 5a 04 23 2b 62 2b 12 c3 Data Ascii: Y}tWs`%\a)\KE+,mZ6#E%+;7Y wwETdeGEVvw}==>0lwwiENi5ePkU&LfzPk GD~9U{\|1cqb\|'rSr\9=<C*mXk45"DIbZ#+b+
2024-07-04 20:55:40 UTC	10674	IN	Data Raw: 9d 0f df a7 b6 7b c0 c2 53 4f f1 ec 9f f8 2a fd 46 85 5b ff fd 6f a1 ca 11 c6 ce ad 91 5e 98 a6 30 31 ce d1 dd 3b 7c fc a3 d7 19 fa 21 f1 4c 86 48 2a c3 c2 d5 4b 1c 7c f4 3e 0f 7f fa 26 6a 2c 4e e9 fc 2a c9 e2 18 aa 2a 53 db dd 27 5e 28 89 4b cf dd 88 2b a2 34 8f ed 26 67 3b f6 83 5f d7 fe fd e6 7f f3 85 df e4 bb 3f fc de 67 8d c3 3f 1a 00 bf fc 0f fe 03 ae fa 79 9c 98 ac 0a ed ee ab 92 e9 fe 7a 32 99 9e 36 1b 4d 61 68 0c 88 8f 17 19 34 1b 84 84 e8 f1 38 47 bb 5b 9c 1e 1f a0 a4 d3 84 8a 42 28 4b f4 4d 03 27 f0 49 97 26 89 25 53 8c 2f 2e 32 b1 b8 42 bb d3 e4 e4 e4 80 20 08 68 9c 96 39 da 7e 84 33 34 f0 6d 8b ca ee 36 bd 5a 1d 3d 16 c3 76 2c 86 43 93 f1 d9 79 c6 67 e6 47 3e c7 b1 18 13 33 f3 68 3e f4 5b 0d aa a7 c7 ec 6f 3d c4 30 7b 44 e3 49 fa bd de c8 03 Data Ascii: {SOF[o^01;\|!LHK\|>&j,N**S'^(K+4&g;_?g?yz26Mah48G[B(KM'I&%S/.2B h9~34m6Z=v,CygG>3h>[o=0{DI
2024-07-04 20:55:40 UTC	11860	IN	Data Raw: 66 2f 9e 67 e3 c3 f7 d8 7c fb 1d fa cd 36 c5 85 45 ae 7c e9 55 c6 17 e6 f0 91 c8 4c cd 52 5a 59 65 68 0f c9 a6 13 88 42 c8 f4 da 79 ae 7c ee 45 b4 88 82 17 8a 24 73 19 8e ef dd 66 eb ed f7 90 b5 28 e9 52 9e 66 f9 04 2d 12 67 ed b9 a7 49 17 72 44 d3 39 d6 6f be 40 a2 90 27 33 31 c1 ca 33 cf 12 8b ea dc fb f1 ef 32 68 77 c9 4d 8d e3 0b 02 99 b9 79 4a 8b cb 94 f7 b6 d8 be 7d 9b 4e b3 41 fd f8 90 7b ef bd cb f1 c1 01 bd 56 9b 89 7c 91 a9 e9 69 52 13 e3 4c 3f 75 8d e2 dc 3c 47 1f df e2 d6 ef 7c 17 d7 f5 b8 fa ca 17 58 b8 72 89 44 a9 c8 cc a5 0b 44 c7 0b cc 5d bd 82 22 c2 07 bf f5 db dc ff d9 9b 24 27 66 78 e6 57 fe 04 e3 e7 57 50 a3 1a 93 0b f3 34 8f 8e 38 fa f0 23 ac 6a 9d d3 3b 0f 38 7a b4 49 7a 66 96 f9 1b 97 11 86 0e c7 1b 1b 74 4f aa e0 78 42 10 84 d3 82 Data Ascii: f/g\|6E\|ULRZYehBy\|E$sf(Rf-gIrD9o@'3132hwMyJ}NA{V\|iRL?u<G\|XrDD]"$'fxWWP48#j;8zIzftOxB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	64677	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:40 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMDkvNDQvY2E4YzQ1NzAtYTVlNS00ZDY0LWI5ZGMtNzMwZDUwNzVkYzkwL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=6906302e733c4b9c HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:40 UTC	626	IN	HTTP/1.1 200 OK Age: 1915123 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 71195 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:57 GMT Etag: "2bb88288e8484663501a1788e37ae100be49a079" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 6f0b00373daf43350192018684ec18b1ff5b798f X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: 961dccc0-71c0-4edd-9dab-b3637a99d499 X-Runtime: 0.428147 Connection: close
2024-07-04 20:55:40 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 09 2d 7d 66 36 f2 00 00 80 00 49 44 41 54 78 da ec fd 79 b0 e6 db 7a d7 87 7d d6 f4 1b de 61 cf dd a7 bb cf b9 e7 dc ab e1 ea 0e 12 42 18 81 90 30 0a 02 83 9d 38 a6 62 88 03 01 9c 38 24 2a 0c d8 11 14 15 5c 10 33 19 1c 5b 2e ec 18 39 31 e0 14 54 5c d8 8e 21 a6 e2 38 06 19 e1 14 33 08 84 84 40 57 c3 9d cf d4 a7 87 3d be d3 6f 58 c3 93 3f d6 fa bd bb 2f b9 80 ff d0 51 53 dd bd a4 f7 ee ee dd Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIME-}f6IDATxyz}aB08b8$*\3[.91T\!83@W=oX?/QS
2024-07-04 20:55:40 UTC	2372	IN	Data Raw: a0 1d da 56 28 53 81 76 28 e3 50 b6 2a 01 5f 02 4b 12 00 4a ef cf 89 fc 77 a5 50 e5 10 31 da a0 b5 06 5d 5e 9b 02 a3 14 1a 40 4a 50 ee 0f 82 7c 00 a9 f2 1c 88 02 34 a0 f6 bf 8f e2 f6 a3 62 3a a4 12 20 08 09 85 80 ca 5f 6f a6 f7 41 24 bf e6 67 de 57 91 e9 51 fe 4d c8 df a7 75 3e 98 34 68 a3 d1 2a 1f 82 82 76 43 92 85 a0 57 46 eb cf fd ad ff f2 8b 2b 5d 29 7e e3 2f ff 2e fe c4 5f fc 2b cf 7b 9b 3c b7 65 9f f7 0b f8 27 79 fd c0 f7 fc 7a 62 0a bc bd ae d4 49 e3 cf 74 dd 7e 9b a9 dd a7 45 a7 3a a9 84 31 0a 63 75 de e2 29 5f 45 8a 1c 1c 4a 29 ca 7d b8 0f 5e 41 81 36 25 f0 34 5a d7 28 65 f2 a6 2f 97 5c 12 ca 0d ab f3 2d a5 14 4a 19 b4 9a 6e e7 98 37 7b 09 07 41 90 94 0f 11 14 f9 b9 28 01 0d a0 f2 73 a6 24 48 4c 90 40 a4 04 97 48 7e 1e ad f2 4d 98 14 1a 9d 5f 67 Data Ascii: V(Sv(P_KJwP1]^@JP\|4b: _oA$gWQMu>4hvCWF+])~/._+{<e'yzbIt~E:1cu)_EJ)}^A6%4Z(e/\-Jn7{A(s$HL@H~M_g
2024-07-04 20:55:40 UTC	538	IN	Data Raw: 00 85 a4 8c 98 12 25 68 91 0c 9b 4c 42 01 fd e6 f1 8b b5 60 cb c8 69 4a 9b 95 42 95 da 31 4d bd ed f2 6f 79 3d 83 61 7e 26 0b 86 4c ae d0 fb c6 74 ae db bf 02 82 49 ae 77 f7 c3 b0 29 f6 cc 34 b5 2d 37 bb 48 09 44 75 fb fc 13 ca 4c 04 4d da cf a6 9f cd 1e b4 29 1d ef 28 7b dc 73 3e 7c 74 6e ba a7 d2 b2 57 e4 af 53 b7 c1 a7 c8 5d eb a9 36 4f 4a 32 01 84 84 56 19 e3 dd 38 a3 0e 97 fa 2c 75 c3 37 c8 b6 5f d8 d6 ee 94 1f 9e f7 36 fa 19 5d af 6e e0 67 56 8c 89 ef fa 8e 25 ed ac aa b4 b3 6f b6 8b c5 47 74 e5 6c 40 32 a2 a9 d4 bd 2a e6 b4 57 03 da 28 22 91 31 78 22 82 94 99 ac b3 15 ce 56 68 65 90 98 6f 32 35 75 51 89 88 04 3c 0a af 2d d1 3a 92 b1 19 be 08 19 21 25 42 4a 31 e3 85 93 22 95 f6 ee 9e 34 51 6e 48 ad 34 46 d9 3d 3c 51 52 79 48 ee 24 65 cc 44 ae b5 89 Data Ascii: %hLB`iJB1Moy=a~&LtIw)4-7HDuLM)({s>\|tnWS]6OJ2V8,u7_6]ngV%oGtl@2*W("1x"Vheo25uQ<-:!%BJ1"4QnH4F=<QRyH$eD
2024-07-04 20:55:40 UTC	4096	IN	Data Raw: a5 e9 a7 f6 37 b8 90 c7 5b d6 5a 62 08 b5 92 f8 35 95 95 8f 89 13 67 75 24 8c bb e7 bd 95 7e c6 d6 ab 00 2e eb fb 7f d3 bf 88 49 3d ff e5 af fc c5 4a 24 9e 09 f2 29 41 0e b5 ce 4d ab 18 43 be 11 a7 da 6c 4a 15 61 3f 12 99 6e e8 9c 72 aa 82 ad 48 84 14 9f 61 f3 4c 10 46 9d 79 af b6 42 5b 97 bb cb 65 93 4e c3 a0 dc e9 c9 c1 96 a7 c3 b7 6b aa 15 f7 09 b3 9a 12 61 b5 af 79 f7 5f 2f b7 69 ef 57 3e 03 39 b5 9f a8 89 85 9b 9b 7c 80 90 20 4a 3e 00 62 42 42 2a 7f 16 54 02 a3 74 06 8a 26 41 a5 84 51 0a 67 0c 46 67 88 65 0a 3e 1f 64 14 fa a2 9a ea ee db 34 7e 2a 05 f6 14 c5 69 96 ce d4 1d 4f 85 d0 20 38 a5 b1 4c f4 c2 52 4f 6b a8 da ca cc 0e 16 f7 eb 79 fd 75 56 c7 d6 d5 16 df 5f 3d ef ed f4 33 b6 5e d5 c0 65 69 89 48 e8 39 3c 6a ab 14 fd d7 89 a4 af 43 51 43 66 c3 Data Ascii: 7[Zb5gu$~.I=J$)AMClJa?nrHaLFyB[eNkay_/iW>9\| J>bBBTt&AQgFge>d4~iO 8LROkyuV_=3^eiH9<jCQCf
2024-07-04 20:55:40 UTC	5930	IN	Data Raw: 21 66 25 4b 62 40 a7 88 4e 09 23 09 4b d6 68 9e 3c 08 95 94 59 b0 4c 3d 03 d9 73 7b 65 3f 41 9b 9c 16 cd ad 48 fc be de cf 2f 25 09 c4 54 84 0a f6 67 c1 d4 23 90 7d 0d 3f 61 bf d3 a4 97 ad 95 4e 22 07 43 f0 4b 30 4a 5e f0 31 d2 4b 1f c0 1a e1 53 df f1 9d 28 52 15 c6 71 e9 47 ef 52 88 cf 04 6c e9 ce 4e aa 17 e5 46 50 6a 62 1b 95 5a 71 ca 2a 4b 40 dc 2a 28 92 01 07 13 60 43 df ea 44 4b d9 ec ba cc 4c 75 31 f3 ca 8e 7c 19 78 a1 01 62 44 ab 72 8b a6 1c dc 69 0a e0 94 e9 88 99 28 90 39 b3 b9 be 2c 46 6c 25 88 a6 71 d1 6d 6d 3c 1d 4e b7 98 ac 1c 73 59 bb 7a 42 5b 85 e0 b3 ae 95 c4 a2 97 25 45 59 56 50 d9 6a a2 c0 23 23 12 62 4e f5 53 cc fc e2 e9 32 dd 03 40 6e e1 92 f9 b0 33 68 93 1f 46 4f 7f b6 59 8a b7 a0 c7 a6 1b 39 8f bb 6f 45 e8 f3 7f 19 9e 49 44 6e 91 5c Data Ascii: !f%Kb@N#Kh<YL=s{e?AH/%Tg#}?aN"CK0J^1KS(RqGRlNFPjbZqK@(`CDKLu1\|xbDri(9,Fl%qmm<NsYzB[%EYVPj##bNS2@n3hFOY9oEIDn\
2024-07-04 20:55:40 UTC	7116	IN	Data Raw: 9f 00 81 34 7a df cc 66 4f ab a6 5a 49 36 fa 53 ce 58 a2 37 6c b7 3e 93 13 b2 31 12 95 cb 6a 12 59 de 26 64 2a 5e 61 c3 30 99 78 89 61 1c f3 dc 34 2b 4c 6a 92 ae 10 37 c3 b6 91 45 3d cb aa 15 29 22 da 65 7a 9f 78 ac cd b7 b6 d5 0a 63 34 d1 8f 05 4e 59 c0 16 bb 31 93 f6 b1 28 15 b3 40 ba 28 8c a9 30 09 62 7f cb df 1d c6 9e be 1b b8 bc d8 71 74 90 d8 ee 46 4e 8e 4f 71 cd 12 d1 0d 49 d7 24 55 31 8a 26 04 30 41 63 ab 96 f9 ec 80 0b 74 26 c5 87 44 3d 5f 72 78 ac a8 9b 05 a4 31 93 21 74 56 c4 b0 ce 66 f2 46 2c 58 64 ab d1 16 ac 53 d4 f5 8c 61 1c f0 a3 c7 7b 4f 8c 11 eb 2c 5a 69 ac 35 18 dd d2 0f 1d 29 69 6c b5 c4 88 10 8b 1c ec 10 34 1e 30 c5 18 ad b2 94 43 41 61 44 10 c9 3a 5b 12 46 92 4f 88 07 27 2a bf df 29 16 7b 95 cc 77 8e 31 31 fa 48 ad 50 d6 3a 63 9c d1 Data Ascii: 4zfOZI6SX7l>1jY&d^a0xa4+Lj7E=)"ezxc4NY1(@(0bqtFNOqI$U1&0Act&D=_rx1!tVfF,XdSa{O,Zi5)il40CAaD:[FO'){w11HP:c
2024-07-04 20:55:40 UTC	8302	IN	Data Raw: df 42 08 1d 7e dc 50 1f 1f a0 8c c5 8b c1 35 73 a2 1f d8 ed b6 24 6d d0 d6 66 82 03 05 df a2 40 52 45 d2 82 2a bd 05 91 4c 6a c8 b7 71 f6 56 ca 41 2d 65 a4 2e 28 93 21 97 c3 30 10 7b 9f 67 d7 62 18 c7 84 6b 1d ae 99 33 84 31 2b 84 0c 3e f5 9b dd 26 8e 7e fb e0 13 1f 91 2f 7d fe bd e7 bd bd 3e d4 f5 2a 80 c9 49 af 92 c8 d8 ad 47 3f 0c 9f 95 61 f7 b9 a8 ec 37 c4 38 d6 bb 6e 8b 51 8a a3 a3 43 9e 3e 59 b3 d9 ae 39 3d 6d d1 0a 46 df 93 a4 25 25 4d 98 90 11 00 08 5a 5b 62 cc f8 64 37 a9 51 a6 c9 b1 40 50 c9 63 52 47 1c 37 c4 7e 87 1f 7a 7c 8c 58 9d 47 3d 01 87 4e 16 a3 6b 24 09 bb 4d 87 df 05 8e e6 c7 68 ab b8 b9 79 cc 30 8e dc ac 76 18 97 b5 95 63 1a b9 ba b9 64 f4 03 d6 29 ee dc bd c3 e1 91 46 ac 22 d1 43 eb d0 95 06 04 35 0c c4 6e c0 6f 3b f0 89 10 22 0f df Data Ascii: B~P5s$mf@RELjqVA-e.(!0{gbk31+>&~/}>IG?a78nQC>Y9=mF%%MZ[bd7Q@PcRG7~z\|XG=Nk$Mhy0vcd)F"C5no;"
2024-07-04 20:55:40 UTC	7366	IN	Data Raw: 5d 40 3b c8 46 25 f9 78 4c 9e e7 38 ef f1 3a 10 33 41 a2 25 e6 60 a9 e9 9a 05 db cd 9a 4d dd 20 4a 53 8e 4b 74 6e a8 c6 15 59 61 d2 9e 36 15 69 ad a5 ae 6b 32 95 23 21 4b a3 95 59 c1 fe 74 8f e5 3a a2 4d 64 bd 9e a3 32 c1 14 25 cf 7d ea 16 93 f2 2a 7a 2f 50 4d 66 3c 58 9c e0 bc 22 c6 c8 7a db b0 58 ad 10 a5 50 46 31 1e 4f 88 aa 62 db 59 42 dc 50 18 cd c8 c8 69 d8 ae 7f 7a 72 f5 da 33 ff ea 7f fb 1b ee ab fe d0 ef 45 7e e1 8f fc fe 3b af 57 e7 81 ff 3d 2e a5 0d 5f fc ad df 82 db 36 4d 68 bb 07 ab b3 79 dd d4 1d 57 af 5e 67 3a 3d 44 54 45 96 4d 41 72 44 17 b8 00 77 8f 1f 50 8c c6 7c de 7b be 80 c5 66 c9 b3 2f 3e cb 8d c7 ae f1 f8 13 8f 30 99 55 ec 1d 4c 19 8d 47 18 a3 c9 4c 96 66 58 95 c1 07 a1 6e 3b d6 9b 35 21 5a 10 87 ef 6a 94 6b c9 73 c8 a7 06 b5 2f 70 Data Ascii: ]@;F%xL8:3A%`M JSKtnYa6ik2#!KYt:Md2%}*z/PMf<X"zXPF1ObYBPizr3E~;W=._6MhyW^g:=DTEMArDwP\|{f/>0ULGLfXn;5!Zjks/p
2024-07-04 20:55:40 UTC	10674	IN	Data Raw: 4a 8f 1a bc 6c ed 96 26 74 04 89 18 25 80 c3 b9 08 5a 25 ef df 47 5e 00 89 e9 30 29 04 2d 8a e1 3f 2d 19 5e 55 3c f7 c2 31 a7 cb 96 d9 7e 41 0c 96 5c 7b a2 ab 29 8a 11 0a cb c9 f1 5d 8a d9 15 50 69 03 83 0f 1e 15 2c a2 22 75 bd a1 a0 c4 07 4f 6b 3b 8c 28 4c 5e e2 51 d8 08 2e 0a 65 5e a4 16 4d 55 d2 18 cd 78 3a 25 2b 0b 1a e7 d0 5a a8 3b cb a4 cc 69 9d 43 19 c3 7a 3b a7 12 cd f4 60 8f 6e 5c e2 94 c1 ae 57 d4 a7 6b d6 cb 0d e6 f2 8c 2c 2b 70 4a 33 be 72 19 9a 8c c5 fc 1e 59 55 90 4d 2a 54 95 21 9d 40 91 11 8c c2 eb b4 2f 39 ab 0a bc 6b 09 a4 dd 48 c4 94 a6 6b 22 5a 81 eb 1a c6 55 45 6e f2 34 eb ab 34 55 55 e1 9c 47 88 cc 66 53 36 67 27 98 22 27 74 0d ed 76 4d e8 5a 4a 93 f4 b0 25 02 3e a6 08 2c d2 e7 41 81 48 02 c4 22 10 24 95 35 9d 0f 18 93 e3 43 c8 82 95 Data Ascii: Jl&t%Z%G^0)-?-^U<1~A\{)]Pi,"uOk;(L^Q.e^MUx:%+Z;iCz;`n\Wk,+pJ3rYUM*T!@/9kHk"ZUEn44UUGfS6g'"'tvMZJ%>,AH"$5C
2024-07-04 20:55:40 UTC	11860	IN	Data Raw: 41 fa f4 30 82 0b 29 8a 49 40 ab 94 2e 0e 2c 46 91 9e 9c 40 cf 59 8e 8a 18 2c de b5 78 6b 7b 03 76 04 07 de 66 ac d7 1d 0f 4e 2d ab 6d c4 4b 86 a8 2c 19 70 d4 c4 a0 fa 56 4b 6a 1d 8a 28 02 1e 53 08 5e 77 34 61 83 37 2d f3 ee 3e eb b3 39 8d 5b 71 f5 e0 3a 93 c3 92 66 d9 d1 d5 16 e9 05 09 bd 4f f5 a3 d2 fd 70 49 fc 2c 03 de 39 f5 c1 98 2f 90 3b 76 bf fb 1d 03 4b 24 b5 99 da ae 41 6b 43 9e 17 80 4e dc 7a 04 d5 ab 66 d2 83 56 82 41 f7 a9 b3 8a 2a d1 66 25 75 b0 63 38 2f d3 c2 85 51 8c c1 26 e4 02 20 f4 10 3b 3f 66 3d ee e2 89 d8 f4 b5 ca ef 3a 55 e6 8d e6 35 f2 df bf f9 57 56 cf 7c e2 13 d7 4e d7 db cf 8d b1 7a af 52 07 ef 45 e5 6f 53 ba 38 30 5a e7 21 1a 3a c9 f0 28 02 96 18 02 a2 34 50 01 55 ff 82 5b c0 13 94 22 90 8c 79 68 c6 0f 4a 17 e7 c3 01 89 4b 1a a5 Data Ascii: A0)I@.,F@Y,xk{vfN-mK,pVKj(S^w4a7->9[q:fOpI,9/;vK$AkCNzfVA*f%uc8/Q& ;?f=:U5WV\|NzREoS80Z!:(4PU["yhJK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	64678	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:40 UTC	1428	OUT	GET /df_media/W1siZiIsIjIwMjQvMDUvMjgvMTAvMTAvMDEvYjNmNjI2YWQtNTI1Yi00MDc4LThhNzMtYjI4OTE1NWI1ZGZmL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjI0MHgyNDAjIl1d?sha=e7a7d525434ae295 HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:40 UTC	626	IN	HTTP/1.1 200 OK Age: 1915132 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="file" Content-Length: 87652 Content-Type: application/octet-stream Date: Wed, 12 Jun 2024 16:56:48 GMT Etag: "a2b4c43c1c5c50d762d26d37f1a2534a851a0d52" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 6666462e6f48ada42757ee31527c9450e8bd75a5 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: d5d81f19-f2d5-4977-af2b-82d41bff5292 X-Runtime: 0.491853 Connection: close
2024-07-04 20:55:40 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 05 1c 0a 0a 02 fd 9a 58 68 00 00 80 00 49 44 41 54 78 da ec fd 77 bc 6e e7 75 16 8a 3e e3 2d 73 ce af ad 5e 77 2f d2 d6 96 e4 ad 2e 59 2e 49 1c 1b c7 b1 43 9a 43 48 20 81 40 4e e0 84 c0 05 02 09 90 7b 53 08 e6 dc 8b 2f 29 07 c2 e1 77 80 f0 3b 81 90 1b ce 21 87 60 92 00 8e 6b b0 2d 5b 2e 92 d5 f7 de d2 ee 65 f5 f6 b5 59 de 76 ff 78 df 77 7e df da 5b 86 14 20 3f c9 9a fa 2d ed 55 be b6 be 35 c7 1c 63 Data Ascii: PNGIHDR>UgAMAa cHRMz&u0`:pQ<bKGDtIMEXhIDATxwnu>-s^w/.Y.ICCH @N{S/)w;!`k-[.eYvxw~[ ?-U5c
2024-07-04 20:55:40 UTC	2372	IN	Data Raw: 2f 5d ba 84 63 c7 8e d1 67 3f fb d9 f4 c9 cf 3d 79 f2 dc b9 f3 7f 6a 77 a7 fb 7d eb eb 6b 8b db 9b 9b c4 39 c1 19 03 6b 81 ca 68 68 a7 51 e6 03 98 aa 02 27 8e 24 49 d0 6e 34 30 d1 6a a2 d3 6a 22 25 42 3b 15 98 6a b7 30 d9 6a a0 21 05 12 c1 c0 39 03 88 c0 18 03 23 06 ce 38 38 e3 00 0c 9c d3 70 ce c0 c1 81 20 60 2d e0 2c 40 24 40 8c 41 3b 8b a2 2c 50 96 25 88 08 9c 73 38 67 eb a0 53 c6 42 19 07 ad 2b 94 45 09 a5 35 f2 a2 82 71 0e 8e 09 54 d6 a1 d0 1a 95 b5 d0 00 2a a5 41 f0 af 07 44 b0 ce c2 11 c1 80 a1 aa 4a e4 c3 21 ac 31 00 00 c6 18 92 24 01 e0 03 b0 ac 2a 18 63 90 35 1a 10 42 84 40 05 1a cd 16 88 31 34 1a 0d 0c 06 03 f4 7a 3d 18 6d 61 8c c5 c4 c4 04 3a 9d 0e 18 63 68 b6 1a e0 9c a1 d7 eb d5 17 08 22 82 d5 0a 5a 6b 30 c6 20 84 80 14 12 d6 18 9b 35 b2 17 Data Ascii: /]cg?=yjw}k9khhQ'$In40jj"%B;j0j!9#88p `-,@$@A;,P%s8gSB+E5qTADJ!1$c5B@14z=ma:ch"Zk0 5
2024-07-04 20:55:40 UTC	538	IN	Data Raw: 28 10 1a 04 88 09 0f 26 85 0b 09 63 0c d6 21 94 c4 f0 25 b7 63 00 59 5f 3a 87 e7 f7 8f e1 03 40 08 01 63 e0 03 c7 85 fe 97 33 58 e7 01 36 c3 09 89 e4 30 c6 c1 5a 80 38 c1 39 ff 3a 9c 73 b0 b0 90 09 07 b7 04 6b 0d b4 32 70 04 70 10 5c 2a 01 18 c0 11 10 b2 5d e6 38 a4 b1 c8 ac 43 22 38 72 65 50 6a 0d 18 0d ab 35 8c 75 10 8e 60 b4 43 a9 aa 3a 43 0a 21 90 24 49 7d f1 89 19 13 40 8d 32 4b 29 eb 9e d8 18 53 07 24 e0 2f 6a 45 51 a0 d3 6a a2 dd 6e 83 88 90 e7 79 3d f3 4e d3 14 69 9a 82 88 50 56 15 12 5f 25 51 3e cc 93 9d 9d 9d 07 9e 7d f6 d9 47 5b ad d6 27 2f 3b 37 df 99 98 50 49 92 18 63 8c 7a ff fb df 5f 5d bf 7e dd d5 a3 aa ff 0e 81 fc 46 00 ff 01 8f f8 c7 01 80 eb d7 af d3 85 0b 17 c4 33 cf 3c c3 ac 31 5c 29 25 bb bd 5e 92 0f 87 60 8c 99 17 9e 7f fe c0 17 3e Data Ascii: (&c!%cY_:@c3X60Z89:sk2pp\*]8C"8rePj5u`C:C!$I}@2K)S$/jEQjny=NiPV_%Q>}G['/;7PIcz_]~F3<1\)%^`>
2024-07-04 20:55:40 UTC	4096	IN	Data Raw: 37 3b ff de 08 e0 3f e0 11 91 cc 67 9f 7b 4e 6c 6f 6d 4d 59 6b 1b dd 6e d7 16 79 ce a5 10 6e d0 eb 4f ec ed ed 4e 5e bb 72 65 ee b9 a7 9f 7e ef ee e6 e6 b7 aa 7c b0 54 18 43 04 20 6d 64 b0 0c 18 16 0a dd 7e 1f f9 70 08 66 35 96 67 66 f1 f0 e9 93 38 73 c7 11 4c b5 1a 60 32 f1 40 51 1c d5 30 16 c0 26 02 10 4b 66 0f 64 31 ce 01 f8 2c 49 14 fa 45 22 30 67 43 d6 89 48 b4 47 80 19 63 1e 98 62 0e b0 0e 8c fc e3 3a 6b 40 88 41 1f a9 9e e4 a3 d2 59 30 49 00 39 70 f2 17 0d e3 01 69 08 62 d0 24 a0 09 d0 da 23 c6 86 01 3c e1 00 07 ac b1 20 47 80 02 2a 38 58 07 70 26 01 62 70 a4 60 01 70 03 c0 3a 8f 58 13 c0 38 41 2a 0b c9 19 78 e1 e0 20 c1 08 10 49 02 47 84 52 55 10 70 28 f3 21 5c 40 c5 99 9f 91 01 00 8c 51 b0 d6 d5 fd 79 55 94 3e 2b 8f cd 95 c7 ff 9e 52 ca 3a 03 1b Data Ascii: 7;?g{NlomMYknynON^re~\|TC md~pf5gf8sL`2@Q0&Kfd1,IE"0gCHGcb:k@AY0I9pib$#< G8Xp&bp`p:X8Ax IGRUp(!\@QyU>+R:
2024-07-04 20:55:41 UTC	5930	IN	Data Raw: b7 77 c4 19 23 38 11 52 29 c0 9c 43 35 cc 61 2a 05 32 80 77 3e af 70 74 71 0e 5f f7 e6 87 b1 30 3d e1 51 67 c6 01 36 d6 fb 46 20 25 b8 33 32 78 41 7b fc 18 47 9f eb c3 37 c1 61 56 bc ff eb f1 ef ed fb 31 e2 54 c8 97 d1 0e 63 a5 36 dc ab be 07 b7 3d ed d8 eb 25 d0 7f 25 63 50 4d 36 a9 a9 8b a1 37 dd f7 38 44 01 7c 1b dd 96 0b 01 21 a3 ab 08 07 17 1c 42 70 a4 89 44 23 4d d0 94 02 cd 44 a0 91 c8 7a 7e ab b5 06 e3 bc fe 3a a2 c8 f1 5f 22 aa 33 68 cc c4 91 7d 55 96 65 9d 35 f3 3c c7 70 38 ac b3 69 bc 00 a9 c0 ea 8a 63 a4 38 82 8a d6 3e 91 a2 19 2f 0a a3 8b 13 58 5e e4 29 18 89 b2 2a e7 b6 b6 b6 8e 3e f2 e8 c3 cf 2e 1f 58 7e b1 db ed 7e e3 2f fd d2 2f 1d 75 ce 51 7c dd bf 9b e3 8d 0c fc bb 38 3e fa d1 8f e2 e3 1f f9 6d 4c 4f 4e b0 df fc f7 1f 9a bb 7c f1 e2 9d Data Ascii: w#8R)C5a2w>ptq_0=Qg6F %32xA{G7aV1Tc6=%%cPM678D\|!BpD#MDz~:_"3h}Ue5<p8ic8>/X^)>.X~~//uQ\|8>mLON\|
2024-07-04 20:55:41 UTC	7116	IN	Data Raw: c1 91 0c 71 6b cf 5c 07 28 a1 56 1b dd 5a 42 03 7e e3 c1 88 8d 15 05 11 a8 51 65 6f 03 eb 3c 61 23 c4 bb d6 16 c4 18 54 58 5f 0a ce 61 e1 2d 7d e2 25 c1 06 ad 6e 51 14 b5 ba 28 ee 16 66 6c 24 f7 8c 17 1e 9f 65 09 fb 31 03 07 63 74 fd 3b 45 fd 70 bc 6f 1c 27 45 96 56 fc 1a 20 30 46 66 6a 7a f2 d2 bd f7 de fb eb 7f f7 ef fe 2f ff f9 3f 7f f2 77 06 2b ab 2b 6f d5 c6 34 8d b5 54 95 25 cb f3 bc c9 88 cd 6f 6f 6f 97 47 8f 1c 79 f1 73 4f 7c e6 ee b2 2c ce bc 6e 33 b0 73 0e cf 3d f7 1c 7e ec c7 7e 8c fe da 5f fb 91 77 5d bc 70 e9 03 9c 73 b6 b2 b2 fa 6f 1f 7b 74 ef 3f 4e 4c 4e f4 7f f3 37 7e ab b9 b2 b2 32 b5 b3 bd d5 98 e8 b4 3b 8d f6 f4 dc cd cd 2b 90 04 dc 75 ef 9d 10 9b 9b 58 d9 dc c6 cd 95 75 00 06 9d 4e 13 87 e6 17 70 fc d0 41 4c b4 9a 98 9c 98 40 b3 d9 42 Data Ascii: qk\(VZB~Qeo<a#TX_a-}%nQ(fl$e1ct;Epo'EV 0Ffjz/?w++o4T%oooGysO\|,n3s=~~_w]pso{t?NLN7~2;+uXuNpAL@B
2024-07-04 20:55:41 UTC	8302	IN	Data Raw: 5d 04 30 11 e1 6b de fd 0d f8 df 7e e6 ef 9f b9 f4 f2 f9 3f 2f b3 ec ec 9d 67 1e f8 e8 c6 f6 4e 55 0c f3 84 08 83 f9 85 c5 8b c4 d9 b5 33 f7 3d 62 3f fa 91 df c2 bf fc 97 ff 02 32 4d f1 af 7f e9 ff 40 bb 33 b1 f9 c9 df fe f0 c7 af 5c bb f2 c8 e9 f4 f8 fc d1 c3 8b dc 16 3d 90 01 78 9a a0 d9 14 d0 d6 b3 69 26 db 13 d8 de db c3 de d6 1e da cd 49 4c 4f cd 40 24 09 6c 50 07 6d dc dc c0 f9 73 e7 51 95 0a 59 da 42 df 58 0c 75 85 aa 3f 44 7e ed 3a 4e 08 89 e9 b9 05 0c b5 c3 c6 c0 20 9d 9c 86 da db 00 ef 57 60 8e 40 d0 b0 16 e0 e0 be 5f 05 00 0a 4b cf 6e 9d c5 82 6a 57 8a 78 78 63 0f df e3 da b0 c1 8f 28 d0 28 43 a9 e9 41 2b 5f a2 9b 70 a2 21 94 84 c6 68 14 ca a2 28 c3 c2 f2 10 42 82 f9 0c 23 a4 84 e0 7e 51 b9 36 e1 b1 8c 03 2f 2a 48 29 90 24 12 32 11 48 13 01 29 Data Ascii: ]0k~?/gNU3=b?2M@3\=xi&ILO@$lPmsQYBXu?D~:N W`@_KnjWxxc((CA+_p!h(B#~Q6/*H)$2H)
2024-07-04 20:55:41 UTC	7366	IN	Data Raw: 1f 03 2e 80 4e 0a af 34 18 33 8c 23 c0 3a 13 66 90 1a c3 61 8e e1 60 08 06 0e c1 39 e0 3c c0 26 b3 14 ad e9 19 20 6d 22 b7 f0 8b af 39 83 20 86 c1 70 88 0b 17 2f 62 6b 7b 0f 9c 13 7a a5 c2 f4 c4 04 16 17 66 30 35 33 e1 fd af bb 7d 74 07 43 5c d9 d8 c2 cd cd 4d 5c 98 99 c4 a9 23 07 71 74 71 0e 13 0d 0e 46 1a 70 1a 64 08 ce 32 38 08 70 26 43 56 8d e3 a0 50 1e 33 8f d6 9b 30 f3 56 5a f9 59 32 8b 3d 22 46 b6 3a 51 72 14 8d 00 c8 af 2a 49 13 89 44 70 34 12 81 b6 05 2a d3 04 0d 2b ec 16 05 c8 7a 52 0e 63 1c cd 76 0b 69 92 41 55 15 54 59 d6 4e 1d 95 52 b5 6b 89 36 5e 2f 1c 03 91 f3 c8 63 86 e7 9e 87 d1 4f 9c f7 73 e6 a7 0f 5a 6b e4 79 ee 47 46 81 85 15 4b e7 f1 65 ec f1 67 ce 05 f1 87 08 2d 0d 17 64 b5 11 04 94 13 13 93 37 26 26 26 56 94 31 ed b3 67 cf 2e 2f 2f Data Ascii: .N43#:fa`9<& m"9 p/bk{zf053}tC\M\#qtqFpd28p&CVP30VZY2="F:QrIDp4+zRcviAUTYNRk6^/cOsZkyGFKeg-d7&&&V1g.//
2024-07-04 20:55:41 UTC	10674	IN	Data Raw: dc 01 b5 11 3c 32 1c 19 a4 62 53 f9 3c 9a 4b e7 09 36 91 18 62 29 08 fa c6 76 2d aa a2 04 2b 13 03 58 45 c7 75 ce 30 4d e4 c7 92 2c 2f f4 34 0c d3 ee 51 e6 db 0c e6 a8 96 cc 01 a5 26 5c db df c5 f7 ee 3f c6 62 dd e0 ac b5 38 6d 7a d4 25 a1 2e 75 44 69 a5 e1 d5 07 83 38 36 e4 90 89 74 ca c4 34 4c e6 13 b1 9e 25 a8 99 a2 4b 3d 0f 55 02 43 44 0d 42 08 42 c3 0c 82 f6 b2 8e 45 a9 51 89 34 0e 11 40 bd 45 b9 5c 42 3b 8f ed 40 58 c0 e0 f4 6c 89 d5 7a 05 d5 2c f1 b1 17 af e1 ea e1 2e d0 75 d0 ce c1 70 2f f2 41 ca e4 6c 04 05 40 03 d3 42 61 bb aa e0 7d 81 e0 27 70 7e 0b 9d 07 3a 1f d0 3a 1f 03 bb c3 62 d5 e2 f8 ac c1 93 b3 15 4e 57 2d 56 9d 4c e1 4d 00 26 45 09 6d 0c ce da 16 eb e5 1a 95 29 a0 35 00 76 58 2c ce d0 74 3d 02 54 b4 ea 90 00 36 09 28 c3 a2 87 d5 c4 81 Data Ascii: <2bS<K6b)v-+XEu0M,/4Q&\?b8mz%.uDi86t4L%K=UCDBBEQ4@E\B;@Xlz,.up/Al@Ba}'p~::bNW-VLM&Em)5vX,t=T6(
2024-07-04 20:55:41 UTC	11860	IN	Data Raw: 8c b0 4a 0a 79 e7 b5 05 48 63 7f 72 0d 93 c9 04 8f ef be 8b 60 09 d5 64 02 c5 80 b7 0e a1 73 60 6b a0 27 5a 76 c6 06 c2 45 1e c7 27 27 7a 62 2c af 89 c6 47 d8 f0 11 27 c8 a4 15 58 b8 67 e0 f1 7b 48 71 4f 9e a0 9c 02 76 4e 6f 6d 5e c2 a5 9d 72 06 72 24 45 dd 3c 88 08 b9 2c 4a be c8 59 85 32 b6 14 79 38 95 b3 e2 90 71 53 b6 55 32 84 16 2d ba 40 e7 2f ec b0 02 1c ef 85 c7 eb 21 0c 25 f7 b0 53 8f a2 35 e9 fb 42 00 1c 03 69 ed 1e c5 e5 83 0f 70 c1 c1 b3 17 29 60 2d 3d eb db b7 ee e0 dd bb 0f 60 aa 0a 5b d3 02 67 8b 35 9e 2c 5a 9c 9d f5 98 d5 53 4c 8a a9 64 4f 53 61 77 6f 8a ae ef 70 f7 de 7d ec ed ee a2 2e 0c 74 5d 81 b5 42 5d 56 80 f7 f0 ce 43 29 86 81 08 eb 3b 12 bc b5 57 4a 5c 0b 09 32 8c 0a 5e 48 13 4a a1 a8 4a 9c 69 60 b9 6e 00 a5 64 3a ae e2 2d 10 db 89 Data Ascii: JyHcr`ds`k'ZvE''zb,G'Xg{HqOvNom^rr$E<,JY2y8qSU2-@/!%S5Bip)`-=`[g5,ZSLdOSawop}.t]B]VC);WJ\2^HJJi`nd:-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	64679	172.217.16.132	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:41 UTC	1127	OUT	GET /pagead/1p-user-list/16526066952/?random=1720126536948&cv=11&fst=1720123200000&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fabout&hn=www.googleadservices.com&frm=0&tiba=About%20LiveWise%20Associates%3A%20Compassionate%20Therapy%20in%20Pickering%2C%20ON&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLltsJHApRilv-33D9uiLnK7k4E_XQwbLupAPvKXsni4ua65Ls&random=3896660466&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	64680	216.239.32.181	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:43 UTC	1226	OUT	POST /g/collect?v=2&tid=G-7KWN4PCCYC&gtm=45je4730v9100741783za200zb9186823250&_p=1720126533290&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=1060836916.1720126517&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1720126520&sct=1&seg=1&dl=https%3A%2F%2Flivewiseinc.com%2Fabout&dt=About%20LiveWise%20Associates%3A%20Compassionate%20Therapy%20in%20Pickering%2C%20ON&en=page_view&_ee=1&tfd=9387&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://livewiseinc.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:43 UTC	449	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://livewiseinc.com Date: Thu, 04 Jul 2024 20:55:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	64682	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:43 UTC	1582	OUT	GET /pages/contact HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7fb1ca1fd007bbb235fc0a63bac6654010d5db03; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0
2024-07-04 20:55:43 UTC	1144	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: must-revalidate, private, max-age=0 Content-Type: text/html; charset=utf-8 Date: Thu, 04 Jul 2024 20:55:43 GMT Etag: W/"fdb7cabdb2b83a5d39e1c7158e7c5387" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Set-Cookie: _engage_session=SG50aE9wcG01WnlDdi8vVUhLZlYvanhhRmZuKzN6UW9La3lzb0FLRjU3QStFb2hoZS9HRUNPUTJwaHVuTHBrTGpvYktRSU1MeUgwa1hZMUFDZWl6eklwT0tuWnFTYWliYnNucGhxQkxOL0RDM3NhaHNKZENlOWJiUmdWNTVzWUhYd2t4aHVKUkRRR0FlcW5TU0RUQmIyZFlLLzlSZW5NZ1FqL3lGWGFZMXNhaUhaVGhyamxpN010WUorUlN4bXlzWEhlajkzSkJZemNUZlpXOWRNQXg1NW9TejljRWcvYnVDdGhlSUhQWUFOSHBSeG9UOERNcThpNURCaStDbmZ6RWZsejVsdk9pZENGcTEvYVdNcXE5bWp0Rm9Id3ZYc2tNKzFTWTBTdDUvdUxSb1NNaTRseFBNM2RFdUZabWw3MHp5L0dyeXJ0YzdEL0NSb01wYTI2UjVQQ29MYTllNThxK1FBNWRmS3p0aWdYaXFLTGYraEVLOHRYYzVYUzAxcDZtS0h3dXN4amdGdUcrdCtTT2lOTDVHcVpNOXhwUWxSQVlEaHV3TGx1K1hnTE15RzNJNkhDT05haUdNMjZvS0NwczcrKzZVTVhicVU5ZVBGU1NXZyt4TWc9PS0taGd6OXViSm1RamlZbHNseEc5ZUFUdz09--7cfd966694fa44a641cbb227e3e25fb2701da818; path=/; HttpOnly Status: 200 OK Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
2024-07-04 20:55:43 UTC	218	IN	Data Raw: 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 68 75 73 69 6f 6e 20 50 61 73 73 65 6e 67 65 72 28 52 29 20 36 2e 30 2e 31 34 0d 0a 58 2d 52 61 63 6b 2d 43 61 63 68 65 3a 20 6d 69 73 73 0d 0a 58 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 38 34 35 39 35 33 34 39 2d 65 38 38 37 2d 34 30 34 34 2d 62 35 33 36 2d 64 66 62 35 30 35 38 35 34 66 62 31 0d 0a 58 2d 52 75 6e 74 69 6d 65 3a 20 30 2e 32 33 38 33 32 34 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: X-Powered-By: Phusion Passenger(R) 6.0.14X-Rack-Cache: missX-Request-Id: 84595349-e887-4044-b536-dfb505854fb1X-Runtime: 0.238324X-Xss-Protection: 1; mode=blockConnection: closeTransfer-Encoding: chunked
2024-07-04 20:55:43 UTC	3558	IN	Data Raw: 33 62 34 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 69 76 65 57 69 73 65 20 41 73 73 6f 63 69 61 74 65 73 22 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 Data Ascii: 3b44<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta content="IE=edge" http-equiv="X-UA-Compatible"/> <meta content="width=device-width, initial-scale=1.0" name="viewport"/> <meta content="LiveWise Associates" name="author"
2024-07-04 20:55:43 UTC	538	IN	Data Raw: 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 73 63 72 69 70 74 0a 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 73 65 6e 74 72 79 2d 63 64 6e 2e 63 6f 6d 2f 39 34 62 30 39 61 32 63 31 65 34 36 35 61 37 34 35 31 37 30 66 64 32 64 38 66 64 36 31 33 38 64 2e 6d 69 6e 2e 6a 73 22 0a 20 20 20 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 0a 20 20 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2d 35 30 35 32 61 31 65 34 34 66 62 66 32 34 61 63 36 31 32 65 66 63 35 33 65 32 32 62 61 32 36 36 33 62 63 36 35 39 30 64 35 32 62 63 39 64 Data Ascii: } } }); }; </script> <script src="https://js.sentry-cdn.com/94b09a2c1e465a745170fd2d8fd6138d.min.js" crossorigin="anonymous" ></script> <script src="/assets/application-5052a1e44fbf24ac612efc53e22ba2663bc6590d52bc9d
2024-07-04 20:55:43 UTC	5930	IN	Data Raw: 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 2f 2a 20 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 6f 66 20 74 68 65 20 47 41 20 61 63 63 6f 75 6e 74 73 20 61 72 65 20 75 73 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 66 6f 72 20 70 6c 61 74 66 6f 72 6d 20 74 72 61 63 6b 69 6e 67 20 2a 2f 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 20 20 20 20 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c Data Ascii: cript> /* One or more of the GA accounts are used internally for platform tracking */ window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config',
2024-07-04 20:55:43 UTC	5152	IN	Data Raw: 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 32 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 78 2d 61 75 74 6f 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 0a 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 0a 20 20 3c 21 2d 2d 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 73 20 70 6f 73 2d 62 2d 31 20 70 6f 73 2d 6c 2d 31 22 3e 0a 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 6a 73 2d 70 6c 61 79 2d 76 69 64 65 6f 2d 62 75 74 74 6f 6e 20 70 2d 32 20 62 67 2d 6e 6f 6e 65 20 62 6f 72 64 65 72 2d 30 20 64 2d 6e 6f 6e 65 Data Ascii: . </span> </h2> </div> <div class="mx-auto text-center"> </div> </div> </div> ...<div class="pos pos-b-1 pos-l-1"> <button class="js-play-video-button p-2 bg-none border-0 d-none
2024-07-04 20:55:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 20:55:43 UTC	4096	IN	Data Raw: 32 38 35 37 0d 0a 20 6d 62 2d 35 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 36 35 30 70 78 3b 22 3e 0a 0a 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 6d 79 2d 33 22 3e 0a 20 20 20 20 20 20 48 61 76 65 20 61 20 51 75 65 73 74 69 6f 6e 20 66 6f 72 20 75 73 3f 0a 20 20 20 20 3c 2f 68 32 3e 0a 20 20 20 20 3c 68 34 3e 4c 65 61 76 65 20 79 6f 75 72 20 65 6d 61 69 6c 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 20 61 6e 64 20 79 6f 75 72 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 26 71 75 6f 74 3b 4d 65 73 73 61 67 65 26 71 75 6f 74 3b 20 61 72 65 61 20 62 65 6c 6f 77 20 61 6e 64 20 77 65 26 23 33 39 3b 6c 6c 20 72 65 61 63 68 20 6f 75 74 20 74 6f 20 79 6f 75 20 61 73 20 73 6f 6f 6e 20 61 73 20 77 65 20 63 61 6e 2e 20 3c 2f 68 34 Data Ascii: 2857 mb-5" style="width:650px;"> <h2 class="my-3"> Have a Question for us? </h2> <h4>Leave your email, as well as your question and your name in the "Message" area below and we'll reach out to you as soon as we can. </h4
2024-07-04 20:55:43 UTC	6237	IN	Data Raw: 6c 61 63 65 6d 65 6e 74 3d 22 6c 65 66 74 22 20 74 69 74 6c 65 3d 22 42 6c 6f 63 6b 20 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 0a 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 61 67 65 5f 63 6f 6e 74 65 6e 74 22 20 63 6c 61 73 73 3d 22 72 65 6c 61 74 69 76 65 20 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 0a 3c 2f 64 69 76 3e 0a 0a 20 20 3c 73 70 61 6e 20 63 6c Data Ascii: lacement="left" title="Block hidden"> </div> </div> </div> </div> </div> </div> <div id="page_content" class="relative "> <div class="container"> </div> </div></div> <span cl
2024-07-04 20:55:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 20:55:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	64683	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:44 UTC	1897	OUT	GET /df_media/W1siZiIsImN1c3RvbWVyX2ltYWdlcy8xMzQwMC8yMDI0LzAyLzIxLzE4LzAxLzU5L2Y1NTBjYzRhLTA3MTUtNDA0OC04N2U5LWZhNmUyNTIzYzBhNS9Db3Vuc2VsaW5nOC13ZWlnaHQtbncuanBnIl0sWyJwIiwidG9fd2VicCJdLFsicCIsInRodW1iIiwiMjAwMHgxNTAwXHUwMDNlIl1d/Counseling8-weight-nw.jpg?sha=b6ce67013d5a39dc HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/assets/application-b2dfc1aad05e45e6756e097b15c026c250a3e30a8cab4651d613dd0a09ef5569.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126533.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126536.44.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126536.0.0.0; _engage_session=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--7cfd966694fa44a641cbb227e3e25fb2701da818
2024-07-04 20:55:44 UTC	634	IN	HTTP/1.1 200 OK Age: 1730509 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Counseling8-weight-nw.jpg" Content-Length: 348683 Content-Type: image/jpeg Date: Fri, 14 Jun 2024 20:13:55 GMT Etag: "e8698db1d06e0fa1fa708eec93210b28099d5953" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 46c1a654b23d26072d68133534aee839578d1051 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: cf1a1b58-491a-4c98-bb48-70e4c752b437 X-Runtime: 0.760085 Connection: close
2024-07-04 20:55:44 UTC	552	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 4b 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 05 00 22 41 65 73 74 68 65 74 69 63 73 20 2d 20 43 6f 75 6e 73 65 6c 69 6e 67 38 2d 77 65 69 67 68 74 2d 6e 77 1c 02 50 00 10 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 6e 00 38 42 49 4d 04 25 00 00 00 00 00 10 88 4f 55 b1 38 d0 84 db 1a a4 da c2 dc d5 d1 d6 ff e1 00 fa 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 06 00 00 00 66 01 3b 00 02 00 00 00 11 00 00 00 6c 87 69 00 04 00 00 00 01 00 00 00 7e 00 00 00 00 00 00 01 2c 00 Data Ascii: JFIF,,Photoshop 3.08BIMKZ%G"Aesthetics - Counseling8-weight-nwPChristine Bergen8BIM%OU8ExifMM*V^(1f;li~,
2024-07-04 20:55:44 UTC	2372	IN	Data Raw: 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 43 61 6e 76 61 22 3e 20 3c 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 Data Ascii: "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Berge
2024-07-04 20:55:44 UTC	538	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 Data Ascii: <?xpacket end="w"?>CC
2024-07-04 20:55:44 UTC	4096	IN	Data Raw: f9 52 81 bf 2a 5a 28 02 33 48 06 79 d2 d1 40 63 03 6a 4c 60 ed 4b 45 02 63 03 9d 2d 14 50 14 51 45 01 45 14 50 14 bc cd 25 14 05 2f 23 49 45 01 45 28 19 a3 07 95 02 51 4b d2 8d f1 e9 40 94 52 8e 5f c6 92 80 a2 8a 28 0a 28 a2 81 79 9a 4a 28 a0 28 a5 e7 ce 92 80 a5 eb 49 45 03 bf 15 26 30 77 a4 a5 fc a8 0c 1a 00 cd 1c fd a8 1c fc a8 12 8a 5e 7e f4 94 05 28 19 a4 a2 80 a2 8a 28 0a 29 7f 2a 4a 07 73 f4 a4 ff 00 aa 08 c5 00 fc e8 14 6c 68 27 ca 93 ae d4 9b fb 50 29 c1 e9 bd 26 0f 43 fc a8 ce dc b0 28 c8 3c a8 0c 10 47 5a 09 df d6 90 1c 93 cb e7 4b 9d 43 a5 03 b3 e9 4d ce 3a e2 9a cc 41 c2 8c 9f 5e 54 c0 c4 6e e4 0e 7e 82 81 ec 73 9e 43 de 94 1c 90 33 93 d6 a0 96 ed 23 07 71 81 9c 92 70 07 bd 52 fe fe b2 62 3f f5 71 83 9c 6d d0 fe 85 4e 86 a1 03 07 d3 7a 36 23 Data Ascii: RZ(3Hy@cjL`KEc-PQEEP%/#IEE(QK@R_((yJ((IE&0w^~(()Jslh'P)&C(<GZKCM:A^Tn~sC3#qpRb?qmNz6#
2024-07-04 20:55:44 UTC	5930	IN	Data Raw: fa 7c ea 9c dc 3e 1b a2 1d 09 86 e5 4e 56 68 c8 0c 3d 0f 98 f4 ac 9e 13 6f 0d c7 11 12 1b 95 bb 75 42 40 91 b5 b0 24 8c 11 f5 e5 fc 6b 52 f2 4e ee 45 85 6d c9 2e 72 4c 2d cb 6d ff 00 2f ad 4f b5 34 48 38 95 ca ce 23 bd 81 51 33 e1 9e 3c b2 b0 df 07 96 dc be bd 6b 45 5a 27 24 e1 ca 9e 4c 09 c1 f5 aa ff 00 b1 9a 05 42 59 17 90 04 6f 9e 83 f2 ae 4b 8b 76 b4 f0 c7 7b 6e 16 cb 2d de 5b 52 93 88 50 2e 75 bb 67 90 52 77 3e 80 6f 9a 6f 5e d3 27 95 e9 b9 c7 38 c4 1c 26 20 59 9a 32 4f 82 28 c6 a9 1b 1f c3 cf f3 da b9 29 a6 bd e3 31 87 e3 30 18 2d 89 0d f7 6b 77 60 cc bb f3 38 c9 e6 0e 06 39 75 c6 d4 f8 45 ed c5 fc cf 7b 3c 51 34 f2 9c 2d c0 c3 07 19 c8 7c 11 9d 81 c8 53 e8 4e 49 15 d8 5a c1 c3 ac e2 37 26 26 69 8b 67 bd 95 89 cb 75 fe 3c bf a5 53 77 2f f4 d3 ac 11 Data Ascii: \|>NVh=ouB@$kRNEm.rL-m/O4H8#Q3<kEZ'$LBYoKv{n-[RP.ugRw>oo^'8& Y2O()10-kw`89uE{<Q4-\|SNIZ7&&igu<Sw/
2024-07-04 20:55:44 UTC	7116	IN	Data Raw: fb 2b 7c 78 97 08 7b c7 26 34 9c 34 f1 a9 1a 59 15 88 23 56 7f cb 80 3c b1 e9 b7 e5 f7 d9 57 db 77 14 ec ad e7 08 ee 2e 8c e9 24 e7 22 42 01 45 fd 99 c6 82 7c 5f 89 89 1e 44 8d b2 73 ef bd 8d fe d6 9c 17 8a 37 dc e6 bb 8f 83 49 14 6b 98 e4 94 84 b9 98 0f c2 57 56 c0 a6 17 03 91 f1 6e 71 5d 78 f2 7e dc 39 70 fe 93 ff 00 69 ef b3 5b 94 ed 21 ed 17 01 9e 6e 23 15 d2 63 88 18 d1 8a 45 a0 60 18 dd 77 d0 34 8d f1 c9 b9 9c ed f3 ef 00 ed 53 5a cf c4 63 85 e7 67 ee b4 4a cb 38 75 68 cb a9 c0 18 e6 00 3d 48 e4 36 c6 fe ff 00 f6 e3 fd a5 f8 13 fd 9f 9e 1f d9 7e 2f 09 e3 37 d1 b4 32 9b 55 60 a8 a5 30 c7 5b 2e 5f 39 70 31 8f c4 0f 53 9f 8d f8 2f 1c b6 b0 ed 35 94 70 16 5e f4 c8 84 3e cc 51 c9 40 7f e6 a0 ff 00 bb de a9 9c 6f c7 b9 a9 5e b1 c5 9a 58 2d b8 b6 24 33 41 Data Ascii: +\|x{&44Y#V<Ww.$"BE\|_Ds7IkWVnq]x~9pi[!n#cE`w4SZcgJ8uh=H6~/72U`0[._9p1S/5p^>Q@o^X-$3A
2024-07-04 20:55:44 UTC	8302	IN	Data Raw: fc 5e db 89 71 45 82 c9 1a d9 9c 92 14 e5 97 27 ae bc 0c 1c 8c f9 73 f3 ae 1b 83 71 7e 25 d9 a8 9e 7b 19 22 e2 56 8c 1d 5a 2b 44 55 55 db 93 67 2c 46 73 cb cb 9e f5 1c 5f 69 17 37 3a 6e ef 38 25 a4 71 c6 09 32 0b 61 9e 7d 39 b6 76 e9 9e be 62 a2 63 a4 e5 63 a1 bb 17 b1 c2 65 78 16 77 c8 22 41 30 24 78 bf 0e 46 3c 89 f9 55 ce cd f1 0b 56 9e 68 9a ca 30 ec 15 89 56 c8 42 49 03 24 93 ff 00 78 f4 c6 0f 69 78 a4 ef 70 d7 b6 50 5b cf 66 d8 2e b0 c6 63 96 36 39 3f ba 37 db ae 3a 1c fa 41 c3 78 aa 5b d9 b5 c5 cc b2 c8 97 3a 0a cd 6e c1 58 85 2d e0 21 bd 49 f9 0a d2 e3 be 99 f9 69 d5 f1 1b cb 74 59 e4 fb b6 15 93 c4 72 19 72 0f c0 9e 9f 4f 2d f2 9b 8d 46 38 ab 9b 68 73 2c 78 06 18 ce a0 49 45 f6 e7 bf ce b3 63 e3 52 cf 2e 88 6d 91 ed 24 61 21 2c 35 38 f2 e7 b7 41 Data Ascii: ^qE'sq~%{"VZ+DUUg,Fs_i7:n8%q2a}9vbccexw"A0$xF<UVh0VBI$xixpP[f.c69?7:Ax[:nX-!IitYrrO-F8hs,xIEcR.m$a!,58A
2024-07-04 20:55:44 UTC	7366	IN	Data Raw: ec c7 0e e3 2c 25 b0 73 6b 2e 30 f0 3e 42 48 71 b8 27 9f cf ca b9 7e 05 1c d7 97 b3 5f 4a 8b 68 18 e4 12 b8 2f b9 e9 f3 f9 8a eb 38 02 c7 77 39 49 0c 8c 54 10 25 66 03 59 f4 02 88 8d 1b 65 b8 ec ec 51 da bd a3 3c 61 83 19 75 1d 2b 9d 8e 33 b6 c0 2f cc d7 4e b7 b6 b6 17 f6 0a 34 cb a1 c1 95 d9 7c 64 af 88 75 ea 06 d5 27 03 bf 8d 51 21 9a 14 b9 42 48 51 2e 70 71 fa fd 62 a4 4e 03 1c bc 59 ef 12 1d 2e 8a 4c 71 eb 1a 63 63 b0 cf 9f 5f 99 ac ae 53 d3 69 8d f7 14 38 b7 6c da f7 b4 53 5b f0 e8 94 46 d2 8b 54 78 94 13 28 d5 e2 3b f4 62 c4 ff 00 bb da ba 2e d4 dc 09 3e cf af f8 5c 6f a2 16 08 65 95 0e 03 e8 62 ce 47 c4 1c 7c 2b 99 e0 5d 95 83 86 5c a5 e4 73 cb 71 2c 08 4a 82 98 0e fa 76 39 eb b9 2d f1 15 57 b4 24 9e fa 19 2e 40 b5 46 8a 35 88 36 90 5e 31 ab 1f ee Data Ascii: ,%sk.0>BHq'~_Jh/8w9IT%fYeQ<au+3/N4\|du'Q!BHQ.pqbNY.Lqcc_Si8lS[FTx(;b.>\oebG\|+]\sq,Jv9-W$.@F56^1
2024-07-04 20:55:44 UTC	10674	IN	Data Raw: 06 d7 81 93 0b eb 55 6c 79 0d 4d f2 af 3b ec f4 93 6b 0b e2 86 e2 d5 44 e3 7c 0d 19 03 49 f6 24 7c eb b7 e3 f3 77 97 50 5e c5 09 04 c0 03 63 7d 6a 5b 2a 3e 0c 1b e7 5c 59 5f e4 ef c3 fc 09 37 87 b3 fc 23 c4 19 5d e6 52 40 c8 38 18 4f a8 1f 3a f3 3e d2 13 1c 56 e1 64 23 bf 62 0a 81 92 9e 22 84 fc 83 1a ed 3b 5b c6 42 f0 ee 12 20 ca a4 47 f7 4e 02 1c 83 8f ad 73 1d ab e3 1c 3a df 8b da 5d dd 5b b4 f1 4d 16 a2 b1 2e 06 c7 1c ff 00 dc 7e 75 3c 79 5d f6 a7 24 e9 5e f2 7b 54 b4 b7 9a 69 5a 37 56 47 d2 46 75 60 1d 23 e1 b9 ff 00 ba c7 93 b4 ab c5 2e df 54 b2 a4 b3 0c 31 5c 03 1c 5f f7 bf c4 f9 0a e8 78 af 0c e0 65 a7 d7 2c ae a9 29 00 37 89 08 03 96 46 e3 62 3e 55 95 c0 38 35 9f 15 97 bf 4b 6d 71 cc 7c 4c 8e 09 51 8f de f9 57 66 39 49 1c 99 63 6d e9 e8 fd 96 be Data Ascii: UlyM;kD\|I$\|wP^c}j[*>\Y_7#]R@8O:>Vd#b";[B GNs:][M.~u<y]$^{TiZ7VGFu`#.T1\_xe,)7Fb>U85Kmq\|LQWf9Icm
2024-07-04 20:55:44 UTC	11860	IN	Data Raw: 20 2f 5f e5 57 2f 9a 2b 9b 68 6e 7e ea bd d2 2a ea 57 cb 11 e1 1b fa d7 0f 33 4d 69 73 2a 36 ac 29 ce 48 27 6c ff 00 5a ea ed 25 6b 85 c3 e4 c1 a4 22 aa 9e 69 93 f5 1b 7d 6b 3b 5a 63 17 6c 78 bd ba dc 47 08 45 b6 79 18 0f d9 2e 31 9a 7f 14 e2 71 cd 2c b7 0a ad 71 14 92 33 01 1b 90 40 ac 3b bb b9 52 ef ff 00 68 85 09 80 ea 7f 16 db 1a 5e 15 c2 24 e2 71 c7 10 82 49 25 d7 80 88 40 27 96 f9 e9 48 95 83 24 37 37 01 75 dc 80 76 65 39 cf c2 af 47 d8 a9 25 85 e4 ef d5 7c 24 e9 2c 4b 7c 7a 56 fd a5 8a f0 88 c2 cb 18 9e e5 86 0b 16 ca a0 f2 1e 7e ff 00 95 67 71 ae d0 bd bc 92 c3 0b 2a 40 a3 24 85 19 63 8f eb 53 b5 75 bf 6c cb 5e cb c0 d3 98 e6 ba 92 e0 60 80 88 c4 8f 72 6a 2e 35 c0 20 8e dc 40 97 b1 bc 84 e4 42 58 61 46 06 d8 1e c6 b2 ed 38 b5 ef 15 79 b4 27 75 6a Data Ascii: /_W/+hn~W3Mis6)H'lZ%k"i}k;ZclxGEy.1q,q3@;Rh^$qI%@'H$77uve9G%\|$,K\|zV~gq*@$cSul^`rj.5 @BXaF8y'uj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	64686	142.250.186.67	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:44 UTC	587	OUT	GET /recaptcha/enterprise.js?render=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:45 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 04 Jul 2024 20:55:44 GMT Date: Thu, 04 Jul 2024 20:55:44 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:45 UTC	862	IN	Data Raw: 37 38 62 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 78b/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-07-04 20:55:45 UTC	1076	IN	Data Raw: 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 Data Ascii: wdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(
2024-07-04 20:55:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	64689	142.250.185.194	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:45 UTC	1430	OUT	GET /td/rul/16526066952?random=1720126544242&cv=11&fst=1720126544242&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&hn=www.googleadservices.com&frm=0&tiba=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkn0vK_HQFkC3ve5Q4f4ThneP4kdJEsL04qS_jWgxiBtDDRhZnZcLgq9UgQ
2024-07-04 20:55:46 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-04 20:55:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	64688	216.58.206.34	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:45 UTC	1306	OUT	GET /pagead/viewthroughconversion/16526066952/?random=1720126544242&cv=11&fst=1720126544242&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&hn=www.googleadservices.com&frm=0&tiba=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkn0vK_HQFkC3ve5Q4f4ThneP4kdJEsL04qS_jWgxiBtDDRhZnZcLgq9UgQ
2024-07-04 20:55:46 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:46 UTC	687	IN	Data Raw: 61 36 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a65(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-04 20:55:46 UTC	1390	IN	Data Raw: 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 Data Ascii: \|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);i
2024-07-04 20:55:46 UTC	591	IN	Data Raw: 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 43 6f 6e 74 61 63 74 25 32 30 4c 69 76 65 57 69 73 65 25 32 30 41 73 73 6f 63 69 61 74 65 73 25 32 30 69 6e 25 32 30 50 69 63 6b 65 72 69 6e 67 25 32 43 25 32 30 4f 4e 25 32 30 66 6f 72 25 32 30 43 6f 6d 70 61 73 73 69 6f 6e 61 74 65 25 32 30 43 61 72 65 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 31 30 38 34 32 35 34 37 34 38 2e 31 37 32 30 31 32 36 35 32 31 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 Data Ascii: dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dContact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d1084254748.1720126521\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Chrome%
2024-07-04 20:55:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	64692	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:45 UTC	1574	OUT	GET /df_media/W1siZiIsImN1c3RvbWVyX2ltYWdlcy8xMzQwMC8yMDI0LzAyLzIxLzE4LzAxLzU5L2Y1NTBjYzRhLTA3MTUtNDA0OC04N2U5LWZhNmUyNTIzYzBhNS9Db3Vuc2VsaW5nOC13ZWlnaHQtbncuanBnIl0sWyJwIiwidG9fd2VicCJdLFsicCIsInRodW1iIiwiMjAwMHgxNTAwXHUwMDNlIl1d/Counseling8-weight-nw.jpg?sha=b6ce67013d5a39dc HTTP/1.1 Host: livewiseinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7cfd966694fa44a641cbb227e3e25fb2701da818; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126543.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126544.36.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126544.0.0.0
2024-07-04 20:55:46 UTC	634	IN	HTTP/1.1 200 OK Age: 1730511 Alt-Svc: h3=":443"; ma=2592000 Cache-Control: public, max-age=31536000 Content-Disposition: filename="Counseling8-weight-nw.jpg" Content-Length: 348683 Content-Type: image/jpeg Date: Fri, 14 Jun 2024 20:13:55 GMT Etag: "e8698db1d06e0fa1fa708eec93210b28099d5953" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Status: 200 OK X-Content-Digest: 46c1a654b23d26072d68133534aee839578d1051 X-Content-Type-Options: nosniff X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: fresh X-Request-Id: cf1a1b58-491a-4c98-bb48-70e4c752b437 X-Runtime: 0.760085 Connection: close
2024-07-04 20:55:46 UTC	552	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 4b 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 05 00 22 41 65 73 74 68 65 74 69 63 73 20 2d 20 43 6f 75 6e 73 65 6c 69 6e 67 38 2d 77 65 69 67 68 74 2d 6e 77 1c 02 50 00 10 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 6e 00 38 42 49 4d 04 25 00 00 00 00 00 10 88 4f 55 b1 38 d0 84 db 1a a4 da c2 dc d5 d1 d6 ff e1 00 fa 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 06 00 00 00 66 01 3b 00 02 00 00 00 11 00 00 00 6c 87 69 00 04 00 00 00 01 00 00 00 7e 00 00 00 00 00 00 01 2c 00 Data Ascii: JFIF,,Photoshop 3.08BIMKZ%G"Aesthetics - Counseling8-weight-nwPChristine Bergen8BIM%OU8ExifMM*V^(1f;li~,
2024-07-04 20:55:46 UTC	2372	IN	Data Raw: 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 43 61 6e 76 61 22 3e 20 3c 64 63 3a 63 72 65 61 74 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 Data Ascii: "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmp:CreatorTool="Canva"> <dc:creator> <rdf:Seq> <rdf:li>Christine Berge
2024-07-04 20:55:46 UTC	538	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 Data Ascii: <?xpacket end="w"?>CC
2024-07-04 20:55:46 UTC	4096	IN	Data Raw: f9 52 81 bf 2a 5a 28 02 33 48 06 79 d2 d1 40 63 03 6a 4c 60 ed 4b 45 02 63 03 9d 2d 14 50 14 51 45 01 45 14 50 14 bc cd 25 14 05 2f 23 49 45 01 45 28 19 a3 07 95 02 51 4b d2 8d f1 e9 40 94 52 8e 5f c6 92 80 a2 8a 28 0a 28 a2 81 79 9a 4a 28 a0 28 a5 e7 ce 92 80 a5 eb 49 45 03 bf 15 26 30 77 a4 a5 fc a8 0c 1a 00 cd 1c fd a8 1c fc a8 12 8a 5e 7e f4 94 05 28 19 a4 a2 80 a2 8a 28 0a 29 7f 2a 4a 07 73 f4 a4 ff 00 aa 08 c5 00 fc e8 14 6c 68 27 ca 93 ae d4 9b fb 50 29 c1 e9 bd 26 0f 43 fc a8 ce dc b0 28 c8 3c a8 0c 10 47 5a 09 df d6 90 1c 93 cb e7 4b 9d 43 a5 03 b3 e9 4d ce 3a e2 9a cc 41 c2 8c 9f 5e 54 c0 c4 6e e4 0e 7e 82 81 ec 73 9e 43 de 94 1c 90 33 93 d6 a0 96 ed 23 07 71 81 9c 92 70 07 bd 52 fe fe b2 62 3f f5 71 83 9c 6d d0 fe 85 4e 86 a1 03 07 d3 7a 36 23 Data Ascii: RZ(3Hy@cjL`KEc-PQEEP%/#IEE(QK@R_((yJ((IE&0w^~(()Jslh'P)&C(<GZKCM:A^Tn~sC3#qpRb?qmNz6#
2024-07-04 20:55:46 UTC	5930	IN	Data Raw: fa 7c ea 9c dc 3e 1b a2 1d 09 86 e5 4e 56 68 c8 0c 3d 0f 98 f4 ac 9e 13 6f 0d c7 11 12 1b 95 bb 75 42 40 91 b5 b0 24 8c 11 f5 e5 fc 6b 52 f2 4e ee 45 85 6d c9 2e 72 4c 2d cb 6d ff 00 2f ad 4f b5 34 48 38 95 ca ce 23 bd 81 51 33 e1 9e 3c b2 b0 df 07 96 dc be bd 6b 45 5a 27 24 e1 ca 9e 4c 09 c1 f5 aa ff 00 b1 9a 05 42 59 17 90 04 6f 9e 83 f2 ae 4b 8b 76 b4 f0 c7 7b 6e 16 cb 2d de 5b 52 93 88 50 2e 75 bb 67 90 52 77 3e 80 6f 9a 6f 5e d3 27 95 e9 b9 c7 38 c4 1c 26 20 59 9a 32 4f 82 28 c6 a9 1b 1f c3 cf f3 da b9 29 a6 bd e3 31 87 e3 30 18 2d 89 0d f7 6b 77 60 cc bb f3 38 c9 e6 0e 06 39 75 c6 d4 f8 45 ed c5 fc cf 7b 3c 51 34 f2 9c 2d c0 c3 07 19 c8 7c 11 9d 81 c8 53 e8 4e 49 15 d8 5a c1 c3 ac e2 37 26 26 69 8b 67 bd 95 89 cb 75 fe 3c bf a5 53 77 2f f4 d3 ac 11 Data Ascii: \|>NVh=ouB@$kRNEm.rL-m/O4H8#Q3<kEZ'$LBYoKv{n-[RP.ugRw>oo^'8& Y2O()10-kw`89uE{<Q4-\|SNIZ7&&igu<Sw/
2024-07-04 20:55:46 UTC	7116	IN	Data Raw: fb 2b 7c 78 97 08 7b c7 26 34 9c 34 f1 a9 1a 59 15 88 23 56 7f cb 80 3c b1 e9 b7 e5 f7 d9 57 db 77 14 ec ad e7 08 ee 2e 8c e9 24 e7 22 42 01 45 fd 99 c6 82 7c 5f 89 89 1e 44 8d b2 73 ef bd 8d fe d6 9c 17 8a 37 dc e6 bb 8f 83 49 14 6b 98 e4 94 84 b9 98 0f c2 57 56 c0 a6 17 03 91 f1 6e 71 5d 78 f2 7e dc 39 70 fe 93 ff 00 69 ef b3 5b 94 ed 21 ed 17 01 9e 6e 23 15 d2 63 88 18 d1 8a 45 a0 60 18 dd 77 d0 34 8d f1 c9 b9 9c ed f3 ef 00 ed 53 5a cf c4 63 85 e7 67 ee b4 4a cb 38 75 68 cb a9 c0 18 e6 00 3d 48 e4 36 c6 fe ff 00 f6 e3 fd a5 f8 13 fd 9f 9e 1f d9 7e 2f 09 e3 37 d1 b4 32 9b 55 60 a8 a5 30 c7 5b 2e 5f 39 70 31 8f c4 0f 53 9f 8d f8 2f 1c b6 b0 ed 35 94 70 16 5e f4 c8 84 3e cc 51 c9 40 7f e6 a0 ff 00 bb de a9 9c 6f c7 b9 a9 5e b1 c5 9a 58 2d b8 b6 24 33 41 Data Ascii: +\|x{&44Y#V<Ww.$"BE\|_Ds7IkWVnq]x~9pi[!n#cE`w4SZcgJ8uh=H6~/72U`0[._9p1S/5p^>Q@o^X-$3A
2024-07-04 20:55:46 UTC	8302	IN	Data Raw: fc 5e db 89 71 45 82 c9 1a d9 9c 92 14 e5 97 27 ae bc 0c 1c 8c f9 73 f3 ae 1b 83 71 7e 25 d9 a8 9e 7b 19 22 e2 56 8c 1d 5a 2b 44 55 55 db 93 67 2c 46 73 cb cb 9e f5 1c 5f 69 17 37 3a 6e ef 38 25 a4 71 c6 09 32 0b 61 9e 7d 39 b6 76 e9 9e be 62 a2 63 a4 e5 63 a1 bb 17 b1 c2 65 78 16 77 c8 22 41 30 24 78 bf 0e 46 3c 89 f9 55 ce cd f1 0b 56 9e 68 9a ca 30 ec 15 89 56 c8 42 49 03 24 93 ff 00 78 f4 c6 0f 69 78 a4 ef 70 d7 b6 50 5b cf 66 d8 2e b0 c6 63 96 36 39 3f ba 37 db ae 3a 1c fa 41 c3 78 aa 5b d9 b5 c5 cc b2 c8 97 3a 0a cd 6e c1 58 85 2d e0 21 bd 49 f9 0a d2 e3 be 99 f9 69 d5 f1 1b cb 74 59 e4 fb b6 15 93 c4 72 19 72 0f c0 9e 9f 4f 2d f2 9b 8d 46 38 ab 9b 68 73 2c 78 06 18 ce a0 49 45 f6 e7 bf ce b3 63 e3 52 cf 2e 88 6d 91 ed 24 61 21 2c 35 38 f2 e7 b7 41 Data Ascii: ^qE'sq~%{"VZ+DUUg,Fs_i7:n8%q2a}9vbccexw"A0$xF<UVh0VBI$xixpP[f.c69?7:Ax[:nX-!IitYrrO-F8hs,xIEcR.m$a!,58A
2024-07-04 20:55:46 UTC	7366	IN	Data Raw: ec c7 0e e3 2c 25 b0 73 6b 2e 30 f0 3e 42 48 71 b8 27 9f cf ca b9 7e 05 1c d7 97 b3 5f 4a 8b 68 18 e4 12 b8 2f b9 e9 f3 f9 8a eb 38 02 c7 77 39 49 0c 8c 54 10 25 66 03 59 f4 02 88 8d 1b 65 b8 ec ec 51 da bd a3 3c 61 83 19 75 1d 2b 9d 8e 33 b6 c0 2f cc d7 4e b7 b6 b6 17 f6 0a 34 cb a1 c1 95 d9 7c 64 af 88 75 ea 06 d5 27 03 bf 8d 51 21 9a 14 b9 42 48 51 2e 70 71 fa fd 62 a4 4e 03 1c bc 59 ef 12 1d 2e 8a 4c 71 eb 1a 63 63 b0 cf 9f 5f 99 ac ae 53 d3 69 8d f7 14 38 b7 6c da f7 b4 53 5b f0 e8 94 46 d2 8b 54 78 94 13 28 d5 e2 3b f4 62 c4 ff 00 bb da ba 2e d4 dc 09 3e cf af f8 5c 6f a2 16 08 65 95 0e 03 e8 62 ce 47 c4 1c 7c 2b 99 e0 5d 95 83 86 5c a5 e4 73 cb 71 2c 08 4a 82 98 0e fa 76 39 eb b9 2d f1 15 57 b4 24 9e fa 19 2e 40 b5 46 8a 35 88 36 90 5e 31 ab 1f ee Data Ascii: ,%sk.0>BHq'~_Jh/8w9IT%fYeQ<au+3/N4\|du'Q!BHQ.pqbNY.Lqcc_Si8lS[FTx(;b.>\oebG\|+]\sq,Jv9-W$.@F56^1
2024-07-04 20:55:46 UTC	10674	IN	Data Raw: 06 d7 81 93 0b eb 55 6c 79 0d 4d f2 af 3b ec f4 93 6b 0b e2 86 e2 d5 44 e3 7c 0d 19 03 49 f6 24 7c eb b7 e3 f3 77 97 50 5e c5 09 04 c0 03 63 7d 6a 5b 2a 3e 0c 1b e7 5c 59 5f e4 ef c3 fc 09 37 87 b3 fc 23 c4 19 5d e6 52 40 c8 38 18 4f a8 1f 3a f3 3e d2 13 1c 56 e1 64 23 bf 62 0a 81 92 9e 22 84 fc 83 1a ed 3b 5b c6 42 f0 ee 12 20 ca a4 47 f7 4e 02 1c 83 8f ad 73 1d ab e3 1c 3a df 8b da 5d dd 5b b4 f1 4d 16 a2 b1 2e 06 c7 1c ff 00 dc 7e 75 3c 79 5d f6 a7 24 e9 5e f2 7b 54 b4 b7 9a 69 5a 37 56 47 d2 46 75 60 1d 23 e1 b9 ff 00 ba c7 93 b4 ab c5 2e df 54 b2 a4 b3 0c 31 5c 03 1c 5f f7 bf c4 f9 0a e8 78 af 0c e0 65 a7 d7 2c ae a9 29 00 37 89 08 03 96 46 e3 62 3e 55 95 c0 38 35 9f 15 97 bf 4b 6d 71 cc 7c 4c 8e 09 51 8f de f9 57 66 39 49 1c 99 63 6d e9 e8 fd 96 be Data Ascii: UlyM;kD\|I$\|wP^c}j[*>\Y_7#]R@8O:>Vd#b";[B GNs:][M.~u<y]$^{TiZ7VGFu`#.T1\_xe,)7Fb>U85Kmq\|LQWf9Icm
2024-07-04 20:55:46 UTC	11860	IN	Data Raw: 20 2f 5f e5 57 2f 9a 2b 9b 68 6e 7e ea bd d2 2a ea 57 cb 11 e1 1b fa d7 0f 33 4d 69 73 2a 36 ac 29 ce 48 27 6c ff 00 5a ea ed 25 6b 85 c3 e4 c1 a4 22 aa 9e 69 93 f5 1b 7d 6b 3b 5a 63 17 6c 78 bd ba dc 47 08 45 b6 79 18 0f d9 2e 31 9a 7f 14 e2 71 cd 2c b7 0a ad 71 14 92 33 01 1b 90 40 ac 3b bb b9 52 ef ff 00 68 85 09 80 ea 7f 16 db 1a 5e 15 c2 24 e2 71 c7 10 82 49 25 d7 80 88 40 27 96 f9 e9 48 95 83 24 37 37 01 75 dc 80 76 65 39 cf c2 af 47 d8 a9 25 85 e4 ef d5 7c 24 e9 2c 4b 7c 7a 56 fd a5 8a f0 88 c2 cb 18 9e e5 86 0b 16 ca a0 f2 1e 7e ff 00 95 67 71 ae d0 bd bc 92 c3 0b 2a 40 a3 24 85 19 63 8f eb 53 b5 75 bf 6c cb 5e cb c0 d3 98 e6 ba 92 e0 60 80 88 c4 8f 72 6a 2e 35 c0 20 8e dc 40 97 b1 bc 84 e4 42 58 61 46 06 d8 1e c6 b2 ed 38 b5 ef 15 79 b4 27 75 6a Data Ascii: /_W/+hn~W3Mis6)H'lZ%k"i}k;ZclxGEy.1q,q3@;Rh^$qI%@'H$77uve9G%\|$,K\|zV~gq*@$cSul^`rj.5 @BXaF8y'uj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	64694	142.250.185.196	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:47 UTC	1373	OUT	GET /pagead/1p-user-list/16526066952/?random=1720126544242&cv=11&fst=1720123200000&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&hn=www.googleadservices.com&frm=0&tiba=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLYJsm6tCQsPdDz745beSq83rBfSGC7F50moDQxyFzP8n8_Nko&random=264877003&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	64696	142.250.74.195	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:47 UTC	858	OUT	GET /recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=exgcwrg2uctf HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:48 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 20:55:48 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-CcLKOX2Syl47HVxAkMlZvg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:48 UTC	499	IN	Data Raw: 35 37 36 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 5767<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 73 4f 31 41 45 5a 46 5a 66 4e 36 6c 64 41 76 4d 57 43 69 64 69 6e 70 44 77 38 64 71 56 34 6a 77 46 61 58 33 67 31 38 39 64 42 77 79 44 6f 75 55 76 39 58 73 47 50 63 66 67 62 2d 6c 71 73 58 75 50 65 49 50 4f 66 5a 51 55 57 67 69 4e 78 78 37 32 72 51 78 7a 51 51 71 56 75 35 6f 69 4a 44 6d 77 4a 43 66 56 43 74 54 45 44 79 51 4d 37 55 62 4b 79 69 5a 78 6c 4b 63 78 4d 43 36 34 42 76 32 5a 53 4e 54 6d 56 56 47 66 6a 34 4f 39 55 50 4a 63 4e 6c 75 58 71 76 61 52 70 4d 33 48 72 44 5a 31 51 75 4c 64 6c 48 46 35 4f 5a 6c 57 46 34 4c 74 6b 37 69 54 59 73 52 72 33 49 4d 44 32 63 67 79 77 67 56 4e 50 48 63 6a 77 43 4c 79 55 4f 5a 48 55 4e 72 31 63 6f 43 75 35 74 4e 49 36 64 41 56 45 7a 61 61 30 73 70 6c 50 75 51 74 57 77 5f 66 6f 59 6c 6b 39 6d 35 6a 70 41 61 61 4d 36 Data Ascii: sO1AEZFZfN6ldAvMWCidinpDw8dqV4jwFaX3g189dBwyDouUv9XsGPcfgb-lqsXuPeIPOfZQUWgiNxx72rQxzQQqVu5oiJDmwJCfVCtTEDyQM7UbKyiZxlKcxMC64Bv2ZSNTmVVGfj4O9UPJcNluXqvaRpM3HrDZ1QuLdlHF5OZlWF4Ltk7iTYsRr3IMD2cgywgVNPHcjwCLyUOZHUNr1coCu5tNI6dAVEzaa0splPuQtWw_foYlk9m5jpAaaM6
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 2d 31 58 4f 30 75 37 71 59 58 72 65 4b 4c 35 4f 35 46 44 68 76 45 75 6b 4f 77 6a 68 47 38 62 61 4b 30 42 5a 34 54 49 74 62 6d 43 4e 47 6c 6b 6f 6b 44 64 62 6a 4a 38 42 72 54 7a 67 7a 72 4e 4f 70 36 70 78 6c 77 37 47 68 50 65 5f 39 33 4f 36 4e 6a 44 31 57 64 75 6e 47 6a 46 73 6f 5a 38 37 69 4d 75 4a 64 42 32 62 48 5f 6e 4f 53 55 2d 45 56 55 35 36 30 46 63 6a 54 44 41 46 4d 64 61 51 54 50 4e 6d 4f 43 50 37 5a 73 6a 61 4d 6d 34 34 47 43 44 79 5a 37 68 66 36 56 36 6c 37 61 6e 73 44 49 6f 42 72 30 73 48 74 61 55 6e 69 61 43 77 51 47 6e 4c 34 61 53 4f 6e 44 2d 41 48 38 4a 57 50 6f 67 58 59 5f 54 45 4f 71 4a 41 46 67 37 4c 56 67 6f 75 75 41 4c 62 78 69 44 56 4c 35 4d 76 41 6b 53 52 42 4e 78 52 72 45 6e 54 68 6a 59 35 2d 62 50 51 45 70 6e 39 4d 62 5f 69 71 69 45 Data Ascii: -1XO0u7qYXreKL5O5FDhvEukOwjhG8baK0BZ4TItbmCNGlkokDdbjJ8BrTzgzrNOp6pxlw7GhPe_93O6NjD1WdunGjFsoZ87iMuJdB2bH_nOSU-EVU560FcjTDAFMdaQTPNmOCP7ZsjaMm44GCDyZ7hf6V6l7ansDIoBr0sHtaUniaCwQGnL4aSOnD-AH8JWPogXY_TEOqJAFg7LVgouuALbxiDVL5MvAkSRBNxRrEnThjY5-bPQEpn9Mb_iqiE
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 54 6c 42 59 4d 7a 6c 33 56 55 6c 76 4e 46 64 36 52 45 45 31 5a 44 42 6e 62 57 5a 55 53 30 49 32 54 55 39 56 53 6b 5a 77 61 54 55 7a 63 6c 5a 58 63 57 39 61 57 46 68 50 56 57 56 6f 51 54 64 6c 59 6c 4a 69 5a 6d 46 6c 61 7a 42 6f 61 47 4d 7a 64 45 51 35 5a 6a 56 6f 53 32 74 74 5a 56 56 73 63 6a 64 6e 61 46 42 6b 5a 55 46 33 51 32 6b 31 57 54 6c 32 64 6b 39 36 55 45 6b 77 56 6e 5a 6c 57 44 52 33 55 69 39 46 61 7a 42 51 51 6e 6c 4a 55 45 46 50 65 46 70 35 64 31 5a 43 55 6d 4e 34 4e 57 52 4b 52 48 5a 6a 55 32 56 42 55 56 64 57 54 48 5a 69 52 57 64 68 4e 57 4d 78 59 6b 6c 4a 64 6e 52 73 59 6e 4e 6d 4f 57 4d 72 4c 7a 52 44 64 57 39 4b 4b 30 70 6e 61 48 5a 45 61 46 46 73 51 6b 73 7a 62 58 59 72 5a 6b 31 31 4e 45 31 75 65 54 42 52 56 48 42 7a 62 6c 6b 35 4e 55 39 Data Ascii: TlBYMzl3VUlvNFd6REE1ZDBnbWZUS0I2TU9VSkZwaTUzclZXcW9aWFhPVWVoQTdlYlJiZmFlazBoaGMzdEQ5ZjVoS2ttZVVscjdnaFBkZUF3Q2k1WTl2dk96UEkwVnZlWDR3Ui9FazBQQnlJUEFPeFp5d1ZCUmN4NWRKRHZjU2VBUVdWTHZiRWdhNWMxYklJdnRsYnNmOWMrLzRDdW9KK0pnaHZEaFFsQkszbXYrZk11NE1ueTBRVHBzblk5NU9
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 4a 4e 4e 6b 35 59 59 56 5a 54 56 30 6b 77 56 54 4e 79 64 48 56 71 54 57 5a 70 55 57 6b 79 63 56 5a 77 53 6d 67 31 52 54 56 50 55 6a 4d 31 64 33 4e 78 4f 54 4a 72 59 31 56 44 5a 57 4e 73 51 6d 56 45 52 6a 6c 51 61 6c 46 58 4b 33 46 5a 55 45 67 31 63 48 59 77 4e 6c 4a 69 52 47 68 78 65 58 46 71 54 47 30 77 53 58 68 76 4d 31 42 32 5a 31 4e 4a 59 6b 31 77 54 32 55 35 4d 56 64 73 53 69 74 51 55 56 68 32 54 47 6c 56 63 57 64 58 53 54 6c 5a 52 32 68 33 4d 30 39 58 53 6c 4a 73 59 6d 64 70 54 6b 74 6f 56 44 41 30 4d 56 6f 78 51 57 55 30 55 45 39 59 52 45 56 75 62 32 5a 48 63 33 64 70 62 30 31 34 4e 6a 68 4b 4e 54 42 44 53 48 42 73 59 33 70 53 55 53 74 70 4d 69 39 31 52 55 64 7a 65 46 46 5a 4e 7a 56 71 62 30 4a 4a 57 6b 63 78 4e 48 64 43 56 54 56 70 64 33 4e 35 54 Data Ascii: JNNk5YYVZTV0kwVTNydHVqTWZpUWkycVZwSmg1RTVPUjM1d3NxOTJrY1VDZWNsQmVERjlQalFXK3FZUEg1cHYwNlJiRGhxeXFqTG0wSXhvM1B2Z1NJYk1wT2U5MVdsSitQUVh2TGlVcWdXSTlZR2h3M09XSlJsYmdpTktoVDA0MVoxQWU0UE9YREVub2ZHc3dpb014NjhKNTBDSHBsY3pSUStpMi91RUdzeFFZNzVqb0JJWkcxNHdCVTVpd3N5T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	64695	142.250.74.195	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:48 UTC	855	OUT	GET /recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=p2czp7amzatk HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:48 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 20:55:48 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-3Ho7ZwohC3tRlkzYcsFlLw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:48 UTC	499	IN	Data Raw: 31 63 35 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: 1c5f<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-st
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 Data Ascii: C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2'); unicode-range: U+0000-00FF, U+01
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 78 63 34 45 73 41 2e Data Ascii: ode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCxc4EsA.
2024-07-04 20:55:48 UTC	1390	IN	Data Raw: 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 Data Ascii: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2) format
2024-07-04 20:55:48 UTC	1212	IN	Data Raw: 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 Data Ascii: t('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900;
2024-07-04 20:55:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	64698	172.217.16.132	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:48 UTC	1138	OUT	GET /pagead/1p-user-list/16526066952/?random=1720126544242&cv=11&fst=1720123200000&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&hn=www.googleadservices.com&frm=0&tiba=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLYJsm6tCQsPdDz745beSq83rBfSGC7F50moDQxyFzP8n8_Nko&random=264877003&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	64702	216.239.32.181	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:50 UTC	1238	OUT	POST /g/collect?v=2&tid=G-7KWN4PCCYC&gtm=45je4730v9100741783za200zb9186823250&_p=1720126543127&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=1060836916.1720126517&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1720126520&sct=1&seg=1&dl=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&dt=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&en=page_view&_ee=1&tfd=7134&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://livewiseinc.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:50 UTC	449	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://livewiseinc.com Date: Thu, 04 Jul 2024 20:55:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	64704	142.250.186.164	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:50 UTC	664	OUT	GET /js/bg/mU9lUv5fC-6PINXGw20YUvQwdOUqBsn65oJ_PkEDrWo.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.recaptcha.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:51 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18253 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 04 Jul 2024 17:08:37 GMT Expires: Fri, 04 Jul 2025 17:08:37 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 25 Jun 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 13633 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:51 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 29 7b 69 66 28 21 28 76 3d 28 6e 3d 6e 75 6c 6c 2c 58 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 76 29 7c 7c 21 76 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 6e 3d 76 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 55 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 55 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(n,v){if(!(v=(n=null,X.trustedTypes),v)\|\|!v.createPolicy)return n;try{n=v.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U}
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 76 4b 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 2c 66 29 7b 71 28 28 28 58 3d 28 55 3d 28 58 3d 46 28 28 76 26 3d 28 66 3d 76 26 34 2c 33 29 2c 6e 29 29 2c 46 28 6e 29 29 2c 65 28 58 2c 6e 29 29 2c 66 26 26 28 58 3d 6e 59 28 22 22 2b 58 29 29 2c 76 29 26 26 71 28 4f 28 58 2e 6c 65 6e 67 74 68 2c 32 29 2c 55 2c 6e 29 2c 58 29 2c 55 2c 6e 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 29 7b 66 6f 72 28 58 3d 28 76 7c 28 55 3d 5b 5d 2c 30 29 29 2d 31 3b 58 3e 3d 30 3b 58 2d 2d 29 55 5b 28 76 7c 30 29 2d 31 2d 28 58 7c 30 29 5d 3d 6e 3e 3e 58 2a 38 26 32 35 35 3b 72 65 74 75 72 6e 20 55 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 2c 58 2c 66 2c 79 29 7b 69 66 28 Data Ascii: che-2.0','/','var vK=function(n,v,U,X,f){q(((X=(U=(X=F((v&=(f=v&4,3),n)),F(n)),e(X,n)),f&&(X=nY(""+X)),v)&&q(O(X.length,2),U,n),X),U,n)},O=function(n,v,U,X){for(X=(v\|(U=[],0))-1;X>=0;X--)U[(v\|0)-1-(X\|0)]=n>>X8&255;return U},T=function(n,v,U,X,f,y){if(
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 28 33 39 33 2c 28 50 28 28 4a 28 32 37 38 2c 28 4a 28 32 31 33 2c 66 2c 28 4a 28 35 30 36 2c 28 50 28 31 30 30 2c 28 4a 28 32 31 36 2c 28 50 28 31 32 2c 28 50 28 32 34 35 2c 28 4a 28 34 31 32 2c 66 2c 28 66 2e 6f 62 3d 28 4a 28 32 35 2c 66 2c 28 4a 28 28 4a 28 35 30 30 2c 66 2c 28 4a 28 32 34 30 2c 66 2c 28 28 50 28 33 38 2c 28 28 66 2e 63 6f 3d 28 50 28 32 38 2c 28 50 28 33 35 35 2c 66 2c 28 4a 28 32 34 2c 28 4a 28 31 35 2c 66 2c 28 28 4a 28 33 33 31 2c 28 4a 28 28 4a 28 33 31 32 2c 28 4a 28 33 37 2c 66 2c 28 4a 28 33 33 33 2c 28 28 4a 28 33 35 30 2c 66 2c 28 50 28 36 39 2c 28 50 28 33 38 39 2c 66 2c 5b 31 36 30 2c 28 50 28 31 31 33 2c 28 50 28 31 39 30 2c 28 50 28 32 37 30 2c 28 28 28 55 3d 28 66 2e 59 3d 66 2c 28 66 2e 50 3d 28 66 2e 55 3d 5b 5d 2c 66 Data Ascii: (393,(P((J(278,(J(213,f,(J(506,(P(100,(J(216,(P(12,(P(245,(J(412,f,(f.ob=(J(25,f,(J((J(500,f,(J(240,f,((P(38,((f.co=(P(28,(P(355,f,(J(24,(J(15,f,((J(331,(J((J(312,(J(37,f,(J(333,((J(350,f,(P(69,(P(389,f,[160,(P(113,(P(190,(P(270,(((U=(f.Y=f,(f.P=(f.U=[],f
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 3b 4e 3e 3d 44 2e 6c 65 6e 67 74 68 3b 29 44 2e 70 75 73 68 28 46 28 64 29 29 3b 4e 3d 44 5b 4e 5d 7d 45 2e 70 75 73 68 28 4e 29 7d 64 2e 4b 3d 28 64 2e 50 3d 5a 42 28 64 2c 72 2e 73 6c 69 63 65 28 29 29 2c 5a 42 28 64 2c 45 29 29 7d 29 7d 29 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 76 4b 28 7a 2c 33 29 7d 29 2c 32 30 30 29 2c 66 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 29 7b 28 7a 3d 28 48 3d 46 28 7a 29 2c 65 28 48 2c 7a 2e 59 29 29 2c 7a 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 7a 5b 31 5d 2c 7a 5b 32 5d 2c 56 29 7d 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 2c 5a 29 7b 28 5a 3d 28 74 3d 28 77 3d 65 28 28 74 3d 28 48 3d 28 77 3d 46 28 7a 29 2c 46 29 28 7a 29 2c 46 29 28 7a 29 2c 5a 3d 46 28 Data Ascii: ;N>=D.length;)D.push(F(d));N=D[N]}E.push(N)}d.K=(d.P=ZB(d,r.slice()),ZB(d,E))})})),f),function(z){vK(z,3)}),200),f,function(z,H){(z=(H=F(z),e(H,z.Y)),z)[0].removeEventListener(z[1],z[2],V)}),f),function(z,H,t,w,Z){(Z=(t=(w=e((t=(H=(w=F(z),F)(z),F)(z),Z=F(
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 7a 29 2c 75 3d 22 22 2c 7a 29 29 2c 48 29 2e 6c 65 6e 67 74 68 2c 30 29 3b 74 2d 2d 3b 29 52 3d 28 28 52 7c 30 29 2b 28 52 72 28 7a 29 7c 30 29 29 25 5a 2c 75 2b 3d 68 5b 48 5b 52 5d 5d 3b 50 28 77 2c 7a 2c 75 29 7d 29 2c 66 29 2c 5b 5d 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 29 7b 50 28 28 74 3d 46 28 28 48 3d 6c 28 28 77 3d 46 28 7a 29 2c 7a 29 29 2c 7a 29 29 2c 74 29 2c 7a 2c 65 28 77 2c 7a 29 3e 3e 3e 48 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 65 48 28 34 2c 7a 29 7d 29 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 48 2c 74 2c 77 29 7b 69 66 28 48 3d 7a 2e 49 2e 70 6f 70 28 29 29 7b 66 6f 72 28 74 3d 6c 28 7a 29 3b 74 3e 30 3b 74 2d 2d 29 77 3d 46 28 7a 29 2c 48 5b 77 5d 3d 7a 2e 4f 5b 77 5d 3b 28 48 5b 33 37 39 5d 3d Data Ascii: z),u="",z)),H).length,0);t--;)R=((R\|0)+(Rr(z)\|0))%Z,u+=h[H[R]];P(w,z,u)}),f),[]),f),function(z,H,t,w){P((t=F((H=l((w=F(z),z)),z)),t),z,e(w,z)>>>H)}),function(z){eH(4,z)})),f),function(z,H,t,w){if(H=z.I.pop()){for(t=l(z);t>0;t--)w=F(z),H[w]=z.O[w];(H[379]=
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 6e 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 6e 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 6e 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 76 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 6e 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 76 7d 2c 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 29 7b 69 66 28 6e 2e 6c 65 6e 67 74 68 3d 3d Data Ascii: ction]"\|\|typeof n.call!="undefined"&&typeof n.propertyIsEnumerable!="undefined"&&!n.propertyIsEnumerable("call"))return"function"}else return"null";else if(v=="function"&&typeof n.call=="undefined")return"object";return v},or=function(n,v,U){if(n.length==
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 79 2c 68 29 7b 6e 2e 79 68 28 79 2c 74 72 75 65 2c 68 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 79 29 7b 28 61 28 6e 2c 28 79 3d 21 6e 2e 57 2e 6c 65 6e 67 74 68 2c 5b 4a 67 5d 29 29 2c 79 29 26 26 54 28 6e 2c 74 72 75 65 2c 66 61 6c 73 65 29 7d 2c 28 6e 2e 55 3d 5b 5d 2c 66 3d 6e 2e 43 28 29 2c 66 75 6e 63 74 69 6f 6e 28 79 29 7b 72 65 74 75 72 6e 20 6e 2e 65 63 28 79 29 7d 29 29 2c 6e 2e 41 2b 3d 6e 2e 43 28 29 2d 66 7d 65 6c 73 65 7b 69 66 28 55 3d 3d 41 29 72 65 74 75 72 6e 20 66 3d 76 5b 32 5d 2c 50 28 32 37 34 2c 6e 2c 76 5b 36 5d 29 2c 50 28 33 34 38 2c 6e 2c 66 29 2c 6e 2e 42 28 76 29 3b 55 3d 3d 4a 67 3f 28 6e 2e 4f 3d 6e 75 6c 6c 2c 6e 2e 78 6c 3d 5b 5d 2c 6e 2e 52 3d 5b 5d 29 3a 55 3d 3d 58 4e 26 26 51 2e 64 Data Ascii: [1])(function(y,h){n.yh(y,true,h)},function(y){(a(n,(y=!n.W.length,[Jg])),y)&&T(n,true,false)},(n.U=[],f=n.C(),function(y){return n.ec(y)})),n.A+=n.C()-f}else{if(U==A)return f=v[2],P(274,n,v[6]),P(348,n,f),n.B(v);U==Jg?(n.O=null,n.xl=[],n.R=[]):U==XN&&Q.d
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 32 35 35 2c 58 26 32 35 35 29 2c 66 21 3d 76 6f 69 64 20 30 26 26 79 2e 70 75 73 68 28 66 26 32 35 35 29 29 2c 76 3d 22 22 2c 55 26 26 28 55 2e 6d 65 73 73 61 67 65 26 26 28 76 2b 3d 55 2e 6d 65 73 73 61 67 65 29 2c 55 2e 73 74 61 63 6b 26 26 28 76 2b 3d 22 3a 22 2b 55 2e 73 74 61 63 6b 29 29 2c 55 3d 65 28 33 37 39 2c 6e 29 2c 55 5b 30 5d 3e 33 29 29 7b 6e 2e 59 3d 28 76 3d 6e 59 28 28 55 5b 30 5d 2d 3d 28 76 3d 76 2e 73 6c 69 63 65 28 30 2c 28 55 5b 30 5d 7c 30 29 2d 33 29 2c 28 76 2e 6c 65 6e 67 74 68 7c 30 29 2b 33 29 2c 76 29 29 2c 55 3d 6e 2e 59 2c 6e 29 3b 74 72 79 7b 71 28 5b 39 35 5d 2c 31 39 30 2c 6e 29 2c 71 28 4f 28 76 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 76 29 2c 31 32 2c 6e 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 6e 2e 59 3d 55 Data Ascii: 255,X&255),f!=void 0&&y.push(f&255)),v="",U&&(U.message&&(v+=U.message),U.stack&&(v+=":"+U.stack)),U=e(379,n),U[0]>3)){n.Y=(v=nY((U[0]-=(v=v.slice(0,(U[0]\|0)-3),(v.length\|0)+3),v)),U=n.Y,n);try{q([95],190,n),q(O(v.length,2).concat(v),12,n,9)}finally{n.Y=U
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 61 74 63 68 28 79 29 7b 78 28 79 2c 74 68 69 73 29 2c 76 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 66 2e 6c 29 7d 29 7d 7d 2c 56 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 2c 55 29 7b 69 66 28 6e 3d 3d 36 32 7c 7c 6e 3d 3d 32 37 30 29 76 2e 4f 5b 6e 5d 3f 76 2e 4f 5b 6e 5d 2e 63 6f 6e 63 61 74 28 55 29 3a 76 2e 4f 5b 6e 5d 3d 5a 42 28 76 2c 55 29 3b 65 6c 73 65 7b 69 66 28 76 2e 62 6d 26 26 6e 21 3d 34 33 33 29 72 65 74 75 72 6e 3b 6e 3d 3d 33 38 39 7c 7c 6e 3d 3d 31 32 7c 7c 6e 3d 3d 32 38 7c 7c 6e 3d 3d 33 35 35 7c 7c 6e 3d 3d 31 31 33 7c 7c 6e 3d 3d 31 39 30 7c 7c 6e 3d 3d 33 39 33 7c 7c 6e 3d 3d 36 39 7c 7c 6e 3d 3d 33 37 39 3f 76 2e 4f 5b 6e 5d 7c 7c 28 76 2e 4f Data Ascii: atch(y){x(y,this),v(function(h){h(f.l)})}},V={passive:true,capture:true},P=function(n,v,U){if(n==62\|\|n==270)v.O[n]?v.O[n].concat(U):v.O[n]=ZB(v,U);else{if(v.bm&&n!=433)return;n==389\|\|n==12\|\|n==28\|\|n==355\|\|n==113\|\|n==190\|\|n==393\|\|n==69\|\|n==379?v.O[n]\|\|(v.O
2024-07-04 20:55:51 UTC	1390	IN	Data Raw: 74 68 2e 73 71 72 74 28 74 68 69 73 2e 47 2f 74 68 69 73 2e 6e 29 7d 29 2c 6e 3d 6e 65 77 20 55 2c 55 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 58 29 7b 6e 2e 4f 70 28 58 29 2c 76 2e 4f 70 28 58 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 76 3d 28 58 3d 5b 6e 2e 64 33 28 29 2c 76 2e 64 33 28 29 5d 2c 6e 65 77 20 55 29 2c 58 7d 5d 7d 2c 41 67 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 76 29 7b 28 76 2e 70 75 73 68 28 6e 5b 30 5d 3c 3c 32 34 7c 6e 5b 31 5d 3c 3c 31 36 7c 6e 5b 32 5d 3c 3c 38 7c 6e 5b 33 5d 29 2c 76 2e 70 75 73 68 28 6e 5b 34 5d 3c 3c 32 34 7c 6e 5b 35 5d 3c 3c 31 36 7c 6e 5b 36 5d 3c 3c 38 7c 6e 5b 37 5d 29 2c 76 29 2e 70 75 73 68 28 6e 5b 38 5d 3c 3c 32 34 7c 6e 5b 39 5d 3c 3c 31 36 7c 6e 5b 31 30 5d 3c 3c 38 7c 6e 5b 31 31 5d 29 Data Ascii: th.sqrt(this.G/this.n)}),n=new U,U),[function(X){n.Op(X),v.Op(X)},function(X){return v=(X=[n.d3(),v.d3()],new U),X}]},Ag=function(n,v){(v.push(n[0]<<24\|n[1]<<16\|n[2]<<8\|n[3]),v.push(n[4]<<24\|n[5]<<16\|n[6]<<8\|n[7]),v).push(n[8]<<24\|n[9]<<16\|n[10]<<8\|n[11])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	64706	142.250.74.195	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:50 UTC	768	OUT	GET /recaptcha/enterprise/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=exgcwrg2uctf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:51 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 04 Jul 2024 20:55:50 GMT Date: Thu, 04 Jul 2024 20:55:50 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:51 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');
2024-07-04 20:55:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	64710	142.250.74.195	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:52 UTC	864	OUT	POST /recaptcha/enterprise/reload?k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive Content-Length: 10514 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.recaptcha.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=exgcwrg2uctf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:52 UTC	10514	OUT	Data Raw: 0a 18 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 12 ce 0f 30 33 41 46 63 57 65 41 37 6e 56 4f 47 69 6b 6c 6a 66 4e 64 69 6b 52 46 66 54 5f 67 38 62 69 5a 6a 59 4e 6d 33 52 5a 39 34 58 47 73 67 46 7a 50 63 45 54 68 70 41 48 4d 49 38 39 42 6c 74 54 6b 56 37 79 30 65 4a 6c 43 31 31 6a 6a 4b 4d 52 6c 71 38 30 64 71 38 48 74 5a 43 46 4e 63 47 5f 6a 43 32 33 67 72 34 39 31 78 77 33 4f 6b 54 62 51 30 78 6d 54 6f 76 72 41 54 42 5f 6f 70 6a 4a 63 57 57 4b 50 4b 66 75 6b 4a 4b 53 67 69 72 4f 71 54 5a 69 62 6a 4f 33 57 39 65 4b 42 58 7a 7a 50 6b 36 76 6d 51 6a 45 41 5f 77 61 65 53 66 43 6c 61 5f 6c 73 73 6e 36 43 4e 74 36 5f 62 6f 6e 7a 35 50 55 49 7a 31 5a 77 4b 72 35 53 6a 65 6b 4e 45 57 75 77 2d 63 43 45 53 45 54 50 77 39 6e 4a 73 4f Data Ascii: rKbTvxTxwcw5VqzrtN-ICwWt03AFcWeA7nVOGikljfNdikRFfT_g8biZjYNm3RZ94XGsgFzPcEThpAHMI89BltTkV7y0eJlC11jjKMRlq80dq8HtZCFNcG_jC23gr491xw3OkTbQ0xmTovrATB_opjJcWWKPKfukJKSgirOqTZibjO3W9eKBXzzPk6vmQjEA_waeSfCla_lssn6CNt6_bonz5PUIz1ZwKr5SjekNEWuw-cCESETPw9nJsO
2024-07-04 20:55:52 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 04 Jul 2024 20:55:52 GMT Expires: Thu, 04 Jul 2024 20:55:52 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09APBqBf0pjvK2u7cxHzszlSSy3cfeIN4JVAisq1DuLMT8UkCGzhyNzw_LoPo0VqMQRYHHmBpdpuC3tupxnhZ6pnE; Expires=Tue, 31-Dec-2024 20:55:52 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:52 UTC	688	IN	Data Raw: 39 65 35 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 70 61 62 51 62 36 46 53 50 54 6d 32 65 46 39 46 75 49 2d 77 57 51 34 69 70 75 50 4b 70 51 30 59 4c 53 42 41 58 50 43 50 49 56 56 79 59 32 37 54 50 2d 54 54 46 63 31 66 6b 42 36 4c 4a 4b 53 7a 57 79 46 67 67 76 64 78 58 6f 4a 32 4a 6a 6a 54 30 73 46 31 37 73 7a 6f 34 72 44 48 50 6f 35 6c 44 59 78 72 6f 52 68 68 56 52 68 69 4f 42 67 45 67 36 6e 4b 30 4d 43 51 54 6c 71 69 62 76 76 32 54 69 5f 4e 42 48 6d 45 38 79 76 55 5f 4a 34 33 5a 36 46 5f 6f 51 56 4d 4e 4e 79 56 6e 35 64 43 56 50 52 41 58 45 6b 59 5f 41 74 47 41 49 66 72 70 7a 36 71 52 4f 65 6a 57 46 58 67 4f 51 7a 53 4f 74 4e 42 37 54 74 63 51 36 64 43 52 76 77 44 67 41 38 66 52 42 7a 37 43 46 43 49 59 6d 44 58 42 42 Data Ascii: 9e5)]}'["rresp","03AFcWeA5pabQb6FSPTm2eF9FuI-wWQ4ipuPKpQ0YLSBAXPCPIVVyY27TP-TTFc1fkB6LJKSzWyFggvdxXoJ2JjjT0sF17szo4rDHPo5lDYxroRhhVRhiOBgEg6nK0MCQTlqibvv2Ti_NBHmE8yvU_J43Z6F_oQVMNNyVn5dCVPRAXEkY_AtGAIfrpz6qROejWFXgOQzSOtNB7TtcQ6dCRvwDgA8fRBz7CFCIYmDXBB
2024-07-04 20:55:52 UTC	1390	IN	Data Raw: 49 6a 50 4d 34 65 63 54 4e 2d 74 69 50 42 66 36 2d 48 51 4e 4e 35 6d 49 71 54 31 79 74 6d 47 46 33 48 30 70 75 4d 66 63 53 6b 46 5a 56 74 57 42 6d 69 41 50 6e 42 4f 5f 64 54 56 47 57 33 37 6d 37 57 35 6f 52 4d 79 63 6b 5a 47 67 6e 34 72 70 57 68 75 69 6d 61 59 41 68 30 78 4a 53 41 74 46 70 39 79 62 6f 78 5a 35 7a 65 4e 30 6d 71 33 6a 38 32 46 4b 7a 45 6d 6e 46 71 65 66 39 35 70 37 58 74 42 75 63 32 76 4d 46 4c 78 5f 4e 4d 5f 58 6b 68 41 33 37 6c 52 6d 37 2d 46 36 74 45 44 57 73 32 4b 65 61 56 35 6d 31 56 44 54 2d 76 65 37 61 46 79 7a 39 46 49 6a 47 44 47 73 57 47 42 30 35 4f 56 36 48 75 6e 44 71 51 39 43 54 58 61 52 73 2d 55 34 41 64 7a 55 4d 48 57 39 5a 78 5a 68 71 79 6d 6f 53 4b 73 50 6e 2d 37 65 6c 79 50 34 45 68 50 78 63 42 4f 49 34 33 6d 52 6b 6e 75 Data Ascii: IjPM4ecTN-tiPBf6-HQNN5mIqT1ytmGF3H0puMfcSkFZVtWBmiAPnBO_dTVGW37m7W5oRMyckZGgn4rpWhuimaYAh0xJSAtFp9yboxZ5zeN0mq3j82FKzEmnFqef95p7XtBuc2vMFLx_NM_XkhA37lRm7-F6tEDWs2KeaV5m1VDT-ve7aFyz9FIjGDGsWGB05OV6HunDqQ9CTXaRs-U4AdzUMHW9ZxZhqymoSKsPn-7elyP4EhPxcBOI43mRknu
2024-07-04 20:55:52 UTC	462	IN	Data Raw: 5a 33 57 70 2d 6e 33 31 54 5f 78 43 56 30 6f 6f 6d 44 75 53 68 51 2d 64 65 52 6f 58 2d 6b 53 4e 33 79 30 4a 49 62 6d 46 42 36 6b 62 41 46 33 4e 55 4f 54 43 6c 74 5f 4e 79 73 67 58 62 6f 47 77 57 5a 63 5f 51 31 77 61 6a 57 6f 79 5f 35 69 45 6d 4c 73 53 37 68 45 36 35 64 31 55 69 5f 4e 31 68 53 41 59 32 75 6f 5a 53 53 58 71 4a 43 46 59 36 35 62 32 6c 4b 46 53 37 75 4d 75 32 70 36 36 30 4d 5f 55 2d 6c 4a 4b 59 4a 53 6e 4e 67 35 49 37 35 61 74 4e 5a 64 2d 39 4a 56 35 65 69 7a 55 63 64 4d 66 6d 65 4c 52 58 4d 34 67 71 76 7a 68 59 6d 68 38 51 6e 38 49 59 57 54 63 37 4d 6f 38 70 6e 78 76 6b 79 6e 39 66 39 79 41 30 48 56 4e 69 5f 68 6b 64 75 79 41 75 67 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 Data Ascii: Z3Wp-n31T_xCV0oomDuShQ-deRoX-kSN3y0JIbmFB6kbAF3NUOTClt_NysgXboGwWZc_Q1wajWoy_5iEmLsS7hE65d1Ui_N1hSAY2uoZSSXqJCFY65b2lKFS7uMu2p660M_U-lJKYJSnNg5I75atNZd-9JV5eizUcdMfmeLRXM4gqvzhYmh8Qn8IYWTc7Mo8pnxvkyn9f9yA0HVNi_hkduyAug",null,120,null,null,null,["bgdata","
2024-07-04 20:55:52 UTC	1390	IN	Data Raw: 31 36 35 32 0d 0a 46 64 44 49 77 62 6c 70 72 56 54 68 44 51 31 42 53 55 6d 4a 46 54 44 68 6f 55 32 55 76 55 6e 5a 49 57 57 52 56 52 54 68 35 63 6c 46 48 61 6a 46 43 53 46 5a 56 62 33 42 69 52 58 42 53 56 30 68 34 53 33 4a 73 65 46 6c 68 4c 33 46 30 54 47 5a 51 55 7a 56 6b 56 6d 56 70 56 58 70 53 53 6b 74 6c 63 57 56 34 55 6a 52 4c 4c 30 46 6b 55 55 70 51 52 54 42 6a 61 47 55 30 64 6e 67 34 53 46 68 33 51 6b 59 77 54 55 59 34 53 32 64 33 62 69 38 76 4f 48 52 59 54 6d 52 33 53 6b 78 47 56 55 70 75 53 53 74 31 52 32 74 69 4e 44 46 6b 61 6d 78 61 5a 57 68 76 54 46 55 32 54 30 74 57 4e 43 38 31 4e 46 56 71 57 45 4e 4f 52 6c 6c 53 52 6d 39 79 54 6d 64 71 59 55 70 54 55 58 64 53 61 6e 51 34 57 44 4d 31 4d 56 67 78 62 32 39 35 52 6a 5a 43 55 32 64 4f 5a 69 73 32 Data Ascii: 1652FdDIwblprVThDQ1BSUmJFTDhoU2UvUnZIWWRVRTh5clFHajFCSFZVb3BiRXBSV0h4S3JseFlhL3F0TGZQUzVkVmVpVXpSSktlcWV4UjRLL0FkUUpQRTBjaGU0dng4SFh3QkYwTUY4S2d3bi8vOHRYTmR3SkxGVUpuSSt1R2tiNDFkamxaZWhvTFU2T0tWNC81NFVqWENORllSRm9yTmdqYUpTUXdSanQ4WDM1MVgxb295RjZCU2dOZis2
2024-07-04 20:55:52 UTC	1390	IN	Data Raw: 53 5a 47 31 4f 4b 32 35 54 52 69 39 34 61 58 56 34 4d 47 78 61 52 6e 52 4c 52 46 5a 79 64 31 70 4b 62 56 5a 72 4f 58 56 46 65 6c 49 31 4e 44 59 79 4c 79 74 74 61 32 31 4f 63 6e 4e 4c 52 58 46 6a 53 57 6c 7a 4d 54 42 6e 62 48 4a 53 4e 6b 4a 49 4d 6d 4e 6f 53 6b 51 32 4e 45 39 47 57 6d 45 34 61 47 45 32 4e 6e 52 6d 63 58 5a 75 65 56 46 73 55 57 35 75 63 46 55 79 56 6b 56 6c 4b 30 52 6e 4d 57 39 69 62 6d 59 31 4e 7a 5a 44 4e 6d 78 51 63 57 4d 31 64 6a 4a 34 64 54 6b 79 63 6d 45 79 4e 31 52 61 4d 32 31 42 4d 57 5a 33 4d 32 5a 71 54 47 35 45 4d 6c 49 30 63 33 63 34 54 56 6c 6b 54 48 64 74 65 58 4a 6e 54 45 4e 4c 4d 30 45 34 52 6d 52 34 54 47 56 4e 56 47 6f 78 5a 56 67 76 53 6e 56 53 5a 6b 78 61 57 56 63 77 5a 6d 74 71 56 6d 64 74 57 56 6c 50 59 56 64 32 4f 55 Data Ascii: SZG1OK25TRi94aXV4MGxaRnRLRFZyd1pKbVZrOXVFelI1NDYyLytta21OcnNLRXFjSWlzMTBnbHJSNkJIMmNoSkQ2NE9GWmE4aGE2NnRmcXZueVFsUW5ucFUyVkVlK0RnMW9ibmY1NzZDNmxQcWM1djJ4dTkycmEyN1RaM21BMWZ3M2ZqTG5EMlI0c3c4TVlkTHdteXJnTENLM0E4RmR4TGVNVGoxZVgvSnVSZkxaWVcwZmtqVmdtWVlPYVd2OU
2024-07-04 20:55:52 UTC	1390	IN	Data Raw: 55 74 68 61 7a 4e 6b 54 55 4a 5a 4e 6c 52 77 54 47 73 30 5a 6a 49 72 55 6b 30 72 59 56 70 72 51 54 49 72 51 33 56 36 59 6a 4e 50 65 48 46 44 4c 31 70 36 54 31 70 79 5a 56 6c 49 65 6b 67 30 4b 31 70 75 54 58 41 7a 57 6c 6b 33 4d 6a 68 74 57 44 46 6d 62 56 42 34 4d 6d 64 53 5a 47 4e 4c 62 47 31 58 53 44 4e 56 5a 57 52 69 55 53 74 47 51 6e 4e 43 63 57 38 77 4d 56 6c 6c 64 55 52 75 62 33 6c 4c 57 55 78 6e 61 55 52 51 51 57 64 72 53 44 42 49 61 58 46 6c 65 58 4a 42 52 31 5a 53 52 47 4e 55 63 30 59 33 54 6a 52 71 54 33 52 4c 51 55 74 43 4e 30 5a 6f 4e 6d 39 43 4d 45 68 4e 61 6e 55 34 56 56 4a 53 53 56 52 47 65 47 59 76 64 44 52 47 4d 57 59 35 4d 58 42 52 5a 48 55 78 54 56 46 45 65 58 68 7a 59 6d 31 46 55 7a 6b 32 64 6c 51 78 55 46 6c 53 64 54 51 32 55 6a 56 59 Data Ascii: UthazNkTUJZNlRwTGs0ZjIrUk0rYVprQTIrQ3V6YjNPeHFDL1p6T1pyZVlIekg0K1puTXAzWlk3MjhtWDFmbVB4MmdSZGNLbG1XSDNVZWRiUStGQnNCcW8wMVlldURub3lLWUxnaURQQWdrSDBIaXFleXJBR1ZSRGNUc0Y3TjRqT3RLQUtCN0ZoNm9CMEhNanU4VVJSSVRGeGYvdDRGMWY5MXBRZHUxTVFEeXhzYm1FUzk2dlQxUFlSdTQ2UjVY
2024-07-04 20:55:52 UTC	1390	IN	Data Raw: 51 62 6c 56 70 5a 32 52 56 55 32 6b 79 55 6c 64 47 53 46 6c 51 55 44 6c 77 4b 31 42 31 4e 30 4e 57 64 57 46 32 61 56 64 76 53 44 52 74 56 6e 4a 4b 64 33 68 52 65 6b 46 7a 53 45 38 35 4f 44 46 6a 62 6d 31 6a 65 57 52 31 4c 31 64 7a 56 45 31 42 55 47 70 70 65 46 70 72 5a 6b 6c 4a 52 45 51 35 56 48 70 53 4d 55 38 77 51 69 39 44 4d 57 45 77 63 31 4e 51 63 33 4e 45 64 6d 4e 6b 53 30 52 7a 64 69 38 79 59 57 31 43 56 33 6b 79 4d 6e 4e 6b 5a 47 77 33 61 53 39 7a 54 6c 4a 68 61 6b 67 77 4d 6b 52 34 5a 6c 56 31 62 58 4e 4a 52 57 74 32 63 32 64 4e 57 54 6c 46 53 30 77 34 4f 58 64 6f 52 6e 56 36 5a 31 51 76 65 58 6c 45 53 44 42 7a 57 45 64 78 4f 56 63 31 4d 6b 70 4a 4e 31 63 78 55 45 35 6c 62 30 63 78 61 30 78 57 59 6e 56 43 62 55 55 32 52 53 38 33 4e 55 74 77 64 58 Data Ascii: QblVpZ2RVU2kyUldGSFlQUDlwK1B1N0NWdWF2aVdvSDRtVnJKd3hRekFzSE85ODFjbm1jeWR1L1dzVE1BUGppeFprZklJREQ5VHpSMU8wQi9DMWEwc1NQc3NEdmNkS0Rzdi8yYW1CV3kyMnNkZGw3aS9zTlJhakgwMkR4ZlV1bXNJRWt2c2dNWTlFS0w4OXdoRnV6Z1QveXlESDBzWEdxOVc1MkpJN1cxUE5lb0cxa0xWYnVCbUU2RS83NUtwdX
2024-07-04 20:55:52 UTC	162	IN	Data Raw: 44 41 33 4e 7a 46 71 56 6c 4e 4f 63 32 78 74 65 6b 78 4d 4b 32 74 7a 63 47 67 78 59 6d 45 32 52 7a 42 77 65 58 67 31 59 6d 31 55 5a 32 59 76 62 46 52 4c 63 31 6c 7a 5a 7a 56 4d 4d 55 64 4f 4d 6d 52 48 62 46 52 54 52 6b 31 70 64 43 39 6a 57 6a 4e 36 63 55 5a 54 61 6d 64 42 4f 47 63 34 4d 43 74 51 52 6e 42 48 4e 30 56 43 59 53 74 32 53 30 55 78 52 48 6c 75 4e 7a 46 72 52 32 46 75 56 6b 46 4a 52 6b 74 6b 64 56 6c 4e 51 6b 4e 55 54 53 38 77 65 58 6c 69 52 55 46 6d 65 6c 6c 36 56 0d 0a Data Ascii: DA3NzFqVlNOc2xtekxMK2tzcGgxYmE2RzBweXg1Ym1UZ2YvbFRLc1lzZzVMMUdOMmRHbFRTRk1pdC9jWjN6cUZTamdBOGc4MCtQRnBHN0VCYSt2S0UxRHluNzFrR2FuVkFJRktkdVlNQkNUTS8weXliRUFmell6V
2024-07-04 20:55:52 UTC	1390	IN	Data Raw: 31 34 31 38 0d 0a 31 52 42 63 6c 42 4b 51 6c 63 34 59 6e 4e 6b 56 45 52 57 4d 47 45 34 4f 58 70 72 4b 32 31 56 56 48 51 78 55 6c 59 7a 51 31 56 59 57 56 41 78 53 33 4e 33 4f 44 56 6e 64 47 52 78 63 6d 5a 36 61 55 59 35 4f 55 46 54 62 7a 4e 4c 4c 32 64 33 61 6b 5a 4c 54 54 4a 6f 5a 56 52 68 53 79 39 73 62 6d 6c 42 59 7a 46 75 55 30 56 70 4f 47 56 71 65 6b 34 78 4e 6e 70 6e 4d 6b 49 72 65 54 4e 6a 56 6b 56 56 56 57 46 57 4e 48 70 74 54 54 5a 50 5a 6a 46 68 55 6d 64 6b 53 54 64 6d 65 58 6f 31 61 43 73 7a 55 54 49 76 56 47 31 4f 64 31 4e 6a 61 7a 42 49 55 45 31 58 52 33 46 77 56 30 78 4f 54 45 5a 46 5a 48 46 42 59 58 4e 70 53 57 56 46 61 6a 56 4c 64 33 4a 5a 4e 56 4e 52 61 56 64 6f 63 31 70 6e 5a 56 55 76 59 55 39 75 62 6e 51 33 63 57 56 44 53 33 42 57 55 6d Data Ascii: 14181RBclBKQlc4YnNkVERWMGE4OXprK21VVHQxUlYzQ1VYWVAxS3N3ODVndGRxcmZ6aUY5OUFTbzNLL2d3akZLTTJoZVRhSy9sbmlBYzFuU0VpOGVqek4xNnpnMkIreTNjVkVVVWFWNHptTTZPZjFhUmdkSTdmeXo1aCszUTIvVG1Od1NjazBIUE1XR3FwV0xOTEZFZHFBYXNpSWVFajVLd3JZNVNRaVdoc1pnZVUvYU9ubnQ3cWVDS3BWUm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	64712	142.250.74.195	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:53 UTC	968	OUT	POST /recaptcha/enterprise/clr?k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive Content-Length: 2112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuf Accept: / Origin: https://www.recaptcha.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=exgcwrg2uctf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APBqBf0pjvK2u7cxHzszlSSy3cfeIN4JVAisq1DuLMT8UkCGzhyNzw_LoPo0VqMQRYHHmBpdpuC3tupxnhZ6pnE
2024-07-04 20:55:53 UTC	2112	OUT	Data Raw: 0a 28 36 4c 64 48 30 78 49 67 41 41 41 41 41 4e 68 76 79 76 39 64 47 79 32 39 34 4f 73 73 39 34 44 4a 42 65 7a 35 5f 6a 6e 71 12 ce 0f 30 33 41 46 63 57 65 41 37 6e 56 4f 47 69 6b 6c 6a 66 4e 64 69 6b 52 46 66 54 5f 67 38 62 69 5a 6a 59 4e 6d 33 52 5a 39 34 58 47 73 67 46 7a 50 63 45 54 68 70 41 48 4d 49 38 39 42 6c 74 54 6b 56 37 79 30 65 4a 6c 43 31 31 6a 6a 4b 4d 52 6c 71 38 30 64 71 38 48 74 5a 43 46 4e 63 47 5f 6a 43 32 33 67 72 34 39 31 78 77 33 4f 6b 54 62 51 30 78 6d 54 6f 76 72 41 54 42 5f 6f 70 6a 4a 63 57 57 4b 50 4b 66 75 6b 4a 4b 53 67 69 72 4f 71 54 5a 69 62 6a 4f 33 57 39 65 4b 42 58 7a 7a 50 6b 36 76 6d 51 6a 45 41 5f 77 61 65 53 66 43 6c 61 5f 6c 73 73 6e 36 43 4e 74 36 5f 62 6f 6e 7a 35 50 55 49 7a 31 5a 77 4b 72 35 53 6a 65 6b 4e 45 57 Data Ascii: (6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq03AFcWeA7nVOGikljfNdikRFfT_g8biZjYNm3RZ94XGsgFzPcEThpAHMI89BltTkV7y0eJlC11jjKMRlq80dq8HtZCFNcG_jC23gr491xw3OkTbQ0xmTovrATB_opjJcWWKPKfukJKSgirOqTZibjO3W9eKBXzzPk6vmQjEA_waeSfCla_lssn6CNt6_bonz5PUIz1ZwKr5SjekNEW
2024-07-04 20:55:53 UTC	417	IN	HTTP/1.1 200 OK Content-Type: application/binary Date: Thu, 04 Jul 2024 20:55:53 GMT Expires: Thu, 04 Jul 2024 20:55:53 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 0 Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	64713	172.217.18.3	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:53 UTC	522	OUT	GET /recaptcha/enterprise/reload?k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APBqBf0pjvK2u7cxHzszlSSy3cfeIN4JVAisq1DuLMT8UkCGzhyNzw_LoPo0VqMQRYHHmBpdpuC3tupxnhZ6pnE
2024-07-04 20:55:53 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 20:55:53 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:53 UTC	917	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-07-04 20:55:53 UTC	744	IN	Data Raw: 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b Data Ascii: ges/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{back
2024-07-04 20:55:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	64714	52.89.243.208	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:53 UTC	1605	OUT	GET /blog HTTP/1.1 Host: livewiseinc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1060836916.1720126517; _gcl_au=1.1.1084254748.1720126521; _engage_session=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--7cfd966694fa44a641cbb227e3e25fb2701da818; _ga_52CJ0NGGB7=GS1.1.1720126517.1.1.1720126543.0.0.0; _ga_7KWN4PCCYC=GS1.1.1720126520.1.1.1720126544.36.0.0; _ga_K7908VSBER=GS1.1.1720126521.1.1.1720126544.0.0.0
2024-07-04 20:55:53 UTC	1175	IN	HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: must-revalidate, private, max-age=0 Content-Type: text/html; charset=utf-8 Date: Thu, 04 Jul 2024 20:55:53 GMT Etag: W/"54169bf2b7a544736b66c0d04994becb" Server: Caddy Server: nginx/1.14.0 + Phusion Passenger(R) 6.0.14 Set-Cookie: _engage_session=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--f961d60b9a52eac24ad5fce80d539efad9f55d92; path=/; HttpOnly Status: 200 OK Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Powered-By: Phusion Passenger(R) 6.0.14 X-Rack-Cache: miss
2024-07-04 20:55:53 UTC	155	IN	Data Raw: 58 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 33 30 62 38 31 63 39 30 2d 37 38 63 63 2d 34 63 33 61 2d 62 63 64 36 2d 30 64 31 37 61 38 34 39 64 65 39 37 0d 0a 58 2d 52 75 6e 74 69 6d 65 3a 20 30 2e 31 32 32 36 30 30 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: X-Request-Id: 30b81c90-78cc-4c3a-bcd6-0d17a849de97X-Runtime: 0.122600X-Xss-Protection: 1; mode=blockConnection: closeTransfer-Encoding: chunked
2024-07-04 20:55:53 UTC	3558	IN	Data Raw: 33 61 63 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 4c 69 76 65 57 69 73 65 20 41 73 73 6f 63 69 61 74 65 73 22 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 Data Ascii: 3aca<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta content="IE=edge" http-equiv="X-UA-Compatible"/> <meta content="width=device-width, initial-scale=1.0" name="viewport"/> <meta content="LiveWise Associates" name="author"
2024-07-04 20:55:53 UTC	538	IN	Data Raw: 6c 61 73 73 3d 22 6a 73 2d 6d 65 6e 75 73 20 20 20 20 62 67 2d 6e 6f 6e 65 20 7a 2d 69 6e 64 65 78 2d 6e 61 76 62 61 72 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 3c 6e 61 76 20 69 64 3d 22 6d 61 69 6e 5f 6d 65 6e 75 22 20 63 6c 61 73 73 3d 22 72 65 6c 61 74 69 76 65 20 62 67 2d 64 65 66 61 75 6c 74 20 62 67 2d 6e 6f 6e 65 20 70 2d 32 20 70 2d 6d 64 2d 33 22 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 67 2d 64 65 66 61 75 6c 74 20 70 6f 73 20 70 6f 73 2d 63 6f 76 65 72 20 6a 73 2d 6d 61 69 6e 2d 6d 65 6e 75 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 70 61 63 69 74 79 22 20 73 74 79 6c 65 3d 22 2d 2d 6d 61 69 6e 2d 6d 65 6e 75 2d 6f 70 61 63 69 74 79 3a 20 31 2e 30 3b 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 2d 6d Data Ascii: lass="js-menus bg-none z-index-navbar"> <nav id="main_menu" class="relative bg-default bg-none p-2 p-md-3"> <div class="bg-default pos pos-cover js-main-menu-background-opacity" style="--main-menu-opacity: 1.0;"></div> <div class="d-m
2024-07-04 20:55:53 UTC	5930	IN	Data Raw: 53 30 30 4d 44 59 31 4c 54 6c 6c 59 6a 55 74 5a 6a 68 6b 5a 6d 45 78 59 32 45 77 59 32 5a 6b 4c 32 5a 70 62 47 55 69 58 53 78 62 49 6e 41 69 4c 43 4a 30 61 48 56 74 59 69 49 73 49 6a 59 77 4d 48 67 32 4d 44 42 63 64 54 41 77 4d 32 55 69 58 53 78 62 49 6e 41 69 4c 43 4a 30 63 6d 6c 74 49 6c 31 64 3f 73 68 61 3d 31 62 32 30 36 65 39 35 62 61 31 38 39 63 64 31 22 20 2f 3e 0a 3c 2f 61 3e 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 67 2d 6e 6f 6e 65 20 70 2d 31 20 62 6f 72 64 65 72 2d 30 20 6d 61 69 6e 2d 6d 65 6e 75 2d 68 69 64 64 65 6e 2d 6d 64 20 6d 6c 2d 61 75 74 6f 20 63 6f 6c 6c 61 70 73 65 64 20 70 72 2d 30 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 Data Ascii: S00MDY1LTllYjUtZjhkZmExY2EwY2ZkL2ZpbGUiXSxbInAiLCJ0aHVtYiIsIjYwMHg2MDBcdTAwM2UiXSxbInAiLCJ0cmltIl1d?sha=1b206e95ba189cd1" /></a> <button type="button" class="btn bg-none p-1 border-0 main-menu-hidden-md ml-auto collapsed pr-0" data-toggle="collapse
2024-07-04 20:55:53 UTC	5030	IN	Data Raw: 64 38 38 39 63 35 2d 63 32 66 32 2d 34 36 31 66 2d 38 35 38 39 2d 37 31 31 64 31 31 30 37 36 30 66 31 2f 4d 48 25 32 30 32 2e 6a 70 67 22 20 2f 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 36 20 64 2d 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 68 33 20 6d 74 2d 32 20 6d 74 2d 73 6d 2d 30 20 6d 62 2d 32 22 3e 44 72 61 77 69 6e 67 20 74 68 65 20 4c 69 6e 65 3a 20 54 68 65 20 41 72 74 20 6f 66 20 53 65 74 74 69 6e 67 20 42 6f 75 6e 64 61 72 69 65 73 3c 2f 68 32 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6d 75 74 65 64 20 6d 62 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 6f 77 20 6f 66 74 65 Data Ascii: d889c5-c2f2-461f-8589-711d110760f1/MH%202.jpg" /> </div> <div class="col-sm-6 d-flex flex-column"> <h2 class="h3 mt-2 mt-sm-0 mb-2">Drawing the Line: The Art of Setting Boundaries</h2> <div class="text-muted mb-2"> How ofte
2024-07-04 20:55:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-04 20:55:53 UTC	3156	IN	Data Raw: 63 34 64 0d 0a 20 20 20 20 20 67 72 6f 75 70 5f 74 68 65 72 61 70 79 5f 6d 65 6e 75 5f 69 74 65 6d 5f 32 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 6f 75 72 2d 73 65 72 76 69 63 65 73 2f 67 72 6f 75 70 2d 74 68 65 72 61 70 79 2d 2d 34 38 22 3e 47 72 6f 75 70 20 54 68 65 72 61 70 79 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 3c 2f 6c 69 3e 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 22 3e 0a 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 22 20 Data Ascii: c4d group_therapy_menu_item_2 " > <a class="menu-link" href="/our-services/group-therapy--48">Group Therapy</a> </li> </ul> </li> <li class="menu-item "> <a class="menu-link"
2024-07-04 20:55:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	64718	172.217.18.3	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:54 UTC	519	OUT	GET /recaptcha/enterprise/clr?k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APBqBf0pjvK2u7cxHzszlSSy3cfeIN4JVAisq1DuLMT8UkCGzhyNzw_LoPo0VqMQRYHHmBpdpuC3tupxnhZ6pnE
2024-07-04 20:55:54 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 20:55:54 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:54 UTC	917	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-07-04 20:55:54 UTC	744	IN	Data Raw: 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b Data Ascii: ges/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{back
2024-07-04 20:55:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	64719	18.65.40.139	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:54 UTC	669	OUT	GET /2024/05/13/14/49/38/7e588fe8-1a76-4c51-8fc9-d0ceb02b4a91/Counseling3-weight-n.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:55 UTC	670	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 284501 Connection: close Date: Thu, 04 Jul 2024 20:55:56 GMT Last-Modified: Mon, 13 May 2024 14:49:39 GMT ETag: "d222bb4e2443accde8293e306203bff5" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"Counseling3-weight-n.jpg"} x-amz-version-id: sBLdIqJyytHMBoZ7iFMt_j1wtehNWQKe Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 cf45fdeb5348a5648604f5f9e4f2b8a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: QXSFhU8_jhdJFAuWrPHXJoxpPM6ORtv__lJidQB6QcWqqPgZmAqUrA== Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600
2024-07-04 20:55:55 UTC	12792	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 00 82 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 4a 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 05 00 21 41 65 73 74 68 65 74 69 63 73 20 2d 20 43 6f 75 6e 73 65 6c 69 6e 67 33 2d 77 65 69 67 68 74 2d 6e 1c 02 50 00 10 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 6e 38 42 49 4d 04 25 00 00 00 00 00 10 6b e0 a0 a6 30 53 b0 36 3b 14 0a b1 bc f0 fc de ff e1 00 fa 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 06 00 00 00 66 01 3b 00 02 00 00 00 11 00 00 00 6c 87 69 00 04 00 00 00 01 00 00 00 7e 00 00 00 00 00 00 01 2c 00 00 00 Data Ascii: JFIF,,Photoshop 3.08BIMJZ%G!Aesthetics - Counseling3-weight-nPChristine Bergen8BIM%k0S6;ExifMM*V^(1f;li~,
2024-07-04 20:55:55 UTC	2979	IN	Data Raw: da 93 7b 20 18 be b6 d9 29 6c 03 17 b7 b2 bb 58 93 a7 22 94 0d 2c 20 a0 e6 b6 3d ee 8d ad be c3 c9 23 74 d2 c8 80 84 0b b5 d2 11 28 f9 7c d0 f2 b7 8f 8a 8b 13 03 b4 6b 3a 24 16 44 74 e4 35 5c 07 48 e4 a0 a4 88 3a 78 25 1e 10 bb 2e 9a 4c 79 a2 02 26 d3 6d 06 8a d1 0e ca 49 df 55 c4 5f ec 94 0d e1 14 1e 5b 20 1d 6f f4 4b 1e 32 97 2c 6d eb b2 51 a7 32 83 a2 36 5d af 8f 82 e5 c7 52 15 47 22 1a 0b 91 7d d2 6b f5 ba 51 08 38 b6 76 3c f9 a4 cb be fe 89 63 af 48 4b cf 63 74 02 05 d2 86 c0 f3 4a 44 c1 f6 17 6b 36 45 b6 1b 03 ac 22 d4 0e 65 76 9e 04 2e 9d 2d e2 8a ba 2f 11 e8 90 fc 51 b7 50 96 e0 69 3b 24 3a eb 06 65 07 16 e6 0b 88 31 ac f2 94 bf bc 74 4b 16 36 b4 c2 0e 02 66 de 88 cd c4 ee 82 6c 39 f2 94 b3 11 d1 16 90 47 4e 52 17 6a 0d a7 af aa e3 af 4f a2 e7 22 Data Ascii: { )lX", =#t(\|k:$Dt5\H:x%.Ly&mIU_[ oK2,mQ26]RG"}kQ8v<cHKctJDk6E"ev.-/QPi;$:e1tK6fl9GNRjO"
2024-07-04 20:55:55 UTC	16384	IN	Data Raw: a6 f0 02 8b 53 cf a7 dd 04 6a 87 5b e9 b0 51 de 35 f1 f3 52 1f ea 63 e6 98 a8 23 5d 51 30 c3 85 e7 43 63 1a 04 c9 06 4c ea 9e 79 da 34 b2 68 99 12 7c a5 13 a3 25 b9 b5 f1 4d 54 d4 89 bc 94 f3 b7 e7 ca 13 4f 01 d2 0d bd 6c 86 8c d4 b0 e9 a9 bc 26 1e 75 e7 12 9f a8 09 b5 d3 2f 19 67 68 dd 0b 11 9f 79 e5 09 97 80 45 fc 6c 9f a8 44 db c7 ea 98 78 3d 23 c3 44 21 97 db f7 ea 98 7d e4 cc ec 9f 7f 3f 24 cb db cf 73 a6 f2 89 47 78 e6 22 f7 4c 3c 91 20 e8 77 52 2a ee 20 00 2c 99 78 00 cc 6b e8 83 43 f8 65 6f c4 ce c9 5a df ea f8 4f 2f eb 35 72 5f c3 11 3f 89 7d 92 37 33 c5 f0 86 df fa 66 ae 56 8a fb 3f 57 10 04 41 be c7 98 5c fc 48 6b 41 24 f3 27 49 59 fa 9c 46 5c 4c 98 d4 5d 40 c4 71 92 c7 00 09 75 f5 1a 2e 29 1e 1e db 16 f1 2c 83 5b 01 a8 4d 55 e2 02 b0 80 f9 b0 Data Ascii: Sj[Q5Rc#]Q0CcLy4h\|%MTOl&u/ghyElDx=#D!}?$sGx"L< wR* ,xkCeoZO/5r_?}73fV?WA\HkA$'IYF\L]@qu.),[MU
2024-07-04 20:55:55 UTC	16384	IN	Data Raw: c2 76 4e 2b 03 93 cf 65 bf ff 00 4f 33 31 12 9d a3 80 ca e9 89 36 f5 53 e1 14 f3 aa 8e 17 d9 f1 4c 0b 4e d2 16 af 01 c3 32 b0 5a 6d 6e 48 b0 94 32 44 5b 91 23 45 67 45 d9 5a 76 b4 2b 49 a5 2d 32 30 10 20 b4 41 f3 46 de 1e 2d cf c1 48 ef 2e 27 9a 76 89 2f 22 35 9d d4 e8 30 38 7d 86 e6 34 94 ef fa 6c 8b 09 57 98 2c 11 aa 5b 22 67 9a b4 6f 05 91 31 74 f1 46 d9 2f f4 eb e9 e9 64 a3 01 1b 4c 6c b5 27 85 16 48 2d 84 23 87 de 72 ce dd 54 69 3b 66 c6 02 64 5c 0d e4 25 fc 8d ec 2d b9 5a 2f c8 02 0c 88 e6 7c d7 1c 09 8b eb 1e 23 dd d3 43 3a de 1e 24 98 02 4f a2 2f c8 0b 58 46 be fd 15 f7 e4 49 1a 58 2e 38 38 d4 47 44 d0 a2 18 11 24 c4 8e 68 9b 82 10 2d 7d 79 ab af ca 6f 11 37 29 3b 80 05 86 db 18 4d 0a 8f c9 46 c6 e5 58 e0 b0 00 b5 b6 1a 5c 02 9c 34 62 6d 6e 64 a9 Data Ascii: vN+eO316SLN2ZmnH2D[#EgEZv+I-20 AF-H.'v/"508}4lW,["go1tF/dLl'H-#rTi;fd\%-Z/\|#C:$O/XFIX.88GD$h-}yo7);MFX\4bmnd
2024-07-04 20:55:55 UTC	2048	IN	Data Raw: f5 22 36 95 d1 3d 00 bf 25 d1 6d 09 3e 9e 68 93 4f 36 db d3 55 1e a9 99 da de 8a 43 ad 3a 91 ea a3 54 68 bd e4 c0 f0 d5 45 11 dc 20 99 10 05 d3 64 75 bf aa 7d de b7 4d 18 df e5 65 51 1a ad cd af 1c bd f4 40 4c 80 2c 09 80 13 ae 02 fc d3 47 78 b0 db 70 81 ba 86 d6 b9 bc 7b f3 4c 87 4b 89 b1 bc a7 9e 77 92 23 44 d0 6d cf 2f a2 2e d5 7e 18 ff 00 f4 93 d9 49 31 ff 00 7d b0 96 36 3f f1 98 b9 27 e1 80 8f c4 8e ca 47 ff 00 c5 b0 9a 7f e9 9a b9 13 50 09 b9 df ae de 29 26 e2 e0 5c 04 33 24 5f 6d 52 12 46 b7 33 7f 7b 2e 87 19 d0 fc a7 97 5d 49 4a da 86 75 bf 92 64 b8 02 2e 64 a5 0f 8b da 2f 0a d2 89 42 ad cd c9 e5 3b 04 6c ad cf 5d a5 43 15 2e 0e c1 17 7a 40 b7 8c a6 c4 ce f4 0d 7c 2e 51 b6 b6 97 93 2a 10 ab 78 36 e9 be 88 bb d2 74 f9 aa 89 bd e0 8b dc ef 25 1f 7b Data Ascii: "6=%m>hO6UC:ThE du}MeQ@L,Gxp{LKw#Dm/.~I1}6?'GP)&\3$_mRF3{.]IJud.d/B;l]C.z@\|.Q*x6t%{
2024-07-04 20:55:55 UTC	16384	IN	Data Raw: 44 65 5e 25 86 04 0a 45 e1 a6 73 e5 ce 07 a4 f3 ff 00 0a fe b4 cf 76 36 b4 e9 77 f8 67 8a 4c 34 48 19 86 a1 c4 5e d3 be 89 ec 33 f1 34 cb 1b 98 86 bb 67 98 27 dc 7c 96 73 84 62 8e 2a b8 71 04 17 34 b5 d9 8c 02 0f 8a b5 c2 61 ab d3 ac e6 d4 a8 1b 4e 7e 12 6a 02 0e 9f c7 a1 58 65 1d 58 d5 e3 31 4f a5 45 d2 c6 b9 84 86 97 34 cc 11 3f 63 ea 14 97 9a ae a2 58 c0 e7 ff 00 71 b1 23 7f b1 f9 f4 50 70 94 aa 60 f1 85 cc 02 a5 0a cc 02 ab 73 02 df fc e1 c8 db de f2 b1 2d ab 83 79 12 1e 58 24 ba 44 41 3e fe 6b 2b 1a c7 a6 f6 07 18 ea d5 70 99 81 f8 99 51 99 a7 a0 23 ea bd 37 07 50 39 ee 33 77 09 3e ab ca bf 0d ab 38 e3 30 8c c9 00 b9 ce 92 64 68 37 f3 2b d4 70 63 e3 98 8b 3a 77 22 ff 00 c2 be 1d 39 b9 7f 92 61 b6 93 3b 21 36 b9 da e4 25 37 9b db c5 0b 9c 01 8d 4f 21 Data Ascii: De^%Esv6wgL4H^34g'\|sb*q4aN~jXeX1OE4?cXq#Pp`s-yX$DA>k+pQ#7P93w>80dh7+pc:w"9a;!6%7O!
2024-07-04 20:55:55 UTC	1024	IN	Data Raw: 8f 14 f1 90 7c 6a b9 75 29 cb 6b 68 b3 1f 9b b9 99 37 d2 6c 16 87 8a 3f bc a2 44 da 21 63 b1 34 9e 5e 49 32 c9 b2 61 36 d7 3a b9 c2 e3 5e 1e 20 fc 20 e8 39 ad d7 67 c7 e6 00 73 a4 90 22 66 57 9f 70 da 12 f0 1c 46 68 9b dc 2d a7 02 c4 fe 56 06 66 c5 c0 bd 8f 82 8c a7 a6 9c 79 7f 6f 4c e1 18 7a 6c 68 91 a9 bc e8 9b e3 95 69 35 af 6b 75 02 66 c0 00 b2 75 fb 65 83 e1 f4 43 b1 18 fa 34 84 88 0d 39 9c 6f c8 5f 9a c2 f1 ff 00 c4 dc 4f 11 a8 fa 5c 36 91 63 66 3b da c2 5c 7a 81 e4 a7 1e 3b 57 cb 9b 0c 7f d5 77 da 2a f4 f0 e1 e5 e4 01 33 24 c0 f1 5e 7d c4 38 d6 17 be 3f d7 68 00 9b 35 d2 48 4e bb b3 98 ce 33 58 d6 c5 54 a9 53 38 92 e7 19 20 5a c3 c2 7e 49 7f e8 f6 17 03 4c 17 b1 a4 c4 12 1b 62 b5 f1 c7 1f f3 5c b9 67 96 5d 40 b2 ab 5d dd 56 a6 f9 0e 32 39 85 eb 3f Data Ascii: \|ju)kh7l?D!c4^I2a6:^ 9gs"fWpFh-VfyoLzlhi5kufueC49o_O\6cf;\z;Ww*3$^}8?h5HN3XTS8 Z~ILb\g]@]V29?
2024-07-04 20:55:55 UTC	16384	IN	Data Raw: f0 da df 98 cf 2f a7 de b1 ed 82 22 4c 83 d4 41 f7 0b e9 ef c3 5c 0e 25 dd 83 e1 44 e1 9c 18 ca 54 03 9c 44 66 86 c4 eb d4 fa 78 2a 1c 3f 62 59 8c a3 52 93 1c e0 48 b8 a4 e0 d0 48 ff 00 9d 90 79 0d 17 b5 7e 1e e0 f0 38 7e cf 61 70 3d eb 41 63 87 78 cd 60 ce 97 f0 f7 2b b3 97 93 f2 4d 33 e2 e3 bc 57 71 24 70 87 e3 38 3d 7a 55 1b 95 8f a6 5b 06 e4 c8 2b f3 8f f1 27 80 57 ec df 19 e3 f8 4a e0 8a 98 4a 8e a7 27 42 09 b1 f4 21 7e a1 b8 d2 73 b2 53 20 02 60 00 06 8b e3 ef f6 d5 fc 3f a7 c1 6a e2 38 e5 2a 71 4f 1f 41 82 a9 02 c2 a3 5d 96 7d 08 f4 5c bc 78 fe ef 4e 8b 97 ed af 8b 29 82 ea ec 7c 7e a7 00 27 4b 0d 7e 65 5c 52 a6 71 54 d9 55 9a 34 80 ec be 26 3e 9f 45 0f 11 87 fe 91 a6 d0 1a f6 b6 41 37 89 53 78 2c 92 70 b3 99 a4 4b a6 d2 44 1f d9 7b f3 a7 cf de db Data Ascii: /"LA\%DTDfx?bYRHHy~8~ap=Acx`+M3Wq$p8=zU[+'WJJ'B!~sS `?j8qOA]}\xN)\|~'K~e\RqTU4&>EA7Sx,pKD{
2024-07-04 20:55:55 UTC	16384	IN	Data Raw: 76 59 83 27 ad fd fb ea af 70 67 2d b4 13 23 78 59 dc 13 49 68 bc b0 6b 7b 8b ad 2e 06 96 60 d3 32 66 56 f8 b9 73 ab 5a 3a 69 ef 92 22 d0 67 48 d1 16 1c 6d 1b 59 75 50 44 68 05 e4 ad 5c 8f 97 ff 00 db 43 b6 0e e0 bc 0b 07 83 a5 55 d4 de f2 fa ce c8 48 20 30 6b f4 5f 1b 76 2f fd b0 7b 5d d9 a0 ca 18 ba 58 6e 24 2f 95 f5 25 8f 8e 46 17 b9 7f b7 e7 69 68 e1 78 9d 0a 46 af f5 9d 86 34 5a c9 d0 17 1c ce f9 2f 83 30 b5 1f 57 1a 1c 00 20 3a 05 b4 0b d5 e0 e0 c3 3e 3d e7 1e 5f 37 c9 e4 e3 cf 58 64 fa e1 bf ed a5 db 2e 30 45 0c 17 0f c1 e0 81 10 e7 19 a8 55 76 23 b5 fd a6 fc 40 c8 ee 2f 8e a9 8c 22 e4 d4 b3 19 ff 00 9a d1 65 e6 dd 82 ec f3 8d 21 55 c0 9c e2 c0 d8 f8 af 50 e0 78 6a b8 6c 28 3b 9b e5 98 2a 97 0e 3c 2f ed 8b 7e 4e 4c e7 ef ab 6e 0f c1 a8 e1 18 d7 38 Data Ascii: vY'pg-#xYIhk{.`2fVsZ:i"gHmYuPDh\CUH 0k_v/{]Xn$/%FihxF4Z/0W :>=_7Xd.0EUv#@/"e!UPxjl(;*</~NLn8
2024-07-04 20:55:55 UTC	10997	IN	Data Raw: 79 82 76 bf f0 ad 70 05 c6 ad 88 ca 2f 97 f9 51 70 2d 0d 68 92 09 37 b5 88 56 78 0a 13 51 c6 d9 c1 b1 e6 21 53 6d f1 8d 77 02 68 65 c0 8e 63 9f 4f 92 f4 ce cd 3a 28 0c c0 0c c0 91 06 e2 cb cd bb 3e 5c 2a d3 0e 04 83 20 87 44 8d 56 ff 00 85 54 2c a8 c6 45 c0 cc 4c 58 1b 2e 6c dd dc 7e a3 d0 f8 5d 40 ca 2c 37 22 c0 b4 93 af 2f 45 b2 e0 f8 ae e7 24 12 d6 18 8c b7 23 dc 2f 3c c0 e3 03 a8 86 34 da 21 a6 56 97 83 e3 ce 70 33 11 68 00 da 75 5c b6 e9 d3 3d bd 37 01 8d 0f 80 05 a2 43 89 82 a7 8a ac cc e6 9b 81 a1 d4 8f 76 59 3e 1f 88 6b c0 39 f2 91 62 d8 22 4a bd a5 55 8f 24 49 12 24 4f d1 46 d4 b8 e9 67 4c 96 13 1a 6a d3 62 a4 b2 a4 01 23 5b d9 56 d3 ae 69 98 37 16 89 be e9 e3 8a c8 4c 98 03 91 b2 85 2a 5b ab c3 4f c4 01 8b 1d 95 4e 2b 17 06 e6 64 5e fb 7b 0a 1f Data Ascii: yvp/Qp-h7VxQ!SmwhecO:(>\* DVT,ELX.l~]@,7"/E$#/<4!Vp3hu\=7CvY>k9b"JU$I$OFgLjb#[Vi7L*[ON+d^{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	64720	216.58.206.34	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:55 UTC	1265	OUT	GET /pagead/viewthroughconversion/16526066952/?random=1720126553997&cv=11&fst=1720126553997&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fblog&hn=www.googleadservices.com&frm=0&tiba=Blog%20Posts%20(page%201)%20%7C%20LiveWise%20Associates&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkn0vK_HQFkC3ve5Q4f4ThneP4kdJEsL04qS_jWgxiBtDDRhZnZcLgq9UgQ
2024-07-04 20:55:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:55 UTC	687	IN	Data Raw: 61 33 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a3d(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-04 20:55:55 UTC	1390	IN	Data Raw: 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 Data Ascii: \|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);i
2024-07-04 20:55:55 UTC	551	IN	Data Raw: 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 42 6c 6f 67 25 32 30 50 6f 73 74 73 25 32 30 28 70 61 67 65 25 32 30 31 29 25 32 30 25 37 43 25 32 30 4c 69 76 65 57 69 73 65 25 32 30 41 73 73 6f 63 69 61 74 65 73 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 31 30 38 34 32 35 34 37 34 38 2e 31 37 32 30 31 32 36 35 32 31 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 Data Ascii: adservices.com\x26frm\x3d0\x26tiba\x3dBlog%20Posts%20(page%201)%20%7C%20LiveWise%20Associates\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d1084254748.1720126521\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B
2024-07-04 20:55:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	64721	142.250.185.194	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:55 UTC	1389	OUT	GET /td/rul/16526066952?random=1720126553997&cv=11&fst=1720126553997&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fblog&hn=www.googleadservices.com&frm=0&tiba=Blog%20Posts%20(page%201)%20%7C%20LiveWise%20Associates&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkn0vK_HQFkC3ve5Q4f4ThneP4kdJEsL04qS_jWgxiBtDDRhZnZcLgq9UgQ
2024-07-04 20:55:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:55:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-04 20:55:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	64722	142.250.185.196	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:56 UTC	1333	OUT	GET /pagead/1p-user-list/16526066952/?random=1720126553997&cv=11&fst=1720123200000&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fblog&hn=www.googleadservices.com&frm=0&tiba=Blog%20Posts%20(page%201)%20%7C%20LiveWise%20Associates&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLrCavxhXwbRUyjVpm0M3DASXvgDZUaNlbOha55mGLOndUIWSN&random=3704754136&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	64723	18.65.40.60	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:56 UTC	434	OUT	GET /2024/05/13/14/49/38/7e588fe8-1a76-4c51-8fc9-d0ceb02b4a91/Counseling3-weight-n.jpg HTTP/1.1 Host: d2t6o06vr3cm40.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:57 UTC	853	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 284501 Connection: close Date: Thu, 04 Jul 2024 20:55:56 GMT Last-Modified: Mon, 13 May 2024 14:49:39 GMT ETag: "d222bb4e2443accde8293e306203bff5" x-amz-server-side-encryption: AES256 x-amz-meta-json: {"name":"Counseling3-weight-n.jpg"} x-amz-version-id: sBLdIqJyytHMBoZ7iFMt_j1wtehNWQKe Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ca1ae3b3ff3d7a9e41b26e307972401e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 X-Amz-Cf-Id: pau6kgn-3gW5L9Epu1v7Dk-ignRPG8BCmgdEBKRYuluOY1swU6A8IQ== Age: 2 Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=3153600 Server-Timing: cdn-cache-hit,cdn-pop;desc="AMS1-P1",cdn-rid;desc="pau6kgn-3gW5L9Epu1v7Dk-ignRPG8BCmgdEBKRYuluOY1swU6A8IQ==",cdn-hit-layer;desc="REC",cdn-downstream-fbl;dur=10
2024-07-04 20:55:57 UTC	15531	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 00 82 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 4a 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 05 00 21 41 65 73 74 68 65 74 69 63 73 20 2d 20 43 6f 75 6e 73 65 6c 69 6e 67 33 2d 77 65 69 67 68 74 2d 6e 1c 02 50 00 10 43 68 72 69 73 74 69 6e 65 20 42 65 72 67 65 6e 38 42 49 4d 04 25 00 00 00 00 00 10 6b e0 a0 a6 30 53 b0 36 3b 14 0a b1 bc f0 fc de ff e1 00 fa 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 06 00 00 00 66 01 3b 00 02 00 00 00 11 00 00 00 6c 87 69 00 04 00 00 00 01 00 00 00 7e 00 00 00 00 00 00 01 2c 00 00 00 Data Ascii: JFIF,,Photoshop 3.08BIMJZ%G!Aesthetics - Counseling3-weight-nPChristine Bergen8BIM%k0S6;ExifMM*V^(1f;li~,
2024-07-04 20:55:57 UTC	16384	IN	Data Raw: 93 b4 40 4e c2 69 1c 8e c9 35 3a 5e 77 48 49 03 f8 43 9a df ba 9d 22 42 93 73 07 c8 6a bb 9c c4 f3 49 3f e1 24 c0 16 9d 94 23 4e 24 cf 96 e4 dc 20 70 bd ae 11 07 5e 76 f5 94 0f 3a 94 58 05 d3 1c cf aa 4d b9 72 4a e9 d7 c9 20 16 1a 99 40 9a eb 00 5c f2 5d 1e c2 ee 7c 92 c5 cd fc d4 50 84 85 d0 00 06 52 c5 ca 43 68 31 3d 42 9e c2 19 1a 09 23 aa 4b f3 b7 24 a2 fb 24 26 dd 25 00 6e 62 e0 a5 8f 84 69 d7 74 84 c6 f2 35 48 5c 2f a8 f7 fe 50 09 91 30 64 9f 44 31 32 77 8d 11 66 92 87 f5 4f ec 6e a8 b4 73 90 c7 f2 96 41 f3 b8 48 e1 ae b1 ae 92 80 1e 41 eb d7 9a 69 d1 3a e8 9c 71 99 db 9f db e6 10 12 2d ac 0b 14 0c bc 40 b0 d1 47 74 49 9d 4f 2d 7a a9 4f 16 22 2f cd 45 a8 35 89 9e b7 41 19 e3 a7 3f 35 1a a9 b9 df 55 26 ae a6 f0 02 8b 53 cf a7 dd 04 6a 87 5b e9 b0 51 Data Ascii: @Ni5:^wHIC"BsjI?$#N$ p^v:XMrJ @\]\|PRCh1=B#K$$&%nbit5H\/P0dD12wfOnsAHAi:q-@GtIO-zO"/E5A?5U&Sj[Q
2024-07-04 20:55:57 UTC	16384	IN	Data Raw: 92 24 cd 43 62 75 9d f7 4c bf 9d a6 34 4f 3a 63 62 77 ea 99 78 93 32 35 b2 8d 86 5d 10 35 3c d3 2e bf 51 b7 8a 79 c2 66 de 50 9a 7d b9 12 37 d7 74 d8 8f 52 e0 db d5 47 75 c6 a5 49 76 91 ef c5 31 51 b7 e7 74 b4 69 3f 0b 2f f8 95 d9 3d bf ef be 13 ff 00 9a cf ba e4 bf 85 c3 ff 00 19 3d 92 1b 0e 2f 84 ff 00 e7 35 72 aa b5 8e e2 bd 98 7d 72 47 c5 06 fa c2 a3 ff 00 a1 2f ef 8d ac 79 69 2b db 2b 70 b6 13 19 45 b7 4c 37 84 33 37 e8 f2 dd 77 f8 47 37 96 de 59 87 ec 69 96 fc 30 3f 65 75 c3 fb 26 44 02 db 9f 1f 35 e8 74 b8 4b 60 7c 3c bd 14 da 1c 37 28 10 d9 32 a3 f1 c5 a6 75 8e c2 f6 70 b2 06 59 1a db 75 22 a7 67 04 0f 80 91 bd 96 de 9e 09 ad 04 01 6d 21 3a ec 08 80 08 d7 9e 8a be 11 6f 3a f3 da 9d 97 cc 3f 4f 8c f8 a2 c2 76 4e 2b 03 93 cf 65 bf ff 00 4f 33 31 12 Data Ascii: $CbuL4O:cbwx25]5<.QyfP}7tRGuIv1Qti?/==/5r}rG/yi++pEL737wG7Yi0?eu&D5tK`\|<7(2upYu"gm!:o:?OvN+eO31
2024-07-04 20:55:57 UTC	14344	IN	Data Raw: f7 4b 4f 07 97 62 38 7b a8 8d 35 fa 2d 27 66 30 a5 b9 09 1e 2a db 11 c0 bb c7 7e 91 cb 45 63 c1 f8 57 70 f1 6b 72 01 67 7d ab 31 f6 d6 76 7e 90 0c 6f 32 b5 0c 60 b5 84 69 70 a9 f8 3e 1c b1 a3 51 d1 5d b0 5b f7 56 6a 70 0c a0 11 61 ea 94 0b db ea b8 0b 5b 9f 34 5a 45 a0 eb 74 5c 40 df 68 88 85 de bf 65 d3 11 cd 73 63 af 9a 05 13 6f 65 29 74 47 20 84 58 fc b5 5c e3 d6 0f ec ab 56 25 47 79 78 a6 9e 44 6b 3c 91 93 00 ec 7e 49 97 ba 2e a0 33 54 de c7 7d 14 6a 86 d1 a8 99 4e d4 39 6d b1 e6 a3 bc ce d2 37 40 0e 75 8d ee 36 51 df ce 7e db 27 1e 4c 9d ee 99 73 a7 43 3f bf 54 5a 76 43 62 45 84 21 36 3a d9 29 f8 80 20 e9 1d 37 40 62 fc 90 ae 73 a3 51 37 4d 38 c8 fe 65 11 33 b4 6d 33 aa 07 e9 af 5e 48 40 3b d0 01 b6 e8 49 f5 22 36 95 d1 3d 00 bf 25 d1 6d 09 3e 9e 68 Data Ascii: KOb8{5-'f0*~EcWpkrg}1v~o2`ip>Q][Vjpa[4ZEt\@hescoe)tG X\V%GyxDk<~I.3T}jN9m7@u6Q~'LsC?TZvCbE!6:) 7@bsQ7M8e3m3^H@;I"6=%m>h
2024-07-04 20:55:57 UTC	16384	IN	Data Raw: a0 cb 6c 62 6d d4 20 39 8f 59 3c 8a e8 b5 f6 e8 90 1f 1e 5c d2 82 2c 61 56 50 63 54 6d b9 13 33 b4 26 c7 a5 ac 8c 13 cf d1 58 38 d7 5f 5b 7b ba 36 58 dc 41 3c 93 40 8e 82 39 73 4e 0d 79 1d 34 b7 bb a7 60 c0 89 1a 13 ba 5d 81 9b eb e0 84 f2 de 47 55 d3 1e 7f 25 45 a0 8e 91 e7 e6 b8 6f 72 23 a6 a8 5d f3 3a ae 06 06 be 63 c1 12 23 76 eb 74 3a 1f 35 d6 bf 2d 52 13 11 23 d5 07 3b 53 79 e6 ba 3a 74 5c 76 e6 b9 b7 b6 bb 11 d5 02 8b 0d 74 d1 14 c6 f7 de 12 0f 4e 50 94 df 7e 88 12 0c 10 6d e4 93 71 74 46 e3 5b ea 84 f8 00 10 0f 3b 00 92 07 3e 88 b5 e9 7e ab 8e b7 37 40 87 f8 32 92 26 74 05 2d a4 48 0b a7 28 d7 cd 00 90 4d e3 a2 e1 a8 11 60 94 89 23 e9 ba 57 0d 67 54 08 2d 78 12 94 8e 5a 0d 46 8b 80 b4 91 e0 94 8b db c1 00 91 e6 27 c1 09 e8 88 8e 61 20 17 e6 3c 50 Data Ascii: lbm 9Y<\,aVPcTm3&X8_[{6XA<@9sNy4`]GU%Eor#]:c#vt:5-R#;Sy:t\vtNP~mqtF[;>~7@2&t-H(M`#WgT-xZF'a <P
2024-07-04 20:55:57 UTC	16384	IN	Data Raw: 3a 9e 62 dd 25 17 0c 47 87 54 a6 fe a8 44 c0 eb 7f 14 b3 6e b6 d5 00 cc 1d ff 00 74 26 c7 98 45 11 e2 85 d7 80 34 40 0e 80 2c 6e 6c 13 6f db 9a 33 e3 70 34 40 4c 68 2d ba 06 5c 2c 6c 9b 7e a6 3d 2e 9d a9 e0 7d 13 0e 3a cd f9 aa d4 cb a3 6f 30 dd 6d fb 26 9d a8 f9 27 1d 07 98 33 ac a6 9e 20 8b ca 84 10 38 4d c0 83 a7 24 2e 3a ec 3a a5 2e 88 1b f9 42 13 a4 eb 37 26 6c 8b 84 e9 ac 14 d1 37 b9 b8 b1 46 4d b4 b8 4d 93 a9 98 f3 ba 02 67 5b 1d 93 84 47 49 4d 33 ad 88 4e 93 2d 24 7d d6 77 a6 91 a2 fc 32 13 f8 91 d9 4d e7 8b 61 3f f9 cc fb 2e 5d f8 64 07 fd d2 3b 29 ff 00 d9 6c 20 bf fe 99 8b 95 b1 e8 cb b7 d8 38 9c 36 b6 3d 7a aa bc 4e 17 f8 d6 e3 d8 5a 8c 4e 1e 4c 91 6f 08 d9 55 62 b0 f2 48 81 ce c2 c1 7b 0f 1b a6 67 13 87 b9 f1 bd ae aa b1 34 60 98 13 bc 05 a6 Data Ascii: :b%GTDnt&E4@,nlo3p4@Lh-\,l~=.}:o0m&'3 8M$.::.B7&l7FMMg[GIM3N-$}w2Ma?.]d;)l 86=zNZNLoUbH{g4`
2024-07-04 20:55:57 UTC	16384	IN	Data Raw: a6 6f 72 39 28 75 30 d9 95 83 5b 98 5c 03 bf 45 ce a5 3a 0f 24 63 71 56 d2 a4 29 b8 5b a2 bc e1 ae 6b 48 e9 c9 56 d5 a5 07 42 4a 5a 75 1d 4c d8 c7 82 ce a9 7d 36 d8 5c 4b 29 b4 1b 49 f9 27 ea e3 d8 01 12 34 58 ca 58 c7 90 25 c4 ed aa 91 4f 16 4c 07 12 4e 81 44 cb 4c 6c 5e 54 e2 12 4c 49 f0 50 aa e3 09 71 02 de 0a 3f 7b 6b 19 3c d0 13 b9 37 d6 15 e3 6c 31 1b aa 97 13 26 f6 4d e6 93 32 86 73 6b f7 5c 4e d6 56 75 48 79 ae b1 46 d7 db a7 45 1f 31 1a 68 51 66 f3 e8 8b 9f 0e e9 e3 1a a7 69 bb 97 8f 25 10 3a 75 fe 13 ec 76 82 61 04 ea 4f d0 80 49 95 32 93 b4 fb aa ea 4f d2 62 ca 55 2a 86 da 5f 44 16 74 88 80 7d 4e ea 5d 37 5b 5b cf aa ad 65 43 a0 e7 10 a5 d3 a8 3c 39 22 2a 73 1c 20 6f e2 ab 38 91 96 9f 55 3a 9b fe 1d 95 77 10 33 36 d7 65 78 ad e9 8d e2 ad 39 a7 Data Ascii: or9(u0[\E:$cqV)[kHVBJZuL}6\K)I'4XX%OLNDLl^TLIPq?{k<7l1&M2sk\NVuHyFE1hQfi%:uvaOI2ObU_Dt}N]7[[eC<9"s o8U:w36ex9
2024-07-04 20:55:57 UTC	16384	IN	Data Raw: 99 73 61 c7 37 9d d3 58 ec 73 33 38 40 98 92 64 1b 2a da dd a2 a5 83 63 b3 d5 00 ee 49 d1 78 47 68 3f da 33 07 47 89 1e 1f 84 0e 9c a0 b6 ab ce 56 be 79 1d f5 5e 4f da df c4 fe 3f 89 c7 e7 c5 d5 0c e1 58 82 59 4e a5 07 16 b4 6b 13 3e 53 fb 2f 47 8b f4 de 4e 4d 79 7a 78 ff 00 23 f5 9e 0e 29 66 1e eb e8 3e dc fe 39 60 78 36 12 a8 a1 55 d8 c7 b0 10 5b 44 82 67 df ee be 78 ed 17 6f b8 87 6f 45 5a c2 bd 3a d4 99 71 41 c2 1a 74 f4 37 1a f3 ea b2 b5 f0 15 f8 44 71 0a 66 ab f0 a1 f1 56 93 c9 70 02 6c e6 fb df aa 93 8c a5 85 a3 42 8f 13 c2 3a 32 90 dc 48 60 80 f6 12 2f ca 6e 3d 17 d1 7c 6f 83 c7 c1 ee 4f 6f 8d f9 bf aa 72 fc af 5b d4 4d c1 70 fa 9c 56 83 e8 52 3f 95 c7 52 20 1a 64 44 45 ee 37 16 37 f0 4f d2 78 e2 cd 2f c8 30 9c 5b 0e e3 27 2e b1 fd a7 a1 91 ec a8 Data Ascii: sa7Xs38@d*cIxGh?3GVy^O?XYNk>S/GNMyzx#)f>9`x6U[DgxooEZ:qAt7DqfVplB:2H`/n=\|oOor[MpVR?R dDE77Ox/0['.
2024-07-04 20:55:57 UTC	16384	IN	Data Raw: 39 bd 36 52 a2 1d 46 44 8f 65 41 c5 c0 98 b8 e4 ac ea 32 07 5e 8a b3 1b 2d 06 75 d0 a0 ce 71 47 c0 2b 25 c4 6b 59 d7 b1 bc ad 27 17 ad 01 c4 eb 71 f5 58 be 2b 88 25 ce 13 69 d6 ca b5 66 1b b4 f4 bb f7 3e e7 5f 9a f3 7e 2b c0 33 bc b8 99 11 30 bd 67 1b 45 b5 89 26 4c 8f 19 59 ac 5f 06 75 5a 85 c3 7d 89 58 e5 ed 36 6d 8a e1 1c 20 02 1b 04 c7 35 aa c3 70 a6 b5 a0 8b fd 42 b1 c1 70 40 c0 1c 18 66 79 2b 07 60 32 b0 96 48 76 fc 94 49 a4 49 a6 23 8b 50 b9 b0 bd a1 51 d6 a2 1b e1 b6 cb 67 c4 f0 84 92 48 83 e8 b3 58 ca 5d db 8c 68 79 0d 15 2f 6e 8c 6a b2 63 94 69 62 97 34 34 5e 3d f2 48 4d cf 39 42 e7 4c 1f 33 d1 42 e3 27 ad d0 38 c7 86 c8 4b e2 66 52 39 da ed e0 80 8b c0 22 3c 57 07 48 3b 04 d1 79 ea 41 1a ce e9 73 4f 8a 07 83 ae 52 17 47 59 37 4d 67 36 37 9f aa Data Ascii: 96RFDeA2^-uqG+%kY'qX+%if>_~+30gE&LY_uZ}X6m 5pBp@fy+`2HvII#PQgHX]hy/njcib44^=HM9BL3B'8KfR9"<WH;yAsORGY7Mg67
2024-07-04 20:55:57 UTC	3028	IN	Data Raw: 27 54 3b 46 e7 cd 11 f9 8d d0 18 16 1f b2 0e 99 13 e6 10 b8 da 62 51 68 dd 34 de f6 4d 92 49 3e 9a 04 02 e9 12 3c 74 40 4e bc d2 ba fa 19 b5 8a 07 18 f0 21 13 b0 3c 73 b1 d1 34 fe b3 6b 27 08 b1 b1 fb 26 df a9 b4 9d 91 63 6e 22 22 f1 e8 90 91 ce 6c 17 3a e6 46 9a 24 8d 6f d5 56 8e 70 90 75 91 a4 20 36 1a ee 64 f3 44 7f 9d 50 3a 04 90 6c a0 03 89 e9 17 bf 24 dd 8e 6e 5a 1f 04 6e d7 5b ef 29 b3 bc 78 f8 22 67 65 1b f2 d5 21 11 16 20 f9 ae 06 09 81 a9 5c 04 19 91 d1 67 5a 42 8d 7a 14 fd 1d 45 b6 8b 84 c0 1d 2f a2 91 41 b9 9c 04 48 99 f7 ef d1 42 ed f7 e1 50 ff 00 c6 17 65 ef af 14 c2 eb ff 00 a6 6a e4 7f 85 2d ff 00 c6 07 65 cc 5f fd 4f 0b af fe 99 ab 95 f1 be 99 e5 db 43 8c c0 0b da 4c e9 fb 2a 9c 46 0e 01 b1 17 bc ad 8f 10 86 97 5a ff 00 35 9c c7 54 17 ca Data Ascii: 'T;FbQh4MI><t@N!<s4k'&cn""l:F$oVpu 6dDP:l$nZn[)x"ge! \gZBzE/AHBPej-e_OCL*FZ5T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	64724	172.217.16.132	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:58 UTC	1098	OUT	GET /pagead/1p-user-list/16526066952/?random=1720126553997&cv=11&fst=1720123200000&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fblog&hn=www.googleadservices.com&frm=0&tiba=Blog%20Posts%20(page%201)%20%7C%20LiveWise%20Associates&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLrCavxhXwbRUyjVpm0M3DASXvgDZUaNlbOha55mGLOndUIWSN&random=3704754136&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:58 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 04 Jul 2024 20:55:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:55:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	64725	99.79.89.210	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:59 UTC	643	OUT	GET / HTTP/1.1 Host: livewise.janeapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:55:59 UTC	5844	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:59 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Jane-Version: {"current":"6.3.281","unobtrusive":"6.3.80","immediate":"6.2.136","minimum":"4.18.252"} X-Jane-Version-Compatibility: "unsupported" X-Robots-Tag: all ETag: W/"448b522f11453eb00e936c48bef18da3" Cache-Control: max-age=0, private, must-revalidate Set-Cookie: jane_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaEpJaVZqWXpReFkyWmlNVE16WXpaa05HTmtPR1F5TmpCaVptTTBOVEpsT0dFM05RWTZCa1ZHIiwiZXhwIjoiMjAzNC0wNy0wNFQyMDo1NTo1OVoiLCJwdXIiOiJjb29raWUuamFuZV9kZXZpY2UifX0%3D--0eea9df0d17b281a870ed0e7d10d571f2ee00b59; domain=.janeapp.com; path=/; expires=Tue, 04 Jul 2034 20:55:59 GMT; secure; HttpOnly; SameSite=Lax Set-Cookie: _front_desk_session=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--944992fbb7dd59321e10733ef28e0fa69a162abd; path=/; expires=Fri, 04 Jul 2025 20:55:59 GMT; HttpOnly; secure; SameSite=Lax X-Request-Id: 5e402e73-67e1-41bf-846d-47c6f5af17e8 X-Runtime: 0.134879 Strict-Transport-Security: max-age=31556952; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED]
2024-07-04 20:55:59 UTC	8693	IN	Data Raw: 32 31 65 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 27 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 27 63 6f 6f 6b 69 65 73 5f 65 6e 61 62 6c 65 64 3d 74 72 75 65 27 0a 20 20 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 3d 20 27 73 74 72 69 6e 67 27 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 27 63 6f 6f 6b 69 65 73 5f 65 6e 61 62 6c 65 64 27 29 20 3c 20 30 29 20 7b 0a 20 20 20 20 2f 2f 20 72 65 64 69 72 65 63 74 20 69 66 20 63 6f 6f 6b 69 65 73 20 61 72 65 6e 27 74 20 65 6e 61 62 6c 65 64 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f Data Ascii: 21ed<!DOCTYPE html><html lang='en'><head><script> document.cookie = 'cookies_enabled=true' if (typeof document.cookie == 'string' && document.cookie.indexOf('cookies_enabled') < 0) { // redirect if cookies aren't enabled window.locatio
2024-07-04 20:55:59 UTC	16384	IN	Data Raw: 37 31 32 30 0d 0a 6e 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 27 6e 61 76 20 6e 61 76 62 61 72 2d 6e 61 76 27 3e 0a 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 6c 6f 67 69 6e 22 3e 53 69 67 6e 20 49 6e 20 6f 72 20 53 69 67 6e 20 55 70 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 6e 61 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 68 69 64 65 2d 6f 6c 64 27 20 69 64 3d 27 6c 61 73 74 5f 76 69 73 69 74 27 3e 3c 2f 64 69 76 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 63 6f 6e 74 61 69 6e 65 72 27 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 72 6f 77 20 6c 6f 67 6f 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 6f 67 6f 2d 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 65 6e 74 65 72 65 64 20 27 3e 0a 3c 64 69 76 20 Data Ascii: 7120n><ul class='nav navbar-nav'><li><a href="/login">Sign In or Sign Up</a></li></ul></nav></div></div><div class='hide-old' id='last_visit'></div><div class='container'><div class='row logo-nav-container logo-nav-container-centered '><div
2024-07-04 20:55:59 UTC	12584	IN	Data Raw: 6c 65 5f 70 6c 61 63 65 68 6f 6c 64 65 72 2e 6a 70 67 26 23 33 39 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 6a 61 6e 65 2d 63 61 63 31 2d 32 33 2e 6a 61 6e 65 61 70 70 2e 6e 65 74 2f 70 75 62 2f 57 31 73 69 5a 69 49 73 49 6d 52 79 59 57 64 76 62 6d 5a 73 65 53 38 7a 4e 44 67 77 4d 43 39 31 63 32 56 79 4c 33 42 6f 62 33 52 76 4c 7a 49 77 4d 6a 49 74 4d 44 59 74 4d 6a 63 76 4d 54 55 30 4d 7a 55 30 4c 7a 68 6c 4f 47 45 30 4f 44 63 35 4c 57 55 34 59 7a 55 74 4e 44 56 69 4d 53 30 35 4d 57 4d 7a 4c 54 49 35 4d 57 49 32 4e 6d 52 6b 4d 6d 55 30 5a 53 39 4e 59 58 4a 70 59 57 30 74 55 46 51 74 53 47 56 68 5a 48 4e 6f 62 33 51 74 63 6d 56 74 62 33 5a 6c 5a 43 42 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4c 6e 42 75 5a 79 4a 64 4c 46 73 69 63 Data Ascii: le_placeholder.jpg'" src="https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjItMDYtMjcvMTU0MzU0LzhlOGE0ODc5LWU4YzUtNDViMS05MWMzLTI5MWI2NmRkMmU0ZS9NYXJpYW0tUFQtSGVhZHNob3QtcmVtb3ZlZCBiYWNrZ3JvdW5kLnBuZyJdLFsic
2024-07-04 20:55:59 UTC	11592	IN	Data Raw: 32 64 34 30 0d 0a 68 6f 72 74 20 63 6f 6c 6c 61 70 73 65 20 69 6e 20 34 2d 64 65 73 63 72 69 70 74 69 6f 6e 27 3e 0a 50 73 79 63 68 6f 74 68 65 72 61 70 79 20 69 73 20 70 72 69 6d 61 72 69 6c 79 20 61 20 74 61 6c 6b 2d 62 61 73 65 64 20 74 68 65 72 61 70 79 20 61 6e 64 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 68 65 6c 70 20 70 65 6f 70 6c 65 20 69 6d 70 72 6f 76 65 20 61 6e 64 20 6d 61 69 6e 74 61 69 6e 20 74 68 65 69 72 20 6d 65 6e 74 61 6c 20 68 65 61 6c 74 68 20 61 6e 64 20 77 65 6c 6c 2d 62 65 69 6e 67 2e 20 52 65 67 69 73 74 65 72 65 64 20 50 73 79 63 68 6f 74 68 65 72 61 70 69 73 74 73 20 77 6f 72 6b 20 77 69 74 68 20 69 6e 64 69 76 69 64 75 61 6c 73 2c 20 63 6f 75 70 6c 65 73 20 61 6e 64 20 66 61 6d 69 6c 69 65 73 20 69 6e 20 69 6e 64 69 76 Data Ascii: 2d40hort collapse in 4-description'>Psychotherapy is primarily a talk-based therapy and is intended to help people improve and maintain their mental health and well-being. Registered Psychotherapists work with individuals, couples and families in indiv
2024-07-04 20:55:59 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 70 3b 66 6f 72 3d 6c 69 76 65 77 69 73 65 2e 6a 61 6e 65 61 70 70 2e 63 6f 6d 22 20 2f 3e 0a 3c 2f 70 69 63 74 75 72 65 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 76 69 73 69 62 6c 65 2d 78 73 2d 69 6e 6c 69 6e 65 27 3e 0a 3c 70 20 63 6c 61 73 73 3d 27 67 61 70 2d 73 6d 20 67 61 70 2d 74 6f 70 27 3e 0a 46 6c 6f 72 65 6e 63 65 20 41 6b 61 6e 62 69 0a 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 68 69 64 64 65 6e 2d 78 73 27 3e 0a 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 27 74 72 75 65 27 20 63 6c 61 73 73 3d 27 6f 76 65 72 6c 61 79 27 3e 0a 46 6c 6f 72 65 6e 63 65 20 41 6b 61 6e 62 69 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 73 74 Data Ascii: 8000p;for=livewise.janeapp.com" /></picture><div class='visible-xs-inline'><p class='gap-sm gap-top'>Florence Akanbi</p></div><div class='hidden-xs'><div aria-hidden='true' class='overlay'>Florence Akanbi</div></div></a></div><div class='st
2024-07-04 20:55:59 UTC	16384	IN	Data Raw: 70 67 26 23 33 39 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 6a 61 6e 65 2d 63 61 63 31 2d 32 33 2e 6a 61 6e 65 61 70 70 2e 6e 65 74 2f 70 75 62 2f 57 31 73 69 5a 69 49 73 49 6d 52 79 59 57 64 76 62 6d 5a 73 65 53 38 7a 4e 44 67 77 4d 43 39 31 63 32 56 79 4c 33 42 6f 62 33 52 76 4c 7a 49 77 4d 6a 4d 74 4d 44 55 74 4d 54 67 76 4d 6a 4d 31 4d 6a 55 78 4c 7a 6b 32 4d 57 45 79 4f 44 42 68 4c 54 45 33 4d 7a 6b 74 4e 44 46 68 4f 43 30 34 5a 54 49 79 4c 54 4a 6d 5a 47 4e 6b 4d 44 49 77 4e 6a 6c 69 4d 53 38 79 4d 44 49 78 4d 44 4d 78 4d 6c 38 78 4d 44 45 31 4d 44 67 67 4b 44 45 70 4c 6d 70 77 5a 79 4a 64 4c 46 73 69 63 43 49 73 49 6e 52 6f 64 57 31 69 49 69 77 69 4d 54 6b 79 65 44 49 79 4f 43 4d 69 58 56 30 3f 73 68 61 3d 31 64 66 61 36 Data Ascii: pg'" src="https://assets-jane-cac1-23.janeapp.net/pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjMtMDUtMTgvMjM1MjUxLzk2MWEyODBhLTE3MzktNDFhOC04ZTIyLTJmZGNkMDIwNjliMS8yMDIxMDMxMl8xMDE1MDggKDEpLmpwZyJdLFsicCIsInRodW1iIiwiMTkyeDIyOCMiXV0?sha=1dfa6
2024-07-04 20:55:59 UTC	8	IN	Data Raw: 69 76 65 77 69 73 0d 0a Data Ascii: ivewis
2024-07-04 20:55:59 UTC	13576	IN	Data Raw: 33 35 30 30 0d 0a 65 2e 6a 61 6e 65 61 70 70 2e 63 6f 6d 22 20 2f 3e 0a 3c 2f 70 69 63 74 75 72 65 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 76 69 73 69 62 6c 65 2d 78 73 2d 69 6e 6c 69 6e 65 27 3e 0a 3c 70 20 63 6c 61 73 73 3d 27 67 61 70 2d 73 6d 20 67 61 70 2d 74 6f 70 27 3e 0a 4e 61 74 61 73 68 61 20 4d 61 6e 6f 0a 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 68 69 64 64 65 6e 2d 78 73 27 3e 0a 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 27 74 72 75 65 27 20 63 6c 61 73 73 3d 27 6f 76 65 72 6c 61 79 27 3e 0a 4e 61 74 61 73 68 61 20 4d 61 6e 6f 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 73 74 61 66 66 5f 6d 65 6d 62 65 72 5f 74 68 75 6d 62 20 73 74 Data Ascii: 3500e.janeapp.com" /></picture><div class='visible-xs-inline'><p class='gap-sm gap-top'>Natasha Mano</p></div><div class='hidden-xs'><div aria-hidden='true' class='overlay'>Natasha Mano</div></div></a></div><div class='staff_member_thumb st
2024-07-04 20:55:59 UTC	16384	IN	Data Raw: 35 61 38 30 0d 0a 6c 44 69 46 51 57 33 64 2f 7a 33 75 76 37 47 72 34 79 51 38 50 59 2b 31 38 52 32 45 73 35 53 6c 4b 50 78 47 31 44 43 67 48 51 74 47 74 38 4b 4c 76 55 49 6d 75 62 4e 4a 46 7a 31 57 34 57 43 56 56 38 6e 71 31 63 71 74 56 6a 7a 39 39 37 75 34 62 4a 49 64 6a 57 31 79 6a 4a 43 49 69 55 72 44 56 6b 34 74 48 4e 7a 57 6b 65 68 67 5a 52 59 6f 4b 6c 43 52 4a 57 6c 6f 58 45 53 5a 4a 53 6f 39 77 65 47 55 35 48 41 35 44 43 6f 63 52 58 6c 34 66 44 6f 66 52 32 6a 2b 53 6b 75 4f 78 6b 68 33 43 70 45 6a 74 4e 54 36 30 46 68 56 67 2b 36 45 6a 43 59 64 4b 37 54 55 2b 55 79 71 75 34 67 6b 34 35 47 71 6f 52 41 49 73 49 35 61 71 69 65 70 4e 2b 62 31 6c 77 6a 45 51 32 55 32 6c 4b 77 74 58 6c 32 64 75 57 37 64 4c 43 76 4e 78 55 33 55 46 48 68 72 51 64 2b 76 46 Data Ascii: 5a80lDiFQW3d/z3uv7Gr4yQ8PY+18R2Es5SlKPxG1DCgHQtGt8KLvUImubNJFz1W4WCVV8nq1cqtVjz997u4bJIdjW1yjJCIiUrDVk4tHNzWkehgZRYoKlCRJWloXESZJSo9weGU5HA5DCocRXl4fDofR2j+SkuOxkh3CpEjtNT60FhVg+6EjCYdK7TU+Uyqu4gk45GqoRAIsI5aqiepN+b1lwjEQ2U2lKwtXl2duW7dLCvNxU3UFHhrQd+vF
2024-07-04 20:56:00 UTC	6792	IN	Data Raw: 65 48 62 64 56 57 77 53 74 68 4e 71 69 62 39 67 51 42 65 48 42 36 5a 46 38 6d 54 44 6e 59 35 58 44 6a 6e 55 4e 75 69 48 30 52 45 36 65 6a 57 54 68 76 73 63 36 4a 58 55 75 33 30 37 43 79 73 7a 35 30 39 6c 2f 39 55 65 54 47 79 56 42 62 48 39 75 4c 77 43 4c 62 33 39 4d 56 30 32 39 75 37 37 48 6a 4a 50 61 72 77 69 47 4a 33 64 6b 48 65 79 58 6c 4e 6a 63 6d 49 39 38 72 51 67 62 49 63 72 4d 33 4d 6a 50 73 2b 49 38 45 77 76 6a 78 6e 74 2f 6c 53 6e 68 30 61 77 51 33 74 33 57 6a 36 39 77 48 63 30 6d 4e 66 64 4b 46 66 53 67 6f 4b 63 47 4a 44 72 48 31 2b 50 4e 37 65 6b 54 47 63 63 36 67 4e 6a 53 30 48 73 4d 50 6d 69 4f 6d 39 74 6a 73 59 4f 6a 6d 58 69 72 65 77 4e 64 4e 69 78 5a 42 45 45 31 41 32 37 44 75 38 36 4f 61 67 48 54 61 48 70 4f 63 78 59 70 4e 31 38 63 34 31 Data Ascii: eHbdVWwSthNqib9gQBeHB6ZF8mTDnY5XDjnUNuiH0RE6ejWThvsc6JXUu307Cysz509l/9UeTGyVBbH9uLwCLb39MV029u77HjJParwiGJ3dkHeyXlNjcmI98rQgbIcrM3MjPs+I8Ewvjxnt/lSnh0awQ3t3Wj69wHc0mNfdKFfSgoKcGJDrH1+PN7ekTGcc6gNjS0HsMPmiOm9tjsYOjmXirewNdNixZBEE1A27Du86OagHTaHpOcxYpN18c41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	64726	99.79.89.210	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:55:59 UTC	1495	OUT	GET /styles.css HTTP/1.1 Host: livewise.janeapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jane_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaEpJaVZqWXpReFkyWmlNVE16WXpaa05HTmtPR1F5TmpCaVptTTBOVEpsT0dFM05RWTZCa1ZHIiwiZXhwIjoiMjAzNC0wNy0wNFQyMDo1NTo1OVoiLCJwdXIiOiJjb29raWUuamFuZV9kZXZpY2UifX0%3D--0eea9df0d17b281a870ed0e7d10d571f2ee00b59; _front_desk_session=ZndHV1F3QmdhTTcwc0N2b25STVNLZUQ1Z3NQRUZjb2VLT2x3M2hFMmovWStDZDJ4aEFYVmMrZzZHOEdQU3lTa1BUU2g1Z3VmSndxWVlFaXhuNG9PRmVXT2hVMzdnN3dyeC8vQ2gycjJZaUZkZlUrYndmbmgxYVlqWkthbW4xOUR6ZDJpK0JxR3Y2RitWTnBFaTU2czhOdm5GNGU1eEdLa0cvc3czUkZOT0I3UlZzYnBjKzRGVHc0NHYwVFV4WDhqT09zbGZVUEY0bG5ZcnZQU09BMGU5N25iWmlrOFFKSldVQXBTUjFub0V0emtXZnZNaDQ2V1dVdnBCbW0yUlBRVkZRNHZtYS9GM1hsYVdPbGFuMUpSeDVKR05mOVdIa1JSVnpVSlNyRVJCVW55RlgzQ0FkekZheU5nem13Rnd0NXhkWUVvU2ZtUGE3VUZMVFZUVTd5cWUxQnQrSlQ3RlFrcHFoeHhjZm5nTTR6b3kzUDhXODZqTnc4ZzZieXJ0amRFZWVNUyswTDJjaUxKWUhneEQ5NTdVUzBaUndMcTZoaWhrdWQyaUtKd1B5UTRrTHBoTTQyaTVFbGUxdGo3bE9ySC0tNnpMMGJ3SWs5Ti9YUWUrTnR1aDN0Zz09--944992fbb7dd59321e10733ef28e0fa69a162abd
2024-07-04 20:55:59 UTC	5518	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:55:59 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Jane-Version: {"current":"6.3.281","unobtrusive":"6.3.80","immediate":"6.2.136","minimum":"4.18.252"} X-Jane-Version-Compatibility: "unsupported" X-Robots-Tag: all ETag: W/"b6813d251f63f0633a813a1b718d9a31" Cache-Control: max-age=0, private, must-revalidate Set-Cookie: _front_desk_session=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--7495b2e6c584820b7f12196ba5b246fb2e7acc62; path=/; expires=Fri, 04 Jul 2025 20:55:59 GMT; HttpOnly; secure; SameSite=Lax X-Request-Id: 322fad4c-2b67-4b6c-bde6-ab4697c8cc1b X-Runtime: 0.057036 Strict-Transport-Security: max-age=31556952; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED]
2024-07-04 20:55:59 UTC	9020	IN	Data Raw: 32 33 33 34 0d 0a 61 7b 63 6f 6c 6f 72 3a 23 65 64 36 65 30 63 7d 61 3a 68 6f 76 65 72 2c 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 61 34 34 63 30 38 7d 2e 6e 61 76 62 61 72 2d 74 69 65 72 2d 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 37 63 31 66 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6c 69 6e 69 63 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 65 64 36 65 30 63 20 36 36 25 2c 20 77 68 69 74 65 20 35 30 25 29 7d 2e 63 6f 6d 70 61 6e 79 5f 68 65 61 64 65 72 5f 6a 61 6e 65 5f 73 73 6f 5f 6c 69 6e 6b 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a Data Ascii: 2334a{color:#ed6e0c}a:hover,a:focus{color:#a44c08}.navbar-tier-2{background-color:#f47c1f}@media (max-width:768px){.clinic-primary-color-container{background:linear-gradient(to bottom, #ed6e0c 66%, white 50%)}.company_header_jane_sso_link{border-radius:
2024-07-04 20:56:00 UTC	7022	IN	Data Raw: 31 62 36 36 0d 0a 61 62 6c 65 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 66 6f 72 6d 3a 69 6e 76 61 6c 69 64 20 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 62 74 6e 2d 6c 69 6e 6b 29 2e 6a 61 6e 65 2d 69 64 2d 64 69 73 61 62 6c 65 64 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 66 6f 72 6d 3a 69 6e 76 61 6c 69 64 20 62 75 74 74 6f 6e 2e 6a 61 6e 65 2d 69 64 2d 64 69 73 61 62 6c 65 64 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 66 6f 72 6d 3a 69 6e 76 61 6c 69 64 20 62 75 74 74 6f 6e 2e 6a 61 6e 65 2d 69 64 2d 64 69 73 61 62 6c 65 64 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 3a 61 63 74 69 76 65 2c 2e 70 61 73 73 77 6f 72 64 2d 72 65 73 65 74 2d 73 75 62 6d 69 74 2d 64 69 73 61 62 6c 65 2e 62 74 6e 2d 70 72 69 6d 61 72 79 Data Ascii: 1b66able.btn-primary:disabled:active,form:invalid button:not(.btn-link).jane-id-disabled-button:active,form:invalid button.jane-id-disabled-button:active,form:invalid button.jane-id-disabled-button:hover:active,.password-reset-submit-disable.btn-primary
2024-07-04 20:56:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	64730	18.239.94.5	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:00 UTC	594	OUT	GET /assets/vendor_styles-9297b9cdf5cc56e89ca7.css HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:01 UTC	4676	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 294194 Connection: close Date: Thu, 04 Jul 2024 20:56:01 GMT Last-Modified: Thu, 04 Jul 2024 18:16:03 GMT Cache-Control: public, max-age=315569520 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED] Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 ff78b299270b99e41cda1a1252610524.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: PUk4cbORvokcfEy2mcMEQxr7Uka6IFKCSB6HNyNclQBPo4MQZFDoAw== Vary: Origin
2024-07-04 20:56:01 UTC	7164	IN	Data Raw: 2f 2a 0a 20 2a 3d 20 72 65 71 75 69 72 65 20 62 6f 6f 74 73 74 72 61 70 2d 70 75 62 6c 69 63 0a 20 2a 2f 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 68 74 6d 6c 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 61 72 74 69 63 6c 65 2c 0a 61 73 69 64 65 2c 0a 64 65 74 61 69 6c 73 2c 0a 66 69 67 63 61 70 74 69 6f 6e 2c Data Ascii: /* = require bootstrap-public //! normalize.css v3.0.2 \| MIT License \| git.io/normalize /html { font-family: sans-serif; -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%;}body { margin: 0;}article,aside,details,figcaption,
2024-07-04 20:56:01 UTC	7240	IN	Data Raw: 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6c 6f 77 65 72 63 61 73 65 3b 0a 7d 0a 2e 74 65 78 74 2d 75 70 70 65 72 63 61 73 65 20 7b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 7d 0a 2e 74 65 78 74 2d 63 61 70 69 74 61 6c 69 7a 65 20 7b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 63 61 70 69 74 61 6c 69 7a 65 3b 0a 7d 0a 2e 74 65 78 74 2d 6d 75 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 39 36 39 37 37 3b 0a 7d 0a 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 63 31 63 61 3b 0a 7d 0a 61 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 39 30 39 37 3b 0a 7d 0a 2e 74 65 78 74 2d 73 75 63 63 65 73 Data Ascii: text-transform: lowercase;}.text-uppercase { text-transform: uppercase;}.text-capitalize { text-transform: capitalize;}.text-muted { color: #696977;}.text-primary { color: #00c1ca;}a.text-primary:hover { color: #009097;}.text-succes
2024-07-04 20:56:01 UTC	14480	IN	Data Raw: 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 30 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 39 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 37 35 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 38 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 36 36 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 37 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 35 38 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 36 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 35 30 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 35 20 7b 0a 20 20 20 20 72 69 67 68 Data Ascii: } .col-sm-pull-10 { right: 83.33333333%; } .col-sm-pull-9 { right: 75%; } .col-sm-pull-8 { right: 66.66666667%; } .col-sm-pull-7 { right: 58.33333333%; } .col-sm-pull-6 { right: 50%; } .col-sm-pull-5 { righ
2024-07-04 20:56:01 UTC	8688	IN	Data Raw: 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 34 70 78 20 30 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 70 78 20 5c 39 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 66 69 6c 65 22 5d 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 6e 67 65 22 5d 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 73 Data Ascii: ng: border-box; box-sizing: border-box;}input[type="radio"],input[type="checkbox"] { margin: 4px 0 0; margin-top: 1px \9; line-height: normal;}input[type="file"] { display: block;}input[type="range"] { display: block; width: 100%;}s
2024-07-04 20:56:01 UTC	5792	IN	Data Raw: 72 72 6f 72 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 39 32 63 32 32 3b 0a 7d 0a 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 6c 61 62 65 6c 20 7e 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 20 7b 0a 20 20 74 6f 70 3a 20 32 35 70 78 3b 0a 7d 0a 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 6c 61 62 65 6c 2e 73 72 2d 6f 6e 6c 79 20 7e 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 7d 0a 2e 68 65 6c 70 2d 62 6c 6f 63 6b 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 Data Ascii: rror .form-control-feedback { color: #b92c22;}.has-feedback label ~ .form-control-feedback { top: 25px;}.has-feedback label.sr-only ~ .form-control-feedback { top: 0;}.help-block { display: block; margin-top: 5px; margin-bottom: 10px;
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 23 33 39 38 34 33 39 3b 0a 7d 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 2c 0a 2e 6f 70 65 6e 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 2c 0a 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 Data Ascii: #398439;}.btn-success:active,.btn-success.active,.open > .dropdown-toggle.btn-success { background-image: none;}.btn-success.disabled,.btn-success[disabled],fieldset[disabled] .btn-success,.btn-success.disabled:hover,.btn-success[disabled]:hov
2024-07-04 20:56:01 UTC	7240	IN	Data Raw: 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 62 74 6e 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 62 74 6e 20 2b 20 2e 62 74 Data Ascii: radius: 0; border-top-left-radius: 0;}.input-group-addon:last-child { border-left: 0;}.input-group-btn { position: relative; font-size: 0; white-space: nowrap;}.input-group-btn > .btn { position: relative;}.input-group-btn > .btn + .bt
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 32 32 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 70 78 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 20 2e 69 63 6f 6e 2d 62 61 72 20 2b 20 2e 69 63 6f 6e 2d 62 61 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 20 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 2e 6e 61 76 62 61 72 2d 6e 61 76 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 2d 35 70 78 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 6c 69 20 3e 20 61 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 Data Ascii: 22px; height: 2px; border-radius: 1px;}.navbar-toggle .icon-bar + .icon-bar { margin-top: 4px;}@media (min-width: 992px) { .navbar-toggle { display: none; }}.navbar-nav { margin: 10px -5px;}.navbar-nav > li > a { padding-top: 10p
2024-07-04 20:56:01 UTC	6328	IN	Data Raw: 0a 7d 0a 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 32 32 2c 20 37 32 2c 20 37 32 2c 20 30 2e 31 29 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 31 38 2c 20 35 30 2c 20 37 38 2c 20 30 2e 31 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 39 32 63 32 32 3b 0a 7d 0a 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 20 68 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 30 36 2c 20 33 37 2c 20 36 35 2c 20 30 2e 31 29 3b 0a 7d 0a 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 65 32 32 31 61 3b 0a 7d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 Data Ascii: }.alert-danger { background-color: rgba(222, 72, 72, 0.1); border-color: rgba(218, 50, 78, 0.1); color: #b92c22;}.alert-danger hr { border-top-color: rgba(206, 37, 65, 0.1);}.alert-danger .alert-link { color: #8e221a;}@-webkit-keyframes
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 2e 64 69 73 61 62 6c 65 64 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 2c 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 2c 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 74 65 78 74 2c 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 2e Data Ascii: .disabled .list-group-item-heading,.list-group-item.disabled:hover .list-group-item-heading,.list-group-item.disabled:focus .list-group-item-heading { color: inherit;}.list-group-item.disabled .list-group-item-text,.list-group-item.disabled:hover .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	64732	18.239.94.5	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:00 UTC	599	OUT	GET /assets/application_styles-9297b9cdf5cc56e89ca7.css HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:01 UTC	4676	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 463163 Connection: close Date: Thu, 04 Jul 2024 20:56:00 GMT Last-Modified: Thu, 04 Jul 2024 18:16:03 GMT Cache-Control: public, max-age=315569520 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED] Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 304aca8444d8c10610191c5e033b348e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: Ybmavkm2pDZaaLZL1pJHA8axZMdoa0tNu1jkQme4Y8GEs4vZt-ctQA== Vary: Origin
2024-07-04 20:56:01 UTC	3958	IN	Data Raw: 68 74 6d 6c 2e 73 74 61 6e 64 61 6c 6f 6e 65 20 2e 68 69 64 65 2d 73 74 61 6e 64 61 6c 6f 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 42 6f 6f 74 73 74 72 61 70 20 28 30 2e 35 29 0a 20 2a 20 68 74 74 70 3a 2f 2f 61 64 64 79 6f 73 6d 61 6e 69 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 71 75 65 72 79 2d 75 69 2d 62 6f 6f 74 73 74 72 61 70 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 2d 20 32 30 31 33 2c 20 41 64 64 79 20 4f 73 6d 61 6e 69 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 0a 20 2a 20 50 6f 72 74 69 6f 6e 73 20 63 Data Ascii: html.standalone .hide-standalone { display: none;}/! jQuery UI Bootstrap (0.5) * http://addyosmani.github.com/jquery-ui-bootstrap * * Copyright 2012 - 2013, Addy Osmani * Dual licensed under the MIT or GPL Version 2 licenses. * * Portions c
2024-07-04 20:56:01 UTC	3206	IN	Data Raw: 63 74 2c 20 2e 75 69 2d 77 69 64 67 65 74 20 74 65 78 74 61 72 65 61 2c 20 2e 75 69 2d 77 69 64 67 65 74 20 62 75 74 74 6f 6e 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 20 7d 0a 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 7b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 61 61 61 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 20 75 72 6c 28 2f 61 73 73 65 74 73 2f 75 69 2d 62 67 5f 67 6c 61 73 73 5f 37 35 5f 66 66 66 66 66 66 5f 31 78 34 30 30 2d 39 37 62 31 30 61 39 38 61 36 61 62 33 65 64 37 63 36 36 38 66 65 30 Data Ascii: ct, .ui-widget textarea, .ui-widget button { font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 1em; }.ui-widget-content { border: 1px solid #aaaaaa; background: #ffffff url(/assets/ui-bg_glass_75_ffffff_1x400-97b10a98a6ab3ed7c668fe0
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 68 6c 69 67 68 74 20 20 7b 0a 0a 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 38 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 64 63 39 34 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 2d 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6b 68 74 6d 6c 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 66 72 6f 6d 28 23 66 63 65 65 63 31 29 2c 20 74 6f 28 23 65 65 64 63 39 34 29 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a Data Ascii: hlight { position: relative; margin-bottom: 18px; color: #404040; background-color: #eedc94; background-repeat: repeat-x; background-image: -khtml-gradient(linear, left top, left bottom, from(#fceec1), to(#eedc94)); background-image: -moz
2024-07-04 20:56:01 UTC	5336	IN	Data Raw: 64 38 2e 70 6e 67 29 20 35 30 25 20 35 30 25 20 72 65 70 65 61 74 2d 78 3b 20 0a 20 20 6f 70 61 63 69 74 79 3a 20 2e 33 30 3b 66 69 6c 74 65 72 3a 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 33 30 29 3b 20 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 20 0a 20 20 2d 6b 68 74 6d 6c 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 20 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 20 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 20 0a 7d 0a 0a 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 41 63 63 6f 72 64 69 6f 6e 20 31 2e 31 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2c 20 41 55 54 48 4f 52 53 2e 74 78 74 20 28 68 74 74 Data Ascii: d8.png) 50% 50% repeat-x; opacity: .30;filter:Alpha(Opacity=30); -moz-border-radius: 8px; -khtml-border-radius: 8px; -webkit-border-radius: 8px; border-radius: 8px; }/* * jQuery UI Accordion 1.10.0 * * Copyright 2013, AUTHORS.txt (htt
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6b 68 74 6d 6c 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 66 72 6f 6d 28 23 65 65 35 66 35 62 29 2c 20 74 6f 28 23 63 34 33 63 33 35 29 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 65 65 35 66 35 62 2c 20 23 63 34 33 63 33 35 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 65 65 35 66 35 62 2c 20 23 63 34 33 63 33 35 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 Data Ascii: round-image: -khtml-gradient(linear, left top, left bottom, from(#ee5f5b), to(#c43c35)); background-image: -moz-linear-gradient(top, #ee5f5b, #c43c35); background-image: -ms-linear-gradient(top, #ee5f5b, #c43c35); background-image: -webkit-gradient(
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 20 20 20 70 61 64 64 69 6e 67 3a 38 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 20 20 20 20 2d 6f 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 35 70 78 20 23 64 64 64 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 35 70 78 20 23 64 64 64 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 35 70 78 20 23 64 64 64 3b 0a 20 20 20 20 2f 2a 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 35 70 78 20 23 64 64 64 3b 2a 2f 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 23 66 66 66 Data Ascii: padding:8px; position:absolute; z-index:9999; max-width: 300px; -o-box-shadow: 0 0 5px #ddd; -moz-box-shadow: 0 0 5px #ddd; -webkit-box-shadow: 0 0 5px #ddd; /box-shadow: 0 2px 5px #ddd;/ box-shadow: inset 0 1px 0 #fff
2024-07-04 20:56:01 UTC	10069	IN	Data Raw: 0a 2e 62 75 74 74 6f 6e 2d 63 61 70 74 75 72 65 2d 63 6f 6e 74 61 69 6e 65 72 20 76 69 64 65 6f 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 7d 0a 2e 63 6f 6e 66 69 72 6d 2d 63 74 61 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 38 25 3b 0a 7d 0a 2e 63 68 61 72 74 2d 74 65 6d 70 6c 61 74 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 32 30 70 78 3b 0a 7d 0a 2e 6d 65 6e 75 2d 74 6f 67 67 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 20 20 64 69 73 70 6c Data Ascii: .button-capture-container video { position: absolute;}.confirm-cta-container { position: absolute; bottom: 8%;}.chart-template-overlay { z-index: 200; position: absolute; top: 20px;}.menu-toggle-container { margin-bottom: 5px; displ
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 69 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 72 6f 77 3b 0a 7d 0a 74 62 6f 64 79 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 63 6f 6c 6c 61 70 73 65 2e 69 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 72 6f 77 2d 67 72 6f 75 70 3b 0a 7d 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 63 37 36 33 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 32 38 2c 20 31 39 36 2c 20 31 32 36 2c 20 30 2e 33 29 3b 0a 7d 0a 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 63 37 36 33 64 3b 0a 7d 0a 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 Data Ascii: in { display: table-row;}tbody.list-group-item.collapse.in { display: table-row-group;}.list-group-item-success { color: #3c763d; background-color: rgba(128, 196, 126, 0.3);}a.list-group-item-success { color: #3c763d;}a.list-group-item-s
2024-07-04 20:56:01 UTC	603	IN	Data Raw: 70 78 3b 0a 7d 0a 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 20 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 5f 5f 6c 65 66 74 20 23 70 72 69 63 65 2d 6c 69 73 74 5f 5f 70 6f 70 75 70 2c 0a 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 20 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 5f 5f 6c 65 66 74 20 23 72 65 64 65 6d 70 74 69 6f 6e 5f 5f 70 6f 70 75 70 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 20 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 5f 5f 6c 65 66 74 20 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 Data Ascii: px;}.gift-card-purchase .gift-card-purchase__left #price-list__popup,.gift-card-purchase .gift-card-purchase__left #redemption__popup { text-decoration: underline; cursor: pointer;}.gift-card-purchase .gift-card-purchase__left .gift-card-purchase
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 74 61 6c 2d 74 69 74 6c 65 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 20 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 5f 5f 6c 65 66 74 20 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 5f 5f 73 75 62 74 6f 74 61 6c 20 2e 73 75 62 74 6f 74 61 6c 2d 61 6d 6f 75 6e 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 20 2e 67 69 66 74 2d 63 61 72 64 2d 6c 6f 67 69 6e 2d 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 30 70 78 3b 0a 7d 0a 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 63 68 61 73 65 20 2e 67 69 66 74 2d 63 61 72 64 2d 70 75 72 Data Ascii: tal-title { text-align: left;}.gift-card-purchase .gift-card-purchase__left .gift-card-purchase__subtotal .subtotal-amount { text-align: right;}.gift-card-purchase .gift-card-login--button { margin-top: 40px;}.gift-card-purchase .gift-card-pur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	64729	18.239.94.5	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:00 UTC	587	OUT	GET /assets/public-9297b9cdf5cc56e89ca7.css HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:01 UTC	4675	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 24620 Connection: close Date: Thu, 04 Jul 2024 20:56:00 GMT Last-Modified: Thu, 04 Jul 2024 18:16:03 GMT Cache-Control: public, max-age=315569520 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED] Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 602c4232f2a46df23c54a6eec1d7e048.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: JZdMbQnW4W3jCsGDRy1O3ZeuwDKiB2PpjLceG2wwvo-Nm1xI-LAVaw== Vary: Origin
2024-07-04 20:56:01 UTC	4269	IN	Data Raw: 2f 2a 2a 20 4c 69 73 74 20 67 72 6f 75 70 20 6f 76 65 72 72 69 64 65 73 20 2a 2f 0a 2f 2a 2a 20 42 61 64 67 65 20 6f 76 65 72 72 69 64 65 73 20 2a 2f 0a 2e 74 6f 67 67 6c 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 33 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 34 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 35 35 35 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b Data Ascii: /** List group overrides //* Badge overrides */.toggle { position: relative; display: inline-block; height: 23px; width: 42px; font-size: 12px; line-height: 1.5; color: #555555; border: 0; -webkit-appearance: none; cursor: pointer;
2024-07-04 20:56:01 UTC	14480	IN	Data Raw: 20 23 66 66 66 66 66 66 3b 0a 20 20 73 74 72 6f 6b 65 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 20 31 35 30 6d 73 20 6c 69 6e 65 61 72 3b 0a 7d 0a 0a 2f 2a 2a 20 4c 69 73 74 20 67 72 6f 75 70 20 6f 76 65 72 72 69 64 65 73 20 2a 2f 0a 2f 2a 2a 20 42 61 64 67 65 20 6f 76 65 72 72 69 64 65 73 20 2a 2f 0a 40 6b 65 79 66 72 61 6d 65 73 20 72 61 64 69 6f 20 7b 0a 20 20 30 25 2c 0a 20 20 31 37 2e 35 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 7d 0a 7d 0a 2e 73 74 79 6c 65 64 2d 72 61 64 69 6f 20 7b 0a 20 20 70 6f Data Ascii: #ffffff; stroke-opacity: 1; transition: stroke-dashoffset 150ms linear;}/** List group overrides //* Badge overrides */@keyframes radio { 0%, 17.5% { transform: scale(0); } 100% { transform: scale(1); }}.styled-radio { po
2024-07-04 20:56:01 UTC	5871	IN	Data Raw: 20 7b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 71 6c 2d 74 6f 6f 6c 62 61 72 20 2e 62 74 6e 20 7b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 71 6c 2d 74 6f 6f 6c 62 61 72 20 2e 74 6f 6f 6c 74 69 70 2d 6c 69 6e 6b 20 7b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 73 74 61 72 74 3b 0a 20 20 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 0a 7d 0a 2e 71 6c 2d 74 6f 6f 6c 62 61 72 20 2e 62 74 6e 2e 66 6f 72 6d 61 74 2d 62 74 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 74 72 61 6e 73 Data Ascii: { width: auto;}.ql-toolbar .btn { flex-grow: 1; text-transform: none;}.ql-toolbar .tooltip-link { flex-grow: 2; overflow-x: hidden; text-align: start; text-overflow: ellipsis;}.ql-toolbar .btn.format-btn { margin-right: 3px; trans

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	64731	18.239.94.5	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:00 UTC	594	OUT	GET /assets/vendor_public-9297b9cdf5cc56e89ca7.css HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:01 UTC	4676	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 306838 Connection: close Date: Thu, 04 Jul 2024 20:56:00 GMT Last-Modified: Thu, 04 Jul 2024 18:16:03 GMT Cache-Control: public, max-age=315569520 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED] Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 0ce4e0ab92519d33ff3c6cca42806b7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: 0lVo74abrVA6y7oXT57mPSq4ZitG3WRQR6dKfjkJ8A306BRIYgQOQA== Vary: Origin
2024-07-04 20:56:01 UTC	7164	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 36 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 34 30 30 2c 35 30 30 2c 36 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 0a 2e 72 65 61 63 74 2d 74 61 62 73 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 0a 2e 72 65 61 63 74 2d 74 61 62 73 5f 5f 74 61 Data Ascii: @import url(https://fonts.googleapis.com/css?family=Open+Sans:400,600,700&display=swap);@import url(https://fonts.googleapis.com/css?family=Roboto:400,500,600,700&display=swap);.react-tabs { -webkit-tap-highlight-color: transparent;}.react-tabs__ta
2024-07-04 20:56:01 UTC	8688	IN	Data Raw: 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 2d 70 72 65 76 69 6f 75 73 20 7b 0a 20 20 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 7d 0a 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 2d 70 72 65 76 69 6f 75 73 3a 68 6f 76 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 62 33 62 33 62 33 3b 0a 7d 0a 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 2d 70 72 65 76 69 6f 75 73 2d 2d 64 69 73 61 62 6c 65 64 2c 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 2d 70 72 65 76 69 Data Ascii: react-datepicker__navigation--previous { left: 10px; border-right-color: #ccc;}.react-datepicker__navigation--previous:hover { border-right-color: #b3b3b3;}.react-datepicker__navigation--previous--disabled, .react-datepicker__navigation--previ
2024-07-04 20:56:01 UTC	15928	IN	Data Raw: 75 61 72 74 65 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2d 2d 69 6e 2d 72 61 6e 67 65 2c 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 74 65 78 74 2d 2d 73 65 6c 65 63 74 65 64 2c 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 74 65 78 74 2d 2d 69 6e 2d 72 61 6e 67 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 33 72 65 6d 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 31 Data Ascii: uarter-text--in-selecting-range,.react-datepicker__quarter-text--in-range,.react-datepicker__year-text--selected,.react-datepicker__year-text--in-selecting-range,.react-datepicker__year-text--in-range { border-radius: 0.3rem; background-color: #21
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 6e 2d 63 68 61 6e 6e 65 6c 2d 75 69 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 7d 0a 0a 2e 73 65 6e 64 62 69 72 64 2d 63 72 65 61 74 65 2d 6f 70 65 6e 2d 63 68 61 6e 6e 65 6c 2d 75 69 5f 5f 70 72 6f 66 69 6c 65 2d 69 6e 70 75 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 62 6f 78 2d 73 Data Ascii: n-channel-ui { position: relative; display: inline-flex;}.sendbird-create-open-channel-ui__profile-input { position: relative; display: inline-flex; flex-direction: column; justify-content: flex-start; width: 100%; height: 100%; box-s
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 61 63 74 69 76 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 65 6e 64 62 69 72 64 2d 6c 69 67 68 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 32 30 30 29 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 74 68 65 6d 65 2d 2d 64 61 72 6b 20 2e 73 65 6e 64 62 69 72 64 2d 69 63 6f 6e 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 65 6e 64 62 69 72 64 2d 64 61 72 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 34 30 30 29 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 69 63 6f 6e 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 6e 6f 74 2d 61 6c 6c 6f 77 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 73 65 6e 64 62 69 Data Ascii: active { background-color: var(--sendbird-light-background-200);}.sendbird-theme--dark .sendbird-iconbutton:active { background-color: var(--sendbird-dark-background-400);}.sendbird-iconbutton:disabled { cursor: not-allowed !important;}.sendbi
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 2d 6f 6e 63 6f 6e 74 65 6e 74 2d 31 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 65 6e 64 62 69 72 64 2d 64 61 72 6b 2d 6f 6e 6c 69 67 68 74 2d 30 31 29 3b 0a 7d 0a 0a 2e 73 65 6e 64 62 69 72 64 2d 74 68 65 6d 65 2d 2d 6c 69 67 68 74 20 2e 73 65 6e 64 62 69 72 64 2d 6c 61 62 65 6c 2d 2d 63 6f 6c 6f 72 2d 6f 6e 63 6f 6e 74 65 6e 74 2d 32 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 65 6e 64 62 69 72 64 2d 6c 69 67 68 74 2d 6f 6e 64 61 72 6b 2d 30 32 29 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 74 68 65 6d 65 2d 2d 64 61 72 6b 20 2e 73 65 6e 64 62 69 72 64 2d 6c 61 62 65 6c 2d 2d 63 6f 6c 6f 72 2d 6f 6e 63 6f 6e 74 65 6e 74 2d 32 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 65 6e 64 62 69 72 64 2d 64 61 Data Ascii: -color-oncontent-1 { color: var(--sendbird-dark-onlight-01);}.sendbird-theme--light .sendbird-label--color-oncontent-2 { color: var(--sendbird-light-ondark-02);}.sendbird-theme--dark .sendbird-label--color-oncontent-2 { color: var(--sendbird-da
2024-07-04 20:56:01 UTC	9224	IN	Data Raw: 64 2d 61 76 61 74 61 72 20 2e 73 65 6e 64 62 69 72 64 2d 61 76 61 74 61 72 2d 2d 69 6e 6e 65 72 5f 5f 74 68 72 65 65 2d 63 68 69 6c 64 2d 2d 6c 6f 77 65 72 20 2e 73 65 6e 64 62 69 72 64 2d 61 76 61 74 61 72 2d 69 6d 67 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 32 33 25 2c 20 2d 32 33 25 29 20 73 63 61 6c 65 28 30 2e 35 29 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 61 76 61 74 61 72 20 2e 73 65 6e 64 62 69 72 64 2d 61 76 61 74 61 72 2d 2d 69 6e 6e 65 72 5f 5f 66 6f 75 72 2d 63 68 69 6c 64 20 2e 73 65 6e 64 62 69 72 64 2d 61 76 61 74 61 72 2d 69 6d 67 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 37 37 25 2c 20 2d 37 Data Ascii: d-avatar .sendbird-avatar--inner__three-child--lower .sendbird-avatar-img:last-child { transform: translate(-23%, -23%) scale(0.5);}.sendbird-avatar .sendbird-avatar--inner__four-child .sendbird-avatar-img:first-child { transform: translate(-77%, -7
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 72 64 2d 73 65 70 61 72 61 74 6f 72 5f 5f 74 65 78 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 31 36 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 6d 65 73 73 61 67 65 2d 69 6e 70 75 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 6d 65 73 73 61 67 65 2d 69 6e 70 75 74 20 2e 73 65 6e 64 62 69 72 64 2d 6d 65 73 73 61 67 65 2d 69 6e 70 75 74 2d 2d 74 65 78 74 61 72 65 61 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a Data Ascii: rd-separator__text { margin: 0px 16px; display: flex; white-space: nowrap;}.sendbird-message-input { display: inline-block; width: 100%; position: relative;}.sendbird-message-input .sendbird-message-input--textarea { position: relative;
2024-07-04 20:56:01 UTC	12792	IN	Data Raw: 73 73 61 67 65 2d 73 74 61 74 75 73 20 2e 73 65 6e 64 62 69 72 64 2d 6d 65 73 73 61 67 65 2d 73 74 61 74 75 73 5f 5f 69 63 6f 6e 2e 68 69 64 65 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 6d 65 73 73 61 67 65 2d 73 74 61 74 75 73 20 2e 73 65 6e 64 62 69 72 64 2d 6d 65 73 73 61 67 65 2d 73 74 61 74 75 73 5f 5f 74 65 78 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 70 78 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 6d 65 73 73 61 67 65 2d 73 74 61 74 75 73 20 2e 73 65 6e 64 62 69 72 64 2d 6d 65 73 73 61 67 65 2d 73 74 61 74 75 73 5f 5f 74 65 Data Ascii: ssage-status .sendbird-message-status__icon.hide-icon { display: none;}.sendbird-message-status .sendbird-message-status__text { position: relative; display: inline-block; margin-left: 4px;}.sendbird-message-status .sendbird-message-status__te
2024-07-04 20:56:01 UTC	3136	IN	Data Raw: 20 32 34 70 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 74 68 65 6d 65 2d 2d 6c 69 67 68 74 20 2e 73 65 6e 64 62 69 72 64 5f 5f 75 73 65 72 2d 70 72 6f 66 69 6c 65 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 76 61 72 28 2d 2d 73 65 6e 64 62 69 72 64 2d 6c 69 67 68 74 2d 73 68 61 64 6f 77 2d 30 32 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 65 6e 64 62 69 72 64 2d 6c 69 67 68 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 35 30 29 3b 0a 7d 0a 2e 73 65 6e 64 62 69 72 64 2d 74 68 65 6d 65 2d 2d 64 61 72 6b 20 2e 73 65 6e 64 62 69 72 64 5f 5f 75 73 65 72 2d 70 72 6f 66 69 Data Ascii: 24px; box-sizing: border-box; text-align: center;}.sendbird-theme--light .sendbird__user-profile { box-shadow: var(--sendbird-light-shadow-02); background-color: var(--sendbird-light-background-50);}.sendbird-theme--dark .sendbird__user-profi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	64728	18.239.94.5	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:00 UTC	583	OUT	GET /assets/core_js_polyfills-277f54535c98b71ea847.js HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:00 UTC	4702	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 180067 Connection: close Date: Wed, 26 Jun 2024 16:23:20 GMT Last-Modified: Wed, 26 Jun 2024 15:08:00 GMT Cache-Control: public, max-age=315569520 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED] Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 7cbec639ed3557aac04425ec5a5f177a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: vZsZm8tNaT9TJJs_H3_qEj1xKpc_wrJLI-Sd6CHcNQIkziA4c8JZ1A== Age: 707560 Vary: Origin
2024-07-04 20:56:00 UTC	6396	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 37 30 35 30 38 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 38 35 31 34 39 30 29 2c 6f 3d 65 28 32 34 39 36 34 39 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 69 28 6f 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 34 36 34 34 33 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 39 35 37 31 39 36 29 2c 6f 3d 65 28 32 34 39 36 34 39 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f Data Ascii: !function(){"use strict";var t={705088:function(t,r,e){var n=e(851490),o=e(249649),i=TypeError;t.exports=function(t){if(n(t))return t;throw new i(o(t)+" is not a function")}},464433:function(t,r,e){var n=e(957196),o=e(249649),i=TypeError;t.exports=functio
2024-07-04 20:56:00 UTC	6396	IN	Data Raw: 28 74 2c 72 2c 65 29 7b 68 28 74 68 69 73 2c 44 29 2c 68 28 74 2c 5f 29 3b 76 61 72 20 6e 3d 6a 28 74 29 2c 6f 3d 6e 2e 62 79 74 65 4c 65 6e 67 74 68 2c 61 3d 70 28 72 29 3b 69 66 28 61 3c 30 7c 7c 61 3e 6f 29 74 68 72 6f 77 20 6e 65 77 20 7a 28 22 57 72 6f 6e 67 20 6f 66 66 73 65 74 22 29 3b 69 66 28 61 2b 28 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 6f 2d 61 3a 76 28 65 29 29 3e 6f 29 74 68 72 6f 77 20 6e 65 77 20 7a 28 22 57 72 6f 6e 67 20 6c 65 6e 67 74 68 22 29 3b 43 28 74 68 69 73 2c 7b 74 79 70 65 3a 4d 2c 62 75 66 66 65 72 3a 74 2c 62 79 74 65 4c 65 6e 67 74 68 3a 65 2c 62 79 74 65 4f 66 66 73 65 74 3a 61 2c 62 79 74 65 73 3a 6e 2e 62 79 74 65 73 7d 29 2c 69 7c 7c 28 74 68 69 73 2e 62 75 66 66 65 72 3d 74 2c 74 68 69 73 2e 62 79 74 65 4c 65 6e 67 74 Data Ascii: (t,r,e){h(this,D),h(t,_);var n=j(t),o=n.byteLength,a=p(r);if(a<0\|\|a>o)throw new z("Wrong offset");if(a+(e=void 0===e?o-a:v(e))>o)throw new z("Wrong length");C(this,{type:M,buffer:t,byteLength:e,byteOffset:a,bytes:n.bytes}),i\|\|(this.buffer=t,this.byteLengt
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 7c 7c 69 28 72 29 26 26 6e 75 6c 6c 3d 3d 3d 28 72 3d 72 5b 61 5d 29 29 26 26 28 72 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 3f 75 3a 72 7d 7d 2c 38 30 33 34 33 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 31 36 38 37 34 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 28 74 29 29 28 30 3d 3d 3d 72 3f 30 3a 72 29 7d 7d 2c 36 35 31 31 36 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 39 39 32 32 39 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 28 74 29 2c 6f 3d 6e 65 77 20 72 28 65 29 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 6f 5b 69 5d 3d 74 Data Ascii: \|\|i(r)&&null===(r=r[a]))&&(r=void 0)),void 0===r?u:r}},803431:function(t,r,e){var n=e(168748);t.exports=function(t,r){return new(n(t))(0===r?0:r)}},651160:function(t,r,e){var n=e(992297);t.exports=function(t,r){for(var e=n(t),o=new r(e),i=0;i<e;i++)o[i]=t
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 62 69 6e 64 28 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 74 6f 74 79 70 65 22 29 7d 29 29 7d 2c 37 32 32 30 36 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 31 33 31 37 37 36 29 2c 6f 3d 65 28 37 30 35 30 38 38 29 2c 69 3d 65 28 35 32 37 36 30 29 2c 61 3d 65 28 36 38 35 38 37 30 29 2c 75 3d 65 28 33 30 39 35 39 35 29 2c 63 3d 65 28 39 38 34 34 32 29 2c 66 3d 46 75 6e 63 74 69 6f 6e 2c 73 3d 6e 28 5b 5d 2e 63 6f 6e 63 61 74 29 2c 6c 3d 6e 28 5b 5d 2e 6a 6f 69 6e 29 2c 68 3d 7b 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 69 66 28 21 61 Data Ascii: (){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")}))},722068:function(t,r,e){var n=e(131776),o=e(705088),i=e(52760),a=e(685870),u=e(309595),c=e(98442),f=Function,s=n([].concat),l=n([].join),h={},p=function(t,r,e){if(!a
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 31 30 29 29 7d 3a 66 7d 2c 37 33 32 38 38 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 37 35 37 34 36 33 29 2c 6f 3d 65 28 31 33 31 37 37 36 29 2c 69 3d 65 28 34 37 37 36 37 31 29 2c 61 3d 65 28 38 32 38 31 34 29 2c 75 3d 65 28 33 38 35 36 31 38 29 2c 63 3d 65 28 36 33 30 36 37 39 29 2c 66 3d 65 28 38 37 32 38 32 35 29 2c 73 3d 65 28 31 30 36 34 37 30 29 2c 6c 3d 65 28 37 32 38 34 35 37 29 2c 68 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2c 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 76 3d 6f 28 5b 5d 2e 63 6f 6e 63 61 74 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 68 7c 7c 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 26 26 31 21 3d 3d 68 28 7b 62 3a 31 7d 2c 68 28 70 28 7b 7d 2c 22 61 22 2c Data Ascii: 10))}:f},732882:function(t,r,e){var n=e(757463),o=e(131776),i=e(477671),a=e(82814),u=e(385618),c=e(630679),f=e(872825),s=e(106470),l=e(728457),h=Object.assign,p=Object.defineProperty,v=o([].concat);t.exports=!h\|\|a((function(){if(n&&1!==h({b:1},h(p({},"a",
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 70 72 6f 63 65 73 73 2c 45 3d 75 2e 44 69 73 70 61 74 63 68 2c 41 3d 75 2e 46 75 6e 63 74 69 6f 6e 2c 53 3d 75 2e 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 2c 4f 3d 75 2e 53 74 72 69 6e 67 2c 52 3d 30 2c 54 3d 7b 7d 2c 49 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 3b 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 75 2e 6c 6f 63 61 74 69 6f 6e 7d 29 29 3b 76 61 72 20 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6c 28 54 2c 74 29 29 7b 76 61 72 20 72 3d 54 5b 74 5d 3b 64 65 6c 65 74 65 20 54 5b 74 5d 2c 72 28 29 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 28 74 29 7d 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4d 28 74 2e 64 61 74 61 29 7d 2c 6b 3d 66 75 6e 63 74 Data Ascii: process,E=u.Dispatch,A=u.Function,S=u.MessageChannel,O=u.String,R=0,T={},I="onreadystatechange";h((function(){n=u.location}));var M=function(t){if(l(T,t)){var r=T[t];delete T[t],r()}},P=function(t){return function(){M(t)}},j=function(t){M(t.data)},k=funct
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 64 3a 69 21 3d 3d 4f 62 6a 65 63 74 7c 7c 21 75 28 22 6a 6f 69 6e 22 2c 22 2c 22 29 7d 2c 7b 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 28 61 28 74 68 69 73 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 2c 22 3a 74 29 7d 7d 29 7d 2c 38 34 34 31 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 35 34 33 31 39 32 29 2c 6f 3d 65 28 35 30 36 35 39 32 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 6f 21 3d 3d 5b 5d 2e 6c 61 73 74 49 6e 64 65 78 4f 66 7d 2c 7b 6c 61 73 74 49 6e 64 65 78 4f 66 3a 6f 7d 29 7d 2c 32 37 32 39 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 35 34 33 31 39 32 29 2c 6f 3d 65 28 39 34 Data Ascii: d:i!==Object\|\|!u("join",",")},{join:function(t){return c(a(this),void 0===t?",":t)}})},844116:function(t,r,e){var n=e(543192),o=e(506592);n({target:"Array",proto:!0,forced:o!==[].lastIndexOf},{lastIndexOf:o})},272939:function(t,r,e){var n=e(543192),o=e(94
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 7d 29 7d 2c 39 39 37 39 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 65 28 35 34 33 31 39 32 29 28 7b 74 61 72 67 65 74 3a 22 4e 75 6d 62 65 72 22 2c 73 74 61 74 3a 21 30 2c 6e 6f 6e 43 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 6e 6f 6e 57 72 69 74 61 62 6c 65 3a 21 30 7d 2c 7b 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 3a 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 29 7d 2c 37 34 32 37 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 65 28 35 34 33 31 39 32 29 28 7b 74 61 72 67 65 74 3a 22 4e 75 6d 62 65 72 22 2c 73 74 61 74 3a 21 30 2c 6e 6f 6e 43 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 6e 6f 6e 57 72 69 74 61 62 6c 65 3a 21 30 7d 2c 7b 4d 49 4e 5f 53 41 46 45 Data Ascii: =9007199254740991}})},997956:function(t,r,e){e(543192)({target:"Number",stat:!0,nonConfigurable:!0,nonWritable:!0},{MAX_SAFE_INTEGER:9007199254740991})},742709:function(t,r,e){e(543192)({target:"Number",stat:!0,nonConfigurable:!0,nonWritable:!0},{MIN_SAFE
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 34 33 31 39 32 29 2c 6f 3d 65 28 37 35 37 34 36 33 29 2c 69 3d 65 28 36 34 32 33 37 30 29 2c 61 3d 65 28 38 31 33 37 38 31 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 52 65 66 6c 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 73 68 61 6d 3a 21 6f 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 66 28 69 28 74 29 2c 72 29 7d 7d 29 7d 2c 38 31 38 37 30 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 35 34 33 31 39 32 29 2c 6f 3d 65 28 36 34 32 33 37 30 29 2c 69 3d 65 28 35 30 37 31 33 30 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 52 65 66 6c 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 73 68 61 6d 3a 21 65 28 37 37 34 37 30 36 29 7d 2c 7b 67 65 74 Data Ascii: 43192),o=e(757463),i=e(642370),a=e(813781);n({target:"Reflect",stat:!0,sham:!o},{getOwnPropertyDescriptor:function(t,r){return a.f(i(t),r)}})},818700:function(t,r,e){var n=e(543192),o=e(642370),i=e(507130);n({target:"Reflect",stat:!0,sham:!e(774706)},{get
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 34 33 35 33 29 2c 68 3d 65 28 36 37 36 39 33 39 29 2c 70 3d 69 28 22 22 2e 73 6c 69 63 65 29 2c 76 3d 4d 61 74 68 2e 6d 69 6e 2c 67 3d 6c 28 22 73 74 61 72 74 73 57 69 74 68 22 29 3b 6f 28 7b 74 61 72 67 65 74 3a 22 53 74 72 69 6e 67 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 21 21 28 68 7c 7c 67 7c 7c 28 6e 3d 61 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 21 6e 7c 7c 6e 2e 77 72 69 74 61 62 6c 65 29 29 26 26 21 67 7d 2c 7b 73 74 61 72 74 73 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 63 28 73 28 74 68 69 73 29 29 3b 66 28 74 29 3b 76 61 72 20 65 3d 75 28 76 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 Data Ascii: 4353),h=e(676939),p=i("".slice),v=Math.min,g=l("startsWith");o({target:"String",proto:!0,forced:!!(h\|\|g\|\|(n=a(String.prototype,"startsWith"),!n\|\|n.writable))&&!g},{startsWith:function(t){var r=c(s(this));f(t);var e=u(v(arguments.length>1?arguments[1]:void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	64727	18.239.94.5	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:00 UTC	576	OUT	GET /assets/monitoring-eb308bb7edb8313e9316.js HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:00 UTC	4703	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1692127 Connection: close Date: Wed, 26 Jun 2024 16:23:20 GMT Last-Modified: Wed, 26 Jun 2024 15:08:00 GMT Cache-Control: public, max-age=315569520 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED] Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 b5831686bbaffa69458853f1db0eca2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: 0HdlYkRzfwhFSkzno0jPpEDZdIzFRTg0vHl5DxZMcIi3-rAGimUB6A== Age: 707560 Vary: Origin
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 2d 65 62 33 30 38 62 62 37 65 64 62 38 33 31 33 65 39 33 31 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 31 30 36 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 30 30 33 36 33 29 2c 72 3d 6e 28 37 33 37 38 32 36 29 2c 69 3d 6e 28 36 37 36 34 35 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 Data Ascii: /! For license information please see monitoring-eb308bb7edb8313e9316.js.LICENSE.txt /!function(){var e={310653:function(e,t,n){"use strict";n.d(t,{r:function(){return c},y:function(){return p}});var o=n(800363),r=n(737826),i=n(67645);function c(e){var
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 74 61 72 74 43 6c 6f 63 6b 73 3a 28 30 2c 72 2e 24 49 29 28 29 7d 29 7d 66 69 6e 61 6c 6c 79 7b 70 3d 21 31 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 7d 7d 2c 36 34 36 38 32 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 38 38 32 30 30 36 29 2c 72 3d 6e 28 37 33 37 38 32 36 29 2c 69 3d 6e 28 39 33 35 31 29 2c 63 3d 6e 28 36 33 34 32 38 38 29 2c 70 3d 6e 28 36 37 36 34 35 29 2c 61 3d 6e 28 36 39 39 36 39 39 29 2c 62 3d 7b 69 6e 74 65 72 76 65 6e 74 69 6f 6e 3a 22 69 6e 74 65 72 76 65 6e 74 69 6f 6e 22 2c 64 65 70 72 65 63 61 74 69 Data Ascii: tartClocks:(0,r.$I)()})}finally{p=!1}}return!0}}}},646822:function(e,t,n){"use strict";n.d(t,{_:function(){return b},v:function(){return M}});var o=n(882006),r=n(737826),i=n(9351),c=n(634288),p=n(67645),a=n(699699),b={intervention:"intervention",deprecati
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 6e 74 73 5b 74 5d 3b 76 61 72 20 6e 3d 6f 3f 4d 28 72 29 3a 72 3b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 28 65 2c 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 2c 6e 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 7a 28 72 29 2c 6f 29 74 72 79 7b 6f 28 72 29 7d 63 61 74 63 68 28 72 29 7b 7a 28 72 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d Data Ascii: nts[t];var n=o?M(r):r;return n.apply(this,e)}}function M(e){return function(){return s(e,this,arguments)}}function s(e,t,n){try{return e.apply(t,n)}catch(r){if(z(r),o)try{o(r)}catch(r){z(r)}}}function z(){for(var e=[],t=0;t<arguments.length;t++)e[t]=argum
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 2c 70 3d 6e 28 32 35 34 37 38 34 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 74 68 69 73 3b 74 68 69 73 2e 72 65 71 75 65 73 74 3d 65 2c 74 68 69 73 2e 66 6c 75 73 68 43 6f 6e 74 72 6f 6c 6c 65 72 3d 74 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 42 79 74 65 73 4c 69 6d 69 74 3d 6e 2c 74 68 69 73 2e 70 75 73 68 4f 6e 6c 79 42 75 66 66 65 72 3d 5b 5d 2c 74 68 69 73 2e 75 70 73 65 72 74 42 75 66 66 65 72 3d 7b 7d 2c 74 68 69 73 2e 66 6c 75 73 68 53 75 62 73 63 72 69 70 74 69 6f 6e 3d 74 68 69 73 2e 66 6c 75 73 68 43 6f 6e 74 72 6f 6c 6c 65 72 2e 66 6c 75 73 68 4f 62 73 65 72 76 61 62 6c 65 2e 73 75 62 73 63 72 69 62 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 66 Data Ascii: ,p=n(254784),a=function(){function e(e,t,n){var o=this;this.request=e,this.flushController=t,this.messageBytesLimit=n,this.pushOnlyBuffer=[],this.upsertBuffer={},this.flushSubscription=this.flushController.flushObservable.subscribe((function(e){return o.f
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 30 2c 65 2e 74 72 61 63 65 53 61 6d 70 6c 65 64 3d 76 6f 69 64 20 30 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 2c 6e 2c 6f 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 5f 28 29 26 26 6e 2e 66 69 6e 64 54 72 61 63 6b 65 64 53 65 73 73 69 6f 6e 28 29 29 7b 76 61 72 20 72 2c 69 2c 63 2c 70 2c 61 2c 62 3d 28 30 2c 66 2e 73 45 29 28 65 2e 61 6c 6c 6f 77 65 64 54 72 61 63 69 6e 67 55 72 6c 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 28 5b 65 2e 6d 61 74 63 68 5d 2c 74 2e 75 72 6c 2c 21 30 29 7d 29 29 3b 69 66 28 62 29 74 2e 74 72 61 63 65 49 64 3d 6e 65 77 20 4e 2c 74 2e 73 70 61 6e 49 64 3d 6e 65 77 20 4e 2c 74 2e 74 72 61 63 65 53 61 6d 70 6c 65 64 3d 21 28 30 2c 71 2e 68 6a 29 28 65 2e 74 72 61 63 65 53 61 6d 70 6c 65 52 61 74 65 Data Ascii: 0,e.traceSampled=void 0)}function L(e,t,n,o){if(void 0!==_()&&n.findTrackedSession()){var r,i,c,p,a,b=(0,f.sE)(e.allowedTracingUrls,(function(e){return v([e.match],t.url,!0)}));if(b)t.traceId=new N,t.spanId=new N,t.traceSampled=!(0,q.hj)(e.traceSampleRate
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 6c 65 64 3a 72 2e 74 72 61 63 65 53 61 6d 70 6c 65 64 2c 74 79 70 65 3a 22 66 65 74 63 68 22 2c 75 72 6c 3a 72 2e 75 72 6c 2c 72 65 73 70 6f 6e 73 65 3a 72 2e 72 65 73 70 6f 6e 73 65 2c 69 6e 69 74 3a 72 2e 69 6e 69 74 2c 69 6e 70 75 74 3a 72 2e 69 6e 70 75 74 7d 29 7d 29 29 7d 7d 29 29 7d 28 65 2c 74 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 29 7b 76 61 72 20 65 3d 77 65 3b 72 65 74 75 72 6e 20 77 65 2b 3d 31 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 29 7b 76 61 72 20 74 3d 65 2e 6c 69 66 65 43 79 63 6c 65 2c 6e 3d 65 2e 69 73 43 68 69 6c 64 45 76 65 6e 74 2c 6f 3d 65 2e 6f 6e 43 68 61 6e 67 65 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 63 2e 5a 3a 6f 2c 69 3d 7b 65 72 72 6f 72 43 6f 75 6e 74 3a 30 2c 6c 6f 6e 67 54 61 73 6b 43 6f 75 6e 74 3a Data Ascii: led:r.traceSampled,type:"fetch",url:r.url,response:r.response,init:r.init,input:r.input})}))}}))}(e,t,o)}function Se(){var e=we;return we+=1,e}function ke(e){var t=e.lifeCycle,n=e.isChildEvent,o=e.onChange,r=void 0===o?c.Z:o,i={errorCount:0,longTaskCount:
2024-07-04 20:56:00 UTC	16384	IN	Data Raw: 69 74 79 63 68 61 6e 67 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 70 61 67 65 68 69 64 65 22 21 3d 3d 65 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 28 6e 3d 65 2e 74 69 6d 65 53 74 61 6d 70 2c 6f 28 29 29 7d 29 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 2e 73 74 6f 70 29 2c 7b 67 65 74 20 74 69 6d 65 53 74 61 6d 70 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 75 6c 6c 3d 3d 6f 7c 7c 6f 28 29 7d 7d 7d 28 74 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 73 74 6f 70 3a 65 2e 73 75 62 73 63 72 69 62 65 28 30 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 28 30 2c 66 2e Data Ascii: itychange"],(function(e){"pagehide"!==e.type&&"hidden"!==document.visibilityState\|\|(n=e.timeStamp,o())}),{capture:!0}).stop),{get timeStamp(){return n},stop:function(){null==o\|\|o()}}}(t),p=function(e,t,n){return{stop:e.subscribe(0,(function(e){var o=(0,f.
2024-07-04 20:56:01 UTC	11206	IN	Data Raw: 2a 22 2c 66 6f 3d 7b 49 4e 50 55 54 3a 21 30 2c 4f 55 54 50 55 54 3a 21 30 2c 54 45 58 54 41 52 45 41 3a 21 30 2c 53 45 4c 45 43 54 3a 21 30 2c 4f 50 54 49 4f 4e 3a 21 30 2c 44 41 54 41 4c 49 53 54 3a 21 30 2c 4f 50 54 47 52 4f 55 50 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 71 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6f 65 28 65 29 2c 6f 3d 6e 3f 71 6f 28 6e 2c 74 29 3a 74 3b 72 65 74 75 72 6e 20 68 6f 28 57 6f 28 65 29 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 68 6f 28 65 2c 74 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 4f 6f 2e 48 49 44 44 45 4e 3a 63 61 73 65 20 4f 6f 2e 49 47 4e 4f 52 45 3a 72 65 74 75 72 6e 20 74 7d 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 4f 6f 2e 41 4c 4c 4f 57 3a 63 61 73 65 20 4f 6f 2e 4d 41 53 4b 3a 63 61 73 65 20 4f 6f Data Ascii: *",fo={INPUT:!0,OUTPUT:!0,TEXTAREA:!0,SELECT:!0,OPTION:!0,DATALIST:!0,OPTGROUP:!0};function qo(e,t){var n=oe(e),o=n?qo(n,t):t;return ho(Wo(e),o)}function ho(e,t){switch(t){case Oo.HIDDEN:case Oo.IGNORE:return t}switch(e){case Oo.ALLOW:case Oo.MASK:case Oo
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 4e 5f 46 4f 4c 4c 4f 57 49 4e 47 3f 31 3a 6e 26 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 50 4f 53 49 54 49 4f 4e 5f 50 52 45 43 45 44 49 4e 47 3f 2d 31 3a 30 7d 29 29 3b 76 61 72 20 62 3b 66 6f 72 28 76 61 72 20 4d 3d 6e 65 77 20 53 65 74 2c 73 3d 5b 5d 2c 7a 3d 30 2c 4f 3d 61 3b 7a 3c 4f 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 7b 76 61 72 20 75 3d 4f 5b 7a 5d 3b 69 66 28 21 71 28 75 29 29 7b 76 61 72 20 64 3d 71 6f 28 75 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 74 2e 64 65 66 61 75 6c 74 50 72 69 76 61 63 79 4c 65 76 65 6c 29 3b 69 66 28 64 21 3d 3d 4f 6f 2e 48 49 44 44 45 4e 26 26 64 21 3d 3d 4f 6f 2e 49 47 4e 4f 52 45 29 7b 76 61 72 20 41 3d 44 6f 28 75 2c 7b 73 65 72 69 61 6c 69 7a 65 64 4e 6f 64 65 49 64 73 3a 4d 2c 70 61 72 65 6e 74 4e 6f 64 65 50 72 69 76 Data Ascii: N_FOLLOWING?1:n&Node.DOCUMENT_POSITION_PRECEDING?-1:0}));var b;for(var M=new Set,s=[],z=0,O=a;z<O.length;z++){var u=O[z];if(!q(u)){var d=qo(u.parentNode,t.defaultPrivacyLevel);if(d!==Oo.HIDDEN&&d!==Oo.IGNORE){var A=Do(u,{serializedNodeIds:M,parentNodePriv
2024-07-04 20:56:01 UTC	16384	IN	Data Raw: 2c 65 7d 28 74 29 2c 69 3d 74 2e 6f 70 74 5f 6c 65 6e 2b 33 2b 37 3e 3e 3e 33 2c 28 73 3d 74 2e 73 74 61 74 69 63 5f 6c 65 6e 2b 33 2b 37 3e 3e 3e 33 29 3c 3d 69 26 26 28 69 3d 73 29 29 3a 69 3d 73 3d 6e 2b 35 2c 6e 2b 34 3c 3d 69 26 26 2d 31 21 3d 3d 65 3f 4f 28 74 2c 65 2c 6e 2c 72 29 3a 34 3d 3d 3d 74 2e 73 74 72 61 74 65 67 79 7c 7c 73 3d 3d 3d 69 3f 28 7a 28 74 2c 32 2b 28 72 3f 31 3a 30 29 2c 33 29 2c 4c 28 74 2c 6f 2c 64 29 29 3a 28 7a 28 74 2c 34 2b 28 72 3f 31 3a 30 29 2c 33 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 7a 28 74 2c 65 2d 32 35 37 2c 35 29 2c 7a 28 74 2c 61 2d 31 2c 35 29 2c 7a 28 74 2c 6e 2d 34 2c 34 29 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 7a 28 74 2c 74 2e 62 6c 5f 74 72 65 65 5b 32 Data Ascii: ,e}(t),i=t.opt_len+3+7>>>3,(s=t.static_len+3+7>>>3)<=i&&(i=s)):i=s=n+5,n+4<=i&&-1!==e?O(t,e,n,r):4===t.strategy\|\|s===i?(z(t,2+(r?1:0),3),L(t,o,d)):(z(t,4+(r?1:0),3),function(t,e,a,n){var r;for(z(t,e-257,5),z(t,a-1,5),z(t,n-4,4),r=0;r<n;r++)z(t,t.bl_tree[2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	64734	216.239.32.181	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:00 UTC	1197	OUT	POST /g/collect?v=2&tid=G-7KWN4PCCYC&gtm=45je4730v9100741783za200zb9186823250&_p=1720126553392&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=1060836916.1720126517&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1720126520&sct=1&seg=1&dl=https%3A%2F%2Flivewiseinc.com%2Fblog&dt=Blog%20Posts%20(page%201)%20%7C%20LiveWise%20Associates&en=page_view&_ee=1&tfd=7636&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://livewiseinc.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://livewiseinc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:00 UTC	449	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://livewiseinc.com Date: Thu, 04 Jul 2024 20:56:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	64737	18.239.94.5	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:02 UTC	840	OUT	GET /pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC9pbWFnZS9waG90by8yMDIyLTA2LTIwLzIxMjIyMy8zZDEwMDlkOS04OWEyLTRjMzgtYWQ0ZS01YmI0OWYyY2FlZDAvTElWRVdJU0UgTE9HTy1DT01QUkVTU0VELkpQRyJdLFsicCIsInRodW1iIiwiNjAweDYwMD4iXV0?sha=780eb076f58aee50&for=livewise.janeapp.com HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:02 UTC	782	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 24533 Connection: close Date: Sat, 15 Jun 2024 22:30:12 GMT Content-Disposition: filename="LIVEWISE LOGO-COMPRESSED.JPG" Cache-Control: public, max-age=31536000 ETag: "2a8e9d3f0b7d57e5a37cdb446884bdff8535293a" X-Request-Id: 41757eed-d4ef-4bb3-8d44-adce283e3980 X-Runtime: 0.336481 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin X-Cache: Hit from cloudfront Via: 1.1 e07bd6386c24c4e98bde2dc8881304ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: h11gzow3cfMdl9tS47isk3j3wZqJfAsNVIAXopuSdxaa149G4a-10g== Age: 1635950 Vary: Origin
2024-07-04 20:56:02 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 bc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 07 80 a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a Data Ascii: JFIFHHExifMM*JR(iZHH02210100C
2024-07-04 20:56:02 UTC	6002	IN	Data Raw: 5b 7f b4 1b bf 4d 9c 35 b5 3f 6e d7 b6 52 dd 73 43 29 e6 b0 60 0b 6e 26 a5 b8 5e eb 65 bc d0 ca c6 43 4e fe 9f 95 59 1c ce 72 f3 ba 36 b3 a9 ab df f9 37 50 2c 87 90 f9 79 0e 53 e8 cb 2b b2 de 18 92 27 61 dc 31 47 41 3e df c2 99 90 b7 a6 77 9d d2 2b d7 e5 36 c9 86 f7 a9 e2 32 06 1d de fc a9 fe b2 88 79 af ef 9f cc 6f 4a 2e 1e b5 21 7b c7 76 7c a8 54 93 30 38 6f eb 42 f9 9e f8 d6 f3 6d c9 4a aa 8b 75 7d fe b6 a6 96 5f ab d6 e6 f4 91 c9 50 f7 31 db 2d 46 e9 bb 55 17 65 eb eb 02 37 d3 b4 be b6 0a fb 50 61 6f c0 f4 bf 42 c2 a3 5d cc cd 6e a2 2a fd 83 aa 97 ab fc 60 b6 ff 00 68 2d db 85 a9 2a 28 32 d7 0f d0 d5 c4 b0 d5 53 db 69 e2 9a 35 54 55 63 db 13 5a e4 ea ea ea 54 50 2b 41 c6 56 aa a6 87 8a b6 08 ac a3 9e 4a 5a b8 32 f6 86 48 66 85 ea c7 c6 f6 d7 56 2b 5c Data Ascii: [M5?nRsC)`n&^eCNYr67P,yS+'a1GA>w+62yoJ.!{v\|T08oBmJu}_P1-FUe7PaoB]n`h-(2Si5TUcZTP+AVJZ2HfV+\
2024-07-04 20:56:02 UTC	2147	IN	Data Raw: 09 93 78 7f 20 34 89 81 b2 8f 0c cc fa cb 6e 1e b7 f4 2f ac 96 34 64 95 93 bd cb 24 f3 b9 13 b1 64 95 ef 76 db ae c8 a8 9b ae c6 e0 00 08 b3 d5 d6 8d b3 52 e9 ab fb 16 ac b4 9d 7f a4 c3 79 e3 6c 89 b1 dd ad 35 8f 6c 54 f7 d6 31 9d 12 3b 9d fe d3 9d 62 fd e9 f1 c9 b3 24 62 35 79 98 e6 ee ef 17 51 a9 de 26 d7 4c 36 fc 2b 6d d1 3d be cf 8c e4 8b a1 fa bf 51 74 47 5b a2 7a f5 74 ad 63 e6 46 6c 9d a8 8b 33 93 cb ba 75 13 00 7c f2 b7 7d f9 53 7f 30 11 bf a2 3d 18 62 9c 9a cc 2c 67 9f 39 f3 89 62 c7 3a 86 c6 7c ff 00 54 6a a3 7f 4b 0d ae 29 1e 8f 92 26 49 b2 23 e4 7a b5 88 e7 35 11 8d 6b 1b 1b 13 95 15 5d 24 40 01 e4 f1 de 09 c3 79 91 93 98 9b 01 e2 fb 73 2e d8 66 fd 6e 96 82 e5 4a f5 db a4 8a 46 ab 5d b2 f6 b5 c9 da 8e 4e b4 54 45 4e b4 21 a3 04 64 ee bd f4 15 Data Ascii: x 4n/4d$dvRyl5lT1;b$b5yQ&L6+m=QtG[ztcFl3u\|}S0=b,g9b:\|TjK)&I#z5k]$@ys.fnJF]NTEN!d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	64736	18.239.94.5	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:02 UTC	845	OUT	GET /pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC91c2VyL3Bob3RvLzIwMjQtMDUtMDcvMTExNjE2L2Y1NWI5NTkyLWFhOTctNDY2YS04ZmJkLWMyYTY3OWQ1MTBjMi9SZW1vdmUgYmFja2dyb3VuZCBwcm9qZWN0ICgzKS5wbmciXSxbInAiLCJ0aHVtYiIsIjE5MngyMjgjIl1d?sha=a4ae687096739338&for=livewise.janeapp.com HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:03 UTC	4789	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 68076 Connection: close Date: Thu, 04 Jul 2024 20:56:03 GMT Content-Disposition: filename="Remove background project (3).png" Cache-Control: public, max-age=31536000 ETag: "7b2b4758302083ef21f827b4a931f48f5c265193" X-Request-Id: d5628354-48f9-445c-9c28-78634bbce746 X-Runtime: 0.496640 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' properties https://.janeapp.com https://.janeapp.co.uk https://.janeapp.com.au https://.janeapp.net wss://.janeapp.com wss://.janeapp.co.uk wss://.janeapp.com.au wss://.janeapp.net https://jane.app https://jane.statuspage.io https://icanhazdadjoke.com https://.google-analytics.com https://.analytics.google.com https://.googletagmanager.com https://.g.doubleclick.net https://.googleapis.com https://d3hb14vkzrxvla.cloudfront.net https://beaconapi.helpscout.net https://chatapi.helpscout.net wss://.pusher.com https://sockjs-helpscout.pusher.com https://edge.fullstory.com/ https://rs.fullstory.com/ https://.sentry.io https://rum.browser-intake-datadoghq.com/ https://logs.browser-intake-datadoghq.com/ https://.appcues.com https://.appcues.net wss://.appcues.net wss://.appcues.com https://.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService https://*.stripe.co [TRUNCATED] X-Cache: Miss from cloudfront Via: 1.1 c00e79984dfec6a6601fb861a1d8d5e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: LIbnBlA_buKU44IAKV9X2pmuN7sRuq716a9wUiM2qzT1hW1IT73sXg== Vary: Origin
2024-07-04 20:56:03 UTC	5587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 e4 08 06 00 00 00 ce e1 2b 27 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 07 04 14 38 03 9e 38 9e e5 00 00 80 00 49 44 41 54 78 da ec fd 69 94 6d d9 59 1d 88 ce d5 ed e6 b4 11 27 da db f7 5d f6 8d b2 93 52 29 21 81 24 84 84 40 36 a0 52 49 32 e0 06 8c 3d 6c e3 1a 05 ae 37 3c 06 e6 3d 5c 18 bf 57 65 9a 67 a3 57 b8 0a ec b2 8d 01 15 02 5b 12 48 a8 17 92 32 95 92 52 a9 6c 6e de be 89 b8 71 a3 8f d3 ee 6e 75 ef c7 5a 7b 9f 13 37 85 cb a6 cb 4c c8 7d 47 8c b8 11 71 22 4e b7 be b5 be 6f 7e 73 ce 8f e0 d5 eb 65 79 fd f2 2f ff Data Ascii: PNGIHDR+' cHRMz&u0`:pQ<bKGDtIME88IDATximY']R)!$@6RI2=l7<=\WegW[H2RlnqnuZ{7L}Gq"No~sey/
2024-07-04 20:56:03 UTC	13032	IN	Data Raw: 59 c4 b5 00 82 87 60 cc 35 a5 28 a5 20 8c c2 12 0a 42 b9 67 60 a2 da 49 8d 71 b9 31 e5 4e 02 49 61 fd f7 ac cf f7 01 42 2c b4 06 08 34 08 25 20 9c c1 52 0b 46 2c a8 31 d0 0c 50 ca c2 5a 03 42 38 00 02 c6 0c 48 01 70 1b 20 0e 04 b4 b1 c8 d2 1c 2c cd 11 71 02 a9 09 94 d6 48 28 01 23 16 30 04 9c 32 50 70 64 4a 41 5a 87 6a 51 ca 3c cf 08 55 6d 50 16 c4 65 5d 30 c9 2d 2a 17 6a 99 f2 04 41 80 66 a3 51 69 12 ca 80 29 59 ae 25 54 9c e4 79 ed fa d2 d2 1b bf f9 cd 6f 7e 39 8e a2 fe 8d 1b 37 f2 b9 b9 b9 d4 5a 2b bf f8 c5 2f 9a 32 f8 38 ff 93 2f df 57 8b 60 00 3f fe e3 3f 8e 27 9e 78 02 0f 3f fc 30 e9 f5 7a 14 00 6b b5 db c1 cd 95 15 b6 ef e0 01 f2 cb ff f2 5f 1d f8 e4 c7 3f fe 63 dd 9d ee df 8d c2 f0 a8 e0 9c 2a e3 de c0 c1 60 80 41 bf 8f c0 1a 1c 9b ef e0 f5 f7 dd Data Ascii: Y`5( Bg`Iq1NIaB,4% RF,1PZB8Hp ,qH(#02PpdJAZjQ<UmPe]0-jAfQi)Y%Tyo~97Z+/28/W`??'x?0zk_?c`A
2024-07-04 20:56:03 UTC	14480	IN	Data Raw: 4a e8 b5 d7 ef 23 0c 02 34 9b 4d 3f 8f 98 23 f0 22 f9 92 45 5a ab d5 26 18 b2 ae 28 66 94 da 46 bd de db bb 6f ef ce 68 34 8a e6 66 67 93 cb 97 2f f3 97 7d 00 30 46 f3 28 8a ba f5 56 7b a7 56 af e3 e7 ff c5 bf a0 96 50 10 ce f3 c3 87 8e 54 b7 fb ea c7 7e 1b a2 d1 38 25 07 dd 9f a1 d9 e8 5e aa 4b 66 21 1c 75 98 12 30 c2 40 3d 86 2c c2 18 74 8a 00 c3 04 b2 bb 0d a2 80 90 71 64 c9 08 9a b8 94 44 e7 19 4c 1c 41 16 19 00 20 81 46 9e e5 e0 2c c0 7a 5e e0 ca 56 17 91 60 08 05 83 21 14 24 70 82 6f 4a 08 34 d5 be 01 e5 d6 8e a1 d4 5b 83 d8 4a 4e 58 fe dc 18 40 83 38 de 91 76 8b de 6a 17 ad 56 29 30 eb bc 78 34 55 08 02 8b 76 2b 84 d2 04 4a 03 da 10 10 46 61 b4 82 54 05 60 1d 27 47 04 21 08 e7 c8 d2 14 46 16 c8 a3 00 61 60 91 17 01 a2 28 44 18 04 00 83 eb 57 94 46 Data Ascii: J#4M?#"EZ&(fFoh4fg/}0F(V{VPT~8%^Kf!u0@=,tqdDLA F,z^V`!$poJ4[JNX@8vjV)0x4Uv+JFaT`'G!Fa`(DWF
2024-07-04 20:56:03 UTC	16384	IN	Data Raw: 64 ca 75 52 4d 13 4a 30 d5 5b 40 1a 01 55 44 d4 cc 23 ba 21 17 88 71 9f d3 9a 81 96 1d 93 64 48 d2 46 0a c3 9c 04 e2 30 cb 10 46 73 0e 79 90 c8 79 1a f2 f1 3c 40 e4 07 bc 3f 30 db 34 30 af c6 f3 24 1c ed 0d 4a 03 35 d8 cc 42 19 48 21 d1 30 1f bf e9 7b 34 d6 92 c7 59 04 e6 75 85 59 5d 01 91 14 2b b4 14 70 d6 a1 eb 5a 72 89 0c 84 b0 25 74 4b 6a 45 29 1c 33 47 bb ae a3 af 29 09 d7 b9 4c 85 90 62 50 b2 06 a2 5c 2d 97 ef 7e fc f1 c7 fb 5f 7d e7 ed d3 7b 9f 7f f6 9e 77 76 36 99 cd 97 6f bd f5 d6 47 9b cd 5a db be 2b fe 33 d9 00 21 04 1c 3f 7a 84 27 0f 1f 62 77 f7 a0 76 ca be 77 ff 93 4f fe 50 b3 5c fd 42 88 e1 9b 31 c6 b7 44 8c 75 1a 0a 17 99 bb 96 16 18 7d 21 41 91 69 4e 36 3a 9f e1 38 c1 03 10 51 24 93 06 07 cf 4d ab 9e 2d 48 bb d6 62 b5 3c 41 73 d5 e2 cd b7 Data Ascii: duRMJ0[@UD#!qdHF0Fsyy<@?040$J5BH!0{4YuY]+pZr%tKjE)3G)LbP\-~_}{wv6oGZ+3!?z'bwvwOP\B1Du}!AiN6:8Q$M-Hb<As
2024-07-04 20:56:03 UTC	8232	IN	Data Raw: a0 c1 71 95 29 c1 a0 a0 c4 35 80 e4 fb 23 31 2c 7a 3f e8 9e 73 1a e8 11 3d e0 9d 80 8b 02 d5 fe 3e 76 f6 0f 51 96 15 4a 53 62 31 5f c0 39 87 b6 6d b1 5a ad d0 76 2d a9 7b 1b 43 c8 92 d4 10 75 8d f5 7a c3 c8 93 c2 e9 d5 0a 9b ce 41 22 60 7f 56 62 6f 77 8e b2 a0 09 3b db 3b d2 fd 51 d4 b0 32 46 e1 e2 f2 02 9d 75 d0 a6 44 59 94 b0 2e 60 d3 f7 70 81 de 7b c1 f2 99 b6 b7 90 5a 61 5e 1b 28 21 d0 7b 09 e7 29 ed 96 5a d1 66 97 12 55 45 8a 11 b6 8d 98 4e a7 a8 ea 12 8b 83 1d dc 7e 72 80 66 bd c6 e9 e9 29 66 f3 b9 28 4c 21 16 3b 7b 42 69 3d f3 ae ff 9a f7 e1 4e d7 36 ef e8 ed 3c 74 dc f0 e5 7f 24 87 94 14 95 fd 08 f9 f1 cc 29 51 12 63 6a ef d6 8d 15 39 3e a6 b5 f0 a5 3f 93 5e 44 c4 80 5e 84 ad c5 1f e0 9d 87 eb 2d fa b6 c1 d3 27 8f f1 e8 c1 63 4c 2b 8d d9 6c 86 aa Data Ascii: q)5#1,z?s=>vQJSb1_9mZv-{CuzA"`Vbow;;Q2FuDY.`p{Za^(!{)ZfUEN~rf)f(L!;{Bi=N6<t$)Qcj9>?^D^-'cL+l
2024-07-04 20:56:03 UTC	10361	IN	Data Raw: 4b 6c 79 80 0d 35 06 d7 30 71 84 e6 09 f6 e4 ed 29 dd 10 91 91 21 d6 3d a2 e8 2e 71 72 79 89 df f9 fe 0f 20 a1 b1 bf b7 87 ce 3b 5c 5d 5d a1 28 b8 bb 2a 22 44 94 84 04 25 e8 9c 98 93 83 83 4d a0 53 d7 59 8b 42 46 4c 66 13 44 ef 31 29 35 2a a3 00 ef a0 8d 42 f0 0e bd 73 a8 82 85 eb 7b 2c 76 76 31 df 9d 03 be 85 56 02 91 e7 03 42 70 28 55 4d 59 b1 2e 50 4c 6a 02 33 46 34 69 c5 46 8d 14 34 29 ff 4a 8a d9 62 14 3a 75 2e ce 72 0f 80 98 8d 52 e9 ad 7c f6 77 e7 39 0c a8 c5 36 23 86 a2 68 36 de 18 e5 c5 d1 13 e2 60 fb 1e 9b cd 06 57 ab 35 be f7 c1 c7 b8 58 6e 88 dd 99 f0 79 41 5c 91 90 9f 63 44 0f ce 14 87 2f c9 f5 47 90 df 00 fb 51 23 2b d1 ba 69 93 52 17 3c 4d 90 21 0f a9 0c 6c 52 21 25 a1 55 a3 eb 35 f6 01 1e 22 fb d0 ee 1d 70 7c 9a 1c 13 b9 08 1e 74 fa 53 fa Data Ascii: Kly50q)!=.qry ;\]]("D%MSYBFLfD1)5Bs{,vv1VBp(UMY.PLj3F4iF4)Jb:u.rR\|w96#h6`W5XnyA\cD/GQ#+iR<M!lR!%U5"p\|tS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	64738	34.120.195.249	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:02 UTC	775	OUT	POST /api/4505291008311296/envelope/?sentry_key=0a2411dd501e4441a1f4a27ebdb0b309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.116.0 HTTP/1.1 Host: o4505290921410560.ingest.sentry.io Connection: keep-alive Content-Length: 461 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://livewise.janeapp.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://livewise.janeapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:02 UTC	461	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 37 2d 30 34 54 32 30 3a 35 36 3a 30 31 2e 34 35 37 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 65 37 64 34 64 65 36 64 37 33 34 64 34 36 65 38 61 33 37 38 36 61 39 64 30 33 38 33 65 33 36 39 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 37 2d 30 34 54 32 30 3a 35 36 3a 30 31 2e 34 35 37 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 37 2d 30 34 54 32 30 3a 35 36 3a 30 31 2e 34 35 37 5a 22 2c 22 73 74 61 Data Ascii: {"sent_at":"2024-07-04T20:56:01.457Z","sdk":{"name":"sentry.javascript.browser","version":"7.116.0"}}{"type":"session"}{"sid":"e7d4de6d734d46e8a3786a9d0383e369","init":true,"started":"2024-07-04T20:56:01.457Z","timestamp":"2024-07-04T20:56:01.457Z","sta
2024-07-04 20:56:02 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 04 Jul 2024 20:56:02 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:56:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	64743	34.120.195.249	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:03 UTC	499	OUT	GET /api/4505291008311296/envelope/?sentry_key=0a2411dd501e4441a1f4a27ebdb0b309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.116.0 HTTP/1.1 Host: o4505290921410560.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:03 UTC	516	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Thu, 04 Jul 2024 20:56:03 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	64742	18.239.94.28	443	2540	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:56:03 UTC	600	OUT	GET /pub/W1siZiIsImRyYWdvbmZseS8zNDgwMC9pbWFnZS9waG90by8yMDIyLTA2LTIwLzIxMjIyMy8zZDEwMDlkOS04OWEyLTRjMzgtYWQ0ZS01YmI0OWYyY2FlZDAvTElWRVdJU0UgTE9HTy1DT01QUkVTU0VELkpQRyJdLFsicCIsInRodW1iIiwiNjAweDYwMD4iXV0?sha=780eb076f58aee50&for=livewise.janeapp.com HTTP/1.1 Host: assets-jane-cac1-23.janeapp.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:56:03 UTC	782	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 24533 Connection: close Date: Sat, 15 Jun 2024 22:30:12 GMT Content-Disposition: filename="LIVEWISE LOGO-COMPRESSED.JPG" Cache-Control: public, max-age=31536000 ETag: "2a8e9d3f0b7d57e5a37cdb446884bdff8535293a" X-Request-Id: 41757eed-d4ef-4bb3-8d44-adce283e3980 X-Runtime: 0.336481 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: strict-origin-when-cross-origin X-Cache: Hit from cloudfront Via: 1.1 3f2f1c546e63f10a66abd1c978af36f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P3 X-Amz-Cf-Id: 5lM5UOYom92NwGMP8t2OHUk_yl7pWo33oM8i7SXbT0_pImc1X4KcUA== Age: 1635951 Vary: Origin
2024-07-04 20:56:03 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 bc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 07 80 a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a Data Ascii: JFIFHHExifMM*JR(iZHH02210100C
2024-07-04 20:56:04 UTC	8149	IN	Data Raw: 5b 7f b4 1b bf 4d 9c 35 b5 3f 6e d7 b6 52 dd 73 43 29 e6 b0 60 0b 6e 26 a5 b8 5e eb 65 bc d0 ca c6 43 4e fe 9f 95 59 1c ce 72 f3 ba 36 b3 a9 ab df f9 37 50 2c 87 90 f9 79 0e 53 e8 cb 2b b2 de 18 92 27 61 dc 31 47 41 3e df c2 99 90 b7 a6 77 9d d2 2b d7 e5 36 c9 86 f7 a9 e2 32 06 1d de fc a9 fe b2 88 79 af ef 9f cc 6f 4a 2e 1e b5 21 7b c7 76 7c a8 54 93 30 38 6f eb 42 f9 9e f8 d6 f3 6d c9 4a aa 8b 75 7d fe b6 a6 96 5f ab d6 e6 f4 91 c9 50 f7 31 db 2d 46 e9 bb 55 17 65 eb eb 02 37 d3 b4 be b6 0a fb 50 61 6f c0 f4 bf 42 c2 a3 5d cc cd 6e a2 2a fd 83 aa 97 ab fc 60 b6 ff 00 68 2d db 85 a9 2a 28 32 d7 0f d0 d5 c4 b0 d5 53 db 69 e2 9a 35 54 55 63 db 13 5a e4 ea ea ea 54 50 2b 41 c6 56 aa a6 87 8a b6 08 ac a3 9e 4a 5a b8 32 f6 86 48 66 85 ea c7 c6 f6 d7 56 2b 5c Data Ascii: [M5?nRsC)`n&^eCNYr67P,yS+'a1GA>w+62yoJ.!{v\|T08oBmJu}_P1-FUe7PaoB]n`h-(2Si5TUcZTP+AVJZ2HfV+\

Target ID:	0
Start time:	16:55:05
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:55:08
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1952,i,13230899412911799749,16161761796975008523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:55:11
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://livewiseinc.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://livewiseinc.com/pages/contact	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/16526066952?random=1720126544242&cv=11&fst=1720126544242&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&hn=www.googleadservices.com&frm=0&tiba=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://livewiseinc.com/pages/contact	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=exgcwrg2uctf
Source: https://livewiseinc.com/pages/contact	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/16526066952?random=1720126544242&cv=11&fst=1720126544242&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4730z89182364789za201zb9182364789&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Flivewiseinc.com%2Fpages%2Fcontact&hn=www.googleadservices.com&frm=0&tiba=Contact%20LiveWise%20Associates%20in%20Pickering%2C%20ON%20for%20Compassionate%20Care&npa=0&pscdl=noapi&auid=1084254748.1720126521&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://livewiseinc.com/pages/contact	HTTP Parser: Iframe src: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=exgcwrg2uctf

Source: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=p2czp7amzatk	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdH0xIgAAAAANhvyv9dGy294Oss94DJBez5_jnq&co=aHR0cHM6Ly9saXZld2lzZWluYy5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=exgcwrg2uctf	HTTP Parser: No favicon
Source: https://m.stripe.network/inner.html#url=https%3A%2F%2Flivewise.janeapp.com%2F&title=Book%20Online%20%7C%20LiveWise%20Associates&referrer=&muid=NA&sid=NA&version=6&preview=false	HTTP Parser: No favicon
Source: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Flivewise.janeapp.com%2F&title=Book%20Online%20%7C%20LiveWise%20Associates&referrer=&muid=NA&sid=NA&version=6&preview=false	HTTP Parser: No favicon
Source: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Flivewise.janeapp.com%2F%3F_gl%3D1itr0xc_gcl_auNTgwOTk4NzAzLjE3MTUxMDYwODY._gaOTEyMzQyMDgyLjE3MTUxMDYwODY._ga_MCTHZF7ZXQ*MTcxNTIwOTc0Mi41LjEuMTcxNTIwOTc0Mi42MC4wLjA.%23%2Flist&title=Book%20Online%20%7C%20LiveWise%20Associates&referrer=&muid=5cf079c8-e8d7-4364-ba9e-675e8ceaab0ab4d0a0&sid=069bef62-4d56-4f0a-958f-40a3b8d48d754e772c&version=6&preview=false	HTTP Parser: No favicon

Source: https://livewiseinc.com/pages/contact	HTTP Parser: No <meta name="copyright".. found
Source: https://livewiseinc.com/pages/contact	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_244.2.dr	String found in binary or memory: "https://www.facebook.com/StripeHQ", equals www.facebook.com (Facebook)
Source: chromecache_244.2.dr	String found in binary or memory: "https://www.linkedin.com/company/stripe/", equals www.linkedin.com (Linkedin)
Source: chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=nA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ob(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},qA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=F.YT,q=function(){LC(n)};if(p)return p.ready&&p.ready(q),b;var r=F.onYouTubeIframeAPIReady;F.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(OC(w,"iframe_api")\|\|OC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!FC&&MC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_358.2.dr, chromecache_393.2.dr, chromecache_193.2.dr	String found in binary or memory: return b}BC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_289.2.dr, chromecache_214.2.dr, chromecache_363.2.dr, chromecache_193.2.dr	String found in binary or memory: var QB=function(a,b,c,d,e){var f=Lz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Lz("fsl","nv.ids",[]):Lz("fsl","ids",[]);if(!g.length)return!0;var k=Qz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ty(k,uy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: livewiseinc.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: livewiseasso3873.clinicsites.co
Source: global traffic	DNS traffic detected: DNS query: d2t6o06vr3cm40.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: gottmanconnect.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: livewise.janeapp.com
Source: global traffic	DNS traffic detected: DNS query: assets-jane-cac1-23.janeapp.net
Source: global traffic	DNS traffic detected: DNS query: o4505290921410560.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: js.stripe.com
Source: global traffic	DNS traffic detected: DNS query: m.stripe.network
Source: global traffic	DNS traffic detected: DNS query: m.stripe.com
Source: global traffic	DNS traffic detected: DNS query: stripe.com

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 23.53.114.19
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://livewiseinc.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Windows Analysis Report
http://livewiseinc.com