Edit tour

Windows Analysis Report
https://www.ovivowater.com/

Overview

General Information

Sample URL:	https://www.ovivowater.com/
Analysis ID:	1545074
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2220,i,14999809259448756908,12245541483753268675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.ovivowater.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-3N3F1TJNT7&gtm=45je4as0v883110504za200&_p=1730257276252&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&gdid=dZTNiMT&cid=833971690.1730257278&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1730257278&sct=1&seg=0&dl=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F&dt=Water%20Treatment%20Solutions%20%7C%20Ovivo&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=8489 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.ovivowater.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.ovivowater.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html;charset=UTF-8Content-Length: 0Connection: closeDate: Wed, 30 Oct 2024 03:01:22 GMTServer: nginxCache-Control: no-cache, no-store, must-revalidateContent-Security-Policy-Report-Only: default-src 'self'; child-src blob: https://*; connect-src 'self' blob: https://d8ejoa1fys2rk.cloudfront.net https://sentry10.bynder.cloud https://api2.amplitude.com https://analytics.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.amazonaws.com https://fast.appcues.com https://api.appcues.com https://api.appcues.net wss://api.appcues.net https://apiv2.webdamdb.com/oauth2/token https://cmp.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://disclosure.api.osano.com emrays.production-global.us-east-1.bynder.cloud https://dam.emrays.com https://cdn.heapanalytics.com https://*.heap-api.com; font-src https://* data: ; img-src https://* data: blob:; media-src https://*; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://d8ejoa1fys2rk.cloudfront.net https://www.googletagmanager.com https://www.google-analytics.com https://js.hs-analytics.net fast.appcues.com browser.sentry-cdn.com bynder-static.s3.amazonaws.com https://cmp.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://disclosure.api.osano.com https://cdn.heapanalytics.com https://*.heap-api.com; style-src 'self' 'unsafe-inline' https://d8ejoa1fys2rk.cloudfront.net https://fonts.googleapis.com bynder-static.s3.amazonaws.com fast.appcues.com https://cmp.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://disclosure.api.osano.com; worker-src 'self' blob:; report-uri https://sentry10.bynder.cloud/api/1817/security/?sentry_key=638cfd1ab10c78c179140416b9893c0eX-API-Correlation-Id: 88d22a68-3485-7f4a-98d3-6f1eaf116557Cross-Origin-Resource-Policy: cross-originStrict-Transport-Security: max-age=63072000; includeSubdomainsReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffPermissions-Policy: camera=(), geolocation=(), microphone=()X-Cache: Error from cloudfrontVia: 1.1 d9523e44e96d2539081596bb1d268d44.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P3X-Amz-Cf-Id: pfmFxb8Qv22ZXpLvW53yK8d7LfCahVH8GFCAfBQWbqYbiXMWIUH_5Q==

Source: chromecache_184.2.dr	String found in binary or memory: http://alistapart.com/article/creating-intrinsic-ratios-for-video
Source: chromecache_184.2.dr	String found in binary or memory: http://codex.wordpress.org/CSS#WordPress_Generated_Classes
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: http://dev.w3.org/csswg/css3-conditional/#at-supports
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: http://dev.w3.org/csswg/css3-conditional/#the-csssupportsrule-interface
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: http://git.io/hHzL7w
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: http://git.io/vUGl4
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: http://goo.gl/EUTi53
Source: chromecache_171.2.dr	String found in binary or memory: http://icant.co.uk/csstablegallery/
Source: chromecache_171.2.dr	String found in binary or memory: http://icant.co.uk/csstablegallery/)
Source: chromecache_136.2.dr	String found in binary or memory: http://papermashup.com/demos/css-buttons)
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: http://www.codrops.com
Source: chromecache_171.2.dr	String found in binary or memory: http://www.klavina.com)
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_208.2.dr	String found in binary or memory: http://www.schema.org/SiteNavigationElement
Source: chromecache_208.2.dr	String found in binary or memory: https://acsbapp.com/apps/app/dist/js/app.js
Source: chromecache_195.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=548397
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=612118
Source: chromecache_208.2.dr	String found in binary or memory: https://ca.linkedin.com/company/ovivo
Source: chromecache_250.2.dr	String found in binary or memory: https://careers.ovivowater.com
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/#breadcrumb
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/#website
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/business-support/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/de/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/engineering/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/fr/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/hu/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/jobs/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/life-at-ovivo/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/nl/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/operations/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/search/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/work-at-ovivo/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp-admin/admin-ajax.php
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=Austria
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=Canada
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=China
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=Dubai
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=France
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=Germany
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=Hungary
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=India
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=Netherlands
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=Singapore
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=South%20Africa
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=Switzerland
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=United%20Kingdom
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/wp/jobs/?country=United%20States
Source: chromecache_208.2.dr	String found in binary or memory: https://careers.ovivowater.com/zh-hans/
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_177.2.dr, chromecache_205.2.dr, chromecache_180.2.dr, chromecache_195.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=129004
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://codepen.io/GreenSock/pen/1e42c7a73bfa409d2cf1e184e7a4248d
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/Interface_development_guide/IDL_int
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/transform-style
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Function/bind)
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://drafts.csswg.org/css-transforms-2/
Source: chromecache_184.2.dr	String found in binary or memory: https://fast.fonts.net/t/1.css?apiType=css&projectid=c4bec1eb-18b2-4d07-9dd7-cfb6ba64c12c);
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Nunito
Source: chromecache_193.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8u
Source: chromecache_141.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_184.2.dr	String found in binary or memory: https://git.io/fADqW)
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/FezVrasta/popper.js/issues/373).
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/FezVrasta/popper.js/pull/715
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/issues/1748
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/issues/648
Source: chromecache_251.2.dr, chromecache_244.2.dr	String found in binary or memory: https://github.com/angular/angular.js/blob/v1.4.4/src/ng/urlUtils.js
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/greensock/GSAP/issues/322)
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/greensock/GSAP/issues/375
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/greensock/GSAP/issues/388
Source: chromecache_184.2.dr	String found in binary or memory: https://github.com/jonsuh/hamburgers
Source: chromecache_251.2.dr, chromecache_244.2.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L53
Source: chromecache_251.2.dr, chromecache_244.2.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L58
Source: chromecache_141.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/24251
Source: chromecache_184.2.dr	String found in binary or memory: https://github.com/webpack-contrib/sass-loader#imports
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://goo.gl/OGw5Gm
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://goo.gl/pxwQGp)
Source: chromecache_180.2.dr	String found in binary or memory: https://google.com
Source: chromecache_180.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_251.2.dr, chromecache_244.2.dr	String found in binary or memory: https://grack.com/blog/2009/11/17/absolutizing-url-in-javascript
Source: chromecache_141.2.dr	String found in binary or memory: https://greensock.com
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://greensock.com/forums/topic/18310-clippath-doesnt-work-on-ios/
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://greensock.com/forums/topic/20215-problem-using-tweenmax-in-standalone-self-containing-svg-fi
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://greensock.com/forums/topic/20368-possible-gsap-bug-switching-classnames-in-chrome/.
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://greensock.com/forums/topic/21450-draggable-in-iframe-on-mobile-is-buggy/
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://greensock.com/forums/topic/23823-closing-nav-animation-not-working-on-ie-and-iphone-6-maybe-
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://greensock.com/forums/topic/24583-how-to-return-colors-that-i-had-after-reverse/
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://greensock.com/forums/topic/25182-scrolltrigger-width-of-page-increase-where-markers-are-set-
Source: chromecache_144.2.dr, chromecache_174.2.dr, chromecache_241.2.dr, chromecache_141.2.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_184.2.dr	String found in binary or memory: https://jonsuh.com/hamburgers
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://modernizr.com/download?-cssanimations-csspseudoanimations-csspseudotransitions-csstransforms
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/1284fc475fef608a/original/IndList_PowerGen-408x500.jpg)
Source: chromecache_208.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/19b3430eb5bf5b46/original/CorpMontage-BLK80_3840x1634.mp4
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/1b9a4aa020bee951/original/Joint-Modern-Slavery-Report-2023-Signed-v2.p
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/22580ea3a018197c/original/IndList_PharmaLifeSci-408x500.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/2a48842e9777443c/original/HomePageProduct-735x551.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/2b464a1b19c1d158/original/HomePage-Header1920x970.jpg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/2b78e8c676e644b5/original/CTABanner-Chemical-1920x650.jpg);
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/2db12aa8d12bc551/original/WhereWeTouchWater-627x470.jpg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/35a1c3addedab439/original/Mask-sailshape-2x.png)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/386e69de06af7c65/original/HomePageIndustry-735x551.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/39bfef4335dc67b3/original/Services_1000X1232.jpg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/39bfef4335dc67b3/original/Services_1000X1232.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/3ebf6c5896f14138/original/IndList_DrinkWater-408x500.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/48eb07922352251c/original/HomePageServices-408x306.jpg)
Source: chromecache_208.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/497b31218fd8e7fe/original/HomePage-FieldWork-Operator_735x551.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/4e8b8a8114d09617/original/homepage_countries.svg
Source: chromecache_208.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/4fac9f08596efdc2/original/HomePage-Life_735x551.jpg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/55c60dcc9c78d1b6/original/1920X970_NewTagline_2024_200kb.webp)
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/5647cc391f6f25c0/original/Ovivo_Logo_Tagline.png
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/5c95d78cfeb29b44/original/homepage_brands.svg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/65510963a54fda2/original/IndList_Oil-Gas-408x500.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/66db4c703d1dad5a/original/WhoWeAre_1000X1232.jpg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/66db4c703d1dad5a/original/WhoWeAre_1000X1232.jpg)
Source: chromecache_208.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/691e6b52125d4762/original/HomePage-FieldWork-Business_735x551.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/69f5dd10ed364d6a/original/IndList_SemiConductor408x500.jpg)
Source: chromecache_208.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/6a120e9794038848/original/HomePage-Work_735x551.jpg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/6db334456dad3140/original/IndList_WasteWater02_408X500.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/703a6c3b527e687e/original/Ind-TechSol_1000X1232.jpg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/703a6c3b527e687e/original/Ind-TechSol_1000X1232.jpg)
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/7aabb08284ade500/original/website_logo.svg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/7b1a830a4efe120f/original/HomePage-Footer1920x456.jpg
Source: chromecache_208.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/7c917fa51fcc97e4/original/HomePage-FieldWork-Engineer_735x551.jpg)
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/824ce34e97ecc0e/original/homepage_employees.svg
Source: chromecache_250.2.dr	String found in binary or memory: https://ovivo.getbynder.com/m/f7a19ef0344161c/original/homepage_projects.svg
Source: chromecache_208.2.dr	String found in binary or memory: https://ovivowater.com
Source: chromecache_195.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_177.2.dr, chromecache_205.2.dr, chromecache_180.2.dr, chromecache_195.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://popper.js.org)
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_218.2.dr, chromecache_180.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_190.2.dr, chromecache_177.2.dr, chromecache_205.2.dr, chromecache_195.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_177.2.dr, chromecache_205.2.dr, chromecache_180.2.dr, chromecache_195.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_250.2.dr	String found in binary or memory: https://www.cookieyes.com/
Source: chromecache_251.2.dr, chromecache_244.2.dr	String found in binary or memory: https://www.drupal.org/core/deprecation#javascript
Source: chromecache_195.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_180.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_195.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_218.2.dr, chromecache_180.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_250.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-3N3F1TJNT7
Source: chromecache_208.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-T4MM2GG8C1
Source: chromecache_250.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_250.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-PT5HBDQ
Source: chromecache_218.2.dr, chromecache_180.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_234.2.dr	String found in binary or memory: https://www.istockphoto.com/legal/license-agreement?utm_medium=organic&utm_source=google&utm_campaig
Source: chromecache_250.2.dr	String found in binary or memory: https://www.linkedin.com/company/ovivoholland/
Source: chromecache_190.2.dr, chromecache_177.2.dr, chromecache_205.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ve
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?v
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/images/logo-cookieyes.svg
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ve
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6
Source: chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?
Source: chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/legac
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-114x114.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-120x120.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-144x144.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-152x152.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-57x57.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-60x60.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-72x72.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-76x76.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/favicon-128.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/favicon-16x16.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/favicon-196x196.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/favicon-32x32.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/favicon-96x96.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-144x144.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-150x150.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-310x150.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-310x310.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-70x70.png
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/scripts/main.js
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/resources/assets/scripts/custom.js?ver=6.6.3
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/resources/assets/scripts/libs/drupal.js?ver=6.6.3
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/resources/assets/scripts/libs/theme-merge.js?ver=6.6.3
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/app/themes/ovivo/resources/assets/styles/custom-style.css?ver=6.6.2
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/de/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/#breadcrumb
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/#website
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/a-propos-ovivo/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/a-propos-ovivo/bureaux-mondiaux/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/a-propos-ovivo/conseil-dadministration/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/a-propos-ovivo/equipe/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/a-propos-ovivo/innovation/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/about-ovivo/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/about-ovivo/brand-page/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/about-ovivo/corporate-governance/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/about-ovivo/global-offices/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/about-ovivo/innovation/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/about-ovivo/team/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/brand
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/code-of-ethics/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/contact/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/commercial-private-development/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/electronics/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/food-beverage/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/metal-production-finishing/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/mining/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/municipal-wastewater/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/municipal-water/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/oil-gas/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/petrochemicals/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/pharmaceuticals-life-sciences/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/power-generation/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/industry-solutions/pulp-paper/
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/en/legal-notice/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/news/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/news/new-u-s-patent-for-electro-technology-reactor-enhancing-on-site-p
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/news/why-water-a-journey-with-calvin-robertson/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/news/why-water-a-journey-with-jing-gao/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/ovivo-uk-tax-strategy/
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://www.ovivowater.com/en/privacy-policy/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/resources_center/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/search/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/services/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/services/chemicals-consumables/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/services/digital-plant-monitoring/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/services/parts-services/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/services/product-rentals/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/tag/innovation/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/tag/why-water/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/aeration/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/analytics/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/biogas-systems/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/biological-treatment/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/biosolids-management/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/clarification/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/condensate-polishing/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/condenser-optimisation/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/demineralisation/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/filtration/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/grit-removal/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/en/technologies/healthcare-solutions/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/fr/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/nl/
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/wp-admin/admin-ajax.php
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_250.2.dr	String found in binary or memory: https://www.ovivowater.com/zh-hans/
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://www.quirksmode.org/blog/archives/2014/02/mouse_event_bub.html
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_218.2.dr, chromecache_205.2.dr, chromecache_180.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_250.2.dr, chromecache_208.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49902 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/212@60/24

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2220,i,14999809259448756908,12245541483753268675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.ovivowater.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2220,i,14999809259448756908,12245541483753268675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_235.2.dr

Binary or memory string: UMVmCI

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.ovivowater.com/	0%	Virustotal		Browse

Source	Detection	Scanner	Link
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
js.calltrk.com	0%	Virustotal	Browse
www.loopanalytics.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://greensock.com/standard-license	0%	URL Reputation	safe
https://yoast.com/wordpress/plugins/seo/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.loopanalytics.com	18.66.147.58	true	false	0%, Virustotal, Browse	unknown
js.calltrk.com	18.245.46.63	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
cdn.calltrk.com	18.245.46.37	true	false		unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	66.102.1.157	true	false		unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false		unknown
analytics-alv.google.com	216.239.34.181	true	false		unknown
cdn.acsbapp.com	172.67.11.155	true	false		unknown
cdn.loopanalytics.com	18.245.60.71	true	false		unknown
fast.fonts.net	104.16.41.28	true	false		unknown
script.hotjar.com	52.222.236.74	true	false		unknown
acsbapp.com	104.22.1.204	true	false		unknown
www.google.com	142.250.186.100	true	false		unknown
td.doubleclick.net	142.250.184.194	true	false		unknown
www.ovivowater.com	54.72.117.121	true	false		unknown
accesswidget-log-receiver.acsbapp.com	172.67.11.155	true	false		unknown
careers.ovivowater.com	54.72.117.121	true	false		unknown
ovivo.getbynder.com	52.222.214.74	true	false		unknown
static-cdn.hotjar.com	18.66.102.53	true	false		unknown
static.hotjar.com	unknown	unknown	false		unknown
analytics.google.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
https://careers.ovivowater.com/?_gl=1%2A1wj41xj%2A_ga%2AODMzOTcxNjkwLjE3MzAyNTcyNzg.%2A_ga_3N3F1TJNT7%2AMTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA.	false	unknown
https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/images/logo-cookieyes.svg	false	unknown
https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css	false	unknown
https://ovivo.getbynder.com/m/824ce34e97ecc0e/original/homepage_employees.svg	false	unknown
https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json	false	unknown
https://ovivo.getbynder.com/m/3ebf6c5896f14138/original/IndList_DrinkWater-408x500.jpg	false	unknown
https://careers.ovivowater.com/?_gl=11wj41xj_gaODMzOTcxNjkwLjE3MzAyNTcyNzg._ga_3N3F1TJNT7*MTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA.	false	unknown
https://ovivo.getbynder.com/m/35a1c3addedab439/original/Mask-sailshape-2x.png	false	unknown
https://fast.fonts.net/t/1.css?apiType=css&projectid=c4bec1eb-18b2-4d07-9dd7-cfb6ba64c12c	false	unknown
https://www.ovivowater.com/	false	unknown
https://ovivo.getbynder.com/m/2b78e8c676e644b5/original/CTABanner-Chemical-1920x650.jpg	false	unknown
https://careers.ovivowater.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2	false	unknown
https://www.ovivowater.com/app/themes/ovivo/dist/fonts/avenir/65cde95a-ac33-4c65-8198-e37857968d1a.woff2	false	unknown
https://ovivo.getbynder.com/m/703a6c3b527e687e/original/Ind-TechSol_1000X1232.jpg	false	unknown
https://ovivo.getbynder.com/m/65510963a54fda2/original/IndList_Oil-Gas-408x500.jpg	false	unknown
https://cdn.loopanalytics.com/trackatron4.js	false	unknown
https://ovivo.getbynder.com/m/19b3430eb5bf5b46/original/CorpMontage-BLK80_3840x1634.mp4	false	unknown
https://www.ovivowater.com/app/themes/ovivo/dist/fonts/avenir/16695c2d-c755-45a2-bdcf-c54843f39afd.woff2	false	unknown
https://ovivo.getbynder.com/m/4fac9f08596efdc2/original/HomePage-Life_735x551.jpg	false	unknown
https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1	false	unknown
https://careers.ovivowater.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	unknown
https://ovivo.getbynder.com/m/69f5dd10ed364d6a/original/IndList_SemiConductor408x500.jpg	false	unknown
https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.2.6	false	unknown
https://www.ovivowater.com/app/themes/ovivo/dist/fonts/avenir/75c84254-5125-412c-bc24-56769ae3b627.woff2	false	unknown
https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.2.6	false	unknown
https://ovivo.getbynder.com/m/5647cc391f6f25c0/original/Ovivo_Logo_Tagline.png	false	unknown
https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.13	false	unknown
https://careers.ovivowater.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	false	unknown
https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown-click/style.min.css?ver=1	false	unknown
https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.2.6	false	unknown
https://ovivo.getbynder.com/m/55c60dcc9c78d1b6/original/1920X970_NewTagline_2024_200kb.webp	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-76x76.png	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_190.2.dr, chromecache_177.2.dr, chromecache_205.2.dr, chromecache_195.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/css-transforms-2/	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/en/#breadcrumb	chromecache_250.2.dr	false		unknown
https://careers.ovivowater.com/wp/jobs/?country=Austria	chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/en/industry-solutions/	chromecache_250.2.dr	false		unknown
https://ovivo.getbynder.com/m/386e69de06af7c65/original/HomePageIndustry-735x551.jpg)	chromecache_250.2.dr	false		unknown
https://www.youtube.com/embed/	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/en/technologies/demineralisation/	chromecache_250.2.dr	false		unknown
https://careers.ovivowater.com/wp/jobs/?country=Netherlands	chromecache_208.2.dr	false		unknown
https://fast.fonts.net/t/1.css?apiType=css&projectid=c4bec1eb-18b2-4d07-9dd7-cfb6ba64c12c);	chromecache_184.2.dr	false		unknown
https://careers.ovivowater.com/wp/jobs/?country=Dubai	chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-310x310.png	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/en/services/product-rentals/	chromecache_250.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_144.2.dr, chromecache_141.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://careers.ovivowater.com/	chromecache_208.2.dr	false		unknown
https://github.com/Modernizr/Modernizr/issues/648	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/en/industry-solutions/commercial-private-development/	chromecache_250.2.dr	false		unknown
https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/favicon-16x16.png	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
https://github.com/Modernizr/Modernizr/issues/1748	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/en/industry-solutions/petrochemicals/	chromecache_250.2.dr	false		unknown
https://www.ovivowater.com/en/industry-solutions/metal-production-finishing/	chromecache_250.2.dr	false		unknown
https://www.ovivowater.com/en/contact/	chromecache_250.2.dr	false		unknown
https://www.ovivowater.com/en/tag/why-water/	chromecache_250.2.dr	false		unknown
https://greensock.com/forums/topic/21450-draggable-in-iframe-on-mobile-is-buggy/	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://ovivo.getbynder.com/m/691e6b52125d4762/original/HomePage-FieldWork-Business_735x551.jpg)	chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/en/technologies/aeration/	chromecache_250.2.dr	false		unknown
https://modernizr.com/download?-cssanimations-csspseudoanimations-csspseudotransitions-csstransforms	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://careers.ovivowater.com/wp/jobs/?country=Canada	chromecache_208.2.dr	false		unknown
http://icant.co.uk/csstablegallery/	chromecache_171.2.dr	false		unknown
https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-72x72.png	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
http://www.schema.org/SiteNavigationElement	chromecache_208.2.dr	false		unknown
https://careers.ovivowater.com/#breadcrumb	chromecache_208.2.dr	false		unknown
https://git.io/fADqW)	chromecache_184.2.dr	false		unknown
https://www.ovivowater.com/en/industry-solutions/municipal-water/	chromecache_250.2.dr	false		unknown
https://www.ovivowater.com/en/about-ovivo/team/	chromecache_250.2.dr	false		unknown
https://github.com/greensock/GSAP/issues/322)	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/apple-touch-icon-114x114.png	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/en/code-of-ethics/	chromecache_250.2.dr	false		unknown
https://schema.org	chromecache_250.2.dr, chromecache_208.2.dr	false	URL Reputation: safe	unknown
https://www.ovivowater.com/en/technologies/biological-treatment/	chromecache_250.2.dr	false		unknown
https://careers.ovivowater.com/wp/jobs/?country=Hungary	chromecache_208.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/CSS/transform-style	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/de/	chromecache_250.2.dr	false		unknown
https://greensock.com/standard-license	chromecache_144.2.dr, chromecache_174.2.dr, chromecache_241.2.dr, chromecache_141.2.dr	false	URL Reputation: safe	unknown
https://www.ovivowater.com/en/#website	chromecache_250.2.dr	false		unknown
http://goo.gl/EUTi53	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?v	chromecache_250.2.dr	false		unknown
https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-144x144.png	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
https://github.com/greensock/GSAP/issues/388	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-150x150.png	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
http://papermashup.com/demos/css-buttons)	chromecache_136.2.dr	false		unknown
https://ovivo.getbynder.com/m/55c60dcc9c78d1b6/original/1920X970_NewTagline_2024_200kb.webp)	chromecache_250.2.dr	false		unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_250.2.dr, chromecache_208.2.dr	false	URL Reputation: safe	unknown
http://alistapart.com/article/creating-intrinsic-ratios-for-video	chromecache_184.2.dr	false		unknown
https://github.com/FezVrasta/popper.js/pull/715	chromecache_144.2.dr, chromecache_141.2.dr	false		unknown
https://www.ovivowater.com/en/legal-notice/	chromecache_250.2.dr, chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/en/services/digital-plant-monitoring/	chromecache_250.2.dr	false		unknown
https://careers.ovivowater.com/#website	chromecache_208.2.dr	false		unknown
https://www.drupal.org/core/deprecation#javascript	chromecache_251.2.dr, chromecache_244.2.dr	false		unknown
https://careers.ovivowater.com/hu/	chromecache_208.2.dr	false		unknown
https://www.ovivowater.com/en/about-ovivo/brand-page/	chromecache_250.2.dr	false		unknown
https://www.ovivowater.com/fr/	chromecache_250.2.dr	false		unknown
https://careers.ovivowater.com	chromecache_250.2.dr	false		unknown
https://ovivo.getbynder.com/m/65510963a54fda2/original/IndList_Oil-Gas-408x500.jpg)	chromecache_250.2.dr	false		unknown
https://ovivo.getbynder.com/m/22580ea3a018197c/original/IndList_PharmaLifeSci-408x500.jpg)	chromecache_250.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.53	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
18.66.147.82	unknown	United States	3	MIT-GATEWAYSUS	false
54.72.117.121	www.ovivowater.com	United States	16509	AMAZON-02US	false
18.245.60.71	cdn.loopanalytics.com	United States	16509	AMAZON-02US	false
18.66.102.11	unknown	United States	3	MIT-GATEWAYSUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
52.222.236.43	unknown	United States	16509	AMAZON-02US	false
52.222.214.76	unknown	United States	16509	AMAZON-02US	false
104.16.41.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false
18.245.46.63	js.calltrk.com	United States	16509	AMAZON-02US	false
52.222.214.74	ovivo.getbynder.com	United States	16509	AMAZON-02US	false
66.102.1.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.67.11.155	cdn.acsbapp.com	United States	13335	CLOUDFLARENETUS	false
18.66.147.58	www.loopanalytics.com	United States	3	MIT-GATEWAYSUS	false
18.245.60.33	unknown	United States	16509	AMAZON-02US	false
142.250.184.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.22.0.204	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.22.1.204	acsbapp.com	United States	13335	CLOUDFLARENETUS	false
52.222.236.74	script.hotjar.com	United States	16509	AMAZON-02US	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
18.245.46.37	cdn.calltrk.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545074
Start date and time:	2024-10-30 04:00:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.ovivowater.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@19/212@60/24
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.186.174, 64.233.166.84, 34.104.35.123, 142.250.74.200, 142.250.185.234, 142.250.186.131, 142.250.185.232, 142.250.185.170, 172.217.18.10, 142.250.185.202, 142.250.185.138, 142.250.186.42, 142.250.74.202, 142.250.185.106, 142.250.186.74, 142.250.185.74, 216.58.206.42, 142.250.186.106, 142.250.184.202, 172.217.16.138, 142.250.186.138, 142.250.181.234, 20.109.210.53, 199.232.210.172, 192.229.221.95, 20.3.187.198, 4.175.87.197
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bat.bing.com, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	dropped
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2209
Entropy (8bit):	4.927549308458187
Encrypted:	false
SSDEEP:	48:kMJFiNMRgmKYcMfotnY5slupCnGmqPRppWzhlmyZoA/OhlmOGE88:70oVKYLA5YylENbqmGo5mOt
MD5:	2423DB35158BFA7395BEDFEF423C4A97
SHA1:	633F6E321EC269D8888A5AB1E0D57E451025604E
SHA-256:	F0422210B7FA8AF6460F7F5D9D4F20CD55C1AD746DEF3DBB2E2D7C0CD8043F42
SHA-512:	EC9EF55FAA6C1E88EAC420D0A8FEFD6E7F8B20E7C487186B980A9CC3A1F1228FFCB876E249A76915357431DE24CC3535C9972AAD9EABB6BD589131643505C266
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/resources/assets/scripts/custom.js?ver=6.6.3
Preview:	jQuery(document).ready(function(){. jQuery(".accordion-scrolling-content-block:first-child .accordion-scrolling-content-block-text-inner").addClass("visible");. jQuery('.accordion-scrolling-image .img-bg:first-child').addClass('visible');.. // Get the current date in a format that's easy to compare (like YYYY-MM-DD). const today = new Date().toISOString().split('T')[0];. . // Check if the popup has been shown today. if (localStorage.getItem('popupShownDate') !== today) {. setTimeout(() => {. if(jQuery('.annoucement_popup_wrap').length > 0){. jQuery('.annoucement_popup_wrap').addClass('show_popup');. jQuery('body').addClass("body_show_popup");.. // Store today's date in localStorage to ensure it only shows once per day. localStorage.setItem('popupShownDate', today);. }. }, 5000);. }.. jQuery(document).on('click', '.annoucement_close_popup', function () {. jQu

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	779
Entropy (8bit):	4.420482748761224
Encrypted:	false
SSDEEP:	24:t41SRF1VOm9ET8ynm9ETKgdii0dUMP9XtVGOeMYTuK7Z:CSRxOeET1neETKgLMP9XQMX6
MD5:	B544F99E22C83F1FDF37D529BBA165CE
SHA1:	3F29D95C2BCDF58C1BDEEA9BB7523B94318FDA83
SHA-256:	D10B95EA03FA0F9CC7A2B6F01FB3F9D305E6D41BFE9D19077663980F49355027
SHA-512:	FE8366997D217A2301E6FB3427C3210CAC89E5263734A8BC0347A0E34BD63CD35ADB8D9511561126701FBCCA790B440535D3BE4DACF484B817776809D36E0552
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 138.5 73"><path d="M138.5 0C93.8 25.8 46.5 45.5 0 60.4c0 0 71.2 19.9 138.5 9.9 0-.1.1-70.2 0-70.3z" fill="#510c76"/><path d="M121.8 45.1c5.1 0 9.2 4.1 9.2 9.2s-4.1 9.2-9.2 9.2-9.2-4.1-9.2-9.2 4.1-9.2 9.2-9.2zm-59.6 0c5.1 0 9.2 4.1 9.2 9.2s-4.1 9.2-9.2 9.2-9.2-4.1-9.2-9.2 4.2-9.2 9.2-9.2zm12.5.3l5.4 12.2 5.4-12.2h3.1l-8.4 18h-.9l-8.5-18h3.9zm16.5 0c1.5 0 2.8 1.2 2.8 2.8v15.3h-.8c-1.5 0-2.7-1.2-2.8-2.7V45.4h.8zm7.3 0l5.4 12.2 5.4-12.2h3.9l-8.5 18h-.9l-8.4-18h3.1zm-36.3 1.7c-3.1 0-5.5 3.2-5.5 7.2s2.5 7.2 5.5 7.2h.2c2.9-.1 5.2-3.2 5.3-7v-.3c.1-3.8-2.4-7.1-5.5-7.1zm59.6 0c-3.1 0-5.5 3.2-5.5 7.2s2.5 7.2 5.6 7.2 5.5-3.2 5.5-7.2-2.5-7.2-5.6-7.2z" fill="#fff"/><path d="M-18.6-18.5h175.8V91.4H-18.6V-18.5z" fill="none"/></svg>.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://careers.ovivowater.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3106
Entropy (8bit):	5.0805450955042755
Encrypted:	false
SSDEEP:	48:EfprP714GU1LYzbW/sjSFEuMB3g9iGyIgasXljGC:epeGs6W/s4k3OgHpGC
MD5:	20E8490FAB0DCF7557A5C8B54494DB6F
SHA1:	285DB746DFC0D43B9CA42F8D65B69C908FF72CA5
SHA-256:	FBE820B6140AD28E86F34FFAE507D807CF591A22697A05B71958F2014E96A9E4
SHA-512:	2B3DA277E8DF9273F672EC262B9700090612A9EF664899C9AC689FB815C708F787FBDC0DDEFE9037ADAA9C8384DE152E53B59EE017918A2E9AD1EB7D81BF90EB
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.2.6
Preview:	#cookie-law-info-bar {..font-size: 15px;..margin: 0 auto;..padding: 12px 10px;..position: absolute;..text-align: center;..box-sizing: border-box;..width:100%;..z-index: 9999;../* box-shadow:rgba(0,0,0,.5) 0px 5px 50px; /..display: none;..left:0px;..font-weight:300;..box-shadow: 0 -1px 10px 0 rgba(172, 171, 171, 0.3);.}.#cookie-law-info-again {..font-size: 10pt;..margin: 0;..padding:5px 10px;..text-align: center;..z-index: 9999;..cursor: pointer;..box-shadow: #161616 2px 2px 5px 2px;.}.#cookie-law-info-bar span {..vertical-align: middle;.}../* Buttons (http://papermashup.com/demos/css-buttons) */..cli-plugin-button, .cli-plugin-button:visited {..display: inline-block;..padding: 9px 12px;..color: #fff;..text-decoration: none;..position: relative;..cursor: pointer;..margin-left: 5px;..text-decoration: none;.}..cli-plugin-main-link {..margin-left:0px;..font-weight: 550; text-decoration: underline;.}..cli-plugin-button:hover {..background-color: #111;..color: #fff;..text-decoration: none;

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (409), with no line terminators
Category:	dropped
Size (bytes):	409
Entropy (8bit):	5.071644775975722
Encrypted:	false
SSDEEP:	12:mtt3FxSFfVBPIwwsMtRsb4KpfNEpSuIXqEn:mxFMBPIaMu4KlNt1X7
MD5:	B2CB713D9736E814A08353C2FEDCB8E1
SHA1:	E5875894947716625D15D46C92DE1B5A222725A9
SHA-256:	F7BB442B06BFB13ECFEE3C3EC2B6B19440A33E080CA9378F8D6F161281BD01ED
SHA-512:	1F3C9906E4566A4DB12379558A6DA10159F0A8B692C72080D1348EE50FDBA1A8B98A2AE93CA8D1CC4F3925067FB25D33B560F9F7ED5B0AE76655F01BFDAA8C94
Malicious:	false
Reputation:	low
Preview:	"use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle"),n=0;n<e.length;n++)e[n].addEventListener("click",t)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdown.init()});

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=551, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=735], baseline, precision 8, 735x551, components 3
Category:	dropped
Size (bytes):	284834
Entropy (8bit):	7.955858598250865
Encrypted:	false
SSDEEP:	6144:2obetfYwPuELs2U6LjFnGfApBTgWizUW8BHoV8mqV:lbeVzuELzU25vpB8px8mqV
MD5:	F557E38F7DAED54F5979D134352095C5
SHA1:	DDC100ECE7F71E67E377B63DA38FC17CA36BDE91
SHA-256:	57E74C548400D3578FD2304A94173002C46336A58116064C1450B9BBF4FCB67C
SHA-512:	74778C91435ACA1C3E25B64E90B26FDE9B01B5F09A75E694A847A7FEBA3BBC449D8152D33BF21A6DCDD81704072B88F0A70637E4C3F1B2630498E913D4A7C229
Malicious:	false
Reputation:	low
Preview:	.....yExif..MM............................'...........................................................................(...........1...........2..........i............. .......-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:30 15:19:18............0231..................................'...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..oK.k_M..O.....0..z.^#...P..B..X.......8..5:.w?E6..g..N[I...Sk.K]...Y.^..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.3 (Windows), datetime=2022:05:17 15:32:02], baseline, precision 8, 735x551, components 3
Category:	dropped
Size (bytes):	233803
Entropy (8bit):	7.9163428120210275
Encrypted:	false
SSDEEP:	3072:aydEhRRUp03OKFtZvKAdXksrgZGZSi1PzTuq94OYp4NTUdvRuo34nrtzcOfXbM:lp7UZv/kkgZG1JlNAmnrRcOfXbM
MD5:	007E2550217B833B778568F9CBE16C13
SHA1:	F50A5A545A3D7E70A5551A9A41A1CF986CD5B7D7
SHA-256:	3629E3D93E34665D765267120D313FD507292592521CD9C06509553A6FBA7148
SHA-512:	ECCE4F866985ED8E5324857172D831682E6C0C27B4698BA38EC9C7D05E18323DE127B58A93036FE563E50D68CC149CBFA770783ED0DD0D98013A2CB145745284
Malicious:	false
Reputation:	low
Preview:	.....3Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:17 15:32:02........................................'..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..s..n.Op;!.+ 5....r.fH.%.;..w...^bjy-.....DdW..S.`As......L..&...0...........9.F.BNsZ....!2#.........(/.:...7C....,l..o.xs>.....K.I..@......._.w..x

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	27254
Entropy (8bit):	7.99268327367325
Encrypted:	true
SSDEEP:	768:NeHkYubHsvltNW5pLPLkwp1Lvtqc03NDd6a1:kEYubHsnw5pLPLketvsc0bv1
MD5:	7445773F6FC27B6F067D7D61F61774E5
SHA1:	EE7AA8D0C41AD802598813A2CA29A28B45E901D8
SHA-256:	33328E0600699F353B8AADEB2EF202B46786109393C3AB0800505D21081037E8
SHA-512:	211AB6E5B647EE8EB4B7B97BEA5BF9398FCCC4146A8B5840FFE90C2B45AD756378AA7CDDFFD5F02B39B50364A66910E6E93975B148DD67E1678C3BED87D843D6
Malicious:	false
Reputation:	low
Preview:	RIFFnj..WEBPVP8 bj...........>m..G$"!...n....c-.X....o.._.g..N.......Y.................r..0~O.o......#...........2.W.._.<........}..).......K[....../.M.U.oQ..^........?.o.........5c...i.....g.(ApLC.!..<.o....X..j..s.[.....<.i...kT...W.../..L.?.u\_.d\|.?~...B.2BV.'....@.^...".'...5..+g......"..]./ti....m{.....}....,.\|..mo..W.......z... Kvg.7A..e..A?..u.a_Be.u..?.k...r{A..6.\..`.m.2c.C.G..$...T..J$..$..n..?.YT8L..?Ko/F......}S&.\|.......~.Y.f.J........#@.....{c...:^..._.......?... >../,+mZ....Y.b`(yU..2..&.OAx.>!.;t9\|.........bCnU...".........9..-H....X..x..N........:.\..........B..j....9#.%T......\|...@....J-f...."T.n..v...v..C.F.1..,...H.r\.i..SMZ.........{^.Kf..%....r....3.[...C:....1m.y..6m........*.$..e<....;\|X...tg.7g...m7<..%s.......k.U.0@..d.......W..Q.W\|._...q8Q.:..ZI..Qj.]..-.fP....q].x... .A..e:........C..%.h.........a.p&.........(i...`.V...KO......>Ui_.{....9..cO....E....dj....Q...Ld....:.....{.mi....l...;e..q.y..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	downloaded
Size (bytes):	592551
Entropy (8bit):	5.028301885211659
Encrypted:	false
SSDEEP:	12288:K2sYKJmL/JGW2KnN8Nie+icdkQ6D+vhJn0HOkViIyWf4SaV:K2sYKJmL/JGW2KnN8N3+icdx6D+vhJqy
MD5:	D2AEB9B59570608B9B66EB2A0BEB3435
SHA1:	D7851CE84B20426025C042D5011B801604428E43
SHA-256:	E5517E85615A2A470879E2A32FCA26FB362538A4B39B211AF0C69757331719FD
SHA-512:	A4741EB259BCBBA23522EACB8830037E4FA4540BC5AD0026912F4AB850669BCBA4460351F3790742FC5D314093A04656F65B99EAFB6EA51F2228A34DCCFD4720
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/dist/scripts/main.js
Preview:	/****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/./**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId]) {./**/ ...return installedModules[moduleId].exports;./**/ ..}./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...i: moduleId,./**/ ...l: false,./**/ ...exports: {}./**/ ..};./**/./**/ ..// Execute the module function./**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**/./**/ ..// Flag the module as loaded./**/ ..module.l = true;./**/./**/ ..// Return the exports of the module./**/ ..return module.exports;./**/ .}./**/./**/./**/ .// expose the modules object (__webpack_modules__)./****/ .__webpack

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	36274
Entropy (8bit):	7.995569973103637
Encrypted:	true
SSDEEP:	768:rw1onHfAUsaPNw2pNGNlZTzYWzKONjttq4RLh0xa37iCiDhz4CxZR2grBp:rweHfnsaVb/clZwPkTjUxoiCABZR2grb
MD5:	E4EAACF4E5648115A8D7B4BC0EFD503A
SHA1:	ABB2E2BD876648569231828ECB94CB37F0A506B0
SHA-256:	BDF8DB681760BE4BAA2BD654920B45379CA306E333EC663B53D5D320B63C3A5A
SHA-512:	C724C26CB9A489D11F6766FAA3A44E714374F6376A2975FEF1731950ECF2892F36384ED9A6E076232E87DDAB069FE1855488D13B56258204F8DC4EEA22A0488F
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/386e69de06af7c65/original/HomePageIndustry-735x551.jpg
Preview:	RIFF....WEBPVP8 ....p........>m2.G.".'$t]....cm..+.b...."%o.}I.z........;......q....U.....c.....O.......!y......7..........c....=,..?u...p.8}......g.....w......_...}.......?Hu5....\3...J.Et..G.........4.\....V01x.G$..ms.H./=..o..7AO..}.#..WbT..G..H..e..=.E...8.YQ._u.....b...R..2.D..R.e..b.k..:...K.]..4.ata&..K..M...n-..6.....Y.x...WG.^.`.SY`.U.w......!2.F.m^>...q.W.I.t....M..c.{...R.....o4\|Q......d.8.~W......c....e>.b...^.)}.q#..f.......HsX.].@@.n.u....B..o...Y.. .q.j~C.n ...y.I..M9..}U.s.D...m.p;...9}H.......T.J.`.cS....0S.~.!...6'.Z+....~^.Y.e.M..!..f..@.MQ...c.c..C'v...)..Ez...G.:x#...X\z.I.TB....^A...l...uj'9.,.....8?.......Ma........(N.Zv..!....s.#.;..p.*Q.VA.f..H.......'..h.R.........g.s...%.[....C.oi.h.\@i{.E...'+. ...y-%....<..oK.AE..:\|.....r..k..Q..+.I..a.<b..{25...Gy..xk+.......}....S...[..%~...O....$T'......tF...6.........;n........t..3]Y..f..U.Jx.@..xD1....T0.M....$8....,.P...m...>...v_j...@.....N..S..........&x....hhUx..

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9978
Entropy (8bit):	4.158924727048295
Encrypted:	false
SSDEEP:	96:SjVdGJVJPL8SVZJTNLMcQJD2qSHxea4KcZLaW+kJVJP/8SVZJoNLMcQJDqSHxea6:jbLpkXZLaWzbLGbXZLaWNtzjZtzj1EBY
MD5:	1891A8ADDBF55E720FE70121CFE8F954
SHA1:	60261009DD41FEDEC1BF46C354A9184AE6B8E037
SHA-256:	121082693C9EA40F299D3F6C3C72DD3AE88E60DCF3658D9BDDB6EC5BE353FC63
SHA-512:	FD1E39897120B9CE346A57B4D75CFEB33E76363620B17B4229FBB9BF2318154514CFC38ED6DBBED94082D31535B6D7BF1174C1F0B0BBEE6B991C7C4330FE00FF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Assets/Icons/10000projects</title>. <g id="Assets/Icons/10000projects" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Group-15" transform="translate(2.000000, 1.000000)">. <path d="M8.8736,22.2475 L8.8736,39.7445 C8.8736,40.4095 8.3316,40.9515 7.6656,40.9535 L3.5416,40.9535 L3.5416,21.0395 L7.6656,21.0395 C8.3316,21.0405 8.8736,21.5825 8.8736,22.2475 L8.8736,22.2475 Z M20.5386,30.9965 C20.5386,32.3975 20.7346,33.7835 21.1216,35.1205 L12.2896,35.1205 L12.2896,26.8715 L21.1216,26.8715 C20.7346,28.2085 20.5386,29.5945 20.5386,30.9965 L20.5386,30.9965 Z M30.3856,20.7265 C31.9436,19.9665 33.6206,19.5805 35.3706,19.5805 C37.1166,19.5805 38.7916,19.9645 40.3486,20.7225 C40.4126,20.7605 40.4796,20.7935 40.5336,20.8145 C42.6766,21.9045 44.4576,23.6845 45.539

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	dropped
Size (bytes):	592551
Entropy (8bit):	5.028301885211659
Encrypted:	false
SSDEEP:	12288:K2sYKJmL/JGW2KnN8Nie+icdkQ6D+vhJn0HOkViIyWf4SaV:K2sYKJmL/JGW2KnN8N3+icdx6D+vhJqy
MD5:	D2AEB9B59570608B9B66EB2A0BEB3435
SHA1:	D7851CE84B20426025C042D5011B801604428E43
SHA-256:	E5517E85615A2A470879E2A32FCA26FB362538A4B39B211AF0C69757331719FD
SHA-512:	A4741EB259BCBBA23522EACB8830037E4FA4540BC5AD0026912F4AB850669BCBA4460351F3790742FC5D314093A04656F65B99EAFB6EA51F2228A34DCCFD4720
Malicious:	false
Reputation:	low
Preview:	/****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/./**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId]) {./**/ ...return installedModules[moduleId].exports;./**/ ..}./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...i: moduleId,./**/ ...l: false,./**/ ...exports: {}./**/ ..};./**/./**/ ..// Execute the module function./**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**/./**/ ..// Flag the module as loaded./**/ ..module.l = true;./**/./**/ ..// Return the exports of the module./**/ ..return module.exports;./**/ .}./**/./**/./**/ .// expose the modules object (__webpack_modules__)./****/ .__webpack

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fwww.ovivowater.com
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2581
Entropy (8bit):	5.000511767650486
Encrypted:	false
SSDEEP:	48:cYAvf3ReY7LLebkVqJ4bkj9JCjwAj3RMbcIRMOPLvsMTnL5j:SvfBese4u44jD+MbcaMOPFj
MD5:	14E20D4517F51DEEEA04DB311CD027CE
SHA1:	C50AAC2F5123A7F16B71B3C286C1ECA39514B9DC
SHA-256:	FAB005DE52CE54D75F373C5A020E7DDD194CAEA5B4BF6E87886196E5D4451ADC
SHA-512:	B41502B8ADA528D4A8C28F969E8D9C789DBA6D6A2E70F755F355522ECFC2935F615EA275764F2728F53CA20A81BA031C114FCD1CD27FFA505CCC61996159E182
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/images/logo-cookieyes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 60" style="enable-background:new 0 0 300 60;" xml:space="preserve">.<style type="text/css">...st0{fill:#404041;}...st1{fill:#0056A7;}...st2{fill:#2E3191;}.</style>.<g>..<path class="st0" d="M22.3,11.5C32.2,11.5,39.6,17,42,26H30.9c-1.7-3.6-4.9-5.3-8.7-5.3c-6.2,0-10.5,4.6-10.5,12s4.3,12,10.5,12...c3.8,0,7-1.8,8.7-5.3H42c-2.4,9-9.8,14.5-19.7,14.5C10,53.8,1.4,45.1,1.4,32.6S10,11.5,22.3,11.5z"/>..<path class="st0" d="M62.2,54c-9.7,0-17-6.5-17-17s7.5-17,17.2-17c9.7,0,17.2,6.5,17.2,17S71.9,54,62.2,54z M62.2,45.2...c3.6,0,7-2.7,7-8.2c0-5.6-3.3-8.2-6.9-8.2c-3.7,0-6.9,2.6-6.9,8.2C55.5,42.5,58.5,45.2,62.2,45.2z"/>..<path class="st0" d="M99.7,54c-9.7,0-17-6.5-17-17s7.5-17,17.2-17c9.7,0,17.2,6.5,17.2,17S109.4,54,99.7,54z M99

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12874
Entropy (8bit):	4.0301848300241705
Encrypted:	false
SSDEEP:	384:vsMkVniVa8Ha8H1St8WpoCqUI1St8WpoCqULG:aViV5ZVStptqUI1StptqULG
MD5:	A9EB62352A641DE4DA4B411F0383D995
SHA1:	B83AA5ACB6F469CD2DF66444C712C057BA34150A
SHA-256:	C44597FA025E912F22735BED89A4004B3BB2540B5588DEFDE5E35449094AE5C4
SHA-512:	6EE5C81BA679E5F9E1CB62DF8592997DCEB4A58537EE1AA74344F0DCC3855F9A7ED85B5D9ABED64E33329B244B0B5AFD5E30186164B859D7B4A1BDFA03C5824A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Assets/Icons/10LegacyBrands</title>. <g id="Assets/Icons/10LegacyBrands" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Group-13" transform="translate(11.000000, 4.000000)">. <path d="M11.4653,44.6152 C11.4653,34.7282 19.5073,26.6822 29.3953,26.6822 C39.2793,26.6822 47.3213,34.7242 47.3213,44.6152 C47.3213,54.5072 39.2793,62.5492 29.3953,62.5492 C19.5073,62.5462 11.4653,54.5032 11.4653,44.6152 M49.9383,44.6152 C49.9383,33.2882 40.7233,24.0702 29.3953,24.0702 C18.0683,24.0702 8.8493,33.2852 8.8493,44.6152 C8.8493,55.9462 18.0683,65.1612 29.3953,65.1612 C40.7233,65.1612 49.9383,55.9432 49.9383,44.6152" id="Fill-1" fill="#510C76"></path>. <path d="M11.4653,44.6152 C11.4653,34.7282 19.5073,26.6822 29.3953,26.6822 C39.2793,26.6822 47.3213,34.7

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	32194
Entropy (8bit):	7.993432514886317
Encrypted:	true
SSDEEP:	768:AxWMjMTTZx7r5rVkubptT1xToQnfvGcxJ85:AxPc9rVk0pV1xsQnfpM
MD5:	FC3A3FE2BE25D8B6FA54ACE3CA0227AD
SHA1:	55CD7AE7F8321067751FE57C69A2064B0343F237
SHA-256:	A2FF0CF33FFBE6625F7D86C72166EB3EEE8E45951960554FD9BD7D8FF655D1E0
SHA-512:	CA806733D66D6F624D9D2DF25D95E96CCE341625B737314D1B05365A52F6D1E8E6535A86BD73CC9D58476EBFB3F1BC91A62A917657FFFF370C1DAB19BCFBB781
Malicious:	false
Reputation:	low
Preview:	RIFF.}..WEBPVP8 .}..........>m..H$"))..}.0..em.&.]^...)......:w4.r1..q.=o..\|w..9_+....;..M.....Z=...}......................z.O.g.=.....=.?)....E...w...W.1.-.W..m>......}J...u2..+6.o...'...F..4.{......)...\|ew2/^5.........8...e..3...`...>....1&0..I+.A.QMP.....{...q..X....tb.]w...&Po..y..(:.....a...N.w..WI../...F...g.y.......4I.d:.\.!.8.x.=.......+.. \6?.C............S...X.Q...3...5.P...<....q5.....Zr2.e.....L.-x...ty....)}..z..-......F.....#x...........\|.).......'..?.\|.Z$........+..96..\..c...\|./-;a..'g....E...6i...v........a....6.....>........=...l}...7.I...K;(....V..r.~.......%Wm.........A.zd..........'w..@...I.".5r........."..O.g.q..N4.I.%P`..j.......;..@Z.QF.y.I..{.m....I......-.z..K".jMZ95.9.Z.....9.$.....w.......k..i:.l..7;wB......k....]t.}..$M.=..:..9..xY..Y...3na.~....(^-..Ek1..U....L........q..Z.Z._.z...5...2Fdw.......`..`x......E*....<.#.89.C...^...3...l...O..j.b.Y..b...].,!l.D.l2a.D.@..6..Q....J.g4e..........'...<.d..~

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	43124
Entropy (8bit):	7.99474321417503
Encrypted:	true
SSDEEP:	768:S7JULVoOEk9ZyLdsrnSBlHc2ElFG2p4c3fOBJ4t7aoE4Fjv48qAc6Oso:+xfkLyLaSBlHyP04t+ohFjPc6Oso
MD5:	247AE17DEF632B47E39559F173657041
SHA1:	66E90F014D7E4FA9DF7D3622DF61D60BB414520F
SHA-256:	17970A61C5B6C2CC76D7357317CDE9888393476F25E114CDFF7FE71C8E005319
SHA-512:	7E6160AC44942979081D1FCF7C3465DBEFFCF68801F131EFBA0D7CA862DB9E15D4355786BB5A4E6C7DFC482A9894AF045B71E061C706164157B287268C440142
Malicious:	false
Reputation:	low
Preview:	RIFFl...WEBPVP8 `............>m..F$"..+.lx...cg.Fw..C....<...b...D..X@....%.....oB..._..4...e...7.w.'....._.m...`.fz....2..zM_......s............?...._.?.3......^'......G....a=I~....o........G.o...~...z....../PO.^......{.o...(.pO.O`. .3.,.U.3....W.K...`.\|..v.....Rn.........=O.....d..().7.d..A.!..5..K.O..lz.......e.."1tt........g$..S.....FV.bf..!.-7..43.K../..)\.(x..u..%.?..?7.6..F.5.K..q.D)N=...!.\.h.A...E.....4..2.. .....'o...SQRNa.S..t.Dy./.SO.X!?-....&.?[=F...5...$....LB...B4w8...G..^J.....<AM."NV..E....K/..b...v..l\y:..(.G.."...K.]=#."j/.,C.../..)/.%..5..y....v...u"n..K.-........i......(F.a-?....Y....@C.E../O.fh..u.ZUU..A.c..[.3.....$...20.fL.e1..J+,.2....E..ND&.V....3'&....,..5Q....JCuu...]....w,.0a...?..._....G. .....!v.=..t..9/... .V.J..z...g.....C...=...~....J3....xY.8..=..X.n.V.$.K.GSE.H...4..)..G6..'/..=..}.......;N.M-...luF...J"R^..q...]-tv...8'.../?.......v.........E..%h...:..C&E0..1iM...)...<....s]H..\|.].s.......

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271
Entropy (8bit):	4.828102040031845
Encrypted:	false
SSDEEP:	6:yLzCRo6lpahRszqvyRURst0uGmp1tRivDMORiAds7bRiXvhen:uSoUZNeRUHXRivfRiAd2Rig
MD5:	C6A55456AF4776C733018888483ABA22
SHA1:	297B53F8538BA3B59D2028F16DE4E14EC90337CE
SHA-256:	20BE9B3C63A01D921697A0EF1C1596F647678498EEFE6DC508E2363BE25277F8
SHA-512:	DBAF5D9A1B0F5D4195D3B9C62650AF622D66F1B68BFEC20CE79E84185C558F91AEEB6718452E1196BF783BB3CA7A0574223726FC4D80076EA9AD115F1FDD1EAB
Malicious:	false
Reputation:	low
Preview:	document.addEventListener('DOMContentLoaded', function() {..for(var cookieName in wpml_cookies) {...var cookieData = wpml_cookies[cookieName];...document.cookie = cookieName + '=' + cookieData.value + ';expires=' + cookieData.expires + '; path=' + cookieData.path;..}.});

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	26377
Entropy (8bit):	4.154937485062496
Encrypted:	false
SSDEEP:	768:KCByZ5nAByZpmmlEDcEDLoholF2VN4QRkyRf4v2y0+j3/tw/teWAWXEv:KCBy/nAByHmzdLoholFCrb94v2Ulgd/G
MD5:	D54DDAF1F825FB6E77DFEAC0AD0DAD95
SHA1:	B86EBD6DCF2CBED27D06BE97BC0FF9E276415B6D
SHA-256:	6456F867B1FF88303401832C2321476F99D3E1A89C6E2109D8EDC367F9D47420
SHA-512:	7934EF5271CA34D7A35D21477F1901FF66CAB876159DFE0D63FF250EE1B291EF9B5AFA99B4F97BD7EFA8231C102D9B059F4D21DEC5A00AA8651BBE0E08E53F8C
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/4e8b8a8114d09617/original/homepage_countries.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Assets/Icons/15Countries</title>. <g id="Assets/Icons/15Countries" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Group-53" transform="translate(5.000000, 2.000000)">. <path d="M41.8558,72.391 C45.9618,69.651 49.0928,65.678 50.7958,61.044 L60.5538,61.044 C55.9198,66.996 49.2698,71.048 41.8558,72.436 L41.8558,72.391 Z M11.8788,61.044 L21.6368,61.044 C23.3398,65.678 26.4708,69.651 30.5778,72.391 C23.1698,71.014 16.5208,66.979 11.8788,61.044 L11.8788,61.044 Z M29.0568,12.052 C25.3458,15.196 22.5748,19.303 21.0468,23.92 L11.2668,23.92 C15.5968,17.974 21.9038,13.766 29.0568,12.052 L29.0568,12.052 Z M61.1888,23.874 L51.4318,23.874 C49.9038,19.257 47.1328,15.15 43.4208,12.007 C50.5728,13.738 56.8728,17.962 61.1888,23.92 L61.1888,23.874 Z M54.3818,40.894 C5

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.3 (Windows), datetime=2022:05:17 15:35:24], baseline, precision 8, 735x551, components 3
Category:	dropped
Size (bytes):	280377
Entropy (8bit):	7.954772898469514
Encrypted:	false
SSDEEP:	6144:Eethdeth8qIQ1LH5cjEd2sjmAhuSKP1n6wmhUaZh33YcCHPYh4WXAN:EeHdeH8ql9HLmMuF9833ii4WXS
MD5:	3708B3B59C5878D74C7DC4BE9E3BE29E
SHA1:	9785C1CE5FE3A34DB75CEA85E8B62AAC88311389
SHA-256:	78BBD78B3F70244C09BF0EA99A8FAA9EF6B04003D27572C9B8A89C8C59F21367
SHA-512:	31028651BF3F93A247623A10B1373B55CF3590F047174151EEBF7DA38816D93C7FE4449CC481FB2D732975A99623FC4EF121E10A89ED639D66D945C8D882D3FF
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:17 15:35:24........................................'..............................."............(.....................2...........U.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..-..Ra......!....sC..8m'...MY.hs.-.@v.I.?...M..7...._....[=li......q.,..'..a..Em......r/kMM....#R...z...q.{(W.....h"..8.le9u.s...=..B.^....}.Dio.U.M.....

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fwww.ovivowater.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	26377
Entropy (8bit):	4.154937485062496
Encrypted:	false
SSDEEP:	768:KCByZ5nAByZpmmlEDcEDLoholF2VN4QRkyRf4v2y0+j3/tw/teWAWXEv:KCBy/nAByHmzdLoholFCrb94v2Ulgd/G
MD5:	D54DDAF1F825FB6E77DFEAC0AD0DAD95
SHA1:	B86EBD6DCF2CBED27D06BE97BC0FF9E276415B6D
SHA-256:	6456F867B1FF88303401832C2321476F99D3E1A89C6E2109D8EDC367F9D47420
SHA-512:	7934EF5271CA34D7A35D21477F1901FF66CAB876159DFE0D63FF250EE1B291EF9B5AFA99B4F97BD7EFA8231C102D9B059F4D21DEC5A00AA8651BBE0E08E53F8C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Assets/Icons/15Countries</title>. <g id="Assets/Icons/15Countries" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Group-53" transform="translate(5.000000, 2.000000)">. <path d="M41.8558,72.391 C45.9618,69.651 49.0928,65.678 50.7958,61.044 L60.5538,61.044 C55.9198,66.996 49.2698,71.048 41.8558,72.436 L41.8558,72.391 Z M11.8788,61.044 L21.6368,61.044 C23.3398,65.678 26.4708,69.651 30.5778,72.391 C23.1698,71.014 16.5208,66.979 11.8788,61.044 L11.8788,61.044 Z M29.0568,12.052 C25.3458,15.196 22.5748,19.303 21.0468,23.92 L11.2668,23.92 C15.5968,17.974 21.9038,13.766 29.0568,12.052 L29.0568,12.052 Z M61.1888,23.874 L51.4318,23.874 C49.9038,19.257 47.1328,15.15 43.4208,12.007 C50.5728,13.738 56.8728,17.962 61.1888,23.92 L61.1888,23.874 Z M54.3818,40.894 C5

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	17
Entropy (8bit):	3.454822399946607
Encrypted:	false
SSDEEP:	3:UmBFBVWRAn:Um9VWRA
MD5:	B9D9E6526B515EFBF5D87CEA00BD4525
SHA1:	41BB4E3A098D583F75287661BA04D6A845D575D2
SHA-256:	12FC87F11590D21348A774C1087FB178342BC0CDA3FAC5BACE53EDB5DB9CDE81
SHA-512:	68AB0032DD1B0D07F66E8E1F6A8E8D01EA7A3ED750A7AE1E204C98D114F4EF0603DCC4FA22C7BCD28DE2BFA732F1A992DF62429CCE4852237FC4E78EDB1822A8
Malicious:	false
Reputation:	low
Preview:	/* bad request */

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=2500, bps=0, PhotometricIntepretation=RGB, description=Two petrochemical contractors closing a deal in front of an oil refinary, orientation=upper-left, width=5256], baseline, precision 8, 1000x1232, components 3
Category:	downloaded
Size (bytes):	787568
Entropy (8bit):	7.959463192529629
Encrypted:	false
SSDEEP:	12288:Fwg+FYZdv4GdwhF+X+G7C/Za8FgdnEBior4TaV3BtP8LSmGD7x7yStvqgv:H5dMy7uXFgdEBWC3oLYD7x7Ggv
MD5:	229DE5A2FE6064B8C6DCB9FE5FE7D836
SHA1:	1A7D6C2E498592C88DB28701679E5CB7D849D6FB
SHA-256:	E31029B6BD834E49BB75373E29613C7A9EC0CFF7E0ED1796CFECB0D932A5B324
SHA-512:	13F690D249C50603775CCEC9AD45FB383115DFDB0F348A4A6F1EDDBDC701BB578E5FDCEEC4C1B94BB3BFF70C11E1D97FFF99F3B75EFCDA86AF4FCC34F55E43A5
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/39bfef4335dc67b3/original/Services_1000X1232.jpg
Preview:	....%:Exif..MM.*.............................................................I.....................................................(...........1.....!...!.2.........B.......................V.i.........`..........Two petrochemical contractors closing a deal in front of an oil refinary..-....'..-....'.Adobe Photoshop 24.0 (Macintosh).2024:07:04 15:15:35.Bigstock............0231................................................................................(................................#<.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...........

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	390508
Entropy (8bit):	5.512450556643701
Encrypted:	false
SSDEEP:	6144:sz4wjOQOyxYr9vKs8cb+zmPYEhCRYYMrmgmETVFzrpQqr3K9zwrcRjI0UI0MoIJW:m48OhpZ+zmP6N8
MD5:	0719DEC86BCD3822363511015C70E8C5
SHA1:	AA9A0D2B04B5C6BD20CBF6DCDB1293FF1CE8B53F
SHA-256:	B76CA903BECF077BB91FE8B7D18E62B6CA078CE408E0279778DDA3F859E693D8
SHA-512:	E66F5307A9D3A9175D8445EA82FD2C0389F588FA573370D2BDAAF9BDDB6FD07C80FA036E79328CF25EFCE7C31E6BD1788175A9C49FC39899625E512A4C9D9279
Malicious:	false
Reputation:	low
URL:	https://acsbapp.com/apps/app/dist/js/app.js
Preview:	!function({retentionPeriodDays:e,timestamp:t,daysBeforeNotice:i,productName:s,version:n,ignorePattern:a}){if(a.some((e=>RegExp(e).test(document.currentScript.src))))return;const r=(-1(Date.now()-t-24e60601e3)/864e5).toFixed(2);r<=i&&r>=0?console.warn(`Warning: The version ${n} of ${s} is set to lose support in ${r} days.`):r<0&&console.error(`Error: The version ${n} of ${s} not supported anymore.`)}({retentionPeriodDays:90,productName:"accessWidget",daysBeforeNotice:14,version:"v1.18.0",timestamp:1730216832269,ignorePattern:["/^(?!.v\\d+\\.\\d+\\.\\d+).*/"]}),(()=>{"use strict";var e={301:function(e,t,i){var s=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,i=t&&e[t],s=0;if(i)return i.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&s>=e.length&&(e=void 0),{value:e&&e[s++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")},n=this&&this.__read\|\|function(e,t){var i="function"==type

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11882)
Category:	downloaded
Size (bytes):	13099
Entropy (8bit):	5.393331496984079
Encrypted:	false
SSDEEP:	192:ZbnMW5tmjHCR/UeHjXWb2pTOnstdo5Cp0NREWERcxzPuiv3NU:ZbnM9jURHjXo2BtcCuccxz/v3NU
MD5:	C99B657A986077C81F7B228D4276C36C
SHA1:	02DA79AC94734CF34A4434CDB05E3DA9A55C8921
SHA-256:	10E24CE891E16EBDF1EBE40197A38035B1BA0D82CE396CBF4EE8F5694A6306A6
SHA-512:	6AF58358914DD61A4FF9FBB3DFCD668A6146932B74357FA73EA9CF2FDD85B5B0FDA2697558DCC69E14C44C5B1DEF7B135AE16EA555BD97628268D8911FCAC066
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-1840342.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1840342,"rec_value":0.09090909090909091,"state_change_listen_mode":"automatic","record":false,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","error_reporting","feedback.embeddable_widget","feedback.widgetV2","f

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://careers.ovivowater.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16764, version 1.1966
Category:	downloaded
Size (bytes):	16764
Entropy (8bit):	7.98643647794282
Encrypted:	false
SSDEEP:	384:MJkvV8Ac9MGxlEjaefoe0suMbPQFy0xVRq/avbrDo:MC+58jKxEUJxfqUrs
MD5:	136F310A33697ACFBEBCFE87C7888142
SHA1:	CEF66B2498D38E3C8B92B1F561C7048C092ACA04
SHA-256:	C745B43F7AD54BDFA3B2E6CE8C9161E7FD807BDBBF12B8350BDCDC5E822A1A47
SHA-512:	25209E58C556016E6B42BC2DFE035C71E4209D02C694BB0438794DAA68EF739410CAF25C3C6B4B31FA22950B21E36A25A4AA76E8F3A3EE4DA537994C76A8EF2B
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/dist/fonts/avenir/75c84254-5125-412c-bc24-56769ae3b627.woff2
Preview:	wOF2......A\|....... ..A..........................`..`..\..d..P..........6.$.....~.. .. .... ..H.d.'..:..9.6.T.I.L...zn.w..;..[..c......?'...!..T.....{...<.T...Rf""..-.L..r...q........8N3#Lc..\|...\|.~.l...$.W..m..tv .u..a..H.U.y..U...%h..BG....dI....V..n..&.t7.D ..a..D...j.$...Et.J..{o4:>.g}.6.4..,p.......V....a.C...M.P.NU.)5....2..]{..."3..(..m.o.R..JK.....w...r..ho.u...V..]._.{...s..o..U...t..e....Y^Xz...d#)E...:....h..l......u.6.t.o..YQ;..u.R.....;...@...7... ..Z...F.....u..n.1...CnV..=2...>x..!.q8..iO..y/....T%..Ks.'.w@.q.....3i..n.i..H....y....t......u.Ztw..}{+#...aw...../.b.2..y...M.A.c.o<.z.=...f..#....y..C..$./.t......R.N.... ?.U.#]............S_..;...,..z........S.....\.t.J......;...[..\|.r.`Z..vH..n..(.(..a.!........G...`.I.)Pl.........~...g.N...K..'B..'.T.C...{_.5Z.Jcd..R...,.DA...~./..TH. 4.X..ED,..[.!....]...ECJ...O9I+^.?.@.............>....c.cl...r.:.."..Y.xH..z..waJVd..6@[d......_.xj.5jDEEDDEu..../..g........F...[.......#3\D.@sN+........:'.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=470, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=627], baseline, precision 8, 627x470, components 1
Category:	downloaded
Size (bytes):	143984
Entropy (8bit):	7.91459778186148
Encrypted:	false
SSDEEP:	1536:D+T+Qpimd9Dw3lu5ojhQgN9RlbV+L/JawybSNKA/GcXvgR9I2M0R4AIz3NOE4mzW:uO1bchobiROEm1wimgo1Hy+QbRIg
MD5:	C8BD5D703248586CC6A8BD1DB5C75C47
SHA1:	47F785E2C61DD8FF0EC0EBA0E851FDF72021BC23
SHA-256:	06DB3C3E7DE8FD9475A49D78597A7653BC97542642854F7C5AD2F4875769BBE4
SHA-512:	C9F9BB39AEF9992CD02471E83FE908B0F17A8453D2A3E309149CA29DA3131ECC5A4BD606904236710FBD508530FB1AF1507A11BAC404D33271532282CDAC09D1
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/2db12aa8d12bc551/original/WhereWeTouchWater-627x470.jpg
Preview:	.....iExif..MM.*...............s.......................................................................................(...........1...........2..........i............. .......-....'..-....'.Adobe Photoshop 22.3 (Windows).2021:03:15 14:46:12............0231.......................s...........................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...{......7.G.7.(...7+....l...{^k.........j.....#..cVL.m:G.]?K..rJod.\.g.:.R.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	43124
Entropy (8bit):	7.99474321417503
Encrypted:	true
SSDEEP:	768:S7JULVoOEk9ZyLdsrnSBlHc2ElFG2p4c3fOBJ4t7aoE4Fjv48qAc6Oso:+xfkLyLaSBlHyP04t+ohFjPc6Oso
MD5:	247AE17DEF632B47E39559F173657041
SHA1:	66E90F014D7E4FA9DF7D3622DF61D60BB414520F
SHA-256:	17970A61C5B6C2CC76D7357317CDE9888393476F25E114CDFF7FE71C8E005319
SHA-512:	7E6160AC44942979081D1FCF7C3465DBEFFCF68801F131EFBA0D7CA862DB9E15D4355786BB5A4E6C7DFC482A9894AF045B71E061C706164157B287268C440142
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/1284fc475fef608a/original/IndList_PowerGen-408x500.jpg
Preview:	RIFFl...WEBPVP8 `............>m..F$"..+.lx...cg.Fw..C....<...b...D..X@....%.....oB..._..4...e...7.w.'....._.m...`.fz....2..zM_......s............?...._.?.3......^'......G....a=I~....o........G.o...~...z....../PO.^......{.o...(.pO.O`. .3.,.U.3....W.K...`.\|..v.....Rn.........=O.....d..().7.d..A.!..5..K.O..lz.......e.."1tt........g$..S.....FV.bf..!.-7..43.K../..)\.(x..u..%.?..?7.6..F.5.K..q.D)N=...!.\.h.A...E.....4..2.. .....'o...SQRNa.S..t.Dy./.SO.X!?-....&.?[=F...5...$....LB...B4w8...G..^J.....<AM."NV..E....K/..b...v..l\y:..(.G.."...K.]=#."j/.,C.../..)/.%..5..y....v...u"n..K.-........i......(F.a-?....Y....@C.E../O.fh..u.ZUU..A.c..[.3.....$...20.fL.e1..J+,.2....E..ND&.V....3'&....,..5Q....JCuu...]....w,.0a...?..._....G. .....!v.=..t..9/... .V.J..z...g.....C...=...~....J3....xY.8..=..X.n.V.$.K.GSE.H...4..)..G6..'/..=..}.......;N.M-...luF...J"R^..q...]-tv...8'.../?.......v.........E..%h...:..C&E0..1iM...)...<....s]H..\|.].s.......

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36396, version 1.1311
Category:	downloaded
Size (bytes):	36396
Entropy (8bit):	7.994616695887885
Encrypted:	true
SSDEEP:	768:FrGIAFUqxbpwKQSTlGRly/p8edw9Pah0pm9LpS9S2N4bq9:FcFtbaYl88q/90MmNuqu9
MD5:	B994399381443EA4443E56C7A5F73BCE
SHA1:	642AFA6EE3F450792D03BD4A6C8FAC3F06A8D1DC
SHA-256:	D9FE97A5849FD8717558B5C576F5FB98EBF42CEF440B0D467A521DFA27C85856
SHA-512:	5A6A43F48F1102EF88F8EC5C4C8E773E223413FB756AF445AFC7C5BAE77F2DB4831DEE24CBDA41E253B21E1B8B59E5F66E6BAEBB7F404FA9E75EAD17824280CA
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/dist/fonts/avenir/e4d36745-a861-4a49-aa17-6510e67429d3.woff2
Preview:	wOF2.......,......u0.............................`..`..L.,..b.....`....6.$........... ..-. ..[.cq..m.Or;0..qC/.tX.=.:.I....v.x.A.5.-.u8...........DEu.!G...:W4.^..B[.c`......(..Y(.....t..qY....c...:........wrMZ[..-.%1...b...8...~d..ncr...78p.."....H..T..$...,.O)F&.U.$k........[.5.%{o....~..<....7......vPB...Yr.q.C....{..`...S..#YK.....$....x7Rh....[t.f@.........j..9...q.o..>J.C.:...SV.l..T.j..&5.@..b.3S.OL......i.Og....hdY..g/...#..{.U...ty....T.].......N.'...L.....n;.."\|..].@..jf.z.....)..:...N.>c.....}.............p..{.5!...eU@..D].......IfU q..qk.F....e.y{..w.O.H..&.._.+...H.....M....D.?Nt}...C....$.AR.>Q.Y._.\.k.....q.^s..m..4.$..&..<..ba..e9.1.-%..X.....6.\|)L.;o......."e.\...\..".,%.Q....../......WOI..S.......?...h.8.......t.....J..5.g^t.i..T+u&.~v...._+@...V....C..g.C.]\|.i.g..C...jsr......<.~V..V.U.N..Wjp..e~..lf.#-...o...=t"...QZ...."bM.U..&&i.x%.U...5....Vg..e.6.....5~...[.rW..'...9\..IJx..".a..{-..].{....z3&......4.TO.n.z..bi\|q.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10540
Entropy (8bit):	7.984824441743455
Encrypted:	false
SSDEEP:	192:y7prJu+hLbSwaJr/bLIsgCBQpJQIRSCC2TQUd+uWANKJQwtmRBQYPlpNpmhvaMSS:y1rY+hLPaJrAsgDpbSyoykJfeaYTbmhp
MD5:	66E511C58DD5A8F3A3014E28C9A1CB2F
SHA1:	C453408D21A038F1D4D4F6B5A1C75448CA74B9F1
SHA-256:	D85426EE9D577C4087214BFD8E87DCDE41552424FD8C1761120D27FD3A8CA9A4
SHA-512:	8592C7B3F0C9D2DBB4FF2375960DDC9BC3725FE085A58443D2C4A1A5FE132AAAAB0BF629D6DEDD0DD171F12CD815000D381AD78D50FC2D8612D1B26BF8D8ECB1
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/3ebf6c5896f14138/original/IndList_DrinkWater-408x500.jpg
Preview:	RIFF$)..WEBPVP8 .)...........>m4.H$".......gn...l..._Q.....8k^.:Z....\|.}.&.....,............x`3._.....t....\.........!.p.ht->H.......F..$...u(...A.4.J2/...H.R$l..w..\|N..^.(.6..qK..X.....bf'.=..g.{.I......ad.0.........Li.%..~{4m...o.1W.wT.pc..3....<..D..]p.....h{...:!?..p.-..g.....&..H......x./F....&...DB......`.,".Q....x.I.T?.#j.h.!.17..].t...D...6k..;.5.3W..J%.O6\.nJ.~.+c.h...}....h.Y4@.7....nG.?...s..)... ..c....7..ad...A.`...../.FC>.........[f.M5.L,.&.L.#..z...~..T......Gx...O..L,.&.I....e......:.F.......X.9.8...].%..M..&....c.Uuck...O....].(.5. 9.S...h.Y4A.m..&...z...x.AJ$.oQ.G.....l....0u.6Tn.2..r. ........M?.G....2.;..+....hd...m$.4u......RcM..N.-... ..[4.....=...wo.:Y.2.U_s9.@.l..w..x.....I..y.-xK^....L.q..rDM.......f..N....(....jp:.......z.j..k&,.A#e.p[..../`N.{f.......{........1.3.....1C1\|......+.....G......[..E@..TK.D...1...{..(.2....p,l...H..Z.....p.......JZ......g.^..n.j...^......2..k....^.Xft.E,........>.J.z..#XB.;......

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14953)
Category:	dropped
Size (bytes):	15062
Entropy (8bit):	5.230263280253356
Encrypted:	false
SSDEEP:	192:qbl7gkElDz0DTrFTKZ9Cb88TBWnefqLD7nPSGL:qR8kcDz0nrFTKZ9CbMeCLD7nPSGL
MD5:	9ABC074D7FF14A653F3E74C353EFF06B
SHA1:	608CD94C00ED42D1BB767E9A0D5C29ADD31EB46C
SHA-256:	4556525F9DF86FBA7F7E78842B9151A7C80E701E88AFB4F545534B04A947F533
SHA-512:	E07229943293810ECD398F5074C44E8B172029F398292EFCCE735A25C4425F421E25A4A7E12365F659B06E0EFB49CA9809A2913AEB79DB64EFE72B988F17F0A0
Malicious:	false
Reputation:	low
Preview:	/! For license information please see trackatron4.js.LICENSE.txt /.(()=>{var e={6808:(e,o,t)=>{var n,c;!function(a){if(void 0===(c="function"==typeof(n=a)?n.call(o,t,o,e):n)\|\|(e.exports=c),!0,e.exports=a(),!!0){var r=window.Cookies,i=window.Cookies=a();i.noConflict=function(){return window.Cookies=r,i}}}((function(){function e(){for(var e=0,o={};e<arguments.length;e++){var t=arguments[e];for(var n in t)o[n]=t[n]}return o}function o(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(n){function c(){}function a(o,t,a){if("undefined"!=typeof document){"number"==typeof(a=e({path:"/"},c.defaults,a)).expires&&(a.expires=new Date(1new Date+864e5a.expires)),a.expires=a.expires?a.expires.toUTCString():"";try{var r=JSON.stringify(t);/^[\{\[]/.test(r)&&(t=r)}catch(e){}t=n.write?n.write(t,o):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),o=encodeURIComponent(String(o)).replace(/%(23\|24\|26\|2B\|5E\|60\|

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	174226
Entropy (8bit):	7.767140937910894
Encrypted:	false
SSDEEP:	3072:gK4WTkJdBqZD9h8PpSBcJCz1hJtQvK1yyel1b/tuGT8/psWH+PUrbPMNXQ1G4:gOTkDBql9hcpSeC1hbQvKyyebQGYsWcc
MD5:	C06606AC923478A449060B3D2874A924
SHA1:	01F2ECBEEBAF329D119B10AA55F603E2253DB6CC
SHA-256:	78030A8983849F41643844221949160C717BB5806ECE8700F734AEDEF14A5D9B
SHA-512:	3D8A21E0050DA58CABF4B6E14BB5162E1B76BF41DB39B78025049E984505E9D1E21CD8E7279E948F64D14F8DB0F9E46E4CD8A43A499B1478F70342B12E241A69
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 .f..P=.......>.J.K..#'.t:`...il..U.........n........._...e?..v}......W....X.........P.~....%.?.};.......{._../<N._.....O.\|e\.../......./}.....y.\|..? ........a.......?.bO....?.?.o.{=.............O.?...w.q^b...>.......!.G........N......................y>..7.O....'........E.:.;4...O.d..2..b.!.[0=..0..F.."P...v2.~.qi........V4..a6.,%..(..n>....2.....I!..0.K...F,..U.......\K=.fF./..%....+].7.5........J.).m..`...Y5.".(B........._...4..Y..-.I......O.{j".y...!..'....s.7H. ..\|.Y.@.....A...:.y....M.q.!..M......-... [/#BHT........i.......i.K.kV\|}c..#.}.LT.z..PT.2$w%?.Q..-.,...Fq6".....&........\|.....V.S.Kn....U..kG...1........3...g...L..v....lh..J......I.$i!+.{..6..M..F...j...>d.%..G...D.....Q......+j.H.sW...">n.(+.:x.4c.......]..m ..b.....D..."....\|........\..3`..L."..'BUp..Gs.U.[w9.7....+q.>...OO7W...D.3.<{x.n...i...3....^.Q.`.y.{.Ax.`.(u.l....n.t......H.I..7....I\l?..../..ki..rVaO.D.b..@{..g...Gmp8i1\|....gV^.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5258)
Category:	dropped
Size (bytes):	5259
Entropy (8bit):	5.060180329787528
Encrypted:	false
SSDEEP:	96:D95qbslDCpFqImxwoD9N9JT3c5E/9CQipDwdGOddh:h5TdCpFqImxZ5NvAE/9PipDwEOddh
MD5:	FB9F7DAE39619642ED5890E40763EF2E
SHA1:	BC50FA89795E534B7E417E834C70CB674A9D30B4
SHA-256:	70712C8650FEECC46403B5801B9D5B72D5B2D6BA1D1CF0317E105603982321BF
SHA-512:	4E710BEA7BB3C8534D12D485260466B15785C6286CBEBE7BC562B9AD020A6E87A70139385FA6F1338F9048E1787ECF3FA4C48821675153F68D9BDFEA47E926DA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e){return function(e){if(Array.isArray(e))return r(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(e){if("string"==typeof e)return r(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?r(e,t):void 0}}(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function r(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];re

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	92582
Entropy (8bit):	7.997350410837271
Encrypted:	true
SSDEEP:	1536:RSq2eEhrcZvMhzIjTQkUJZ0USPczbNRwC6WVWy04ecbqCUe16VvgppvMQCi:RIemrd5cQkUsUzz7wCXVQuYvU7V
MD5:	27998DB600F2626F7609F920C0FB0FF8
SHA1:	60DFD56512DBEDB464AEC091A8666D0E067A63A7
SHA-256:	C8A05B16366F1BAEA1F5A2EF95DD847B75F5B11B3B1E858D4435CDE463603F7A
SHA-512:	AC0182350A3996285548B83A074FB28D159256F120B067AB7BCE6E8D20A8B3EC88728DF6383090A398805F30FBCB9E52F2445EB72575711447E0088C908B9E3A
Malicious:	false
Reputation:	low
Preview:	RIFF.i..WEBPVP8X..............VP8 i..............%..s.F.A......gxuo.mTOm'....?x.y.....?.........?....u.'.?.oc...s................/8.A.......?...?......{.........'.W.........!...Oa~y.....k.k.7.........y..O....._.................j.....j.g.3.{.....~X.-.v........zw..no>.yhd.....B!..#.Y....n.be.......io7..e...=..(S.....$...=.....!.....mr.X"$=.....].bE........\.8i.o.9...C.d%S=.;..R>.t..m[[.n.FS.>V57.r.%m.o...t.9L..}...b.....gP6.Q..v8U...~#.I..S.c........9...ucK!.....\|...........('..,...7.&.G.f<sx.e...6..../.#j....q....nH.P.&..01....4D..S.....9`..G..G...<..K..cFZ...y.W.2...h..f.\.U......z.4O.9...0k........!.ik"D......K...E8..4...a...y......X..4O...Z.M.i.5.2...q....g....[.K....h.......W.Ca.K+Hm...u.2...f..6.T.6..k...4.../...vs.9u\.a.....A&$.^.a?qc...!.q..e...'92)....a.OZ..J...a..z.7......m..VY..,;0=.>..B ^sQux.lXP...........h4.............5...u..Iz...)..T..%~w>......<'B......P........).....o.....o......J.R..w.#.=9.b..<.....K..V..M.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (401)
Category:	downloaded
Size (bytes):	6113
Entropy (8bit):	5.153597475277739
Encrypted:	false
SSDEEP:	96:jORdxb29j5oNJ1diJovHyIjJOIKLCRF4USzaYq3xC:jORdxbkiuovd1vn1C
MD5:	26B4F0C3C1BCF76291FA4952FB7F04FB
SHA1:	E5F3D41D8DBE3C4A2B36CF9CB4722496E7D6797E
SHA-256:	2E2F2336B5E6698B628AFC75FA9A24C67B73D5872C1D4AF99CA436064F636EE0
SHA-512:	71344B835254337BBF46692BB5C7E0AA0E3EA1DC0CAD1737C99BE96BB4350A469F0FC0AE1E0BE510331747FE21C74E0C99F37BBBDB65ABE0AEFC3F55BB57C9BE
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.2.6
Preview:	/*. Responsive table courtesy of Mark Wiltshire: mark@bamboorocketapps.com (thanks!).. For more styles try: http://icant.co.uk/csstablegallery/. ----. Generic styles:. Here you could e.g. customise width of column 1 and 2,. or add a generic roll-over effect on table rows./..cookielawinfo-column-1 {width: 25%;}..cookielawinfo-column-2 {width: 10%;}..cookielawinfo-column-3 {width: 15%;}..cookielawinfo-column-4 {width: 50%;}../** Simple style /..cookielawinfo-simple thead {width: 100%;}..cookielawinfo-simple td {padding: 5px 5px 5px 0;vertical-align: top;}..cookielawinfo-simple thead th {padding-right: 10px;text-align: left;}../* Modern style */..cookielawinfo-modern {border: 1px solid #e3e3e3;background-color: #f2f2f2;width: 100%;border-radius: 6px;-webkit-border-radius: 6px;-moz-border-radius: 6px;}..cookielawinfo-modern td, .cookielawinfo-modern th {padding: 5px;color: #333;}..cookielawinfo-modern thead {font-family: "Lucida Sans Unicode", "Lucida Grande", sans-serif;padding: .2em

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x380, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14764
Entropy (8bit):	7.985776463754436
Encrypted:	false
SSDEEP:	384:nntOIWd+eY5mSw4EtDOXeECAkf3FZA9B/J:ntMYrvASeECRcJ
MD5:	D0DF2B227BB717818C29EDE2DED9469C
SHA1:	C93E98DE3AE9F479F4EABA18AC13B190054CBE93
SHA-256:	853A5B354A7A7E10CC1259E3B9298C7EC3BA6678BD880DF93D7EABCD737D7FCC
SHA-512:	FC302D6D746C029C38918606CAC8D9ED5CED5850B0946738F41E09197173077A78C24416F6CF63CF6109967F23FA3761F4689BD6C4EF80AEFD223D9A6ACE37A0
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/7b1a830a4efe120f/original/HomePage-Footer1920x456.jpg
Preview:	RIFF.9..WEBPVP8 .9.......@.\|.>m6.G),7#(6.....gnP......7.,........R..N..A...[..b.../..O...k............z..re.{....)...5.o.......i...n...m....w..W........_/[...._$...K._..D..3.....6...7O....'.w....../..._.. .. A\|>@..\|............./..._.. .. A\|>@..\|............./..._.. .. A\|M.cp.....C4.+."..M...g..../....?t.^..\,O.!..#..)6...Q,........./......c..y......t9>X...G..R...%=..u.TKW.nuf?..3.........\.35..#A1...?3y..[Z4].>T........L5..4.pG....j{+@Rr....:K.5o.(.]o.&.H..?^..._."\|.6w.S......r..X.]......g..A.y.9....&....I.)C...#( .T..nRY.....O..pKQ..E.zz.o...O.N.j.,....wN.!Z.IEGc.].Gv%.r.H...!......W}..#....]_....d.q.qX.g..Y..X9.$GN...=+]...mS&+..7Y.m....y2..j...}.vV.y...UQa@S.w+.#.c{f6.q.)`m....5{6.=.2t..N...%..>l...5...e.V.....Db..Kz]...2....y.....Q.._..j..c..z\...]..a....0...m.E..........^....N........(.G.y..7..+..`I...;.'V@..o.$...:U03m....Y....Q..9..7o....m.H...%....b..].....B.0......k..Y..b.....M...o....u.........h.f.5._./.@g....vc...f...Q;.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18820)
Category:	downloaded
Size (bytes):	59240
Entropy (8bit):	4.873494161336656
Encrypted:	false
SSDEEP:	768:qu4BXbuqfvcFoc1qmjJVsDzI3u+uu4BXbuqfvcFD:qXdc1qmjJVsDzI3u+uXY
MD5:	4940E4AE72B6124A6EAB7E97FC8DF1F4
SHA1:	20986CBB9965F176B6C6CCF1ADEFCF783F9E9E9A
SHA-256:	58C855E7EB9B917E71E6B733E73C542C25BACB986F3BA7DF2BE1570200312135
SHA-512:	C7F03DD29CA7BD8EA746477DC3E234FD860B21CC2D6823DBFA48D2BBB28F8BCD3256394AF849B2A5BA2DDB2074D7D9F5BF7053EAE621EFE39B05DCA162517895
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.13
Preview:	html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li{text-align:right}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu ul.isHorizontal li a img{margin-left:12px}.wpml-language-switcher-block{display:flex;box-sizing:border-box;width:100% !important}.wpml-language-switcher-block>.wp-block-navigation-item,.wpml-language-switcher-block>.wp-block-navigation-item>div{display:flex;width:100% !important}.wpml-language-switcher-block .wp-block-navigation__container{background:unset !important}.wpml-language-switcher-block .hide-arrow .wp-block-navigation__submenu-icon{display:none}.wpml-language-switcher-block .wpml-ls-dropdown ul li button{padding:0}.wpml-language-switcher-block .wpml-ls-dropdown ul li button+.isHorizontal{min-wi

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (45458)
Category:	dropped
Size (bytes):	507019
Entropy (8bit):	5.356117740062427
Encrypted:	false
SSDEEP:	6144:Haabrf9N20J65dNM/CJIkSqIwI8beIJz/gJaakK5evQzdXuOUwDXJFJDs5:6affvJcL2sa/gvEjlD0
MD5:	6B8158BFBD226F1D42FA2F4E1ABA00B3
SHA1:	B5955EC57FB9DEEE035C14DDBE10821A2CCAE0B8
SHA-256:	31E6D118DAD4A30F95A27514995F9D300BEA48D8A5A675026A5729F984DB7AFF
SHA-512:	841C7AF4965F169A8E8D07046D3EADB06AFBADE71DC27CF573EC874135EA603A39B43EA45BD1BE8527F403A53986952217339F6D3E15E42B83E6CEDAB21A4FCF
Malicious:	false
Reputation:	low
Preview:	var flushPending=!1,flushing=!1,queue=[],lastFlushedIndex=-1;function scheduler(t){queueJob(t)}function queueJob(t){queue.includes(t)\|\|queue.push(t),queueFlush()}function dequeueJob(t){let e=queue.indexOf(t);e!==-1&&e>lastFlushedIndex&&queue.splice(e,1)}function queueFlush(){!flushing&&!flushPending&&(flushPending=!0,queueMicrotask(flushJobs))}function flushJobs(){flushPending=!1,flushing=!0;for(let t=0;t<queue.length;t++)queue[t](),lastFlushedIndex=t;queue.length=0,lastFlushedIndex=-1,flushing=!1}var reactive,effect,release,raw,shouldSchedule=!0;function disableEffectScheduling(t){shouldSchedule=!1,t(),shouldSchedule=!0}function setReactivityEngine(t){reactive=t.reactive,release=t.release,effect=e=>t.effect(e,{scheduler:r=>{shouldSchedule?scheduler(r):r()}}),raw=t.raw}function overrideEffect(t){effect=t}function elementBoundEffect(t){let e=()=>{};return[i=>{let n=effect(i);return t._x_effects\|\|(t._x_effects=new Set,t._x_runEffects=()=>{t._x_effects.forEach(s=>s())}),t._x_effects.add(n

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:cBsCkoGi1Y:YsD1
MD5:	6F6667ADDD0221D5C69B851F58DAD725
SHA1:	CBB841D9824FCF04CD9F9B401BD9F9C1270ACBB0
SHA-256:	D253D21070B2A11EDD1DF718702AE46C47BF6921AE1C8E53F72F57082427B15C
SHA-512:	A91B33A275CFC7D399C49D8CF9EDF57F931321399681EC16911CED761C549368608A053BCBA27D022453AF7A79D1B4F01A30FF6A08459B876AD3C3A0534C9269
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmKQdAFn_3TpBIFDXFXFuUSBQ0TNArO?alt=proto
Preview:	ChIKBw1xVxblGgAKBw0TNArOGgA=

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	934
Entropy (8bit):	7.728603942466223
Encrypted:	false
SSDEEP:	24:2rvnUNGFDi2/OAQjKK0LLE0ngOQgZ8OXhymVTm:2DmGJi2/OdKHxnwgZVXhymVy
MD5:	C57E8522C3B15E1ABD9EDEA46E313AAE
SHA1:	F0EADDA0160F03C92AB2582831BCDF2D4B982052
SHA-256:	021C6DD4425DEFEADB745F3DCC9E177B71E3E36BE1C04BA9CE57EA879EC26322
SHA-512:	72A0CCFB323AD7AC9C2AAD4C7B5AFA4500424726CF9A881C88B9FA03313D225DDFC9BE080C532B29967D0A9DE2FA50DD3CDC15675488BFEDE818D6C9E6A8AEE5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........+.....XIDATX..Kh.U...gf2.g...Lc.J(.V.Uj%.\H.F%..G.`.M...Hi.\|P\|.....nuQ.J...(..Z...Q..k..F..4..d..f.\|3y`..B...{...........B,.%.*.M...+Q.J6-....e........7F.r.4.+....ja....<..DnM.I.4...#F",C....=...R.,.....c......>(d`>..{.w.;%.1..L.Ss..)..L...2...sf.T.`..f.(.dQ...Z......y....iv.e,T...9?....Kb..........>........v.....L.y.Ek..9.9?.4.:.o..Hy...d.A.1..-d.B.d6WD.y.......`.......^x.s=.X.>....8..$[;....!6..L%x...".0..}..o.....48..Q........s.K'.........\.^z.#.N..U.[.4291IS..\|..i.oZ............__..gi{.....E6....Op..7...`.....h.j1..T..1..2>..Df,.$.8.C..m\|...._....vV...+[....&.9@..d.^W.&..o18`.Y..xa....../..v7....;...O...y.=t.x......VN....x...K\|.Y/.h...:n\W...s.....i.z.]..AF..f.M......D2......O6..`"Y....Q.f....".....3>..Ajm..x....@....w...U..6.q.X.`..M...H[.r(].....3.>.....9?.T.).J.$.$bfD!..0..c.a..L........./.............a.CF........IEND.B`.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	288050
Entropy (8bit):	5.620406007841575
Encrypted:	false
SSDEEP:	6144:PCtGbgBu2o1kx63x0C8Gp/n2ntu9BW24nOF:Kycu2o1yAEu
MD5:	E45AD778FF01C38EAD528FEB26F4C74C
SHA1:	BE2E09F1EA7BC58571318CF28BF6FB37495F9511
SHA-256:	AC0B0322133909885ECFE27B4B43D282FD2A1010C5E9D42D90AF72DA6D06C16A
SHA-512:	A5EE4605A00671FD5CBDA96619999B2E47DE8B74113452F601E1C5FDEC158CB3ADFC770ABE3958D8EFB7A0BD47BF718C54BD9C1DA0C36EE4ACB62827DC898910
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-3N3F1TJNT7
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"8",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":19,"vtp_rules":["list","ovivowater\\.com"],"tag_id":11},{"function":"__ogt_ip_mark","priority":9,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":13},{"function":"__ogt_ip_mark","priority":9,"vtp_instanceOrder":1,"vtp_paramValue":"internal","vtp_ruleResult":["macro",2],"tag_id":14},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2581
Entropy (8bit):	5.000511767650486
Encrypted:	false
SSDEEP:	48:cYAvf3ReY7LLebkVqJ4bkj9JCjwAj3RMbcIRMOPLvsMTnL5j:SvfBese4u44jD+MbcaMOPFj
MD5:	14E20D4517F51DEEEA04DB311CD027CE
SHA1:	C50AAC2F5123A7F16B71B3C286C1ECA39514B9DC
SHA-256:	FAB005DE52CE54D75F373C5A020E7DDD194CAEA5B4BF6E87886196E5D4451ADC
SHA-512:	B41502B8ADA528D4A8C28F969E8D9C789DBA6D6A2E70F755F355522ECFC2935F615EA275764F2728F53CA20A81BA031C114FCD1CD27FFA505CCC61996159E182
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 60" style="enable-background:new 0 0 300 60;" xml:space="preserve">.<style type="text/css">...st0{fill:#404041;}...st1{fill:#0056A7;}...st2{fill:#2E3191;}.</style>.<g>..<path class="st0" d="M22.3,11.5C32.2,11.5,39.6,17,42,26H30.9c-1.7-3.6-4.9-5.3-8.7-5.3c-6.2,0-10.5,4.6-10.5,12s4.3,12,10.5,12...c3.8,0,7-1.8,8.7-5.3H42c-2.4,9-9.8,14.5-19.7,14.5C10,53.8,1.4,45.1,1.4,32.6S10,11.5,22.3,11.5z"/>..<path class="st0" d="M62.2,54c-9.7,0-17-6.5-17-17s7.5-17,17.2-17c9.7,0,17.2,6.5,17.2,17S71.9,54,62.2,54z M62.2,45.2...c3.6,0,7-2.7,7-8.2c0-5.6-3.3-8.2-6.9-8.2c-3.7,0-6.9,2.6-6.9,8.2C55.5,42.5,58.5,45.2,62.2,45.2z"/>..<path class="st0" d="M99.7,54c-9.7,0-17-6.5-17-17s7.5-17,17.2-17c9.7,0,17.2,6.5,17.2,17S109.4,54,99.7,54z M99

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	40862
Entropy (8bit):	7.99556424151272
Encrypted:	true
SSDEEP:	768:PvNxZSp9SvQXLeguxHFg3LcdEjG8A2px01mD0suXmbEVs3TxzQezqI6:PbZSnhd8HAcdEFA2I+u2bEAFzqI6
MD5:	E8F88C54822326EAE6503EA3315E8DAF
SHA1:	D1941D7D9C8C101FAFAB07263B96D5F12C41CC48
SHA-256:	67DDC7B375F21FB2B2CB3EBC9C7B2C597CCECD73BE4622F19DE409F39772EFD3
SHA-512:	0DFF13947F8560158BF4F00D8186845A96CAFDA99E123B3B218A3BD3A1A4609A125BFE9F26C1BAB4711318601475F0AD8F73197B421504F1EE49739C244282B3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....P........>m..F$"..-..X...c-R^e.&`.\..L.%..[..e.O...'..%.w......%....z....../.;./.W...o.Ox_...?....@z_.......................g.~..'.g........5.>(...O1?.~^.o..j.....W.o._.?.{..m.g...g.v.m..?l.......?.>._......i..{..............{....r.O.+..........V8..n...kt..{..\ '.K..^O..._..7\.tr.r...cZ.\....;.......V...d..}...\|../g['..D..`..4.y.. .V.t.O..i...\|..3..p.....Q..Y.~/.i.T.g..yM..d.d....k....G.....5...QAp.....=..:..B...p.3&...n+.@F1....+...\)Pf..p?......s.I.......9....\..3W...ZE~6..(.QY...a.9.l..(.=...7.c...L.t(Y$.;..#...t..d.XU....{...l...]m..........:...i[.[V?....n...R...P....F..Y.......):..<;...6r.6....q..)......3ho._.....Th:&.j.ux.7Sk.e].........,.....%..(..w....%....ZQ.j)...f1u...rZs..xak..1z......h.].(c..+ff....`..Y.......K...>...y,unEg...[.. .e(...mq.m....H.-...k..Hw..N.........M.{_.K.....(...9.............^U..=.)..d..Wb.Qh.kU.T..A...\|...X.L.B.]\..I../.....0./.{..D.Xr06...y3Y..{..bw....i......>CV@.8.x.....<,..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25320)
Category:	dropped
Size (bytes):	341252
Entropy (8bit):	5.582026489392687
Encrypted:	false
SSDEEP:	3072:xa2YwiztGrETvatoMy0R5CptDY8/I8+yq/OUYhcDmKD0C8Gp/Escv5G:Y2gGrgCtoEM+GUTx0C8Gp/E3vc
MD5:	96A9AAC01DDDF730423297E611644D34
SHA1:	3F68A386AAFE983E10625BED36EE36E3DD7B64F1
SHA-256:	F6059C548D92785E5F08BFDE78C6D6AD0931CB92460D11AAC590F920AE613DE3
SHA-512:	32E6431D26D115F08DD3461B331EF838C619DC6B94FB6E77014F3D6A56C0A9A6F18FEF89E52FA8AD5E51932E1524B29C9E97ADDF2B59005905D156879E927DB4
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"134002157"},{"function":"__v","vtp_setDefaultValue":false,"vtp_dataLayerVersion":2,"vtp_name":"virtualPageview"},{"function":"__c","vtp_value":"G-3N3F1TJNT7"},{"function":"__j","vtp_name":"navigator.userAgent"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.videoTitle","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoPercent","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoDuration","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoCurrentTime","vtp_dataLayerVersion":1},{"function":"__v","v

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4713
Entropy (8bit):	4.644067398005169
Encrypted:	false
SSDEEP:	96:SjVaFou7pNAceaU3gLqSIpbSITtk1/ian8tiYtreRgn:hpLePgGScSIpk1rRg
MD5:	58FFAC0FE844A2680B2115D57D5CC817
SHA1:	06671BBDD35FEE8F852E79AAD09B7D93DBFD5851
SHA-256:	346ADD0C6370DC57DDF260CC116AB9FBD662F955C05E2B6B2E39B7F1F61E5444
SHA-512:	FAB4FBCB51177BA5DA82ECAEEA49370883FDCFB948D503A15216A02582DAEAC51BAFCD07215F8B305B42A1FDAE82FAD39569D564C3458C8FBEB73BA396FF4599
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/824ce34e97ecc0e/original/homepage_employees.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Assets/Icons/950Employees</title>. <defs>. <polygon id="path-1" points="0 0.0867151379 27.5137 0.0867151379 27.5137 30.9237 0 30.9237"></polygon>. <polygon id="path-3" points="0.4864 0.0865151379 28 0.0865151379 28 30.9235 0.4864 30.9235"></polygon>. </defs>. <g id="Assets/Icons/950Employees" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Group-13" transform="translate(1.000000, 16.000000)">. <g id="Group-3" transform="translate(0.000000, 0.913600)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>. </mask>. <g id="Clip-2"></g>. <path d="M16.3257,3.7147 C19.3307,3.7147 21.7677,6.1517 21.7677,9.1567 C21.7677,12.1617 19.3307,14.5987 16.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5258)
Category:	downloaded
Size (bytes):	5259
Entropy (8bit):	5.060180329787528
Encrypted:	false
SSDEEP:	96:D95qbslDCpFqImxwoD9N9JT3c5E/9CQipDwdGOddh:h5TdCpFqImxZ5NvAE/9PipDwEOddh
MD5:	FB9F7DAE39619642ED5890E40763EF2E
SHA1:	BC50FA89795E534B7E417E834C70CB674A9D30B4
SHA-256:	70712C8650FEECC46403B5801B9D5B72D5B2D6BA1D1CF0317E105603982321BF
SHA-512:	4E710BEA7BB3C8534D12D485260466B15785C6286CBEBE7BC562B9AD020A6E87A70139385FA6F1338F9048E1787ECF3FA4C48821675153F68D9BDFEA47E926DA
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js
Preview:	!function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e){return function(e){if(Array.isArray(e))return r(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(e){if("string"==typeof e)return r(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?r(e,t):void 0}}(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function r(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];re

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9978
Entropy (8bit):	4.158924727048295
Encrypted:	false
SSDEEP:	96:SjVdGJVJPL8SVZJTNLMcQJD2qSHxea4KcZLaW+kJVJP/8SVZJoNLMcQJDqSHxea6:jbLpkXZLaWzbLGbXZLaWNtzjZtzj1EBY
MD5:	1891A8ADDBF55E720FE70121CFE8F954
SHA1:	60261009DD41FEDEC1BF46C354A9184AE6B8E037
SHA-256:	121082693C9EA40F299D3F6C3C72DD3AE88E60DCF3658D9BDDB6EC5BE353FC63
SHA-512:	FD1E39897120B9CE346A57B4D75CFEB33E76363620B17B4229FBB9BF2318154514CFC38ED6DBBED94082D31535B6D7BF1174C1F0B0BBEE6B991C7C4330FE00FF
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/f7a19ef0344161c/original/homepage_projects.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Assets/Icons/10000projects</title>. <g id="Assets/Icons/10000projects" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Group-15" transform="translate(2.000000, 1.000000)">. <path d="M8.8736,22.2475 L8.8736,39.7445 C8.8736,40.4095 8.3316,40.9515 7.6656,40.9535 L3.5416,40.9535 L3.5416,21.0395 L7.6656,21.0395 C8.3316,21.0405 8.8736,21.5825 8.8736,22.2475 L8.8736,22.2475 Z M20.5386,30.9965 C20.5386,32.3975 20.7346,33.7835 21.1216,35.1205 L12.2896,35.1205 L12.2896,26.8715 L21.1216,26.8715 C20.7346,28.2085 20.5386,29.5945 20.5386,30.9965 L20.5386,30.9965 Z M30.3856,20.7265 C31.9436,19.9665 33.6206,19.5805 35.3706,19.5805 C37.1166,19.5805 38.7916,19.9645 40.3486,20.7225 C40.4126,20.7605 40.4796,20.7935 40.5336,20.8145 C42.6766,21.9045 44.4576,23.6845 45.539

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	443164
Entropy (8bit):	5.164875016015187
Encrypted:	false
SSDEEP:	12288:2VtgEBlABElYH2LsIEZhW5fVIFkrVbDJ7uw2GN:A
MD5:	5FCB76530A4F1B4F2D9972450C5E14DF
SHA1:	7EDB053B781529284A9B7FA6481632E01F2D0AC3
SHA-256:	738DB0BABB94DCBC3899FB2805E7EDC880ABF095BAB070AE46A9454FF814A3D7
SHA-512:	31888CDEA7D850036515B90564CCD23A0916D6A47766A1EE2946BFCD57C9A37227F08519500DE6DEB1CE10BBAB7066E72C964757623E941CEBBAF0F3D8519411
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css
Preview:	@import url(https://fast.fonts.net/t/1.css?apiType=css&projectid=c4bec1eb-18b2-4d07-9dd7-cfb6ba64c12c);@charset "UTF-8";..@keyframes spin {. from {. transform: translate3d(0, -50%, 0) rotate(0deg);. }.. to {. transform: translate3d(0, -50%, 0) rotate(360deg);. }.}../** Import Bootstrap functions /../* Bootstrap navbar fix (https://git.io/fADqW) /../* Import everything from autoload /../ line 1, node_modules/bootstrap/scss/_root.scss */..:root {. --blue: #007bff;. --indigo: #6610f2;. --purple: #6f42c1;. --pink: #e83e8c;. --red: #dc3545;. --orange: #fd7e14;. --yellow: #ffc107;. --green: #28a745;. --teal: #20c997;. --cyan: #17a2b8;. --white: #fff;. --gray: #6c757d;. --gray-dark: #343a40;. --primary: #007bff;. --secondary: #6c757d;. --success: #57a773;. --info: #17a2b8;. --warning: #f19953;. --danger: #dc3545;. --light: #f8f9fa;. --dark: #343a40;. --breakpoint-xs: 0;. --breakpoint-sm: 576px;. --breakpoint-md: 768px;. --breakpoint-lg: 992px;. --brea

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	10540
Entropy (8bit):	7.984824441743455
Encrypted:	false
SSDEEP:	192:y7prJu+hLbSwaJr/bLIsgCBQpJQIRSCC2TQUd+uWANKJQwtmRBQYPlpNpmhvaMSS:y1rY+hLPaJrAsgDpbSyoykJfeaYTbmhp
MD5:	66E511C58DD5A8F3A3014E28C9A1CB2F
SHA1:	C453408D21A038F1D4D4F6B5A1C75448CA74B9F1
SHA-256:	D85426EE9D577C4087214BFD8E87DCDE41552424FD8C1761120D27FD3A8CA9A4
SHA-512:	8592C7B3F0C9D2DBB4FF2375960DDC9BC3725FE085A58443D2C4A1A5FE132AAAAB0BF629D6DEDD0DD171F12CD815000D381AD78D50FC2D8612D1B26BF8D8ECB1
Malicious:	false
Reputation:	low
Preview:	RIFF$)..WEBPVP8 .)...........>m4.H$".......gn...l..._Q.....8k^.:Z....\|.}.&.....,............x`3._.....t....\.........!.p.ht->H.......F..$...u(...A.4.J2/...H.R$l..w..\|N..^.(.6..qK..X.....bf'.=..g.{.I......ad.0.........Li.%..~{4m...o.1W.wT.pc..3....<..D..]p.....h{...:!?..p.-..g.....&..H......x./F....&...DB......`.,".Q....x.I.T?.#j.h.!.17..].t...D...6k..;.5.3W..J%.O6\.nJ.~.+c.h...}....h.Y4@.7....nG.?...s..)... ..c....7..ad...A.`...../.FC>.........[f.M5.L,.&.L.#..z...~..T......Gx...O..L,.&.I....e......:.F.......X.9.8...].%..M..&....c.Uuck...O....].(.5. 9.S...h.Y4A.m..&...z...x.AJ$.oQ.G.....l....0u.6Tn.2..r. ........M?.G....2.;..+....hd...m$.4u......RcM..N.-... ..[4.....=...wo.:Y.2.U_s9.@.l..w..x.....I..y.-xK^....L.q..rDM.......f..N....(....jp:.......z.j..k&,.A#e.p[..../`N.{f.......{........1.3.....1C1\|......+.....G......[..E@..TK.D...1...{..(.2....p,l...H..Z.....p.......JZ......g.^..n.j...^......2..k....^.Xft.E,........>.J.z..#XB.;......

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (409), with no line terminators
Category:	downloaded
Size (bytes):	409
Entropy (8bit):	5.071644775975722
Encrypted:	false
SSDEEP:	12:mtt3FxSFfVBPIwwsMtRsb4KpfNEpSuIXqEn:mxFMBPIaMu4KlNt1X7
MD5:	B2CB713D9736E814A08353C2FEDCB8E1
SHA1:	E5875894947716625D15D46C92DE1B5A222725A9
SHA-256:	F7BB442B06BFB13ECFEE3C3EC2B6B19440A33E080CA9378F8D6F161281BD01ED
SHA-512:	1F3C9906E4566A4DB12379558A6DA10159F0A8B692C72080D1348EE50FDBA1A8B98A2AE93CA8D1CC4F3925067FB25D33B560F9F7ED5B0AE76655F01BFDAA8C94
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1
Preview:	"use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle"),n=0;n<e.length;n++)e[n].addEventListener("click",t)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdown.init()});

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	370
Entropy (8bit):	4.5969897580127865
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEJJsVsVo:2ffmyCkMwykgIaoO4nsrqHdyyv
MD5:	9C2160161305054AF467EA797A7C408F
SHA1:	8B427BC141874CC164E2BE3DB02079FCC99AF9ED
SHA-256:	7F47F02C93D5DE5DE03DB0EBFFA39FE1060767437B086996E295C9818A05B2F2
SHA-512:	FCCC6474CC18139B34DC40F6009C358753658E34CC2DF5B7D2C4E253BFE9647957A2FD23F30C86EC2087C2B250BCB0C570BB9EEF54B10DF6C4A3A6659F56F228
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (32746)
Category:	dropped
Size (bytes):	40282
Entropy (8bit):	5.297025153835865
Encrypted:	false
SSDEEP:	768:0YEzNEfgV+z7Djgt1qkZny0IW7JmFqi50Za4ibR:az6D7DjI7Zny0IWsAa46R
MD5:	130AB680ECB8D8A049F1F4BB47FC0DF4
SHA1:	0A85406B8608040159A0EDBC15CE683AEDD127D7
SHA-256:	585B39E8F0661A1F2CF6C9E55D9F44D69BD77669153423AF2221EE6599F50ED6
SHA-512:	DB13F165BA8758102D1921A8F0DB750F35DBCC334D0ECD0D57B280D063D7DA01E7D011AAAE4A9237D60D386163B53A67B62097778FE8314A5B9AEC7BC844133E
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var Wrappers=function(){function e(){}return e.documentReferrer=function(){return document.referrer},e.documentURL=function(){return document.URL},e.documentCookie=function(e){return e?document.cookie=e:document.cookie},e.isDebug=function(){return Debug._isDebug\|\|!1},e.windowLocation=function(){return window.location},e}(),Debug=function(){function e(){}return e._debugEnabled=function(){return!!Wrappers.windowLocation().href.match(/crl?dbg/)},e.doneSwaps={},e.foundTargets=[],e}(),Performance=function(){function o(){}return o.networkPerfData=function(){if(o._networkPerfData)return o._networkPerfData;if(o._networkPerfData={},window.performance)try{var e=window.performance.getEntriesByType("resource").filter(function(e){return e.name.match(/swap\.js/)})[0];if(e){var r=0<e.encodedBodySize&&0<e.transferSize&&e.transferSize<e.encodedBodySize,t=0===e.duration;if(r\|\|t)return{};var a=0<e.secureConnectionStart?e.secureConnectionStart:e.connectEnd;o._networkPerfData={dns:

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-3N3F1TJNT7&gacid=833971690.1730257278&gtm=45je4as0v883110504za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=64998296
Preview:	<html></html>

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	288050
Entropy (8bit):	5.620406007841575
Encrypted:	false
SSDEEP:	6144:PCtGbgBu2o1kx63x0C8Gp/n2ntu9BW24nOF:Kycu2o1yAEu
MD5:	E45AD778FF01C38EAD528FEB26F4C74C
SHA1:	BE2E09F1EA7BC58571318CF28BF6FB37495F9511
SHA-256:	AC0B0322133909885ECFE27B4B43D282FD2A1010C5E9D42D90AF72DA6D06C16A
SHA-512:	A5EE4605A00671FD5CBDA96619999B2E47DE8B74113452F601E1C5FDEC158CB3ADFC770ABE3958D8EFB7A0BD47BF718C54BD9C1DA0C36EE4ACB62827DC898910
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"8",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":19,"vtp_rules":["list","ovivowater\\.com"],"tag_id":11},{"function":"__ogt_ip_mark","priority":9,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":13},{"function":"__ogt_ip_mark","priority":9,"vtp_instanceOrder":1,"vtp_paramValue":"internal","vtp_ruleResult":["macro",2],"tag_id":14},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	34185
Entropy (8bit):	5.244206570211264
Encrypted:	false
SSDEEP:	768:tjpAHdQu8hIrNjHunBoaaif2ditPu0I80qyGaagvZ8/8Lo+tn6J5jVt1MauA2lqp:tjpAHdQu8QNjHunqaHmZ8/8Lo+tnkjVj
MD5:	C5592A6FDA4D0B779F56DB2D5DDAC010
SHA1:	1025E4BC01E7793FDFD4033B75B2260280D0D33E
SHA-256:	C6D0D78D73C8618C4C22287FB022469BFC689B5EB6F58523B49C0ECF4C306E2F
SHA-512:	2167695DAE9375885B0A928C5507AEE13853E186ECCE86E7B188F4D226E4C4D18CDEBF49CCCCD6ED79FFC9017D0492AF1D5DA30966CF6A539793B7D191C1F767
Malicious:	false
Reputation:	low
Preview:	CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');.CLI_PREFERENCE_COOKIE = (typeof CLI_PREFERENCE_COOKIE !== 'undefined' ? CLI_PREFERENCE_COOKIE : 'CookieLawInfoConsent');.CLI_ACCEPT_COOKIE_EXPIRE = (typeof CLI_ACCEPT_COOKIE_EXPIRE !== 'undefined' ? CLI_ACCEPT_COOKIE_EXPIRE : 365);.CLI_COOKIEBAR_AS_POPUP = (typeof CLI_COOKIEBAR_AS_POPUP !== 'undefined' ? CLI_COOKIEBAR_AS_POPUP : false);.var CLI_Cookie = {..set: function (name, value, days) {...var secure = "";...if (true === Boolean(Cli_Data.secure_cookies)) {....secure = ";secure";...}...if (days) {....var date = new Date();....date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000));....var expires = "; expires=" + date.toGMTString();...} else {....var expires = "";...}...document.cookie = name + "=" + value + secure + expires + "; path=/";...if (days < 1) {....host_name = window.location.hostname;....document.cookie = name + "=" + value + expires + "; path=/

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57765)
Category:	downloaded
Size (bytes):	112427
Entropy (8bit):	4.925295015861728
Encrypted:	false
SSDEEP:	1536:pZeJWfZglWQg5MG7+qehN2pUkxWLZQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LaU3Pq
MD5:	319580D7D8944A1A65F635E0D11E5DA5
SHA1:	E23BC18EF1B0F78F7010E3C16E4C5E1F333248BD
SHA-256:	FB3A89CC6347E098063BD15F285BC90411846DDCE6F17812364FEEDAB67A67F5
SHA-512:	743825EAEA11208277528E506C115EC786AB060095AE4250C65A9B02FE9E5CB2AC5AC386532486A2678B9615490CE75BA096A9FD2041200989AD07A726B5D9D0
Malicious:	false
Reputation:	low
URL:	https://careers.ovivowater.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13626
Entropy (8bit):	5.566458826547008
Encrypted:	false
SSDEEP:	384:BRxUUGXwRkUh3mfRjUKoNaROUPJ8xRVUgy7MRYUNzKr:B/NGXwuI3mf1XoNaESJ8xDpy7MCUzKr
MD5:	12BF122F8E03054CB99540BA2FE19DF4
SHA1:	68D37BCC7F55E07FAA960B6C88179EFB7ACCEE94
SHA-256:	143D300D18809DAA1CD9B17688F50850064A0F16D45C9F7541226A405DD91292
SHA-512:	34A10D034E9C2B6708A7B25690234DCA1CA6E82771E54D743B30BE4D89A375FC3A63603BDDE052F5408D827A950883077E4C09B56BAF3FBE51F0181D825B5B7F
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Nunito+Sans:wght@300;400;500;600;700;800&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Nunito Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t4R-tCKQ.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Nunito Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7txR-tCKQ.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Nunito Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.3 (Windows), datetime=2022:05:19 11:15:47], baseline, precision 8, 735x551, components 3
Category:	downloaded
Size (bytes):	274646
Entropy (8bit):	7.950122723206094
Encrypted:	false
SSDEEP:	6144:oLJiC6aUdkzBUw+5bI/EQ5Q9WPADwsVIcLovUGmxEDGzsJ:uPm2Bt/gQEq8EDGS
MD5:	1C970E5AC96754897222153FBBFF078E
SHA1:	26027BE432AD9B4A22694103B7588C3271A7CDC2
SHA-256:	29E2C9A941FEDEA720DF79BE19D2E163167FBEF549032505FA9049A4C24E1A20
SHA-512:	11280A8407CF5EC43B0169CB928A5B20524D0E7201230F8D36D28E63E559D0164A2A2B515D4D1C9BAA5117947E0E41F2A178481D1BDB125441945D9AD491BB01
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/497b31218fd8e7fe/original/HomePage-FieldWork-Operator_735x551.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:19 11:15:47........................................'..............................."............(.....................2...........M.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...}......sr6...gbg.0..,s. 4....V7..P.k..>..M..o...0.Uz....+xpBp..Wt..r....t.......@,v+...C.c..c>._.2.dlh..?t*Y?[..........,~....V=.K..p..8.K]"7

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	304457
Entropy (8bit):	5.578406344127777
Encrypted:	false
SSDEEP:	6144:vz4GbgBncoek2639cM8Gp//2ljtu9BW24n1a:vzlcncoedjAEw
MD5:	EA2796ECE9BC6E287E492E51BA661773
SHA1:	6FB353903757C7A7E36194DECCA25FD0820AD519
SHA-256:	73CFEBA4996FA59D40FED6AA24EC877708FD8EC146AB3937D8E288059F3C2B6C
SHA-512:	1A5C25119F4D8D42D180288C187A85646BCF85B621B771AB719F3FF2B7D8FD50441B1400C6C015FDC7C3DDE9592158932049CCF111DFDEB10ACA49905CF41325
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-T4MM2GG8C1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (925), with no line terminators
Category:	dropped
Size (bytes):	925
Entropy (8bit):	5.12760413328428
Encrypted:	false
SSDEEP:	12:mL52xyDFXn1pA+Sr3FxSFfVOYBwZD5LDGPIwwxFntRsXodeLpNeVpSuIXqMKin:E201yFbFEOYYEPI3pDUpF1XjKi
MD5:	9488E4DC030E44F71CA8DEE320D7B794
SHA1:	D109C2AEB3C8B8A335D8C497A53120CDD20928F4
SHA-256:	656955DD522A5AD6E4854B1AE8CC510C8EAFAB407CE64EC7957B5C23A8014BD1
SHA-512:	06A512289CE755BADF40C4FDBCDAE68E473F8D483BD84DED91275C791A46F1722B627BDDE32CBE7100733B260EEF572B24FAB72F2A95AAE30B4F1D5FAB9559F1
Malicious:	false
Reputation:	low
Preview:	"use strict";var WPMLLanguageSwitcherDropdownClick=function(){function l(e){var t=this.querySelectorAll(i)[0];return"visible"===t.style.visibility?(t.style.visibility="hidden",document.removeEventListener("click",o)):(t.style.visibility="visible",document.addEventListener("click",o),n=!0),!1}function r(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}var c=".js-wpml-ls-legacy-dropdown-click",i=".js-wpml-ls-sub-menu",n=!1,o=function(){if(!n)for(var e=document.querySelectorAll(c),t=0;t<e.length;t++)e[t].querySelectorAll(i)[0].style.visibility="hidden";n=!1};return{init:function(){for(var e=document.querySelectorAll(c),t=0;t<e.length;t++)e[t].addEventListener("click",l);for(var i=document.querySelectorAll(c+" a.js-wpml-ls-item-toggle"),n=0;n<i.length;n++)i[n].addEventListener("click",r)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdownClick.init()});

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	40862
Entropy (8bit):	7.99556424151272
Encrypted:	true
SSDEEP:	768:PvNxZSp9SvQXLeguxHFg3LcdEjG8A2px01mD0suXmbEVs3TxzQezqI6:PbZSnhd8HAcdEFA2I+u2bEAFzqI6
MD5:	E8F88C54822326EAE6503EA3315E8DAF
SHA1:	D1941D7D9C8C101FAFAB07263B96D5F12C41CC48
SHA-256:	67DDC7B375F21FB2B2CB3EBC9C7B2C597CCECD73BE4622F19DE409F39772EFD3
SHA-512:	0DFF13947F8560158BF4F00D8186845A96CAFDA99E123B3B218A3BD3A1A4609A125BFE9F26C1BAB4711318601475F0AD8F73197B421504F1EE49739C244282B3
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/65510963a54fda2/original/IndList_Oil-Gas-408x500.jpg
Preview:	RIFF....WEBPVP8 ....P........>m..F$"..-..X...c-R^e.&`.\..L.%..[..e.O...'..%.w......%....z....../.;./.W...o.Ox_...?....@z_.......................g.~..'.g........5.>(...O1?.~^.o..j.....W.o._.?.{..m.g...g.v.m..?l.......?.>._......i..{..............{....r.O.+..........V8..n...kt..{..\ '.K..^O..._..7\.tr.r...cZ.\....;.......V...d..}...\|../g['..D..`..4.y.. .V.t.O..i...\|..3..p.....Q..Y.~/.i.T.g..yM..d.d....k....G.....5...QAp.....=..:..B...p.3&...n+.@F1....+...\)Pf..p?......s.I.......9....\..3W...ZE~6..(.QY...a.9.l..(.=...7.c...L.t(Y$.;..#...t..d.XU....{...l...]m..........:...i[.[V?....n...R...P....F..Y.......):..<;...6r.6....q..)......3ho._.....Th:&.j.ux.7Sk.e].........,.....%..(..w....%....ZQ.j)...f1u...rZs..xak..1z......h.].(c..+ff....`..Y.......K...>...y,unEg...[.. .e(...mq.m....H.-...k..Hw..N.........M.{_.K.....(...9.............^U..=.)..d..Wb.Qh.kU.T..A...\|...X.L.B.]\..I../.....0./.{..D.Xr06...y3Y..{..bw....i......>CV@.8.x.....<,..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12874
Entropy (8bit):	4.0301848300241705
Encrypted:	false
SSDEEP:	384:vsMkVniVa8Ha8H1St8WpoCqUI1St8WpoCqULG:aViV5ZVStptqUI1StptqULG
MD5:	A9EB62352A641DE4DA4B411F0383D995
SHA1:	B83AA5ACB6F469CD2DF66444C712C057BA34150A
SHA-256:	C44597FA025E912F22735BED89A4004B3BB2540B5588DEFDE5E35449094AE5C4
SHA-512:	6EE5C81BA679E5F9E1CB62DF8592997DCEB4A58537EE1AA74344F0DCC3855F9A7ED85B5D9ABED64E33329B244B0B5AFD5E30186164B859D7B4A1BDFA03C5824A
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/5c95d78cfeb29b44/original/homepage_brands.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Assets/Icons/10LegacyBrands</title>. <g id="Assets/Icons/10LegacyBrands" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Group-13" transform="translate(11.000000, 4.000000)">. <path d="M11.4653,44.6152 C11.4653,34.7282 19.5073,26.6822 29.3953,26.6822 C39.2793,26.6822 47.3213,34.7242 47.3213,44.6152 C47.3213,54.5072 39.2793,62.5492 29.3953,62.5492 C19.5073,62.5462 11.4653,54.5032 11.4653,44.6152 M49.9383,44.6152 C49.9383,33.2882 40.7233,24.0702 29.3953,24.0702 C18.0683,24.0702 8.8493,33.2852 8.8493,44.6152 C8.8493,55.9462 18.0683,65.1612 29.3953,65.1612 C40.7233,65.1612 49.9383,55.9432 49.9383,44.6152" id="Fill-1" fill="#510C76"></path>. <path d="M11.4653,44.6152 C11.4653,34.7282 19.5073,26.6822 29.3953,26.6822 C39.2793,26.6822 47.3213,34.7

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1622 x 1447, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	60722
Entropy (8bit):	7.445973123849562
Encrypted:	false
SSDEEP:	768:9/p9a3zUJgzwMhDCuNXT5zq9hfh/HhNC1uKGlIs3QlYtLTDkI5R+IjO1Trr/gPnv:FcwJgSuF58hBBgAKBs/TwiR+IjUH0v
MD5:	BA61E9A8FFA9757AF5E7C7E3BF0A9699
SHA1:	7610FE026768E78C281EF80F76C9614674D04F91
SHA-256:	A72611729AEAB518D5D00B1BA05E3037841038E614AB44161B5FDED1D0B2D24F
SHA-512:	8CD727124AD47B187C643D118CBD39F4E093769554768CE45C1FC272F99E6501CCC09AED5827B48E333E1AD2F566DFFC9F576CAAC80EF25F22B6ECF9101FA48B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V.........1.N.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...[o..y..)....LZ....%R\Qg.KR.E.%E'.:R...e...-..I..-..E?C.D.M..\|..Q{j..."k.Iq.3;..,^.{oH.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2209
Entropy (8bit):	4.927549308458187
Encrypted:	false
SSDEEP:	48:kMJFiNMRgmKYcMfotnY5slupCnGmqPRppWzhlmyZoA/OhlmOGE88:70oVKYLA5YylENbqmGo5mOt
MD5:	2423DB35158BFA7395BEDFEF423C4A97
SHA1:	633F6E321EC269D8888A5AB1E0D57E451025604E
SHA-256:	F0422210B7FA8AF6460F7F5D9D4F20CD55C1AD746DEF3DBB2E2D7C0CD8043F42
SHA-512:	EC9EF55FAA6C1E88EAC420D0A8FEFD6E7F8B20E7C487186B980A9CC3A1F1228FFCB876E249A76915357431DE24CC3535C9972AAD9EABB6BD589131643505C266
Malicious:	false
Reputation:	low
Preview:	jQuery(document).ready(function(){. jQuery(".accordion-scrolling-content-block:first-child .accordion-scrolling-content-block-text-inner").addClass("visible");. jQuery('.accordion-scrolling-image .img-bg:first-child').addClass('visible');.. // Get the current date in a format that's easy to compare (like YYYY-MM-DD). const today = new Date().toISOString().split('T')[0];. . // Check if the popup has been shown today. if (localStorage.getItem('popupShownDate') !== today) {. setTimeout(() => {. if(jQuery('.annoucement_popup_wrap').length > 0){. jQuery('.annoucement_popup_wrap').addClass('show_popup');. jQuery('body').addClass("body_show_popup");.. // Store today's date in localStorage to ensure it only shows once per day. localStorage.setItem('popupShownDate', today);. }. }, 5000);. }.. jQuery(document).on('click', '.annoucement_close_popup', function () {. jQu

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=470, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=627], baseline, precision 8, 627x470, components 1
Category:	dropped
Size (bytes):	143984
Entropy (8bit):	7.91459778186148
Encrypted:	false
SSDEEP:	1536:D+T+Qpimd9Dw3lu5ojhQgN9RlbV+L/JawybSNKA/GcXvgR9I2M0R4AIz3NOE4mzW:uO1bchobiROEm1wimgo1Hy+QbRIg
MD5:	C8BD5D703248586CC6A8BD1DB5C75C47
SHA1:	47F785E2C61DD8FF0EC0EBA0E851FDF72021BC23
SHA-256:	06DB3C3E7DE8FD9475A49D78597A7653BC97542642854F7C5AD2F4875769BBE4
SHA-512:	C9F9BB39AEF9992CD02471E83FE908B0F17A8453D2A3E309149CA29DA3131ECC5A4BD606904236710FBD508530FB1AF1507A11BAC404D33271532282CDAC09D1
Malicious:	false
Reputation:	low
Preview:	.....iExif..MM.*...............s.......................................................................................(...........1...........2..........i............. .......-....'..-....'.Adobe Photoshop 22.3 (Windows).2021:03:15 14:46:12............0231.......................s...........................................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................p...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...{......7.G.7.(...7+....l...{^k.........j.....#..cVL.m:G.]?K..rJod.\.g.:.R.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	54694
Entropy (8bit):	7.996316425516966
Encrypted:	true
SSDEEP:	1536:fBg2KrU8gSFf41bTAN8g35+RTbq98nEwWU6c:pg2KY8ZH5+R/gI0hc
MD5:	CBC4C852A8C763A8099DB558FA1F69EB
SHA1:	AD452FD530FC3F6A8B26964F6F8E9889788E0FDB
SHA-256:	3D422F3DAD89E9681ECA91D7454A1EB228A6DF2E59CA197CD61C50D4F4F62B5F
SHA-512:	3196C867C66F9A8007FDE1390F9DCBEB84FF305B0C57C05A573094200B24368B0A6724FE041BEBE7DF105E9F788255FB01220BD3D69553EBCE7A86AD5C96F55F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .............>i(.E.".....@....@..@....Q.......s..yT\|.{....y........O......W....'?W.g.....}....>?....._.q.3.=.o.oP..~d....i.....E.U._........_.k.7....r........}~.......`.o>..W.......~#......{..R...o..O.^........W..v..?...............d..z...........7..\|N6B.G.......9P.'......2Z9....z..2$.&...<....W..#.s.,3xT.g.........K..c..ck.\w.."...D...H..8.J.L....G."phl.....y....R....V2..K....zf.X...N1!&..c.Qi.;....j"P.K.c.mVX.K...e.&tf.8.Yt...../z..<L3...W......A.&.HB/X. .R.."...`...#.~N.q7I+..w.........-.0..]....e&.Sqz'...S...n...!.Ku...S.\.[>fp%(5...&.$..Y.jh.......#...W..$...FO._M..n.!.......#tG.TQ./6.....FX.:3..qJB.Z.-.J}...H1=...;.$..x...G.../..].......}...^..9..p....z>.K].D.....N.!.......))x...........~O..JS.$.N5T...i.J..U.).j...X....7....+../.....X...J....J..I.`].E].l.>...{.....np../.MQ..H*.6.0 .,......=..N_.3.~..#.Ns...7j@.\`Mq._)9...y.m....x.@.~,....CS...?....%z....P1p......zQ.........A.\|....j5..V..1..... ..F.....Q.R?...!w...9.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	164
Entropy (8bit):	4.74524608077268
Encrypted:	false
SSDEEP:	3:YRM9HfHFfQ66WMcdXc1EPJSAMGAh8xLERDWgRnU/iEhDELGGS7gW9:Ys/lLycdc1EPJSAghPRzRU/RV7G1W9
MD5:	AA8C28789308CEF6538625CF09AD59AC
SHA1:	1A3D5DE45B0AF576268505F6E4D9F872430D9A03
SHA-256:	147FE2A06AF419A9D22EF81FB77BC434E2FBC51133882FCCCCA40F7EF5F3943D
SHA-512:	F4C7797CF60759F60FE963479E0A93CFA4602EA3D17F5B916A98BE733BB8A19F80BBE8D19CA37A54B16AADE398F3A9FAD3A39DF695AC7ED770214AD0A6DC5AB5
Malicious:	false
Reputation:	low
URL:	https://cdn.acsbapp.com/config/ovivowater.com/config.json?page=%2Fen%2F
Preview:	{"time":"2023-06-27T15:25:33.984Z","app":"app","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"blockWatcher":false}

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	34185
Entropy (8bit):	5.244206570211264
Encrypted:	false
SSDEEP:	768:tjpAHdQu8hIrNjHunBoaaif2ditPu0I80qyGaagvZ8/8Lo+tn6J5jVt1MauA2lqp:tjpAHdQu8QNjHunqaHmZ8/8Lo+tnkjVj
MD5:	C5592A6FDA4D0B779F56DB2D5DDAC010
SHA1:	1025E4BC01E7793FDFD4033B75B2260280D0D33E
SHA-256:	C6D0D78D73C8618C4C22287FB022469BFC689B5EB6F58523B49C0ECF4C306E2F
SHA-512:	2167695DAE9375885B0A928C5507AEE13853E186ECCE86E7B188F4D226E4C4D18CDEBF49CCCCD6ED79FFC9017D0492AF1D5DA30966CF6A539793B7D191C1F767
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.2.6
Preview:	CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');.CLI_PREFERENCE_COOKIE = (typeof CLI_PREFERENCE_COOKIE !== 'undefined' ? CLI_PREFERENCE_COOKIE : 'CookieLawInfoConsent');.CLI_ACCEPT_COOKIE_EXPIRE = (typeof CLI_ACCEPT_COOKIE_EXPIRE !== 'undefined' ? CLI_ACCEPT_COOKIE_EXPIRE : 365);.CLI_COOKIEBAR_AS_POPUP = (typeof CLI_COOKIEBAR_AS_POPUP !== 'undefined' ? CLI_COOKIEBAR_AS_POPUP : false);.var CLI_Cookie = {..set: function (name, value, days) {...var secure = "";...if (true === Boolean(Cli_Data.secure_cookies)) {....secure = ";secure";...}...if (days) {....var date = new Date();....date.setTime(date.getTime() + (days * 24 * 60 * 60 * 1000));....var expires = "; expires=" + date.toGMTString();...} else {....var expires = "";...}...document.cookie = name + "=" + value + secure + expires + "; path=/";...if (days < 1) {....host_name = window.location.hostname;....document.cookie = name + "=" + value + expires + "; path=/

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	304457
Entropy (8bit):	5.578347933181446
Encrypted:	false
SSDEEP:	6144:vz4GbgBnco2k2639cM8Gp//2ljtu9BW24n1a:vzlcnco2djAEw
MD5:	CEF0EB2AF9E24AFB337E6311361345D3
SHA1:	0E9086C809300C0AA987C4E2FBB7B88CEAD36FF8
SHA-256:	EE5BBF5B3F7F2AC1F15345FB4F5D6AED5B43FDE086B7576F8698C52D06C50DB7
SHA-512:	2B5A6BDD5F86D8A6181A9813A4BA0A3447E45A2DF83B913617CDDC97FBD45D5EAB2ABADD2AA7BB46C3B8601ADA2D8703BAE7B9A82B870721EC622CEB821EFBAC
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	dropped
Size (bytes):	226541
Entropy (8bit):	5.378840825832781
Encrypted:	false
SSDEEP:	1536:6wmvhwvwVyhMwe+04f1VHv9ixmXeTX0b7DDDbGw5wyP+zhEK9yr2IG+UNsnVB0iR:2hwvwVaMwB1TixsnpIhEY6VUStJYScYt
MD5:	EC34F7A549BB7B8A0957652DE86E3475
SHA1:	C49251C4A953052F327F76A0275135E102AD8536
SHA-256:	C0D57EFF0936A57E0C8D6BC93314585C734E5ADE88D6DE970E1E305AE5D87224
SHA-512:	805FB48BF271D8960E19B014D07FDEA5A054036636FC4074781418E020DB1CCD8B773853AE3A59F44DBAC0C5E53ABCC70266DF6E908FDC5D46783FB2106BE777
Malicious:	false
Reputation:	low
Preview:	/! For license information please see modules.625495a901d247c3e8d4.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9976), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	86531
Entropy (8bit):	4.734093510044683
Encrypted:	false
SSDEEP:	1536:+ap4oTNklGc/Tq1AakpuB4eueGe8eOeB2zSIPceGeZe7exeKc9n/fTxW/V10XFXE:RrNklGwW2uScZHTxKV11
MD5:	51E94578B859EB631192A6441C515ADA
SHA1:	98BC55697D1C097AE821464798ED7ABB543CAB05
SHA-256:	90E710CB4912C9DA8113C7558A318C9C9D41506B22EA270B16C5A66B1179810F
SHA-512:	008C81DE166E5EE55BB4CD965063E2C8DF4B043C6623019E779D74AA46FBBBA0ABC8303DF2C5B0F352DD77942FCD395712AD190259412CBDF182487347BD065F
Malicious:	false
Reputation:	low
URL:	https://careers.ovivowater.com/?_gl=1%2A1wj41xj%2A_ga%2AODMzOTcxNjkwLjE3MzAyNTcyNzg.%2A_ga_3N3F1TJNT7%2AMTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA.
Preview:	<!doctype html>.<html lang="en-US">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0, user-scalable=no" />.. <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />.<link rel="alternate" hreflang="en" href="https://careers.ovivowater.com/" />.<link rel="alternate" hreflang="fr" href="https://careers.ovivowater.com/fr/" />.<link rel="alternate" hreflang="nl" href="https://careers.ovivowater.com/nl/" />.<link rel="alternate" hreflang="de" href="https://careers.ovivowater.com/de/" />.<link rel="alternate" hreflang="ch" href="https://careers.ovivowater.com/zh-hans/" />.<link rel="alternate" hreflang="hu" href="https://careers.ovivowater.com/hu/" />.<link rel="alternate" hreflang="x-default" href="https://careers.ovivowater.com/" />... This site is optimized with the Yoast SEO

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=2500, bps=0, PhotometricIntepretation=RGB, description=Two petrochemical contractors closing a deal in front of an oil refinary, orientation=upper-left, width=5256], baseline, precision 8, 1000x1232, components 3
Category:	dropped
Size (bytes):	787568
Entropy (8bit):	7.959463192529629
Encrypted:	false
SSDEEP:	12288:Fwg+FYZdv4GdwhF+X+G7C/Za8FgdnEBior4TaV3BtP8LSmGD7x7yStvqgv:H5dMy7uXFgdEBWC3oLYD7x7Ggv
MD5:	229DE5A2FE6064B8C6DCB9FE5FE7D836
SHA1:	1A7D6C2E498592C88DB28701679E5CB7D849D6FB
SHA-256:	E31029B6BD834E49BB75373E29613C7A9EC0CFF7E0ED1796CFECB0D932A5B324
SHA-512:	13F690D249C50603775CCEC9AD45FB383115DFDB0F348A4A6F1EDDBDC701BB578E5FDCEEC4C1B94BB3BFF70C11E1D97FFF99F3B75EFCDA86AF4FCC34F55E43A5
Malicious:	false
Reputation:	low
Preview:	....%:Exif..MM.*.............................................................I.....................................................(...........1.....!...!.2.........B.......................V.i.........`..........Two petrochemical contractors closing a deal in front of an oil refinary..-....'..-....'.Adobe Photoshop 24.0 (Macintosh).2024:07:04 15:15:35.Bigstock............0231................................................................................(................................#<.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...........

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16532, version 1.1966
Category:	downloaded
Size (bytes):	16532
Entropy (8bit):	7.987395589934548
Encrypted:	false
SSDEEP:	384:Kqtt4H+rKuLEr0/ZlIh6Iz6cNW+q1zDWsys2lL8gOmCfpkdr5:KqYHCLEw/LI7z+GizjadV
MD5:	7EA46641F8D302EA057E99C9CCB1FE24
SHA1:	71F43B3C437BC05A2130D979923E03CE15DD8F23
SHA-256:	3E41B62116935141D5DB7D56979CF58D387BC277EC27EBDBCDC224EBCF71CCB0
SHA-512:	54F8FFF2FB2A8B977DEC780F456F09D964E50E9BD1AE7CDFAE008C3D40FEE5BB0D5309CDF6C078D98121F48A3E54FFFFAEE5C346FBA56AEAA44B833C299A3880
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/dist/fonts/avenir/16695c2d-c755-45a2-bdcf-c54843f39afd.woff2
Preview:	wOF2......@...........@5.........................`..`..\..d..P.....<..2.6.$.....".. .. .... ..H...7p^....".P..`...P...oT.m.G 7.).s!....:chRH[.T.n?.#..&d..t..X..l.F"...\|q..Y.]....(.U.Z.eo4..4..../7oY'd..87..p.!..^d....A..z.@.F...Z..C_,r\|)..7.7.I..>...K<X.V..Qa..Y...._.S.T......n.@...rK.M..`....$......G..Ue..kF.l.8@....P2...D....31W:.....)..Y.\..R.....\|..%.@.3.2i..4...,...6}..a#xy...d../.&.S.Pm^...Eh.2....pw)......)..v].:..$...N.]..9....{..}. .......[...!K7$.!.....kYYw..-.*.Mt.s,.T..w......".`c).O..........\..s..x.H.OT....U.N........G...OX.........nCD.S....<5.x.%....L..H.c....~(.\...........d.$..t...+.#..............+(_\|.P.FR...S....."r._xz..V.(...O.CF....w...q..SH.^9.8`IB..jwA..T.+.+.b.+3.#.?ra.Y./X.g.Rq..R.@...Q.y.....&...2.L.....26H...d.......... .;M.".\...p..g. ..$W....>..J.J.2........BH.._X..K..G.k2r..Rsgv.e....RP.....W.A..8.....%+........<L.>.U.h..m={.=..~.`.g..fiN.M......5..LAP?.V....".X.A.a...o....{....C(.$...H....Cp7..(t..~R. ...".$

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1649), with no line terminators
Category:	downloaded
Size (bytes):	1649
Entropy (8bit):	4.82044104995672
Encrypted:	false
SSDEEP:	24:qF03YATZa8WCNWk8WaKxUmKYONWaL549UVyEDmvL:w03YAtzWCNWRWJK/NWa54WV9mj
MD5:	6966F61E1BEEFEEDA78FBD387D579F8A
SHA1:	FB5F7F17A041A93EA8A308473086EF203C17DB7C
SHA-256:	C85B89D6B7D92272F7FB5946E61282A75B946883176C9FF73EAC557DDE75C724
SHA-512:	3850F5C4127726D77A90B0B527EE832DFB8418F09A13D390F7B5404D3EFFB2012EFC9529200071E3AE0CF8CABC84D45EC28993B675B484A118829815D493B2DC
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown-click/style.min.css?ver=1
Preview:	.wpml-ls-legacy-dropdown-click{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown-click>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown-click .wpml-ls-item{padding:0;margin:0;list-style-type:none}.wpml-ls-legacy-dropdown-click a{display:block;text-decoration:none;color:#444;border:1px solid #cdcdcd;background-color:#fff;padding:5px 10px;line-height:1}.wpml-ls-legacy-dropdown-click a span{vertical-align:middle}.wpml-ls-legacy-dropdown-click a.wpml-ls-item-toggle{position:relative;padding-right:calc(10px + 1.4em)}.rtl .wpml-ls-legacy-dropdown-click a.wpml-ls-item-toggle{padding-right:10px;padding-left:calc(10px + 1.4em)}.wpml-ls-legacy-dropdown-click a.wpml-ls-item-toggle:after{content:"";vertical-align:middle;display:inline-block;border:.35em solid transparent;border-top:.5em solid;position:absolute;right:10px;top:calc(50% - .175em)}.rtl .wpml-ls-legacy-dropdown-click a.wpml-ls-item-toggle:after{right:auto;left:10px}.wpml-ls-legacy-dropd

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	13850
Entropy (8bit):	7.987758035889875
Encrypted:	false
SSDEEP:	384:BmxLyFxjOo+MdbhJGSuJIt8m6Kp8sW4Hb2HBz:7FxSMrJGSb8mRNHby
MD5:	21218DBC58308C227225AD5C475BDCE9
SHA1:	AAB0932DD125115503FCE23AC30AB6CA5F9B627A
SHA-256:	6A6379D6A89EE99E149F522D2288FB03F1BFADCE293FB9D89A9EF030D37B62E0
SHA-512:	B01C2562D24E6665461F29D51827560BEC26773E7655335F245F1A3A350E0650CFD98A937AE008BB6429E65CC5522974357213C8DA228F8093CD46C62A2CE7BF
Malicious:	false
Reputation:	low
Preview:	RIFF.6..WEBPVP8 .6...e.......>m2.G."..%s.....gm....R...xRo....,<=.I.g$..."....z.E.wy.....O..j......et-..2qq.,N.K(t...f&!R.h..2 'p..8.8}..'.]W.?@........._...a...;q`g...e..ujk.vJ.a.....G..A...'.;..N.5e.....O.Z..p\|.e.`'...J...0.7.....,,.R..m;.....k...O..WG....&XA...9.=....I..l.e.`.gO..#[.I...jo.$C.....lA-....SCG.....D.%....=N..e.]f.Dz.j&R......I.#.}.^.1E. ..u`S...su..e!.(6......#$.3.......Zv.m.N.MF.....w..U..T.R.JM.....#]..<nD...0.....\|.=.........b]......B..%.n../.8.pXd...X..R.g..z..n.K.Na:i[.....'..>....2...t.R.^.g;.<.k.h,..9..".<..(.;..J.a.J.L..&...$.o.....#.y.d{.q...Pn.F."\|\....#/w1...e.=K.E.1."5.N.h/.<._L.ag>u.f.B\|.%...J.A..D.......ly.n.6....@>4...+...-yD.......fm.O.s..;.s!.+.j.....K..f..j........).../+..o(u.o...>O..\|.......F.Jwq9.c...A..v....f.,'.Or."..XUT_%.2.....oY.............xZ....#...z..dTW.ZE.....L.....%........G.#....../.>>N". ?...~dt._.\.$........m...t<(..l..Tf.#..;Q..+.B."E..&.QtM...d......s.e..$Y....3...0.@u.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31052, version 1.0
Category:	downloaded
Size (bytes):	31052
Entropy (8bit):	7.994212302026679
Encrypted:	true
SSDEEP:	768:O0RiZKVUEuUY9yqDvkLAGxqwSUZZ+ntzoNQG:O0RvFuUY9qn4wSG+C
MD5:	5C4F357D4926FC197D43ABC63B7FCA8C
SHA1:	686AF7000D038D7479ED36B48A8EBB0EA9B98AEA
SHA-256:	1393ACC632C160DEF86B45C2521C8EE742B7E6239D0D90FB95F51D55CF48B9C3
SHA-512:	9F760F0C8C7FE583BBCB8270ABF62C826D33FA6DCEAF820533B64B56742284EC9B750066DAAF9E4D3C0305373D1DB8BD2AD47BBB88573610F0BE2A617E183DD6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-s.woff2
Preview:	wOF2......yL.......@..x...........................u...v...?HVAR.$?MVARb.`?STAT.z'2..2/d.....0.}..N.0..>.6.$.... ...../...I.5l...[..0....q..=7v0..U..@......X..OI.?d,>...nK...I#.".J+...3..kF.s.....>U.s..C..W.U.C..%`e....Y.a..5.{.1...z.......)8....K...p0..Zh.r..J...). .. .......G...]..-^T.z3.....s_Df...Ru....k.+r%2.......[.%.F.Z..?.4....h......P.....%..j.....Y...1.4i.Z.5/.....<...Jw....h:....5.J-.K.&..rqo...SK...2>..0s.l........g........_e..m...D..'...~.q.w.)C,A...A.@....{....4J.#.k.c....G.?.n.=...E......W..]].e..(...[.~...EI.VX....<Hx2`[z...I..z}@)..............,rD.......2.......z.R..t.$;.$.'....<nV.\|....~&A.!...Q...+&...M]........W.0-.<........Ig.+..g..=.....".+..8.d.d..-...O...d<.W/.H$R.D"...\|.....L...).9{./...c(0....oj..xx.^^.nN..........R....c..-.....FK..\|...',.\|..T.N......2...i.,....s..t.*.Z......u..>.e..<....!s..~U....@.$.04..T.j.fL..wA.(6A.l......^."..BI$.....(l..M.l..D'_...f...HA.Qv.6~k.....y....V.#:....{.H:...+...t..d..X.Ty).p..m.../..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows), datetime=2021:03:15 15:11:50], baseline, precision 8, 408x306, components 3
Category:	dropped
Size (bytes):	133055
Entropy (8bit):	7.929879243301676
Encrypted:	false
SSDEEP:	3072:FfNb/uZek8GaEi85tYysUOtyXIyngoxRbiCIZF7YN+wgQuGRYb:Fflux8Gt/kU4oMCIZZQ+b
MD5:	7D4B1950FE19D4BAC160F97DCE3D7605
SHA1:	7FD7E447347BB8CDA49636159A0AC754C20B36AC
SHA-256:	844705BF5084ACE5ED8B050EC3B48BDA61D80064187B734ACC6D3E44C4C037BF
SHA-512:	D90FED71E9605103A63F531306E3E0EBF1BD75B36E2CE86679280AE9F83372B8F49EA99C9DEB38FC0EF19E30D36E7A5907D53CFAB2B546BF9085EF0844444490
Malicious:	false
Reputation:	low
Preview:	.....~Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.3 (Windows).2021:03:15 15:11:50.........................................2..............................."............(.....................2...........D.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................I.a.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..`.7...'L....KN...WE.......%.s@;...?........<5...`.h...jd`..*u.8..X.s,..>[.i....~..X.[...o...-...]....L.1.....x.a...tzs.&...q3...B.........llw.kGo.D

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1622 x 1447, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	60722
Entropy (8bit):	7.445973123849562
Encrypted:	false
SSDEEP:	768:9/p9a3zUJgzwMhDCuNXT5zq9hfh/HhNC1uKGlIs3QlYtLTDkI5R+IjO1Trr/gPnv:FcwJgSuF58hBBgAKBs/TwiR+IjUH0v
MD5:	BA61E9A8FFA9757AF5E7C7E3BF0A9699
SHA1:	7610FE026768E78C281EF80F76C9614674D04F91
SHA-256:	A72611729AEAB518D5D00B1BA05E3037841038E614AB44161B5FDED1D0B2D24F
SHA-512:	8CD727124AD47B187C643D118CBD39F4E093769554768CE45C1FC272F99E6501CCC09AED5827B48E333E1AD2F566DFFC9F576CAAC80EF25F22B6ECF9101FA48B
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/5647cc391f6f25c0/original/Ovivo_Logo_Tagline.png
Preview:	.PNG........IHDR...V.........1.N.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...[o..y..)....LZ....%R\Qg.KR.E.%E'.:R...e...-..I..-..E?C.D.M..\|..Q{j..."k.Iq.3;..,^.{oH.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4713
Entropy (8bit):	4.644067398005169
Encrypted:	false
SSDEEP:	96:SjVaFou7pNAceaU3gLqSIpbSITtk1/ian8tiYtreRgn:hpLePgGScSIpk1rRg
MD5:	58FFAC0FE844A2680B2115D57D5CC817
SHA1:	06671BBDD35FEE8F852E79AAD09B7D93DBFD5851
SHA-256:	346ADD0C6370DC57DDF260CC116AB9FBD662F955C05E2B6B2E39B7F1F61E5444
SHA-512:	FAB4FBCB51177BA5DA82ECAEEA49370883FDCFB948D503A15216A02582DAEAC51BAFCD07215F8B305B42A1FDAE82FAD39569D564C3458C8FBEB73BA396FF4599
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Assets/Icons/950Employees</title>. <defs>. <polygon id="path-1" points="0 0.0867151379 27.5137 0.0867151379 27.5137 30.9237 0 30.9237"></polygon>. <polygon id="path-3" points="0.4864 0.0865151379 28 0.0865151379 28 30.9235 0.4864 30.9235"></polygon>. </defs>. <g id="Assets/Icons/950Employees" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Group-13" transform="translate(1.000000, 16.000000)">. <g id="Group-3" transform="translate(0.000000, 0.913600)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>. </mask>. <g id="Clip-2"></g>. <path d="M16.3257,3.7147 C19.3307,3.7147 21.7677,6.1517 21.7677,9.1567 C21.7677,12.1617 19.3307,14.5987 16.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	dropped
Size (bytes):	390508
Entropy (8bit):	5.512450556643701
Encrypted:	false
SSDEEP:	6144:sz4wjOQOyxYr9vKs8cb+zmPYEhCRYYMrmgmETVFzrpQqr3K9zwrcRjI0UI0MoIJW:m48OhpZ+zmP6N8
MD5:	0719DEC86BCD3822363511015C70E8C5
SHA1:	AA9A0D2B04B5C6BD20CBF6DCDB1293FF1CE8B53F
SHA-256:	B76CA903BECF077BB91FE8B7D18E62B6CA078CE408E0279778DDA3F859E693D8
SHA-512:	E66F5307A9D3A9175D8445EA82FD2C0389F588FA573370D2BDAAF9BDDB6FD07C80FA036E79328CF25EFCE7C31E6BD1788175A9C49FC39899625E512A4C9D9279
Malicious:	false
Reputation:	low
Preview:	!function({retentionPeriodDays:e,timestamp:t,daysBeforeNotice:i,productName:s,version:n,ignorePattern:a}){if(a.some((e=>RegExp(e).test(document.currentScript.src))))return;const r=(-1(Date.now()-t-24e60601e3)/864e5).toFixed(2);r<=i&&r>=0?console.warn(`Warning: The version ${n} of ${s} is set to lose support in ${r} days.`):r<0&&console.error(`Error: The version ${n} of ${s} not supported anymore.`)}({retentionPeriodDays:90,productName:"accessWidget",daysBeforeNotice:14,version:"v1.18.0",timestamp:1730216832269,ignorePattern:["/^(?!.v\\d+\\.\\d+\\.\\d+).*/"]}),(()=>{"use strict";var e={301:function(e,t,i){var s=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,i=t&&e[t],s=0;if(i)return i.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&s>=e.length&&(e=void 0),{value:e&&e[s++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")},n=this&&this.__read\|\|function(e,t){var i="function"==type

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25320)
Category:	downloaded
Size (bytes):	341259
Entropy (8bit):	5.582120828854479
Encrypted:	false
SSDEEP:	3072:xa2YwiztGrETvavoEy0R5CptDY8/I8+yq/OUYhcDmKD0C8Gp/Escv5p:Y2gGrgCvosM+GUTx0C8Gp/E3vD
MD5:	12C2D4D49900E9C25F786C4C0181523C
SHA1:	0FF2D6002FA447A9BBE9B65EC59B21A431A57DAA
SHA-256:	2688BC84F3F5EF59A7F7B40952C2CDA957F61C32AAD06C2E23249E3546344FB7
SHA-512:	C1F6AD2071A634B6081F876B295D40648C29D74BBECF95D0CE6027787A44DD48C7A8714E13F248DAFE68F7178262F961B697F4C2CAED99F55BCD3150719B3D38
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PT5HBDQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"134002157"},{"function":"__v","vtp_setDefaultValue":false,"vtp_dataLayerVersion":2,"vtp_name":"virtualPageview"},{"function":"__c","vtp_value":"G-3N3F1TJNT7"},{"function":"__j","vtp_name":"navigator.userAgent"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.videoTitle","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoPercent","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoDuration","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.videoCurrentTime","vtp_dataLayerVersion":1},{"function":"__v","v

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	32194
Entropy (8bit):	7.993432514886317
Encrypted:	true
SSDEEP:	768:AxWMjMTTZx7r5rVkubptT1xToQnfvGcxJ85:AxPc9rVk0pV1xsQnfpM
MD5:	FC3A3FE2BE25D8B6FA54ACE3CA0227AD
SHA1:	55CD7AE7F8321067751FE57C69A2064B0343F237
SHA-256:	A2FF0CF33FFBE6625F7D86C72166EB3EEE8E45951960554FD9BD7D8FF655D1E0
SHA-512:	CA806733D66D6F624D9D2DF25D95E96CCE341625B737314D1B05365A52F6D1E8E6535A86BD73CC9D58476EBFB3F1BC91A62A917657FFFF370C1DAB19BCFBB781
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/2a48842e9777443c/original/HomePageProduct-735x551.jpg
Preview:	RIFF.}..WEBPVP8 .}..........>m..H$"))..}.0..em.&.]^...)......:w4.r1..q.=o..\|w..9_+....;..M.....Z=...}......................z.O.g.=.....=.?)....E...w...W.1.-.W..m>......}J...u2..+6.o...'...F..4.{......)...\|ew2/^5.........8...e..3...`...>....1&0..I+.A.QMP.....{...q..X....tb.]w...&Po..y..(:.....a...N.w..WI../...F...g.y.......4I.d:.\.!.8.x.=.......+.. \6?.C............S...X.Q...3...5.P...<....q5.....Zr2.e.....L.-x...ty....)}..z..-......F.....#x...........\|.).......'..?.\|.Z$........+..96..\..c...\|./-;a..'g....E...6i...v........a....6.....>........=...l}...7.I...K;(....V..r.~.......%Wm.........A.zd..........'w..@...I.".5r........."..O.g.q..N4.I.%P`..j.......;..@Z.QF.y.I..{.m....I......-.z..K".jMZ95.9.Z.....9.$.....w.......k..i:.l..7;wB......k....]t.}..$M.=..:..9..xY..Y...3na.~....(^-..Ek1..U....L........q..Z.Z._.z...5...2Fdw.......`..`x......E*....<.#.89.C...^...3...l...O..j.b.Y..b...].,!l.D.l2a.D.@..6..Q....J.g4e..........'...<.d..~

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	18939
Entropy (8bit):	4.8122383097535
Encrypted:	false
SSDEEP:	192:i0ZeHiONw53xrxnYzIfOKt4Y8SmLJmlztf4v4GQnplvpNjPvjQkuUjqFSCzYuPJB:i5xN4UpC4Y8SmLkLfgmzHkfxYPopb
MD5:	AA19B47FAE16AA017E5E46C95186AB00
SHA1:	85AB678D9F2736AEDF790EF76C913CFA0C7EDA70
SHA-256:	ABD99A6990915B97B99A29F6DC67A5429D639544920AFECB87F2DEAA41F14F40
SHA-512:	933461B3D090E8B52688DA15F5B48CA58DB8CA37E2589D248BB5D192D19C8B2A517469C325BA2B1A4FDB8137354940E9C5EFFFF04E7A21CDFB23505155F32B6A
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/resources/assets/styles/custom-style.css?ver=6.6.2
Preview:	/* scroll section css start /...bba-paragraph-main_pillars {.. position: relative;.. / background: #fdfbf3;.. padding-bottom: 4.2857142857rem; /..}....../ .accordion-scrolling {.. background: #fdfbf3;media.. } */.....accordion-scrolling-animation {.. position: relative;.. height: 100vh;..}.....accordion-scrolling-image {.. position: absolute;.. top: 5.8571428571rem;.. left: 0;.. width: 50%;.. height: calc(100vh - 9.7142857143rem);..}.....accordion-scrolling-image .img-bg {.. width: 100%;.. height: 100%;.. position: absolute;.. left: 0;.. top: 0;.. background-size: cover;.. background-position: top center;.. opacity: 0;.. transition: .8s ease opacity;..}.....accordion-scrolling-image .img-bg.visible {.. opacity: 1;..}.....accordion-scrolling-content {.. position: absolute;.. top: 5.8571428571rem;.. left: 50%;.. width: calc(50% - 20px);.. height: calc(100vh - 9.7142857143rem);.. padding-

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.5726236638951634
Encrypted:	false
SSDEEP:	3:U12pXjAOKn:U0pXjAOKn
MD5:	428FBFBE32240731C2093BE221CC8DF3
SHA1:	8B831BC780288CDFCE6DBA1A93D062C9379F4DEF
SHA-256:	1643B5CEC44CC597BC2CCE3448CE5434241EEC9B92DB8AF268EE3EE1F198441D
SHA-512:	157C60A1A8619AD1E6162B3E945DB8B6EC82B37359E23DCC8ECCF9E2399662890C591A49046EEF061E271A6F18C00A695BA1AC4837EAB7B29EC37A36B4A542B7
Malicious:	false
Reputation:	low
URL:	https://js.calltrk.com/group/0/d625593f098d4d02b587/12/icap.js?t=1730257284920&ga=GA1.1.833971690.1730257278&GoogleAnalytics4__ga=GA1.1.833971690.1730257278&GoogleAnalytics4__ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0&uuid=000196a6-08bb-4e64-89ba-1051944f1b33&ids%5B%5D=205035836
Preview:	/* changes recorded */

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	226541
Entropy (8bit):	5.378840825832781
Encrypted:	false
SSDEEP:	1536:6wmvhwvwVyhMwe+04f1VHv9ixmXeTX0b7DDDbGw5wyP+zhEK9yr2IG+UNsnVB0iR:2hwvwVaMwB1TixsnpIhEY6VUStJYScYt
MD5:	EC34F7A549BB7B8A0957652DE86E3475
SHA1:	C49251C4A953052F327F76A0275135E102AD8536
SHA-256:	C0D57EFF0936A57E0C8D6BC93314585C734E5ADE88D6DE970E1E305AE5D87224
SHA-512:	805FB48BF271D8960E19B014D07FDEA5A054036636FC4074781418E020DB1CCD8B773853AE3A59F44DBAC0C5E53ABCC70266DF6E908FDC5D46783FB2106BE777
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.625495a901d247c3e8d4.js
Preview:	/! For license information please see modules.625495a901d247c3e8d4.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1716), with no line terminators
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	4.819062196126408
Encrypted:	false
SSDEEP:	24:O0M0U7YNTZ/PWCqWkPWaKxUmKYOqWaLUh9JVLFDmmL:On0U7YNtXWCqWOWJK/qWaUhnVVmg
MD5:	72A49C98F1C6118869DD01F1BDCE2FCE
SHA1:	0285DFE28B3E5CDFE7F5E06F53637D47DF788BF5
SHA-256:	1AEB9107928BB523947C28E17358EFB50A07B942E15ED0A72259A5794EA2CA96
SHA-512:	0C5D363D0A946012C9E59143B40FBD3E8F06C3CFDCD24BECFA1C99D30F5431F86851C13BB5FF431D6FD8EB09A5B1AB9E481AC812061726506B39F443D024D4DC
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1
Preview:	.wpml-ls-legacy-dropdown{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown .wpml-ls-current-language:focus .wpml-ls-sub-menu,.wpml-ls-legacy-dropdown .wpml-ls-current-language:hover .wpml-ls-sub-menu{visibility:visible}.wpml-ls-legacy-dropdown .wpml-ls-item{padding:0;margin:0;list-style-type:none}.wpml-ls-legacy-dropdown a{display:block;text-decoration:none;color:#444;border:1px solid #cdcdcd;background-color:#fff;padding:5px 10px;line-height:1}.wpml-ls-legacy-dropdown a span{vertical-align:middle}.wpml-ls-legacy-dropdown a.wpml-ls-item-toggle{position:relative;padding-right:calc(10px + 1.4em)}.rtl .wpml-ls-legacy-dropdown a.wpml-ls-item-toggle{padding-right:10px;padding-left:calc(10px + 1.4em)}.wpml-ls-legacy-dropdown a.wpml-ls-item-toggle:after{content:"";vertical-align:middle;display:inline-block;border:.35em solid transparent;border-top:.5em solid;position:absolute;right:10px;top:calc

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	4.5969897580127865
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEJJsVsVo:2ffmyCkMwykgIaoO4nsrqHdyyv
MD5:	9C2160161305054AF467EA797A7C408F
SHA1:	8B427BC141874CC164E2BE3DB02079FCC99AF9ED
SHA-256:	7F47F02C93D5DE5DE03DB0EBFFA39FE1060767437B086996E295C9818A05B2F2
SHA-512:	FCCC6474CC18139B34DC40F6009C358753658E34CC2DF5B7D2C4E253BFE9647957A2FD23F30C86EC2087C2B250BCB0C570BB9EEF54B10DF6C4A3A6659F56F228
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/134002157.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (925), with no line terminators
Category:	downloaded
Size (bytes):	925
Entropy (8bit):	5.12760413328428
Encrypted:	false
SSDEEP:	12:mL52xyDFXn1pA+Sr3FxSFfVOYBwZD5LDGPIwwxFntRsXodeLpNeVpSuIXqMKin:E201yFbFEOYYEPI3pDUpF1XjKi
MD5:	9488E4DC030E44F71CA8DEE320D7B794
SHA1:	D109C2AEB3C8B8A335D8C497A53120CDD20928F4
SHA-256:	656955DD522A5AD6E4854B1AE8CC510C8EAFAB407CE64EC7957B5C23A8014BD1
SHA-512:	06A512289CE755BADF40C4FDBCDAE68E473F8D483BD84DED91275C791A46F1722B627BDDE32CBE7100733B260EEF572B24FAB72F2A95AAE30B4F1D5FAB9559F1
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown-click/script.min.js?ver=1
Preview:	"use strict";var WPMLLanguageSwitcherDropdownClick=function(){function l(e){var t=this.querySelectorAll(i)[0];return"visible"===t.style.visibility?(t.style.visibility="hidden",document.removeEventListener("click",o)):(t.style.visibility="visible",document.addEventListener("click",o),n=!0),!1}function r(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}var c=".js-wpml-ls-legacy-dropdown-click",i=".js-wpml-ls-sub-menu",n=!1,o=function(){if(!n)for(var e=document.querySelectorAll(c),t=0;t<e.length;t++)e[t].querySelectorAll(i)[0].style.visibility="hidden";n=!1};return{init:function(){for(var e=document.querySelectorAll(c),t=0;t<e.length;t++)e[t].addEventListener("click",l);for(var i=document.querySelectorAll(c+" a.js-wpml-ls-item-toggle"),n=0;n<i.length;n++)i[n].addEventListener("click",r)}}}();document.addEventListener("DOMContentLoaded",function(){WPMLLanguageSwitcherDropdownClick.init()});

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	934
Entropy (8bit):	7.728603942466223
Encrypted:	false
SSDEEP:	24:2rvnUNGFDi2/OAQjKK0LLE0ngOQgZ8OXhymVTm:2DmGJi2/OdKHxnwgZVXhymVy
MD5:	C57E8522C3B15E1ABD9EDEA46E313AAE
SHA1:	F0EADDA0160F03C92AB2582831BCDF2D4B982052
SHA-256:	021C6DD4425DEFEADB745F3DCC9E177B71E3E36BE1C04BA9CE57EA879EC26322
SHA-512:	72A0CCFB323AD7AC9C2AAD4C7B5AFA4500424726CF9A881C88B9FA03313D225DDFC9BE080C532B29967D0A9DE2FA50DD3CDC15675488BFEDE818D6C9E6A8AEE5
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........+.....XIDATX..Kh.U...gf2.g...Lc.J(.V.Uj%.\H.F%..G.`.M...Hi.\|P\|.....nuQ.J...(..Z...Q..k..F..4..d..f.\|3y`..B...{...........B,.%.*.M...+Q.J6-....e........7F.r.4.+....ja....<..DnM.I.4...#F",C....=...R.,.....c......>(d`>..{.w.;%.1..L.Ss..)..L...2...sf.T.`..f.(.dQ...Z......y....iv.e,T...9?....Kb..........>........v.....L.y.Ek..9.9?.4.:.o..Hy...d.A.1..-d.B.d6WD.y.......`.......^x.s=.X.>....8..$[;....!6..L%x...".0..}..o.....48..Q........s.K'.........\.^z.#.N..U.[.4291IS..\|..i.oZ............__..gi{.....E6....Op..7...`.....h.j1..T..1..2>..Df,.$.8.C..m\|...._....vV...+[....&.9@..d.^W.&..o18`.Y..xa....../..v7....;...O...y.=t.x......VN....x...K\|.Y/.h...:n\W...s.....i.z.]..AF..f.M......D2......O6..`"Y....Q.f....".....3>..Ajm..x....@....w...U..6.q.X.`..M...H[.r(].....3.>.....9?.T.).J.$.$bfD!..0..c.a..L........./.............a.CF........IEND.B`.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	22
Entropy (8bit):	3.5726236638951634
Encrypted:	false
SSDEEP:	3:U12pXjAOKn:U0pXjAOKn
MD5:	428FBFBE32240731C2093BE221CC8DF3
SHA1:	8B831BC780288CDFCE6DBA1A93D062C9379F4DEF
SHA-256:	1643B5CEC44CC597BC2CCE3448CE5434241EEC9B92DB8AF268EE3EE1F198441D
SHA-512:	157C60A1A8619AD1E6162B3E945DB8B6EC82B37359E23DCC8ECCF9E2399662890C591A49046EEF061E271A6F18C00A695BA1AC4837EAB7B29EC37A36B4A542B7
Malicious:	false
Reputation:	low
Preview:	/* changes recorded */

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.3 (Windows), datetime=2022:05:17 15:32:02], baseline, precision 8, 735x551, components 3
Category:	downloaded
Size (bytes):	233803
Entropy (8bit):	7.9163428120210275
Encrypted:	false
SSDEEP:	3072:aydEhRRUp03OKFtZvKAdXksrgZGZSi1PzTuq94OYp4NTUdvRuo34nrtzcOfXbM:lp7UZv/kkgZG1JlNAmnrRcOfXbM
MD5:	007E2550217B833B778568F9CBE16C13
SHA1:	F50A5A545A3D7E70A5551A9A41A1CF986CD5B7D7
SHA-256:	3629E3D93E34665D765267120D313FD507292592521CD9C06509553A6FBA7148
SHA-512:	ECCE4F866985ED8E5324857172D831682E6C0C27B4698BA38EC9C7D05E18323DE127B58A93036FE563E50D68CC149CBFA770783ED0DD0D98013A2CB145745284
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/7c917fa51fcc97e4/original/HomePage-FieldWork-Engineer_735x551.jpg
Preview:	.....3Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:17 15:32:02........................................'..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..s..n.Op;!.+ 5....r.fH.%.;..w...^bjy-.....DdW..S.`As......L..&...0...........9.F.BNsZ....!2#.........(/.:...7C....,l..o.xs>.....K.I..@......._.w..x

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	164
Entropy (8bit):	4.74524608077268
Encrypted:	false
SSDEEP:	3:YRM9HfHFfQ66WMcdXc1EPJSAMGAh8xLERDWgRnU/iEhDELGGS7gW9:Ys/lLycdc1EPJSAghPRzRU/RV7G1W9
MD5:	AA8C28789308CEF6538625CF09AD59AC
SHA1:	1A3D5DE45B0AF576268505F6E4D9F872430D9A03
SHA-256:	147FE2A06AF419A9D22EF81FB77BC434E2FBC51133882FCCCCA40F7EF5F3943D
SHA-512:	F4C7797CF60759F60FE963479E0A93CFA4602EA3D17F5B916A98BE733BB8A19F80BBE8D19CA37A54B16AADE398F3A9FAD3A39DF695AC7ED770214AD0A6DC5AB5
Malicious:	false
Reputation:	low
Preview:	{"time":"2023-06-27T15:25:33.984Z","app":"app","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"blockWatcher":false}

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	174226
Entropy (8bit):	7.767140937910894
Encrypted:	false
SSDEEP:	3072:gK4WTkJdBqZD9h8PpSBcJCz1hJtQvK1yyel1b/tuGT8/psWH+PUrbPMNXQ1G4:gOTkDBql9hcpSeC1hbQvKyyebQGYsWcc
MD5:	C06606AC923478A449060B3D2874A924
SHA1:	01F2ECBEEBAF329D119B10AA55F603E2253DB6CC
SHA-256:	78030A8983849F41643844221949160C717BB5806ECE8700F734AEDEF14A5D9B
SHA-512:	3D8A21E0050DA58CABF4B6E14BB5162E1B76BF41DB39B78025049E984505E9D1E21CD8E7279E948F64D14F8DB0F9E46E4CD8A43A499B1478F70342B12E241A69
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/55c60dcc9c78d1b6/original/1920X970_NewTagline_2024_200kb.webp
Preview:	RIFF....WEBPVP8X..............VP8 .f..P=.......>.J.K..#'.t:`...il..U.........n........._...e?..v}......W....X.........P.~....%.?.};.......{._../<N._.....O.\|e\.../......./}.....y.\|..? ........a.......?.bO....?.?.o.{=.............O.?...w.q^b...>.......!.G........N......................y>..7.O....'........E.:.;4...O.d..2..b.!.[0=..0..F.."P...v2.~.qi........V4..a6.,%..(..n>....2.....I!..0.K...F,..U.......\K=.fF./..%....+].7.5........J.).m..`...Y5.".(B........._...4..Y..-.I......O.{j".y...!..'....s.7H. ..\|.Y.@.....A...:.y....M.q.!..M......-... [/#BHT........i.......i.K.kV\|}c..#.}.LT.z..PT.2$w%?.Q..-.,...Fq6".....&........\|.....V.S.Kn....U..kG...1........3...g...L..v....lh..J......I.$i!+.{..6..M..F...j...>d.%..G...D.....Q......+j.H.sW...">n.(+.:x.4c.......]..m ..b.....D..."....\|........\..3`..L."..'BUp..Gs.U.[w9.7....+q.>...OO7W...D.3.<{x.n...i...3....^.Q.`.y.{.Ax.`.(u.l....n.t......H.I..7....I\l?..../..ki..rVaO.D.b..@{..g...Gmp8i1\|....gV^.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.3 (Windows), datetime=2022:05:17 15:16:39], baseline, precision 8, 735x551, components 3
Category:	dropped
Size (bytes):	376145
Entropy (8bit):	7.962768751674091
Encrypted:	false
SSDEEP:	6144:vGyOb8PJzIvv8NMQdz+DTVIx7oBQ5Z8wV0rgQbD93xS+EL:OyObi0XQdaNAMu5DKXS+EL
MD5:	7CDCEC5F0C56D5F81C9C1E02E6A5D184
SHA1:	A91FD65E41B0507F2535DBF4DED93D805353F254
SHA-256:	E6629070E4AD6C8224CC7027AB63E54E0EB2C93F2C8488486F41D5A54B0C89DC
SHA-512:	9B39287508C1DEDBC9C1464182CAFB13D18FD2E6C0377BDE8B4217493F74BAF62F9BDEC72A8F07DD794A2916FC35FA0975C806A870BE521DFF21426887D893D1
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:17 15:16:39........................................'..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.?Y...t....VE.,..Z.(f.e.cSLY.:...2-..=;}/.W...[3.._WQfK......]...{......[}-./m;..........Ll..F7Q.Y........YK.E...O..m....?....7.....}..a.vM.....Z..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=3877, bps=206, PhotometricIntepretation=RGB, description=Workers on site of wastewater treatment plant fixing sensors, manufacturer=Canon, model=Canon EOS 5DS, orientation=upper-left, width=5500], baseline, precision 8, 1000x1232, components 3
Category:	downloaded
Size (bytes):	952816
Entropy (8bit):	7.966819976277055
Encrypted:	false
SSDEEP:	12288:zsB2doc1E6kyKLsIsRHfTOeQetn8rvSju9uvSD3OjCv0vVvtDjYm6eYSMV6Pyb:z5dOfVspbzQe1snSSD3Oj9vVFIZj6Kb
MD5:	B463257042C5BA8D50A6B3C8367C1163
SHA1:	A7A9806A2B7590A22C8FCAC7BA7D33B527C7711C
SHA-256:	ECED534668D3A02D08BDFED62FFB9D2F96ED07F694CD891632DC214ACCCDBE7D
SHA-512:	B164EE38C91E1A90B203223B0258965AB9DEE78CF34937EE9A8229FDA0DB4D6A05A5310CA7814CBD5468E276C1EF5D7DF763655702C41BC90A2D3C8CEAD83136
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/66db4c703d1dad5a/original/WhoWeAre_1000X1232.jpg
Preview:	....,%Exif..II...............\|...........%...............................=...............................................................%...........-...(...........1...!...5...2.......V...;.......j...i.......x.............Workers on site of wastewater treatment plant fixing sensors.Canon.Canon EOS 5DS...-..'....-..'..Adobe Photoshop 24.0 (Macintosh).2024:07:04 15:18:05.zstockphotos..#.........".............."...........'.......d...0...........2.......d...........0231........2...........F...........Z...........b...........j...........r...........z.......................................................................36..........36..........................................................................................................................1...........2...........4...........5.......................?.......2019:10:25 19:57:33.2019:10:25 19:57:33.+10:00..+10:00..+10:00.....@B....Q.@B..........................................055021000635..........F.......................EF24

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.3 (Windows), datetime=2022:05:17 15:35:24], baseline, precision 8, 735x551, components 3
Category:	downloaded
Size (bytes):	280377
Entropy (8bit):	7.954772898469514
Encrypted:	false
SSDEEP:	6144:Eethdeth8qIQ1LH5cjEd2sjmAhuSKP1n6wmhUaZh33YcCHPYh4WXAN:EeHdeH8ql9HLmMuF9833ii4WXS
MD5:	3708B3B59C5878D74C7DC4BE9E3BE29E
SHA1:	9785C1CE5FE3A34DB75CEA85E8B62AAC88311389
SHA-256:	78BBD78B3F70244C09BF0EA99A8FAA9EF6B04003D27572C9B8A89C8C59F21367
SHA-512:	31028651BF3F93A247623A10B1373B55CF3590F047174151EEBF7DA38816D93C7FE4449CC481FB2D732975A99623FC4EF121E10A89ED639D66D945C8D882D3FF
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/691e6b52125d4762/original/HomePage-FieldWork-Business_735x551.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:17 15:35:24........................................'..............................."............(.....................2...........U.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..-..Ra......!....sC..8m'...MY.hs.-.@v.I.?...M..7...._....[=li......q.,..'..a..Em......r/kMM....#R...z...q.{(W.....h"..8.le9u.s...=..B.^....}.Dio.U.M.....

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	92582
Entropy (8bit):	7.997350410837271
Encrypted:	true
SSDEEP:	1536:RSq2eEhrcZvMhzIjTQkUJZ0USPczbNRwC6WVWy04ecbqCUe16VvgppvMQCi:RIemrd5cQkUsUzz7wCXVQuYvU7V
MD5:	27998DB600F2626F7609F920C0FB0FF8
SHA1:	60DFD56512DBEDB464AEC091A8666D0E067A63A7
SHA-256:	C8A05B16366F1BAEA1F5A2EF95DD847B75F5B11B3B1E858D4435CDE463603F7A
SHA-512:	AC0182350A3996285548B83A074FB28D159256F120B067AB7BCE6E8D20A8B3EC88728DF6383090A398805F30FBCB9E52F2445EB72575711447E0088C908B9E3A
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/2b78e8c676e644b5/original/CTABanner-Chemical-1920x650.jpg
Preview:	RIFF.i..WEBPVP8X..............VP8 i..............%..s.F.A......gxuo.mTOm'....?x.y.....?.........?....u.'.?.oc...s................/8.A.......?...?......{.........'.W.........!...Oa~y.....k.k.7.........y..O....._.................j.....j.g.3.{.....~X.-.v........zw..no>.yhd.....B!..#.Y....n.be.......io7..e...=..(S.....$...=.....!.....mr.X"$=.....].bE........\.8i.o.9...C.d%S=.;..R>.t..m[[.n.FS.>V57.r.%m.o...t.9L..}...b.....gP6.Q..v8U...~#.I..S.c........9...ucK!.....\|...........('..,...7.&.G.f<sx.e...6..../.#j....q....nH.P.&..01....4D..S.....9`..G..G...<..K..cFZ...y.W.2...h..f.\.U......z.4O.9...0k........!.ik"D......K...E8..4...a...y......X..4O...Z.M.i.5.2...q....g....[.K....h.......W.Ca.K+Hm...u.2...f..6.T.6..k...4.../...vs.9u\.a.....A&$.^.a?qc...!.q..e...'92)....a.OZ..J...a..z.7......m..VY..,;0=.>..B ^sQux.lXP...........h4.............5...u..Iz...)..T..%~w>......<'B......P........).....o.....o......J.R..w.#.=9.b..<.....K..V..M.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows), datetime=2021:03:15 15:11:50], baseline, precision 8, 408x306, components 3
Category:	downloaded
Size (bytes):	133055
Entropy (8bit):	7.929879243301676
Encrypted:	false
SSDEEP:	3072:FfNb/uZek8GaEi85tYysUOtyXIyngoxRbiCIZF7YN+wgQuGRYb:Fflux8Gt/kU4oMCIZZQ+b
MD5:	7D4B1950FE19D4BAC160F97DCE3D7605
SHA1:	7FD7E447347BB8CDA49636159A0AC754C20B36AC
SHA-256:	844705BF5084ACE5ED8B050EC3B48BDA61D80064187B734ACC6D3E44C4C037BF
SHA-512:	D90FED71E9605103A63F531306E3E0EBF1BD75B36E2CE86679280AE9F83372B8F49EA99C9DEB38FC0EF19E30D36E7A5907D53CFAB2B546BF9085EF0844444490
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/48eb07922352251c/original/HomePageServices-408x306.jpg
Preview:	.....~Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 22.3 (Windows).2021:03:15 15:11:50.........................................2..............................."............(.....................2...........D.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................I.a.."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..`.7...'L....KN...WE.......%.s@;...?........<5...`.h...jd`..*u.8..X.s,..>[.i....~..X.[...o...-...]....L.1.....x.a...tzs.&...q3...B.........llw.kGo.D

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=18, height=3744, bps=230, compression=LZW, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5616], baseline, precision 8, 1000x1232, components 3
Category:	dropped
Size (bytes):	699127
Entropy (8bit):	7.947586951515654
Encrypted:	false
SSDEEP:	12288:OOguRn6p5YWA4ioFsyWRbPxqcfQ7ekVY5E/wzCQh0w2IHJlfUo6zLCJ:OOjnnWAEobPwcoqkVYdm1kJl8oz
MD5:	5D61DF2C11FF42794A39304AE4956EAB
SHA1:	B7C7C87FF0A9489166090BBC0417D94EE0F208FE
SHA-256:	79E5A1217071FAE17125CF466C870345302C5FFF9F91AF2D4672F42E0F9BE7D5
SHA-512:	2B0D8D40970B901610BD16A689427F19D86D5FBE36E044F907DE34E37C3F17126239847513685FA4587F5AD70C17CD0E6CAEA2D978661EEDDA0431118427D2D4
Malicious:	false
Reputation:	low
Preview:	....$.Exif..II.......................................................................................................................................................(...........1...!.......2.......8...;.......L...........e...i.....................Canon.Canon EOS 5D Mark II......'.......'..Adobe Photoshop 24.0 (Macintosh).2024:07:04 15:14:24.Photographer:Herv MARTIN.Copyright: Herve MARTIN.............................."...........'...................0230............................................"......................2...................................:...........06..........06..............................................B...........J...............................................................1.......R...2.......^...4.......~...............#.......2013:10:09 09:31:00.2013:10:09 09:31:00...F.@B..........................-.........U......!9.....1230702589..-.......-.......................TS-E45mm f/2.8..........................................(................................ ....

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (45458)
Category:	downloaded
Size (bytes):	507019
Entropy (8bit):	5.356117740062427
Encrypted:	false
SSDEEP:	6144:Haabrf9N20J65dNM/CJIkSqIwI8beIJz/gJaakK5evQzdXuOUwDXJFJDs5:6affvJcL2sa/gvEjlD0
MD5:	6B8158BFBD226F1D42FA2F4E1ABA00B3
SHA1:	B5955EC57FB9DEEE035C14DDBE10821A2CCAE0B8
SHA-256:	31E6D118DAD4A30F95A27514995F9D300BEA48D8A5A675026A5729F984DB7AFF
SHA-512:	841C7AF4965F169A8E8D07046D3EADB06AFBADE71DC27CF573EC874135EA603A39B43EA45BD1BE8527F403A53986952217339F6D3E15E42B83E6CEDAB21A4FCF
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/resources/assets/scripts/libs/theme-merge.js?ver=6.6.3
Preview:	var flushPending=!1,flushing=!1,queue=[],lastFlushedIndex=-1;function scheduler(t){queueJob(t)}function queueJob(t){queue.includes(t)\|\|queue.push(t),queueFlush()}function dequeueJob(t){let e=queue.indexOf(t);e!==-1&&e>lastFlushedIndex&&queue.splice(e,1)}function queueFlush(){!flushing&&!flushPending&&(flushPending=!0,queueMicrotask(flushJobs))}function flushJobs(){flushPending=!1,flushing=!0;for(let t=0;t<queue.length;t++)queue[t](),lastFlushedIndex=t;queue.length=0,lastFlushedIndex=-1,flushing=!1}var reactive,effect,release,raw,shouldSchedule=!0;function disableEffectScheduling(t){shouldSchedule=!1,t(),shouldSchedule=!0}function setReactivityEngine(t){reactive=t.reactive,release=t.release,effect=e=>t.effect(e,{scheduler:r=>{shouldSchedule?scheduler(r):r()}}),raw=t.raw}function overrideEffect(t){effect=t}function elementBoundEffect(t){let e=()=>{};return[i=>{let n=effect(i);return t._x_effects\|\|(t._x_effects=new Set,t._x_runEffects=()=>{t._x_effects.forEach(s=>s())}),t._x_effects.add(n

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.3 (Windows), datetime=2022:05:17 15:16:39], baseline, precision 8, 735x551, components 3
Category:	downloaded
Size (bytes):	376145
Entropy (8bit):	7.962768751674091
Encrypted:	false
SSDEEP:	6144:vGyOb8PJzIvv8NMQdz+DTVIx7oBQ5Z8wV0rgQbD93xS+EL:OyObi0XQdaNAMu5DKXS+EL
MD5:	7CDCEC5F0C56D5F81C9C1E02E6A5D184
SHA1:	A91FD65E41B0507F2535DBF4DED93D805353F254
SHA-256:	E6629070E4AD6C8224CC7027AB63E54E0EB2C93F2C8488486F41D5A54B0C89DC
SHA-512:	9B39287508C1DEDBC9C1464182CAFB13D18FD2E6C0377BDE8B4217493F74BAF62F9BDEC72A8F07DD794A2916FC35FA0975C806A870BE521DFF21426887D893D1
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/4fac9f08596efdc2/original/HomePage-Life_735x551.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:17 15:16:39........................................'..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.?Y...t....VE.,..Z.(f.e.cSLY.:...2-..=;}/.W...[3.._WQfK......]...{......[}-./m;..........Ll..F7Q.Y........YK.E...O..m....?....7.....}..a.vM.....Z..

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14953)
Category:	downloaded
Size (bytes):	15062
Entropy (8bit):	5.230263280253356
Encrypted:	false
SSDEEP:	192:qbl7gkElDz0DTrFTKZ9Cb88TBWnefqLD7nPSGL:qR8kcDz0nrFTKZ9CbMeCLD7nPSGL
MD5:	9ABC074D7FF14A653F3E74C353EFF06B
SHA1:	608CD94C00ED42D1BB767E9A0D5C29ADD31EB46C
SHA-256:	4556525F9DF86FBA7F7E78842B9151A7C80E701E88AFB4F545534B04A947F533
SHA-512:	E07229943293810ECD398F5074C44E8B172029F398292EFCCE735A25C4425F421E25A4A7E12365F659B06E0EFB49CA9809A2913AEB79DB64EFE72B988F17F0A0
Malicious:	false
Reputation:	low
URL:	https://cdn.loopanalytics.com/trackatron4.js
Preview:	/! For license information please see trackatron4.js.LICENSE.txt /.(()=>{var e={6808:(e,o,t)=>{var n,c;!function(a){if(void 0===(c="function"==typeof(n=a)?n.call(o,t,o,e):n)\|\|(e.exports=c),!0,e.exports=a(),!!0){var r=window.Cookies,i=window.Cookies=a();i.noConflict=function(){return window.Cookies=r,i}}}((function(){function e(){for(var e=0,o={};e<arguments.length;e++){var t=arguments[e];for(var n in t)o[n]=t[n]}return o}function o(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(n){function c(){}function a(o,t,a){if("undefined"!=typeof document){"number"==typeof(a=e({path:"/"},c.defaults,a)).expires&&(a.expires=new Date(1new Date+864e5a.expires)),a.expires=a.expires?a.expires.toUTCString():"";try{var r=JSON.stringify(t);/^[\{\[]/.test(r)&&(t=r)}catch(e){}t=n.write?n.write(t,o):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),o=encodeURIComponent(String(o)).replace(/%(23\|24\|26\|2B\|5E\|60\|

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23566
Entropy (8bit):	4.532540802658393
Encrypted:	false
SSDEEP:	384:xA8CdKyIfhDhFK3vSyN6s0B7QwJRAIX/FwljUX:xA1XIfhDhFK3vA5wljUX
MD5:	00FD387B82E2DBC57E63C16053A78A99
SHA1:	A777054910C430F28118B085312981D8D4BE5AFE
SHA-256:	AE1354E264577A02ED6B6048A22BB2C8EC34EAB18928D08F02FA9C79950B4D79
SHA-512:	96E51EC568BCD6DCE57273EE2518D54F24B80ACDABC61F1C2C16C2E03053A40F2FD305E19A4EE1EFCD052020D46E831DC75F86AB82B83C9064E09CC3221CC4B6
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/resources/assets/scripts/libs/drupal.js?ver=6.6.3
Preview:	/*.. @file.. * Defines the Drupal JavaScript API... /..../.. A jQuery object, typically the return value from a `$(selector)` call... .. Holds an HTMLElement or a collection of HTMLElements... .. @typedef {object} jQuery.. .. @prop {number} length=0.. * Number of elements contained in the jQuery object... /..../.. Variable generated by Drupal that holds all translated strings from PHP... .. Content of this variable is automatically created by Drupal when using the.. * Interface Translation module. It holds the translation of strings used on.. * the page... .. This variable is used to pass data from the backend to the frontend. Data.. * contained in `drupalSettings` is used during behavior initialization... .. @global.. .. @var {object} drupalTranslations.. /..../.. Global Drupal object... .. All Drupal JavaScript APIs are contained in this namespace... .. @global.. .. @namespace.. */..window.Drupal = { behaviors: {}, locale: {} };....//

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:cBsCkoGi1Y:YsD1
MD5:	6F6667ADDD0221D5C69B851F58DAD725
SHA1:	CBB841D9824FCF04CD9F9B401BD9F9C1270ACBB0
SHA-256:	D253D21070B2A11EDD1DF718702AE46C47BF6921AE1C8E53F72F57082427B15C
SHA-512:	A91B33A275CFC7D399C49D8CF9EDF57F931321399681EC16911CED761C549368608A053BCBA27D022453AF7A79D1B4F01A30FF6A08459B876AD3C3A0534C9269
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwl2HpDZopa3KRIFDXFXFuUSBQ0TNArO?alt=proto
Preview:	ChIKBw1xVxblGgAKBw0TNArOGgA=

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	27249
Entropy (8bit):	5.102725454034097
Encrypted:	false
SSDEEP:	384:/Lvzx7nLva60vui7HLvdSPkPMTkIbViSQUFatwpJpi8WJi:/LvlLvcrLv4pxVJJpi8Wc
MD5:	359ACA8A88B2331AA34AC505ACAD9911
SHA1:	800A4F56BB87049E1F0D45CF93C4E8EF79144B45
SHA-256:	655AE452D922F501B62C7028FC35E238138DE989387381CC1ED9CEA9085864DB
SHA-512:	694429B843B8BE04FFE5DEBB9DB48F45E02767F4B6AE177A5DF372F9AC26271FC0F969398AFF382DB631EDEA8547CC50F24EB470C21C750D507544D056550702
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.2.6
Preview:	.gdpr-container-fluid {..width: 100%;..padding-right: 15px;..padding-left: 15px;..margin-right: auto;..margin-left: auto;.}..gdpr-row {..display: -ms-flexbox;..display: flex;..-ms-flex-wrap: wrap;..flex-wrap: wrap;..margin-right: -15px;..margin-left: -15px;.}..gdpr-col-4 {..-ms-flex: 0 0 33.333333%;..flex: 0 0 33.333333%;..max-width: 33.333333%;.}..gdpr-col-8 {..-ms-flex: 0 0 66.666667%;..flex: 0 0 66.666667%;..max-width: 66.666667%;.}..gdpr-align-items-stretch {..-ms-flex-align: stretch!important;..align-items: stretch!important;.}..gdpr-d-flex {..display: -ms-flexbox!important;..display: flex!important;.}..gdpr-px-0 {..padding-left: 0;..padding-right: 0;.}..modal-backdrop.show {..opacity: .8;.}..modal-open {..overflow: hidden.}...modal-open .gdpr-modal {..overflow-x: hidden;..overflow-y: auto.}...gdpr-modal.fade .gdpr-modal-dialog {..transition: -webkit-transform .3s ease-out;..transition: transform .3s ease-out;..transition: transform .3s ease-out,-webkit-transform .3s ease-out;..-w

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	36274
Entropy (8bit):	7.995569973103637
Encrypted:	true
SSDEEP:	768:rw1onHfAUsaPNw2pNGNlZTzYWzKONjttq4RLh0xa37iCiDhz4CxZR2grBp:rweHfnsaVb/clZwPkTjUxoiCABZR2grb
MD5:	E4EAACF4E5648115A8D7B4BC0EFD503A
SHA1:	ABB2E2BD876648569231828ECB94CB37F0A506B0
SHA-256:	BDF8DB681760BE4BAA2BD654920B45379CA306E333EC663B53D5D320B63C3A5A
SHA-512:	C724C26CB9A489D11F6766FAA3A44E714374F6376A2975FEF1731950ECF2892F36384ED9A6E076232E87DDAB069FE1855488D13B56258204F8DC4EEA22A0488F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....p........>m2.G.".'$t]....cm..+.b...."%o.}I.z........;......q....U.....c.....O.......!y......7..........c....=,..?u...p.8}......g.....w......_...}.......?Hu5....\3...J.Et..G.........4.\....V01x.G$..ms.H./=..o..7AO..}.#..WbT..G..H..e..=.E...8.YQ._u.....b...R..2.D..R.e..b.k..:...K.]..4.ata&..K..M...n-..6.....Y.x...WG.^.`.SY`.U.w......!2.F.m^>...q.W.I.t....M..c.{...R.....o4\|Q......d.8.~W......c....e>.b...^.)}.q#..f.......HsX.].@@.n.u....B..o...Y.. .q.j~C.n ...y.I..M9..}U.s.D...m.p;...9}H.......T.J.`.cS....0S.~.!...6'.Z+....~^.Y.e.M..!..f..@.MQ...c.c..C'v...)..Ez...G.:x#...X\z.I.TB....^A...l...uj'9.,.....8?.......Ma........(N.Zv..!....s.#.;..p.*Q.VA.f..H.......'..h.R.........g.s...%.[....C.oi.h.\@i{.E...'+. ...y-%....<..oK.AE..:\|.....r..k..Q..+.I..a.<b..{25...Gy..xk+.......}....S...[..%~...O....$T'......tF...6.........;n........t..3]Y..f..U.Jx.@..xD1....T0.M....$8....,.P...m...>...v_j...@.....N..S..........&x....hhUx..

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=551, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=735], baseline, precision 8, 735x551, components 3
Category:	downloaded
Size (bytes):	284834
Entropy (8bit):	7.955858598250865
Encrypted:	false
SSDEEP:	6144:2obetfYwPuELs2U6LjFnGfApBTgWizUW8BHoV8mqV:lbeVzuELzU25vpB8px8mqV
MD5:	F557E38F7DAED54F5979D134352095C5
SHA1:	DDC100ECE7F71E67E377B63DA38FC17CA36BDE91
SHA-256:	57E74C548400D3578FD2304A94173002C46336A58116064C1450B9BBF4FCB67C
SHA-512:	74778C91435ACA1C3E25B64E90B26FDE9B01B5F09A75E694A847A7FEBA3BBC449D8152D33BF21A6DCDD81704072B88F0A70637E4C3F1B2630498E913D4A7C229
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/6a120e9794038848/original/HomePage-Work_735x551.jpg
Preview:	.....yExif..MM............................'...........................................................................(...........1...........2..........i............. .......-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:30 15:19:18............0231..................................'...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..oK.k_M..O.....0..z.^#...P..B..X.......8..5:.w?E6..g..N[I...Sk.K]...Y.^..

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57765)
Category:	downloaded
Size (bytes):	112427
Entropy (8bit):	4.925295015861728
Encrypted:	false
SSDEEP:	1536:pZeJWfZglWQg5MG7+qehN2pUkxWLZQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LaU3Pq
MD5:	319580D7D8944A1A65F635E0D11E5DA5
SHA1:	E23BC18EF1B0F78F7010E3C16E4C5E1F333248BD
SHA-256:	FB3A89CC6347E098063BD15F285BC90411846DDCE6F17812364FEEDAB67A67F5
SHA-512:	743825EAEA11208277528E506C115EC786AB060095AE4250C65A9B02FE9E5CB2AC5AC386532486A2678B9615490CE75BA096A9FD2041200989AD07A726B5D9D0
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9976), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	157865
Entropy (8bit):	4.927279850205325
Encrypted:	false
SSDEEP:	1536:9ap4oPqa/Tq5Spo1iMUXW1pJNeBeueee9ey6bVhC9eBeweTe0mStdl5WC0/y6CTY:sXqOW5hfxTxsV11
MD5:	4680699BA208C6748BB376A364FCAB69
SHA1:	1F1895B88DF2FA17E709B14E02AE2B5DB7F984FE
SHA-256:	BA5E2DA102EA894C0C36E078D827E62966478A44A04F44B50792BF56895F9FBA
SHA-512:	58286B60805C96651212111B1EF4167DC0134F71BCA89335FEA5F48F913265144F32CE196BEA7D806AD4BBD4AD5F6CD031CDC3167E11ED285E85A84E81C4BEAE
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/en/
Preview:	<!doctype html>.<html lang="en-US">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0, user-scalable=no" />.. <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />.<link rel="alternate" hreflang="en" href="https://www.ovivowater.com/en/" />.<link rel="alternate" hreflang="fr" href="https://www.ovivowater.com/fr/" />.<link rel="alternate" hreflang="nl" href="https://www.ovivowater.com/nl/" />.<link rel="alternate" hreflang="de" href="https://www.ovivowater.com/de/" />.<link rel="alternate" hreflang="zh-hans" href="https://www.ovivowater.com/zh-hans/" />.<link rel="alternate" hreflang="x-default" href="https://www.ovivowater.com/en/" />... This site is optimized with the Yoast SEO plugin v23.6 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Water Treatment Solutions

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	23566
Entropy (8bit):	4.532540802658393
Encrypted:	false
SSDEEP:	384:xA8CdKyIfhDhFK3vSyN6s0B7QwJRAIX/FwljUX:xA1XIfhDhFK3vA5wljUX
MD5:	00FD387B82E2DBC57E63C16053A78A99
SHA1:	A777054910C430F28118B085312981D8D4BE5AFE
SHA-256:	AE1354E264577A02ED6B6048A22BB2C8EC34EAB18928D08F02FA9C79950B4D79
SHA-512:	96E51EC568BCD6DCE57273EE2518D54F24B80ACDABC61F1C2C16C2E03053A40F2FD305E19A4EE1EFCD052020D46E831DC75F86AB82B83C9064E09CC3221CC4B6
Malicious:	false
Reputation:	low
Preview:	/*.. @file.. * Defines the Drupal JavaScript API... /..../.. A jQuery object, typically the return value from a `$(selector)` call... .. Holds an HTMLElement or a collection of HTMLElements... .. @typedef {object} jQuery.. .. @prop {number} length=0.. * Number of elements contained in the jQuery object... /..../.. Variable generated by Drupal that holds all translated strings from PHP... .. Content of this variable is automatically created by Drupal when using the.. * Interface Translation module. It holds the translation of strings used on.. * the page... .. This variable is used to pass data from the backend to the frontend. Data.. * contained in `drupalSettings` is used during behavior initialization... .. @global.. .. @var {object} drupalTranslations.. /..../.. Global Drupal object... .. All Drupal JavaScript APIs are contained in this namespace... .. @global.. .. @namespace.. */..window.Drupal = { behaviors: {}, locale: {} };....//

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	dropped
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	4.420482748761224
Encrypted:	false
SSDEEP:	24:t41SRF1VOm9ET8ynm9ETKgdii0dUMP9XtVGOeMYTuK7Z:CSRxOeET1neETKgLMP9XQMX6
MD5:	B544F99E22C83F1FDF37D529BBA165CE
SHA1:	3F29D95C2BCDF58C1BDEEA9BB7523B94318FDA83
SHA-256:	D10B95EA03FA0F9CC7A2B6F01FB3F9D305E6D41BFE9D19077663980F49355027
SHA-512:	FE8366997D217A2301E6FB3427C3210CAC89E5263734A8BC0347A0E34BD63CD35ADB8D9511561126701FBCCA790B440535D3BE4DACF484B817776809D36E0552
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/7aabb08284ade500/original/website_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 138.5 73"><path d="M138.5 0C93.8 25.8 46.5 45.5 0 60.4c0 0 71.2 19.9 138.5 9.9 0-.1.1-70.2 0-70.3z" fill="#510c76"/><path d="M121.8 45.1c5.1 0 9.2 4.1 9.2 9.2s-4.1 9.2-9.2 9.2-9.2-4.1-9.2-9.2 4.1-9.2 9.2-9.2zm-59.6 0c5.1 0 9.2 4.1 9.2 9.2s-4.1 9.2-9.2 9.2-9.2-4.1-9.2-9.2 4.2-9.2 9.2-9.2zm12.5.3l5.4 12.2 5.4-12.2h3.1l-8.4 18h-.9l-8.5-18h3.9zm16.5 0c1.5 0 2.8 1.2 2.8 2.8v15.3h-.8c-1.5 0-2.7-1.2-2.8-2.7V45.4h.8zm7.3 0l5.4 12.2 5.4-12.2h3.9l-8.5 18h-.9l-8.4-18h3.1zm-36.3 1.7c-3.1 0-5.5 3.2-5.5 7.2s2.5 7.2 5.5 7.2h.2c2.9-.1 5.2-3.2 5.3-7v-.3c.1-3.8-2.4-7.1-5.5-7.1zm59.6 0c-3.1 0-5.5 3.2-5.5 7.2s2.5 7.2 5.6 7.2 5.5-3.2 5.5-7.2-2.5-7.2-5.6-7.2z" fill="#fff"/><path d="M-18.6-18.5h175.8V91.4H-18.6V-18.5z" fill="none"/></svg>.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	27254
Entropy (8bit):	7.99268327367325
Encrypted:	true
SSDEEP:	768:NeHkYubHsvltNW5pLPLkwp1Lvtqc03NDd6a1:kEYubHsnw5pLPLketvsc0bv1
MD5:	7445773F6FC27B6F067D7D61F61774E5
SHA1:	EE7AA8D0C41AD802598813A2CA29A28B45E901D8
SHA-256:	33328E0600699F353B8AADEB2EF202B46786109393C3AB0800505D21081037E8
SHA-512:	211AB6E5B647EE8EB4B7B97BEA5BF9398FCCC4146A8B5840FFE90C2B45AD756378AA7CDDFFD5F02B39B50364A66910E6E93975B148DD67E1678C3BED87D843D6
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/69f5dd10ed364d6a/original/IndList_SemiConductor408x500.jpg
Preview:	RIFFnj..WEBPVP8 bj...........>m..G$"!...n....c-.X....o.._.g..N.......Y.................r..0~O.o......#...........2.W.._.<........}..).......K[....../.M.U.oQ..^........?.o.........5c...i.....g.(ApLC.!..<.o....X..j..s.[.....<.i...kT...W.../..L.?.u\_.d\|.?~...B.2BV.'....@.^...".'...5..+g......"..]./ti....m{.....}....,.\|..mo..W.......z... Kvg.7A..e..A?..u.a_Be.u..?.k...r{A..6.\..`.m.2c.C.G..$...T..J$..$..n..?.YT8L..?Ko/F......}S&.\|.......~.Y.f.J........#@.....{c...:^..._.......?... >../,+mZ....Y.b`(yU..2..&.OAx.>!.;t9\|.........bCnU...".........9..-H....X..x..N........:.\..........B..j....9#.%T......\|...@....J-f...."T.n..v...v..C.F.1..,...H.r\.i..SMZ.........{^.Kf..%....r....3.[...C:....1m.y..6m........*.$..e<....;\|X...tg.7g...m7<..%s.......k.U.0@..d.......W..Q.W\|._...q8Q.:..ZI..Qj.]..-.fP....q].x... .A..e:........C..%.h.........a.p&.........(i...`.V...KO......>Ui_.{....9..cO....E....dj....Q...Ld....:.....{.mi....l...;e..q.y..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	54694
Entropy (8bit):	7.996316425516966
Encrypted:	true
SSDEEP:	1536:fBg2KrU8gSFf41bTAN8g35+RTbq98nEwWU6c:pg2KY8ZH5+R/gI0hc
MD5:	CBC4C852A8C763A8099DB558FA1F69EB
SHA1:	AD452FD530FC3F6A8B26964F6F8E9889788E0FDB
SHA-256:	3D422F3DAD89E9681ECA91D7454A1EB228A6DF2E59CA197CD61C50D4F4F62B5F
SHA-512:	3196C867C66F9A8007FDE1390F9DCBEB84FF305B0C57C05A573094200B24368B0A6724FE041BEBE7DF105E9F788255FB01220BD3D69553EBCE7A86AD5C96F55F
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/6db334456dad3140/original/IndList_WasteWater02_408X500.jpg
Preview:	RIFF....WEBPVP8 .............>i(.E.".....@....@..@....Q.......s..yT\|.{....y........O......W....'?W.g.....}....>?....._.q.3.=.o.oP..~d....i.....E.U._........_.k.7....r........}~.......`.o>..W.......~#......{..R...o..O.^........W..v..?...............d..z...........7..\|N6B.G.......9P.'......2Z9....z..2$.&...<....W..#.s.,3xT.g.........K..c..ck.\w.."...D...H..8.J.L....G."phl.....y....R....V2..K....zf.X...N1!&..c.Qi.;....j"P.K.c.mVX.K...e.&tf.8.Yt...../z..<L3...W......A.&.HB/X. .R.."...`...#.~N.q7I+..w.........-.0..]....e&.Sqz'...S...n...!.Ku...S.\.[>fp%(5...&.$..Y.jh.......#...W..$...FO._M..n.!.......#tG.TQ./6.....FX.:3..qJB.Z.-.J}...H1=...;.$..x...G.../..].......}...^..9..p....z>.K].D.....N.!.......))x...........~O..JS.$.N5T...i.J..U.).j...X....7....+../.....X...J....J..I.`].E].l.>...{.....np../.MQ..H*.6.0 .,......=..N_.3.~..#.Ns...7j@.\`Mq._)9...y.m....x.@.~,....CS...?....%z....P1p......zQ.........A.\|....j5..V..1..... ..F.....Q.R?...!w...9.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x380, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	14764
Entropy (8bit):	7.985776463754436
Encrypted:	false
SSDEEP:	384:nntOIWd+eY5mSw4EtDOXeECAkf3FZA9B/J:ntMYrvASeECRcJ
MD5:	D0DF2B227BB717818C29EDE2DED9469C
SHA1:	C93E98DE3AE9F479F4EABA18AC13B190054CBE93
SHA-256:	853A5B354A7A7E10CC1259E3B9298C7EC3BA6678BD880DF93D7EABCD737D7FCC
SHA-512:	FC302D6D746C029C38918606CAC8D9ED5CED5850B0946738F41E09197173077A78C24416F6CF63CF6109967F23FA3761F4689BD6C4EF80AEFD223D9A6ACE37A0
Malicious:	false
Reputation:	low
Preview:	RIFF.9..WEBPVP8 .9.......@.\|.>m6.G),7#(6.....gnP......7.,........R..N..A...[..b.../..O...k............z..re.{....)...5.o.......i...n...m....w..W........_/[...._$...K._..D..3.....6...7O....'.w....../..._.. .. A\|>@..\|............./..._.. .. A\|>@..\|............./..._.. .. A\|M.cp.....C4.+."..M...g..../....?t.^..\,O.!..#..)6...Q,........./......c..y......t9>X...G..R...%=..u.TKW.nuf?..3.........\.35..#A1...?3y..[Z4].>T........L5..4.pG....j{+@Rr....:K.5o.(.]o.&.H..?^..._."\|.6w.S......r..X.]......g..A.y.9....&....I.)C...#( .T..nRY.....O..pKQ..E.zz.o...O.N.j.,....wN.!Z.IEGc.].Gv%.r.H...!......W}..#....]_....d.q.qX.g..Y..X9.$GN...=+]...mS&+..7Y.m....y2..j...}.vV.y...UQa@S.w+.#.c{f6.q.)`m....5{6.=.2t..N...%..>l...5...e.V.....Db..Kz]...2....y.....Q.._..j..c..z\...]..a....0...m.E..........^....N........(.G.y..7..+..`I...;.'V@..o.$...:U03m....Y....Q..9..7o....m.H...%....b..].....B.0......k..Y..b.....M...o....u.........h.f.5._./.@g....vc...f...Q;.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (32746)
Category:	downloaded
Size (bytes):	40282
Entropy (8bit):	5.297025153835865
Encrypted:	false
SSDEEP:	768:0YEzNEfgV+z7Djgt1qkZny0IW7JmFqi50Za4ibR:az6D7DjI7Zny0IWsAa46R
MD5:	130AB680ECB8D8A049F1F4BB47FC0DF4
SHA1:	0A85406B8608040159A0EDBC15CE683AEDD127D7
SHA-256:	585B39E8F0661A1F2CF6C9E55D9F44D69BD77669153423AF2221EE6599F50ED6
SHA-512:	DB13F165BA8758102D1921A8F0DB750F35DBCC334D0ECD0D57B280D063D7DA01E7D011AAAE4A9237D60D386163B53A67B62097778FE8314A5B9AEC7BC844133E
Malicious:	false
Reputation:	low
URL:	https://cdn.calltrk.com/companies/205035836/d625593f098d4d02b587/12/swap.js
Preview:	!function(){"use strict";var Wrappers=function(){function e(){}return e.documentReferrer=function(){return document.referrer},e.documentURL=function(){return document.URL},e.documentCookie=function(e){return e?document.cookie=e:document.cookie},e.isDebug=function(){return Debug._isDebug\|\|!1},e.windowLocation=function(){return window.location},e}(),Debug=function(){function e(){}return e._debugEnabled=function(){return!!Wrappers.windowLocation().href.match(/crl?dbg/)},e.doneSwaps={},e.foundTargets=[],e}(),Performance=function(){function o(){}return o.networkPerfData=function(){if(o._networkPerfData)return o._networkPerfData;if(o._networkPerfData={},window.performance)try{var e=window.performance.getEntriesByType("resource").filter(function(e){return e.name.match(/swap\.js/)})[0];if(e){var r=0<e.encodedBodySize&&0<e.transferSize&&e.transferSize<e.encodedBodySize,t=0===e.duration;if(r\|\|t)return{};var a=0<e.secureConnectionStart?e.secureConnectionStart:e.connectEnd;o._networkPerfData={dns:

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.3 (Windows), datetime=2022:05:19 11:15:47], baseline, precision 8, 735x551, components 3
Category:	dropped
Size (bytes):	274646
Entropy (8bit):	7.950122723206094
Encrypted:	false
SSDEEP:	6144:oLJiC6aUdkzBUw+5bI/EQ5Q9WPADwsVIcLovUGmxEDGzsJ:uPm2Bt/gQEq8EDGS
MD5:	1C970E5AC96754897222153FBBFF078E
SHA1:	26027BE432AD9B4A22694103B7588C3271A7CDC2
SHA-256:	29E2C9A941FEDEA720DF79BE19D2E163167FBEF549032505FA9049A4C24E1A20
SHA-512:	11280A8407CF5EC43B0169CB928A5B20524D0E7201230F8D36D28E63E559D0164A2A2B515D4D1C9BAA5117947E0E41F2A178481D1BDB125441945D9AD491BB01
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 23.3 (Windows).2022:05:19 11:15:47........................................'..............................."............(.....................2...........M.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................x...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...}......sr6...gbg.0..,s. 4....V7..P.k..>..M..o...0.Uz....+xpBp..Wt..r....t.......@,v+...C.c..c>._.2.dlh..?t*Y?[..........,~....V=.K..p..8.K]"7

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=3877, bps=206, PhotometricIntepretation=RGB, description=Workers on site of wastewater treatment plant fixing sensors, manufacturer=Canon, model=Canon EOS 5DS, orientation=upper-left, width=5500], baseline, precision 8, 1000x1232, components 3
Category:	dropped
Size (bytes):	952816
Entropy (8bit):	7.966819976277055
Encrypted:	false
SSDEEP:	12288:zsB2doc1E6kyKLsIsRHfTOeQetn8rvSju9uvSD3OjCv0vVvtDjYm6eYSMV6Pyb:z5dOfVspbzQe1snSSD3Oj9vVFIZj6Kb
MD5:	B463257042C5BA8D50A6B3C8367C1163
SHA1:	A7A9806A2B7590A22C8FCAC7BA7D33B527C7711C
SHA-256:	ECED534668D3A02D08BDFED62FFB9D2F96ED07F694CD891632DC214ACCCDBE7D
SHA-512:	B164EE38C91E1A90B203223B0258965AB9DEE78CF34937EE9A8229FDA0DB4D6A05A5310CA7814CBD5468E276C1EF5D7DF763655702C41BC90A2D3C8CEAD83136
Malicious:	false
Reputation:	low
Preview:	....,%Exif..II...............\|...........%...............................=...............................................................%...........-...(...........1...!...5...2.......V...;.......j...i.......x.............Workers on site of wastewater treatment plant fixing sensors.Canon.Canon EOS 5DS...-..'....-..'..Adobe Photoshop 24.0 (Macintosh).2024:07:04 15:18:05.zstockphotos..#.........".............."...........'.......d...0...........2.......d...........0231........2...........F...........Z...........b...........j...........r...........z.......................................................................36..........36..........................................................................................................................1...........2...........4...........5.......................?.......2019:10:25 19:57:33.2019:10:25 19:57:33.+10:00..+10:00..+10:00.....@B....Q.@B..........................................055021000635..........F.......................EF24

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	258
Entropy (8bit):	4.412023623447299
Encrypted:	false
SSDEEP:	6:SEwJF9YT2KMEwJFOWEgmzJEwJFOWErJoJEWTWUqV9:fdWEgmQWEdfDV9
MD5:	886011711AE972CD8472EEF5EBA5C298
SHA1:	6E52E59DFCBE911B4AB1A69036E1E3B930030C7E
SHA-256:	4B9257E3E9C959214DDFAB833A69A021AE6557403EFE76AFCBEE259621175274
SHA-512:	5E17E37F001B253F9D78CFB212966299D30F99494A36580447D2A420A19C32F0D7C629E3081B9A7A8C5D63AC263A47FD907AD24C9642A66558C790D2F4B6B4D6
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1
Preview:	.wpml-ls-menu-item .wpml-ls-flag{display:inline;vertical-align:baseline}.wpml-ls-menu-item .wpml-ls-flag+span{margin-left:.3em}.rtl .wpml-ls-menu-item .wpml-ls-flag+span{margin-left:0;margin-right:.3em}ul .wpml-ls-menu-item a{display:flex;align-items:center}

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271
Entropy (8bit):	4.828102040031845
Encrypted:	false
SSDEEP:	6:yLzCRo6lpahRszqvyRURst0uGmp1tRivDMORiAds7bRiXvhen:uSoUZNeRUHXRivfRiAd2Rig
MD5:	C6A55456AF4776C733018888483ABA22
SHA1:	297B53F8538BA3B59D2028F16DE4E14EC90337CE
SHA-256:	20BE9B3C63A01D921697A0EF1C1596F647678498EEFE6DC508E2363BE25277F8
SHA-512:	DBAF5D9A1B0F5D4195D3B9C62650AF622D66F1B68BFEC20CE79E84185C558F91AEEB6718452E1196BF783BB3CA7A0574223726FC4D80076EA9AD115F1FDD1EAB
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.13
Preview:	document.addEventListener('DOMContentLoaded', function() {..for(var cookieName in wpml_cookies) {...var cookieData = wpml_cookies[cookieName];...document.cookie = cookieName + '=' + cookieData.value + ';expires=' + cookieData.expires + '; path=' + cookieData.path;..}.});

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 392x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13850
Entropy (8bit):	7.987758035889875
Encrypted:	false
SSDEEP:	384:BmxLyFxjOo+MdbhJGSuJIt8m6Kp8sW4Hb2HBz:7FxSMrJGSb8mRNHby
MD5:	21218DBC58308C227225AD5C475BDCE9
SHA1:	AAB0932DD125115503FCE23AC30AB6CA5F9B627A
SHA-256:	6A6379D6A89EE99E149F522D2288FB03F1BFADCE293FB9D89A9EF030D37B62E0
SHA-512:	B01C2562D24E6665461F29D51827560BEC26773E7655335F245F1A3A350E0650CFD98A937AE008BB6429E65CC5522974357213C8DA228F8093CD46C62A2CE7BF
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/22580ea3a018197c/original/IndList_PharmaLifeSci-408x500.jpg
Preview:	RIFF.6..WEBPVP8 .6...e.......>m2.G."..%s.....gm....R...xRo....,<=.I.g$..."....z.E.wy.....O..j......et-..2qq.,N.K(t...f&!R.h..2 'p..8.8}..'.]W.?@........._...a...;q`g...e..ujk.vJ.a.....G..A...'.;..N.5e.....O.Z..p\|.e.`'...J...0.7.....,,.R..m;.....k...O..WG....&XA...9.=....I..l.e.`.gO..#[.I...jo.$C.....lA-....SCG.....D.%....=N..e.]f.Dz.j&R......I.#.}.^.1E. ..u`S...su..e!.(6......#$.3.......Zv.m.N.MF.....w..U..T.R.JM.....#]..<nD...0.....\|.=.........b]......B..%.n../.8.pXd...X..R.g..z..n.K.Na:i[.....'..>....2...t.R.^.g;.<.k.h,..9..".<..(.;..J.a.J.L..&...$.o.....#.y.d{.q...Pn.F."\|\....#/w1...e.=K.E.1."5.N.h/.<._L.ag>u.f.B\|.%...J.A..D.......ly.n.6....@>4...+...-yD.......fm.O.s..;.s!.+.j.....K..f..j........).../+..o(u.o...>O..\|.......F.Jwq9.c...A..v....f.,'.Or."..XUT_%.2.....oY.............xZ....#...z..dTW.ZE.....L.....%........G.#....../.>>N". ?...~dt._.\.$........m...t<(..l..Tf.#..;Q..+.B."E..&.QtM...d......s.e..$Y....3...0.@u.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=18, height=3744, bps=230, compression=LZW, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5616], baseline, precision 8, 1000x1232, components 3
Category:	downloaded
Size (bytes):	699127
Entropy (8bit):	7.947586951515654
Encrypted:	false
SSDEEP:	12288:OOguRn6p5YWA4ioFsyWRbPxqcfQ7ekVY5E/wzCQh0w2IHJlfUo6zLCJ:OOjnnWAEobPwcoqkVYdm1kJl8oz
MD5:	5D61DF2C11FF42794A39304AE4956EAB
SHA1:	B7C7C87FF0A9489166090BBC0417D94EE0F208FE
SHA-256:	79E5A1217071FAE17125CF466C870345302C5FFF9F91AF2D4672F42E0F9BE7D5
SHA-512:	2B0D8D40970B901610BD16A689427F19D86D5FBE36E044F907DE34E37C3F17126239847513685FA4587F5AD70C17CD0E6CAEA2D978661EEDDA0431118427D2D4
Malicious:	false
Reputation:	low
URL:	https://ovivo.getbynder.com/m/703a6c3b527e687e/original/Ind-TechSol_1000X1232.jpg
Preview:	....$.Exif..II.......................................................................................................................................................(...........1...!.......2.......8...;.......L...........e...i.....................Canon.Canon EOS 5D Mark II......'.......'..Adobe Photoshop 24.0 (Macintosh).2024:07:04 15:14:24.Photographer:Herv MARTIN.Copyright: Herve MARTIN.............................."...........'...................0230............................................"......................2...................................:...........06..........06..............................................B...........J...............................................................1.......R...2.......^...4.......~...............#.......2013:10:09 09:31:00.2013:10:09 09:31:00...F.@B..........................-.........U......!9.....1230702589..-.......-.......................TS-E45mm f/2.8..........................................(................................ ....

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11882)
Category:	dropped
Size (bytes):	13099
Entropy (8bit):	5.393331496984079
Encrypted:	false
SSDEEP:	192:ZbnMW5tmjHCR/UeHjXWb2pTOnstdo5Cp0NREWERcxzPuiv3NU:ZbnM9jURHjXo2BtcCuccxz/v3NU
MD5:	C99B657A986077C81F7B228D4276C36C
SHA1:	02DA79AC94734CF34A4434CDB05E3DA9A55C8921
SHA-256:	10E24CE891E16EBDF1EBE40197A38035B1BA0D82CE396CBF4EE8F5694A6306A6
SHA-512:	6AF58358914DD61A4FF9FBB3DFCD668A6146932B74357FA73EA9CF2FDD85B5B0FDA2697558DCC69E14C44C5B1DEF7B135AE16EA555BD97628268D8911FCAC066
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1840342,"rec_value":0.09090909090909091,"state_change_listen_mode":"automatic","record":false,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","error_reporting","feedback.embeddable_widget","feedback.widgetV2","f

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16836, version 1.1966
Category:	downloaded
Size (bytes):	16836
Entropy (8bit):	7.985852416836824
Encrypted:	false
SSDEEP:	384:VJV55fYiSeuFLkq+4XnsK1hk0xePL32gLavvqx3dW3Ml:VzZuFLb3sK1q4ePT2gLavvqxNF
MD5:	88261F2E8F9441F81CE8F99C314DCB59
SHA1:	F70E6A1196A391BD1C9AFD792F981E221B71C54F
SHA-256:	FF734158C5AF55B218A31F69E4B0C7861E99A13D1311E1EBF337CA40A7183531
SHA-512:	1760C365002D0846E0332D23F5D6DC97CEFB7DFD844886AAF13AA74AEE89E9607E18B5229054D8D75E8887445F9C0AAAFBF0C327A977134770110E84EF1B36D1
Malicious:	false
Reputation:	low
URL:	https://www.ovivowater.com/app/themes/ovivo/dist/fonts/avenir/65cde95a-ac33-4c65-8198-e37857968d1a.woff2
Preview:	wOF2......A........,..Ac.........................`..`..\..d..P........X.6.$........ .. .... ..H..'...w......%c....<......q........?!.......,y.Y..E/..kT.W(..M.X.Wl..\S.FC`^.An.a~t......#........dI./r.N..w..wr.....B..2..%...=Hp..B.\....p..............'...2_.8/..9........)....+...\..`.qe.x..r[..7.`.c..d...2..TP....di..m..1mL..0....V...f.w`.....R"......Ap.-..y...e.F.......8c...........=..:/....E..&U...k1...;4.5...p.0.u[7DS3.x>8Vof."u/.@..+.N.........].......x.._...I].{..0:).a...x.Fv./.......0.....<C.'4........B.u.uD...>oN.....(}..Oc.1.R. .g...}.S.CP.t..).i.g......g5}..{[a.;.Kc[w>..~o...`...L.......V.h.I.t....v..z.....$...z.7....b..U:.v.........^0.}.......%.....K.4.:.P.P.N!..\Z..V.u.:S.'g".u];.xy.......~............ ...]....=n..\|..28.p.%.+.P.Y.Yf![.b...S.d9+..?.....'......`.K..B..Y/.Mq)s..,k4.\...d...1....l...5..1$f.pz.....6.x...GX#.^.e....>.VQ.9E...g..K..6./.1."""2...W.cL.._..Vbb.......s.?{?..8.>C....?.N...W.EfaTb.+....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 04:01:10.560360909 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:10.560417891 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:10.560544968 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:10.560755014 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:10.560791016 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:10.560847998 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:10.561002970 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:10.561017990 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:10.561206102 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:10.561216116 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.413708925 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.413975000 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.414086103 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.414108038 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.414222956 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.414246082 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.414491892 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.414577007 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.414756060 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.414818048 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.415179014 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.415235043 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.415761948 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.415816069 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.416698933 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.416771889 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.417057991 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.417145014 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.417185068 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.417196035 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.457665920 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.466830969 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.466854095 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.514616013 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.800870895 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.800959110 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.800998926 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.801018000 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.801078081 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.802254915 CET	49735	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.802275896 CET	443	49735	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:11.808556080 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:11.855345964 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.452120066 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.452207088 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.452244997 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.496870995 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.571249962 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.571261883 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.571301937 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.571322918 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.571352005 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.571392059 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.571408987 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.571423054 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.571489096 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.573620081 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.573630095 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.573661089 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.573692083 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.573704958 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.573712111 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.573771954 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.690702915 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.690716028 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.690752029 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.690895081 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.690928936 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.691195011 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.692290068 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.692303896 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.692387104 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.692409039 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.692543983 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.693921089 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.693941116 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.694015026 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.694024086 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.694067955 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.695647955 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.695664883 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.695756912 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.695765018 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.695971012 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.809921980 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.809943914 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.810064077 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.810106993 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.810758114 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.810779095 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.810830116 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.810837984 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.810879946 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.810914040 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.811609983 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.811625004 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.811693907 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.811700106 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.811748028 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.812477112 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.812516928 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.812563896 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.812568903 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.812597036 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:12.812621117 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:12.812653065 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.059137106 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.072981119 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.073024035 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.073272943 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.073421955 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.073467016 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.073528051 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.073681116 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.073721886 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.073803902 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.074469090 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.074476957 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.074640989 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.075674057 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.075689077 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.075881958 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.075895071 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.076025009 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.076042891 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.076131105 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.076142073 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.082861900 CET	49736	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.082884073 CET	443	49736	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.091470003 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.091495037 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.091686010 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.093002081 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.093017101 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.093738079 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.093756914 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.093844891 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.094057083 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.094074011 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.431732893 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:13.431776047 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:13.431917906 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:13.433409929 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:13.433424950 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:13.619875908 CET	49746	443	192.168.2.4	142.250.186.100
Oct 30, 2024 04:01:13.619972944 CET	443	49746	142.250.186.100	192.168.2.4
Oct 30, 2024 04:01:13.620091915 CET	49746	443	192.168.2.4	142.250.186.100
Oct 30, 2024 04:01:13.620238066 CET	49746	443	192.168.2.4	142.250.186.100
Oct 30, 2024 04:01:13.620265961 CET	443	49746	142.250.186.100	192.168.2.4
Oct 30, 2024 04:01:13.912527084 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.915846109 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.922643900 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.924129963 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.924154043 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.924330950 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.924346924 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.924591064 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.924673080 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.924806118 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.924829006 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.925299883 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.925345898 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.925367117 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.925582886 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.927130938 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.927150011 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.927205086 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.928298950 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.928391933 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.929683924 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.929867029 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.929951906 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.929960966 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.930277109 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.930294037 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.930341959 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.930389881 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.930402994 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.930449009 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.931060076 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.931128979 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.933036089 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.935034037 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.954305887 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.954386950 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.954731941 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.954751968 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.954927921 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.954937935 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.955143929 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.955161095 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.955265045 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.955344915 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.955368042 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.955496073 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.956074953 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.956151962 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.956274986 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.956337929 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.971330881 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.971338987 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:13.984051943 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:13.996385098 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.021199942 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.021379948 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.022304058 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.022485971 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.022917986 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.022933960 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.023060083 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.023077965 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.076865911 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.076869011 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.170730114 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.170821905 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.170954943 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.171020985 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.171032906 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.171122074 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.171132088 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.171196938 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.173206091 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.199290037 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.215024948 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.215040922 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.220921993 CET	49739	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.220944881 CET	443	49739	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.224512100 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.224548101 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.224630117 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.236774921 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.236792088 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.238899946 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.264559031 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.264652967 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.264712095 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.265603065 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.265686989 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.265754938 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.265767097 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.265805960 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.268682957 CET	49743	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.268693924 CET	443	49743	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.269164085 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.269201040 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.269272089 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.271409035 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.271421909 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.275084019 CET	49744	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.275091887 CET	443	49744	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.275495052 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.275511026 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.275580883 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.281614065 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.281626940 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.287983894 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.287998915 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.288017035 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.288024902 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.288057089 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.288067102 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.288078070 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.288131952 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.288191080 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.290241957 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.290250063 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.290283918 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.290359974 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.290359974 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.290370941 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.290436029 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.292048931 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.292066097 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.292102098 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.292119026 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.292130947 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.292139053 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.292171955 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.292198896 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.293771029 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.293797016 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.293833971 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.293843985 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.293890953 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.299251080 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.299341917 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.301136971 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:14.301155090 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:14.301223993 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:14.301426888 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:14.301450968 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:14.301522970 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:14.301889896 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:14.301903963 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:14.302010059 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:14.302017927 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:14.308475018 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.308492899 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.308912992 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.317940950 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.317950010 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.318008900 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.318016052 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.318056107 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.318089008 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.318105936 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.318114996 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.318156004 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.318296909 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.319489956 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.319499016 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.319556952 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.319571018 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.319581985 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.319591045 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.319622993 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.319647074 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.331098080 CET	49742	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.331111908 CET	443	49742	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.331688881 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.331732988 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.331815958 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.334669113 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.334691048 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.360196114 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.386516094 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.386535883 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.386615992 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.386629105 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.386683941 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.402848959 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.402877092 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.402956009 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.402976036 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.403043032 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.406764030 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.406788111 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.406852961 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.406863928 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.406924009 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.407762051 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.407777071 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.407840967 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.407849073 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.407880068 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.407988071 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.411190033 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.411242008 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.411257982 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.411267996 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.411331892 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.411380053 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.411452055 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.411494970 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.430649042 CET	49740	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.430664062 CET	443	49740	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.431485891 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.431508064 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.431575060 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.435976982 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.435988903 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.486913919 CET	443	49746	142.250.186.100	192.168.2.4
Oct 30, 2024 04:01:14.503181934 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.503200054 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.503308058 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.503324986 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.503424883 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.504061937 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.504095078 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.504133940 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.504157066 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.504198074 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.504399061 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.504656076 CET	49746	443	192.168.2.4	142.250.186.100
Oct 30, 2024 04:01:14.504677057 CET	443	49746	142.250.186.100	192.168.2.4
Oct 30, 2024 04:01:14.508281946 CET	443	49746	142.250.186.100	192.168.2.4
Oct 30, 2024 04:01:14.508368015 CET	49746	443	192.168.2.4	142.250.186.100
Oct 30, 2024 04:01:14.513397932 CET	49746	443	192.168.2.4	142.250.186.100
Oct 30, 2024 04:01:14.513617992 CET	443	49746	142.250.186.100	192.168.2.4
Oct 30, 2024 04:01:14.520267010 CET	49741	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.520279884 CET	443	49741	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.520905018 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.520942926 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.521203995 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.524094105 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:14.524107933 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:14.551328897 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.560904026 CET	49746	443	192.168.2.4	142.250.186.100
Oct 30, 2024 04:01:14.560925007 CET	443	49746	142.250.186.100	192.168.2.4
Oct 30, 2024 04:01:14.613821030 CET	49746	443	192.168.2.4	142.250.186.100
Oct 30, 2024 04:01:14.751202106 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.751394033 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.751470089 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.751636982 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.751657963 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.751816988 CET	49745	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.751822948 CET	443	49745	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.804197073 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.804208994 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:14.804408073 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.806485891 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:14.806495905 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:15.079663992 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.079988956 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.080013990 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.081199884 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.081734896 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.081909895 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.082274914 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.121999025 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.122482061 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.122498989 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.123013973 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.123367071 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.123670101 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.123748064 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.124135971 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.126552105 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.127023935 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.127034903 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.127437115 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.127505064 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.128194094 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.128258944 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.128547907 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.128618002 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.128951073 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.128969908 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.136164904 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.136511087 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.136524916 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.137552977 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.137628078 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.141767979 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.148998976 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.149014950 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.150068045 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.150142908 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.167371988 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.173125029 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.187391043 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.188452959 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.188476086 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.189686060 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.189765930 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.192188978 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.192249060 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.193160057 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.193342924 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.193576097 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.193595886 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.237143993 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.276102066 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.287709951 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.287734032 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.289016962 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.289118052 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.291512966 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.292743921 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.320185900 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.320398092 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.320436001 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.323956966 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.363013983 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.363346100 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.365133047 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.365139008 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.365148067 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.370310068 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.373864889 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.398286104 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.398310900 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.398780107 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.398844957 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.399513960 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.399561882 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.401707888 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.401776075 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.405066967 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.405082941 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.413108110 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.414340973 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.430788994 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.436830997 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441477060 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441508055 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441560984 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.441570997 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441603899 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441618919 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.441618919 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.441621065 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441637993 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.441646099 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441757917 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441807032 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.441823959 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.441873074 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.441939116 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.445013046 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.445111990 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.468415976 CET	49748	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.468430042 CET	443	49748	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.472548008 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.472738028 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.472877979 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.472903967 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.475951910 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.475970984 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.476059914 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.476069927 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.490021944 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.490190983 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.490211964 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.490247965 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.490259886 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.490274906 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.490291119 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.490299940 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.490305901 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.490319967 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.490343094 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.492094040 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492114067 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492168903 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.492173910 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492204905 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.492221117 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.492522955 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492537975 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492578983 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492592096 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492605925 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.492614031 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492626905 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.492638111 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.492643118 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.492719889 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.494616985 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.494636059 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.494724989 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.494724989 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.494734049 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.494801044 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.515722036 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.515724897 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.555876970 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.555887938 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.555946112 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.555965900 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.556020975 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.556052923 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.556068897 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.556068897 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.556071043 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.556096077 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.556113958 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.559667110 CET	49753	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.559690952 CET	443	49753	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.562489986 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.608544111 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.610852957 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.610883951 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.610935926 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.610946894 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.610969067 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.610987902 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.611550093 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.611578941 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.611629963 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.611645937 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.611670017 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.611707926 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.612597942 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.612617970 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.612657070 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.612663031 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.612688065 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.612709045 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.612881899 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.612900972 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.612956047 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.612965107 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.613003016 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.613003016 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.614033937 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614053965 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614100933 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.614109039 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614141941 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.614160061 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.614566088 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614584923 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614639044 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.614641905 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614659071 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614680052 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.614710093 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.614716053 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614741087 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.614783049 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.648361921 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.648444891 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.648494959 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.656454086 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:15.656517982 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:15.680363894 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.680391073 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.680408001 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.680425882 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.680460930 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.680460930 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.680480957 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.680500031 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.680510044 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.680531025 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.680540085 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.680579901 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.681689978 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.681709051 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.681736946 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.681751966 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.681768894 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.681797981 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.681817055 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.681823969 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.681858063 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.682430983 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.682584047 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.682631969 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.717778921 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.717868090 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.717916965 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.728624105 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:15.728647947 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:15.729120970 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:15.729397058 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.729422092 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.729465961 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.729476929 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.729516029 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.729537964 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.730674028 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.730690956 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.730737925 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.730741978 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.730767965 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.730789900 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.731647968 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.731667995 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.731719971 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.731724024 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.731745005 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.731765985 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.732661009 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.732680082 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.732722998 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.732727051 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.732770920 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.732789993 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.733232975 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:15.733715057 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.733733892 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.733781099 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.733786106 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.733846903 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.734692097 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.735223055 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.735240936 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.735295057 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.735301018 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.735341072 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.736327887 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.736346960 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.736388922 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.736394882 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.736407042 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.736428976 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.750978947 CET	49750	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.750999928 CET	443	49750	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.752351046 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.755692959 CET	49754	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.755711079 CET	443	49754	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.771539927 CET	49755	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.771567106 CET	443	49755	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.774043083 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.774079084 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.774143934 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.775347948 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:15.775471926 CET	49752	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.775484085 CET	443	49752	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.780853987 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.780864954 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.797429085 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.797514915 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.797589064 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.798630953 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:15.798666000 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:15.812865973 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.812903881 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.812978029 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.813601971 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.813613892 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.816586971 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.816618919 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.816672087 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.816960096 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.816972971 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.821496964 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.821512938 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.821567059 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.822103024 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.822117090 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.844722033 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:15.844752073 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:15.844842911 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:15.845484018 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:15.845499992 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:15.849641085 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.849674940 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.849716902 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.849737883 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.849761963 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.849783897 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.850444078 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.850461960 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.850497961 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.850548029 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.850553989 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.850598097 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.851001978 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.851020098 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.851063967 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.851068020 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.851094961 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.851119041 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.855354071 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.855372906 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.855420113 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.855426073 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.855490923 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.855961084 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.855978966 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.856017113 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.856020927 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.856048107 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.856067896 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.856518030 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.856535912 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.856591940 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.856595993 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.856646061 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.856987000 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857012033 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857045889 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.857052088 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857079029 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.857093096 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.857446909 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857465029 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857506990 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.857511997 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857538939 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.857558966 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.857861042 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857878923 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857928038 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.857932091 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.857990026 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.858366013 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.858383894 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.858423948 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.858428955 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.858454943 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.858480930 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.859325886 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.859344959 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.859395027 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.859400034 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.859436035 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.859447002 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.859461069 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.859505892 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.859508991 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.859533072 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.859555006 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.861464024 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.969140053 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.969161034 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.969208002 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.969263077 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.969268084 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.969309092 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.969686985 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.969701052 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.969753981 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.969758034 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.969804049 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.970186949 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.970200062 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.970242977 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.970252991 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.970257044 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.970309019 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.970330000 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.970372915 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.971211910 CET	49749	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:15.971225023 CET	443	49749	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:15.978090048 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:15.978169918 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:15.978229046 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:15.993084908 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:15.993086100 CET	49757	443	192.168.2.4	184.28.90.27
Oct 30, 2024 04:01:15.993108988 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:15.993123055 CET	443	49757	184.28.90.27	192.168.2.4
Oct 30, 2024 04:01:16.003669024 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.003719091 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.003803968 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.004134893 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.004153967 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.555556059 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.606867075 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.623879910 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.629707098 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.642028093 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.645920992 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.645939112 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.646167040 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.646202087 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.646298885 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.646312952 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.646754980 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.646851063 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.647173882 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.647238970 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.647430897 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.647463083 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.647495985 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.647516966 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.647902966 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.647989035 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.649660110 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.649733067 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.650034904 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.650110006 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.650263071 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.650275946 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.650569916 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.650799036 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.651021957 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.651031017 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.651271105 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.651283026 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.652148008 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.652952909 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.652976990 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.653789043 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.653863907 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.654844999 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.654910088 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.656966925 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.657061100 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.657151937 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.657479048 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.657723904 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.657764912 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.658874989 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.659535885 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.659723997 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.660053015 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.672584057 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.672594070 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.672636032 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.672640085 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.672657967 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.672674894 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.672692060 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.672693968 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.672708035 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.672738075 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.673702955 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.673742056 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.673762083 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.673777103 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.673821926 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.674089909 CET	49751	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:16.674103975 CET	443	49751	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.697112083 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.697371006 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.697385073 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.698564053 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.698631048 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.699357033 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.701065063 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.701144934 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.701314926 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.701431990 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.701483965 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.703114033 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.703119040 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.703165054 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.703174114 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.703337908 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:16.716428041 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.716602087 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:16.716619968 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.717772007 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.718038082 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.718097925 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:16.718375921 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:16.718453884 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.718465090 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:16.751451969 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.751451969 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.751471996 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.759349108 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.767534018 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:16.767550945 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.798060894 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.798150063 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.798208952 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.799029112 CET	49764	443	192.168.2.4	104.16.41.28
Oct 30, 2024 04:01:16.799052954 CET	443	49764	104.16.41.28	192.168.2.4
Oct 30, 2024 04:01:16.799797058 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.814892054 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:16.889724016 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.894196987 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.896481037 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.943528891 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.943620920 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.949322939 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.949558020 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.949723005 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.950339079 CET	49762	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.950356007 CET	443	49762	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.957091093 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.968352079 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.968476057 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.968568087 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:16.969352961 CET	49763	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:16.969374895 CET	443	49763	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:16.997824907 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.997836113 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.997853041 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.997859955 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.997890949 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.997900963 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.997919083 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:16.997944117 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.997961998 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.998342991 CET	49760	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:16.998357058 CET	443	49760	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013135910 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013159990 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013176918 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013214111 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013217926 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013236046 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013252974 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013261080 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013276100 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013292074 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013299942 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013351917 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013581991 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013616085 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013637066 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013659000 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013689995 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013710022 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013720989 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013730049 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013741970 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013757944 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.013761997 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.013916969 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.015073061 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015090942 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015127897 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015146971 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.015156984 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015191078 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.015199900 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.015686989 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015707970 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015754938 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015798092 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.015798092 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.015810966 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015832901 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015846014 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.015875101 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015877962 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.015901089 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.015961885 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.016079903 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.016208887 CET	49761	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.016216993 CET	443	49761	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.108669996 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.108721018 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.108748913 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.108760118 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.108794928 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.108814001 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.133311033 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.133357048 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.133397102 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.133408070 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.133450031 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.135057926 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.135097980 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.135128975 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.135133982 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.135174990 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.135204077 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.135255098 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.135260105 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.135380030 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.135431051 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.216443062 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.216478109 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.216546059 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.216918945 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.216932058 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.218038082 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.218081951 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.218307018 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.218473911 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.218483925 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.218575954 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.218878031 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.218923092 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.218990088 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.219381094 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.219427109 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.219491959 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.219703913 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.219712019 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.219764948 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.220135927 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.220155001 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.220242977 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.220943928 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.220971107 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.221018076 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.222903967 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.222919941 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.223470926 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.223483086 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.223730087 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.223745108 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.224215031 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.224230051 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.224423885 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.224437952 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.225030899 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.225040913 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.225913048 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.225933075 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.226264000 CET	49758	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.226279020 CET	443	49758	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.388484955 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.388524055 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.388746977 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.389552116 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.389566898 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.393093109 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:17.393126965 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:17.393187046 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:17.393930912 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.393939972 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.393991947 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.394649029 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:17.394660950 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:17.396012068 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:17.396023989 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:17.672652960 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.672682047 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.672768116 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.672779083 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.672933102 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:17.672987938 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.864775896 CET	49759	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:17.864803076 CET	443	49759	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.057645082 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.058521986 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.059129000 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.059204102 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.059263945 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.059289932 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.059683084 CET	49780	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.059716940 CET	443	49780	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.059731960 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.059808016 CET	49780	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.059828997 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.059874058 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.059890985 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.060103893 CET	49781	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.060133934 CET	443	49781	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.060427904 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.060472965 CET	49780	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.060483932 CET	443	49780	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.060492039 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.060492039 CET	49781	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.060846090 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.060866117 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.060935020 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.060987949 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.061115980 CET	49781	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.061127901 CET	443	49781	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.061239004 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.061322927 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.061338902 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.061381102 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.061403990 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.063580036 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.066813946 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.066834927 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.067357063 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.067982912 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.068078041 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.068099022 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.068547964 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.068588018 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.068849087 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.069288969 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.069298983 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.069977999 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.069994926 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.070250034 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.070262909 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.070427895 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.070492983 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.070514917 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.070910931 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.071202993 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.071269035 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.071746111 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.071815014 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.072119951 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.072251081 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.072263956 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.072272062 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.072381020 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.072422981 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.075782061 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.076164961 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.076172113 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.076561928 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.076611042 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.077248096 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.077301025 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.077492952 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.078495026 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.078552008 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.078811884 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.078823090 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.078984022 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.078996897 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.080346107 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.080869913 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.080986023 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.080991983 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.081059933 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.107377052 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.108625889 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.108650923 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.115331888 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.119338989 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.119342089 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.137356043 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.138361931 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.138365030 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.155040026 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.170137882 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.170211077 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.170310974 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.170633078 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.170679092 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.185210943 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.185234070 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.226726055 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.226952076 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.226972103 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.228017092 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.228092909 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.228456974 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.228528023 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.228724957 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.228739023 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.251017094 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.251252890 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.251270056 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.252425909 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.252943993 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.253115892 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.253120899 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.268590927 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.268815994 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.268836975 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.270051003 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.270126104 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.272535086 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.272595882 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.272737026 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.272937059 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.273034096 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.273051023 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.279233932 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.295327902 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.302062035 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.302068949 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.304013968 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.308547974 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.325297117 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.325391054 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.325418949 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.325601101 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.325623989 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.325768948 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.325777054 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.326147079 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.331000090 CET	49767	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.331015110 CET	443	49767	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.331309080 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.331336021 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.331454992 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.332314014 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.332328081 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.352536917 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.371367931 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.417737961 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.417756081 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.417771101 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.417787075 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.417805910 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.417948961 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.417999983 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.418183088 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.420099974 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.420110941 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.420126915 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.420150995 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.420157909 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.420165062 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.420182943 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.420208931 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.420212030 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.420233011 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.420283079 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.420325041 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.420502901 CET	49770	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.420536041 CET	443	49770	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.421032906 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.421056986 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.421118021 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.425486088 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.425512075 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.425529957 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.425564051 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.425592899 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.425614119 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.425627947 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.425654888 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.425662041 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.425689936 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.425714970 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.425740957 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.425929070 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.425992012 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.445101023 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.445128918 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.445167065 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.445175886 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.445193052 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.445211887 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.445219994 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.445231915 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.445242882 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.445260048 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.445266008 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.445336103 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.447170973 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.447190046 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.447231054 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.447246075 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.447256088 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.447263002 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.447287083 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.447319984 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.459398985 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.459423065 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.463082075 CET	49771	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.463104963 CET	443	49771	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.463479996 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.463510990 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.463571072 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.478663921 CET	49768	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.478703976 CET	443	49768	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.479399920 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.479415894 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.490197897 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.490272999 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.490282059 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.490350962 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.490374088 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.490426064 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.503290892 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.520040035 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.520184040 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.520236969 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.520255089 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.520349979 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.520406961 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.535578012 CET	49769	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.535595894 CET	443	49769	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.544545889 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.565534115 CET	49779	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.565572977 CET	443	49779	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.599596024 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.599626064 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.599685907 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.600081921 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.600094080 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.612833977 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.612869978 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.612936020 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.613171101 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:18.613192081 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:18.622255087 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.622279882 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.622294903 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.622318983 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.622337103 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.622354984 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.622364044 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.622380972 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.622381926 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.622405052 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.622437000 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.622526884 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.622580051 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.623447895 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.623526096 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.623533964 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.623620033 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.623667955 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.626849890 CET	49778	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.626863003 CET	443	49778	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.666594982 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.666621923 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.666630030 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.666687965 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.666707993 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.712925911 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.781760931 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.781774044 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.781790018 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.781795979 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.781830072 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.781843901 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.781863928 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.781893969 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.781919003 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.786640882 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.786659002 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.786709070 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.786722898 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.786750078 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.786771059 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.814734936 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.814765930 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.814800978 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.814824104 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.814837933 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.814872980 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.814872980 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.816656113 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.816726923 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.816802025 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.822732925 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.822746992 CET	443	49766	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.822757006 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.822799921 CET	49766	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.834893942 CET	49789	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.834918022 CET	443	49789	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.834976912 CET	49789	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.835333109 CET	49789	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.835345984 CET	443	49789	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.847495079 CET	49790	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.847513914 CET	443	49790	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.847564936 CET	49790	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.847803116 CET	49790	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:18.847819090 CET	443	49790	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:18.900007963 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.900039911 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.900048018 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.900067091 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.900089979 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.900111914 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.900125980 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.910592079 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.910779953 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.910794020 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.921077013 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.921118021 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.921144009 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.921152115 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.921194077 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.936942101 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.936955929 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.936990976 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.937005043 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.937032938 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.937048912 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.942228079 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.942276955 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.942286968 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.942337036 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.950354099 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.952733994 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.952794075 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.952800989 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.966345072 CET	443	49780	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.967914104 CET	49780	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.967922926 CET	443	49780	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.969360113 CET	443	49780	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.969439030 CET	49780	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.970165014 CET	49780	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.970242977 CET	443	49780	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.970318079 CET	49780	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.970324039 CET	443	49780	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.974730015 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:18.974766016 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:18.974826097 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:18.974831104 CET	443	49781	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.975222111 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:18.975233078 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:18.975547075 CET	49781	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.975560904 CET	443	49781	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.977014065 CET	443	49781	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.977073908 CET	49781	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.977688074 CET	49781	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.977763891 CET	443	49781	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.978023052 CET	49781	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:18.978029013 CET	443	49781	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:18.998475075 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:18.998507023 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:18.998564005 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:18.998939991 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:18.998953104 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:18.999764919 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.006297112 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.006308079 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.006335974 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.006355047 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.006397963 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.015850067 CET	49780	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.027406931 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.027415037 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.027441025 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.027451992 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.027467012 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.027473927 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.027483940 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.027520895 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.027542114 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.032691956 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.032701015 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.032735109 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.032751083 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.032793045 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.032803059 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.045975924 CET	49781	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.049006939 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049024105 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049069881 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.049088001 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049103022 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.049112082 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049165964 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.049171925 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049185038 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049211979 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049231052 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.049237967 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049268007 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.049280882 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.049290895 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.049331903 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.051395893 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.099811077 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.099824905 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.100189924 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.100944042 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.101011038 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.101202965 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.123651028 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.123661041 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.123696089 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.123729944 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.123744965 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.123785019 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.123802900 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.124878883 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.124964952 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.125010014 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.125041962 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.125052929 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.125077963 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.125096083 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.127851009 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.127868891 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.127919912 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.127928972 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.127964973 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.127990007 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.128509998 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.128528118 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.128568888 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.128576040 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.128607988 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.128632069 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.129268885 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.129323959 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.130182028 CET	49777	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.130198002 CET	443	49777	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.134670973 CET	49793	443	192.168.2.4	142.250.184.194
Oct 30, 2024 04:01:19.134695053 CET	443	49793	142.250.184.194	192.168.2.4
Oct 30, 2024 04:01:19.134751081 CET	49793	443	192.168.2.4	142.250.184.194
Oct 30, 2024 04:01:19.135149002 CET	49793	443	192.168.2.4	142.250.184.194
Oct 30, 2024 04:01:19.135160923 CET	443	49793	142.250.184.194	192.168.2.4
Oct 30, 2024 04:01:19.141303062 CET	49794	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.141335011 CET	443	49794	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.141387939 CET	49794	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.142167091 CET	49794	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.142175913 CET	443	49794	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.142652988 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.142724991 CET	443	49765	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.142785072 CET	49765	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.143331051 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.151616096 CET	49795	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.151648998 CET	443	49795	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.151715040 CET	49795	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.152056932 CET	49795	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.152075052 CET	443	49795	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.173757076 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.174453020 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.174482107 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.175724030 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.177891970 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.178083897 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.178349018 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.188170910 CET	49796	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.188198090 CET	443	49796	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.188252926 CET	49796	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.188664913 CET	49796	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.188680887 CET	443	49796	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.193439960 CET	49798	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.193448067 CET	443	49798	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.193506002 CET	49798	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.193790913 CET	49798	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.193806887 CET	443	49798	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.219381094 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.239780903 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.239804029 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.239916086 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.239929914 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.240056038 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.261632919 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.261652946 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.261717081 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.261729002 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.261766911 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.261797905 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.275068045 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.275149107 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.275151014 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.275182009 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.275223970 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.275248051 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.283523083 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.283576012 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.283596039 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.283602953 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.283646107 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.317909956 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.318229914 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.318239927 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.318624973 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.318697929 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.319653988 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.319708109 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.319905996 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.319972992 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.320292950 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.320313931 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.326256037 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.329539061 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.330007076 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.330034971 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.330431938 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.331126928 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.331196070 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.331228971 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.350992918 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.351011992 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.351062059 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.351068020 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.351106882 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.352112055 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.352133036 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.352194071 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.352206945 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.352241993 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.352252007 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.353938103 CET	49782	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.353951931 CET	443	49782	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.368572950 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.368623018 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.368649960 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.368658066 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.368695974 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.368699074 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.368748903 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.369250059 CET	49773	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.369265079 CET	443	49773	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.371339083 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.373514891 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.421013117 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.449242115 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.449318886 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.451778889 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.451791048 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.452156067 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.457746983 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.457778931 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.458966017 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.459032059 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.459388971 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.459461927 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.459552050 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.461447954 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.461518049 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.462940931 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.463114977 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.463157892 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.466916084 CET	49799	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.466974974 CET	443	49799	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.467097044 CET	49799	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.467340946 CET	49799	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.467355013 CET	443	49799	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.472767115 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.472861052 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.507330894 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.507337093 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.536910057 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.536943913 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.536962032 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.536986113 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.537038088 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.537043095 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.537086010 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.537092924 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.537111044 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.537142038 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.537153959 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.537736893 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.537817955 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.537827969 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.537915945 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.537930012 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.538002014 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.538522959 CET	49783	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.538538933 CET	443	49783	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.547830105 CET	49800	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.547883987 CET	443	49800	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.547949076 CET	49800	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.548413038 CET	49800	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.548427105 CET	443	49800	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.563580036 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.575407982 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.575418949 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.581373930 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.598474979 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.598685980 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.598694086 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.599900007 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.599966049 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.601073980 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.601136923 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.601414919 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.601421118 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.603205919 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.603442907 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:19.603461981 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.603818893 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.603880882 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:19.604495049 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.604552031 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:19.605748892 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:19.605813026 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.605881929 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:19.623037100 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.643682957 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.647351027 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.679368019 CET	443	49789	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.679761887 CET	49789	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.679775953 CET	443	49789	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.680109024 CET	443	49789	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.680553913 CET	49789	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.680619955 CET	443	49789	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.680675983 CET	49789	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.681516886 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.681541920 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.681580067 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.681586027 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.681608915 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.681648970 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.681651115 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.681672096 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.681689024 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.681700945 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.681715965 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.681729078 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.683243990 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.683264017 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.683284044 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.683334112 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.683341980 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.683361053 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.683379889 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.683392048 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.683406115 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.683408022 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.683427095 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.685152054 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.685496092 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:19.685503960 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.703903913 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.703970909 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.704035044 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.704045057 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.704055071 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.704103947 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.704155922 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.704279900 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.704332113 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.704344988 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.704422951 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.704956055 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.705249071 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.705260992 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.705280066 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.705288887 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.705310106 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.705317974 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.705343008 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.705363035 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.705363035 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.705391884 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.706646919 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.706664085 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.706738949 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.706748962 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.706789017 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.708749056 CET	443	49790	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.709222078 CET	49790	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.709230900 CET	443	49790	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.710318089 CET	443	49790	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.710354090 CET	49787	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.710369110 CET	443	49787	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.711646080 CET	49790	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.711757898 CET	49790	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.711816072 CET	443	49790	52.222.214.76	192.168.2.4
Oct 30, 2024 04:01:19.712347984 CET	49788	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.712363005 CET	443	49788	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.723368883 CET	443	49789	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.750632048 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.752540112 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:19.776930094 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.777080059 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.777132988 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.777139902 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.777286053 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.777395964 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.777452946 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.777458906 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.777503014 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.777508020 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.777662992 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.779055119 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.779061079 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.782059908 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.782124996 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.782138109 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.794478893 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.794512987 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.794554949 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.794560909 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.794574976 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.794609070 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.794609070 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.794627905 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.800409079 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.800430059 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.800447941 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.800477982 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.800487041 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.800507069 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.800518990 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.800525904 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.800534964 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.800555944 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.800558090 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.800585032 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.802016020 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.802037001 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.802073956 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.802093029 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.802103043 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.802118063 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.802149057 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.802170992 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.802179098 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.802191973 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.804821014 CET	49792	443	192.168.2.4	216.239.34.181
Oct 30, 2024 04:01:19.804836988 CET	443	49792	216.239.34.181	192.168.2.4
Oct 30, 2024 04:01:19.808831930 CET	49801	443	192.168.2.4	66.102.1.157
Oct 30, 2024 04:01:19.808865070 CET	443	49801	66.102.1.157	192.168.2.4
Oct 30, 2024 04:01:19.808975935 CET	49801	443	192.168.2.4	66.102.1.157
Oct 30, 2024 04:01:19.811075926 CET	49801	443	192.168.2.4	66.102.1.157
Oct 30, 2024 04:01:19.811091900 CET	443	49801	66.102.1.157	192.168.2.4
Oct 30, 2024 04:01:19.812813997 CET	49802	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.812839985 CET	443	49802	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.812962055 CET	49802	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.813638926 CET	49802	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.813651085 CET	443	49802	52.222.214.74	192.168.2.4
Oct 30, 2024 04:01:19.824110031 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.824140072 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.824234962 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.824249029 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.824294090 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.825037956 CET	49803	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.825073004 CET	443	49803	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.825193882 CET	49803	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.825529099 CET	49803	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.825544119 CET	443	49803	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.830750942 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.830770016 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.830816031 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.830823898 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.830871105 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.830890894 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.831814051 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.831834078 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.831882954 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.831890106 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.831921101 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.831934929 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.873049021 CET	49789	443	192.168.2.4	52.222.214.74
Oct 30, 2024 04:01:19.873130083 CET	49790	443	192.168.2.4	52.222.214.76
Oct 30, 2024 04:01:19.873130083 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.895543098 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.895601988 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.895607948 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.895764112 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.895818949 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.895824909 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.895972013 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.896073103 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.896114111 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.896121025 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.896164894 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.896214008 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.896609068 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.896657944 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.896661997 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.896786928 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.896879911 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.896884918 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.897476912 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.897530079 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.897533894 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.897658110 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.897701025 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.897706032 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.898255110 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.898305893 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.898310900 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.898442984 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.898494005 CET	49791	443	192.168.2.4	104.22.1.204
Oct 30, 2024 04:01:19.898499012 CET	443	49791	104.22.1.204	192.168.2.4
Oct 30, 2024 04:01:19.911983967 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.912020922 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.912064075 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.912070036 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.912084103 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.912100077 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.912108898 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.912127018 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.912151098 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.912893057 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.912921906 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.912961960 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.912965059 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.912993908 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.913002968 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.913017988 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.913024902 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.913070917 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.917875051 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.917926073 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.917953014 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.917960882 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.917994022 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.918008089 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.918407917 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.918463945 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.918483973 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.918492079 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.918523073 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.918530941 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.919962883 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.920006990 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.920058966 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.920066118 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.920120955 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.920906067 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.920950890 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.920977116 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.920984030 CET	443	49785	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.921011925 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.921031952 CET	49785	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.947618961 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.947659969 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.947702885 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.947737932 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.947753906 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.947885990 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.948313951 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.948333979 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.948378086 CET	49784	443	192.168.2.4	54.72.117.121
Oct 30, 2024 04:01:19.948386908 CET	443	49784	54.72.117.121	192.168.2.4
Oct 30, 2024 04:01:19.948422909 CET	49784	443	192.168.2.4	54.72.117.121

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 04:01:10.516447067 CET	192.168.2.4	1.1.1.1	0x22be	Standard query (0)	www.ovivowater.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:10.517018080 CET	192.168.2.4	1.1.1.1	0x7404	Standard query (0)	www.ovivowater.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:13.600435019 CET	192.168.2.4	1.1.1.1	0xf8bc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:13.600781918 CET	192.168.2.4	1.1.1.1	0x9760	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:14.282104969 CET	192.168.2.4	1.1.1.1	0x8adb	Standard query (0)	ovivo.getbynder.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:14.282433987 CET	192.168.2.4	1.1.1.1	0xf6d4	Standard query (0)	ovivo.getbynder.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:15.581206083 CET	192.168.2.4	1.1.1.1	0xa67f	Standard query (0)	www.ovivowater.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:15.581906080 CET	192.168.2.4	1.1.1.1	0xd0a	Standard query (0)	www.ovivowater.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:15.824672937 CET	192.168.2.4	1.1.1.1	0xb40a	Standard query (0)	ovivo.getbynder.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:15.825129986 CET	192.168.2.4	1.1.1.1	0xd883	Standard query (0)	ovivo.getbynder.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:15.994597912 CET	192.168.2.4	1.1.1.1	0x85c5	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:15.995206118 CET	192.168.2.4	1.1.1.1	0x3387	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Oct 30, 2024 04:01:18.906021118 CET	192.168.2.4	1.1.1.1	0x8d3	Standard query (0)	acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.906253099 CET	192.168.2.4	1.1.1.1	0xe81	Standard query (0)	acsbapp.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:18.989756107 CET	192.168.2.4	1.1.1.1	0x5fd2	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.990030050 CET	192.168.2.4	1.1.1.1	0x7eac	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:19.125715971 CET	192.168.2.4	1.1.1.1	0x6c41	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:19.126015902 CET	192.168.2.4	1.1.1.1	0x9f26	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 04:01:19.713777065 CET	192.168.2.4	1.1.1.1	0x9af5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:19.713934898 CET	192.168.2.4	1.1.1.1	0x1a8d	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 04:01:20.923198938 CET	192.168.2.4	1.1.1.1	0x97fa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:20.923352957 CET	192.168.2.4	1.1.1.1	0x67f4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:21.002118111 CET	192.168.2.4	1.1.1.1	0x9121	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.002279997 CET	192.168.2.4	1.1.1.1	0xd7c2	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:21.169183016 CET	192.168.2.4	1.1.1.1	0x6035	Standard query (0)	cdn.calltrk.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.170813084 CET	192.168.2.4	1.1.1.1	0xec9b	Standard query (0)	cdn.calltrk.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:21.182236910 CET	192.168.2.4	1.1.1.1	0xcb54	Standard query (0)	accesswidget-log-receiver.acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.182499886 CET	192.168.2.4	1.1.1.1	0xac18	Standard query (0)	accesswidget-log-receiver.acsbapp.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:21.268083096 CET	192.168.2.4	1.1.1.1	0x34b8	Standard query (0)	cdn.acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.268261909 CET	192.168.2.4	1.1.1.1	0x410c	Standard query (0)	cdn.acsbapp.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:22.088696003 CET	192.168.2.4	1.1.1.1	0x7b41	Standard query (0)	acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.089217901 CET	192.168.2.4	1.1.1.1	0xed3e	Standard query (0)	acsbapp.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:22.304039001 CET	192.168.2.4	1.1.1.1	0xb943	Standard query (0)	cdn.loopanalytics.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.304521084 CET	192.168.2.4	1.1.1.1	0x3e4d	Standard query (0)	cdn.loopanalytics.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:22.572566986 CET	192.168.2.4	1.1.1.1	0xd98e	Standard query (0)	accesswidget-log-receiver.acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.573050022 CET	192.168.2.4	1.1.1.1	0xd897	Standard query (0)	accesswidget-log-receiver.acsbapp.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:22.586823940 CET	192.168.2.4	1.1.1.1	0xb1c0	Standard query (0)	cdn.acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.587335110 CET	192.168.2.4	1.1.1.1	0x7d12	Standard query (0)	cdn.acsbapp.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:23.748183966 CET	192.168.2.4	1.1.1.1	0xfbbd	Standard query (0)	js.calltrk.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.748447895 CET	192.168.2.4	1.1.1.1	0x273d	Standard query (0)	js.calltrk.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:23.904778004 CET	192.168.2.4	1.1.1.1	0x6082	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.905770063 CET	192.168.2.4	1.1.1.1	0x1587	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:24.415133953 CET	192.168.2.4	1.1.1.1	0xff2d	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.416024923 CET	192.168.2.4	1.1.1.1	0x6ec6	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:24.686511040 CET	192.168.2.4	1.1.1.1	0x8d71	Standard query (0)	www.loopanalytics.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.687171936 CET	192.168.2.4	1.1.1.1	0x531d	Standard query (0)	www.loopanalytics.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:27.342811108 CET	192.168.2.4	1.1.1.1	0x3919	Standard query (0)	cdn.calltrk.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.344218969 CET	192.168.2.4	1.1.1.1	0x5d7e	Standard query (0)	cdn.calltrk.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:27.363044024 CET	192.168.2.4	1.1.1.1	0x6370	Standard query (0)	cdn.loopanalytics.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.363454103 CET	192.168.2.4	1.1.1.1	0xc646	Standard query (0)	cdn.loopanalytics.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:27.691634893 CET	192.168.2.4	1.1.1.1	0x18f2	Standard query (0)	js.calltrk.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.692038059 CET	192.168.2.4	1.1.1.1	0x6176	Standard query (0)	js.calltrk.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:27.693969011 CET	192.168.2.4	1.1.1.1	0x4d9c	Standard query (0)	www.loopanalytics.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.694226027 CET	192.168.2.4	1.1.1.1	0xd9de	Standard query (0)	www.loopanalytics.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:27.696485043 CET	192.168.2.4	1.1.1.1	0xc1e8	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.696652889 CET	192.168.2.4	1.1.1.1	0xb8a3	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:42.048686028 CET	192.168.2.4	1.1.1.1	0xc61f	Standard query (0)	careers.ovivowater.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:42.048824072 CET	192.168.2.4	1.1.1.1	0xd84b	Standard query (0)	careers.ovivowater.com	65	IN (0x0001)	false
Oct 30, 2024 04:01:46.635396957 CET	192.168.2.4	1.1.1.1	0x284f	Standard query (0)	careers.ovivowater.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:46.635683060 CET	192.168.2.4	1.1.1.1	0xab13	Standard query (0)	careers.ovivowater.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 04:01:10.549109936 CET	1.1.1.1	192.168.2.4	0x22be	No error (0)	www.ovivowater.com		54.72.117.121	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:13.608282089 CET	1.1.1.1	192.168.2.4	0xf8bc	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:13.608299971 CET	1.1.1.1	192.168.2.4	0x9760	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 04:01:14.300132036 CET	1.1.1.1	192.168.2.4	0x8adb	No error (0)	ovivo.getbynder.com		52.222.214.74	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:14.300132036 CET	1.1.1.1	192.168.2.4	0x8adb	No error (0)	ovivo.getbynder.com		52.222.214.7	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:14.300132036 CET	1.1.1.1	192.168.2.4	0x8adb	No error (0)	ovivo.getbynder.com		52.222.214.55	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:14.300132036 CET	1.1.1.1	192.168.2.4	0x8adb	No error (0)	ovivo.getbynder.com		52.222.214.76	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:15.767577887 CET	1.1.1.1	192.168.2.4	0xa67f	No error (0)	www.ovivowater.com		54.72.117.121	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:15.843174934 CET	1.1.1.1	192.168.2.4	0xb40a	No error (0)	ovivo.getbynder.com		52.222.214.76	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:15.843174934 CET	1.1.1.1	192.168.2.4	0xb40a	No error (0)	ovivo.getbynder.com		52.222.214.7	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:15.843174934 CET	1.1.1.1	192.168.2.4	0xb40a	No error (0)	ovivo.getbynder.com		52.222.214.55	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:15.843174934 CET	1.1.1.1	192.168.2.4	0xb40a	No error (0)	ovivo.getbynder.com		52.222.214.74	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:16.002382994 CET	1.1.1.1	192.168.2.4	0x85c5	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:16.002382994 CET	1.1.1.1	192.168.2.4	0x85c5	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:16.002866983 CET	1.1.1.1	192.168.2.4	0x3387	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Oct 30, 2024 04:01:18.973871946 CET	1.1.1.1	192.168.2.4	0x8d3	No error (0)	acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.973871946 CET	1.1.1.1	192.168.2.4	0x8d3	No error (0)	acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.973871946 CET	1.1.1.1	192.168.2.4	0x8d3	No error (0)	acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.973890066 CET	1.1.1.1	192.168.2.4	0xe81	No error (0)	acsbapp.com			65	IN (0x0001)	false
Oct 30, 2024 04:01:18.997173071 CET	1.1.1.1	192.168.2.4	0x5fd2	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:18.997173071 CET	1.1.1.1	192.168.2.4	0x5fd2	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.997173071 CET	1.1.1.1	192.168.2.4	0x5fd2	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.997173071 CET	1.1.1.1	192.168.2.4	0x5fd2	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.997173071 CET	1.1.1.1	192.168.2.4	0x5fd2	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:18.997273922 CET	1.1.1.1	192.168.2.4	0x7eac	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:19.132808924 CET	1.1.1.1	192.168.2.4	0x6c41	No error (0)	td.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:19.721066952 CET	1.1.1.1	192.168.2.4	0x9af5	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:19.721066952 CET	1.1.1.1	192.168.2.4	0x9af5	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:19.721066952 CET	1.1.1.1	192.168.2.4	0x9af5	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:19.721066952 CET	1.1.1.1	192.168.2.4	0x9af5	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:20.930931091 CET	1.1.1.1	192.168.2.4	0x97fa	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:20.930958986 CET	1.1.1.1	192.168.2.4	0x67f4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 04:01:21.000081062 CET	1.1.1.1	192.168.2.4	0xf75b	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:21.000081062 CET	1.1.1.1	192.168.2.4	0xf75b	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.000081062 CET	1.1.1.1	192.168.2.4	0xf75b	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.009157896 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:21.009157896 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.009157896 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.009157896 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.009157896 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.010329008 CET	1.1.1.1	192.168.2.4	0xd7c2	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:21.191303968 CET	1.1.1.1	192.168.2.4	0xcb54	No error (0)	accesswidget-log-receiver.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.191303968 CET	1.1.1.1	192.168.2.4	0xcb54	No error (0)	accesswidget-log-receiver.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.191303968 CET	1.1.1.1	192.168.2.4	0xcb54	No error (0)	accesswidget-log-receiver.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.191996098 CET	1.1.1.1	192.168.2.4	0xac18	No error (0)	accesswidget-log-receiver.acsbapp.com			65	IN (0x0001)	false
Oct 30, 2024 04:01:21.275924921 CET	1.1.1.1	192.168.2.4	0x410c	No error (0)	cdn.acsbapp.com			65	IN (0x0001)	false
Oct 30, 2024 04:01:21.275948048 CET	1.1.1.1	192.168.2.4	0x34b8	No error (0)	cdn.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.275948048 CET	1.1.1.1	192.168.2.4	0x34b8	No error (0)	cdn.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.275948048 CET	1.1.1.1	192.168.2.4	0x34b8	No error (0)	cdn.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.385631084 CET	1.1.1.1	192.168.2.4	0x6035	No error (0)	cdn.calltrk.com		18.245.46.37	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.385631084 CET	1.1.1.1	192.168.2.4	0x6035	No error (0)	cdn.calltrk.com		18.245.46.63	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.385631084 CET	1.1.1.1	192.168.2.4	0x6035	No error (0)	cdn.calltrk.com		18.245.46.104	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:21.385631084 CET	1.1.1.1	192.168.2.4	0x6035	No error (0)	cdn.calltrk.com		18.245.46.112	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.097234011 CET	1.1.1.1	192.168.2.4	0x7b41	No error (0)	acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.097234011 CET	1.1.1.1	192.168.2.4	0x7b41	No error (0)	acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.097234011 CET	1.1.1.1	192.168.2.4	0x7b41	No error (0)	acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.097249031 CET	1.1.1.1	192.168.2.4	0xed3e	No error (0)	acsbapp.com			65	IN (0x0001)	false
Oct 30, 2024 04:01:22.322098017 CET	1.1.1.1	192.168.2.4	0xb943	No error (0)	cdn.loopanalytics.com		18.245.60.71	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.322098017 CET	1.1.1.1	192.168.2.4	0xb943	No error (0)	cdn.loopanalytics.com		18.245.60.8	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.322098017 CET	1.1.1.1	192.168.2.4	0xb943	No error (0)	cdn.loopanalytics.com		18.245.60.19	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.322098017 CET	1.1.1.1	192.168.2.4	0xb943	No error (0)	cdn.loopanalytics.com		18.245.60.33	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.581556082 CET	1.1.1.1	192.168.2.4	0xd98e	No error (0)	accesswidget-log-receiver.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.581556082 CET	1.1.1.1	192.168.2.4	0xd98e	No error (0)	accesswidget-log-receiver.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.581556082 CET	1.1.1.1	192.168.2.4	0xd98e	No error (0)	accesswidget-log-receiver.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.581866026 CET	1.1.1.1	192.168.2.4	0xd897	No error (0)	accesswidget-log-receiver.acsbapp.com			65	IN (0x0001)	false
Oct 30, 2024 04:01:22.594763994 CET	1.1.1.1	192.168.2.4	0xb1c0	No error (0)	cdn.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.594763994 CET	1.1.1.1	192.168.2.4	0xb1c0	No error (0)	cdn.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.594763994 CET	1.1.1.1	192.168.2.4	0xb1c0	No error (0)	cdn.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:22.594985008 CET	1.1.1.1	192.168.2.4	0x7d12	No error (0)	cdn.acsbapp.com			65	IN (0x0001)	false
Oct 30, 2024 04:01:23.008017063 CET	1.1.1.1	192.168.2.4	0x7a7e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.008017063 CET	1.1.1.1	192.168.2.4	0x7a7e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.860682011 CET	1.1.1.1	192.168.2.4	0x9914	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:23.860682011 CET	1.1.1.1	192.168.2.4	0x9914	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.860682011 CET	1.1.1.1	192.168.2.4	0x9914	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.912954092 CET	1.1.1.1	192.168.2.4	0x6082	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:23.912954092 CET	1.1.1.1	192.168.2.4	0x6082	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.912954092 CET	1.1.1.1	192.168.2.4	0x6082	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.912954092 CET	1.1.1.1	192.168.2.4	0x6082	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.912954092 CET	1.1.1.1	192.168.2.4	0x6082	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:23.913227081 CET	1.1.1.1	192.168.2.4	0x1587	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:24.161128998 CET	1.1.1.1	192.168.2.4	0xfbbd	No error (0)	js.calltrk.com		18.245.46.63	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.161128998 CET	1.1.1.1	192.168.2.4	0xfbbd	No error (0)	js.calltrk.com		18.245.46.112	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.161128998 CET	1.1.1.1	192.168.2.4	0xfbbd	No error (0)	js.calltrk.com		18.245.46.37	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.161128998 CET	1.1.1.1	192.168.2.4	0xfbbd	No error (0)	js.calltrk.com		18.245.46.104	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.422437906 CET	1.1.1.1	192.168.2.4	0xff2d	No error (0)	script.hotjar.com		52.222.236.74	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.422437906 CET	1.1.1.1	192.168.2.4	0xff2d	No error (0)	script.hotjar.com		52.222.236.43	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.422437906 CET	1.1.1.1	192.168.2.4	0xff2d	No error (0)	script.hotjar.com		52.222.236.63	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.422437906 CET	1.1.1.1	192.168.2.4	0xff2d	No error (0)	script.hotjar.com		52.222.236.122	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.704946041 CET	1.1.1.1	192.168.2.4	0x8d71	No error (0)	www.loopanalytics.com		18.66.147.58	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.704946041 CET	1.1.1.1	192.168.2.4	0x8d71	No error (0)	www.loopanalytics.com		18.66.147.34	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.704946041 CET	1.1.1.1	192.168.2.4	0x8d71	No error (0)	www.loopanalytics.com		18.66.147.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:24.704946041 CET	1.1.1.1	192.168.2.4	0x8d71	No error (0)	www.loopanalytics.com		18.66.147.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:26.073738098 CET	1.1.1.1	192.168.2.4	0xf27a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:26.073738098 CET	1.1.1.1	192.168.2.4	0xf27a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.383392096 CET	1.1.1.1	192.168.2.4	0x6370	No error (0)	cdn.loopanalytics.com		18.245.60.33	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.383392096 CET	1.1.1.1	192.168.2.4	0x6370	No error (0)	cdn.loopanalytics.com		18.245.60.71	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.383392096 CET	1.1.1.1	192.168.2.4	0x6370	No error (0)	cdn.loopanalytics.com		18.245.60.19	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.383392096 CET	1.1.1.1	192.168.2.4	0x6370	No error (0)	cdn.loopanalytics.com		18.245.60.8	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.557256937 CET	1.1.1.1	192.168.2.4	0x3919	No error (0)	cdn.calltrk.com		18.245.46.63	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.557256937 CET	1.1.1.1	192.168.2.4	0x3919	No error (0)	cdn.calltrk.com		18.245.46.37	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.557256937 CET	1.1.1.1	192.168.2.4	0x3919	No error (0)	cdn.calltrk.com		18.245.46.104	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.557256937 CET	1.1.1.1	192.168.2.4	0x3919	No error (0)	cdn.calltrk.com		18.245.46.112	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.701399088 CET	1.1.1.1	192.168.2.4	0x4d9c	No error (0)	www.loopanalytics.com		18.66.147.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.701399088 CET	1.1.1.1	192.168.2.4	0x4d9c	No error (0)	www.loopanalytics.com		18.66.147.34	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.701399088 CET	1.1.1.1	192.168.2.4	0x4d9c	No error (0)	www.loopanalytics.com		18.66.147.58	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.701399088 CET	1.1.1.1	192.168.2.4	0x4d9c	No error (0)	www.loopanalytics.com		18.66.147.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.703607082 CET	1.1.1.1	192.168.2.4	0xc1e8	No error (0)	script.hotjar.com		52.222.236.43	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.703607082 CET	1.1.1.1	192.168.2.4	0xc1e8	No error (0)	script.hotjar.com		52.222.236.74	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.703607082 CET	1.1.1.1	192.168.2.4	0xc1e8	No error (0)	script.hotjar.com		52.222.236.63	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:27.703607082 CET	1.1.1.1	192.168.2.4	0xc1e8	No error (0)	script.hotjar.com		52.222.236.122	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:28.104048014 CET	1.1.1.1	192.168.2.4	0x18f2	No error (0)	js.calltrk.com		18.245.46.63	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:28.104048014 CET	1.1.1.1	192.168.2.4	0x18f2	No error (0)	js.calltrk.com		18.245.46.112	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:28.104048014 CET	1.1.1.1	192.168.2.4	0x18f2	No error (0)	js.calltrk.com		18.245.46.104	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:28.104048014 CET	1.1.1.1	192.168.2.4	0x18f2	No error (0)	js.calltrk.com		18.245.46.37	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:38.603173018 CET	1.1.1.1	192.168.2.4	0x9672	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:38.603173018 CET	1.1.1.1	192.168.2.4	0x9672	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:42.258274078 CET	1.1.1.1	192.168.2.4	0xc61f	No error (0)	careers.ovivowater.com		54.72.117.121	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:46.784667969 CET	1.1.1.1	192.168.2.4	0x284f	No error (0)	careers.ovivowater.com		54.72.117.121	A (IP address)	IN (0x0001)	false
Oct 30, 2024 04:01:56.931555033 CET	1.1.1.1	192.168.2.4	0x4613	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 04:01:56.931555033 CET	1.1.1.1	192.168.2.4	0x4613	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:11 UTC	661	OUT	GET / HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:11 UTC	2521	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 30 Oct 2024 03:01:11 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: Content-Type, Authorization Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; Cross-Origin-Embedder-Policy: unsafe-none; report-to='default' Cross-Origin-Embedder-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Opener-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=, usb=(), xr-spatial-tracking=(), gamepad=(), serial=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000 X-Content-Security-Policy: default-src 'self'; img-src ; media-src * data:; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Expires: Wed, 30 Oct 2024 04:01:11 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: https://www.ovivowater.com/en/ Access-Control-Allow-Origin: * Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:11 UTC	664	OUT	GET /en/ HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:12 UTC	2647	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:11 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: Content-Type, Authorization Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; Cross-Origin-Embedder-Policy: unsafe-none; report-to='default' Cross-Origin-Embedder-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Opener-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=, usb=(), xr-spatial-tracking=(), gamepad=(), serial=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000 X-Content-Security-Policy: default-src 'self'; img-src ; media-src * data:; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Link: <https://www.ovivowater.com/en/wp-json/>; rel="https://api.w.org/" Link: <https://www.ovivowater.com/en/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json" Link: <https://www.ovivowater.com/en/>; rel=shortlink Vary: Accept-Encoding Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-30 03:01:12 UTC	7	IN	Data Raw: 32 36 38 61 39 0d 0a Data Ascii: 268a9
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c Data Ascii: <!doctype html><html lang="en-US"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0, user-scalabl
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 76 69 64 22 2c 22 5f 75 65 74 73 69 64 22 2c 22 5f 5f 63 66 5f 62 6d 22 2c 22 5f 68 6a 54 4c 44 54 65 73 74 22 2c 22 5f 68 6a 49 6e 63 6c 75 64 65 64 49 6e 50 61 67 65 76 69 65 77 53 61 6d 70 6c 65 22 2c 22 5f 68 6a 41 62 73 6f 6c 75 74 65 53 65 73 73 69 6f 6e 49 6e 50 72 6f 67 72 65 73 73 22 2c 22 5f 68 6a 49 6e 63 6c 75 64 65 64 49 6e 53 65 73 73 69 6f 6e 53 61 6d 70 6c 65 22 2c 22 5f 68 6a 46 69 72 73 74 53 65 65 6e 22 2c 22 5f 67 61 5f 33 4e 33 46 31 54 4a 4e 54 37 22 2c 22 63 61 6c 6c 74 72 6b 5f 73 65 73 73 69 6f 6e 5f 69 64 22 2c 22 5f 67 69 64 22 2c 22 5f 67 61 22 2c 22 5f 74 72 61 63 6b 61 74 72 6f 6e 49 64 22 2c 22 5f 67 63 6c 5f 61 75 22 2c 22 4d 55 49 44 22 2c 22 5f 47 52 45 43 41 50 54 43 48 41 22 2c 22 63 6f 6f 6b 69 65 6c 61 77 69 6e 66 6f Data Ascii: vid","_uetsid","__cf_bm","_hjTLDTest","_hjIncludedInPageviewSample","_hjAbsoluteSessionInProgress","_hjIncludedInSessionSample","_hjFirstSeen","_ga_3N3F1TJNT7","calltrk_session_id","_gid","_ga","_trackatronId","_gcl_au","MUID","_GRECAPTCHA","cookielawinfo
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 20 23 35 31 30 63 37 36 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 30 2e 35 73 20 65 61 73 65 3b 0a 2f 2a 20 09 68 65 69 67 68 74 3a 34 70 78 3b 20 2a 2f 0a 7d 0a 2e 62 6c 6f 63 6b 2d 69 63 6f 6e 73 5f 5f 77 72 61 70 70 65 72 20 2e 73 6c 69 63 6b 2d 64 6f 74 73 20 6c 69 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 35 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2e 62 6c 6f 63 6b 2d 69 63 6f 6e 73 5f 5f 77 72 61 70 70 65 72 20 75 6c 2e 73 6c 69 63 6b 2d 64 6f 74 73 7b 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 7d 0a 23 70 69 6c 6c Data Ascii: #510c76;transition:0.5s ease;/* height:4px; */}.block-icons__wrapper .slick-dots li { display: flex; align-items: center; margin: 0 5px; padding: 0;}.block-icons__wrapper ul.slick-dots{display:flex !important;margin:0;}#pill
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 6d 73 74 69 6c 65 2d 31 34 34 78 31 34 34 2e 70 6e 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 73 71 75 61 72 65 37 30 78 37 30 6c 6f 67 6f 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 76 69 76 6f 77 61 74 65 72 2e 63 6f 6d 2f 61 70 70 2f 74 68 65 6d 65 73 2f 6f 76 69 76 6f 2f 64 69 73 74 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 6d 73 74 69 6c 65 2d 37 30 78 37 30 2e 70 6e 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 73 71 75 61 72 65 31 35 30 78 31 35 30 6c 6f 67 6f 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 76 69 76 6f 77 61 74 65 72 2e Data Ascii: /images/favicon/mstile-144x144.png" /><meta name="msapplication-square70x70logo" content="https://www.ovivowater.com/app/themes/ovivo/dist/images/favicon/mstile-70x70.png" /><meta name="msapplication-square150x150logo" content="https://www.ovivowater.
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 3c 61 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 76 69 76 6f 77 61 74 65 72 2e 63 6f 6d 2f 65 6e 2f 73 65 72 76 69 63 65 73 2f 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 3e 3c 73 70 61 6e 20 69 74 65 6d 70 72 6f 70 3d 22 6e 61 6d 65 22 3e 53 65 72 76 69 63 65 73 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 09 3c 75 6c 20 3e 0a 09 09 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 37 39 34 20 6e 61 76 2d 69 74 65 6d 22 3e 3c 61 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 Data Ascii: <a itemprop="url" href="https://www.ovivowater.com/en/services/" class="dropdown-item"><span itemprop="name">Services</span></a><ul ><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-794 nav-item"><a itemprop="url" href="
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 76 69 76 6f 77 61 74 65 72 2e 63 6f 6d 2f 65 6e 2f 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2f 66 69 6c 74 72 61 74 69 6f 6e 2f 22 3e 3c 73 70 61 6e 3e 46 69 6c 74 72 61 74 69 6f 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 76 69 76 6f 77 61 74 65 72 2e 63 6f 6d 2f 65 6e 2f 74 65 63 68 6e 6f Data Ascii: em-type-post_type menu-item-object-page"><a href="https://www.ovivowater.com/en/technologies/filtration/"><span>Filtration</span></a></li><li class="menu-item menu-item-type-post_type menu-item-object-page"><a href="https://www.ovivowater.com/en/techno
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 61 2d 66 6f 6c 64 65 72 2d 69 6e 6e 65 72 3d 22 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 2d 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 57 65 20 6c 65 76 65 72 61 67 65 20 6f 75 72 20 65 78 70 65 72 74 69 73 65 20 61 6e 64 20 70 72 6f 64 75 63 74 20 69 6e 6e 6f 76 61 74 69 6f 6e 20 74 6f 20 64 65 6c 69 76 65 72 20 74 68 65 20 62 65 73 74 20 77 61 74 65 72 20 74 72 65 61 74 6d 65 6e 74 20 73 6f 6c 75 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 2e 20 41 73 Data Ascii: a-folder-inner=""> <div class="description-box"> <p>We leverage our expertise and product innovation to deliver the best water treatment solutions in the world. As
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4a 69 6e 67 20 47 61 6f 2c 20 73 68 61 72 65 73 20 68 65 72 20 31 37 2d 79 65 61 72 20 6a 6f 75 72 6e 65 79 20 69 6e 20 77 61 74 65 72 20 74 72 65 61 74 6d 65 6e 74 2c 20 68 69 67 68 6c 69 67 68 74 69 6e 67 20 74 68 65 20 63 72 69 74 69 63 61 6c 20 69 6d 70 6f 72 74 61 6e 63 65 20 6f 66 20 77 61 74 65 72 20 69 6e 20 64 61 69 6c 79 20 6c 69 66 65 20 61 6e 64 20 69 6e 64 75 73 74 72 79 2c 20 61 6e 64 20 68 65 72 20 72 6f 6c 65 20 69 6e 20 61 64 76 61 6e 63 69 6e 67 20 69 6e 6e 6f 76 61 74 69 76 65 20 73 6f 6c 75 74 69 6f 6e 73 20 66 6f 72 20 61 20 73 75 73 74 61 69 6e 61 62 6c 65 26 68 65 6c 6c 69 70 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: on"> Jing Gao, shares her 17-year journey in water treatment, highlighting the critical importance of water in daily life and industry, and her role in advancing innovative solutions for a sustainable…
2024-10-30 03:01:12 UTC	16384	IN	Data Raw: 69 61 6c 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 73 5f 5f 6c 69 73 74 69 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 6f 76 69 76 6f 68 6f 6c 6c 61 6e 64 2f 22 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 6f 76 69 76 6f 2d 6c 69 6e 6b 65 64 69 6e 20 73 6f 63 69 61 6c 73 5f 5f 73 69 6e 67 6c 65 22 20 74 69 74 6c 65 3d 22 6c 69 6e 6b 65 64 69 6e 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 6c 69 6e 6b 65 64 69 6e 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ials"> <div class="socials__listing"> <a href="https://www.linkedin.com/company/ovivoholland/" class="icon-ovivo-linkedin socials__single" title="linkedin" target="_blank">linkedin</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:13 UTC	596	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.2 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:14 UTC	1448	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:14 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 09:32:11 GMT ETag: "1b72b-624302959c2c9" Accept-Ranges: bytes Content-Length: 112427 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 Data Ascii: ock-cover.has-background-dim.has-background-dim-90 .wp-block-cover__background,.wp-block-cover.has-background-dim.has-background-dim-90 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-90:not(.has-background-gradi
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 20 66 69 67 75 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 20 66 69 67 75 72 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6d 61 72 67 69 6e 3a 30 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 Data Ascii: -gallery:not(.has-nested-images) .blocks-gallery-image figure,.wp-block-gallery:not(.has-nested-images) .blocks-gallery-item figure{align-items:flex-end;display:flex;height:100%;justify-content:flex-start;margin:0}.blocks-gallery-grid:not(.has-nested-imag
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 66 69 67 63 61 70 74 69 6f 6e 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 2e 69 73 2d 73 74 79 6c 65 2d 63 69 72 63 6c 65 2d 6d 61 73 6b 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 7d 40 73 75 70 70 6f 72 74 73 20 28 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 20 6f 72 20 28 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 29 20 6f 72 20 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 Data Ascii: er{margin-left:auto;margin-right:auto}.wp-block-image :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-image.is-style-circle-mask img{border-radius:9999px}@supports ((-webkit-mask-image:none) or (mask-image:none)) or (-webkit-mask-image:none
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 5f 5f 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 29 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 61 67 65 2d 6c 69 73 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6c 6f 73 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 Data Ascii: lock-navigation-item__content:not(.wp-block-navigation-submenu__toggle){padding:0}.wp-block-navigation .wp-block-page-list,.wp-block-navigation__container,.wp-block-navigation__responsive-close,.wp-block-navigation__responsive-container,.wp-block-navigati
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 7b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 3a 77 68 65 72 65 28 2e 61 6c 69 67 6e 6c 65 66 74 2c 2e 61 6c 69 67 6e 72 69 67 68 74 29 7b 77 69 64 74 68 3a 31 Data Ascii: eatured-image .wp-block-post-featured-image__overlay.has-background-dim-90{opacity:.9}.wp-block-post-featured-image .wp-block-post-featured-image__overlay.has-background-dim-100{opacity:1}.wp-block-post-featured-image:where(.alignleft,.alignright){width:1
2024-10-30 03:01:14 UTC	14123	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 23 31 64 61 31 66 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 69 6d 65 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 62 37 65 61 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 38 30 63 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a Data Ascii: d-color:#1da1f2;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-vimeo{background-color:#1eb7ea;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-vk{background-color:#4680c2;color:#fff}:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:13 UTC	614	OUT	GET /app/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.13 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:14 UTC	1446	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:14 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "e768-6242f8fe100aa" Accept-Ranges: bytes Content-Length: 59240 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 7d 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 75 Data Ascii: html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu .wp-block-navigation-submenu__toggle img{margin-left:12px}html[dir="rtl"] .wpml-language-switcher-block .wpml-ls-dropdown ul li.wp-block-navigation-submenu u
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 6e 2d 69 63 6f 6e 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 30 2e 32 34 73 20 6c 69 6e 65 61 72 20 30 2e 32 34 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 30 2e 32 34 73 20 6c 69 6e 65 61 72 20 30 2e 32 34 73 7d 2e 61 6e 74 2d 69 6e 70 75 74 2d 6e 75 6d 62 65 72 2d 66 6f 63 75 73 65 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 30 61 39 66 66 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 32 34 2c 31 34 34 2c 32 35 35 2c 30 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 Data Ascii: n-icon{opacity:0;-webkit-transition:opacity 0.24s linear 0.24s;transition:opacity 0.24s linear 0.24s}.ant-input-number-focused{border-color:#40a9ff;border-right-width:1px !important;outline:0;-webkit-box-shadow:0 0 0 2px rgba(24,144,255,0.2);box-shadow:0
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 74 2d 73 65 6c 65 63 74 2d 61 72 72 6f 77 20 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 61 72 72 6f 77 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 61 6e 74 2d 73 65 6c 65 63 74 2d 61 72 72 6f 77 20 2e 61 6e 74 69 63 6f 6e 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 2c 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 7d 2e 61 6e 74 2d Data Ascii: t-select-arrow .ant-select-arrow-icon{display:block}.ant-select-arrow .anticon{vertical-align:top;-webkit-transition:-webkit-transform 0.3s;transition:-webkit-transform 0.3s;transition:transform 0.3s;transition:transform 0.3s, -webkit-transform 0.3s}.ant-
2024-10-30 03:01:14 UTC	10088	IN	Data Raw: 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 67 61 70 3a 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 69 73 74 20 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 69 73 74 20 6c 69 20 61 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 77 70 6d 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 77 69 74 63 68 65 72 2d 62 6c 6f 63 6b 20 75 6c 2e 63 65 6e 74 65 72 2d 6a 75 73 74 Data Ascii: t;margin:0 !important;gap:1em !important}.wpml-language-switcher-block ul.horizontal-list li{display:inline-block;margin:0;line-height:100%}.wpml-language-switcher-block ul.horizontal-list li a{line-height:100%}.wpml-language-switcher-block ul.center-just

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:13 UTC	620	OUT	GET /app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.2.6 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:14 UTC	1444	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:14 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:47:58 GMT ETag: "c22-6242f8b39b67b" Accept-Ranges: bytes Content-Length: 3106 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:14 UTC	3106	IN	Data Raw: 23 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2d 62 61 72 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 31 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 09 2f 2a 20 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 30 70 78 20 35 70 78 20 35 30 70 78 3b 20 2a 2f 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 6c 65 66 74 3a 30 70 78 3b 0a 09 66 6f 6e 74 2d Data Ascii: #cookie-law-info-bar {font-size: 15px;margin: 0 auto;padding: 12px 10px;position: absolute;text-align: center;box-sizing: border-box;width:100%;z-index: 9999;/* box-shadow:rgba(0,0,0,.5) 0px 5px 50px; */display: none;left:0px;font-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:13 UTC	618	OUT	GET /app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.2.6 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:14 UTC	1446	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:14 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:47:58 GMT ETag: "6a71-6242f8b39b67b" Accept-Ranges: bytes Content-Length: 27249 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:14 UTC	16384	IN	Data Raw: 2e 67 64 70 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 67 64 70 72 2d 72 6f 77 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 09 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 35 70 Data Ascii: .gdpr-container-fluid {width: 100%;padding-right: 15px;padding-left: 15px;margin-right: auto;margin-left: auto;}.gdpr-row {display: -ms-flexbox;display: flex;-ms-flex-wrap: wrap;flex-wrap: wrap;margin-right: -15px;margin-left: -15p
2024-10-30 03:01:14 UTC	10865	IN	Data Raw: 6c 6f 72 3a 23 32 61 32 61 32 61 3b 0a 7d 0a 2e 63 6c 69 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 20 2e 63 6c 69 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 33 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 36 64 36 64 36 3b 0a 7d 0a 2e 63 6c 69 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 20 70 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 33 34 33 34 33 38 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 7d 0a 2e 63 6c 69 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 20 68 34 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: lor:#2a2a2a;}.cli-tab-content .cli-button-wrapper {padding-top: 30px;margin-top: 30px;border-top: 1px solid #d6d6d6;}.cli-tab-content p {color: #343438;font-size: 14px;margin-top: 0;}.cli-tab-content h4 {font-size: 20px;margin-bottom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:14 UTC	647	OUT	GET /app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown-click/style.min.css?ver=1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:14 UTC	1444	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:14 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "671-6242f8fe0a2ea" Accept-Ranges: bytes Content-Length: 1649 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:14 UTC	1649	IN	Data Raw: 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 2d 63 6c 69 63 6b 7b 77 69 64 74 68 3a 31 35 2e 35 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 2d 63 6c 69 63 6b 3e 75 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 2d 63 6c 69 63 6b 20 2e 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d Data Ascii: .wpml-ls-legacy-dropdown-click{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown-click>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown-click .wpml-ls-item{padding:0;margin:0;list-style-type:none}.wpml-ls-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:14 UTC	635	OUT	GET /app/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:14 UTC	1443	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:14 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "102-6242f8fe0a2ea" Accept-Ranges: bytes Content-Length: 258 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:14 UTC	258	IN	Data Raw: 2e 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 77 70 6d 6c 2d 6c 73 2d 66 6c 61 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 77 70 6d 6c 2d 6c 73 2d 66 6c 61 67 2b 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 33 65 6d 7d 2e 72 74 6c 20 2e 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 2e 77 70 6d 6c 2d 6c 73 2d 66 6c 61 67 2b 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 75 6c 20 2e 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 61 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 Data Ascii: .wpml-ls-menu-item .wpml-ls-flag{display:inline;vertical-align:baseline}.wpml-ls-menu-item .wpml-ls-flag+span{margin-left:.3em}.rtl .wpml-ls-menu-item .wpml-ls-flag+span{margin-left:0;margin-right:.3em}ul .wpml-ls-menu-item a{display:flex;align-items:cent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 03:01:14 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=35617 Date: Wed, 30 Oct 2024 03:01:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	605	OUT	GET /app/themes/ovivo/resources/assets/styles/custom-style.css?ver=6.6.2 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:15 UTC	1446	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:15 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Wed, 23 Oct 2024 05:45:24 GMT ETag: "49fb-6251e64718e66" Accept-Ranges: bytes Content-Length: 18939 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 2f 2a 20 73 63 72 6f 6c 6c 20 73 65 63 74 69 6f 6e 20 63 73 73 20 73 74 61 72 74 20 2a 2f 0d 0a 2e 62 62 61 2d 70 61 72 61 67 72 61 70 68 2d 6d 61 69 6e 5f 70 69 6c 6c 61 72 73 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 2f 2a 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 64 66 62 66 33 3b 0d 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 34 2e 32 38 35 37 31 34 32 38 35 37 72 65 6d 3b 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 20 20 20 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 64 66 62 66 33 3b 6d 65 64 69 61 0d 0a 20 20 20 20 7d 20 2a 2f 0d 0a 0d 0a 2e 61 63 63 6f 72 Data Ascii: /* scroll section css start /.bba-paragraph-main_pillars { position: relative; / background: #fdfbf3; padding-bottom: 4.2857142857rem; /}/ .accordion-scrolling { background: #fdfbf3;media } */.accor
2024-10-30 03:01:15 UTC	2555	IN	Data Raw: 68 65 61 64 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2d 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 2d 74 65 78 74 20 2e 62 74 6e 2d 77 72 61 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2d 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 2d 74 65 78 74 20 2e 73 6f 6c 75 74 69 6f 6e 2d 62 74 6e 2b 2e 73 6f 6c 75 Data Ascii: heading { font-size: 28px; line-height: 36px; margin: 10px 0; } .accordion-scrolling-content-block-text .btn-wrap { margin: 0 0 20px; } .accordion-scrolling-content-block-text .solution-btn+.solu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	575	OUT	GET /app/themes/ovivo/dist/styles/main.css HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:15 UTC	1448	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:15 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 22 Jul 2022 16:54:43 GMT ETag: "6c31c-5e467b0dc92b6" Accept-Ranges: bytes Content-Length: 443164 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 61 73 74 2e 66 6f 6e 74 73 2e 6e 65 74 2f 74 2f 31 2e 63 73 73 3f 61 70 69 54 79 70 65 3d 63 73 73 26 70 72 6f 6a 65 63 74 69 64 3d 63 34 62 65 63 31 65 62 2d 31 38 62 32 2d 34 64 30 37 2d 39 64 64 37 2d 63 66 62 36 62 61 36 34 63 31 32 63 29 3b 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 35 30 25 2c 20 30 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 35 30 25 2c 20 30 29 20 72 6f Data Ascii: @import url(https://fast.fonts.net/t/1.css?apiType=css&projectid=c4bec1eb-18b2-4d07-9dd7-cfb6ba64c12c);@charset "UTF-8";@keyframes spin { from { transform: translate3d(0, -50%, 0) rotate(0deg); } to { transform: translate3d(0, -50%, 0) ro
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 69 6e 65 20 36 35 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 6d 69 78 69 6e 73 2f 5f 67 72 69 64 2d 66 72 61 6d 65 77 6f 72 6b 2e 73 63 73 73 20 2a 2f 0a 0a 2e 6f 72 64 65 72 2d 36 20 7b 0a 20 20 6f 72 64 65 72 3a 20 36 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 36 35 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 6d 69 78 69 6e 73 2f 5f 67 72 69 64 2d 66 72 61 6d 65 77 6f 72 6b 2e 73 63 73 73 20 2a 2f 0a 0a 2e 6f 72 64 65 72 2d 37 20 7b 0a 20 20 6f 72 64 65 72 3a 20 37 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 36 35 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 6d 69 78 69 6e 73 2f 5f 67 72 69 64 2d 66 72 61 6d 65 77 6f 72 6b 2e Data Ascii: ine 65, node_modules/bootstrap/scss/mixins/_grid-framework.scss /.order-6 { order: 6;}/ line 65, node_modules/bootstrap/scss/mixins/_grid-framework.scss /.order-7 { order: 7;}/ line 65, node_modules/bootstrap/scss/mixins/_grid-framework.
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 6c 2d 6c 67 2d 37 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 35 38 2e 33 33 33 33 33 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 35 38 2e 33 33 33 33 33 25 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 6c 69 6e 65 20 35 34 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 6d 69 78 69 6e 73 2f 5f 67 72 69 64 2d 66 72 61 6d 65 77 6f 72 6b 2e 73 63 73 73 20 2a 2f 0a 0a 20 20 2e 63 6f 6c 2d 6c 67 2d 38 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 36 36 2e 36 36 36 36 37 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 36 2e 36 36 36 36 37 25 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 6c 69 6e 65 20 35 34 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 6d 69 78 69 Data Ascii: l-lg-7 { flex: 0 0 58.33333%; max-width: 58.33333%; } /* line 54, node_modules/bootstrap/scss/mixins/_grid-framework.scss / .col-lg-8 { flex: 0 0 66.66667%; max-width: 66.66667%; } / line 54, node_modules/bootstrap/scss/mixi
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 5f 74 72 61 6e 73 69 74 69 6f 6e 73 2e 73 63 73 73 20 2a 2f 0a 0a 2e 66 61 64 65 3a 6e 6f 74 28 2e 73 68 6f 77 29 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 31 30 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 5f 74 72 61 6e 73 69 74 69 6f 6e 73 2e 73 63 73 73 20 2a 2f 0a 0a 2e 63 6f 6c 6c 61 70 73 65 3a 6e 6f 74 28 2e 73 68 6f 77 29 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 31 35 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 Data Ascii: n: none; }}/* line 4, node_modules/bootstrap/scss/_transitions.scss /.fade:not(.show) { opacity: 0;}/ line 10, node_modules/bootstrap/scss/_transitions.scss /.collapse:not(.show) { display: none;}/ line 15, node_modules/bootstrap/sc
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 61 6c 69 67 6e 2e 73 63 73 73 20 2a 2f 0a 0a 2e 61 6c 69 67 6e 2d 62 61 73 65 6c 69 6e 65 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 61 6c 69 67 6e 2e 73 63 73 73 20 2a 2f 0a 0a 2e 61 6c 69 67 6e 2d 74 6f 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 35 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 Data Ascii: ootstrap/scss/utilities/_align.scss /.align-baseline { vertical-align: baseline !important;}/ line 4, node_modules/bootstrap/scss/utilities/_align.scss /.align-top { vertical-align: top !important;}/ line 5, node_modules/bootstrap/scss/u
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 6d 62 65 64 2e 73 63 73 73 20 2a 2f 0a 0a 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 2d 31 36 62 79 39 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 36 2e 32 35 25 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 33 35 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 65 6d 62 65 64 2e 73 63 73 73 20 2a 2f 0a 0a 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 2d 34 62 79 33 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 37 35 25 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 33 35 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 65 6d 62 65 64 2e 73 63 Data Ascii: mbed.scss /.embed-responsive-16by9::before { padding-top: 56.25%;}/ line 35, node_modules/bootstrap/scss/utilities/_embed.scss /.embed-responsive-4by3::before { padding-top: 75%;}/ line 35, node_modules/bootstrap/scss/utilities/_embed.sc
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 3a 20 66 6c 65 78 2d 65 6e 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 6c 69 6e 65 20 33 33 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 66 6c 65 78 2e 73 63 73 73 20 2a 2f 0a 0a 20 20 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 6c 67 2d 63 65 6e 74 65 72 20 7b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 6c 69 6e 65 20 33 34 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 66 6c 65 78 2e 73 63 73 73 20 2a 2f 0a 0a 20 20 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 6c 67 2d 62 61 73 65 6c 69 6e Data Ascii: : flex-end !important; } /* line 33, node_modules/bootstrap/scss/utilities/_flex.scss / .align-items-lg-center { align-items: center !important; } / line 34, node_modules/bootstrap/scss/utilities/_flex.scss */ .align-items-lg-baselin
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 37 35 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 36 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 73 68 61 64 6f 77 73 2e 73 63 73 73 20 2a 2f 0a 0a 2e 73 68 61 64 6f 77 2d 6e 6f 6e 65 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 37 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 73 69 7a 69 6e 67 2e 73 63 73 73 20 2a 2f 0a 0a 2e 77 2d 32 35 20 7b 0a 20 20 77 69 64 74 68 3a 20 32 35 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 37 2c 20 6e 6f 64 65 5f 6d 6f Data Ascii: 75) !important;}/* line 6, node_modules/bootstrap/scss/utilities/_shadows.scss /.shadow-none { box-shadow: none !important;}/ line 7, node_modules/bootstrap/scss/utilities/_sizing.scss /.w-25 { width: 25% !important;}/ line 7, node_mo
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 6d 78 2d 73 6d 2d 35 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 6c 69 6e 65 20 31 31 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 73 70 61 63 69 6e 67 2e 73 63 73 73 20 2a 2f 0a 0a 20 20 2e 70 2d 73 6d 2d 30 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 6c 69 6e 65 20 31 32 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 73 70 61 63 69 6e 67 2e 73 63 73 73 20 2a 2f 0a 0a 20 20 2e 70 74 2d 73 6d 2d 30 2c 0a 20 20 2e 70 79 2d 73 6d 2d 30 Data Ascii: mx-sm-5 { margin-left: 3rem !important; } /* line 11, node_modules/bootstrap/scss/utilities/_spacing.scss / .p-sm-0 { padding: 0 !important; } / line 12, node_modules/bootstrap/scss/utilities/_spacing.scss */ .pt-sm-0, .py-sm-0
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 30 2e 32 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 6c 69 6e 65 20 34 33 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 73 70 61 63 69 6e 67 2e 73 63 73 73 20 2a 2f 0a 0a 20 20 2e 6d 62 2d 6d 64 2d 6e 31 2c 0a 20 20 2e 6d 79 2d 6d 64 2d 6e 31 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 30 2e 32 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 6c 69 6e 65 20 34 37 2c 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 62 6f 6f 74 73 74 72 61 70 2f 73 63 73 73 2f 75 74 69 6c 69 74 69 65 73 2f 5f 73 70 61 63 69 6e 67 2e 73 63 73 73 20 2a 2f 0a Data Ascii: margin-right: -0.25rem !important; } /* line 43, node_modules/bootstrap/scss/utilities/_spacing.scss / .mb-md-n1, .my-md-n1 { margin-bottom: -0.25rem !important; } / line 47, node_modules/bootstrap/scss/utilities/_spacing.scss */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	569	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:15 UTC	1461	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:15 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Wed, 29 Nov 2023 09:17:13 GMT ETag: "15601-60b47002bc699" Accept-Ranges: bytes Content-Length: 87553 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 5d 7d 29 2c 6c 61 73 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2d 31 5d 7d 29 2c 65 71 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 5b 6e 3c 30 3f 6e 2b 74 3a 6e 5d 7d 29 2c 65 76 65 6e 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6f 64 64 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6c 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 6e 3c 30 3f 6e 2b 74 3a 74 3c 6e 3f 74 3a 6e 3b 30 Data Ascii: ]}),last:X(function(e,t){return[t-1]}),eq:X(function(e,t,n){return[n<0?n+t:n]}),even:X(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:X(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:X(function(e,t,n){var r;for(r=n<0?n+t:t<n?t:n;0
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 2c 22 66 78 22 3d 3d 3d 74 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 65 5b 30 5d 26 26 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 74 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 31 2c 69 3d 63 65 2e 44 65 66 65 72 72 65 64 Data Ascii: this,t,n);ce._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&ce.dequeue(this,t)})},dequeue:function(e){return this.each(function(){ce.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(e,t){var n,r=1,i=ce.Deferred
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 63 65 28 65 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 2d 31 2c 6f 3d 30 3b 6f 3c 3d 69 3b 6f 2b 2b 29 74 3d 6f 3d 3d 3d 69 3f 74 68 69 73 3a 74 68 69 73 2e 63 6c 6f 6e 65 28 21 30 29 2c 63 65 28 72 5b 6f 5d 29 5b 61 5d 28 74 29 2c 73 2e 61 70 70 6c 79 28 6e 2c 74 2e 67 65 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 29 7d 7d 29 3b 76 61 72 20 5f 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 47 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 7a 65 3d 2f 5e 2d 2d 2f 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 Data Ascii: ){ce.fn[e]=function(e){for(var t,n=[],r=ce(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),ce(r[o])[a](t),s.apply(n,t.get());return this.pushStack(n)}});var _e=new RegExp("^("+G+")(?!px)[a-z%]+$","i"),ze=/^--/,Xe=function(e){var t=e.ownerDocument
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 2c 6c 65 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 Data Ascii: opFix:{"for":"htmlFor","class":"className"}}),le.optSelected\|\|(ce.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parent
2024-10-30 03:01:15 UTC	5633	IN	Data Raw: 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 76 28 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 61 3f 65 5b 61 5d 3d 65 5b 61 5d 2e 72 65 70 6c 61 63 65 28 5a 74 2c 22 24 31 22 2b 72 29 3a 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 65 2e 75 72 6c 2b 3d 28 41 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 65 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 72 29 2c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 63 65 2e 65 72 72 6f 72 28 72 2b 22 20 77 61 73 20 6e 6f 74 20 63 Data Ascii: dataTypes[0])return r=e.jsonpCallback=v(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Zt,"$1"+r):!1!==e.jsonp&&(e.url+=(At.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o\|\|ce.error(r+" was not c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	577	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:15 UTC	1460	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:15 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Wed, 16 Aug 2023 05:55:18 GMT ETag: "3509-60303f0b16bba" Accept-Ranges: bytes Content-Length: 13577 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:15 UTC	13577	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	604	OUT	GET /app/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.2.6 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:15 UTC	1460	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:15 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:47:58 GMT ETag: "8589-6242f8b39b67b" Accept-Ranges: bytes Content-Length: 34185 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3a 20 27 76 69 65 77 65 64 5f 63 6f 6f 6b 69 65 5f 70 6f 6c 69 63 79 27 29 3b 0a 43 4c 49 5f 50 52 45 46 45 52 45 4e 43 45 5f 43 4f 4f 4b 49 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 50 52 45 46 45 52 45 4e 43 45 5f 43 4f 4f 4b 49 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 50 52 45 46 45 52 45 4e 43 45 5f 43 4f 4f 4b 49 45 20 3a 20 27 43 6f 6f 6b 69 65 4c 61 77 49 6e 66 6f 43 6f 6e 73 65 6e 74 27 29 3b 0a 43 4c 49 5f 41 43 43 45 50 54 Data Ascii: CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');CLI_PREFERENCE_COOKIE = (typeof CLI_PREFERENCE_COOKIE !== 'undefined' ? CLI_PREFERENCE_COOKIE : 'CookieLawInfoConsent');CLI_ACCEPT
2024-10-30 03:01:15 UTC	16384	IN	Data Raw: 69 67 2e 72 69 67 68 74 20 3d 20 73 68 6f 77 61 67 61 69 6e 5f 78 5f 70 6f 73 3b 0a 09 09 09 7d 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 6f 74 69 66 79 5f 70 6f 73 69 74 69 6f 6e 5f 76 65 72 74 69 63 61 6c 20 3d 3d 20 22 74 6f 70 22 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 73 68 6f 77 61 67 61 69 6e 5f 63 6f 6e 66 69 67 2e 74 6f 70 20 3d 20 27 30 27 3b 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 6f 74 69 66 79 5f 70 6f 73 69 74 69 6f 6e 5f 76 65 72 74 69 63 61 6c 20 3d 3d 20 22 62 6f 74 74 6f 6d 22 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 62 61 72 5f 63 6f 6e 66 69 67 5b 27 70 6f 73 69 74 69 6f 6e 27 5d 20 3d 20 27 66 69 78 65 64 27 3b 0a 09 09 09 09 74 Data Ascii: ig.right = showagain_x_pos;}} else {if (this.settings.notify_position_vertical == "top") {this.showagain_config.top = '0';} else if (this.settings.notify_position_vertical == "bottom") {this.bar_config['position'] = 'fixed';t
2024-10-30 03:01:15 UTC	1417	IN	Data Raw: 62 61 63 6b 28 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 2c 0a 09 09 09 72 65 6e 64 65 72 53 63 72 69 70 74 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 76 61 72 20 24 73 63 72 69 70 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 73 63 72 69 70 74 5b 64 61 74 61 2d 63 6c 69 2d 63 6c 61 73 73 3d 22 63 6c 69 2d 62 6c 6f 63 6b 65 72 2d 73 63 72 69 70 74 22 5d 27 29 3b 0a 09 09 09 09 69 66 20 28 24 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0a 09 09 09 09 09 76 61 72 20 72 75 6e 4c 69 73 74 20 3d 20 5b 5d 0a 09 09 09 09 09 76 61 72 20 74 79 70 65 41 74 74 72 0a 09 09 09 09 09 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 0a 09 09 09 09 Data Ascii: back();}},renderScripts: function () {var $scripts = document.querySelectorAll('script[data-cli-class="cli-blocker-script"]');if ($scripts.length > 0) {var runList = []var typeAttrArray.prototype.forEach.call(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	633	OUT	GET /app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown-click/script.min.js?ver=1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:15 UTC	1457	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:15 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "39d-6242f8fe0a2ea" Accept-Ranges: bytes Content-Length: 925 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:15 UTC	925	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 43 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 69 29 5b 30 5d 3b 72 65 74 75 72 6e 22 76 69 73 69 62 6c 65 22 3d 3d 3d 74 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3f 28 74 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 6f 29 29 3a 28 74 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 76 69 73 69 62 6c 65 22 2c 64 6f 63 75 6d 65 6e 74 Data Ascii: "use strict";var WPMLLanguageSwitcherDropdownClick=function(){function l(e){var t=this.querySelectorAll(i)[0];return"visible"===t.style.visibility?(t.style.visibility="hidden",document.removeEventListener("click",o)):(t.style.visibility="visible",document

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49752	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	625	OUT	GET /m/7aabb08284ade500/original/website_logo.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:15 UTC	816	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 779 Connection: close Date: Mon, 28 Oct 2024 09:48:24 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="website_logo.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 6696b605-ed68-033f-8e0e-4e549b01115b Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 7abd55cee48606340f570b45718202b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: O3Ddr64zKzXaxdIb7voWgqT7L8K3pmGZV07SJmSbQilgKUi0Cn7svA== Age: 148371
2024-10-30 03:01:15 UTC	779	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 38 2e 35 20 37 33 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 38 2e 35 20 30 43 39 33 2e 38 20 32 35 2e 38 20 34 36 2e 35 20 34 35 2e 35 20 30 20 36 30 2e 34 63 30 20 30 20 37 31 2e 32 20 31 39 2e 39 20 31 33 38 2e 35 20 39 2e 39 20 30 2d 2e 31 2e 31 2d 37 30 2e 32 20 30 2d 37 30 2e 33 7a 22 20 66 69 6c 6c 3d 22 23 35 31 30 63 37 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 31 2e 38 20 34 35 2e 31 63 35 2e 31 20 30 20 39 2e 32 20 34 2e 31 20 39 2e 32 20 39 2e 32 73 2d 34 2e 31 20 39 2e 32 2d 39 2e 32 20 39 2e 32 2d 39 2e 32 2d 34 2e 31 2d 39 2e 32 2d 39 2e 32 20 34 2e 31 2d 39 2e 32 20 39 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 138.5 73"><path d="M138.5 0C93.8 25.8 46.5 45.5 0 60.4c0 0 71.2 19.9 138.5 9.9 0-.1.1-70.2 0-70.3z" fill="#510c76"/><path d="M121.8 45.1c5.1 0 9.2 4.1 9.2 9.2s-4.1 9.2-9.2 9.2-9.2-4.1-9.2-9.2 4.1-9.2 9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49751	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	631	OUT	GET /m/4e8b8a8114d09617/original/homepage_countries.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:16 UTC	835	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 26377 Connection: close Date: Wed, 30 Oct 2024 03:01:16 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="homepage_countries.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 06d56cd1-1ec0-f5eb-1ca9-5c1da6f54a2f Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e45d812d65a0d0336b945e28b9381462.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: AbiPiEciFxtB_FV29YlP1UdOj18Tg0j8wlYtLLc01gGeM7M3dmqueg==
2024-10-30 03:01:16 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 35 43 6f 75 6e 74 72 69 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 35 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Assets/Icons/15Countries</title> <g id="Assets/Icons/15C
2024-10-30 03:01:16 UTC	9993	IN	Data Raw: 35 37 2e 36 34 36 36 2c 33 39 2e 30 39 38 33 20 35 37 2e 30 37 37 36 2c 33 39 2e 33 34 34 33 20 43 35 35 2e 31 32 39 36 2c 34 30 2e 32 30 32 33 20 35 33 2e 36 36 38 36 2c 34 31 2e 37 38 36 33 20 35 32 2e 39 33 36 36 2c 34 33 2e 36 38 30 33 20 43 35 32 2e 34 39 36 36 2c 34 34 2e 38 31 37 33 20 35 32 2e 33 31 39 36 2c 34 36 2e 30 36 34 33 20 35 32 2e 34 35 36 36 2c 34 37 2e 33 33 35 33 20 43 35 32 2e 35 31 33 36 2c 34 37 2e 39 38 39 33 20 35 32 2e 36 35 35 36 2c 34 38 2e 36 33 31 33 20 35 32 2e 38 37 38 36 2c 34 39 2e 32 34 33 33 20 43 35 33 2e 31 30 30 36 2c 34 39 2e 38 35 36 33 20 35 33 2e 34 30 32 36 2c 35 30 2e 34 33 39 33 20 35 33 2e 37 37 38 36 2c 35 30 2e 39 37 38 33 20 43 35 34 2e 39 35 32 36 2c 35 32 2e 36 34 31 33 20 35 36 2e 31 33 30 36 2c 35 34 Data Ascii: 57.6466,39.0983 57.0776,39.3443 C55.1296,40.2023 53.6686,41.7863 52.9366,43.6803 C52.4966,44.8173 52.3196,46.0643 52.4566,47.3353 C52.5136,47.9893 52.6556,48.6313 52.8786,49.2433 C53.1006,49.8563 53.4026,50.4393 53.7786,50.9783 C54.9526,52.6413 56.1306,54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 03:01:15 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=35664 Date: Wed, 30 Oct 2024 03:01:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 03:01:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:16 UTC	395	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:16 UTC	1460	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:16 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Wed, 16 Aug 2023 05:55:18 GMT ETag: "3509-60303f0b16bba" Accept-Ranges: bytes Content-Length: 13577 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:16 UTC	13577	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	104.16.41.28	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:16 UTC	633	OUT	GET /t/1.css?apiType=css&projectid=c4bec1eb-18b2-4d07-9dd7-cfb6ba64c12c HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:16 UTC	974	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:16 GMT Content-Type: text/css; charset=utf-8 Content-Length: 0 Connection: close x-amz-id-2: Aew1PclQyxxFtZfcgTIomN8W7Y2/C1VQfAHbviJGODlhs9O+ODV39pGxfEl+6nbotH3dDhws5VbE73rRk45VExGMf7pJIBEl x-amz-request-id: 0QR077HPRM2TWSTG x-amz-replication-status: COMPLETED Last-Modified: Tue, 30 Jul 2024 12:03:08 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" x-amz-server-side-encryption: AES256 x-amz-meta-mtime: 1519217722 x-amz-version-id: S7lzDmdDI0noOXFTwuZlTK1jzSNI0TZH CF-Cache-Status: HIT Age: 3457090 Expires: Wed, 30 Oct 2024 03:01:17 GMT Cache-Control: public, max-age=1 Accept-Ranges: bytes Set-Cookie: __cf_bm=UQ8BQXypsztCMtxIcMb8MOwbHefGUXUvQqIP1YhMeNM-1730257276-1.0.1.1-qU5tzOCywaPfnvssaHnbMgV.4_RkZCIIIqH8sRmPL7TdabjBFjUkmFQffxy5jCoQeRtrivoffmyfVJg3Nfs2tQ; path=/; expires=Wed, 30-Oct-24 03:31:16 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8da828eb6ec10ba1-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49758	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:16 UTC	387	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:16 UTC	1461	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:16 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Wed, 29 Nov 2023 09:17:13 GMT ETag: "15601-60b47002bc699" Accept-Ranges: bytes Content-Length: 87553 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:17 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-30 03:01:17 UTC	16384	IN	Data Raw: 5d 7d 29 2c 6c 61 73 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2d 31 5d 7d 29 2c 65 71 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 5b 6e 3c 30 3f 6e 2b 74 3a 6e 5d 7d 29 2c 65 76 65 6e 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6f 64 64 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6c 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 6e 3c 30 3f 6e 2b 74 3a 74 3c 6e 3f 74 3a 6e 3b 30 Data Ascii: ]}),last:X(function(e,t){return[t-1]}),eq:X(function(e,t,n){return[n<0?n+t:n]}),even:X(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:X(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:X(function(e,t,n){var r;for(r=n<0?n+t:t<n?t:n;0
2024-10-30 03:01:17 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 2c 22 66 78 22 3d 3d 3d 74 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 65 5b 30 5d 26 26 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 74 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 31 2c 69 3d 63 65 2e 44 65 66 65 72 72 65 64 Data Ascii: this,t,n);ce._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&ce.dequeue(this,t)})},dequeue:function(e){return this.each(function(){ce.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(e,t){var n,r=1,i=ce.Deferred
2024-10-30 03:01:17 UTC	16384	IN	Data Raw: 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 63 65 28 65 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 2d 31 2c 6f 3d 30 3b 6f 3c 3d 69 3b 6f 2b 2b 29 74 3d 6f 3d 3d 3d 69 3f 74 68 69 73 3a 74 68 69 73 2e 63 6c 6f 6e 65 28 21 30 29 2c 63 65 28 72 5b 6f 5d 29 5b 61 5d 28 74 29 2c 73 2e 61 70 70 6c 79 28 6e 2c 74 2e 67 65 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 29 7d 7d 29 3b 76 61 72 20 5f 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 47 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 7a 65 3d 2f 5e 2d 2d 2f 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 Data Ascii: ){ce.fn[e]=function(e){for(var t,n=[],r=ce(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),ce(r[o])[a](t),s.apply(n,t.get());return this.pushStack(n)}});var _e=new RegExp("^("+G+")(?!px)[a-z%]+$","i"),ze=/^--/,Xe=function(e){var t=e.ownerDocument
2024-10-30 03:01:17 UTC	16384	IN	Data Raw: 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 2c 6c 65 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 Data Ascii: opFix:{"for":"htmlFor","class":"className"}}),le.optSelected\|\|(ce.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parent
2024-10-30 03:01:17 UTC	5633	IN	Data Raw: 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 76 28 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 61 3f 65 5b 61 5d 3d 65 5b 61 5d 2e 72 65 70 6c 61 63 65 28 5a 74 2c 22 24 31 22 2b 72 29 3a 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 65 2e 75 72 6c 2b 3d 28 41 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 65 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 72 29 2c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 63 65 2e 65 72 72 6f 72 28 72 2b 22 20 77 61 73 20 6e 6f 74 20 63 Data Ascii: dataTypes[0])return r=e.jsonpCallback=v(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Zt,"$1"+r):!1!==e.jsonp&&(e.url+=(At.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o\|\|ce.error(r+" was not c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49761	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:16 UTC	422	OUT	GET /app/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.2.6 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:16 UTC	1460	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:16 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:47:58 GMT ETag: "8589-6242f8b39b67b" Accept-Ranges: bytes Content-Length: 34185 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:17 UTC	16384	IN	Data Raw: 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 41 43 43 45 50 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 20 3a 20 27 76 69 65 77 65 64 5f 63 6f 6f 6b 69 65 5f 70 6f 6c 69 63 79 27 29 3b 0a 43 4c 49 5f 50 52 45 46 45 52 45 4e 43 45 5f 43 4f 4f 4b 49 45 20 3d 20 28 74 79 70 65 6f 66 20 43 4c 49 5f 50 52 45 46 45 52 45 4e 43 45 5f 43 4f 4f 4b 49 45 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 43 4c 49 5f 50 52 45 46 45 52 45 4e 43 45 5f 43 4f 4f 4b 49 45 20 3a 20 27 43 6f 6f 6b 69 65 4c 61 77 49 6e 66 6f 43 6f 6e 73 65 6e 74 27 29 3b 0a 43 4c 49 5f 41 43 43 45 50 54 Data Ascii: CLI_ACCEPT_COOKIE_NAME = (typeof CLI_ACCEPT_COOKIE_NAME !== 'undefined' ? CLI_ACCEPT_COOKIE_NAME : 'viewed_cookie_policy');CLI_PREFERENCE_COOKIE = (typeof CLI_PREFERENCE_COOKIE !== 'undefined' ? CLI_PREFERENCE_COOKIE : 'CookieLawInfoConsent');CLI_ACCEPT
2024-10-30 03:01:17 UTC	16384	IN	Data Raw: 69 67 2e 72 69 67 68 74 20 3d 20 73 68 6f 77 61 67 61 69 6e 5f 78 5f 70 6f 73 3b 0a 09 09 09 7d 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 6f 74 69 66 79 5f 70 6f 73 69 74 69 6f 6e 5f 76 65 72 74 69 63 61 6c 20 3d 3d 20 22 74 6f 70 22 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 73 68 6f 77 61 67 61 69 6e 5f 63 6f 6e 66 69 67 2e 74 6f 70 20 3d 20 27 30 27 3b 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 6f 74 69 66 79 5f 70 6f 73 69 74 69 6f 6e 5f 76 65 72 74 69 63 61 6c 20 3d 3d 20 22 62 6f 74 74 6f 6d 22 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 62 61 72 5f 63 6f 6e 66 69 67 5b 27 70 6f 73 69 74 69 6f 6e 27 5d 20 3d 20 27 66 69 78 65 64 27 3b 0a 09 09 09 09 74 Data Ascii: ig.right = showagain_x_pos;}} else {if (this.settings.notify_position_vertical == "top") {this.showagain_config.top = '0';} else if (this.settings.notify_position_vertical == "bottom") {this.bar_config['position'] = 'fixed';t
2024-10-30 03:01:17 UTC	1417	IN	Data Raw: 62 61 63 6b 28 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 2c 0a 09 09 09 72 65 6e 64 65 72 53 63 72 69 70 74 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 76 61 72 20 24 73 63 72 69 70 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 73 63 72 69 70 74 5b 64 61 74 61 2d 63 6c 69 2d 63 6c 61 73 73 3d 22 63 6c 69 2d 62 6c 6f 63 6b 65 72 2d 73 63 72 69 70 74 22 5d 27 29 3b 0a 09 09 09 09 69 66 20 28 24 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0a 09 09 09 09 09 76 61 72 20 72 75 6e 4c 69 73 74 20 3d 20 5b 5d 0a 09 09 09 09 09 76 61 72 20 74 79 70 65 41 74 74 72 0a 09 09 09 09 09 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 0a 09 09 09 09 Data Ascii: back();}},renderScripts: function () {var $scripts = document.querySelectorAll('script[data-cli-class="cli-blocker-script"]');if ($scripts.length > 0) {var runList = []var typeAttrArray.prototype.forEach.call(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49759	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:16 UTC	630	OUT	GET /m/824ce34e97ecc0e/original/homepage_employees.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:17 UTC	834	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 4713 Connection: close Date: Wed, 30 Oct 2024 03:01:17 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="homepage_employees.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: c949a798-d0c4-396f-5459-e0f491576db3 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a23fc047c59f0902384fa94644607c00.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: es_WOXQ0V093_QtTMMrxLo6alZE7fo_iJV6pDOHCzOuUWQDVAoPHCw==
2024-10-30 03:01:17 UTC	4713	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 39 35 30 45 6d 70 6c 6f 79 65 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Assets/Icons/950Employees</title> <defs> <polygo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49762	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:16 UTC	451	OUT	GET /app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown-click/script.min.js?ver=1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:16 UTC	1457	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:16 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "39d-6242f8fe0a2ea" Accept-Ranges: bytes Content-Length: 925 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:16 UTC	925	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 43 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 69 29 5b 30 5d 3b 72 65 74 75 72 6e 22 76 69 73 69 62 6c 65 22 3d 3d 3d 74 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3f 28 74 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 6f 29 29 3a 28 74 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 76 69 73 69 62 6c 65 22 2c 64 6f 63 75 6d 65 6e 74 Data Ascii: "use strict";var WPMLLanguageSwitcherDropdownClick=function(){function l(e){var t=this.querySelectorAll(i)[0];return"visible"===t.style.visibility?(t.style.visibility="hidden",document.removeEventListener("click",o)):(t.style.visibility="visible",document

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49763	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:16 UTC	387	OUT	GET /m/7aabb08284ade500/original/website_logo.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:16 UTC	816	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 779 Connection: close Date: Mon, 28 Oct 2024 09:48:24 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="website_logo.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 6696b605-ed68-033f-8e0e-4e549b01115b Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 122731c1a09cfba14dfeeff504946134.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: 59BnvuclbnEhn5nt27hssXsXjiHYPDayv-6s09nmmYbHL5Jm4_8m_w== Age: 148372
2024-10-30 03:01:16 UTC	779	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 38 2e 35 20 37 33 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 38 2e 35 20 30 43 39 33 2e 38 20 32 35 2e 38 20 34 36 2e 35 20 34 35 2e 35 20 30 20 36 30 2e 34 63 30 20 30 20 37 31 2e 32 20 31 39 2e 39 20 31 33 38 2e 35 20 39 2e 39 20 30 2d 2e 31 2e 31 2d 37 30 2e 32 20 30 2d 37 30 2e 33 7a 22 20 66 69 6c 6c 3d 22 23 35 31 30 63 37 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 31 2e 38 20 34 35 2e 31 63 35 2e 31 20 30 20 39 2e 32 20 34 2e 31 20 39 2e 32 20 39 2e 32 73 2d 34 2e 31 20 39 2e 32 2d 39 2e 32 20 39 2e 32 2d 39 2e 32 2d 34 2e 31 2d 39 2e 32 2d 39 2e 32 20 34 2e 31 2d 39 2e 32 20 39 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 138.5 73"><path d="M138.5 0C93.8 25.8 46.5 45.5 0 60.4c0 0 71.2 19.9 138.5 9.9 0-.1.1-70.2 0-70.3z" fill="#510c76"/><path d="M121.8 45.1c5.1 0 9.2 4.1 9.2 9.2s-4.1 9.2-9.2 9.2-9.2-4.1-9.2-9.2 4.1-9.2 9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49771	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	666	OUT	GET /app/themes/ovivo/dist/fonts/avenir/16695c2d-c755-45a2-bdcf-c54843f39afd.woff2 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.ovivowater.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	1425	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:18 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 22 Jul 2022 16:32:23 GMT ETag: "4094-5e46760f533c0" Accept-Ranges: bytes Content-Length: 16532 Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: font/woff2
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 40 94 00 10 00 00 00 00 96 f0 00 00 40 35 00 01 07 ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 16 8b 60 00 81 5c 08 83 64 09 92 50 11 08 0a 81 a8 3c 81 8d 32 01 36 02 24 03 87 1c 13 93 22 0b 87 20 00 04 20 05 b7 0b 07 20 0c 84 48 1b b4 84 37 70 5e 8b f4 b8 de ac 22 c2 50 f6 d7 aa 60 c7 be c0 ed 50 05 86 ae 6f 54 b0 6d da 47 20 37 0b 29 98 73 21 fb ff ff cf 3a 2a 63 68 52 48 5b 00 54 99 6e 3f cb 23 90 a2 26 64 87 8f 74 b4 9c 58 8d 8e 6c 07 46 22 13 dd 10 7c 71 8b e9 a7 b8 59 d7 5d b2 aa ef a2 cf 28 d9 55 b2 5a 96 65 6f 34 a5 2e 34 a8 fc 91 d5 2f 37 6f 59 27 64 0a c2 9c 38 37 b5 e1 70 b9 21 92 ba 5e 64 1e 82 96 1b 41 0d a7 7a e1 40 be 46 9b 9c ac 5a 0d 82 43 5f 2c 72 7c 29 e0 b8 d9 37 07 37 da ba 49 f5 Data Ascii: wOF2@@5``\dP<26$" H7p^"P`PoTmG 7)s!:*chRH[Tn?#&dtXlF"\|qY](UZeo4.4/7oY'd87p!^dAz@FZC_,r\|)77I
2024-10-30 03:01:18 UTC	148	IN	Data Raw: 52 38 bb a4 18 71 3c 80 b3 cd 33 86 10 7e 67 ff 92 91 e1 1f fb ba ed fc ca 15 f8 e8 bf e1 0b 97 4e f1 a1 0f b2 7d 4d 0b 81 3e b5 48 b9 ee 38 d4 34 fd 59 34 8f eb c9 54 bb 86 1b 8d b4 7e a9 54 05 50 45 d6 9d fd 7b a9 70 b2 84 58 c6 90 4a ed 53 73 e6 e7 d6 5a 81 6e 4c 32 a4 5d 6b 7c 49 c9 2c 80 84 04 f0 d3 45 65 c1 5a 94 99 c5 ec cc a0 3f 9a ad 06 e5 77 80 22 b2 7f 1a 8b 93 66 64 23 ac 9b c2 9b bd b4 4a 46 0d 59 a2 21 57 07 68 e5 85 73 be 06 Data Ascii: R8q<3~gN}M>H84Y4T~TPE{pXJSsZnL2]k\|I,EeZ?w"fd#JFY!Whs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49770	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	666	OUT	GET /app/themes/ovivo/dist/fonts/avenir/75c84254-5125-412c-bc24-56769ae3b627.woff2 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.ovivowater.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	1425	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:18 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 22 Jul 2022 16:32:23 GMT ETag: "417c-5e46760f533c0" Accept-Ranges: bytes Content-Length: 16764 Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: font/woff2
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 41 7c 00 10 00 00 00 00 99 20 00 00 41 1b 00 01 07 ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 16 8b 60 00 81 5c 08 83 64 09 92 50 11 08 0a 81 aa 10 81 8e 06 01 36 02 24 03 87 1c 13 95 7e 0b 87 20 00 04 20 05 b7 0b 07 20 0c 84 48 1b 64 86 27 98 9b 3a a2 d1 39 e8 36 00 54 95 49 8f 2a 4c 05 e7 c4 7a 6e a7 77 1b e8 3b 98 8c 5b 1b b7 63 e3 b9 fe 0a b3 ff ff 3f 27 e9 18 a2 21 b6 01 54 b5 ba ad bf 91 7b b8 f3 14 3c dd 54 09 cd bb 86 52 66 22 22 90 0d 2d 91 4c 90 9d 72 b6 9e 92 71 f9 2e aa 0f 91 0e 15 0d 38 4e 33 23 4c 63 e2 cb 7c 90 05 db 7c 0b 7e d7 6c 9e fc b9 24 c9 57 ed ec 6d e4 ec 88 ae 74 76 20 e2 75 84 09 61 d7 11 48 a1 55 b8 79 ff 90 55 90 ad dc 25 68 19 ef 42 47 12 17 a9 d5 64 49 16 0c 9f aa 56 ff Data Ascii: wOF2A\| A``\dP6$~ Hd':96TI*Lznw;[c?'!T{<TRf""-Lrq.8N3#Lc\|\|~l$Wmtv uaHUyU%hBGdIV
2024-10-30 03:01:18 UTC	380	IN	Data Raw: f5 98 ea 58 96 f8 4b de 5b 79 f9 ea a7 f6 01 89 34 ec 45 dd cb 0f b4 d4 df 4f b6 ef b4 73 e5 8f 77 34 f7 43 8f fb cf 2f 64 b8 7c e1 c3 97 b3 1d fe 1e d9 f0 4f 8f ff 37 ff af e8 e3 f9 e6 f0 cf 39 ca 07 49 fd 77 a6 c3 64 f5 ef 99 82 ff fc 15 0f df 03 ff 37 fe 2f fc 9f 1f 6e 33 47 ea 0c a1 29 12 26 88 bb e5 5b 37 7d f3 86 af 5d f7 f4 35 4f 45 a8 dd 61 f7 3b ee 38 b0 a7 81 5b f5 ec ba e7 ba 39 bb 98 73 ff e7 bf 8d 36 36 3d a1 60 72 a9 08 65 0a 22 fc 23 21 57 ac 9a 68 a6 4b 5a 6b 6f 15 e0 8e 41 f8 10 4e 8f fb 9b ee a6 bd c9 ac 60 e3 6d 9c 0d de 18 1b 75 83 36 c2 86 7b cc 1f 93 c7 f0 31 d8 c8 e0 77 4e 61 bb e9 20 72 b3 32 10 c2 73 de 95 fc 9d 6c b0 a2 93 0c d8 b1 04 34 8e b5 b5 3d 8c 97 5a e7 c4 78 d0 6e 9d 4e 33 47 ed 35 b7 8e a1 49 f4 48 cc ee 98 3e 79 0f 27 Data Ascii: XK[y4EOsw4C/d\|O79Iwd7/n3G)&[7}]5OEa;8[9s66=`re"#!WhKZkoAN`mu6{1wNa r2sl4=ZxnN3G5IH>y'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49768	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	666	OUT	GET /app/themes/ovivo/dist/fonts/avenir/65cde95a-ac33-4c65-8198-e37857968d1a.woff2 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.ovivowater.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	1425	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:18 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 22 Jul 2022 16:32:23 GMT ETag: "41c4-5e46760f533c0" Accept-Ranges: bytes Content-Length: 16836 Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: font/woff2
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 41 c4 00 10 00 00 00 00 98 2c 00 00 41 63 00 01 07 ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 16 8b 60 00 81 5c 08 83 64 09 92 50 11 08 0a 81 a8 10 81 8c 58 01 36 02 24 03 87 1c 13 96 0a 0b 87 20 00 04 20 05 b7 0b 07 20 0c 84 48 1b c2 85 27 d8 b6 14 8a 77 b7 aa 9c 00 81 cc 25 63 9b 05 f1 e0 3c 02 c9 d1 bf 8b c9 b8 b5 71 b7 82 94 81 96 b3 ff ff 3f 21 a9 1c db 2e fb 01 a1 2c 79 84 59 dc b9 a2 45 2f 18 98 6b 54 d4 57 28 81 89 4d 8e 58 86 57 6c 96 eb 5c 53 d8 46 43 60 5e ea 41 6e b5 61 7e 74 b0 12 9c 94 b0 cf 23 e7 b1 9d d6 0b cb b8 81 16 0f 89 64 49 f6 2f 72 e1 92 4e ac 85 77 ca 14 77 72 97 a5 e3 83 c2 88 8e 42 a5 d2 9f 32 12 ea 25 b1 9e 2a f8 3d 48 70 92 f1 42 e8 5c c5 ce 85 aa d2 86 70 95 a6 0c da 80 Data Ascii: wOF2A,Ac``\dPX6$ H'w%c<q?!.,yYE/kTW(MXWl\SFC`^Ana~t#dI/rNwwrB2%*=HpB\p
2024-10-30 03:01:18 UTC	452	IN	Data Raw: dd df 34 3b db 41 f4 d6 c7 2f 98 17 bf c4 39 9d 32 bd 9b 7a 96 9b 0c 7b cf b7 79 e7 a3 19 4c 8f 27 8d f8 05 fa 1a 80 b8 07 63 00 ba f6 85 bd 57 cb ed 3b 8c ff fe ff 9f 9b c5 5f 7e fd f8 5d 0c df fc e3 25 bc d4 a6 25 17 ba fa 42 1b b2 57 5f 96 cb 88 3f e2 b7 92 de 7f f8 be 7c 21 17 16 66 91 aa f7 df d1 a8 3f eb a5 6f f8 e3 6a ff 9b 9f bb bf 6f fc f7 7c 7e a3 2f fe f7 cd 74 f1 db cc cd fe 4d ec c5 bf ff ea 7f d5 ff ac a6 39 77 f6 df 8c ac 85 ee fc 77 66 2e 9e b3 7f 66 2a ff f8 85 ba f8 1d d4 7f ad ff 5c ff e9 1f db 5f 53 7e 45 e9 25 d5 2f 28 ba 19 b5 1b b1 7d 3d 36 ae 45 f5 6a 94 96 74 fc 0a 1e 0f e8 c2 45 78 e9 22 5a 6f e0 76 83 a6 05 5c 2e d0 ff 2f bf f1 66 cb ea fa 7a a5 22 94 29 88 f0 5b c2 7f 0a 45 f5 d9 a8 1b da e9 68 4d e0 50 d0 97 1e 4d f3 49 3e ce Data Ascii: 4;A/92z{yL'cW;_~]%%BW_?\|!f?ojo\|~/tM9wwf.f*\_S~E%/(}=6EjtEx"Zov\./fz")[EhMPMI>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49773	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	644	OUT	GET /m/55c60dcc9c78d1b6/original/1920X970_NewTagline_2024_200kb.webp HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	819	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 174226 Connection: close Date: Wed, 30 Oct 2024 03:01:18 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="1920X970_NewTagline_2024_200kb.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: f178d4f8-40b4-bd8c-edd5-ffae09dff3a9 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 d79861a030d3421826a919f9c2b00146.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: 0gn7u8Aq1lxPWhOxrohiF-g0YuDFRxa2GEFs4DZwroFG67ZrctwXsw==
2024-10-30 03:01:18 UTC	7713	IN	Data Raw: 52 49 46 46 8a a8 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 0c 00 00 00 7f 07 00 c9 03 00 56 50 38 20 dc 66 02 00 50 3d 08 9d 01 2a 80 07 ca 03 3e 9d 4a 9e 4b a5 a4 23 27 a5 74 3a 60 f0 13 89 69 6c f2 fb 55 0f f0 c2 7f fd 7f fe f4 a2 6e ff b3 bb e3 a1 d3 ab e7 8f ff ff 2e 5f f8 f4 ec 65 3f fe ce 76 7d f8 7f ad ff f9 e7 57 ff eb 1c a3 58 8e cd a9 f4 f8 d6 e1 ff f4 f9 50 fc 7e d2 ff be f1 25 f3 3f f5 7d 3b 97 c8 f4 c6 f4 e4 cb 7b a7 5f 9c 05 2f 3c 4e ff 5f e9 af fd 86 80 16 4f ff 7c 65 5c 9a d1 f5 2f ff ff ee fb 19 ea 97 e1 2f 7d e7 d1 e9 e9 ce 97 79 7f 7c 8b fa 3f 20 ff 82 ff 1b bd ff dd 7f 61 ff cf fc 7f f8 ff 16 3f f2 62 4f f3 ff f5 f3 3f fd 3f f9 6f fe 7b 3d ff b3 f7 8f c6 9f de ff d2 fd cf f6 08 c6 4f fd 3f ff ff f6 77 89 71 5e 62 9d 7f fb 3e ff df 9b Data Ascii: RIFFWEBPVP8XVP8 fP=*>JK#'t:`ilUn._e?v}WXP~%?};{_/<N_O\|e\//}y\|? a?bO??o{=O?wq^b>
2024-10-30 03:01:19 UTC	8258	IN	Data Raw: 08 1d ec 53 43 db e5 8a 18 dd 6a cc 2d cb e4 3d 4a 44 8a 87 6c db ac f4 8b 52 50 d0 06 39 5e ea ea 0b 6e a1 ff 0d 95 a0 73 a6 93 7c 78 08 c7 da d1 5f 05 bb 45 66 3b c7 ee 33 86 54 80 f2 57 d2 90 9c 7e ba 28 07 78 94 95 bc aa b2 46 25 ba 45 a4 4c eb 41 d3 17 e6 8b aa 1a 90 10 19 88 5d 51 4f 37 d0 2d d8 19 9a ba 10 24 4f c1 48 8b d7 ef ab 6f 0f b6 9d 69 8a 11 db 67 58 c2 48 fa 2d 62 cc c7 ba 7e f9 14 90 47 50 14 a9 a0 78 e9 ea f7 38 ba c2 45 7d 13 f4 b1 0a 34 4b 93 90 fb 22 6e db 6d e1 0d 34 43 f3 12 ce f5 ed 7f f6 91 b5 71 8e 7c c7 a2 1c 8f 92 fd 57 dc 0c 4e f5 0f d5 e6 51 e0 8e ea 31 b2 57 f3 54 d5 0c 18 20 8f 74 44 31 f6 f2 a5 e9 6e 14 56 e0 56 3e be 9a 50 a3 54 7a 5a e7 a4 e8 a7 b5 da 1c d7 a3 84 6b a5 bf cd 8d e5 46 fe 50 48 dd 0b a7 89 6f 3c 9f f8 ed Data Ascii: SCj-=JDlRP9^ns\|x_Ef;3TW~(xF%ELA]QO7-$OHoigXH-b~GPx8E}4K"nm4Cq\|WNQ1WT tD1nVV>PTzZkFPHo<
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 2b 0c c9 90 0e 9d fb 2e bb 7a f8 ca a5 9f 58 b2 9f 60 07 4f 8e 68 e9 21 3c d0 f8 ef a6 b7 cc b7 1f 6a 22 83 d7 51 ce b8 56 43 e8 da 80 c7 38 19 97 09 09 49 8f ba 4f d6 b1 79 58 de 83 0c 1b d1 ee f1 1e 56 cb bd 1e 08 c8 b6 b9 21 c2 b7 9c 02 19 b0 64 23 f8 a6 5f ca 20 36 1a 29 e1 25 89 84 9a 07 45 8e 2b 4c 0e 48 4f e2 74 9d 83 8d 24 77 b8 15 39 a2 f9 13 eb c6 b1 12 ad cf e0 79 3a 84 8b 66 8e 8e 58 b8 04 74 cb de 94 84 95 88 8d b6 bb 51 8c 4e 57 94 2c 2d 61 b3 f6 08 02 f0 58 be 6b 05 5d ce 88 1a 96 03 97 c0 d5 45 8f f2 ac 1a d2 10 67 63 a8 3f be a2 32 08 9d f4 22 59 39 fb 1b 2f 76 8b 9b ff 71 9f 40 e8 74 d3 98 6e ed a7 cc b8 31 13 9e 0b 77 4d 1f 71 12 8c 9f d4 73 4d aa 21 77 49 86 70 1c b2 6d 3e f6 3f bf f9 81 b4 05 62 f9 df 82 1d 8d 04 8c fd d3 76 1d 89 77 Data Ascii: +.zX`Oh!<j"QVC8IOyXV!d#_ 6)%E+LHOt$w9y:fXtQNW,-aXk]Egc?2"Y9/vq@tn1wMqsM!wIpm>?bvw
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 40 8c ba 70 f9 04 c6 fc 26 a2 8c bd a8 f8 5d d3 77 7b 57 79 23 55 34 a9 40 81 80 ac c5 fc 20 37 2f 7b f1 a2 9b ec 2c ed 8e 98 cf 91 3d 58 f1 4c 97 eb 31 e9 8c 54 4f 76 6d 18 e8 7d da 2b 7d 6f 77 53 d9 d8 4f 16 d0 64 14 0b 31 41 9b d1 d5 7d 75 f3 4c 4d 2f 10 c6 6c 87 e9 57 0e 5a 0d 86 6b 39 6c 19 99 78 29 98 d6 62 a3 81 2f f3 0b 58 88 0e 68 b0 61 32 ba 74 67 d8 3d ad 97 5e c8 fb 18 38 8a 70 3d 95 30 4a 37 42 22 5c 7c 86 df df 5b 50 1b 78 b1 76 76 d2 99 25 cf 22 15 17 e6 10 21 ae fc dd 96 27 70 56 2d e9 41 d3 0f 37 78 fc db fe 74 4f 15 ab 7c 6d fa 44 0c db 19 f4 be e3 6b 06 83 b4 c9 20 ab a8 1e 69 c4 7b 1f 7f 58 b6 96 04 a0 1c 62 a3 fa 93 e5 1d ed 65 f5 34 cd 68 74 11 d7 40 32 c6 a6 75 67 35 0b e9 9a e3 d2 37 2d a6 99 b0 e1 d7 37 fe 56 d0 72 6e fd 23 ff 04 Data Ascii: @p&]w{Wy#U4@ 7/{,=XL1TOvm}+}owSOd1A}uLM/lWZk9lx)b/Xha2tg=^8p=0J7B"\\|[Pxvv%"!'pV-A7xtO\|mDk i{Xbe4ht@2ug57-7Vrn#
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 58 8c e0 dd c2 7d 6b 54 17 96 22 b8 9a ca ff 39 2e 32 d3 da 25 98 a1 8d ca a5 78 92 db ef a7 af e3 8b ba 05 fb 37 c8 4d 5e 0c 23 e7 be 74 9b 1a 79 fb e6 ca cd 08 2f b4 e7 13 61 92 a3 d5 b0 82 e3 26 b3 fa 65 da 04 88 a3 07 89 d1 7c 90 0d c0 37 81 51 d6 96 d8 20 ce 62 ba 51 de be a0 8d 31 9a b5 92 bc 10 5c 8d 94 a1 ae f7 db 81 f0 55 bd 52 1f 61 e4 18 d3 e2 76 ba 1f d1 ff 58 ef 3b ce 70 d9 d7 19 f1 2d 85 5d 4a 84 13 da 53 85 e5 aa d3 f8 21 b9 2a e5 58 0f d3 f1 55 77 c4 24 3a 75 6f f8 d3 c0 e6 7d 10 41 81 3b e3 5a 59 c9 68 9c e4 e6 a1 f2 7b b9 f6 81 79 25 a3 b2 6c d8 ca 4c 8a 52 44 a5 db 3a 39 80 54 bf 39 74 69 1b 07 e3 e6 7b 71 36 71 4a 7b 49 09 dc 16 e6 74 0f e2 33 17 25 6b d1 da 0a 99 c4 78 dc e4 e5 1f 70 15 8b 9f 4d 2f 3b ec cd 95 b1 a1 fa 9f 1a 1c 18 6b Data Ascii: X}kT"9.2%x7M^#ty/a&e\|7Q bQ1\URavX;p-]JS!*XUw$:uo}A;ZYh{y%lLRD:9T9ti{q6qJ{It3%kxpM/;k
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 03 b7 ad 64 1d 55 e5 36 cf a5 95 84 d7 d8 ab c7 4f 7c 5c 41 80 04 91 ef 68 85 a7 f1 df 8e a4 2d 8f 82 cd 4b ad 7d b6 6d dd dd 12 54 5d 17 1e 42 34 9e b6 85 9c 6f 55 08 22 96 39 81 df 2b c0 7e 91 17 6b 0a 87 b7 0c ab d0 13 19 d5 84 18 d0 9b de 22 87 1f 00 50 e2 9c 19 c4 c6 81 ee 35 37 d0 1e 7a c1 f0 05 c2 86 8f 80 3b 28 23 be 2a 61 59 d7 8f 0c d1 81 29 ce 04 e9 1f ea d7 b0 9b be de 6c c0 46 c2 96 a6 31 01 e6 f8 79 09 9d 05 0c e7 20 63 46 17 11 82 90 0f 20 94 5e c9 d4 dd 7c ff 95 c3 9b 11 f7 bf cb 49 dd 2a 5f ec 8f 63 a9 45 d1 3b 36 70 93 59 90 02 3e 61 09 cc 99 7c 36 41 99 9e 9f a7 ff 94 11 bc 92 03 b4 aa 5e 33 2a 04 f6 50 fe f4 90 08 ad b3 66 7f ba 82 6c d0 c8 a2 27 f7 59 46 79 2b 46 c5 bb 5c 92 26 23 c4 71 b5 53 c3 ef 90 51 79 da a7 61 ae 62 01 73 b6 3e Data Ascii: dU6O\|\Ah-K}mT]B4oU"9+~k"P57z;(#aY)lF1y cF ^\|I_cE;6pY>a\|6A^3*Pfl'YFy+F\&#qSQyabs>
2024-10-30 03:01:19 UTC	4096	IN	Data Raw: a0 3e 2e e2 f8 10 af 84 e0 cd 8f c5 e3 b0 7d 8b 8d b8 6c f1 a9 fa 05 7d 1c 58 d0 a1 19 31 31 07 a2 2f 3a d5 56 62 b6 06 0d 17 9b 7d 80 97 f8 da 23 c3 09 5e 81 a7 33 c1 7a ee 1e a0 8c c8 27 ea 7c 0e 89 63 2d 03 99 f4 08 d7 96 56 be e4 45 f7 d7 9c 73 26 41 e1 9e 2b 73 b4 a9 b6 11 b3 e5 55 70 15 6f b0 11 01 9f ed 66 1d 85 cb b7 53 4c 04 9f e7 94 0a ec c6 83 b4 37 bd a2 6e 1a bf 63 d8 0c e7 15 0a 09 dc 9f b0 da 75 fd 3a ef ca 93 3c 94 dd ae 50 7f ad cc 0d 74 5a 1a 3a 8e 91 ff 0d 0e ab 8b ab 9c f9 cc 15 fc e6 05 22 2e f9 7d 37 65 9d 79 8f 58 44 e9 c6 76 30 a9 3b e0 c6 86 5b 04 f4 86 5d 91 b8 eb e2 72 52 b5 40 8b af 21 f1 3a f7 ed c5 6b 9c 84 d8 cb db 1e 25 02 49 7b 02 0d 46 0a 57 e2 f1 6a 14 eb a6 8a 69 f2 f4 8a ea aa 06 07 e6 e7 df e9 a7 11 4f 9c 64 ac 84 23 Data Ascii: >.}l}X11/:Vb}#^3z'\|c-VEs&A+sUpofSL7ncu:<PtZ:".}7eyXDv0;[]rR@!:k%I{FWjiOd#
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 89 6c 63 64 cd 0c da 10 6a db 06 aa fb 54 cb 70 c5 3e e1 15 d6 b0 5e 3e 4d 7d 93 47 e9 1c 45 dc 9a 9d 60 e9 47 d9 78 07 cd 00 01 11 59 11 e0 ed f9 6a 20 0a e9 6e 45 04 42 51 5a 69 17 8e a5 9a 1e 31 69 2e ab 4d dd 16 fb 07 50 e1 2c ae 16 3f fe 31 6c 6a 42 50 47 c0 de 24 0b f4 97 3d 56 40 f0 07 65 f7 5b 5f e4 c8 96 4d 16 b0 aa de f0 7f 51 5d 22 44 7d fa 77 45 93 d5 61 73 21 4d d4 72 3c a7 5c e9 47 51 aa a1 7d a5 e4 ec 8e 92 8f 50 fd 05 8b 1c 3b 7d 3b d6 c3 ab 08 33 16 93 85 78 71 ec b9 de 01 5e d6 13 5c d6 f2 fb a1 96 73 35 1c 6c 1a 49 03 21 65 18 9c 65 13 b9 03 96 41 14 03 5a 00 bc 53 fd ff 5e 00 e3 e7 cf d7 4a a4 12 bc 88 78 25 d2 b9 da 41 36 6b b0 2e b4 cd 5c 62 87 65 61 d4 00 06 2f 5f b8 23 bf c7 c5 a8 56 01 99 21 e5 e2 6f a0 df 9f 7b a1 8f db 65 7e 98 Data Ascii: lcdjTp>^>M}GE`GxYj nEBQZi1i.MP,?1ljBPG$=V@e[_MQ]"D}wEas!Mr<\GQ}P;};3xq^\s5lI!eeAZS^Jx%A6k.\bea/_#V!o{e~
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: be 35 1e 83 71 6e 47 51 5c e7 95 f3 b9 b3 64 08 01 f9 4a a6 e6 c9 1c 25 ac e4 49 87 c9 2a 6f 98 36 05 43 ba 11 f4 6c 49 8f 75 9a 9c 53 df 79 0c aa cb 66 2a 45 01 f2 0b b3 93 fe 77 9c 3d 90 ec 9e e2 aa 5b 01 46 60 11 91 05 fc 8a 2d 54 1e 06 72 b4 e2 b8 35 51 66 21 2e bc df ff 43 aa 65 1c 68 2d 6f 88 2f 7c b3 dc ad 16 da b7 37 3a ed 33 83 48 4e 79 b0 05 be ad 5a 74 f7 bb 4d 63 ae d3 81 10 bb 71 a4 4f 31 aa 7d 22 60 28 5d 7c 81 f3 e4 4b 26 15 18 ed ce 06 df 8b a5 fc ff 1f b9 f7 37 b1 8f 31 1e f5 17 ee a3 23 48 f4 ec d0 1a a2 ce ba 73 21 96 10 a6 42 22 ef 3f 45 16 1a 07 1c c9 09 e8 43 ca 5c 4f 36 5b f2 04 0a 6c 63 58 e2 0d 61 70 20 45 db 05 37 e4 b4 f4 0c bb e7 c8 25 86 06 7f 5d e2 a7 53 f1 06 6a 93 9e 28 f9 47 31 d6 03 89 8c 87 29 d6 03 19 bd 32 74 fd 24 ed Data Ascii: 5qnGQ\dJ%Io6ClIuSyfEw=[F`-Tr5Qf!.Ceh-o/\|7:3HNyZtMcqO1}"`(]\|K&71#Hs!B"?EC\O6[lcXap E7%]Sj(G1)2t$
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 83 af c0 d1 e9 ad f9 72 a9 db b6 f1 75 6e d1 67 f5 de 25 71 30 cf 05 f8 52 6c fb 48 61 50 a1 69 9a c2 d8 88 0a 2d 2a f2 4d d7 0e 75 ba 24 e5 f8 32 e0 32 20 67 22 6d a5 54 55 3a 37 cd 8e d8 ce 5f c8 21 35 ef a3 76 1e 30 3f cd b8 c1 93 7d 0d 0e c7 e4 9b e2 3e 40 9a f3 2c 76 0e 12 50 f6 1a 9f 09 50 6b b4 35 b5 fe e2 ec 3d 2c 5a 87 83 06 80 1e 57 b8 1d e2 8a 68 01 68 ab 52 44 50 5a 28 c7 ee b3 eb 5d ae b1 36 79 8d 67 d0 32 cf c1 87 fd 6a d4 ce bd 3a 4a 44 16 9f 0f 5b c9 f0 0b 58 c8 54 46 b0 9a 53 77 6b 5f 6c 00 18 31 6e ac db db 0e 36 01 f1 0a 55 db 9c 36 e7 aa a0 e1 c2 dc b6 f6 e0 33 90 80 b0 f2 51 07 ff 70 96 84 3a ef 9b bb a9 c7 7d 45 d5 ce ae da 36 98 06 f5 9c 39 8b 81 96 55 bd b2 d9 8d df 9a 9e ce 6e 2d de 8c 38 b5 67 73 ea f6 b7 ff db 00 eb ad ba 3f b4 Data Ascii: rung%q0RlHaPi-*Mu$22 g"mTU:7_!5v0?}>@,vPPk5=,ZWhhRDPZ(]6yg2j:JD[XTFSwk_l1n6U63Qp:}E69Un-8gs?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49766	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	629	OUT	GET /m/f7a19ef0344161c/original/homepage_projects.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	833	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9978 Connection: close Date: Wed, 30 Oct 2024 03:01:18 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="homepage_projects.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 89e6ede1-5916-6b6e-2819-5cdbfd3bac8a Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 920a6dce56a0ee957dbaa3bf4429f8fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: j1VutNOHPzt5IirUr0coO05uyXY8r9oIIPdnhV3I2v3mDzpbtD81qA==
2024-10-30 03:01:18 UTC	9978	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 30 30 30 30 70 72 6f 6a 65 63 74 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Assets/Icons/10000projects</title> <g id="Assets/Icons/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49765	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	628	OUT	GET /m/5c95d78cfeb29b44/original/homepage_brands.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	832	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12874 Connection: close Date: Wed, 30 Oct 2024 03:01:18 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="homepage_brands.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 30046fd1-7e21-6189-d475-19147e517214 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5626bf35345f32d3e58fb8d33ec4d966.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: qIMVDwMx_PF7qUTZHFGeqVEtobajeXyHxJTxcrq1mUE6xNuJucYNmA==
2024-10-30 03:01:19 UTC	12874	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 30 4c 65 67 61 63 79 42 72 61 6e 64 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Assets/Icons/10LegacyBrands</title> <g id="Assets/Icons/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49769	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	666	OUT	GET /app/themes/ovivo/dist/fonts/avenir/e4d36745-a861-4a49-aa17-6510e67429d3.woff2 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.ovivowater.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	1425	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:18 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 22 Jul 2022 16:32:23 GMT ETag: "8e2c-5e46760f533c0" Accept-Ranges: bytes Content-Length: 36396 Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: font/woff2
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 8e 2c 00 10 00 00 00 01 75 30 00 00 8d cd 00 01 05 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 16 8b 60 00 81 4c 08 2c 09 82 62 11 10 0a 84 f7 60 84 de 1f 01 36 02 24 03 87 00 13 94 1a 0b 87 04 00 04 20 05 b7 2d 07 20 0c 84 2a 5b d3 63 71 02 dd 6d 0f 4f 72 3b 30 b7 fa 71 43 2f c8 74 58 16 3d ee 3a c7 96 49 bf 07 0d d4 76 8d 78 db 41 d1 9b 35 fa 2d c8 75 38 fb ff ff f3 92 ca 18 9a 14 97 16 04 44 45 75 fb 21 47 04 b2 cc b2 3a 57 34 e7 5e a8 07 42 5b 86 63 60 d0 16 bb e5 f0 ed 28 8e 03 59 28 92 ce 18 13 85 74 f2 8a 1a 71 59 9e 0f ab 17 63 8e 1c 83 3a 02 eb de cc 81 09 a5 9c e9 77 72 4d 5a 5b c2 bc 16 2d c9 25 31 07 d7 a7 b5 62 9c c7 1b 38 f0 a6 df d6 7e 64 cb 13 6e 63 72 a7 8d e6 37 38 70 b9 1b 22 b1 04 Data Ascii: wOF2,u0``L,b`6$ - *[cqmOr;0qC/tX=:IvxA5-u8DEu!G:W4^B[c`(Y(tqYc:wrMZ[-%1b8~dncr78p"
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: c0 6b 71 95 39 05 28 b2 78 b3 4b bb c0 43 cc ba 6b ed 16 fe 27 54 be ef 3d 0c 58 24 b6 1f 32 2a 89 f5 0c 85 0f 6a 53 13 84 15 40 60 61 80 04 71 a3 b9 93 d1 04 3d 1e 73 93 45 13 2f 78 31 8e 07 90 8d 1a 1f 31 29 29 7f a5 7a 56 52 8f cb f5 a3 6a 89 84 f4 1b f2 13 fd 96 bc 89 ff 80 17 81 61 26 07 80 1e 21 00 8f 58 01 96 69 37 bf 50 05 4c 8e 00 b7 83 ca a8 22 a0 f2 d4 80 48 8f dd 3c e0 3b 2f 85 75 60 e7 87 3f 11 e0 83 ee 0e b1 40 90 a7 20 c6 3d 2d 79 19 c6 6a 71 aa f6 fa b3 c4 27 0a 06 c6 bc b7 94 b2 40 63 9e 52 46 19 22 18 96 bf 3e 83 75 52 90 0d 9b 3e 6b e3 a4 84 91 52 5c d9 8e 90 6f 8a f9 56 e0 dc e8 4e c5 d7 68 7e 6c cb fa 7b 66 b2 5d 2c 8a 90 73 1f 70 a9 f2 d7 6e 70 a5 39 94 2b 67 51 58 13 0e ae 58 52 e8 e0 8f f9 8c af 37 d9 0d 88 ff 2f 8a 9c c4 29 fa b5 Data Ascii: kq9(xKCk'T=X$2*jS@`aq=sE/x11))zVRja&!Xi7PL"H<;/u`?@ =-yjq'@cRF">uR>kR\oVNh~l{f],spnp9+gQXXR7/)
2024-10-30 03:01:18 UTC	3628	IN	Data Raw: f4 71 5c 75 65 b8 3d c6 a0 8f 05 bb 8e 00 7e f2 3d ee f5 9f fc 8a fb f5 0f ca 47 c0 dd 2e 7c f4 f9 2e 18 6c 11 7c f6 3c bf ff 47 a9 b1 f4 2f 0e a0 93 29 40 1e cf 76 bf 2e 5a be 52 fd 72 1c 59 90 5d 70 24 f8 75 89 19 6a 02 32 58 79 80 5f 7a 81 59 df d6 03 89 e0 45 16 a0 ec a7 a6 0a 70 3d 0b 72 37 b1 b6 0a a4 4a 26 6d ff 8c 83 60 e9 af 98 8d 34 99 d8 70 8f 18 c1 af 20 a6 80 65 18 eb 5b 92 16 4b ac f8 fd dc 60 37 0b cc b2 f0 a3 fe 71 87 f0 4a c9 d7 ec a0 af 67 5b c1 7a 50 36 88 8d 7f fc 5a 71 5c 37 ba 42 ea a1 3e 8f 31 eb 44 b0 f5 af c0 1b 9a 5d 01 b1 b6 82 a3 68 ec 80 56 b2 75 cb 8d 81 fb 2c 00 fa 30 03 a3 59 06 eb 31 21 27 30 9b 66 2c 85 d7 63 0c 51 80 af ae 42 84 2e 91 af 0b 85 d0 e9 c1 f8 fd 3c a6 f0 78 fb d2 8e 6f 06 a1 2a 0b 40 34 95 44 23 ed fa 27 0d Data Ascii: q\ue=~=G.\|.l\|<G/)@v.ZRrY]p$uj2Xy_zYEp=r7J&m`4p e[K`7qJg[zP6Zq\7B>1D]hVu,0Y1!'0f,cQB.<xo*@4D#'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49767	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	619	OUT	GET /app/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.2.6 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	1445	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:18 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:47:58 GMT ETag: "17e1-6242f8b39b67b" Accept-Ranges: bytes Content-Length: 6113 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:18 UTC	6113	IN	Data Raw: 2f 2a 2a 0a 20 52 65 73 70 6f 6e 73 69 76 65 20 74 61 62 6c 65 20 63 6f 75 72 74 65 73 79 20 6f 66 20 4d 61 72 6b 20 57 69 6c 74 73 68 69 72 65 3a 20 6d 61 72 6b 40 62 61 6d 62 6f 6f 72 6f 63 6b 65 74 61 70 70 73 2e 63 6f 6d 20 28 74 68 61 6e 6b 73 21 29 0a 0a 20 46 6f 72 20 6d 6f 72 65 20 73 74 79 6c 65 73 20 74 72 79 3a 20 68 74 74 70 3a 2f 2f 69 63 61 6e 74 2e 63 6f 2e 75 6b 2f 63 73 73 74 61 62 6c 65 67 61 6c 6c 65 72 79 2f 0a 20 2d 2d 2d 2d 0a 20 47 65 6e 65 72 69 63 20 73 74 79 6c 65 73 3a 0a 20 48 65 72 65 20 79 6f 75 20 63 6f 75 6c 64 20 65 2e 67 2e 20 63 75 73 74 6f 6d 69 73 65 20 77 69 64 74 68 20 6f 66 20 63 6f 6c 75 6d 6e 20 31 20 61 6e 64 20 32 2c 0a 20 6f 72 20 61 64 64 20 61 20 67 65 6e 65 72 69 63 20 72 6f 6c 6c 2d 6f 76 65 72 20 65 66 66 Data Ascii: /** Responsive table courtesy of Mark Wiltshire: mark@bamboorocketapps.com (thanks!) For more styles try: http://icant.co.uk/csstablegallery/ ---- Generic styles: Here you could e.g. customise width of column 1 and 2, or add a generic roll-over eff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49777	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	638	OUT	GET /m/2db12aa8d12bc551/original/WhereWeTouchWater-627x470.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	813	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 143984 Connection: close Date: Wed, 30 Oct 2024 03:01:18 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="WhereWeTouchWater-627x470.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: c1f8392a-1fcc-ab79-5bef-78fdc8a2cb4a Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 54fc556adf6e8c787574c6f132d70178.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: tbvVhWcnPW4G8w0NG6Umw3DYXWzFr0IA60whyygCSyPmdzGvmy-K8Q==
2024-10-30 03:01:18 UTC	7718	IN	Data Raw: ff d8 ff e1 16 69 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 73 00 00 01 01 00 03 00 00 00 01 01 d6 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 30 33 3a 31 35 20 31 34 3a 34 36 3a 31 32 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: iExifMM*s(12i -'-'Adobe Photoshop 22.3 (Windows)2021:03:15 14:46:120
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c 65 66 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0c 62 6f 74 74 6f 6d 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 72 69 67 68 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 03 38 42 49 4d 04 0c 00 00 00 00 14 ff 00 00 00 01 00 00 00 96 00 00 00 70 00 00 01 c4 00 00 c5 c0 00 00 14 e3 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee Data Ascii: rtAligndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongleftOutsetlongbottomOutsetlongrightOutsetlong8BIM(?8BIM8BIMpAdobe_CM
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: 6b 8c d8 7b c3 2a e6 cc ce b2 d0 52 44 89 a8 a8 79 1a 77 24 2d c1 e0 0b 9f e9 ed 39 90 fe 61 94 e1 96 3c 57 58 54 6b 91 49 12 65 77 14 31 2a 90 45 ef 1d 35 13 bb 01 cd fd 43 da 0f 2f fc c5 f7 44 5a a2 c7 ec 7d b7 14 a2 ea 7c 95 99 1a a5 52 07 d1 b9 8c 13 fe 1e c3 3d c1 fc c3 3b 96 58 6d 89 a6 db 78 d9 5c d8 18 70 c6 a1 90 5b e9 7a 99 e4 04 ff 00 8f b0 ab 25 f3 43 e4 9e 54 3e bd f5 3e 39 1b fb 38 dc 76 32 88 8b f3 65 65 a6 2c 01 b5 b8 37 f6 81 af ef ee f7 cc f9 05 7f 66 ef 09 d1 ac 4a c1 97 a8 85 0b 49 fa 63 02 06 8e c4 0f f5 bd a1 aa b7 2e fc cd 31 39 1d cd b8 eb d8 9e 4d 56 63 23 32 13 7b 81 67 a8 6b 93 fe b5 8f b6 67 c4 e5 aa 03 49 33 4f 2b 0e 6d 23 4d 23 7f 53 72 d7 e0 8f f1 f7 92 3d af 91 96 35 71 04 ba 5d 01 3c 58 ad c2 fe 2c 4d f9 ff 00 6d ee 64 1b Data Ascii: k{RDyw$-9a<WXTkIew1E5C/DZ}\|R=;Xmx\p[z%CT>>98v2ee,7fJIc.19MVc#2{gkgI3O+m#M#Sr=5q]<X,Mmd
2024-10-30 03:01:18 UTC	67	IN	Data Raw: 02 a4 f1 ed bc 76 7e 0e 8e 29 e9 06 76 b2 f3 42 cb 2c 4a aa 43 06 e4 a0 60 2c 09 ff 00 5f 8f 61 2f 67 e7 f1 39 fa 3d b9 1e 36 a6 6a 85 a1 aa aa 9a 41 2c 85 9a 33 50 94 e2 e0 93 fd a3 11 bf b6 f7 a7 27 Data Ascii: v~)vB,JC`,_a/g9=6jA,3P'
2024-10-30 03:01:18 UTC	8192	IN	Data Raw: 0a be a6 54 28 c5 41 fa a8 95 99 8b 7a 40 b8 fc fb 1e ba a1 8c 15 18 27 13 bb 44 29 6a 6a 9a 48 5c 30 8a 6a 60 b2 40 c8 79 d0 c1 8d cf e3 df 1a 1e f7 db 14 99 a1 99 75 ad c8 65 0c 92 c8 d3 d6 03 20 9a 56 36 26 5e 3d 57 23 fa 7d 07 b1 0a a3 e5 7d 14 71 20 38 aa 14 6d 04 3b 45 4a 1a 43 73 7e 4e 9b 12 3f c7 db 5c 1f 2d 1d 91 0c 78 c8 13 c2 e4 82 68 ec 79 36 bb 9d 3c f0 3d b3 e5 7e 56 65 2a 9a 48 a9 28 d8 89 55 e3 91 96 8c ac 63 ca a5 75 0f 41 b6 9f 6b bd af db fb af 35 fe e1 a8 7c 71 50 63 69 a0 97 25 5c f0 e9 58 52 44 06 28 e3 b8 fd da b9 de e1 14 7f a9 2c 78 53 ee 56 7b 71 66 f3 64 25 55 7d 49 82 30 16 28 16 66 58 80 16 bb 32 a1 51 24 8d f9 63 72 7f 1c 71 ed 15 25 3b 82 58 3c a0 fe 08 91 c9 1f 9e 4e ab fb 91 8f cd 67 31 13 2c 94 39 2a c8 b4 9f d0 65 91 d0 Data Ascii: T(Az@'D)jjH\0j`@yue V6&^=W#}}q 8m;EJCs~N?\-xhy6<=~VeH(UcuAk5\|qPci%\XRD(,xSV{qfd%U}I0(fX2Q$crq%;X<Ng1,9e
2024-10-30 03:01:18 UTC	8949	IN	Data Raw: dc 8f 5b 58 36 91 60 c2 c7 dc d1 90 86 40 c9 53 12 ae b5 26 e4 dd 41 61 66 55 36 d5 a0 83 fe 1f 9f 71 e4 a7 82 40 c1 58 fa d6 5d 44 1b 9f df 45 49 1b fd 50 62 a8 2d 7f 78 16 96 c5 64 0c 0b 2c f1 4d cd c7 f9 b8 7c 2c 86 df 87 41 fe c0 fb e3 0b d6 51 c9 1d 4d 15 4c d4 75 51 44 8b 0d 5d 34 b3 53 54 42 d0 c9 e4 81 e2 9a 17 49 23 d2 38 36 61 c7 b1 a7 6f 7c 8d ef 1d b3 1a c3 8f ec 1c a5 6c 08 ff 00 b5 4d b8 56 9b 72 42 81 82 86 87 fd cc c1 59 30 8f f2 34 ba 91 7f 6b d8 be 6a 77 2d 1c 40 d4 c7 b2 32 6f a8 9f 25 4e db 78 24 1c 69 b1 fb 0c 9d 22 9f f5 c2 fb 71 a6 f9 c7 d8 a5 95 b2 3b 1f 61 e4 a1 04 17 8e 1a 7c e5 2c 8c a6 fc ab 1c ad 5a 20 36 b5 ca 10 0f d4 7b 5d e0 fe 64 6c dc b4 9e 3d dd d4 b5 f4 31 dc 19 2b 36 fd 65 1e 44 c6 38 d4 e6 96 7a 5c 2d 43 01 7e 2d 51 Data Ascii: [X6`@S&AafU6q@X]DEIPb-xd,M\|,AQMLuQD]4STBI#86ao\|lMVrBY04kjw-@2o%Nx$i"q;a\|,Z 6{]dl=1+6eD8z\-C~-Q
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: 4a 79 99 6e 0f 17 b8 f7 a9 ef 7e 75 0e 6f a3 fb 43 75 75 fe 5e 9e a9 93 11 5e ef 86 c8 05 61 16 53 6f d5 33 4d 87 c9 c5 7b 83 e7 a4 21 64 ff 00 53 32 3a 9e 57 d8 2c 27 61 20 d3 2c aa c0 de c7 51 b7 d6 c4 13 f4 f7 91 72 15 e8 d6 f3 31 53 c7 3c 92 3f a7 e4 82 7d e4 19 6a a5 bb 15 25 34 8e 35 72 34 fd 18 ff 00 4b fb 70 8f 71 4b 19 5d 71 b5 ad 7f 4d ef 6b 5a fc 9b 1f 6e 11 6e 90 01 52 64 5d 4b c7 d0 f2 78 e0 8f a1 1e e4 45 b9 03 44 8a 65 fa 4b 71 7f ae 91 6b ff 00 b7 b1 f6 ba d9 39 84 ad cd b4 06 4d 5a a8 aa 5c 0b 83 c4 6d 1b 8e 2f 7e 3d 9a 3d b2 15 a8 f1 c9 a4 36 b6 90 2f e2 c7 4b e9 b9 24 fe 6f ee ca fe 3b 4e af 45 8e 7b 7a 63 9d 11 7f c0 92 aa dc f2 6f a9 49 ff 00 58 fb a6 ae c7 ad f0 f6 af 65 c2 4d 8c 7b f7 76 27 17 1c 2e 76 bc 7f 85 f8 1e d1 15 99 15 0c Data Ascii: Jyn~uoCuu^^aSo3M{!dS2:W,'a ,Qr1S<?}j%45r4KpqK]qMkZnnRd]KxEDeKqk9MZ\m/~==6/K$o;NE{zcoIXeM{v'.v
2024-10-30 03:01:18 UTC	1514	IN	Data Raw: ba 62 ee cf 82 3b d3 69 ad 56 e3 eb 08 aa f7 8e d7 f1 bd 4c b8 7f db 93 73 e2 22 55 2e ca d0 22 c4 b9 58 52 20 2c f1 28 72 43 02 83 d1 ac 80 56 50 55 50 d4 4d 4b 55 04 d4 d5 10 3b c5 3d 3c f1 bc 33 45 2a 12 ac 92 c5 22 ab c6 ca c0 de e3 dc 2e 54 df f3 f5 ff 00 7b b7 f4 b7 bf 70 ca 41 b7 27 81 fd 39 b1 1f e0 3f e2 9e cf ff 00 c6 4e 89 ae 6d a4 7b 27 23 47 32 d4 6e 05 9e 3c 0d bf dd 58 48 de 4a 67 ab 08 39 6f e2 15 08 e3 9f ec 46 0f d0 fb 57 ee 5d b3 ba 30 a5 3e ee 94 e4 a9 69 51 e2 56 45 3e 6f 01 20 81 a5 86 a6 0a aa 2d f5 b7 b0 1b 7c d7 cd 15 24 35 54 4a f1 d0 dd e9 73 b4 02 26 15 2b 4f 2a 68 8a b6 39 94 89 62 8a 16 1a 64 03 f0 75 7f 87 b0 b1 30 d4 70 04 92 2c 42 e4 96 4e 52 48 32 83 ed b5 1b 10 f2 85 a7 59 3c 61 4f 3c 8f 6f f4 33 d3 d3 46 e6 bc 52 e3 52 Data Ascii: b;iVLs"U."XR ,(rCVPUPMKU;=<3E".T{pA'9?Nm{'#G2n<XHJg9oFW]0>iQVE>o -\|$5TJs&+Oh9bdu0p,BNRH2Y<aO<o3FRR
2024-10-30 03:01:18 UTC	5921	IN	Data Raw: a5 f5 fb 20 fb 4b b5 77 67 c7 dd c9 0f 48 fc 87 da f0 d0 d5 d6 49 15 16 d5 ed 6c 65 34 bf dd bd cb 8f a4 8f ec a9 2a 8c 8f 4c 90 e8 14 11 c3 e6 92 33 0d 4d 33 6a 5a 88 be b7 3b f4 bb 77 2f 2a ac 91 d1 a0 a6 91 44 d1 48 b2 c7 a2 58 e5 51 24 52 29 56 65 2a ea d7 04 1b 10 6f f9 f7 2d f6 8e 49 9a 39 5b ec d0 29 12 32 79 49 75 d5 c1 1c 03 73 6f f1 f6 eb 4d b3 49 8e f3 e4 52 30 4b 31 54 8e ee b7 b8 0a 75 1e 6c 2f ed ce 2d ab 8c 8d 47 9a a6 a2 5d 3f e0 8a 0f 16 e4 5a ea 3f d8 fb ca 98 2c 24 6c 41 0a e2 e7 4a cb 2f 37 b7 37 e4 59 7f c3 de 76 8b 0d 44 aa cf f6 30 84 fe dc 85 2c 39 b0 61 e4 36 fc 7b 67 ab ec 0d 95 86 93 4e 43 3f b7 e9 63 b6 a9 24 96 bf 1f 16 83 f4 b6 9f 29 90 93 fe 03 da 47 33 f2 0f a9 31 71 3f 9b 77 e1 e6 60 6c 05 24 93 56 b3 7d 3d 20 51 c5 27 d4 Data Ascii: KwgHIle4L3M3jZ;w/DHXQ$R)Ve*o-I9[)2yIusoMIR0K1Tul/-G]?Z?,$lAJ/77YvD0,9a6{gNC?c$)G31q?w`l$V}= Q'
2024-10-30 03:01:18 UTC	8949	IN	Data Raw: 48 b0 ff 00 1b 5b f1 ed de 5c ac 12 26 98 64 8d 87 f6 8a db e9 fe b8 e7 9f 78 20 a8 8c fe 42 82 6f 72 40 fa 1e 79 bd 8f b9 42 b2 15 25 4c aa b6 36 37 61 61 fd 3d c9 fb d8 15 43 34 a9 ea 60 82 c4 7e bb 03 a7 8f a7 03 fd e3 df a4 ca 53 24 4c ea e9 e9 89 a4 04 10 ca ea bc 37 a9 6e 2f 71 ee 4c 12 c3 55 03 f0 da b4 72 84 38 fd 49 a8 00 40 b5 cf b4 95 26 3f 33 3d 0e 4a 99 a2 ac 4a d3 e5 97 1d 3f 8d 9d 61 95 59 8c 70 89 47 24 48 00 1c 9b 0b df da 9b 08 d9 07 c6 ac 19 73 35 2d 7b 44 55 9d 40 12 45 30 16 0e a1 19 95 81 3c db db 88 4a ca 8c 72 53 64 26 a1 ac a8 29 a1 cc 88 e2 36 b9 b6 a1 c2 ba 36 8f a1 1f 43 ee 45 0e 2d a1 a1 14 ab 50 55 d5 2d 14 c0 16 28 d6 3a 58 fa 81 65 07 9e 7e a3 da 86 8e 0a 88 e1 f1 54 4e 92 ba 81 a6 68 d0 c6 cd f8 25 d1 8b 2d ef fd 0f be 21 Data Ascii: H[\&dx Bor@yB%L67aa=C4`~S$L7n/qLUr8I@&?3=JJ?aYpG$Hs5-{DU@E0<JrSd&)66CE-PU-(:Xe~TNh%-!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49778	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	393	OUT	GET /m/4e8b8a8114d09617/original/homepage_countries.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	842	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 26377 Connection: close Date: Wed, 30 Oct 2024 03:01:16 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="homepage_countries.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 06d56cd1-1ec0-f5eb-1ca9-5c1da6f54a2f Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e94c77a12a65a84cbcef7856ed7e0fb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: CH1E7jVXbc_pddwzbRVRUyr4_rTtmnynhdExPYMKCk8DyW1VYJx_Gg== Age: 2
2024-10-30 03:01:18 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 35 43 6f 75 6e 74 72 69 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 35 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Assets/Icons/15Countries</title> <g id="Assets/Icons/15C
2024-10-30 03:01:18 UTC	1514	IN	Data Raw: 35 37 2e 36 34 36 36 2c 33 39 2e 30 39 38 33 20 35 37 2e 30 37 37 36 2c 33 39 2e 33 34 34 33 20 43 35 35 2e 31 32 39 36 2c 34 30 2e 32 30 32 33 20 35 33 2e 36 36 38 36 2c 34 31 2e 37 38 36 33 20 35 32 2e 39 33 36 36 2c 34 33 2e 36 38 30 33 20 43 35 32 2e 34 39 36 36 2c 34 34 2e 38 31 37 33 20 35 32 2e 33 31 39 36 2c 34 36 2e 30 36 34 33 20 35 32 2e 34 35 36 36 2c 34 37 2e 33 33 35 33 20 43 35 32 2e 35 31 33 36 2c 34 37 2e 39 38 39 33 20 35 32 2e 36 35 35 36 2c 34 38 2e 36 33 31 33 20 35 32 2e 38 37 38 36 2c 34 39 2e 32 34 33 33 20 43 35 33 2e 31 30 30 36 2c 34 39 2e 38 35 36 33 20 35 33 2e 34 30 32 36 2c 35 30 2e 34 33 39 33 20 35 33 2e 37 37 38 36 2c 35 30 2e 39 37 38 33 20 43 35 34 2e 39 35 32 36 2c 35 32 2e 36 34 31 33 20 35 36 2e 31 33 30 36 2c 35 34 Data Ascii: 57.6466,39.0983 57.0776,39.3443 C55.1296,40.2023 53.6686,41.7863 52.9366,43.6803 C52.4966,44.8173 52.3196,46.0643 52.4566,47.3353 C52.5136,47.9893 52.6556,48.6313 52.8786,49.2433 C53.1006,49.8563 53.4026,50.4393 53.7786,50.9783 C54.9526,52.6413 56.1306,54
2024-10-30 03:01:18 UTC	8479	IN	Data Raw: 39 36 35 33 20 4c 35 39 2e 32 36 34 36 2c 35 38 2e 37 32 33 33 20 43 35 39 2e 34 33 38 36 2c 35 38 2e 39 39 38 33 20 35 39 2e 36 39 30 36 2c 35 39 2e 32 31 35 33 20 35 39 2e 39 38 37 36 2c 35 39 2e 33 34 37 33 20 4c 36 30 2e 30 38 39 36 2c 35 39 2e 33 38 38 33 20 4c 36 30 2e 36 30 39 36 2c 35 39 2e 33 38 38 33 20 4c 36 30 2e 36 39 38 36 2c 35 39 2e 33 34 39 33 20 43 36 31 2e 30 31 38 36 2c 35 39 2e 32 31 30 33 20 36 31 2e 32 38 36 36 2c 35 38 2e 39 37 34 33 20 36 31 2e 34 36 35 36 2c 35 38 2e 36 37 33 33 20 43 36 33 2e 32 33 31 36 2c 35 36 2e 31 38 30 33 20 36 34 2e 39 39 38 36 2c 35 33 2e 36 38 36 33 20 36 36 2e 37 36 36 36 2c 35 31 2e 31 39 31 33 20 43 36 37 2e 39 34 38 36 2c 34 39 2e 35 38 36 33 20 36 38 2e 34 36 39 36 2c 34 37 2e 35 38 37 33 20 36 38 Data Ascii: 9653 L59.2646,58.7233 C59.4386,58.9983 59.6906,59.2153 59.9876,59.3473 L60.0896,59.3883 L60.6096,59.3883 L60.6986,59.3493 C61.0186,59.2103 61.2866,58.9743 61.4656,58.6733 C63.2316,56.1803 64.9986,53.6863 66.7666,51.1913 C67.9486,49.5863 68.4696,47.5873 68

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49779	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	585	OUT	GET /app/themes/ovivo/resources/assets/scripts/custom.js?ver=6.6.3 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:18 UTC	1458	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:18 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Mon, 21 Oct 2024 09:43:02 GMT ETag: "8a1-624f97a94efc6" Accept-Ranges: bytes Content-Length: 2209 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:18 UTC	2209	IN	Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 6a 51 75 65 72 79 28 22 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2d 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2d 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 2d 74 65 78 74 2d 69 6e 6e 65 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2d 69 6d 61 67 65 20 2e 69 6d 67 2d 62 67 3a 66 69 72 73 74 2d 63 68 69 6c 64 27 29 2e 61 64 64 43 6c 61 73 73 28 27 76 69 73 69 62 6c 65 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 47 65 Data Ascii: jQuery(document).ready(function(){ jQuery(".accordion-scrolling-content-block:first-child .accordion-scrolling-content-block-text-inner").addClass("visible"); jQuery('.accordion-scrolling-image .img-bg:first-child').addClass('visible'); // Ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49780	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	631	OUT	GET /m/66db4c703d1dad5a/original/WhoWeAre_1000X1232.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:20 UTC	806	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 952816 Connection: close Date: Wed, 30 Oct 2024 03:01:19 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="WhoWeAre_1000X1232.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: ec8002fa-69b8-c457-13ca-631be8e5f4a5 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 bfad099b4e1fa2ec7d21876e0293dc20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: pEMIeZaQsGoumup648OfxhiPOcK9LK9KgvElNvvKL0sqg5K4ydNOJA==
2024-10-30 03:01:20 UTC	15578	IN	Data Raw: ff d8 ff e1 2c 25 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 10 00 00 01 03 00 01 00 00 00 7c 15 00 00 01 01 03 00 01 00 00 00 25 0f 00 00 02 01 03 00 03 00 00 00 ce 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 3d 00 00 00 d4 00 00 00 0f 01 02 00 06 00 00 00 11 01 00 00 10 01 02 00 0e 00 00 00 17 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 25 01 00 00 1b 01 05 00 01 00 00 00 2d 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 21 00 00 00 35 01 00 00 32 01 02 00 14 00 00 00 56 01 00 00 3b 01 02 00 0d 00 00 00 6a 01 00 00 69 87 04 00 01 00 00 00 78 01 00 00 fc 03 00 00 08 00 08 00 08 00 57 6f 72 6b 65 72 73 20 6f 6e 20 73 69 74 65 20 6f 66 20 77 61 73 74 65 77 61 74 65 72 20 74 Data Ascii: ,%ExifII*\|%=%-(1!52V;jixWorkers on site of wastewater t
2024-10-30 03:01:20 UTC	406	IN	Data Raw: d9 76 f5 9f 93 f5 1e dc dc 8a b2 72 fa 93 ed b0 39 ce ca 6c 3b 65 fb b7 ed 9a c3 d9 e8 7a 5b ff 00 46 da 9d e9 7b 3f 9a 4a c1 3a f2 e7 ff 00 19 ff 00 bf 4d cb a4 ff 00 19 36 32 be a8 fd 55 ab 5b 89 c6 8e e7 2b 6c 7f db ce 72 cb c9 e8 ff 00 50 e9 61 07 ad 0a ce 9e d1 93 4d 87 9f dd 6d 56 39 5e 6f f8 bc e8 c1 c1 c3 6b 5d dc 8a 81 9f fb 72 c7 ab 1f f3 2b a6 d6 d1 e9 bd c2 08 d0 56 c1 c9 0d f0 43 5e 9c b9 fa ca 11 ff 00 a1 29 ab 8e 7f bf fb 5e 77 ec 5f e2 ff 00 ff 00 2f ed e6 3e 8f fe fb ff 00 d2 49 74 df f3 57 a7 7e f5 ff 00 ce fa 5c 33 8f dd fe 6f ff 00 51 a4 85 4f fc c0 ff 00 c3 7f f4 14 f1 cb f7 ff 00 e6 bf ff d1 d1 fa b9 90 28 c0 dd 5e 2e 3b 72 aa c8 ca c7 b6 ed a1 b6 b9 d4 da 76 7b dd ef fe 6a ca d8 b6 0f 56 c8 36 16 fa 6d 36 31 a5 d6 02 f0 60 7e f3 bf Data Ascii: vr9l;ez[F{?J:M62U[+lrPaMmV9^ok]r+VC^)^w_/>ItW~\3oQO(^.;rv{jV6m61`~
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 8b 4b eb 16 68 e8 fd 40 66 b8 5b fb 42 fc 4c 6f 46 b7 dc 0e 33 cb 6b aa 9c 9a ac a6 a1 f4 2b d9 bb fa 45 7f ac b3 d5 a6 c4 df 70 71 f0 e9 c5 20 3d 16 38 ab f7 b8 51 b7 57 79 ed be eb 0d d7 39 d7 3d d1 b9 ee d5 da 69 fe ad 45 ae be 1c ed 5b c8 70 f2 f0 3f 9a b2 fa 57 d6 fe 87 96 d6 8b ed fb 0d ff 00 9d 56 41 81 3d fd 3c 98 f4 2c 67 fc 67 a1 67 fc 1a d9 c5 cc e9 f9 af 23 0b 22 ab ec 1a 96 53 63 2d 3f db ae 97 bd ff 00 da da 9e a7 a0 e9 9d 52 c3 57 a5 96 7d 7a 62 0d 84 4b 9a 38 db 91 5f f8 4f f8 c5 6f a8 38 e3 e3 8c 9a c8 7d 61 cd 00 93 a6 d7 1d 9b 77 ff 00 25 ce 6e cf ed ac 6a 9a da 0b 6d 73 c0 63 b4 6d ec fc d7 11 f4 2c 67 d2 5a 3d 4e af 53 ea e7 50 dc da de 0e 35 96 36 67 d2 73 98 d3 63 1d fa 3f 77 d2 6f f8 34 94 d5 b3 ab 3a a7 b7 d4 63 58 49 80 4c 99 fe Data Ascii: Kh@f[BLoF3k+Epq =8QWy9=iE[p?WVA=<,ggg#"Sc-?RW}zbK8_Oo8}aw%njmscm,gZ=NSP56gsc?wo4:cXIL
2024-10-30 03:01:20 UTC	8949	IN	Data Raw: f3 7b 0f 7e af 5b eb b2 8d 73 7d 37 16 1c 0f a7 d3 e9 71 f8 fe be fc 08 a6 2b d6 bf 2e bd a3 9b 5c 71 c7 06 ff 00 ec 7e 9c fb f0 3d 78 1e b2 2a 8b 7e 6f cf f8 fd 3e a7 fa 37 fb 1f 75 27 3f 2e bc 7a ed 50 8b 93 63 73 6b 7f b5 1f a1 e3 e9 ef c5 87 90 eb d5 eb 9e 8d 57 fa 83 61 cf e4 5b 9f cf f5 3e eb 5a 7d 9d 6b ae 2a 9c 9b 82 05 c8 52 bf 5b 9f eb f9 1e ec 4e 05 38 f5 ee b9 95 6b dc d9 45 ff 00 a0 2d 71 6e 6e 7f 26 df ec 3d d6 a3 d3 3d 7b ae 64 1b 8e 79 b9 e0 da e0 91 73 ef 5d 7b ae c0 60 09 36 37 b7 04 1b ff 00 87 37 fa ff 00 4f 7b fb 3a f7 5d e9 e7 f0 c3 9b 8b 58 8f a7 d4 da df 5f 7a eb dd 72 00 0f f0 06 ff 00 e0 2f fe bf f8 7b f7 5e eb d6 00 72 07 d4 93 f5 17 fc 5c 7f af ef dd 7b ae d5 07 fb 0f a8 37 e7 fa 11 f5 fa 0f 7b ad 7a f7 5c f4 81 fd 6d f4 1f 50 Data Ascii: {~[s}7q+.\q~=x~o>7u'?.zPcskWa[>Z}kR[N8kE-qnn&=={dys]{`677O{:]X_zr/{^r\{7{z\mP
2024-10-30 03:01:20 UTC	7435	IN	Data Raw: f9 65 77 ff 00 6b 45 45 24 db 26 1d a1 43 53 24 43 ef 73 32 f8 eb 21 8b f5 19 fe d2 00 64 d4 a3 e8 a5 85 ff 00 3e e4 8d 93 d9 2e 6e bf 64 92 f6 25 b6 8c 91 f1 b6 68 78 9a 0e 82 d7 bc f7 cb b6 3e 22 2d cb 4d 20 f2 51 50 7f 3e 1d 59 37 51 ff 00 25 dd 8d 84 8e 86 ab b2 37 56 4b 3d 51 08 47 9a 92 8c a6 3e 92 47 00 12 ad e3 d5 3c 91 9b fe 58 7b 98 b6 8f 63 39 72 d1 a3 97 74 b8 7b 99 00 e0 3b 57 f9 74 04 bf f7 2e fe 50 e9 b7 d9 ac 49 90 0b 64 ff 00 9b ab 2a ea ff 00 86 5d 01 d5 11 27 f7 73 62 e1 d6 a9 74 93 57 51 49 1c f5 4c cb c6 a6 a8 9c 49 2e a1 fe 04 7b 93 f6 ce 56 e5 ed 99 42 ed fb 54 48 d4 a5 68 09 fd a7 a0 4d e6 fd bb ee 2c cd 75 7a e5 4f 90 34 1f b0 74 65 e8 f1 18 8c 74 69 1d 0e 3a 92 99 10 59 44 50 a2 85 0b f4 b1 0b c7 b3 fa d0 00 30 07 45 24 06 a9 39 Data Ascii: ewkEE$&CS$Cs2!d>.nd%hx>"-M QP>Y7Q%7VK=QG>G<X{c9rt{;Wt.PId*]'sbtWQILI.{VBTHhM,uzO4teti:YDP0E$9
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 00 87 fa f6 3e f5 8c 93 d7 80 27 87 5e 24 1b 5f fd e3 fe 47 cf bf 0a 52 a7 87 4e 05 23 3e 7d 77 71 6f f5 c7 36 fe bf ec 4d fd f8 35 4f cb ad 85 a7 5e 17 e0 7f bd dc ff 00 4f c7 fb ef af ba b3 57 03 ad e9 1d 72 fe 82 ff 00 9b df fa 83 f5 ff 00 58 5c fb f6 aa 28 f5 eb da 45 49 eb d6 bd ad f8 37 ff 00 63 f4 e4 70 7d e8 b1 3d 6e 80 57 ae f4 ff 00 af c8 b7 bf 06 23 af 53 ae 5c f1 ee b5 eb 7d 77 a7 fe 23 9e 00 b7 e4 12 7f 20 fb f7 5e eb 90 52 47 f5 e7 8e 48 ff 00 5c ff 00 ac 7d fb af 75 92 d6 ff 00 0e 7f a7 d3 fc 3f c7 df ba f7 5d 85 e7 81 fd 47 d7 fa 92 7e be fd d7 ba ec 5b 8e 3f d6 00 7d 7f de 41 fc 7b f7 5e eb 98 1c b0 e2 ff 00 d6 df e1 fe 1c 0f 7a eb dd 77 63 6b 5e ff 00 d0 83 6b 5b 8f c5 cf d3 de fa f7 5c f4 fe 7e b7 03 fa f3 7f a7 bd 57 af 75 c8 29 ff 00 Data Ascii: >'^$_GRN#>}wqo6M5O^OWrX\(EI7cp}=nW#S\}w# ^RGH\}u?]G~[?}A{^zwck^k[\~Wu)
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 12 41 1c 19 41 ff 00 27 45 63 6e da db 52 cb 64 05 33 50 48 e9 41 4b da 9b a0 4d 24 33 54 e1 e6 68 82 39 8e 7a 05 86 52 1a f7 b8 8e 54 36 b8 16 b5 cf f5 f7 a4 e7 0d d5 59 d2 46 86 a3 f8 96 95 1e b8 3d 78 f2 e6 de e8 24 44 90 03 e8 d5 a7 f2 e9 da 0e d6 dc 29 1f 96 6c 26 16 b6 3b f3 e1 ab 9e 8a 68 b9 b0 0f 14 ac f7 37 36 fa 0f 6f 0e 76 dc d2 3f 10 ed f1 4a 3d 15 8a 9f e7 5e 9b 6e 57 b0 66 d0 2f 25 8f e6 40 61 fc a9 d3 82 f7 34 3a 25 be d9 a9 a9 a9 86 9d a7 6a 3a 2c 8d 3a d4 b8 54 79 16 38 fe ed 23 8b c9 30 8c 84 d6 ea a4 da e4 7b 53 69 ee 0d ac f5 59 76 e9 16 60 2a 54 10 48 ff 00 05 7e 5e bd 35 2f 26 dc a6 96 4b e4 31 13 40 48 34 fe 5e 9e 7d 4c a1 ee dd a1 52 b4 6b 55 47 9b c5 55 d6 e3 e9 f2 3f 65 5d 4f 4e 27 a5 5a a7 48 56 96 a5 d6 a3 ed 96 bd 2a 1c 46 61 Data Ascii: AA'EcnRd3PHAKM$3Th9zRT6YF=x$D)l&;h76ov?J=^nWf/%@a4:%j:,:Ty8#0{SiYv`TH~^5/&K1@H4^}LRkUGU?e]ON'ZHVFa
2024-10-30 03:01:20 UTC	12288	IN	Data Raw: 3c 0e 2c 7e a7 fc 09 fc 7b df 5e eb ab 73 fe f1 7e 6d 7b 7f b0 fc fb f7 5e e9 03 d9 5d 61 b1 7b 7b 69 d6 ec be c2 c0 53 e7 b0 55 81 9e 20 e7 c3 90 c5 56 69 b4 79 3c 2e 42 31 f7 18 cc 94 04 82 b2 21 e6 d6 60 cb 71 ec 9f 7e d8 36 8e 66 db 27 da 37 cb 14 b8 b0 90 65 58 64 1f e2 53 c5 58 79 11 d2 dd bf 71 bc da ee 92 f2 c6 72 93 8f 4e 04 7a 30 e0 47 c8 f5 af cf ca 9f e5 8b bd 76 42 e5 f3 bb 4f 69 50 f7 a7 5f 30 9e 75 a9 a4 c5 42 bd 8f b6 a9 88 2d 6c 9e 3a 94 25 46 4d 69 97 fe 52 a8 8b 31 b5 ca 29 f7 84 1e e1 7d da b7 ad 96 e2 7d d7 92 e4 7b ad bb 89 45 25 67 41 e8 40 c4 80 7a d0 d7 cc 75 35 f2 ff 00 b8 56 3b 80 8e 0d c9 c5 bd ef a9 f8 18 fc 89 e1 f6 1f db d5 18 6f 9f 8e fb 2e 78 32 50 a6 67 78 e0 45 0c b2 35 56 2f 33 4e 32 e2 89 e1 6e 69 aa a2 ad 89 2b a1 8e Data Ascii: <,~{^s~m{^]a{{iSU Viy<.B1!`q~6f'7eXdSXyqrNz0GvBOiP_0uB-l:%FMiR1)}}{E%gA@zu5V;o.x2PgxE5V/3N2ni+
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 7b ae 40 58 7e 3f df 5c ff 00 bc 5f df aa 38 75 ee bb f7 ad 40 79 f5 ee bb fc 7f b0 fe be f4 5f ad f5 cb f0 2f f4 e6 f6 fc ff 00 be b7 bf 16 03 3c 4f 5e eb 98 e3 8b 7e 0f 1f 51 c7 fc 57 de bc 4f 97 5e a7 5d df fa 71 fd 47 e7 fd 7f f6 27 de b5 9a fc ba f5 3a ee fc 7f 8f fb 7f f6 c7 df b5 9a 7c fa f7 5d f1 cf 36 1f 41 fd 7f de 6d ee a1 88 ad 3a f7 5c 97 f0 38 23 f0 7f 3c 7d 3f 3f 8b ff 00 b0 f7 ae bd d7 3b 5f eb f8 ff 00 1f af f4 3f d7 df ba f7 5e f7 ee bd d7 3b 7f 81 b8 b1 ff 00 5f 9f e9 fe c7 df ba df 5d da d6 b0 24 7e 47 f8 91 fd 3d fb ad 75 ca dc 7f b0 e2 ff 00 eb fd 7e 97 f7 ee b6 3a e5 6f eb 7f f7 ae 7f db fb f7 5e eb c0 01 fe 1f f1 af a7 fb cf bf 75 ae bb 03 fa 7f af fe fa ff 00 5f 7e eb dd 77 63 f8 04 58 72 3f af fc 6b df ba f7 5d da e0 1b 5b f1 ff Data Ascii: {@X~?\_8u@y_/<O^~QWO^]qG':\|]6Am:\8#<}??;_?^;_]$~G=u~:o^u_~wcXr?k][
2024-10-30 03:01:20 UTC	1514	IN	Data Raw: 47 f8 71 ed c3 be 4a 0e 54 53 ad 0d a6 13 40 1b 3d 0c 14 1d f7 d7 39 68 69 2a 68 32 de 38 aa da 44 48 6b d3 ed a6 06 26 b4 8e cb 21 05 23 20 12 a4 fe a0 38 f6 84 f3 51 2f a6 24 0c 35 50 e3 f6 f4 a4 f2 fa 05 fd 46 d2 d4 af 1e 84 3a 5d e3 81 aa 4f 34 75 49 34 44 ab 46 f0 b2 b0 10 ba 6b 59 18 b1 0a 01 51 7e 3f 1e c4 10 ee 3e 32 07 50 29 d1 3c b6 1e 1b 10 6b 5e b0 c7 be 30 2c cc af 30 42 a0 c8 0a cb 1c ea d1 6a 2a ae 0c 64 e9 fe a4 7e 01 f6 e7 d7 d3 f0 75 5f a1 af 03 d4 c7 dd 78 a8 56 29 1e 64 8e 29 62 32 c7 34 ae 12 36 03 92 9a ae 54 3e 81 71 fd 7d eb f7 80 fe 0c 75 e1 61 5f c5 d7 18 77 86 2e 51 19 07 48 9d f4 c0 c6 48 ed 25 c5 d4 86 04 a8 25 6f c1 b1 e3 dd bf 78 25 05 54 f5 af a0 6f e2 eb 0d 46 fb c1 52 c9 2c 75 33 f8 bc 3f ae 4b 83 08 3f ea 5e 41 e9 46 07 Data Ascii: GqJTS@=9hih28DHk&!# 8Q/$5PF:]O4uI4DFkYQ~?>2P)<k^0,0Bjd~u_xV)d)b246T>q}ua_w.QHH%%ox%ToFR,u3?K?^AF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49781	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:18 UTC	634	OUT	GET /m/703a6c3b527e687e/original/Ind-TechSol_1000X1232.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:20 UTC	809	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 699127 Connection: close Date: Wed, 30 Oct 2024 03:01:19 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="Ind&TechSol_1000X1232.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: dab78376-9751-deb7-4d43-0e6fcbb202df Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 bafea69ec4368ee11760779ffcfbd4fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: XNzbhTMPD_mXaPsejw52MQKex-Vk2yl3bvaPVinug_R9W_4Fqoy1NA==
2024-10-30 03:01:20 UTC	15575	IN	Data Raw: ff d8 ff e1 24 95 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 12 00 00 01 04 00 01 00 00 00 f0 15 00 00 01 01 04 00 01 00 00 00 a0 0e 00 00 02 01 03 00 03 00 00 00 e6 00 00 00 03 01 03 00 01 00 00 00 05 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0f 01 02 00 06 00 00 00 ec 00 00 00 10 01 02 00 15 00 00 00 f2 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 07 01 00 00 1b 01 05 00 01 00 00 00 0f 01 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 21 00 00 00 17 01 00 00 32 01 02 00 14 00 00 00 38 01 00 00 3b 01 02 00 19 00 00 00 4c 01 00 00 98 82 02 00 18 00 00 00 65 01 00 00 69 87 04 00 01 00 00 00 80 01 00 00 90 03 00 00 08 00 08 00 08 00 43 61 6e 6f 6e 00 43 Data Ascii: $ExifII*(1!28;LeiCanonC
2024-10-30 03:01:20 UTC	406	IN	Data Raw: 13 fc 1b f9 2c 0c 46 5f 76 77 d6 5c 2f 5b 1d 94 d5 90 70 1c f2 0d 6f 73 9f 6e 2b 58 cd ec dd 75 8d a1 fe b5 9b 2e df eb 2e db a9 74 fe 9d d3 dd 67 50 a7 1c 36 cb 25 b9 18 e0 45 64 59 b7 d4 cb 73 1b b6 df 5d 8d fd 0b fd 2b 59 57 a3 67 f3 6b 0b 2f a4 9b 31 f3 73 59 8e cb 6e c6 a0 7d 96 a6 35 c0 02 dd ad 15 57 45 6f d9 e9 fd 9e a6 6c a6 8f dc 4f c7 90 c4 51 17 b7 5e ac 46 16 2c 9d 5d 11 6d 35 7d 56 7b 98 f6 d8 cb da 43 76 fb 5c d7 dc 5b 8f 65 76 d5 66 d7 6f a2 db 2d b2 fb 19 5f a6 fa aa f5 bd 36 7a a8 1f 57 72 3d 5c ac 8c 3d ee 2c ae 80 ff 00 4c bd f1 ee 7b 99 ba bc 6f e6 9b f4 7f 9e 6f e9 95 1e 99 d3 7a 5e 4f 44 cd bb 2b 1e b6 75 56 07 17 ee 2e 16 b6 a2 df 53 17 73 2c 7f fa 5a ff 00 39 bf 4d 68 f4 67 5d d3 3e d3 99 95 43 9b d3 ac ae 8f d3 35 8e 2e 0e 0e 75 Data Ascii: ,F_vw\/[posn+Xu..tgP6%EdYs]+YWgk/1sYn}5WEolOQ^F,]m5}V{Cv\[evfo-_6zWr=\=,L{ooz^OD+uV.Ss,Z9Mhg]>C5.u
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: f6 dc 0c 9c 2c 1e 8e ec 9f b3 d6 6d 37 0c 7d c3 7b dc f1 65 ae bb d2 fa 6e 74 ad ef aa 54 66 b6 f6 59 7b 1e cf 5a 7d 8e 98 34 11 a3 df f9 bf 4f da c6 ab 96 74 eb e9 e9 f7 d6 d2 1f 90 e7 58 fa 9d 54 81 ef 3e cd df 47 77 3e f5 a3 48 75 15 64 35 ec 70 ae aa 9a d0 40 9d d0 d3 bb d3 fd e4 bd c3 c2 63 5f 35 1b 57 0d 91 2d 74 1b 79 b9 9f 64 e9 3f c9 fe 7f d3 e7 f3 7f d1 72 92 c1 fb 26 2f 8b ff 00 98 fd cf f0 7f bf ff 00 1b ff 00 06 92 6a ea 7f ff d3 e9 b1 eb 75 58 5e bf ad b9 ef 3b dc c8 10 27 b0 40 cd ea 15 57 8b 76 d9 dc 2b 99 d2 24 85 9b d2 ba be 3f 52 b7 d3 a0 98 d8 e6 09 e0 b9 be d5 46 d7 64 bc 5d 82 75 b8 82 1a 09 80 00 f1 71 53 4c 11 be 8c 60 8a fc 1d fb ac 70 c6 c7 e9 d5 3b d1 af 22 87 03 60 d5 c0 c3 60 fb be 97 d2 53 7e 6d b4 e1 ba d0 fd c1 81 ad 07 c6 Data Ascii: ,m7}{entTfY{Z}4OtXT>Gw>Hud5p@c_5W-tyd?r&/juX^;'@Wv+$?RFd]uqSL`p;"``S~m
2024-10-30 03:01:20 UTC	8949	IN	Data Raw: 3f a5 bd b8 26 a6 63 85 45 78 1e 27 ad f8 41 86 a6 95 98 8f 2f 2e a1 48 2a 2a 0d eb ab 6a eb 2e 49 64 94 81 1a 86 fe c8 50 06 9b 7f 4f 6d 3b c9 21 fd 57 27 ec e9 c5 2a b8 a0 04 7f 3e bc 22 8e 35 0a 15 00 16 e1 4d ed c9 b3 9f f6 1c 7b 60 a6 a2 69 d5 c3 96 c3 70 eb 20 6e 79 20 69 5e 19 7f 1f f1 b3 ed b2 b4 24 8e b4 c4 7c 23 e1 1d 71 62 2c 5c a1 29 c5 f4 73 cf 02 e0 fe 6f 7f 6d 95 e1 5e ac ae 28 03 0c 8e bd 72 00 05 78 02 cc 42 df f5 03 6b 30 fc fe 0f bd e8 af 01 9e 9c d4 2a 0a b0 1d 74 94 f3 4a 05 a3 63 75 1c 01 eb b0 36 e1 8d 82 8f f0 f7 ef 0d 8d 46 9a 8e ac d2 c6 bf 8b ac 92 d1 68 52 65 74 8e ca 0f ee 32 ab 1f ea b6 bf 24 0f a0 f7 a1 6e 4f c4 00 e9 bf 14 30 aa 82 47 c8 74 d7 3d 7e 26 94 8b c8 6a 25 51 72 ab ca 8b 7d 48 37 e2 ff 00 9f 75 91 61 87 b9 a4 14 Data Ascii: ?&cEx'A/.H*j.IdPOm;!W'>"5M{`ip ny i^$\|#qb,\)som^(rxBk0*tJcu6FhRet2$nO0Gt=~&j%Qr}H7ua
2024-10-30 03:01:20 UTC	7435	IN	Data Raw: 72 18 1d 25 4e 9b 3f 02 dc 70 6f f5 ff 00 5b dd 94 2d 0f af 56 e9 92 aa 46 23 4d c1 36 f5 03 cf 3f d2 f6 3c 1b fb f2 81 e7 c7 a6 dc 12 54 0e 9a 24 20 7a 0e a6 36 25 49 bd 89 b7 d1 6d f4 b1 1f 9f c7 bd f5 61 80 a3 cf a6 f9 1d 4f 36 2a e4 8b 16 f5 2d bf da 8d ce a0 c4 7b d1 1d 5a 99 c7 1a 75 02 56 03 55 c9 05 cd 81 fe 84 70 48 1f d9 5e 3f db 7b d3 75 ee 9b 66 7d 3c 92 4a 13 a5 7e a7 d4 38 16 ff 00 0b 7f b7 f7 5e bd d3 74 fa 79 36 3c 92 a1 85 f4 b5 87 21 47 f8 5b de fa b2 e0 f4 d7 33 9e 0a 8e 4a 9b 5a da 97 fa 82 0f 26 fe eb a4 6a 27 cf ab 7c ba 4f 54 5b 4b 9e 45 ec 02 f1 73 ea 3f b8 49 e6 c3 eb 63 ee c3 af 27 9f 41 de e0 0b e3 97 56 bf ed 03 60 a3 80 09 e6 d6 bd ff 00 db 7b 6a 4f 8b e5 4e 9e 1c 08 f9 74 5b 37 4f d6 60 0f d7 53 03 f8 02 df d9 fc 2f ba 48 33 Data Ascii: r%N?po[-VF#M6?<T$ z6%ImaO6*-{ZuVUpH^?{uf}<J~8^ty6<!G[3JZ&j'\|OT[KEs?Ic'AV`{jONt[7O`S/H3
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 83 fa 92 7d de 49 71 92 4f 5a 48 41 20 53 3d 27 32 55 8b 4c 6e 5b d3 73 61 73 70 7f a7 fa c7 da 49 2f 11 54 e7 3d 2e 5b 60 33 4c 8e 92 95 5b 84 41 76 32 2a 98 c1 20 1b 7a ad 63 cf 3f 9b fb 44 37 09 2a 00 1a be 5d 3f f4 cb c0 d3 d7 fd 43 a9 b8 cd f9 8a 94 8a 79 ea 22 8e 67 1a 54 49 c2 ea fa 72 7f 4d fd ba eb 24 c8 5a 20 75 79 af 9f 54 a1 8f e2 fd bd 46 dc 15 f1 49 4b 30 15 31 b2 b4 6c 0b 24 88 ca aa 41 3a ac a4 8e 4f 1e cb d9 ae 78 02 ca 7e ce 9e 8e 87 b9 69 ab e7 d5 72 f7 5e 06 aa 7a a9 f2 58 99 64 52 11 fc e5 2f 66 65 bd a4 40 3f 53 01 ec f3 6c e6 ad f7 6a 51 1c 57 35 4a f9 f4 e4 d6 f6 77 7f ee 44 20 b8 18 23 a2 15 9d ef 5d f3 d5 f5 d1 d7 35 64 d5 98 ba 6a 88 bc f1 dc a4 f1 45 e5 0a ef a4 1b 38 45 3f 43 f8 1e e5 1e 5c f7 2a 19 2e 63 b3 e6 2b 35 30 48 42 Data Ascii: }IqOZHA S='2ULn[saspI/T=.[`3L[Av2* zc?D7]?Cy"gTIrM$Z uyTFIK01l$A:Ox~ir^zXdR/fe@?SljQW5JwD #]5djE8E?C\.c+50HB
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 55 15 e9 82 af 20 b1 06 fd c5 17 04 92 58 5c df f4 ff 00 88 b7 bd 00 3c eb f9 75 e0 c3 8b 1c ff 00 3e 82 4d dd 9f a3 81 58 bc eb 6d 2c 08 2e 2c df d1 6f fd 01 fa 1f 6b 21 8d a8 75 0d 23 cb aa 34 83 2c 4e 3f 9f 40 63 ef cc 62 57 f3 59 06 ad 56 54 32 2f ea bd 81 bd f8 20 7b d4 a9 40 7b 3f 3e 99 12 8c 71 a7 43 4e d7 de 58 f9 60 52 2b 23 b1 06 e4 30 37 24 10 c1 ac 7f 41 b7 b4 5a 69 4a a9 af 57 f1 90 9a 16 cf 4e 79 3f e1 b9 86 d4 d3 46 c8 dc 30 24 58 7e 6d 63 f8 ff 00 1f 77 0c 57 85 47 4e f8 b8 00 52 9d 39 60 d7 1d 8a 89 63 a6 96 33 cf d0 9f a7 e7 52 91 c5 b8 f7 62 c5 b8 9c 75 e0 40 3d 0a 9b 72 29 32 ee 02 90 c4 b0 17 fa d8 0f a3 71 f9 f6 79 b5 ed 89 31 59 1a a5 3e 7d 25 ba bb f0 56 80 d3 a1 77 0f b3 04 ce c8 c0 df ea 78 b7 1f 5f e9 f4 f6 25 93 6f b6 b6 45 2a Data Ascii: U X\<u>MXm,.,ok!u#4,N?@cbWYVT2/ {@{?>qCNX`R+#07$AZiJWNy?F0$X~mcwWGNR9`c3Rbu@=r)2qy1Y>}%Vwx_%oE*
2024-10-30 03:01:20 UTC	8192	IN	Data Raw: 1a be 9e dc bb e7 af 09 de 1d bb 6e a2 a9 d2 19 da b5 03 15 20 70 af a5 71 d1 56 dd cb fb 85 f5 9d ad de e5 ba 30 92 68 d5 ca c4 34 85 0c 01 d2 0f 9d 38 57 ab 0b eb 8f 86 7f 19 ba 9d d3 fb 99 d4 db 4e 92 74 55 51 59 36 2e 1a 9a a2 14 7d 4c b3 f9 3d 4d ec 96 eb 9b 77 db a5 a0 b9 f0 85 38 26 07 46 90 f2 b6 c9 11 ac 90 19 9c 79 c8 49 cf cb a3 1b 41 45 41 8b 51 06 33 1d 43 8e 89 54 05 4a 4a 58 29 c0 fc 7a 44 31 a5 80 b7 b2 19 a5 9e e2 ad 71 3b b9 f9 b1 3f e1 e8 ea 18 a1 b6 1e 1d bc 28 89 f2 00 75 26 62 ed 58 9a d9 98 e8 00 7d 40 04 ff 00 a9 fe be e9 1a a8 81 b4 8a 67 a7 1c 33 4a ad 5c 01 d7 a4 41 73 f5 e2 fc 7f 8d bf a5 f8 f7 e5 3d b8 e1 d6 a8 47 5c 34 06 b9 ff 00 53 a4 81 f9 f5 5a fc fb dd 70 07 97 5a e3 e7 8e b9 c6 2e 5c 9e 2c 18 0b fa bf 07 e9 fe c3 df 98 Data Ascii: n pqV0h48WNtUQY6.}L=Mw8&FyIAEAQ3CTJJX)zD1q;?(u&bX}@g3J\As=G\4SZpZ.\,
2024-10-30 03:01:20 UTC	12288	IN	Data Raw: b7 7a f7 ac f6 e5 45 12 d4 e2 d6 79 25 a1 8b 37 95 df 49 90 77 ce 35 29 55 9d a3 71 10 7b e9 00 58 7b 13 c1 bc 72 8c 31 f8 0b cb 4c e4 7e 39 9c 97 3f 33 a0 81 4a f0 a7 97 4e bd b3 49 aa 48 f7 0d 07 f8 74 e3 fe 2f a2 0f b6 ff 00 9c b7 f3 46 f8 1d da bb 77 e3 f7 f3 42 eb 7c 1c 3b 6f 37 50 b4 98 ce eb da f4 3a f2 d5 51 d4 cd e2 4c c7 f1 ca 68 93 69 e7 28 28 d9 b5 cb 4d 48 9f 72 11 4f 3e d6 49 07 2f ee 31 1b ad ab 6e 4f a8 02 9a 6a e1 07 da a4 d4 1f 2a f0 e9 0d d4 1b 8d b8 82 65 bb 0d 08 3e 83 ba 9e 44 d3 1f e0 af 5b 01 6d cf 9f 33 f5 e6 4b ab df e4 63 6c e9 ba 7f bd 32 18 dc 6f 54 fc 9d d8 52 cf 47 d7 91 e5 f3 34 8b 51 82 db 1d 8f 45 95 99 ea f6 e6 47 2d 11 50 2b e4 78 e8 45 43 88 78 66 1e c9 21 b1 b4 dc 9a 7b 7d b4 49 16 e7 0a 16 6b 79 08 3e 25 0e 7c 16 18 Data Ascii: zEy%7Iw5)Uq{X{r1L~9?3JNIHt/FwB\|;o7P:QLhi((MHrO>I/1nOj*e>D[m3Kcl2oTRG4QEG-P+xECxf!{}Iky>%\|
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 1c 0e 2f 7b fb 11 b7 86 b8 24 e3 3d 26 44 60 1b 41 cd 3a 76 db b9 15 af 9a 59 1e 86 34 21 8f 00 fd 4f e1 c7 1e c2 9b f5 fc 49 19 8d 7c c6 7a 5d 67 04 b2 cb a8 0c 53 a1 93 66 2c 12 d7 c4 ab 12 19 1a 54 d6 2d a8 21 0d c8 b7 d6 ed 7e 3d 82 67 dd 22 14 d5 50 bd 1c c5 6e 47 78 03 57 56 01 b5 b0 ec 29 29 44 88 86 39 a1 57 d2 0f 3a 2d 63 cd ae 1a dc 5b d9 23 5e ab d5 93 8d 7a 39 11 37 87 85 fb 7a 13 b0 9b 6a 34 99 64 48 58 21 61 a0 93 f8 36 bf 1c ff 00 5f a7 b6 be a9 5f 04 d0 74 96 45 01 08 0b 9e 84 fa a4 8a 8a 9e 9a 27 4d 37 23 48 2b 61 72 2c 3f db fb 4c 1c 02 7e 7d 37 1c 79 01 b8 74 8f dd 74 1a a9 03 10 4e a0 a0 00 df 86 1f 42 7e bf 5f 6a a0 98 03 a6 95 ea f3 25 14 91 c2 9d 14 cd cf 49 49 06 49 23 92 c2 46 ab 89 01 b0 b2 5e 55 b9 04 5e df e1 ee 44 d9 02 aa 6a Data Ascii: /{$=&D`A:vY4!OI\|z]gSf,T-!~=g"PnGxWV))D9W:-c[#^z97zj4dHX!a6__tE'M7#H+ar,?L~}7yttNB~_j%III#F^U^Dj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49782	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	392	OUT	GET /m/824ce34e97ecc0e/original/homepage_employees.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	841	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 4713 Connection: close Date: Wed, 30 Oct 2024 03:01:17 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="homepage_employees.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: c949a798-d0c4-396f-5459-e0f491576db3 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 59439a13f6db75e801a63663b4f79372.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: SLqFeehmyREnvJ6Ye76Hb0laAzixqyk2tZwJwoUQv-jdHdI6M4t2_Q== Age: 2
2024-10-30 03:01:19 UTC	4713	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 39 35 30 45 6d 70 6c 6f 79 65 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Assets/Icons/950Employees</title> <defs> <polygo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49783	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	590	OUT	GET /app/themes/ovivo/resources/assets/scripts/libs/drupal.js?ver=6.6.3 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	1460	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:19 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Thu, 25 Jul 2024 10:23:17 GMT ETag: "5c0e-61e0fc88707f0" Accept-Ranges: bytes Content-Length: 23566 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 40 66 69 6c 65 0d 0a 20 2a 20 44 65 66 69 6e 65 73 20 74 68 65 20 44 72 75 70 61 6c 20 4a 61 76 61 53 63 72 69 70 74 20 41 50 49 2e 0d 0a 20 2a 2f 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 41 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 2c 20 74 79 70 69 63 61 6c 6c 79 20 74 68 65 20 72 65 74 75 72 6e 20 76 61 6c 75 65 20 66 72 6f 6d 20 61 20 60 24 28 73 65 6c 65 63 74 6f 72 29 60 20 63 61 6c 6c 2e 0d 0a 20 2a 0d 0a 20 2a 20 48 6f 6c 64 73 20 61 6e 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 6f 72 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 73 2e 0d 0a 20 2a 0d 0a 20 2a 20 40 74 79 70 65 64 65 66 20 7b 6f 62 6a 65 63 74 7d 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 40 70 72 6f 70 20 7b 6e 75 6d 62 65 Data Ascii: /** * @file * Defines the Drupal JavaScript API. //* * A jQuery object, typically the return value from a `$(selector)` call. * * Holds an HTMLElement or a collection of HTMLElements. * * @typedef {object} jQuery * * @prop {numbe
2024-10-30 03:01:19 UTC	7182	IN	Data Raw: 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 20 67 69 76 65 6e 20 55 52 4c 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 69 74 65 27 73 20 62 61 73 65 20 55 52 4c 2c 20 6f 72 20 68 61 73 20 61 20 70 61 74 68 20 75 6e 64 65 72 20 74 68 65 20 73 69 74 65 27 73 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 62 61 73 65 20 55 52 4c 2e 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 62 73 6f 6c 75 74 65 55 72 6c 20 3d 3d 3d 20 62 61 73 65 55 72 6c 20 7c 7c 20 61 62 73 6f 6c 75 74 65 55 72 6c 2e 69 6e 64 65 78 4f 66 28 60 24 7b 62 61 73 65 55 72 6c 7d 2f 60 29 20 3d 3d 3d 20 30 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 46 6f 72 6d 61 74 73 20 61 20 73 74 72 69 6e 67 20 63 6f 6e 74 61 69 6e 69 6e 67 20 61 20 63 6f Data Ascii: // The given URL matches the site's base URL, or has a path under the site's // base URL. return absoluteUrl === baseUrl \|\| absoluteUrl.indexOf(`${baseUrl}/`) === 0; }; /** * Formats a string containing a co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49785	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	595	OUT	GET /app/themes/ovivo/resources/assets/scripts/libs/theme-merge.js?ver=6.6.3 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	1462	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:19 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Thu, 25 Jul 2024 10:23:18 GMT ETag: "7bc8b-61e0fc892cf94" Accept-Ranges: bytes Content-Length: 507019 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 76 61 72 20 66 6c 75 73 68 50 65 6e 64 69 6e 67 3d 21 31 2c 66 6c 75 73 68 69 6e 67 3d 21 31 2c 71 75 65 75 65 3d 5b 5d 2c 6c 61 73 74 46 6c 75 73 68 65 64 49 6e 64 65 78 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 73 63 68 65 64 75 6c 65 72 28 74 29 7b 71 75 65 75 65 4a 6f 62 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 71 75 65 75 65 4a 6f 62 28 74 29 7b 71 75 65 75 65 2e 69 6e 63 6c 75 64 65 73 28 74 29 7c 7c 71 75 65 75 65 2e 70 75 73 68 28 74 29 2c 71 75 65 75 65 46 6c 75 73 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 65 71 75 65 75 65 4a 6f 62 28 74 29 7b 6c 65 74 20 65 3d 71 75 65 75 65 2e 69 6e 64 65 78 4f 66 28 74 29 3b 65 21 3d 3d 2d 31 26 26 65 3e 6c 61 73 74 46 6c 75 73 68 65 64 49 6e 64 65 78 26 26 71 75 65 75 65 2e 73 70 6c 69 63 65 28 65 2c 31 29 7d 66 Data Ascii: var flushPending=!1,flushing=!1,queue=[],lastFlushedIndex=-1;function scheduler(t){queueJob(t)}function queueJob(t){queue.includes(t)\|\|queue.push(t),queueFlush()}function dequeueJob(t){let e=queue.indexOf(t);e!==-1&&e>lastFlushedIndex&&queue.splice(e,1)}f
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 74 28 74 2c 73 65 74 53 74 79 6c 65 73 29 3b 6c 65 74 20 69 3d 21 65 2e 69 6e 63 6c 75 64 65 73 28 22 69 6e 22 29 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 22 6f 75 74 22 29 26 26 21 72 2c 6e 3d 69 7c 7c 65 2e 69 6e 63 6c 75 64 65 73 28 22 69 6e 22 29 7c 7c 5b 22 65 6e 74 65 72 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 2c 73 3d 69 7c 7c 65 2e 69 6e 63 6c 75 64 65 73 28 22 6f 75 74 22 29 7c 7c 5b 22 6c 65 61 76 65 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 3b 65 2e 69 6e 63 6c 75 64 65 73 28 22 69 6e 22 29 26 26 21 69 26 26 28 65 3d 65 2e 66 69 6c 74 65 72 28 28 64 2c 5f 29 3d 3e 5f 3c 65 2e 69 6e 64 65 78 4f 66 28 22 6f 75 74 22 29 29 29 2c 65 2e 69 6e 63 6c 75 64 65 73 28 22 6f 75 74 22 29 26 26 21 69 26 26 28 65 3d 65 2e 66 69 6c 74 65 72 28 28 64 2c 5f Data Ascii: t(t,setStyles);let i=!e.includes("in")&&!e.includes("out")&&!r,n=i\|\|e.includes("in")\|\|["enter"].includes(r),s=i\|\|e.includes("out")\|\|["leave"].includes(r);e.includes("in")&&!i&&(e=e.filter((d,_)=>_<e.indexOf("out"))),e.includes("out")&&!i&&(e=e.filter((d,_
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 21 3d 3d 6e 26 26 21 65 26 26 74 72 61 63 6b 28 69 2c 22 68 61 73 22 2c 74 29 2c 21 65 26 26 74 72 61 63 6b 28 69 2c 22 68 61 73 22 2c 6e 29 2c 74 3d 3d 3d 6e 3f 72 2e 68 61 73 28 74 29 3a 72 2e 68 61 73 28 74 29 7c 7c 72 2e 68 61 73 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 69 7a 65 28 74 2c 65 3d 21 31 29 7b 72 65 74 75 72 6e 20 74 3d 74 2e 5f 5f 76 5f 72 61 77 2c 21 65 26 26 74 72 61 63 6b 28 74 6f 52 61 77 28 74 29 2c 22 69 74 65 72 61 74 65 22 2c 49 54 45 52 41 54 45 5f 4b 45 59 29 2c 52 65 66 6c 65 63 74 2e 67 65 74 28 74 2c 22 73 69 7a 65 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 28 74 29 7b 74 3d 74 6f 52 61 77 28 74 29 3b 63 6f 6e 73 74 20 65 3d 74 6f 52 61 77 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 67 65 74 50 72 6f 74 6f 28 65 29 2e Data Ascii: !==n&&!e&&track(i,"has",t),!e&&track(i,"has",n),t===n?r.has(t):r.has(t)\|\|r.has(n)}function size(t,e=!1){return t=t.__v_raw,!e&&track(toRaw(t),"iterate",ITERATE_KEY),Reflect.get(t,"size",t)}function add(t){t=toRaw(t);const e=toRaw(this);return getProto(e).
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 61 72 69 61 62 6c 65 73 28 65 2c 64 2c 62 2c 61 29 3b 69 28 6d 3d 3e 66 2e 70 75 73 68 28 6d 29 2c 7b 73 63 6f 70 65 3a 7b 69 6e 64 65 78 3a 62 2c 2e 2e 2e 5f 7d 7d 29 2c 68 2e 70 75 73 68 28 5f 29 7d 29 3b 65 6c 73 65 20 66 6f 72 28 6c 65 74 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 6c 65 74 20 64 3d 67 65 74 49 74 65 72 61 74 69 6f 6e 53 63 6f 70 65 56 61 72 69 61 62 6c 65 73 28 65 2c 61 5b 62 5d 2c 62 2c 61 29 3b 69 28 5f 3d 3e 66 2e 70 75 73 68 28 5f 29 2c 7b 73 63 6f 70 65 3a 7b 69 6e 64 65 78 3a 62 2c 2e 2e 2e 64 7d 7d 29 2c 68 2e 70 75 73 68 28 64 29 7d 6c 65 74 20 79 3d 5b 5d 2c 63 3d 5b 5d 2c 70 3d 5b 5d 2c 67 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 62 3d 30 3b 62 3c 6c 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 6c 65 74 20 64 3d 6c Data Ascii: ariables(e,d,b,a);i(m=>f.push(m),{scope:{index:b,..._}}),h.push(_)});else for(let b=0;b<a.length;b++){let d=getIterationScopeVariables(e,a[b],b,a);i(_=>f.push(_),{scope:{index:b,...d}}),h.push(d)}let y=[],c=[],p=[],g=[];for(let b=0;b<l.length;b++){let d=l
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 61 5b 75 5d 2c 64 2c 5f 2c 6d 2c 76 2c 78 2c 54 2c 45 2c 41 2c 6b 3b 69 66 28 21 62 29 7b 69 66 28 6b 3d 72 2e 67 72 69 64 3d 3d 3d 22 61 75 74 6f 22 3f 30 3a 28 72 2e 67 72 69 64 7c 7c 5b 31 2c 5f 62 69 67 4e 75 6d 24 31 5d 29 5b 31 5d 2c 21 6b 29 7b 66 6f 72 28 45 3d 2d 5f 62 69 67 4e 75 6d 24 31 3b 45 3c 28 45 3d 67 5b 6b 2b 2b 5d 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 29 26 26 6b 3c 75 3b 29 3b 6b 2d 2d 7d 66 6f 72 28 62 3d 61 5b 75 5d 3d 5b 5d 2c 64 3d 6c 3f 4d 61 74 68 2e 6d 69 6e 28 6b 2c 75 29 2a 66 2d 2e 35 3a 6e 25 6b 2c 5f 3d 6b 3d 3d 3d 5f 62 69 67 4e 75 6d 24 31 3f 30 3a 6c 3f 75 2a 79 2f 6b 2d 2e 35 3a 6e 2f 6b 7c 30 2c 45 3d 30 2c 41 3d 5f 62 69 67 4e 75 6d 24 31 2c 54 3d 30 3b 54 3c 75 3b 54 Data Ascii: a[u],d,_,m,v,x,T,E,A,k;if(!b){if(k=r.grid==="auto"?0:(r.grid\|\|[1,_bigNum$1])[1],!k){for(E=-_bigNum$1;E<(E=g[k++].getBoundingClientRect().left)&&k<u;);k--}for(b=a[u]=[],d=l?Math.min(k,u)f-.5:n%k,_=k===_bigNum$1?0:l?uy/k-.5:n/k\|0,E=0,A=_bigNum$1,T=0;T<u;T
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 20 74 68 69 73 2e 5f 72 44 65 6c 61 79 3d 69 2c 5f 6f 6e 55 70 64 61 74 65 54 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 74 68 69 73 29 2c 6e 3f 74 68 69 73 2e 74 69 6d 65 28 6e 29 3a 74 68 69 73 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 44 65 6c 61 79 7d 2c 65 2e 79 6f 79 6f 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 74 68 69 73 2e 5f 79 6f 79 6f 3d 69 2c 74 68 69 73 29 3a 74 68 69 73 2e 5f 79 6f 79 6f 7d 2c 65 2e 73 65 65 6b 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 5f 70 61 72 73 65 50 6f 73 69 74 69 6f 6e 24 31 28 74 68 69 73 2c 69 29 2c 5f 69 73 4e 6f 74 46 61 6c 73 65 28 6e 29 29 7d 2c 65 2e 72 65 73 74 61 72 74 Data Ascii: this._rDelay=i,_onUpdateTotalDuration(this),n?this.time(n):this}return this._rDelay},e.yoyo=function(i){return arguments.length?(this._yoyo=i,this):this._yoyo},e.seek=function(i,n){return this.totalTime(_parsePosition$1(this,i),_isNotFalse(n))},e.restart
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 2c 73 74 61 67 67 65 72 2c 64 65 6c 61 79 2c 64 75 72 61 74 69 6f 6e 2c 70 61 75 73 65 64 2c 73 63 72 6f 6c 6c 54 72 69 67 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5f 73 74 61 67 67 65 72 50 72 6f 70 73 54 6f 53 6b 69 70 5b 74 5d 3d 31 7d 29 3b 76 61 72 20 54 77 65 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 5f 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 65 2c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 69 2c 6e 2c 73 2c 61 29 7b 76 61 72 20 6f 3b 74 79 70 65 6f 66 20 6e 3d 3d 22 6e 75 6d 62 65 72 22 26 26 28 73 2e 64 75 72 61 74 69 6f 6e 3d 6e 2c 6e 3d 73 2c 73 3d 6e 75 6c 6c 29 2c 6f 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 61 3f 6e 3a 5f 69 6e 68 65 72 69 74 44 65 66 61 75 6c 74 73 28 6e 29 29 7c 7c 74 68 69 73 3b 76 61 72 20 Data Ascii: ,stagger,delay,duration,paused,scrollTrigger",function(t){return _staggerPropsToSkip[t]=1});var Tween=function(t){_inheritsLoose(e,t);function e(i,n,s,a){var o;typeof n=="number"&&(s.duration=n,n=s,s=null),o=t.call(this,a?n:_inheritDefaults(n))\|\|this;var
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 73 69 6f 6e 3d 67 73 61 70 24 32 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 31 32 2e 32 22 3b 5f 63 6f 72 65 52 65 61 64 79 3d 31 3b 5f 77 69 6e 64 6f 77 45 78 69 73 74 73 24 32 28 29 26 26 5f 77 61 6b 65 28 29 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 30 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 31 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 32 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 33 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 34 3b 5f 65 61 73 65 4d 61 70 2e 4c 69 6e 65 61 72 3b 5f 65 61 73 65 4d 61 70 2e 51 75 61 64 3b 5f 65 61 73 65 4d 61 70 2e 43 75 62 69 63 3b 5f 65 61 73 65 4d 61 70 2e 51 75 61 72 74 3b 5f 65 61 73 65 4d 61 70 2e 51 75 69 6e 74 3b 5f 65 61 73 65 4d 61 70 2e 53 74 72 6f 6e 67 3b 5f 65 61 73 65 4d 61 70 2e 45 6c 61 73 74 69 Data Ascii: sion=gsap$2.version="3.12.2";_coreReady=1;_windowExists$2()&&_wake();_easeMap.Power0;_easeMap.Power1;_easeMap.Power2;_easeMap.Power3;_easeMap.Power4;_easeMap.Linear;_easeMap.Quad;_easeMap.Cubic;_easeMap.Quart;_easeMap.Quint;_easeMap.Strong;_easeMap.Elasti
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 78 4f 66 66 73 65 74 2c 64 3d 69 2e 79 4f 66 66 73 65 74 2c 5f 3d 69 2e 66 6f 72 63 65 43 53 53 2c 6d 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 29 2c 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 2c 78 2c 54 2c 45 2c 41 2c 6b 3b 6c 3d 70 61 72 73 65 46 6c 6f 61 74 28 6c 29 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 68 29 2c 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 66 26 26 28 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 68 2b 3d 66 2c 6c 2b 3d 66 29 2c 6c 7c 7c 68 3f 28 6c 2a 3d 5f 44 45 47 32 52 41 44 2c 68 2a 3d 5f 44 45 47 32 52 41 44 2c 78 3d 4d 61 74 68 2e 63 6f 73 28 6c 29 2a 79 2c 54 3d 4d 61 74 68 2e 73 69 6e 28 6c 29 2a 79 2c 45 3d 4d 61 74 68 2e 73 69 6e 28 6c 2d 68 29 2a 2d 63 2c 41 3d 4d 61 74 68 2e 63 6f 73 28 6c 2d 68 29 2a 63 2c 68 26 Data Ascii: xOffset,d=i.yOffset,_=i.forceCSS,m=parseFloat(a),v=parseFloat(o),x,T,E,A,k;l=parseFloat(l),h=parseFloat(h),f=parseFloat(f),f&&(f=parseFloat(f),h+=f,l+=f),l\|\|h?(l=_DEG2RAD,h=_DEG2RAD,x=Math.cos(l)y,T=Math.sin(l)y,E=Math.sin(l-h)-c,A=Math.cos(l-h)c,h&
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 5d 5b 30 5d 2b 3d 44 2e 76 5b 77 5d 5b 30 5d 2c 44 2e 6f 5b 77 5d 5b 31 5d 2b 3d 44 2e 76 5b 77 5d 5b 31 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 44 2c 77 29 7b 76 61 72 20 4d 3d 77 3f 77 2e 73 70 6c 69 74 28 22 2e 22 29 3a 5b 31 30 30 2c 31 30 30 2c 31 30 30 5d 3b 72 65 74 75 72 6e 20 44 5b 30 5d 3e 4d 5b 30 5d 3f 21 30 3a 4d 5b 30 5d 3e 44 5b 30 5d 3f 21 31 3a 44 5b 31 5d 3e 4d 5b 31 5d 3f 21 30 3a 4d 5b 31 5d 3e 44 5b 31 5d 3f 21 31 3a 44 5b 32 5d 3e 4d 5b 32 5d 3f 21 30 3a 4d 5b 32 5d 3e 44 5b 32 5d 3f 21 31 3a 6e 75 6c 6c 7d 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 3d 5b 34 2c 34 2c 31 34 5d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 53 29 7b 76 61 72 20 50 3d 53 2e 74 2e 64 3b 53 2e 74 2e 64 3d 7b 6b 3a 5b 7b 73 3a 50 2c 74 3a 30 7d Data Ascii: ][0]+=D.v[w][0],D.o[w][1]+=D.v[w][1]}function T(D,w){var M=w?w.split("."):[100,100,100];return D[0]>M[0]?!0:M[0]>D[0]?!1:D[1]>M[1]?!0:M[1]>D[1]?!1:D[2]>M[2]?!0:M[2]>D[2]?!1:null}var E=function(){var D=[4,4,14];function w(S){var P=S.t.d;S.t.d={k:[{s:P,t:0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49784	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	561	OUT	GET /app/themes/ovivo/dist/scripts/main.js HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	1462	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:19 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Tue, 21 Feb 2023 09:12:15 GMT ETag: "90aa7-5f5322cfb8b4d" Accept-Ranges: bytes Content-Length: 592551 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 73 29 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 6d 6f 64 75 6c 65 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 7b 7d 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 72 65 71 75 69 72 65 20 66 75 6e 63 74 69 6f 6e 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 20 7b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 6d 6f 64 75 6c 65 20 69 73 20 69 6e Data Ascii: /****/ (function(modules) { // webpackBootstrap/**/ // The module cache/**/ var installedModules = {};/**//**/ // The require function/**/ function __webpack_require__(moduleId) {/**//****/ // Check if module is in
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 49 6e 69 74 74 65 64 2c 0a 20 20 20 20 5f 64 6f 63 2c 0a 20 20 20 20 5f 67 6c 6f 62 61 6c 73 20 3d 20 7b 7d 2c 0a 20 20 20 20 5f 69 6e 73 74 61 6c 6c 53 63 6f 70 65 20 3d 20 7b 7d 2c 0a 20 20 20 20 5f 63 6f 72 65 52 65 61 64 79 2c 0a 20 20 20 20 5f 69 6e 73 74 61 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 73 74 61 6c 6c 28 73 63 6f 70 65 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 28 5f 69 6e 73 74 61 6c 6c 53 63 6f 70 65 20 3d 20 5f 6d 65 72 67 65 28 73 63 6f 70 65 2c 20 5f 67 6c 6f 62 61 6c 73 29 29 20 26 26 20 67 73 61 70 3b 0a 7d 2c 0a 20 20 20 20 5f 6d 69 73 73 69 6e 67 50 6c 75 67 69 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 6d 69 73 73 69 6e 67 50 6c 75 67 69 6e 28 70 72 6f 70 65 72 74 79 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 72 65 74 75 72 6e Data Ascii: Initted, _doc, _globals = {}, _installScope = {}, _coreReady, _install = function _install(scope) { return (_installScope = _merge(scope, _globals)) && gsap;}, _missingPlugin = function _missingPlugin(property, value) { return
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 6e 65 20 64 6f 69 6e 67 20 61 20 74 69 6d 65 6c 69 6e 65 2e 73 65 65 6b 28 30 29 20 61 6e 64 20 74 68 65 72 65 27 73 20 61 20 63 61 6c 6c 62 61 63 6b 20 74 68 61 74 20 73 69 74 73 20 61 74 20 30 2e 20 53 69 6e 63 65 20 65 76 65 6e 74 73 20 61 72 65 20 73 75 70 70 72 65 73 73 65 64 20 6f 6e 20 74 68 61 74 20 73 65 65 6b 28 29 20 62 79 20 64 65 66 61 75 6c 74 2c 20 6e 6f 74 68 69 6e 67 20 77 69 6c 6c 20 66 69 72 65 2c 20 62 75 74 20 77 68 65 6e 20 74 68 65 20 70 6c 61 79 68 65 61 64 20 6d 6f 76 65 73 20 6f 66 66 20 6f 66 20 74 68 61 74 20 70 6f 73 69 74 69 6f 6e 2c 20 74 68 65 20 63 61 6c 6c 62 61 63 6b 20 73 68 6f 75 6c 64 20 66 69 72 65 2e 20 54 68 69 73 20 62 65 68 61 76 69 6f 72 20 69 73 20 77 68 61 74 20 70 65 6f 70 6c 65 20 69 6e 74 75 69 74 69 76 65 Data Ascii: ne doing a timeline.seek(0) and there's a callback that sits at 0. Since events are suppressed on that seek() by default, nothing will fire, but when the playhead moves off of that position, the callback should fire. This behavior is what people intuitive
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 20 20 20 20 20 69 6c 3b 0a 0a 20 20 20 20 70 72 6f 67 72 65 73 73 20 3d 3d 3d 20 74 72 75 65 20 26 26 20 28 6d 75 74 61 74 65 20 3d 20 31 29 20 26 26 20 28 70 72 6f 67 72 65 73 73 20 3d 20 6e 75 6c 6c 29 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 53 74 72 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 73 74 61 72 74 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 70 3a 20 73 74 61 72 74 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 65 6e 64 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 70 3a 20 65 6e 64 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 5f 69 73 41 72 72 61 79 28 73 74 61 72 74 29 20 26 26 20 21 5f 69 73 41 72 72 61 79 28 65 6e 64 29 29 20 7b 0a 20 20 20 20 20 20 69 6e 74 65 72 70 6f 6c 61 74 6f 72 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 Data Ascii: il; progress === true && (mutate = 1) && (progress = null); if (isString) { start = { p: start }; end = { p: end }; } else if (_isArray(start) && !_isArray(end)) { interpolators = [];
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 5f 70 72 6f 70 61 67 61 74 65 59 6f 79 6f 45 61 73 65 28 63 68 69 6c 64 2e 74 69 6d 65 6c 69 6e 65 2c 20 69 73 59 6f 79 6f 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 65 61 73 65 20 3d 20 63 68 69 6c 64 2e 5f 65 61 73 65 3b 0a 20 20 20 20 20 20 20 20 63 68 69 6c 64 2e 5f 65 61 73 65 20 3d 20 63 68 69 6c 64 2e 5f 79 45 61 73 65 3b 0a 20 20 20 20 20 20 20 20 63 68 69 6c 64 2e 5f 79 45 61 73 65 20 3d 20 65 61 73 65 3b 0a 20 20 20 20 20 20 20 20 63 68 69 6c 64 2e 5f 79 6f 79 6f 20 3d 20 69 73 59 6f 79 6f 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 68 69 6c 64 20 3d 20 63 68 69 6c 64 2e 5f 6e 65 78 74 3b 0a 20 20 7d 0a 7d 2c 0a 20 20 20 20 5f 70 61 72 73 65 45 61 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: _propagateYoyoEase(child.timeline, isYoyo); } else { ease = child._ease; child._ease = child._yEase; child._yEase = ease; child._yoyo = isYoyo; } } child = child._next; }}, _parseEase = function
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 28 61 6e 69 6d 61 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 74 69 6d 65 20 3d 20 61 6e 69 6d 61 74 69 6f 6e 2e 5f 73 74 61 72 74 20 2b 20 74 69 6d 65 20 2f 20 28 61 6e 69 6d 61 74 69 6f 6e 2e 5f 74 73 20 7c 7c 20 31 29 3b 0a 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 20 3d 20 61 6e 69 6d 61 74 69 6f 6e 2e 5f 64 70 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 69 6d 65 3b 0a 20 20 7d 3b 0a 0a 20 20 5f 70 72 6f 74 6f 2e 72 65 70 65 61 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 72 65 70 65 61 74 28 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 69 66 20 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 72 65 70 65 61 74 20 3d 20 76 61 6c 75 65 20 3d 3d 3d 20 49 6e 66 69 6e 69 74 79 20 3f 20 2d 32 20 3a Data Ascii: (animation) { time = animation._start + time / (animation._ts \|\| 1); animation = animation._dp; } return time; }; _proto.repeat = function repeat(value) { if (arguments.length) { this._repeat = value === Infinity ? -2 :
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 61 6e 20 65 78 74 72 65 6d 65 20 65 64 67 65 20 63 61 73 65 20 2d 20 74 68 65 20 63 68 69 6c 64 27 73 20 72 65 6e 64 65 72 20 63 6f 75 6c 64 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 6b 69 6c 6c 28 29 20 74 68 65 20 22 6e 65 78 74 22 20 6f 6e 65 20 69 6e 20 74 68 65 20 6c 69 6e 6b 65 64 20 6c 69 73 74 2c 20 6f 72 20 72 65 70 61 72 65 6e 74 20 69 74 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 20 77 65 20 6d 75 73 74 20 72 65 2d 69 6e 69 74 69 61 74 65 20 74 68 65 20 77 68 6f 6c 65 20 72 65 6e 64 65 72 20 74 6f 20 62 65 20 73 61 66 65 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6e 64 65 72 28 74 6f 74 61 6c 54 69 6d 65 2c 20 73 75 70 70 72 65 73 73 45 Data Ascii: // an extreme edge case - the child's render could do something like kill() the "next" one in the linked list, or reparent it. In that case we must re-initiate the whole render to be safe. return this.render(totalTime, suppressE
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 68 69 6e 20 61 20 70 6c 75 67 69 6e 20 74 6f 6f 2c 20 74 68 75 73 20 22 74 68 69 73 22 20 77 6f 75 6c 64 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 70 6c 75 67 69 6e 2e 0a 0a 20 20 72 65 74 75 72 6e 20 70 74 3b 0a 7d 2c 0a 20 20 20 20 5f 61 64 64 50 72 6f 70 54 77 65 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 61 64 64 50 72 6f 70 54 77 65 65 6e 28 74 61 72 67 65 74 2c 20 70 72 6f 70 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 69 6e 64 65 78 2c 20 74 61 72 67 65 74 73 2c 20 6d 6f 64 69 66 69 65 72 2c 20 73 74 72 69 6e 67 46 69 6c 74 65 72 2c 20 66 75 6e 63 50 61 72 61 6d 29 20 7b 0a 20 20 5f 69 73 46 75 6e 63 74 69 6f 6e 28 65 6e 64 29 20 26 26 20 28 65 6e 64 20 3d 20 65 6e 64 28 69 6e 64 65 78 20 7c 7c 20 30 2c 20 74 61 72 67 65 74 2c 20 74 61 72 67 65 74 Data Ascii: hin a plugin too, thus "this" would refer to the plugin. return pt;}, _addPropTween = function _addPropTween(target, prop, start, end, index, targets, modifier, stringFilter, funcParam) { _isFunction(end) && (end = end(index \|\| 0, target, target
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 7c 20 5b 5d 3b 0a 20 20 20 20 5f 74 68 69 73 33 2e 5f 70 74 4c 6f 6f 6b 75 70 20 3d 20 5b 5d 3b 20 2f 2f 50 72 6f 70 54 77 65 65 6e 20 6c 6f 6f 6b 75 70 2e 20 41 6e 20 61 72 72 61 79 20 63 6f 6e 74 61 69 6e 69 6e 67 20 61 6e 20 6f 62 6a 65 63 74 20 66 6f 72 20 65 61 63 68 20 74 61 72 67 65 74 2c 20 68 61 76 69 6e 67 20 6b 65 79 73 20 66 6f 72 20 65 61 63 68 20 74 77 65 65 6e 69 6e 67 20 70 72 6f 70 65 72 74 79 0a 0a 20 20 20 20 5f 74 68 69 73 33 2e 5f 6f 76 65 72 77 72 69 74 65 20 3d 20 6f 76 65 72 77 72 69 74 65 3b 0a 0a 20 20 20 20 69 66 20 28 6b 65 79 66 72 61 6d 65 73 20 7c 7c 20 73 74 61 67 67 65 72 20 7c 7c 20 5f 69 73 46 75 6e 63 4f 72 53 74 72 69 6e 67 28 64 75 72 61 74 69 6f 6e 29 20 7c 7c 20 5f 69 73 46 75 6e 63 4f 72 53 74 72 69 6e 67 28 64 65 Data Ascii: \| []; _this3._ptLookup = []; //PropTween lookup. An array containing an object for each target, having keys for each tweening property _this3._overwrite = overwrite; if (keyframes \|\| stagger \|\| _isFuncOrString(duration) \|\| _isFuncOrString(de
2024-10-30 03:01:19 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 5f 67 65 74 53 65 74 74 65 72 28 74 61 72 67 65 74 2c 20 70 72 6f 70 65 72 74 79 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 5f 69 73 46 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 5b 70 72 6f 70 65 72 74 79 5d 29 20 3f 20 5f 73 65 74 74 65 72 46 75 6e 63 20 3a 20 5f 69 73 55 6e 64 65 66 69 6e 65 64 28 74 61 72 67 65 74 5b 70 72 6f 70 65 72 74 79 5d 29 20 26 26 20 74 61 72 67 65 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 20 3f 20 5f 73 65 74 74 65 72 41 74 74 72 69 62 75 74 65 20 3a 20 5f 73 65 74 74 65 72 50 6c 61 69 6e 3b 0a 7d 2c 0a 20 20 20 20 5f 72 65 6e 64 65 72 50 6c 61 69 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 72 65 6e 64 65 72 50 6c 61 69 6e 28 72 61 74 69 6f 2c 20 64 61 74 61 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 64 61 74 61 Data Ascii: unction _getSetter(target, property) { return _isFunction(target[property]) ? _setterFunc : _isUndefined(target[property]) && target.setAttribute ? _setterAttribute : _setterPlain;}, _renderPlain = function _renderPlain(ratio, data) { return data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49787	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	403	OUT	GET /app/themes/ovivo/resources/assets/scripts/custom.js?ver=6.6.3 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	1458	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:19 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Mon, 21 Oct 2024 09:43:02 GMT ETag: "8a1-624f97a94efc6" Accept-Ranges: bytes Content-Length: 2209 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:19 UTC	2209	IN	Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 6a 51 75 65 72 79 28 22 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2d 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2d 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 2d 74 65 78 74 2d 69 6e 6e 65 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 76 69 73 69 62 6c 65 22 29 3b 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 61 63 63 6f 72 64 69 6f 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2d 69 6d 61 67 65 20 2e 69 6d 67 2d 62 67 3a 66 69 72 73 74 2d 63 68 69 6c 64 27 29 2e 61 64 64 43 6c 61 73 73 28 27 76 69 73 69 62 6c 65 27 29 3b 0a 0a 20 20 20 20 2f 2f 20 47 65 Data Ascii: jQuery(document).ready(function(){ jQuery(".accordion-scrolling-content-block:first-child .accordion-scrolling-content-block-text-inner").addClass("visible"); jQuery('.accordion-scrolling-image .img-bg:first-child').addClass('visible'); // Ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49788	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	651	OUT	GET /app/plugins/cookie-law-info/legacy/public/images/logo-cookieyes.svg HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	1426	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:19 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:47:58 GMT ETag: "a15-6242f8b39b67b" Accept-Ranges: bytes Content-Length: 2581 Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: image/svg+xml
2024-10-30 03:01:19 UTC	2581	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	104.22.1.204	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	536	OUT	GET /apps/app/dist/js/app.js HTTP/1.1 Host: acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:19 GMT Content-Type: application/javascript Content-Length: 390508 Connection: close expires: Thu, 30 Oct 2025 03:01:19 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Tue, 29 Oct 2024 15:47:33 GMT etag: "0719dec86bcd3822363511015c70e8c5" x-goog-generation: 1730216853766384 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 390508 x-goog-hash: crc32c=v14fXQ== x-goog-hash: md5=BxneyGvNOCI2NREBXHDoxQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: AHmUCY2tDC1EfwC6KTGTnZv8OCx5KBR7Xxwd2VHJi6cIvxLn--3Ce4hgUwxdQD7Fcm4gB8qlCEWBRTM5UA CF-Cache-Status: HIT Age: 28 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8da828fddc546b8f-DFW
2024-10-30 03:01:19 UTC	528	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 7b 72 65 74 65 6e 74 69 6f 6e 50 65 72 69 6f 64 44 61 79 73 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 74 2c 64 61 79 73 42 65 66 6f 72 65 4e 6f 74 69 63 65 3a 69 2c 70 72 6f 64 75 63 74 4e 61 6d 65 3a 73 2c 76 65 72 73 69 6f 6e 3a 6e 2c 69 67 6e 6f 72 65 50 61 74 74 65 72 6e 3a 61 7d 29 7b 69 66 28 61 2e 73 6f 6d 65 28 28 65 3d 3e 52 65 67 45 78 70 28 65 29 2e 74 65 73 74 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 29 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 28 2d 31 2a 28 44 61 74 65 2e 6e 6f 77 28 29 2d 74 2d 32 34 2a 65 2a 36 30 2a 36 30 2a 31 65 33 29 2f 38 36 34 65 35 29 2e 74 6f 46 69 78 65 64 28 32 29 3b 72 3c 3d 69 26 26 72 3e 3d 30 3f 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e Data Ascii: !function({retentionPeriodDays:e,timestamp:t,daysBeforeNotice:i,productName:s,version:n,ignorePattern:a}){if(a.some((e=>RegExp(e).test(document.currentScript.src))))return;const r=(-1(Date.now()-t-24e6060*1e3)/864e5).toFixed(2);r<=i&&r>=0?console.warn
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 61 74 74 65 72 6e 3a 5b 22 2f 5e 28 3f 21 2e 2a 76 5c 5c 64 2b 5c 5c 2e 5c 5c 64 2b 5c 5c 2e 5c 5c 64 2b 29 2e 2a 2f 22 5d 7d 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 33 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 73 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 76 61 6c 75 65 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 69 3d 74 26 26 65 5b 74 5d 2c 73 3d 30 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 29 3b 69 66 28 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 Data Ascii: attern:["/^(?!.v\\d+\\.\\d+\\.\\d+)./"]}),(()=>{"use strict";var e={301:function(e,t,i){var s=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,i=t&&e[t],s=0;if(i)return i.call(e);if(e&&"number"==typeof e.length)return{ne
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 3d 64 2e 6e 65 78 74 28 29 3b 21 75 2e 64 6f 6e 65 3b 75 3d 64 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 68 3d 75 2e 76 61 6c 75 65 3b 65 2e 70 75 72 69 66 79 49 66 72 61 6d 65 57 69 6e 64 6f 77 28 68 29 7d 7d 63 61 74 63 68 28 65 29 7b 61 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 75 26 26 21 75 2e 64 6f 6e 65 26 26 28 72 3d 64 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 61 2e 65 72 72 6f 72 7d 7d 65 2e 6f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 74 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 72 65 74 75 72 6e 20 65 2e 70 75 72 69 66 79 49 66 72 61 6d 65 57 69 6e 64 6f 77 Data Ascii: =d.next();!u.done;u=d.next()){var h=u.value;e.purifyIframeWindow(h)}}catch(e){a={error:e}}finally{try{u&&!u.done&&(r=d.return)&&r.call(d)}finally{if(a)throw a.error}}e.observer.observe(t.document.body,{childList:!0,subtree:!0})}return e.purifyIframeWindow
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 65 6e 74 73 5b 74 5d 3b 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 7d 7d 7d 63 61 74 63 68 28 65 29 7b 6e 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 75 26 26 21 75 2e 64 6f 6e 65 26 26 28 61 3d 64 2e 72 65 74 75 72 6e 29 26 26 61 2e 63 61 6c 6c 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 2e 65 72 72 6f 72 7d 7d 7d 2c 65 78 74 65 6e 64 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 2c 6f 2c 6c 3d 69 2e 72 65 66 2c 63 3d 69 2e 74 61 72 67 65 74 52 65 66 2c 64 3d 74 2e 6e 61 6d 65 73 2c 75 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 2c 68 3d 74 2e 70 6f 73 74 4d 65 74 68 6f 64 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 5b 75 5d 5b 65 2e 50 72 65 66 69 78 2b Data Ascii: ents[t];c.apply(this,e)}}}catch(e){n={error:e}}finally{try{u&&!u.done&&(a=d.return)&&a.call(d)}finally{if(n)throw n.error}}},extendObject:function(t,i){var r,o,l=i.ref,c=i.targetRef,d=t.names,u=t.constructorName,h=t.postMethod,p=function(t){c[u][e.Prefix+
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 57 69 74 68 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 72 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 57 69 6e 64 6f 77 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 57 69 74 68 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 72 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 72 Data Ascii: eStrategies.extendPrototypeWithImplementation,implementation:r.EventDelegator.addEventListener},{names:["removeEventListener"],constructorName:"Window",replaceStrategy:e.ReplaceStrategies.extendPrototypeWithImplementation,implementation:r.EventDelegator.r
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 65 6e 74 45 6c 65 6d 65 6e 74 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 4e 6f 64 65 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 72 65 64 75 63 65 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 41 72 72 61 79 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 6b 65 79 73 22 2c 22 76 61 6c 75 65 73 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 4f 62 6a 65 63 74 22 2c 70 6f 73 74 4d 65 74 68 6f 64 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: entElement"],constructorName:"Node",replaceStrategy:e.ReplaceStrategies.extendPrototype},{names:["reduce"],constructorName:"Array",replaceStrategy:e.ReplaceStrategies.extendPrototype},{names:["keys","values"],constructorName:"Object",postMethod:function(e
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 3a 22 77 69 6e 64 6f 77 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 70 65 72 74 79 7d 5d 2c 65 2e 6f 62 73 65 72 76 65 72 3d 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 6e 2c 61 2c 72 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 73 28 74 29 2c 6c 3d 6f 2e 6e 65 78 74 28 29 3b 21 6c 2e 64 6f 6e 65 3b 6c 3d 6f 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 63 3d 6c 2e 76 61 6c 75 65 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 64 3d 28 61 3d 76 6f 69 64 20 30 2c 73 28 63 2e 61 64 64 65 64 4e 6f 64 65 73 29 29 2c 75 3d 64 2e 6e 65 78 74 28 29 3b 21 75 2e 64 6f 6e 65 3b 75 3d 64 2e 6e 65 78 74 28 29 29 Data Ascii: :"window",replaceStrategy:e.ReplaceStrategies.extendProperty}],e.observer=new MutationObserver((function(t){var i,n,a,r;try{for(var o=s(t),l=o.next();!l.done;l=o.next()){var c=l.value;try{for(var d=(a=void 0,s(c.addedNodes)),u=d.next();!u.done;u=d.next())
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 30 2c 6e 29 29 2c 73 5b 6e 5d 3d 74 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 73 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 2c 72 2c 6f 2c 6c 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 69 28 65 2e 65 76 65 6e 74 73 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 Data Ascii: 0,n)),s[n]=t[n]);return e.concat(s\|\|Array.prototype.slice.call(t))};Object.defineProperty(t,"__esModule",{value:!0}),t.EventDelegator=void 0;var a=function(){function e(){}return e.handleEvent=function(t){var a,r,o,l;try{for(var c=i(e.events),d=c.next();!
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 74 7d 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 29 29 7d 7d 2c 65 2e 65 76 65 6e 74 73 3d 5b 7b 7d 2c 7b 7d 5d 2c 65 2e 61 63 74 69 76 65 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 2c 65 2e 6e 6f 6e 42 75 62 62 6c 69 6e 67 45 76 65 6e 74 73 3d 5b 22 66 6f 63 75 73 22 2c 22 62 6c 75 72 22 2c 22 66 6f 63 75 73 69 6e 22 2c 22 66 6f 63 75 73 6f 75 74 22 2c 22 63 68 61 6e 67 65 22 5d 2c 65 7d 28 29 3b 74 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 3d 61 7d 7d 2c 74 3d 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 20 69 28 73 29 7b 76 61 72 20 6e 3d 74 5b 73 5d Data Ascii: r((function(e){return e!==t})),document.removeEventListener(t,e.handleEvent,{capture:!0})))}},e.events=[{},{}],e.activeListeners=[],e.nonBubblingEvents=["focus","blur","focusin","focusout","change"],e}();t.EventDelegator=a}},t={};!function i(s){var n=t[s]
2024-10-30 03:01:19 UTC	1369	IN	Data Raw: 72 65 61 64 65 72 20 6d 6f 64 65 20 69 73 20 6f 6e 2c 20 61 6c 74 2b 38 20 74 6f 20 63 61 6e 63 65 6c 22 2c 44 45 4c 45 54 45 44 5f 4e 55 4d 42 45 52 3a 22 57 61 73 22 2c 41 43 43 4f 55 4e 54 3a 22 41 63 63 6f 75 6e 74 22 2c 53 43 52 4f 4c 4c 3a 22 53 63 72 6f 6c 6c 20 50 61 67 65 22 2c 53 45 41 52 43 48 3a 22 53 65 61 72 63 68 22 2c 4f 52 44 45 52 3a 22 4f 72 64 65 72 22 2c 53 55 42 4d 49 54 3a 22 53 75 62 6d 69 74 22 2c 54 49 4d 45 5f 54 4f 5f 41 4c 45 52 54 5f 43 4c 4f 53 45 3a 22 53 65 63 6f 6e 64 73 20 75 6e 74 69 6c 20 63 6c 6f 73 69 6e 67 22 2c 4d 41 49 4e 5f 4d 45 4e 55 3a 22 4d 61 69 6e 20 4d 65 6e 75 22 2c 46 4f 4f 54 45 52 5f 4d 45 4e 55 3a 22 46 6f 6f 74 65 72 20 4d 65 6e 75 22 2c 48 45 41 44 45 52 5f 4d 45 4e 55 3a 22 48 65 61 64 65 72 20 4d Data Ascii: reader mode is on, alt+8 to cancel",DELETED_NUMBER:"Was",ACCOUNT:"Account",SCROLL:"Scroll Page",SEARCH:"Search",ORDER:"Order",SUBMIT:"Submit",TIME_TO_ALERT_CLOSE:"Seconds until closing",MAIN_MENU:"Main Menu",FOOTER_MENU:"Footer Menu",HEADER_MENU:"Header M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49792	216.239.34.181	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	1261	OUT	POST /g/collect?v=2&tid=G-3N3F1TJNT7&gtm=45je4as0v883110504za200&_p=1730257276252&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&gdid=dZTNiMT&cid=833971690.1730257278&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1730257278&sct=1&seg=0&dl=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F&dt=Water%20Treatment%20Solutions%20%7C%20Ovivo&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=8489 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.ovivowater.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	849	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.ovivowater.com Date: Wed, 30 Oct 2024 03:01:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49789	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	631	OUT	GET /m/39bfef4335dc67b3/original/Services_1000X1232.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:20 UTC	806	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 787568 Connection: close Date: Wed, 30 Oct 2024 03:01:20 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="Services_1000X1232.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 754a46f3-7816-7164-b862-3d2c3bb20b7b Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 474733f16f494ddb794b4f7dfd7de966.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: gIRAFDX_F6BFcF9gqIeunrZNI4Dtb8cJ0uagoasGDgSWn_0rEvwxeg==
2024-10-30 03:01:20 UTC	15578	IN	Data Raw: ff d8 ff e1 25 3a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0f 01 00 00 03 00 00 00 01 14 88 00 00 01 01 00 03 00 00 00 01 09 c4 00 00 01 02 00 03 00 00 00 03 00 00 00 c2 01 06 00 03 00 00 00 01 00 02 00 00 01 0e 00 02 00 00 00 49 00 00 00 c8 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 01 11 01 1b 00 05 00 00 00 01 00 00 01 19 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 01 21 01 32 00 02 00 00 00 14 00 00 01 42 02 13 00 03 00 00 00 01 00 01 00 00 82 98 00 02 00 00 00 09 00 00 01 56 87 69 00 04 00 00 00 01 00 00 01 60 00 00 01 98 00 08 00 08 00 08 54 77 6f 20 70 65 74 72 6f 63 68 65 6d 69 63 61 6c 20 63 6f 6e 74 72 61 63 74 6f 72 73 20 63 6c 6f 73 69 6e 67 20 61 20 64 65 61 Data Ascii: %:ExifMM*I(1!!2BVi`Two petrochemical contractors closing a dea
2024-10-30 03:01:20 UTC	406	IN	Data Raw: b9 df a3 7b 7f c0 ef af fe 0e c5 93 f1 3c fc f6 3c 23 26 3f d5 c0 69 23 11 0f 4f 17 c9 fb d2 8b 29 11 a3 46 cf 77 96 b3 a7 5d 6f 52 c9 bf 32 8a b0 ee a2 b1 59 7e 33 9e e2 67 68 0e 63 7f 9d b1 ae aa bf e7 bf cf 4f d1 70 bd 6c f6 da d8 69 0c de e2 5b 27 5b 1c 5e ee 7f 75 74 f9 58 ff 00 68 a9 c2 87 39 b6 41 6b 2c 69 0d 7e d3 f9 bb c8 76 d5 99 d3 3a 6d f8 59 26 c2 fd f4 96 8a c1 88 21 f3 bf dd b6 5b f4 5c ac 7c 3f 9c 1c d6 01 92 84 67 1f 46 48 fe ee 4f ea ff 00 52 69 84 b8 87 8f 54 9e 9e 6f fa 13 f4 a7 e9 d5 c7 fa 4f a5 f4 bf e0 52 57 76 fc 7e 8f e2 92 b9 6a b7 ff d3 d9 24 34 49 fe ff 00 c8 b5 b0 3e af 32 ca aa ca cf 0e aa d6 6e 79 a8 18 20 10 76 fa 91 f4 76 7f 39 b7 fd 22 c8 b7 ab d3 d1 45 39 cf a0 65 3c bd c1 b5 97 16 86 b5 a0 6e b3 da db 37 5b ba cf d1 fb Data Ascii: {<<#&?i#O)Fw]oR2Y~3ghcOpli['[^utXh9Ak,i~v:mY&![\\|?gFHORiToORWv~j$4I>2ny vv9"E9e<n7[
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 8c ef a8 7d 5d b9 6d 02 ff 00 aa dd 49 fb 73 71 ea 06 29 b0 82 7d 5a a8 ff 00 03 c7 a9 fa 3d ff 00 a2 f5 31 7f 33 19 53 19 86 5c b1 12 8f 09 20 1e 38 fe 97 f5 65 1f fb b6 ce 3c c6 37 0d e3 5a 7f 55 e6 a9 7f 50 ff 00 9d 4e c1 c1 bd f8 15 d2 c6 b1 fb 9b 3e ab 6a 66 f7 59 e8 fb e8 7e ff 00 f0 1e af d0 a5 76 35 5a 7d c7 c3 80 75 d0 ac ec 2a d9 99 d5 3a 9f 54 01 b6 5c fb dd 59 ba bf 70 2c 7f eb 21 ec 77 fa 2f 47 ec 9b 3f e0 d5 d6 ce e3 e6 23 c9 51 f8 8e 4f e9 52 e0 f4 fb 74 38 a3 e9 97 15 71 7c f1 f5 7a 7e 57 3b 3d 4b 29 f0 eb e3 e6 ac b7 6d bd a6 76 b3 7b 76 c9 1f 44 8d f3 ee 54 fa af 5a be db 9d 8b 63 c3 ab fa 2c 35 ed 80 cf df 73 95 1e a5 66 2e 67 59 1d 31 ec f5 32 2b c6 aa ca bc 67 75 8f ba 97 6b ff 00 71 ed a6 cf fa dd 88 ff 00 58 ba 1f d9 f0 eb b6 bc 51 Data Ascii: }]mIsq)}Z=13S\ 8e<7ZUPN>jfY~v5Z}u*:T\Yp,!w/G?#QORt8q\|z~W;=K)mv{vDTZc,5sf.gY12+gukqXQ
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: f8 36 e7 fa 7b 0b df 5d a1 a9 ae 3a 14 d8 59 b2 05 20 67 a0 6f 31 53 ad 9f d4 4f d4 7f 5f cd cf e3 f3 ec 1b 7c e0 ab 11 c3 a1 7d 92 14 51 8e 92 b1 d4 15 96 dc f0 47 fa dc 1f f6 fe c0 f7 cb 53 5e 86 7b 7b d0 28 27 a1 33 6c 55 fe e4 77 e4 12 38 b9 e0 8e 7f d7 3e c8 a5 88 57 87 42 04 71 41 eb d1 90 db 39 55 8a 34 04 df e9 63 7f e9 ff 00 11 ed a7 8a a0 11 d6 fc 40 38 f4 22 ae e7 58 91 54 49 62 3f a1 3f d3 fe 23 db 0e 08 1f 2e ac ac 75 63 a9 54 fb 91 e6 36 12 5f fa f3 c7 f8 7f b1 bf b4 52 a8 39 3d 2a 8e 46 5e 04 f4 ea f9 e9 20 88 c9 aa c4 0b de e4 1e 07 1f eb 7b 4d e1 0a d4 74 b4 4e de 47 1d 21 33 1d b6 f8 a7 28 6a 4a e9 3f 4d 76 03 f1 6f f0 f6 b6 08 54 9a 1e 99 96 52 2a 7c fa c5 8b ee 83 5e e1 0d 51 b9 36 20 bd c7 d7 eb f5 ff 00 1f 66 02 00 40 a0 1f e0 e9 03 Data Ascii: 6{]:Y go1SO_\|}QGS^{{('3lUw8>WBqA9U4c@8"XTIb??#.ucT6_R9=F^ {MtNG!3(jJ?MvoTR\|^Q6 f@
2024-10-30 03:01:20 UTC	8949	IN	Data Raw: c5 3d d1 9f 49 03 cb ad 75 85 93 57 e6 d6 f7 af 10 7a 63 af 57 ae c2 05 ff 00 1f f1 fe 9e fc 5c 69 24 1c f5 51 52 6b c3 ae 56 1e db d6 cc 34 f5 6a f5 d6 ab 1f f6 de ee a8 08 ad 4d 7a f5 3a ce 8d 72 7f d6 07 dd c8 e1 d3 cb 83 41 c2 9d 73 22 fe fc 0f 5b 65 a8 f9 f5 8e d7 fc 5c ff 00 ad ee dd 35 43 5a 53 3d 72 d2 7d d7 50 f9 f5 6d 07 ae be 9e ec 0d 7a a9 04 1a 1e bd ef dd 6b ac 80 0b 7f b6 ff 00 89 f7 46 6a 64 f4 f8 02 83 ae c0 bf d0 7b d6 a1 4a d7 ad 31 0a 45 7a c4 c4 29 37 fe a4 5a de fc da 88 1a 78 74 c9 c9 34 eb 90 3c 5c 7f 4b fb aa 02 0e 7a 7b 5d 46 01 af 58 ee 75 5a de de e9 9f 3e b3 e8 b9 1f d3 fa 83 f8 fc fb 68 3e 69 4e 9c 04 39 c8 cf 5e e2 d6 23 fd 62 3f e2 7f c3 dd 89 e1 d3 9f 67 58 8f a8 9f e9 fd 41 f7 ed 6a 38 9c f4 d3 82 0d 4f 0e b8 84 e6 f7 3f Data Ascii: =IuWzcW\i$QRkV4jMz:rAs"[e\5CZS=r}PmzkFjd{J1Ez)7Zxt4<\Kz{]FXuZ>h>iN9^#b?gXAj8O?
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 18 e9 57 d5 23 27 68 e8 60 c1 52 66 ab e0 fd 88 e5 d1 a7 92 35 58 fd 07 16 fa df d9 b4 24 44 06 33 d1 6c ac 58 9c 74 25 ec fe b7 ad ce e4 63 4a 94 63 a9 d6 e0 83 6e 48 bf fb 1f 6b bc 6e c3 4f 4e 9a 45 24 8a 8c 74 7a ba ff 00 e3 fe 32 21 4f 2d 4c 2a c7 d3 7b 8f cf 1f e1 c8 3e d0 34 92 96 c1 e9 47 84 0f 10 3a 3a 1b 33 aa 70 18 f4 84 9a 68 ae a1 78 08 b6 fc 7d 78 3e db 65 76 22 87 3d 38 b4 f2 e0 3a 31 d8 1d af 87 a6 11 ac 74 f0 af 20 70 8b 7f a7 f8 0f eb ed 2b c7 86 d5 5a f4 aa 3d 27 82 d0 f4 2f 61 f1 54 51 94 09 0a 0f a7 f6 41 b1 1f 9f a7 f8 7b 4a 56 a4 0a 8e 94 00 07 01 d3 c6 7f 6f 43 5d 43 e2 58 c1 d4 bc 58 72 3e 80 7f bc fb d3 47 43 55 e1 d6 eb c6 bd 48 eb 2d 87 05 1d 78 9a 48 14 fa c3 1b af e2 fc 0b ff 00 8d bd be 08 f0 c0 e1 e9 d3 7e 18 d5 5a 74 75 70 Data Ascii: W#'h`Rf5X$D3lXt%cJcnHknONE$tz2!O-L*{>4G::3phx}x>ev"=8:1t p+Z='/aTQA{JVoC]CXXr>GCUH-xH~Ztup
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 61 5d b3 77 bc 95 d0 8a 2e 65 5c 7a 86 0c 28 3e 7d 5e 4b 4d bb 49 12 c2 82 be 7c 3f cd d3 fd 16 f6 ca e3 64 06 aa 92 0a 92 ae 3f 73 4b d3 cc 34 90 4e 97 88 80 0f f8 db dc d5 cb 1f 78 de 71 e5 7b 98 d7 98 39 6e d6 ec a3 80 5f 4b 5b cd 83 9a 3c 67 49 3f ed 73 f6 74 51 73 cb 36 37 88 45 bd c3 20 23 85 43 2f e6 0f 46 23 61 76 b6 d4 ce aa 61 37 34 2a 82 a1 cc 71 ae 66 08 ea e8 cd c0 0a 82 a5 94 94 e7 f2 c2 c3 fa fb ea 67 dd a7 ef 63 ec bf b9 b2 5b 72 4f b8 fb 64 49 1d db e8 f0 77 48 92 78 0d 70 15 27 60 74 e7 89 60 00 f5 1d 43 dc d9 c8 5b fe d4 4e e7 b2 48 49 41 52 61 62 8f f6 e9 1c 7f 2f d9 d2 bb 7a fc 7d d9 9b 86 86 a2 a3 6e c0 98 0c ab c7 e6 a5 9e 95 dd f1 93 b9 52 ca 93 d3 92 c8 b1 4b 7f d7 1d 88 bd f9 f7 90 7e fe 7f 76 47 b0 fe e3 72 d6 ed bb 7b 59 b7 a7 Data Ascii: a]w.e\z(>}^KMI\|?d?sK4Nxq{9n_K[<gI?stQs67E #C/F#ava74*qfgc[rOdIwHxp'`t`C[NHIARab/z}nRK~vGr{Y
2024-10-30 03:01:21 UTC	11531	IN	Data Raw: 1c df e9 7b 9f f1 f6 d7 ee f9 66 1d a7 3d 5e 5b bf 08 9a 8e 86 09 28 7a df 78 40 16 a2 a6 92 a3 58 b1 0c d1 b5 81 1f 8e 4d cf b4 d7 3b 0d c4 83 35 23 a6 57 71 40 45 17 1d 16 8e db e9 1e a8 6a 0a b6 5a 4a 1d 65 5f 41 09 1d fe 84 ea e0 0b 7b 2a 3c b7 20 25 81 cf 5b 93 75 d3 81 c3 aa 04 f9 4b d6 18 1c 35 7d 64 98 9a 78 c2 6b 91 81 45 1c 0b 9f a5 bd ad b3 b1 7b 66 01 b8 74 c4 d7 02 75 04 0c f5 5a 59 aa 11 1b 3a 85 e4 33 03 c1 fa de df 9f 62 48 71 c3 cb a2 f6 26 b4 f2 e9 82 9b 6a 55 64 a4 0b 1c 2c 41 3c 59 49 ff 00 62 7f d7 bf b5 de 3f 86 33 d2 76 46 62 73 8e 96 f8 9e a4 af 9e 44 63 03 9e 45 f5 2f d3 fd 87 bf 35 d1 61 c7 ab 2c 43 cc d7 a1 f3 6a 74 8a c8 b1 99 e2 b9 36 3a 48 fa 7f c5 3d a2 95 d8 93 4e 1d 3a 12 98 18 1d 0c 74 7d 23 8e 44 4b c2 84 58 5e e0 5b fd Data Ascii: {f=^[(zx@XM;5#Wq@EjZJe_A{*< %[uK5}dxkE{ftuZY:3bHq&jUd,A<YIb?3vFbsDcE/5a,Cjt6:H=N:t}#DKX^[
2024-10-30 03:01:21 UTC	16384	IN	Data Raw: 78 e7 a3 fb 2f 74 2f bb 46 e9 ca 17 b1 39 39 d2 84 81 fb 40 e8 35 c9 75 b6 7a 82 43 1a cd 8b ac f4 96 0d 4b 5f 14 81 c0 bd ec 4d ad f4 f7 8e dc c7 f7 35 f7 87 60 9d a2 84 ed 77 ab a6 a0 c1 74 95 34 e3 da c1 7f 69 34 f9 f4 35 b1 e7 5d a6 e9 03 3c 53 c7 eb ae 32 29 d2 3e ab 6e e5 e9 75 f9 29 1d 82 2a b3 98 d9 64 0a 1f f4 f2 8c 7e be e1 fd db d9 ff 00 72 76 41 3b de f2 ad c1 8e 14 57 73 1e 99 02 86 e1 5d 04 9a 9f 40 0f 42 18 37 9d ba 7d 21 2e 00 62 68 2a 29 5a 7d bd 34 4b 0c b1 92 af 1b a1 fe d0 64 2b 6f f5 ee 01 fc 7b 8f 6e 6c ee ec 64 68 af 6d 64 86 61 e4 ea ca 7f 63 01 d1 92 4b 1b 0e d6 0c be bd 60 d2 2f cf 16 e7 eb 7b 5f f1 cf b6 03 1c 67 a7 f5 12 0e 93 d7 10 88 19 58 a2 fa 58 30 04 5c 12 a6 f6 20 f0 47 f5 f6 a2 19 e5 b7 92 29 a3 20 ba 30 22 a2 a2 a0 83 Data Ascii: x/t/F99@5uzCK_M5`wt4i45]<S2)>nu)d~rvA;Ws]@B7}!.bh)Z}4Kd+o{nldhmdacK`/{_gXX0\ G) 0"
2024-10-30 03:01:21 UTC	12288	IN	Data Raw: b5 a7 49 c1 4d 62 94 af 48 3c dd 33 26 ab dc 11 aa f6 ff 00 0e 2d fe c7 d8 7a ea 47 15 20 e7 a3 ab 45 52 45 07 48 49 ea 1e 36 37 62 3f df 7d 78 36 f6 82 3b 86 2e 3a 33 68 90 ad 34 f5 1c 57 8d 56 d5 73 f9 e6 ff 00 ef 7f d7 d8 ab 6f 72 ca bd 07 2f e3 40 58 11 9e a4 be 41 96 33 a6 ff 00 4f 66 52 b5 54 57 1d 15 22 05 34 a6 3a 47 d6 e4 e6 12 1e 4f d7 fd 73 fe 1c 7b dc 33 15 60 0f 56 96 21 4a 1e 3d 4a a1 cb cc 2c 09 37 1c 11 fd 7f c7 9e 47 b3 98 e6 20 02 3a 29 9a 15 a9 af 4b 8c 4e 61 cb a0 24 f0 47 07 e9 fe dc 7b 5e b3 ea 4a 1e 27 a4 0f 1e 96 0d f8 6b d1 c6 e9 ba b4 9a ae 9c b8 fc af 3f eb 7e 7f c3 d8 57 7a 98 88 9d 41 e8 45 b6 46 ba eb f3 ea c7 69 32 d4 d4 78 10 d7 55 d3 0f d4 91 c1 d1 70 3f c7 dc 35 ba ce 4b 10 7d 7a 93 36 d8 e8 83 1d 55 3f cb 2e c0 8a 08 ab Data Ascii: IMbH<3&-zG EREHI67b?}x6;.:3h4WVsor/@XA3OfRTW"4:GOs{3`V!J=J,7G :)KNa$G{^J'k?~WzAEFi2xUp?5K}z6U?.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49790	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	391	OUT	GET /m/f7a19ef0344161c/original/homepage_projects.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:19 UTC	840	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9978 Connection: close Date: Wed, 30 Oct 2024 03:01:18 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="homepage_projects.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 89e6ede1-5916-6b6e-2819-5cdbfd3bac8a Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 77ba839b79ec0a8b2031c8a828e7fdfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: QzOOm9af98qlYKVeg9bVlYFQpW5-PDiUreETH7B7KAuS_5A_90yD7w== Age: 1
2024-10-30 03:01:19 UTC	9978	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 30 30 30 30 70 72 6f 6a 65 63 74 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Assets/Icons/10000projects</title> <g id="Assets/Icons/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49794	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	631	OUT	GET /m/5647cc391f6f25c0/original/Ovivo_Logo_Tagline.png HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:20 UTC	815	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 60722 Connection: close Date: Tue, 29 Oct 2024 17:31:43 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="Ovivo_Logo_Tagline.png" Access-Control-Allow-Origin: * X-API-Correlation-Id: 06b8eb88-f5e2-a8c3-3aff-208f4d8ba30f Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 e45d812d65a0d0336b945e28b9381462.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: SlP_-tja06jld-q7soS4LTqlqGZhqFGwTQRqs2gY8Rz7me_8h6nvBA== Age: 34177
2024-10-30 03:01:20 UTC	8949	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 56 00 00 05 a7 08 06 00 00 00 31 15 4e af 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 ec d4 49 44 41 54 78 da ec dd 5b 6f 1c f7 79 c0 e1 29 1a a4 91 cd a5 4c 5a b6 c8 e5 2e 25 52 5c 51 67 9a 4b 52 12 45 da 96 25 45 27 ca 3a 52 f2 09 b6 65 d7 96 e3 14 2d 92 06 49 9a 04 2d 0a 14 45 3f 43 bf 44 bf 4d d1 fb 7c 83 de 51 7b 6a ff e3 1d 22 6b d9 b2 49 71 0f 33 3b cf 03 2c 5e d2 be 7b 6f 48 ea 87 99 37 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRV1NtEXtSoftwareAdobe ImageReadyqe<IDATx[oy)LZ.%R\QgKRE%E':Re-I-E?CDM\|Q{j"kIq3;,^{oH7
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 36 07 00 00 c0 0d f1 56 a7 14 49 73 75 4a a1 34 87 29 34 a2 ef 24 1a 98 78 dc 8d e2 76 7b cc c9 bd 46 4f 93 78 8c ff d6 b5 7b 82 74 4d 49 34 7f 4f 52 72 bc 24 19 ff 7e ad cb 17 aa e4 72 65 b5 f7 9f ab e5 42 f9 65 09 0f d7 80 a5 8b 39 f1 a7 41 4b 64 64 38 81 0b 00 48 73 80 a2 c1 89 c7 b8 df 36 35 35 5d 0d 51 7a e6 65 5c fd 3d 3d fa 65 7c e8 cf b9 6a eb a5 e2 74 e5 d5 7f 3f 71 f0 ac f9 1a 19 15 6e 86 da e1 11 e1 66 f0 42 e0 02 00 40 e0 e0 6f 6d 00 00 00 b4 4b ab 46 f4 13 a4 b9 11 fd 58 96 fa ea 78 3a 99 57 ef 72 8b bb de 18 0d 1e 49 e8 1a 27 19 3d 53 24 2d 27 59 7a f6 4b 97 a4 e4 04 49 ea 1e 2f 09 49 71 c6 af c5 9a 7f 26 de f8 e7 f8 a4 d8 0f 6d ab fa 72 ad 31 9a bf 86 55 97 6a a5 ca f8 67 0d 58 2e 57 56 c9 89 43 e5 66 f0 72 d2 78 bd 74 be 4a 22 22 c3 25 22 Data Ascii: 6VIsuJ4)4$xv{FOx{tMI4ORr$~reBe9AKdd8Hs655]Qze\==e\|jt?qnfB@omKFXx:WrI'=S$-'YzKI/Iq&mr1UjgX.WVCfrxtJ""%"
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: c3 c3 e5 42 f9 25 b9 78 be aa f9 fd 6d a8 60 d1 f0 5a 3f cf 35 55 2e e9 9e 9e 64 86 8c 77 3c 3c 4d a6 dc 32 ca b6 40 ed 5a cb 5e 5e 27 cf fd 48 43 95 fa 0e ab c2 e9 64 04 2b 00 00 67 be 17 e1 14 00 00 3a 5a ab a0 65 b7 31 de f5 06 2d ef 7b c3 96 96 a0 e5 9c b7 67 4b 37 82 16 00 81 46 9f a6 de f1 fe 01 73 12 ae 7f 61 2f 89 4f 8c b5 fd 3d 74 a9 ac 21 a3 fa 9a e1 4d 4a 66 37 73 92 b1 fc 54 a5 b9 84 90 ea 72 83 4d ee b5 29 7d 7d 5d 83 19 a8 44 46 46 c8 e8 29 43 64 ca 82 51 72 eb 03 93 a5 78 56 a1 19 78 38 41 97 cb 7a f9 f1 37 e5 cf 4f be 29 51 31 91 41 b7 24 8d 4e 5c 6a f0 35 eb ee f1 96 b7 b5 62 e1 26 79 f7 f5 cd 41 f5 84 b9 5e af 37 7f 7a b2 d9 ac dd 4e c1 10 ac e8 d7 f9 d4 e1 0a f3 da b1 5a f1 b4 76 d9 76 79 fd b7 ef 06 dd 44 ba 1e 8f f6 8c 39 e0 60 b8 a2 Data Ascii: B%xm`Z?5U.dw<<M2@Z^^'HCd+g:Ze1-{gK7Fsa/O=t!MJf7sTrM)}}]DFF)CdQrxVx8Az7O)Q1A$N\j5b&yA^7zNZvvyD9`
2024-10-30 03:01:20 UTC	12004	IN	Data Raw: 28 cf 7a ff 1a 9f 9d f3 1b c3 ea 98 4f ab 37 36 8e 1c 35 5a eb fc cb 2d 37 dd e0 95 11 c9 b7 6f e9 b4 5a 16 ed c5 7f 6a 9b 23 c4 7c 9b 28 f5 fd cb 7e db 33 a6 63 ec d5 25 8b 17 25 02 f8 f8 bc f2 de 47 5b fa 5d b3 68 d9 d7 63 e5 04 6d 4b cb 77 dd 3b c3 7b 8d d3 f3 28 97 74 81 d6 83 3b 9b 9b 42 9a fb cc 4f ed 00 fe 61 98 37 cc c9 7b 2f 95 d5 45 b2 6f 4f 7b 16 a3 1c e5 7b fc 49 b6 99 2c e5 7e 39 39 1b 3a bd fe ed 41 32 64 3c a6 1a 99 1b 2a 3a fa dc 64 9d 1c 53 3f 0e f1 66 23 5d fd 58 f6 6b 98 ac 9b fa d8 e4 00 0d ce f3 20 7b a0 b0 08 ac 00 f1 74 93 9c 24 37 5a bc be bd 69 a4 36 d8 19 20 cb 12 59 aa 3e f9 64 ce 64 59 3f fc f6 9b 53 a6 97 40 7a e9 9d a3 3f f7 d3 c9 61 1a 2c 13 cd a2 c1 a7 8b e5 a2 70 84 ac bb 9b 97 24 87 f6 e6 bb 4f 7a 47 ff 21 c5 9a a0 39 e6 Data Ascii: (zO765Z-7oZj#\|(~3c%%G[]hcmKw;{(t;BOa7{/EoO{{I,~99:A2d<*:dS?f#]Xk {t$7Zi6 Y>ddY?S@z?a,p$OzG!9
2024-10-30 03:01:20 UTC	7001	IN	Data Raw: c3 7a 59 d4 77 53 b7 2e 2d fb 97 6f f7 72 fc 54 e2 25 27 7a df 1a f1 72 df d0 2c 14 f1 73 66 8c 43 ee ec d6 31 5c b9 2b c0 87 a7 3a e1 a0 c1 3c e6 15 5a 9f c9 7a 6a 77 9f 5e 37 69 5d 73 78 33 e3 c1 d2 a7 e5 42 71 bb cf 8a 1a 38 f9 2c 94 18 8f de d6 ce 95 20 2d d6 c7 85 d1 fe 6e 19 a0 31 fb 57 23 3f 2b 07 ec 38 b9 ad 7d da 34 6d eb 80 68 5b d9 36 4f 8d b6 75 c4 80 cc d1 7c 2a f6 8d bf 63 d4 0b 83 c3 c3 eb a1 07 62 60 b9 29 76 82 f9 80 d4 ad 83 9e d7 5c 50 89 ed eb 31 20 be 3a b6 4b da 5d 54 49 e5 b9 23 3d 3f f3 3f 07 74 e3 e3 2f fc 4a 27 7f 66 0c aa 5f 19 3f f7 c6 5e 0d 16 6b df 23 b6 e1 69 fe ff df f4 fa 40 3b f3 f3 ba 63 8f 7f 4d 0b 9f fb 54 1f f2 3a 3f e2 60 b8 85 76 fb 60 3e e3 24 af 20 29 cf 18 ea 66 bb cb 33 fb fe 63 69 73 9d ec 27 f6 69 32 be f3 4a Data Ascii: zYwS.-orT%'zr,sfC1\+:<Zzjw^7i]sx3Bq8, -n1W#?+8}4mh[6Ou\|*cb`)v\P1 :K]TI#=??t/J'f_?^k#i@;cMT:?`v`>$ )f3cis'i2J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49793	142.250.184.194	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:19 UTC	992	OUT	GET /td/ga/rul?tid=G-3N3F1TJNT7&gacid=833971690.1730257278&gtm=45je4as0v883110504za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=64998296 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:20 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 30 Oct 2024 03:01:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 30-Oct-2024 03:16:20 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 03:01:20 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-30 03:01:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49795	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:20 UTC	636	OUT	GET /m/7b1a830a4efe120f/original/HomePage-Footer1920x456.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:21 UTC	811	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 14764 Connection: close Date: Wed, 30 Oct 2024 03:01:20 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-Footer1920x456.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: 14651087-818a-a441-eeb2-005d5305c905 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 e94c77a12a65a84cbcef7856ed7e0fb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: SdhmkUDUBytppQ6sUGyqKdzZlpmiLU8brZdyuuL0Y2Yl-fC2anQZpA==
2024-10-30 03:01:21 UTC	14764	IN	Data Raw: 52 49 46 46 a4 39 00 00 57 45 42 50 56 50 38 20 98 39 00 00 90 0b 02 9d 01 2a 40 06 7c 01 3e 6d 36 94 47 29 2c 37 23 28 36 8a a2 e0 0d 89 67 6e 50 ff de 9f ff bf fe bc 37 cc 2c 0f 1a e7 fe cf fa b6 bd 52 ff ff 4e bb b9 41 82 0b d5 5b e3 0f 62 ff b7 e5 2f c2 ff 4f ff c3 c5 6b cf ff ca fe c9 f5 a3 7f ad e1 b1 d7 bf e7 7a af fa 72 65 eb 85 7b af e7 ed fd 29 e7 81 7f 2e 35 c2 6f bf cc eb a8 ff 1f 97 fe 69 bf ff 8f 6e 0b bf fb 6d a5 ff c1 e6 77 fe d7 a0 57 a7 fe ef fe f5 af fe 9f 5f 2f 5b df ff fa 88 5f 24 ff f7 ea 4b e6 5f f1 f5 44 d3 f3 33 ff fb df da e7 bf 36 bc df c1 37 4f f5 7f d6 b7 f3 27 ff 77 ae 00 a9 c3 e4 08 2f 87 c8 10 5f 0f 90 20 be 1f 20 41 7c 3e 40 82 f8 7c 81 05 f0 f9 02 0b e1 f2 04 17 c3 e4 08 2f 87 c8 10 5f 0f 90 20 be 1f 20 41 7c 3e 40 82 f8 Data Ascii: RIFF9WEBPVP8 9*@\|>m6G),7#(6gnP7,RNA[b/Okzre{).5oinmwW_/[_$K_D367O'w/_ A\|>@\|/_ A\|>@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49796	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:20 UTC	400	OUT	GET /m/2db12aa8d12bc551/original/WhereWeTouchWater-627x470.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:20 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 143984 Connection: close Date: Wed, 30 Oct 2024 03:01:18 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="WhereWeTouchWater-627x470.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: c1f8392a-1fcc-ab79-5bef-78fdc8a2cb4a Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 e41703af87be84ac95b3cadf9d8dd470.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: 20RSvhUdJ1Te7ZI6kUA3eiNSEB65EGNAOpsObBGW2Ni2jN7pQwNQag== Age: 2
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: ff d8 ff e1 16 69 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 73 00 00 01 01 00 03 00 00 00 01 01 d6 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 30 33 3a 31 35 20 31 34 3a 34 36 3a 31 32 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: iExifMM*s(12i -'-'Adobe Photoshop 22.3 (Windows)2021:03:15 14:46:120
2024-10-30 03:01:20 UTC	1514	IN	Data Raw: 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </photoshop:DocumentAncestors> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 71 ed 6d dc 9d c9 d7 f5 73 52 d7 63 a8 6a 23 de 3b 62 04 65 a2 ce 52 2c 81 db 27 f6 91 da 19 e4 58 c9 7a b5 2b ac e8 12 a1 b8 70 44 bd bd bb b0 5d bd b5 7f 88 e3 a3 14 99 18 0a a5 6d 0c a4 3c 98 dc 9a a6 a8 dd 5c 72 f4 b5 0b 7d 2d f5 65 24 1e 47 b0 b3 27 ba 31 d4 1e 48 27 a9 58 27 a6 a9 10 54 47 20 3a a3 95 25 29 2a 30 fe a8 e0 8f f6 1e e6 a6 ee c1 69 d5 f7 b1 58 01 7b 7f 5b 7e 7f a8 f7 94 6f 1c 08 1f f0 35 7f d6 b7 fb cf 37 f7 cb fb e7 82 b1 2b 56 3f c0 e9 63 fe f5 cf b4 ec db fb 0f 1c c8 0c cf 28 15 da 3d 31 b0 d3 c0 3c f1 f4 e3 dc fa 7d f5 85 5a ec 88 d5 28 b3 53 9b 15 b0 3a a3 fc 7f af ee 5f f7 fb 0f 7b 5a 5b 7e 4e 9f a7 fc 88 fb f7 f7 eb 10 c7 81 31 b1 3f 45 b1 fa 0b ff 00 bd 7b ad af e6 07 9b a4 cb c9 d5 c6 9c 10 23 87 76 2b eb b7 2a ef 84 22 dc 5f Data Ascii: qmsRcj#;beR,'Xz+pD]m<\r}-e$G'1H'X'TG :%)0iX{[~o57+V?c(=1<}Z(S:_{Z[~N1?E{#v+"_
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 96 ae 82 f1 c8 54 aa 69 2a 6d 70 7f a7 bc 34 9f 08 bb 07 29 2c 14 94 79 9c 4c b5 d3 90 4c 2b 05 49 89 05 81 2f 24 e4 85 48 d3 fb 4c 6c 00 f7 69 7f 1f fa 27 6e f4 1e ca 4d bf 8c 31 64 77 16 54 c3 5b bb f7 29 87 c5 36 67 24 88 44 54 f4 e0 dd e9 b0 d8 b0 ec 94 d1 5f ea 5a 56 f5 b9 b0 e4 c7 fa 9b 0f f6 e4 fe 6f fe 1e e1 4c 3c aa ca ca 0a b5 c5 98 5c 1f c1 b8 b5 af 6f f0 f7 5f 9f 27 3e 17 60 fb 56 a6 b7 7c 6c da ca 9c 26 fe 62 b3 d5 d2 d6 57 d4 d4 60 37 22 53 c6 11 68 5d 6a a4 a8 3b 72 a9 a3 40 b1 4b 4f 6a 55 6f d7 08 b9 90 53 1e e8 c1 6e 0d ab b8 6b f6 fe ea c3 e4 30 39 cc 3c bf 67 55 8d c8 c6 62 a8 a4 55 e1 34 23 5d 67 a7 91 0e a8 e5 46 31 ca a7 52 92 0d fd c6 88 a4 9a 11 81 91 4d 80 75 47 2e bf f0 40 a4 9b 9f cd ad ef 34 a6 25 8d d2 91 74 9b 81 a9 a0 f5 5f Data Ascii: Ti*mp4),yLL+I/$HLli'nM1dwT[)6g$DT_ZVoL<\o_'>`V\|l&bW`7"Sh]j;r@KOjUoSnk09<gUbU4#]gF1RMuG.@4%t_
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: f6 13 e7 3f 98 56 14 6a 8f 6f 6c 0c 84 cc 4b 78 a5 ca e4 69 69 51 97 ea 19 a3 80 54 38 bd be 9e d0 9f f0 e1 5b c6 ff 00 f1 e1 60 2d e5 fa 7f 13 aa bf 8e df a3 fe 03 7d 75 73 7f e9 ef ff d7 23 17 1f ed c7 1c ff 00 bd 9e 3f af be 0c 01 bf d7 fc 3f c3 eb f5 f7 12 4f a9 fa 7f 4f f9 1f 03 dc 57 03 fd 5f 36 e3 fe 23 f1 f4 b1 f7 0a 4b 0f eb 61 7e 7f 07 fd 87 3f 4f 70 24 e4 7f af fe f1 fe 17 b7 b9 78 a0 4b 31 3f 40 55 54 fe 7e b7 3f eb f0 be d7 30 3d 90 03 6e 40 e4 ff 00 85 87 fa c4 fb c8 e4 81 c1 17 bd bf a7 1f ec 2e 7d c3 95 56 45 2a c2 df 51 c1 bf 1f d3 fa f3 ed 86 aa 96 f7 1f 42 2f 63 ff 00 15 1f 9f 6c 52 23 c6 e4 58 fd 7f c7 9f e9 fe c3 de 68 cf a4 82 0f 3f eb dc 8f f7 93 f5 1e fc ae 62 6b 58 82 0f f4 3c 83 f4 3f 41 f9 f6 f9 4e ec 50 30 d5 a7 50 17 03 82 df Data Ascii: ?VjolKxiiQT8[`-}us#??OOW_6#Ka~?Op$xK1?@UT~?0=n@.}VE*QB/clR#Xh?bkX<?ANP0P
2024-10-30 03:01:20 UTC	15005	IN	Data Raw: 14 9a c7 a8 dc 49 f5 fe a3 fc 3d a6 67 c5 56 cd 4c 69 93 20 d5 94 12 02 92 63 b2 71 d3 e5 b1 d2 20 fa a3 d1 57 a5 44 0c 86 ff 00 42 bf 4f 60 56 ee f8 f1 d4 db a8 cb 2e e0 ea 4d ae f5 32 96 27 25 b3 e4 aa d9 99 2b e9 21 a4 29 88 96 3c 64 92 7e 7d 70 30 27 eb 7f 60 97 fb 25 5d 13 aa ff 00 6f db 1f f0 3f ee 7c 5f de 0c 17 e9 f0 e8 fe 11 e4 fe 09 fe 62 ff 00 bd f7 56 f2 7f 62 df 9f 7f ff d7 af c6 fe bc 1b 7f 8f d0 f3 6b ff 00 80 f7 c2 e5 bf c0 0e 78 e3 e9 fe b7 3f 53 ed ab 21 90 4a 4b 2a a7 92 43 f5 50 48 0a 39 fa 9f a9 f6 cd 5d 33 7d ba cf a7 48 75 24 00 41 e4 73 63 fd 47 b5 2d 14 3f 6f 49 4d 09 fd 4b 0a 5d 7f 22 47 1e 49 09 bf d7 d6 fe f8 b1 f5 37 fa e4 f1 6b fd 79 bd fe 9e f1 82 79 e6 df 4b 8f f6 dc fd 0f f5 f6 ff 00 8f ca bd 14 4d a9 5a 45 6b af 16 b5 80 Data Ascii: I=gVLi cq WDBO`V.M2'%+!)<d~}p0'`%]o?\|_bVbkx?S!JK*CPH9]3}Hu$AscG-?oIMK]"GI7kyyKMZEk
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: 31 61 eb 0b aa 87 9a 9a a9 e8 1d 19 82 f9 52 ad 56 48 4c 24 9f d4 4d 81 fa 91 ec c0 f6 9e 57 70 d6 f5 56 e0 8a 59 a3 ad 19 3a 0a 23 4f 4f 41 0c f2 cb 53 0a e4 28 6a 67 68 23 84 48 64 8a 0a 65 2e ec 38 08 09 fa 03 ee b8 aa dd 03 33 70 03 35 be b6 17 b1 b0 b9 fc dc 7f b7 f7 1f 1d 50 c8 2a f5 68 54 67 fc 3a 96 1c 58 02 bf 5e 41 bf 04 8f 78 64 9c 09 ac 4a ea 36 e0 b2 a9 be a1 6e 0f e7 d5 ee c2 fe 23 bc d2 e3 ab 1e 38 27 78 e1 79 23 99 e3 86 56 8a 16 95 4b a0 a8 9f 48 8a 29 1c 7e 95 2d a9 87 d0 1f 67 5f 1d 4c d7 ae 55 52 56 4a 81 20 1f 80 5a 28 c3 7f ac 35 2f bc 87 18 13 20 95 c5 c4 65 69 24 a4 9e 20 8a 7e e1 0c c9 35 3b 19 2f 74 34 ae 64 b7 07 57 90 df e9 ef cf 1d 3c 6c c4 43 76 24 fa 9a cd cf 17 1f e0 3d e1 3a a5 e5 07 d0 71 60 2c 3f df 5b dc 73 2d 34 10 bc Data Ascii: 1aRVHL$MWpVY:#OOAS(jgh#Hde.83p5P*hTg:X^AxdJ6n#8'xy#VKH)~-g_LURVJ Z(5/ ei$ ~5;/t4dW<lCv$=:q`,?[s-4
2024-10-30 03:01:20 UTC	10463	IN	Data Raw: a2 6a cc 55 55 23 49 ad a9 2a 1c c4 d1 86 f1 b2 15 11 b1 4d db 7f 0f bb 56 b1 a3 fe 31 bb 71 d8 1a 6e 25 75 a7 ab c8 e5 6a 21 50 7d 43 44 26 0a 25 95 01 fa 79 98 7b 1d 30 5f 13 36 1e 2f 26 df de bc be 73 78 d5 53 52 53 54 46 b9 0a 96 a0 a4 ab 79 64 6f da 86 18 91 52 57 47 5b 34 5f 71 25 fc 8a 48 b1 f6 2a 62 fa d3 65 6d 8a c3 26 dc da b8 bc 0b 7d c4 89 1d 4b 41 4b 1d 58 68 62 3e 45 92 b0 c7 fc 41 10 a0 3f a1 f8 6f f0 6b 7b c3 9a ec 0d b7 b7 6a a9 e8 f3 54 6f 5d 47 0c 33 c2 28 a8 e6 74 ac 35 8f 24 22 29 92 55 61 08 a5 0a 87 49 52 4b 1f a0 1e c1 fd c3 bf ea 72 54 f1 a5 2a 53 d3 41 73 0c 82 2b b4 ed 79 3f ce b4 93 31 9a 39 5e df d0 5e e4 db 92 7d 87 b4 d2 6a 98 46 ed a0 33 2a c4 fe 49 85 a5 d4 c6 c1 88 b0 f2 f0 a4 9e 01 37 07 ea 3d f2 32 14 96 58 e9 d4 4b 1b Data Ascii: jUU#IMV1qn%uj!P}CD&%y{0_6/&sxSRSTFydoRWG[4_q%Hbem&}KAKXhb>EA?ok{jTo]G3(t5$")UaIRKrTSAs+y?19^^}jF3I7=2XK
2024-10-30 03:01:20 UTC	16384	IN	Data Raw: ff 00 de 7d f6 f7 fc 7f af f5 e0 7f 43 fe c4 1f 62 17 55 21 6d d1 15 4d 8f 8e 9e ce ff 00 41 a4 29 d5 72 78 b0 16 b9 f6 32 ef e1 9b dd f9 9e bf c6 62 2a cc b5 a9 d9 7b 76 a6 86 15 0a a9 0e 4b 2b 57 8f c6 35 64 4f a9 84 01 98 41 e6 2a 42 b0 89 4b 5c a5 fd 9f fe eb 15 db 73 35 95 cc ee fd ce b8 4d af 45 5f 53 28 aa 85 a1 9f 13 94 b4 c6 4c 75 1c 71 03 25 45 4d 51 2a df b7 4e 4b c8 0d ed c5 fd 93 2d df f3 03 7c 64 31 19 2d 81 d6 e2 b7 13 86 ca 45 2d 3d 65 44 92 2d 56 7e 7a 07 36 78 a2 ab 9f f6 36 c6 21 be a1 8b 3d 48 5b 01 20 fa 7b 22 fb 86 6a aa bc 96 4e 6a e9 0c 95 92 05 f3 49 e5 96 7f 25 44 0d eb 6f 35 47 ef 4d a8 dc 6a 6e 5b da 4c 39 3c 70 3f d8 13 fe b0 f6 f5 43 80 ce 64 c6 aa 1c 5d 74 f1 9f f7 6a c2 63 8b fc 47 96 4d 09 f8 f6 e7 2e c4 dc e2 22 5a 8a 14 Data Ascii: }CbU!mMA)rx2b{vK+W5dOABK\s5ME_S(Luq%EMQ*NK-\|d1-E-=eD-V~z6x6!=H[ {"jNjI%Do5GMjn[L9<p?Cd]tjcGM."Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49798	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:20 UTC	390	OUT	GET /m/5c95d78cfeb29b44/original/homepage_brands.svg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:20 UTC	839	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12874 Connection: close Date: Wed, 30 Oct 2024 03:01:18 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: attachment;filename="homepage_brands.svg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 30046fd1-7e21-6189-d475-19147e517214 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bafea69ec4368ee11760779ffcfbd4fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: rKQfXrN9CWJWmLv9_b1plrmsF5L-Y9hnAtsXTHzjQf1xa4PNvAny1A== Age: 2
2024-10-30 03:01:20 UTC	12874	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 38 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f 31 30 4c 65 67 61 63 79 42 72 61 6e 64 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 41 73 73 65 74 73 2f 49 63 6f 6e 73 2f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="80px" height="80px" viewBox="0 0 80 80" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Assets/Icons/10LegacyBrands</title> <g id="Assets/Icons/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49799	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:20 UTC	406	OUT	GET /m/55c60dcc9c78d1b6/original/1920X970_NewTagline_2024_200kb.webp HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:21 UTC	826	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 174226 Connection: close Date: Wed, 30 Oct 2024 03:01:18 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="1920X970_NewTagline_2024_200kb.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: f178d4f8-40b4-bd8c-edd5-ffae09dff3a9 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 54fc556adf6e8c787574c6f132d70178.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: Jl7A967f5J5hMLkOzyAiqYisQkrEyQTX9MNfPVJpBKPKjfjjh0d11Q== Age: 2
2024-10-30 03:01:21 UTC	16384	IN	Data Raw: 52 49 46 46 8a a8 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 0c 00 00 00 7f 07 00 c9 03 00 56 50 38 20 dc 66 02 00 50 3d 08 9d 01 2a 80 07 ca 03 3e 9d 4a 9e 4b a5 a4 23 27 a5 74 3a 60 f0 13 89 69 6c f2 fb 55 0f f0 c2 7f fd 7f fe f4 a2 6e ff b3 bb e3 a1 d3 ab e7 8f ff ff 2e 5f f8 f4 ec 65 3f fe ce 76 7d f8 7f ad ff f9 e7 57 ff eb 1c a3 58 8e cd a9 f4 f8 d6 e1 ff f4 f9 50 fc 7e d2 ff be f1 25 f3 3f f5 7d 3b 97 c8 f4 c6 f4 e4 cb 7b a7 5f 9c 05 2f 3c 4e ff 5f e9 af fd 86 80 16 4f ff 7c 65 5c 9a d1 f5 2f ff ff ee fb 19 ea 97 e1 2f 7d e7 d1 e9 e9 ce 97 79 7f 7c 8b fa 3f 20 ff 82 ff 1b bd ff dd 7f 61 ff cf fc 7f f8 ff 16 3f f2 62 4f f3 ff f5 f3 3f fd 3f f9 6f fe 7b 3d ff b3 f7 8f c6 9f de ff d2 fd cf f6 08 c6 4f fd 3f ff ff f6 77 89 71 5e 62 9d 7f fb 3e ff df 9b Data Ascii: RIFFWEBPVP8XVP8 fP=*>JK#'t:`ilUn._e?v}WXP~%?};{_/<N_O\|e\//}y\|? a?bO??o{=O?wq^b>
2024-10-30 03:01:21 UTC	16384	IN	Data Raw: d8 48 b8 23 1b 67 10 15 53 ab 77 cb 48 e7 a4 88 d7 1c db 21 6a 17 b7 10 32 75 77 87 af 6e 4f af d7 72 25 05 46 4f 09 78 b3 18 7c f8 07 0d 45 08 d4 75 6d bc 77 42 f6 04 14 01 98 7f a4 c4 cc b3 c2 ad 6e 3b b2 8e 47 4c ef 0f ac b6 1d e4 23 64 4f de 43 20 fd ba 3e 33 5c cf 97 48 93 97 ab e2 ad b1 5c fb 9a ef a9 e1 ce 83 36 1c 4b 2b b3 6f 2f fc 4c 76 6c 2f 6a 3c b3 88 d5 44 e0 16 8b 29 bb 70 e7 55 66 24 8f be fc 08 6c f4 e4 d6 3b 51 1e b9 92 04 6b e0 c7 d1 b1 c5 d3 17 53 5b 21 aa f7 f2 40 4b a6 8c bd aa a9 15 8e 06 95 7b 83 81 34 7a dc b5 65 91 23 73 58 d0 70 ca 98 e0 bc 9c ac aa 9d 42 b7 8b 0a 0f 1d aa e9 13 e8 45 b7 ea 75 b6 fa e2 e4 71 f0 b0 a3 1d 7b 83 cd 37 06 2e 8c 8b 18 b2 97 bf 5f 43 fb 66 b8 bd e5 c6 fb 9b d0 54 5b 88 4a c0 e5 81 7f df be 31 c9 e6 58 Data Ascii: H#gSwH!j2uwnOr%FOx\|EumwBn;GL#dOC >3\H\6K+o/Lvl/j<D)pUf$l;QkS[!@K{4ze#sXpBEuq{7._CfT[J1X
2024-10-30 03:01:21 UTC	11977	IN	Data Raw: 7f fe cc a3 b4 cc 34 c8 43 e6 cb 17 cc 18 05 13 c8 a3 ca 3d ec 68 af 8a c6 ae 46 56 ba 0d 20 12 ce b6 05 e4 fa 70 3b 0f 7e 8f e4 2c 52 f0 02 04 6d cf 9c 5a 4e a3 9d 66 9a fc ac 4f 18 84 b4 2c 51 41 98 f9 76 e0 8f 5b 1c 73 45 99 bc ae 26 3f 51 32 2d 4c 65 2d d5 a2 9b 97 b6 13 ca 1d 7d 89 f4 f1 cc 3f 58 e3 8d 01 44 46 56 47 95 58 e9 c8 23 79 85 99 81 87 46 3e 18 8e 90 d4 29 fc d2 e3 2a 47 82 df a6 7a 0a 7c 0d 5e c0 00 3e 8f 14 94 69 2e b1 5a 95 82 1a 6c 7e 5f 2d ee 89 0c d2 48 7a 75 54 91 1b 79 a6 96 39 5a 8b 88 91 06 30 55 2b bd cb 43 c4 b6 45 25 89 3e a8 af 36 56 31 24 12 8d 81 65 cd 83 4a ff 82 4d c1 ad 61 e8 2c b8 dc 82 9e fc c3 11 6d 88 c8 dc b4 1c ab d8 d8 82 74 ec 2f 16 b7 7c 47 12 66 cc e3 80 bb e8 e9 09 d4 41 ef b7 6d 19 cf b8 86 ab f2 7f 1f 52 99 Data Ascii: 4C=hFV p;~,RmZNfO,QAv[sE&?Q2-Le-}?XDFVGX#yF>)*Gz\|^>i.Zl~_-HzuTy9Z0U+CE%>6V1$eJMa,mt/\|GfAmR
2024-10-30 03:01:21 UTC	16384	IN	Data Raw: 49 a0 6f 54 05 e7 3f d0 34 5e b6 36 40 3d 53 52 7e c3 8a 24 d7 59 a1 db 82 72 78 05 4f b6 53 70 93 92 4f 14 1e 6c 16 b1 5e dd fc 86 c7 dc 6f 0d 2c df 4b 03 72 ff d9 cb 86 41 dd eb d6 a6 60 6c 1e 54 95 6c d5 0d f9 b3 f4 d0 5a 86 36 32 0e d5 ec 08 23 5a 1e 19 38 82 70 7f 04 5d 62 bd 02 b8 8a 22 dd 01 1c d7 9e a0 72 0d 13 0e a5 67 69 94 fe b5 1d 68 27 89 32 d0 63 f4 95 b1 7f ce 07 73 e5 39 75 82 e0 f9 2f c9 4a 33 a4 2b 71 2e 03 c4 8e 39 ab 15 c9 e9 02 e0 8a 1b c8 88 81 a9 47 c2 ee da 1c fd 7f 57 99 e7 8f 77 ee 4d c2 53 04 8c da 29 ba d8 18 85 ce 5f 44 49 b4 2f 92 f0 64 6f 81 ef dc e5 46 c6 04 f9 34 fc 21 32 e2 ff ee a6 0e 02 e4 2e 7a 15 8a 80 99 de 3f 14 4f 61 71 e8 ff 6b a5 46 e1 ed 90 d7 f9 e5 63 35 98 fc 20 3a 07 9a f5 e2 de f4 1b 38 b6 bf b4 7b 1f 4f 4d Data Ascii: IoT?4^6@=SR~$YrxOSpOl^o,KrA`lTlZ62#Z8p]b"rgih'2cs9u/J3+q.9GWwMS)_DI/doF4!2.z?OaqkFc5 :8{OM
2024-10-30 03:01:21 UTC	12792	IN	Data Raw: 6e bb 46 65 5b f0 c7 50 bb cc bc 18 fb 50 23 ec 3f eb 47 71 fb 56 81 cb 36 e5 ba 7e 6f 8d 08 b6 39 84 0b 58 e5 7f eb 4e 7b 65 3f 53 8a 21 60 ed e5 2d 94 63 be e3 26 dd a0 ff 87 3d 7b 1c 9a 21 54 c2 0d 50 31 7f fb 0c 3d 33 ea f2 9b d0 e5 33 67 57 da b0 1e c7 d2 aa f7 40 6e 4b a2 ee 1e e7 0e 4b 3e b7 26 48 0b cc 6f fa 68 57 d9 35 d3 82 17 3f f4 c3 90 eb 13 06 94 b8 80 e4 eb 2e fa c4 0b c0 d5 5f 26 27 0d bd 19 03 69 ef 0d af 68 6e 4e f6 6e 17 19 13 d4 29 8b 9c d5 47 bf ed 01 83 52 92 07 3d b1 0b f7 72 e7 02 fb ba 57 28 c8 87 af 7b cf 02 70 87 e8 18 3e 05 7b 39 90 7b 8e e6 67 bf 58 59 d5 19 db 4c 5d 57 49 f0 eb b8 46 88 74 9a 32 da d2 db 35 0c cc 45 d3 52 5b 0d f3 5f 41 6f 19 20 e6 86 3a 6c 1b 5a 48 60 d9 1e 51 db 1f b7 8a 69 82 ee 88 31 b4 83 1c 26 96 f0 7e Data Ascii: nFe[PP#?GqV6~o9XN{e?S!`-c&={!TP1=33gW@nKK>&HohW5?._&'ihnNn)GR=rW({p>{9{gXYL]WIFt25ER[_Ao :lZH`Qi1&~
2024-10-30 03:01:21 UTC	15990	IN	Data Raw: aa bc 40 69 ed 5b 37 2f f1 83 49 b9 b4 b6 bd 68 77 3d 1c e2 fa 5f e4 e3 98 21 de 22 3b 81 13 45 eb 26 19 29 ee 3a a4 89 da d2 7b 67 7c 33 37 30 7c d7 52 77 95 dd 8f 11 15 81 97 16 b9 4c 11 b0 31 62 f1 00 ef fa f8 61 ef 70 4d 80 ae d4 f3 2f f1 0e 18 97 06 ad 0e 58 27 80 ef db 07 59 53 c1 df a8 2d c2 84 6b 38 7a 2c 2e a4 61 47 f8 81 03 28 d6 10 3b c8 16 df 2c b0 a4 01 c2 93 20 71 97 ea 42 d9 4d 50 bf c5 69 5f e8 6c c3 67 19 23 f3 8c a9 14 1b 55 73 9b d2 e0 fb c0 68 a6 87 c1 b2 57 0e 73 7f 93 5d 9a ed 31 5b 33 ae a9 82 d5 8e dd 15 d3 58 97 06 84 7b 81 56 88 56 ff 07 6e bf 61 0c a8 d3 d9 6a 7f 78 de ca cc 0e 80 c6 35 78 7c 2e de 12 fe 1f ca f8 8b 0b d1 94 88 89 da 16 dd dd 52 c7 67 11 29 7c 98 24 60 34 9a 38 59 81 5e 1c 7d aa 50 01 dc 4c e2 5f f8 25 3c 89 a0 Data Ascii: @i[7/Ihw=_!";E&):{g\|370\|RwL1bapM/X'YS-k8z,.aG(;, qBMPi_lg#UshWs]1[3X{VVnajx5x\|.Rg)\|$`48Y^}PL_%<
2024-10-30 03:01:21 UTC	8528	IN	Data Raw: f1 b2 eb 36 57 51 83 df 44 b5 db e1 35 3d 49 21 af 9a 7f ac f0 8a 1f d3 ac b7 d2 d5 e0 83 ab 7b 05 b4 05 df 48 a4 31 4d c1 c5 af 94 bc 1d b9 db 31 76 99 4a 52 37 02 de bd fc 9d a9 31 85 65 c5 9d ec c8 1d a2 dc 8a 5c 70 96 3c 08 07 e2 fd d9 53 9d 07 2f d9 0a 1c c6 72 5f 0e f6 01 ca 36 1a d8 cd 22 26 a2 7a d9 f9 a5 36 d7 98 a8 e4 5d 6a ec 70 e4 be 99 2c 88 3d 12 c9 bf 6d e2 4f b9 a8 e0 1c 5d 36 5e 53 91 89 21 80 87 21 d3 11 56 0b 7d 96 f6 1a 7b e0 58 5e d1 a3 6e 01 52 bb a6 6c 04 72 89 f3 7a ac b7 fb 5f c1 13 90 d7 44 df fb c6 09 5f f3 75 cb 19 95 d5 43 ea 06 b6 9f 5a 92 52 15 57 2b 30 2c f0 c1 94 92 12 f3 03 72 47 6a f0 64 3d ce 89 59 11 43 30 9b 2a f5 74 45 58 fb 18 b9 45 22 cb ec de f4 23 11 43 ea 62 8a 9f e2 85 e5 52 88 46 99 fc b8 f9 7c 37 3a 84 f9 91 Data Ascii: 6WQD5=I!{H1M1vJR71e\p<S/r_6"&z6]jp,=mO]6^S!!V}{X^nRlrz_D_uCZRW+0,rGjd=YC0*tEXE"#CbRF\|7:
2024-10-30 03:01:21 UTC	12792	IN	Data Raw: 7b ba 73 b1 de 30 8b 59 53 ef c1 56 8e bc 93 eb 4b 8f c4 e7 0c 9e 72 76 97 0a 94 dd 44 4d af 36 15 09 2f 99 db 47 d8 ba 22 e5 79 6f 81 a7 d4 00 a3 54 41 bf e0 10 26 1a e9 06 8d 43 a7 4e 0a 4b 0e 81 a8 f8 bf 13 6b 6e 9f 4e a1 c5 f0 64 d6 e0 b6 c7 1a b7 37 96 86 6f d6 50 e6 63 1e b4 5a 0b fc e3 ce 45 f1 ea c4 b9 68 12 5d 33 b3 0c ec ca 8d 81 84 e6 58 74 4e ae 8d f2 de c6 ab e7 b0 bf fb 66 ce 1f c0 7e e6 8b 7b 3b 30 61 06 ca f5 d0 82 e7 91 09 45 12 a5 1f 6a 6e 56 c5 3b c9 10 64 55 11 d5 27 55 69 19 9d fa ff c2 81 28 10 f3 d8 9c 63 ec fc 7e ff ac f8 f9 4b ce 36 cb 94 3c 04 68 04 5e 19 d3 34 ca c5 45 a6 f8 d3 f0 53 d5 b0 70 2a 7f e8 0c 2c ae 8d 2b c5 89 93 95 49 ec 51 a7 3d 95 bd 2b 56 84 c9 76 d2 9a 41 b1 62 de 8d 8c f7 b2 cc 6a d2 a5 6d 83 2b 11 b7 61 b4 62 Data Ascii: {s0YSVKrvDM6/G"yoTA&CNKknNd7oPcZEh]3XtNf~{;0aEjnV;dU'Ui(c~K6<h^4ESp*,+IQ=+VvAbjm+ab
2024-10-30 03:01:21 UTC	16384	IN	Data Raw: ad 06 bb e3 56 e2 2e 6a 11 81 d1 f4 20 04 7a 33 e4 25 77 25 ac 66 f6 eb 17 a9 2c 66 35 ee cb 98 23 13 33 43 66 ef c3 7f 23 03 f3 9f b4 a2 a6 bb 3b d1 1f 5a b8 c5 74 4d b0 0f 3f ae 95 f7 2c b6 24 0c 6d 13 4a 50 3f a4 84 fc 6d 95 7f ab 97 01 0c bf cc f4 2c 31 b2 27 db 4e cd e6 42 aa db c0 5e 1b c1 6a 92 cb 70 04 a8 62 b4 1a d9 40 be f4 e1 b7 b2 8e a7 e6 33 7d 38 51 dc 01 5d b9 c4 b4 a5 66 b1 e4 a7 03 ac a5 b2 2e 9b 94 de 67 13 5c a5 32 9f 68 39 dd 3b 0f ca 40 54 25 f5 ec 1e 21 08 d0 f5 fa d7 c4 b7 ca 56 d9 6f b0 ff cf 2d 26 d7 b2 c9 82 c2 80 4f 70 25 2c 89 3a 02 bb dc 96 f0 27 6a bc 78 e8 f8 20 30 93 a3 28 f1 42 39 7f 56 f3 96 b3 d2 bb 75 cf 66 27 8c 24 c2 2f 07 d3 95 94 8c 4a 59 f3 73 60 8a e3 8a 36 a5 38 89 77 b7 f8 c4 22 fe 31 ea 3c 89 57 34 08 d4 72 9d Data Ascii: V.j z3%w%f,f5#3Cf#;ZtM?,$mJP?m,1'NB^jpb@3}8Q]f.g\2h9;@T%!Vo-&Op%,:'jx 0(B9Vuf'$/JYs`68w"1<W4r
2024-10-30 03:01:21 UTC	12398	IN	Data Raw: 80 a6 61 52 40 42 7e 16 b9 77 80 0c f8 45 25 20 98 0f 3c 1f 9b 51 a9 5a ca 05 c1 f4 e4 c1 ad f5 c0 97 31 5d a9 29 bc 62 92 51 7c 9a 05 61 c9 60 f3 eb 4b d4 e2 8b 3d c3 3f 9b b8 53 6a 59 3a 20 f5 93 c5 39 12 27 f5 ad 22 0d 4b 3d 73 a1 d3 94 47 16 ed 86 c9 3d e2 30 7a 9a 82 8a 6a 88 94 9d f5 99 28 d8 d4 47 a4 5a 42 fe 7f 24 fb 8f 0c 4c 35 22 40 87 f6 36 ca 40 32 11 4b a2 f6 3b 9e 89 db 0f 42 97 cb e3 8d 33 72 4e 61 82 28 48 7d ea f3 b9 e2 3b e9 59 02 41 88 e3 bd 95 42 65 14 a8 8f 25 b6 f9 63 da 9c e3 22 a6 4c 75 a5 fc 1c c1 48 88 64 7e 02 7d 88 05 63 9d 68 57 ac 32 e2 2d 33 bd 7f d3 b8 f8 b9 26 ab e7 47 ab bb 17 8c 52 a4 03 0d 20 36 7b ca 22 4d cb 80 a8 e3 3b 25 95 5e 9c 15 e6 e6 b2 62 fb 11 53 a5 10 ba 38 e1 5f 81 ed 30 10 9e a2 51 6e 39 fa e7 70 ed cf 05 Data Ascii: aR@B~wE% <QZ1])bQ\|a`K=?SjY: 9'"K=sG=0zj(GZB$L5"@6@2K;B3rNa(H};YABe%c"LuHd~}chW2-3&GR 6{"M;%^bS8_0Qn9p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49803	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:20 UTC	503	OUT	GET /app/themes/ovivo/resources/assets/scripts/libs/drupal.js?ver=6.6.3 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278
2024-10-30 03:01:21 UTC	1460	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:20 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Thu, 25 Jul 2024 10:23:17 GMT ETag: "5c0e-61e0fc88707f0" Accept-Ranges: bytes Content-Length: 23566 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:21 UTC	16384	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 40 66 69 6c 65 0d 0a 20 2a 20 44 65 66 69 6e 65 73 20 74 68 65 20 44 72 75 70 61 6c 20 4a 61 76 61 53 63 72 69 70 74 20 41 50 49 2e 0d 0a 20 2a 2f 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 41 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 2c 20 74 79 70 69 63 61 6c 6c 79 20 74 68 65 20 72 65 74 75 72 6e 20 76 61 6c 75 65 20 66 72 6f 6d 20 61 20 60 24 28 73 65 6c 65 63 74 6f 72 29 60 20 63 61 6c 6c 2e 0d 0a 20 2a 0d 0a 20 2a 20 48 6f 6c 64 73 20 61 6e 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 20 6f 72 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 73 2e 0d 0a 20 2a 0d 0a 20 2a 20 40 74 79 70 65 64 65 66 20 7b 6f 62 6a 65 63 74 7d 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 40 70 72 6f 70 20 7b 6e 75 6d 62 65 Data Ascii: /** * @file * Defines the Drupal JavaScript API. //* * A jQuery object, typically the return value from a `$(selector)` call. * * Holds an HTMLElement or a collection of HTMLElements. * * @typedef {object} jQuery * * @prop {numbe
2024-10-30 03:01:21 UTC	7182	IN	Data Raw: 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 20 67 69 76 65 6e 20 55 52 4c 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 69 74 65 27 73 20 62 61 73 65 20 55 52 4c 2c 20 6f 72 20 68 61 73 20 61 20 70 61 74 68 20 75 6e 64 65 72 20 74 68 65 20 73 69 74 65 27 73 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 62 61 73 65 20 55 52 4c 2e 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 62 73 6f 6c 75 74 65 55 72 6c 20 3d 3d 3d 20 62 61 73 65 55 72 6c 20 7c 7c 20 61 62 73 6f 6c 75 74 65 55 72 6c 2e 69 6e 64 65 78 4f 66 28 60 24 7b 62 61 73 65 55 72 6c 7d 2f 60 29 20 3d 3d 3d 20 30 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 46 6f 72 6d 61 74 73 20 61 20 73 74 72 69 6e 67 20 63 6f 6e 74 61 69 6e 69 6e 67 20 61 20 63 6f Data Ascii: // The given URL matches the site's base URL, or has a path under the site's // base URL. return absoluteUrl === baseUrl \|\| absoluteUrl.indexOf(`${baseUrl}/`) === 0; }; /** * Formats a string containing a co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49800	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:20 UTC	504	OUT	GET /app/plugins/cookie-law-info/legacy/public/images/logo-cookieyes.svg HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278
2024-10-30 03:01:21 UTC	1426	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:20 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:47:58 GMT ETag: "a15-6242f8b39b67b" Accept-Ranges: bytes Content-Length: 2581 Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: image/svg+xml
2024-10-30 03:01:21 UTC	2581	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49802	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:20 UTC	637	OUT	GET /m/386e69de06af7c65/original/HomePageIndustry-735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:21 UTC	812	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 36274 Connection: close Date: Wed, 30 Oct 2024 03:01:21 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePageIndustry-735x551.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: c4588a3b-fa98-6308-ccba-64caaa69a883 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 a23fc047c59f0902384fa94644607c00.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: RpaOuAWKdxwuimdPRMXH53PbyqBD0gdVmjgOz0oN7EkEIByA1UgNRw==
2024-10-30 03:01:21 UTC	7786	IN	Data Raw: 52 49 46 46 aa 8d 00 00 57 45 42 50 56 50 38 20 9e 8d 00 00 70 d2 02 9d 01 2a 80 02 e0 01 3e 6d 32 93 47 a4 22 a2 27 24 74 5d a0 e0 0d 89 63 6d 00 b3 2b 0d 62 bd 91 c3 10 22 25 6f d7 7d 49 14 7a b3 eb d7 cb 09 1f e5 1f 3b fe 97 e4 ff 89 ac 71 f3 07 9d 1f 55 ff df fb bb f9 63 ff 87 fe af b9 4f d7 bf f6 fd 93 ff 1d fb 21 79 cf fd 8a fd ae f7 37 ff 8d fb 8b f0 87 fb 07 fa df 63 9f ed df de 3d 2c fd af 3f 75 bd 9e 7f 70 bd 38 7d a2 7f b1 ff cd f6 67 fd a9 d3 c1 97 77 94 fd db f0 ff d1 5f d9 bf 8e e4 7d 14 7f 0f f3 8b fe 9f 8e 3f 48 75 35 fc ff 80 c0 5c 33 10 f1 ff 4a be 45 74 17 fd 47 eb 0d ff 1f 9d ef d9 01 d8 34 f0 5c 07 0d eb 0a 56 30 31 78 ea 47 24 95 c4 6d 73 c7 a8 48 c0 2f 3d b8 e3 9e 6f d8 ed 37 41 4f fc d2 7d b9 23 e1 1d 57 62 54 1a 88 47 de 91 02 48 Data Ascii: RIFFWEBPVP8 p*>m2G"'$t]cm+b"%o}Iz;qUcO!y7c=,?up8}gw_}?Hu5\3JEtG4\V01xG$msH/=o7AO}#WbTGH
2024-10-30 03:01:21 UTC	8192	IN	Data Raw: 88 e7 84 35 6c 40 a9 1c d7 35 ef 58 af 40 64 33 55 2d 54 b0 ba 53 73 ed 69 63 8f 64 ec 4d 57 17 e4 c0 b9 a7 23 3f 97 56 4e bf 72 d9 fb b8 67 64 f6 be 28 1e 70 83 9f f3 b0 81 9d 0c e0 a3 b5 14 9d 3e b6 4a 29 59 9a a9 68 ee 90 7c 34 73 4e 24 7d ce af b8 e0 47 1f 0a d9 b1 d7 31 2b e3 7c f4 bf 49 fb 3b e3 8c b0 d3 19 e7 fa a6 69 1c 31 5a 5c 29 8e c5 e1 1b ac 70 59 33 56 19 c5 84 8c f5 5c d9 9b 52 42 ff 87 68 23 6a 7e 2b 53 0b 02 33 81 e9 b4 0a 69 85 5f 64 73 45 cd 65 16 fa 31 f6 d5 53 cc d8 02 ae 69 76 d7 a3 d4 8e c9 f8 fc e0 a9 c6 a7 9e 87 36 10 92 55 95 ad f0 4e 56 46 28 d1 c0 75 ee 22 ad e8 bc d8 d0 76 71 3a 7d 5d e3 52 28 75 82 65 bc dc 9c 3f da ea d1 80 7e ca 7e 79 50 bd 30 e4 e2 e1 a3 fe 9b 52 d7 21 3b a3 96 ce 1d a3 6e f2 d5 8e a1 a0 62 0f 82 c4 40 20 Data Ascii: 5l@5X@d3U-TSsicdMW#?VNrgd(p>J)Yh\|4sN$}G1+\|I;i1Z\)pY3V\RBh#j~+S3i_dsEe1Siv6UNVF(u"vq:}]R(ue?~~yP0R!;nb@
2024-10-30 03:01:21 UTC	8949	IN	Data Raw: 1c ad 6b 07 5d c8 c5 cd 60 5e d2 b6 64 f4 be 70 51 57 7e b9 37 a9 66 61 6d d5 37 d5 54 34 cd 59 02 f5 cb 58 28 e4 b8 d1 0e 8e fd a8 0d 01 c3 40 35 0a 67 8c 29 d0 25 ab 10 c8 0c 2e 9b a8 cf d8 e9 d0 1f af e7 a2 eb 60 2b 0f 3c 8d 77 1e 8c f7 be 06 44 38 03 52 38 b9 2b 8b 82 94 6c fa bf 32 61 9e 9c 4d 5a 33 68 84 d5 db 39 5b 29 ff 7f 47 8c 5f 43 0d 32 d6 91 ec b1 02 5a 18 02 76 df c1 fc 27 2c d7 c1 b2 9c a5 c6 dc e1 8f 39 72 4c 30 03 32 53 1e 27 ae 31 25 c9 1b 12 65 09 8c 2e a0 80 b9 e0 f5 e1 92 5c 5a de aa 6b 13 62 70 38 03 65 44 4a 63 5f 0e 1f e9 10 19 9e 4a 45 50 ff 44 0a b0 e3 07 7f 85 46 34 d3 9a 07 51 7d 6d 16 b4 d8 b3 fb b4 72 03 03 c1 40 83 03 e9 20 4d e7 f8 e6 92 fa 5a 0d 8e 3f 50 9a a4 62 b3 e0 e3 73 ac db fb ad e5 da 9d 00 0f 26 90 36 1f 84 97 f9 Data Ascii: k]`^dpQW~7fam7T4YX(@5g)%.`+<wD8R8+l2aMZ3h9[)G_C2Zv',9rL02S'1%e.\Zkbp8eDJc_JEPDF4Q}mr@ MZ?Pbs&6
2024-10-30 03:01:21 UTC	11347	IN	Data Raw: 60 fd 0c 8d 0f ed 29 a0 f7 fc ef 99 81 17 ef f6 20 11 89 01 e7 34 6e be fd 26 c2 a7 c9 26 83 64 2f 3b 3e 6f ba f6 c8 97 43 45 96 38 02 f7 e5 2d 2b 80 34 8d 2b 4b 34 d1 7f 79 74 7d a7 2f 84 dd 2b ec 0a a7 11 fa 5e 5b bc 66 10 2a 91 13 78 83 e0 4c 0b 4b 81 8c c9 6e 2f 25 35 c0 53 e9 28 e9 5e 1c 36 12 8c ac a5 3c f6 99 eb 4e 27 51 58 55 c1 e6 65 5b 1d c5 86 e9 d6 41 e6 d4 d7 5b 2e b0 ad 5f 54 8e 94 74 99 bf 7d b3 e1 e0 30 b1 5b 6a 80 48 62 fa 20 28 62 8f 91 d5 04 d0 52 36 d3 f1 99 fa ab 2e 66 17 f5 b7 d3 d7 a6 44 f3 07 ff 2c 81 7f bf 75 ca 70 6a 6f 9e 0b d3 61 9d 22 c2 4f b1 8e bb 5b a0 f6 8e 13 75 b3 07 db 10 eb c0 5f 07 9d 67 57 8f d2 9b 16 ea 49 6e 12 b7 35 9f e5 92 76 69 47 56 e5 c2 45 fd 61 1b bd 77 bb 68 81 52 86 ab 28 3e a1 a1 aa ab 21 c8 23 3a 3c 52 Data Ascii: `) 4n&&d/;>oCE8-+4+K4yt}/+^[f*xLKn/%5S(^6<N'QXUe[A[._Tt}0[jHb (bR6.fD,upjoa"O[u_gWIn5viGVEawhR(>!#:<R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49801	66.102.1.157	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:20 UTC	859	OUT	POST /g/collect?v=2&tid=G-3N3F1TJNT7&cid=833971690.1730257278&gtm=45je4as0v883110504za200&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.ovivowater.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:21 UTC	849	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.ovivowater.com Date: Wed, 30 Oct 2024 03:01:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49808	150.171.28.10	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:21 UTC	520	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:21 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 51385 Content-Type: application/javascript Last-Modified: Wed, 16 Oct 2024 22:47:44 GMT Accept-Ranges: bytes ETag: "028e0691d20db1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DC06262DC9C740C696DB41A64D878EE1 Ref B: DFW30EDGE1721 Ref C: 2024-10-30T03:01:21Z Date: Wed, 30 Oct 2024 03:01:21 GMT Connection: close
2024-10-30 03:01:21 UTC	3713	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-30 03:01:22 UTC	8192	IN	Data Raw: 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 5d 2c 63 68 65 63 6b 6f 75 74 5f 70 72 6f 67 72 65 73 73 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 73 74 65 70 22 2c 22 63 68 65 63 6b 6f 75 74 5f 6f 70 74 69 6f 6e 22 5d 2c 65 78 63 65 70 74 69 6f 6e 3a 5b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 66 61 74 61 6c 22 5d 2c 67 65 6e 65 72 61 74 65 5f 6c 65 61 64 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 22 5d 2c 6c 6f 67 69 6e 3a 5b 22 6d 65 74 68 6f 64 22 5d 2c 70 61 67 65 5f 76 69 65 77 3a 5b 22 70 61 67 Data Ascii: ","currency","items","coupon"],checkout_progress:["revenue_value","currency","items","coupon","checkout_step","checkout_option"],exception:["description","fatal"],generate_lead:["revenue_value","currency","transaction_id"],login:["method"],page_view:["pag
2024-10-30 03:01:22 UTC	4103	IN	Data Raw: 72 6f 70 65 72 74 79 28 22 67 74 61 67 50 69 64 22 29 26 26 6f 2e 67 74 61 67 50 69 64 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 21 31 3b 6f 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 41 75 74 6f 53 70 61 54 72 61 63 6b 69 6e 67 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 21 31 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 22 29 26 26 28 74 68 69 73 2e Data Ascii: roperty("gtagPid")&&o.gtagPid===!0&&(this.uetConfig.gtagPid=!0);this.uetConfig.enableAutoSpaTracking=!1;o.enableAutoSpaTracking===!0&&(this.uetConfig.enableAutoSpaTracking=!0);this.uetConfig.disableContainer=!1;o.hasOwnProperty("disableContainer")&&(this.
2024-10-30 03:01:22 UTC	8192	IN	Data Raw: 68 3e 31 26 26 6e 5b 30 5d 21 3d 3d 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 29 74 3d 6e 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 31 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 75 65 74 4c 6f 61 64 65 64 7c 7c 74 68 69 73 2e 65 76 71 43 44 69 73 70 61 74 63 68 26 26 74 68 69 73 2e 70 72 6f 63 65 73 73 45 61 72 6c 79 5b 74 5d 3f 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 5f 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 3a 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 65 76 65 6e 74 50 75 73 68 51 75 65 75 65 2e 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 7d 3b 74 68 69 73 2e 5f 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 Data Ascii: h>1&&n[0]!==this.pageLoadEvt)t=n[0],i=Array.prototype.slice.call(n,1);else return;this.uetInstance.uetLoaded\|\|this.evqCDispatch&&this.processEarly[t]?this.uetInstance._push([t,i,r]):this.uetInstance.eventPushQueue.push([t,i,r])};this._push=function(n){var
2024-10-30 03:01:22 UTC	8192	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 26 26 28 75 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 2e 63 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 75 29 26 26 28 6e 2e 6b 77 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 29 29 2c 74 3f 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 50 61 67 65 29 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 22 29 26 26 28 6e 2e 72 3d 74 68 69 73 Data Ascii: getElementsByTagName("meta").keywords&&(u=window.document.head.getElementsByTagName("meta").keywords.content,this.stringExists(u)&&(n.kw=encodeURIComponent(u).replace(/%2C/gi,","))),t?this.stringExists(this.previousPage)&&!n.hasOwnProperty("r")&&(n.r=this
2024-10-30 03:01:22 UTC	8192	IN	Data Raw: 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 22 29 3e 30 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 2e 70 61 67 65 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 22 22 29 26 26 64 65 6c 65 74 65 20 74 2e 70 61 67 65 74 79 70 65 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: &&(t.prodid=t.ecomm_prodid,delete t.ecomm_prodid);t.hasOwnProperty("ecomm_pagetype")>0&&(t.pagetype=t.ecomm_pagetype,delete t.ecomm_pagetype);t.hasOwnProperty("pagetype")&&(t.pagetype==null\|\|t.pagetype.toString()==="")&&delete t.pagetype;t.hasOwnProperty(
2024-10-30 03:01:22 UTC	8192	IN	Data Raw: 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 61 6c 74 26 26 64 65 6c 65 74 65 20 69 2e 61 6c 74 2c 74 68 69 73 2e 63 6c 6f 6e 65 28 74 2c 69 29 7d 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 65 3d 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 28 74 68 69 73 2e 75 72 6c 50 72 65 66 69 78 29 2c 74 3d 74 68 69 73 2e 63 6f 6d 62 69 6e 65 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2c 6e 29 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 2c 6f 3d 5b 22 72 22 2c 22 65 6c 32 22 2c 22 65 63 32 22 2c 22 65 61 32 22 Data Ascii: var i=this.clone(n);return i.alt&&delete i.alt,this.clone(t,i)};this.fireBeacon=function(n){for(var i,s,e=this.getClUrl(this.urlPrefix),t=this.combine(this.beaconParams,n),r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r),o=["r","el2","ec2","ea2"
2024-10-30 03:01:22 UTC	2609	IN	Data Raw: 6f 6d 6d 5f 74 6f 74 61 6c 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 55 61 73 50 72 6f 64 75 63 74 73 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 61 5f 65 22 3a 74 68 69 73 2e 6d 61 70 47 74 6d 45 63 6f 6d 6d 65 72 63 65 50 75 72 63 68 61 73 65 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 61 34 22 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 47 74 6d 50 61 72 61 6d 28 6e 2c 22 76 61 6c 75 65 22 2c 22 65 76 65 6e 74 5f 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 47 61 34 49 74 65 6d 73 28 6e 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 55 72 6c 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d Data Ascii: omm_totalvalue");this.mapGtmUasProducts(n);break;case"ua_e":this.mapGtmEcommercePurchase(n);break;case"ga4":this.replaceGtmParam(n,"value","event_value");this.mapGtmGa4Items(n)}return n};var t=window.location.href;this.documentUrlChanged=function(){var n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49813	172.67.11.155	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:21 UTC	633	OUT	POST / HTTP/1.1 Host: accesswidget-log-receiver.acsbapp.com Connection: keep-alive Content-Length: 170 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.ovivowater.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:21 UTC	170	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 33 30 32 35 37 32 38 30 33 34 34 2c 22 73 65 76 65 72 69 74 79 22 3a 33 2c 22 74 65 78 74 22 3a 7b 22 6d 65 73 73 61 67 65 22 3a 22 43 55 53 54 4f 4d 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 22 57 69 64 67 65 74 20 77 61 73 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6f 76 69 76 6f 77 61 74 65 72 2e 63 6f 6d 22 2c 22 77 69 64 67 65 74 56 65 72 73 69 6f 6e 22 3a 22 76 31 2e 31 38 2e 30 22 7d 7d Data Ascii: {"timestamp":1730257280344,"severity":3,"text":{"message":"CUSTOM","content":"Widget was initialized multiple times","domain":"ovivowater.com","widgetVersion":"v1.18.0"}}
2024-10-30 03:01:22 UTC	317	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: * x-cloud-trace-context: 48502d045014a1c7b3ae88d3768b836f via: 1.1 google cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8da8290be8224871-DFW
2024-10-30 03:01:22 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49807	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:21 UTC	636	OUT	GET /m/2a48842e9777443c/original/HomePageProduct-735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:22 UTC	811	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 32194 Connection: close Date: Wed, 30 Oct 2024 03:01:22 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePageProduct-735x551.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: 8bed4278-e1b2-6b84-1e20-c09667656ead Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 77ba839b79ec0a8b2031c8a828e7fdfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: X_z6w3oUo9Csv1xh8ZsfzR-xcmKNSom3ysle7FcP5D-8uNtwrLc-Lw==
2024-10-30 03:01:22 UTC	7719	IN	Data Raw: 52 49 46 46 ba 7d 00 00 57 45 42 50 56 50 38 20 ae 7d 00 00 f0 a7 02 9d 01 2a 80 02 e0 01 3e 6d 2e 94 48 24 22 29 29 a3 f2 7d d1 30 0d 89 65 6d e0 26 fb 5d 5e a8 fb 12 29 ed a2 83 06 fa 94 8a e4 3a 77 34 97 72 31 cd e6 71 e8 95 3d 6f 2e a2 7c 77 f8 f7 39 5f 2b e3 97 cb cf 9f f3 3b ae df b0 4d c8 9c e7 dd 10 1d 5a 3d 0b df fa 7d a9 b1 ac e5 bf e6 1f d5 f7 ff f9 7f dc 7f c5 ff 1d fb c9 f0 ff 84 ff 7a f0 4f ef 67 f7 3d 11 f1 97 f3 7f ec 3d 0e 3f 29 fe bb e8 8e d8 bc 45 bf 1b ff 77 d0 ba 87 1f 57 f4 31 e9 2d a9 57 b0 ff 6d 3e 07 7f a2 7f 8e eb a4 7d 4a ba d7 a6 fe 75 32 c5 d2 2b 36 8f 6f 85 09 e2 27 c1 13 d9 8a 46 fb f4 34 90 7b aa f3 17 9f a8 a9 29 fd d6 f4 7c 65 77 32 2f 5e 35 07 fd de 1a 8c 87 8b 98 c7 38 8c de af fa 65 b8 cf 33 f0 17 d7 60 14 bf e0 3e e0 Data Ascii: RIFF}WEBPVP8 }*>m.H$"))}0em&]^):w4r1q=o.\|w9_+;MZ=}zOg==?)EwW1-Wm>}Ju2+6o'F4{)\|ew2/^58e3`>
2024-10-30 03:01:22 UTC	8260	IN	Data Raw: f7 3f 2a 67 d4 17 88 ab 5c 13 81 8b 0b 45 f6 75 45 93 9c 31 11 43 81 66 9e 28 47 d8 e7 c1 7e 3a 1a 20 b2 3c 7d 61 31 52 26 35 0a a7 ba e9 27 9a cb 69 71 5f 8c b3 f4 a3 82 c6 c3 f6 ba 67 e7 2d ad fb 0d 73 36 ba ff 5e 2b 54 9f 06 50 9e c6 e1 a2 0f d1 3e 41 c6 49 3f 33 76 53 83 3e 65 12 46 1c 00 ec 1d 56 e5 77 e9 fa 9f c3 eb bb 58 27 74 d0 91 9e 04 c3 a2 af 55 ad cb 7f 37 56 ff d0 07 03 35 1d 46 7d a9 3d 85 8f 2c 2a 14 1c 93 90 cb 6b 66 88 7b 59 61 0d d5 be 8a ce f9 36 d7 e3 6c 83 15 f6 71 3d 04 aa c2 af fa 8f ff 87 b4 b8 2f b2 b9 ae 47 7a 7b 9f 3e bb d2 a7 6d a4 77 76 9d 78 52 b2 bd d6 4b 89 f9 7e a0 1a e2 a7 e0 cf 79 8f 84 12 c5 49 3a ab fc 33 8f 76 f0 46 62 f0 76 21 42 20 90 19 5c 5b 93 a7 a8 01 c4 f4 63 4d 63 09 b8 30 33 18 26 1f 5c 8f 8e a2 0a 28 39 a4 Data Ascii: ?g\EuE1Cf(G~: <}a1R&5'iq_g-s6^+TP>AI?3vS>eFVwX'tU7V5F}=,kf{Ya6lq=/Gz{>mwvxRK~yI:3vFbv!B \[cMc03&\(9
2024-10-30 03:01:22 UTC	16215	IN	Data Raw: 03 35 3d 94 69 c0 fc 25 9f 6d 0e 4e 5c 21 ac 4f 37 9f d1 2d 8c 9e 7d 3c cc 98 d4 94 59 59 c2 4e 42 fc 73 ac ef 37 9e db aa 67 c2 f8 8a 23 9c c6 22 5e 5d bd 1c 58 6c 20 69 bb 51 f1 61 be b4 b3 8e 64 4c 71 27 c0 28 84 88 a6 22 47 52 a9 c6 fd d9 d7 98 43 25 ee 52 64 50 22 bd f8 b9 77 ef 4d 73 f3 ab de 5c 13 12 22 3b fc 37 07 95 94 07 4e 23 64 96 49 c3 74 5e 98 ba 1e f2 df 51 3b 63 32 01 cc 4b 10 15 0a 81 0d 9a 23 ca 83 64 6e 3f 00 c8 09 5b d9 9d 2f 4e 98 4b a8 39 57 78 91 d3 6e fe 4d 30 de c0 a1 6c 7d 5b 75 7d 6f 91 30 c5 e8 90 cf b1 64 84 81 87 3b 3c 24 3a 88 13 17 1e 05 86 1e 01 8a 83 09 56 cb 5f 5b 5c 3a 81 84 f3 3f e0 88 2a df fe ee 7b 12 4d eb 9e dd d5 b2 67 4f 56 ce de 28 dc 66 ec 2a 46 33 02 3f 0b 94 54 d6 d6 36 40 9b e2 f7 55 e1 c1 89 c4 09 fa 09 a2 Data Ascii: 5=i%mN\!O7-}<YYNBs7g#"^]Xl iQadLq'("GRC%RdP"wMs\";7N#dIt^Q;c2K#dn?[/NK9WxnM0l}[u}o0d;<$:V_[\:?{MgOV(fF3?T6@U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49806	142.250.186.100	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:21 UTC	974	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=72945692.1730257280&auid=969400457.1730257280&npa=0&gtm=45He4as0v853469589za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&tft=1730257280084&tfd=10423&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.ovivowater.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:22 UTC	471	IN	HTTP/1.1 200 OK Vary: Origin Vary: X-Origin Vary: Referer Date: Wed, 30 Oct 2024 03:01:21 GMT Content-Type: text/html Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.ovivowater.com Access-Control-Expose-Headers: vary,vary,vary,date,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49810	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:21 UTC	637	OUT	GET /m/48eb07922352251c/original/HomePageServices-408x306.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:22 UTC	812	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 133055 Connection: close Date: Wed, 30 Oct 2024 03:01:22 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePageServices-408x306.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 01bf0430-6b79-1fbb-77f9-fdaa1b0ab7d6 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 e94c77a12a65a84cbcef7856ed7e0fb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: QWxvQVL0qBr37QpgPfTfiahu5eUPZJx5AFD3kRjG2hHZyMKMzN-sfQ==
2024-10-30 03:01:22 UTC	15572	IN	Data Raw: ff d8 ff e1 11 7e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 30 33 3a 31 35 20 31 35 3a 31 31 3a 35 30 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 98 a0 03 00 04 00 00 00 01 00 00 01 32 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ~ExifMM*bj(1r2i-'-'Adobe Photoshop 22.3 (Windows)2021:03:15 15:11:502"
2024-10-30 03:01:22 UTC	418	IN	Data Raw: 34 36 2d 62 63 34 31 2d 66 33 32 37 35 63 63 36 65 63 31 38 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 33 2d 31 35 54 31 35 3a 31 31 3a 35 30 2d 30 34 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 70 68 6f 74 6f 73 68 6f 70 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 Data Ascii: 46-bc41-f3275cc6ec18" stEvt:when="2021-03-15T15:11:50-04:00" stEvt:softwareAgent="Adobe Photoshop 22.3 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:ac
2024-10-30 03:01:22 UTC	16384	IN	Data Raw: 35 31 2d 39 39 34 63 2d 38 65 30 65 2d 38 38 39 34 39 37 32 32 30 38 63 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 33 2d 31 35 54 31 35 3a 31 31 3a 35 30 2d 30 34 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 33 36 32 36 65 33 64 2d 32 65 31 38 2d 34 32 34 36 2d 62 63 34 31 2d 66 33 32 37 35 63 63 36 65 63 31 38 22 20 73 74 52 65 66 Data Ascii: 51-994c-8e0e-8894972208c6" stEvt:when="2021-03-15T15:11:50-04:00" stEvt:softwareAgent="Adobe Photoshop 22.3 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:33626e3d-2e18-4246-bc41-f3275cc6ec18" stRef
2024-10-30 03:01:22 UTC	16384	IN	Data Raw: b9 f6 13 b3 fb a5 fd e6 96 75 8e db 93 39 8a 29 07 f0 c5 21 a5 3f d2 39 e1 d2 48 77 8e 5e 20 3f fa e8 c1 12 ff 00 4a 6f fa 1c f4 5e 77 67 cc 5f e5 ab be bc f4 f8 7e c2 eb 3c 16 55 8b 18 ab 36 a7 70 61 b0 93 45 25 8b 09 0d 0d 75 6c b8 b7 55 b1 25 5a 20 2d fd 3d c9 9b 17 b2 3f 7a 9e 5a 92 09 ef b9 5f 75 b9 b4 56 15 4b 9d b6 59 54 80 78 16 45 59 05 78 61 ab d1 80 dd 79 62 61 a2 4f 72 2c 67 34 f5 8c 37 e4 43 af f3 af 50 fa bf 79 6c ec 45 46 6f 7f d1 f6 7e c9 cf ec 9a da 36 a8 19 0a 9d d5 81 ad 8f 25 4c b3 41 05 33 ab d0 57 4b 4d 59 34 7a 05 c2 17 b1 53 a6 dc 8f 7d 4c fb 93 6c 7c f9 69 ee dc 1b de e9 b1 6e bb 4e dd 7d 63 71 15 d5 b4 d6 f7 29 04 a7 46 a8 d9 5e 55 55 3e 14 a8 0c 45 d4 b2 a9 64 d5 dc 6b 01 fb df 7b b1 4d c9 d2 59 c1 79 6b 75 77 05 cc 6d 14 88 f1 Data Ascii: u9)!?9Hw^ ?Jo^wg_~<U6paE%ulU%Z -=?zZ_uVKYTxEYxaybaOr,g47CPylEFo~6%LA3WKMY4zS}Ll\|inN}cq)F^UU>Edk{MYykuwm
2024-10-30 03:01:22 UTC	16384	IN	Data Raw: e8 95 92 48 c1 d5 1d 73 d5 ba 60 fb 2b b6 b7 7f 4e 6c ac 66 3f 01 53 91 c4 e4 53 6c c1 55 56 b8 e3 50 a9 1d 4b 2a 54 fe f6 93 fa 14 fb ac eb 6e 6f 46 a4 a3 56 95 f9 53 8f 4d ab 91 0e 95 3d a7 fc 3d 16 1e cd ea b9 76 f7 6d ca 95 4b 28 85 e4 07 cb 1c 6c 24 55 00 39 44 50 3d 24 13 ed fd b2 e0 38 b9 a9 a3 a8 3d 31 7d 6e 53 e9 ca a9 20 9e 96 7d 77 4d 2e e5 ec 35 db b8 5a b6 c5 c6 c1 63 6c 83 dd a7 25 54 87 07 f3 73 ed d8 75 f8 6d 20 a1 35 fe 5d 69 c0 d6 16 94 1d 5a 9e d7 f8 b9 36 73 ae b2 d4 55 9b e6 be 40 d4 ef 3a 7d b4 13 19 e3 98 2d d3 43 2d 88 3a bf a7 b7 9a e2 76 01 7b 55 87 9f 5a f0 55 7b 81 24 f4 e3 f1 13 a0 e9 fa 97 b0 b2 87 79 ee 6c 9e 4b 11 93 a2 92 6a 37 c8 99 e1 6a 69 f5 dc 15 2c df 5b 7b 68 cb 77 24 72 a3 30 d6 0e 29 d3 ca 8a 0a b1 4e cf 3e ae a5 Data Ascii: Hs`+Nlf?SSlUVPK*TnoFVSM==vmK(l$U9DP=$8=1}nS }wM.5Zcl%Tsum 5]iZ6sU@:}-C-:v{UZU{$ylKj7ji,[{hw$r0)N>
2024-10-30 03:01:22 UTC	1390	IN	Data Raw: b5 bd c2 1b a8 0d 3b d3 d7 a9 ab 6b 3a 20 4a 9e ad ef 63 f6 c6 ca da d8 25 ab c8 66 69 a1 09 4d a8 89 26 54 d4 42 df f2 c3 8f 61 79 ed 99 c9 20 63 a1 2c 13 d2 82 bc 7a 25 7d d1 f2 07 63 6f 3a cc 88 a4 cb c7 28 89 a6 5d 2a e1 83 5b 50 16 e4 df db b6 51 34 6a 73 d6 af 64 56 21 47 54 93 dd 9b c3 1b 99 ca 65 a2 a4 24 24 2f 22 29 b1 f5 f2 79 1f 8b 1f 67 11 de 18 b4 ad 31 d1 2c 96 eb 26 a2 78 f5 5d bb 9b 1e 5b 39 47 52 3c aa b2 55 a9 bd 88 1f e7 07 3e c4 bb 45 e3 4b 73 1a 79 02 3a 0f ee 16 eb 1d bc 8c 38 d3 ad 8a fe 2c c4 c9 d5 3b 70 6a 2f fe 43 18 04 f0 7f 42 dc 7b c8 3d b9 cb 5b 45 5f 41 d6 3f ee e8 c9 73 3d 3c db a3 28 80 1b dc 7d 3d 98 9e 89 85 00 35 19 eb 26 91 f4 b0 e3 9f 75 62 40 14 eb ca 2a 4e 7a e4 01 fa 8f c7 bd 6a 14 02 bd 3a a4 e8 c0 c8 eb 8f 0c 6d Data Ascii: ;k: Jc%fiM&TBay c,z%}co:(][PQ4jsdV!GTe$$/")yg1,&x][9GR<U>EKsy:8,;pj/CB{=[E_A?s=<(}=5&ub@Nzj:m
2024-10-30 03:01:22 UTC	2694	IN	Data Raw: 8c 79 8c f1 ac 88 9a 59 00 b9 00 81 ec cf 74 b7 85 cc 8f e6 4d 6b c0 f4 31 db ee e5 01 52 bd a0 53 a5 07 59 77 be 23 15 dd bb 43 09 bd 73 c9 82 d9 f9 3d d1 45 53 3b d5 c9 e1 a5 12 a4 a1 b5 17 62 15 00 f7 bd b6 29 2e 1d 60 84 56 41 91 d3 1b 9c a2 31 e2 90 40 f3 e8 56 ee 5d fd b0 f7 07 7f 7c 89 a6 da 55 14 f9 dc 7e e5 d8 31 62 70 55 b4 2f e6 a5 a8 ac b8 f4 89 97 d2 4f b3 b8 ac 2e 16 15 8a 56 a4 a2 4a fe 5d 62 1d f5 bc bc c1 cd 5e e2 45 b5 db 19 19 e1 54 f9 6a af 56 3f d6 db f3 ad 28 fe 28 ec 1d 95 5b 9f 6c 66 f2 c4 6d 54 c7 d5 e3 e9 ea e4 8d 12 a7 41 0a b2 aa 9b 10 1b 93 ed 9b dd 9b 70 37 2d 73 1f f6 67 ac 8b e4 d9 86 d9 cb 7b 56 d9 76 80 5c 47 12 a9 1e 84 0e 8b 7e e8 ec 3e 9d ab ea 2a cd a1 1e e7 a7 cc f6 65 1d 64 8b 2d 20 9a 79 26 09 23 92 81 7c 86 dc 03 Data Ascii: yYtMk1RSYw#Cs=ES;b).`VA1@V]\|U~1bpU/O.VJ]b^ETjV?(([lfmTAp7-sg{Vv\G~>*ed- y&#\|
2024-10-30 03:01:22 UTC	8949	IN	Data Raw: ed 63 5b 4c be 7a 31 eb 50 6b fe 7e b7 77 da 23 55 3d ac e0 1f 95 54 ff 00 94 0f cf a1 77 ba 29 e8 b6 d7 cd 4e 8e da 34 08 02 60 fa c3 7b 6e 80 04 31 4e 66 ac c7 e1 b2 59 7c 64 2d 1c d7 89 a3 fb 9c 12 20 04 72 96 06 e0 58 bf 3c a5 6e 6d 85 7f 09 e9 34 11 8f f1 e6 03 bd 10 7f 3f f5 0e 88 54 39 fc 06 43 33 95 a0 c8 c3 51 82 cd 55 c5 51 45 53 51 95 91 63 8f 27 0e 4a 86 98 65 3e fa 55 69 e4 8a bf 2b 58 82 a9 03 1f 18 85 16 38 7d 76 46 43 6f bb 0f 1e 48 26 4d 32 7f 87 e7 5e 9e 97 69 5f a6 8e 78 0e a8 88 a6 38 8c 0c 1f f2 f4 3c 6c 03 06 4f e2 df 60 ec 9c bb c6 6b f1 3b 7d eb f0 35 13 1b 35 5e 57 6e ed 48 33 f5 eb 8f 85 a3 49 22 a3 6c 24 7a cb b7 d4 27 e9 fa 1f 66 75 5f 0c 10 f9 0b 9e 90 5d 2e bb 6d 4c 95 21 aa 3f 95 7f 2c f9 f1 e8 f4 ff 00 28 bf 9b 39 3d 87 53 Data Ascii: c[Lz1Pk~w#U=Tw)N4`{n1NfY\|d- rX<nm4?T9C3QUQESQc'Je>Ui+X8}vFCoH&M2^i_x8<lO`k;}55^WnH3I"l$z'fu_].mL!?,(9=S
2024-10-30 03:01:22 UTC	16384	IN	Data Raw: 53 b4 db 5d c1 88 91 dd 0b 65 48 fe 83 71 14 f2 0d 5a 0c 13 4c f5 a1 cf c7 ce e7 f9 67 fc a7 fe 52 d0 76 06 d1 ab ab eb 9e d4 eb dc ae 7b 69 6e cd 9b 92 96 3a 99 a0 c7 0a e9 68 37 af 5f ef dc 22 a4 f0 8d bd 94 9b 18 cb 2d ef f6 f5 10 c1 5b 4e cb 2c 51 bf be aa 6c 7b 8d be e7 b6 ed 7b ed 84 ab 71 b4 dd 44 92 ae 93 87 46 15 c8 1c 08 e0 c0 e5 58 10 72 0f 47 91 4c 55 bc 48 ff 00 b4 5e 3f 3a 75 b3 3f f3 1d f9 49 d7 5f 36 f7 3f c7 3f 98 3d 65 bb 52 3d a9 db 1f 1a 36 6d 2e e0 c1 43 59 4e f9 fe af de 1d 73 bb 37 ec 3d 91 b2 b7 1d 18 79 1f 1f 5f 86 ae cc 3c 90 4b 22 85 ab a4 91 2a 62 bc 6e a4 cc dc 96 a9 16 dd 77 26 96 48 cc a5 81 34 a9 40 2a 0d 78 1a 64 1a 70 20 f4 e6 e3 3c 47 49 8e 55 75 a7 95 78 91 5a 50 80 41 15 a1 f9 f0 a8 cf 50 bf 97 1e 26 5d d9 f0 c7 29 da Data Ascii: S]eHqZLgRv{in:h7_"-[N,Ql{{qDFXrGLUH^?:u?I_6??=eR=6m.CYNs7=y_<K"bnw&H4@xdp <GIUuxZPAP&])
2024-10-30 03:01:22 UTC	6396	IN	Data Raw: 0d d1 3b aa e9 4a da ba 8d af 06 22 a6 bd 78 f5 9a 97 c1 72 c3 82 54 9f 7d 8f fb 9f 6e 4d 7f ec de db 1c 8c 49 b6 bc ba 84 03 c5 42 ca 58 2f c8 0d 46 83 ca bd 4b 5e d6 06 5e 4e b5 b7 77 d4 d1 5c 4a 9f 60 d5 a8 0f cb 57 f3 ea 9e ea ca 89 e4 d3 ca 79 09 fe 9e 92 c4 fd 07 1c 5f de 48 4f 4f 17 e5 d4 aa 95 d0 a0 fa 74 22 75 b6 e8 c8 6c 5d ed b3 77 a6 32 79 20 c8 6c fd d7 b7 37 4d 05 44 2c 52 58 aa 30 19 7a 4c 9c 46 36 04 10 59 a9 6d ff 00 1a f6 be 05 56 60 87 e0 22 87 f3 c7 f8 3a 4d 23 90 c1 87 c4 08 3f b3 23 ad d4 7b bf e4 2e ce a1 c0 6d ec c5 14 f4 35 2d b9 31 f8 cc dd 17 85 d2 46 34 79 8a 28 32 34 e4 e9 27 fd d1 52 bf e1 ec 86 c2 c4 a5 cb 2b d4 50 d3 f6 74 26 bc bb 0d 00 7a f1 15 e8 05 1d 85 41 9e a6 8e a0 d3 c3 a2 ae 3d 57 55 17 fd 24 f3 fe 3e cc ae 63 5f Data Ascii: ;J"xrT}nMIBX/FK^^Nw\J`Wy_HOOt"ul]w2y l7MD,RX0zLF6YmV`":M#?#{.m5-1F4y(24'R+Pt&zA=WU$>c_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49809	18.66.102.53	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:21 UTC	543	OUT	GET /c/hotjar-1840342.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:22 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Wed, 30 Oct 2024 03:01:22 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/c99b657a986077c81f7b228d4276c36c Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c387974a86541bbcc6c5141a85eeaf36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: rFx4SF34bF_Nfp-MIjRtPbj6shdM1km1HIyXi6WENQ5gusFjeQDRPA==
2024-10-30 03:01:22 UTC	13107	IN	Data Raw: 33 33 32 62 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 38 34 30 33 34 32 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 39 30 39 30 39 30 39 30 39 30 39 30 39 30 39 31 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 Data Ascii: 332bwindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1840342,"rec_value":0.09090909090909091,"state_change_listen_mode":"automatic","record":false,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console
2024-10-30 03:01:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49814	172.67.11.155	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:21 UTC	596	OUT	GET /config/ovivowater.com/config.json?page=%2Fen%2F HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.ovivowater.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:22 UTC	908	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:22 GMT Content-Type: application/json Content-Length: 164 Connection: close x-goog-generation: 1687879534048394 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 164 x-goog-hash: crc32c=fBDmvg== x-goog-hash: md5=qowoeJMIzvZThiXPCa1ZrA== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace x-guploader-uploadid: AHmUCY0gU8TgoxeKC5DOKTMjn4BQCYgqG_V2wq4OSIlrzFtDKCo958O5C51D0TLTQI5Wh0lpqSI expires: Thu, 30 Oct 2025 03:01:22 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Tue, 27 Jun 2023 15:25:34 GMT etag: "aa8c28789308cef6538625cf09ad59ac" CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Server: cloudflare CF-RAY: 8da8290c4b0b45ff-DFW
2024-10-30 03:01:22 UTC	164	IN	Data Raw: 7b 22 74 69 6d 65 22 3a 22 32 30 32 33 2d 30 36 2d 32 37 54 31 35 3a 32 35 3a 33 33 2e 39 38 34 5a 22 2c 22 61 70 70 22 3a 22 61 70 70 22 2c 22 73 70 65 63 69 66 69 63 73 22 3a 22 22 2c 22 61 64 64 6f 6e 41 6e 61 6c 79 74 69 63 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 4d 65 74 61 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 49 6d 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 53 74 79 6c 65 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 57 61 74 63 68 65 72 22 3a 66 61 6c 73 65 7d Data Ascii: {"time":"2023-06-27T15:25:33.984Z","app":"app","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"blockWatcher":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49812	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:21 UTC	630	OUT	GET /m/35a1c3addedab439/original/Mask-sailshape-2x.png HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:22 UTC	2294	IN	HTTP/1.1 404 Not Found Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 03:01:22 GMT Server: nginx Cache-Control: no-cache, no-store, must-revalidate Content-Security-Policy-Report-Only: default-src 'self'; child-src blob: https://; connect-src 'self' blob: https://d8ejoa1fys2rk.cloudfront.net https://sentry10.bynder.cloud https://api2.amplitude.com https://analytics.com https://.google-analytics.com https://stats.g.doubleclick.net https://.amazonaws.com https://fast.appcues.com https://api.appcues.com https://api.appcues.net wss://api.appcues.net https://apiv2.webdamdb.com/oauth2/token https://cmp.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://disclosure.api.osano.com emrays.production-global.us-east-1.bynder.cloud https://dam.emrays.com https://cdn.heapanalytics.com https://.heap-api.com; font-src https://* data: ; img-src https://* data: blob:; media-src https://*; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://d8ejoa1fys2rk.cloudfront.net https://www.googletagmanager.com https://www.google-analytics.com https://js.hs-analytics.net fast.appcues.com browser.sentry-cdn.com bynder-static.s3.amazonaws.com https://c [TRUNCATED] X-API-Correlation-Id: 88d22a68-3485-7f4a-98d3-6f1eaf116557 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Error from cloudfront Via: 1.1 d9523e44e96d2539081596bb1d268d44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: pfmFxb8Qv22ZXpLvW53yK8d7LfCahVH8GFCAfBQWbqYbiXMWIUH_5Q==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49816	18.245.46.37	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	568	OUT	GET /companies/205035836/d625593f098d4d02b587/12/swap.js HTTP/1.1 Host: cdn.calltrk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:22 UTC	756	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 40282 Connection: close Date: Wed, 30 Oct 2024 03:01:22 GMT X-Xss-Protection: 1; mode=block Cache-Control: max-age=3600, public Etag: W/"585b39e8f0661a1f2cf6c9e55d9f44d6" Referrer-Policy: strict-origin-when-cross-origin Timing-Allow-Origin: * Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 109cf2c0-4a56-410b-a4da-634fd5dbb2ce X-Runtime: 0.004805 X-Cache: Miss from cloudfront Via: 1.1 4f3281e2362f23bf5efc65311d3defb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: T6ahDry3JeC73tIAq4Yia046ugEnBq03gaFmMUqIzXqjbxAWmWt6Fg==
2024-10-30 03:01:22 UTC	3556	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 72 61 70 70 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 64 6f 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 2c 65 2e 64 6f 63 75 6d 65 6e 74 55 52 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 7d 2c 65 2e 64 6f 63 75 6d 65 6e 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 3a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 2c 65 2e 69 73 44 65 62 75 67 3d Data Ascii: !function(){"use strict";var Wrappers=function(){function e(){}return e.documentReferrer=function(){return document.referrer},e.documentURL=function(){return document.URL},e.documentCookie=function(e){return e?document.cookie=e:document.cookie},e.isDebug=
2024-10-30 03:01:22 UTC	16384	IN	Data Raw: 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 61 29 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 61 3d 22 63 61 6c 6c 74 72 6b 2d 22 2b 65 5b 74 5d 3b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 61 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 7d 28 29 2c 53 65 73 73 Data Ascii: dow.localStorage.getItem(a);if(n)return JSON.parse(n)}return null},t.removeItem=function(){for(var e=[],r=0;r<arguments.length;r++)e[r]=arguments[r];for(var t=0;t<e.length;t++){var a="calltrk-"+e[t];window.localStorage.removeItem(a)}return null},t}(),Sess
2024-10-30 03:01:22 UTC	3608	IN	Data Raw: 70 2e 6c 61 73 74 50 6f 6c 6c 3c 74 7c 7c 28 43 61 6c 6c 54 72 6b 53 77 61 70 2e 6c 61 73 74 50 6f 6c 6c 3d 72 2c 53 65 73 73 69 6f 6e 2e 69 73 4d 75 6c 74 69 28 29 7c 7c 28 65 2e 69 64 73 3d 53 65 73 73 69 6f 6e 2e 6e 61 6d 65 73 70 61 63 65 49 64 73 28 29 29 2c 65 2e 70 65 72 66 3d 50 65 72 66 6f 72 6d 61 6e 63 65 2e 72 75 6e 74 69 6d 65 50 65 72 66 44 61 74 61 28 29 2c 44 6f 6d 2e 67 65 74 53 63 72 69 70 74 28 61 2e 70 6f 6c 6c 53 65 73 73 69 6f 6e 55 52 4c 28 29 2c 65 29 29 7d 2c 61 2e 70 6f 6c 6c 49 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 43 61 6c 6c 54 72 6b 2e 66 69 72 73 74 4e 61 6d 65 73 70 61 63 65 28 29 2e 73 65 73 73 69 6f 6e 5f 70 6f 6c 6c 5f 69 6e 74 65 72 76 61 6c 3b 43 61 6c 6c 54 72 6b 53 77 61 70 2e 70 6f 6c 6c 49 Data Ascii: p.lastPoll<t\|\|(CallTrkSwap.lastPoll=r,Session.isMulti()\|\|(e.ids=Session.namespaceIds()),e.perf=Performance.runtimePerfData(),Dom.getScript(a.pollSessionURL(),e))},a.pollInit=function(){var e=CallTrk.firstNamespace().session_poll_interval;CallTrkSwap.pollI
2024-10-30 03:01:22 UTC	1428	IN	Data Raw: 75 6d 70 5f 6c 61 6e 64 69 6e 67 5f 70 61 67 65 5f 70 61 72 61 6d 3b 55 72 6c 73 2e 75 72 6c 43 6f 6e 74 61 69 6e 73 50 61 72 61 6d 28 65 29 26 26 28 53 65 73 73 69 6f 6e 2e 63 72 44 65 6c 65 74 65 4f 6c 64 43 6f 6f 6b 69 65 73 28 29 2c 64 65 6c 65 74 65 20 43 61 6c 6c 54 72 6b 53 77 61 70 2e 5f 72 65 66 65 72 72 65 72 2c 64 65 6c 65 74 65 20 43 61 6c 6c 54 72 6b 53 77 61 70 2e 5f 6c 61 6e 64 69 6e 67 2c 43 61 6c 6c 54 72 6b 53 77 61 70 2e 5f 72 65 66 65 72 72 65 72 41 6e 64 4c 61 6e 64 69 6e 67 43 6f 6f 6b 69 65 73 43 72 65 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 57 72 61 70 70 65 72 73 2e 64 6f 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 28 29 2c 74 68 69 73 2e 6c 61 6e 64 69 6e 67 3d 57 72 61 70 70 65 72 73 2e 64 6f 63 75 6d 65 Data Ascii: ump_landing_page_param;Urls.urlContainsParam(e)&&(Session.crDeleteOldCookies(),delete CallTrkSwap._referrer,delete CallTrkSwap._landing,CallTrkSwap._referrerAndLandingCookiesCreated=!1,this.referrer=Wrappers.documentReferrer(),this.landing=Wrappers.docume
2024-10-30 03:01:22 UTC	2856	IN	Data Raw: 20 65 3d 74 68 69 73 2e 61 73 73 69 67 6e 73 28 29 3b 72 65 74 75 72 6e 20 65 7c 7c 7b 7d 7d 2c 43 61 6c 6c 54 72 6b 53 77 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 55 6e 61 73 73 69 67 6e 65 64 53 77 61 70 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 75 6e 61 73 73 69 67 6e 73 28 29 3b 72 65 74 75 72 6e 20 65 7c 7c 5b 5d 7d 2c 43 61 6c 6c 54 72 6b 53 77 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 61 73 73 69 67 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 43 61 6c 6c 54 72 6b 53 77 61 70 2e 5f 75 6e 61 73 73 69 67 6e 73 3d 65 3a 43 61 6c 6c 54 72 6b 53 77 61 70 2e 5f 75 6e 61 73 73 69 67 6e 73 7d 2c 43 61 6c 6c 54 72 6b 53 77 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 61 73 73 69 67 6e 73 3d 66 75 Data Ascii: e=this.assigns();return e\|\|{}},CallTrkSwap.prototype.getUnassignedSwaps=function(){var e=this.unassigns();return e\|\|[]},CallTrkSwap.prototype.unassigns=function(e){return e?CallTrkSwap._unassigns=e:CallTrkSwap._unassigns},CallTrkSwap.prototype.assigns=fu
2024-10-30 03:01:22 UTC	12450	IN	Data Raw: 68 69 73 2e 61 73 73 69 67 6e 73 28 29 7c 7c 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 6e 3d 30 3b 6e 3c 61 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 6f 3d 61 5b 6e 5d 3b 69 66 28 2d 31 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 6f 29 26 26 21 28 6f 20 69 6e 20 74 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 2c 43 61 6c 6c 54 72 6b 53 77 61 70 2e 63 68 65 63 6b 46 6f 72 6d 73 4f 72 43 68 61 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 21 31 2c 72 3d 21 31 3b 43 61 6c 6c 54 72 6b 2e 65 61 63 68 4e 61 6d 65 73 70 61 63 65 28 66 75 6e 63 74 69 6f 6e 28 6e 73 29 7b 65 3d 65 7c 7c 6e 73 2e 68 61 73 53 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 28 29 2c 72 3d 72 7c 7c 6e 73 2e 68 61 73 46 6f 72 6d 73 4f 72 43 68 61 Data Ascii: his.assigns()\|\|{},a=Object.keys(e),n=0;n<a.length;n++){var o=a[n];if(-1===r.indexOf(o)&&!(o in t))return!0}return!1},CallTrkSwap.checkFormsOrChat=function(){var e=!1,r=!1;CallTrk.eachNamespace(function(ns){e=e\|\|ns.hasSessionTracker(),r=r\|\|ns.hasFormsOrCha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49824	104.22.0.204	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	358	OUT	GET /apps/app/dist/js/app.js HTTP/1.1 Host: acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:22 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:22 GMT Content-Type: application/javascript Content-Length: 390508 Connection: close expires: Thu, 30 Oct 2025 03:01:22 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Tue, 29 Oct 2024 15:47:33 GMT etag: "0719dec86bcd3822363511015c70e8c5" x-goog-generation: 1730216853766384 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 390508 x-goog-hash: crc32c=v14fXQ== x-goog-hash: md5=BxneyGvNOCI2NREBXHDoxQ== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: AHmUCY2tDC1EfwC6KTGTnZv8OCx5KBR7Xxwd2VHJi6cIvxLn--3Ce4hgUwxdQD7Fcm4gB8qlCEWBRTM5UA CF-Cache-Status: HIT Age: 8 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8da829115900469e-DFW
2024-10-30 03:01:22 UTC	529	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 7b 72 65 74 65 6e 74 69 6f 6e 50 65 72 69 6f 64 44 61 79 73 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 74 2c 64 61 79 73 42 65 66 6f 72 65 4e 6f 74 69 63 65 3a 69 2c 70 72 6f 64 75 63 74 4e 61 6d 65 3a 73 2c 76 65 72 73 69 6f 6e 3a 6e 2c 69 67 6e 6f 72 65 50 61 74 74 65 72 6e 3a 61 7d 29 7b 69 66 28 61 2e 73 6f 6d 65 28 28 65 3d 3e 52 65 67 45 78 70 28 65 29 2e 74 65 73 74 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 29 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 28 2d 31 2a 28 44 61 74 65 2e 6e 6f 77 28 29 2d 74 2d 32 34 2a 65 2a 36 30 2a 36 30 2a 31 65 33 29 2f 38 36 34 65 35 29 2e 74 6f 46 69 78 65 64 28 32 29 3b 72 3c 3d 69 26 26 72 3e 3d 30 3f 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e Data Ascii: !function({retentionPeriodDays:e,timestamp:t,daysBeforeNotice:i,productName:s,version:n,ignorePattern:a}){if(a.some((e=>RegExp(e).test(document.currentScript.src))))return;const r=(-1(Date.now()-t-24e6060*1e3)/864e5).toFixed(2);r<=i&&r>=0?console.warn
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 74 74 65 72 6e 3a 5b 22 2f 5e 28 3f 21 2e 2a 76 5c 5c 64 2b 5c 5c 2e 5c 5c 64 2b 5c 5c 2e 5c 5c 64 2b 29 2e 2a 2f 22 5d 7d 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 33 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 73 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 76 61 6c 75 65 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 69 3d 74 26 26 65 5b 74 5d 2c 73 3d 30 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 29 3b 69 66 28 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 Data Ascii: ttern:["/^(?!.v\\d+\\.\\d+\\.\\d+)./"]}),(()=>{"use strict";var e={301:function(e,t,i){var s=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,i=t&&e[t],s=0;if(i)return i.call(e);if(e&&"number"==typeof e.length)return{nex
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 64 2e 6e 65 78 74 28 29 3b 21 75 2e 64 6f 6e 65 3b 75 3d 64 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 68 3d 75 2e 76 61 6c 75 65 3b 65 2e 70 75 72 69 66 79 49 66 72 61 6d 65 57 69 6e 64 6f 77 28 68 29 7d 7d 63 61 74 63 68 28 65 29 7b 61 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 75 26 26 21 75 2e 64 6f 6e 65 26 26 28 72 3d 64 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 61 2e 65 72 72 6f 72 7d 7d 65 2e 6f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 74 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 72 65 74 75 72 6e 20 65 2e 70 75 72 69 66 79 49 66 72 61 6d 65 57 69 6e 64 6f 77 3d Data Ascii: d.next();!u.done;u=d.next()){var h=u.value;e.purifyIframeWindow(h)}}catch(e){a={error:e}}finally{try{u&&!u.done&&(r=d.return)&&r.call(d)}finally{if(a)throw a.error}}e.observer.observe(t.document.body,{childList:!0,subtree:!0})}return e.purifyIframeWindow=
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 6e 74 73 5b 74 5d 3b 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 7d 7d 7d 63 61 74 63 68 28 65 29 7b 6e 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 75 26 26 21 75 2e 64 6f 6e 65 26 26 28 61 3d 64 2e 72 65 74 75 72 6e 29 26 26 61 2e 63 61 6c 6c 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 2e 65 72 72 6f 72 7d 7d 7d 2c 65 78 74 65 6e 64 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 2c 6f 2c 6c 3d 69 2e 72 65 66 2c 63 3d 69 2e 74 61 72 67 65 74 52 65 66 2c 64 3d 74 2e 6e 61 6d 65 73 2c 75 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 2c 68 3d 74 2e 70 6f 73 74 4d 65 74 68 6f 64 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 5b 75 5d 5b 65 2e 50 72 65 66 69 78 2b 74 Data Ascii: nts[t];c.apply(this,e)}}}catch(e){n={error:e}}finally{try{u&&!u.done&&(a=d.return)&&a.call(d)}finally{if(n)throw n.error}}},extendObject:function(t,i){var r,o,l=i.ref,c=i.targetRef,d=t.names,u=t.constructorName,h=t.postMethod,p=function(t){c[u][e.Prefix+t
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 57 69 74 68 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 72 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 57 69 6e 64 6f 77 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 57 69 74 68 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 72 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 72 65 Data Ascii: Strategies.extendPrototypeWithImplementation,implementation:r.EventDelegator.addEventListener},{names:["removeEventListener"],constructorName:"Window",replaceStrategy:e.ReplaceStrategies.extendPrototypeWithImplementation,implementation:r.EventDelegator.re
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 6e 74 45 6c 65 6d 65 6e 74 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 4e 6f 64 65 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 72 65 64 75 63 65 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 41 72 72 61 79 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 6b 65 79 73 22 2c 22 76 61 6c 75 65 73 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 4f 62 6a 65 63 74 22 2c 70 6f 73 74 4d 65 74 68 6f 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: ntElement"],constructorName:"Node",replaceStrategy:e.ReplaceStrategies.extendPrototype},{names:["reduce"],constructorName:"Array",replaceStrategy:e.ReplaceStrategies.extendPrototype},{names:["keys","values"],constructorName:"Object",postMethod:function(e)
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 22 77 69 6e 64 6f 77 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 70 65 72 74 79 7d 5d 2c 65 2e 6f 62 73 65 72 76 65 72 3d 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 6e 2c 61 2c 72 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 73 28 74 29 2c 6c 3d 6f 2e 6e 65 78 74 28 29 3b 21 6c 2e 64 6f 6e 65 3b 6c 3d 6f 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 63 3d 6c 2e 76 61 6c 75 65 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 64 3d 28 61 3d 76 6f 69 64 20 30 2c 73 28 63 2e 61 64 64 65 64 4e 6f 64 65 73 29 29 2c 75 3d 64 2e 6e 65 78 74 28 29 3b 21 75 2e 64 6f 6e 65 3b 75 3d 64 2e 6e 65 78 74 28 29 29 7b Data Ascii: "window",replaceStrategy:e.ReplaceStrategies.extendProperty}],e.observer=new MutationObserver((function(t){var i,n,a,r;try{for(var o=s(t),l=o.next();!l.done;l=o.next()){var c=l.value;try{for(var d=(a=void 0,s(c.addedNodes)),u=d.next();!u.done;u=d.next()){
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 2c 6e 29 29 2c 73 5b 6e 5d 3d 74 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 73 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 2c 72 2c 6f 2c 6c 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 69 28 65 2e 65 76 65 6e 74 73 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 Data Ascii: ,n)),s[n]=t[n]);return e.concat(s\|\|Array.prototype.slice.call(t))};Object.defineProperty(t,"__esModule",{value:!0}),t.EventDelegator=void 0;var a=function(){function e(){}return e.handleEvent=function(t){var a,r,o,l;try{for(var c=i(e.events),d=c.next();!d
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 74 7d 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 29 29 7d 7d 2c 65 2e 65 76 65 6e 74 73 3d 5b 7b 7d 2c 7b 7d 5d 2c 65 2e 61 63 74 69 76 65 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 2c 65 2e 6e 6f 6e 42 75 62 62 6c 69 6e 67 45 76 65 6e 74 73 3d 5b 22 66 6f 63 75 73 22 2c 22 62 6c 75 72 22 2c 22 66 6f 63 75 73 69 6e 22 2c 22 66 6f 63 75 73 6f 75 74 22 2c 22 63 68 61 6e 67 65 22 5d 2c 65 7d 28 29 3b 74 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 3d 61 7d 7d 2c 74 3d 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 20 69 28 73 29 7b 76 61 72 20 6e 3d 74 5b 73 5d 3b Data Ascii: ((function(e){return e!==t})),document.removeEventListener(t,e.handleEvent,{capture:!0})))}},e.events=[{},{}],e.activeListeners=[],e.nonBubblingEvents=["focus","blur","focusin","focusout","change"],e}();t.EventDelegator=a}},t={};!function i(s){var n=t[s];
2024-10-30 03:01:22 UTC	1369	IN	Data Raw: 65 61 64 65 72 20 6d 6f 64 65 20 69 73 20 6f 6e 2c 20 61 6c 74 2b 38 20 74 6f 20 63 61 6e 63 65 6c 22 2c 44 45 4c 45 54 45 44 5f 4e 55 4d 42 45 52 3a 22 57 61 73 22 2c 41 43 43 4f 55 4e 54 3a 22 41 63 63 6f 75 6e 74 22 2c 53 43 52 4f 4c 4c 3a 22 53 63 72 6f 6c 6c 20 50 61 67 65 22 2c 53 45 41 52 43 48 3a 22 53 65 61 72 63 68 22 2c 4f 52 44 45 52 3a 22 4f 72 64 65 72 22 2c 53 55 42 4d 49 54 3a 22 53 75 62 6d 69 74 22 2c 54 49 4d 45 5f 54 4f 5f 41 4c 45 52 54 5f 43 4c 4f 53 45 3a 22 53 65 63 6f 6e 64 73 20 75 6e 74 69 6c 20 63 6c 6f 73 69 6e 67 22 2c 4d 41 49 4e 5f 4d 45 4e 55 3a 22 4d 61 69 6e 20 4d 65 6e 75 22 2c 46 4f 4f 54 45 52 5f 4d 45 4e 55 3a 22 46 6f 6f 74 65 72 20 4d 65 6e 75 22 2c 48 45 41 44 45 52 5f 4d 45 4e 55 3a 22 48 65 61 64 65 72 20 4d 65 Data Ascii: eader mode is on, alt+8 to cancel",DELETED_NUMBER:"Was",ACCOUNT:"Account",SCROLL:"Scroll Page",SEARCH:"Search",ORDER:"Order",SUBMIT:"Submit",TIME_TO_ALERT_CLOSE:"Seconds until closing",MAIN_MENU:"Main Menu",FOOTER_MENU:"Footer Menu",HEADER_MENU:"Header Me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49818	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	769	OUT	GET /app/themes/ovivo/resources/assets/scripts/libs/theme-merge.js?ver=6.6.3 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-10-30 03:01:23 UTC	1462	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:23 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Thu, 25 Jul 2024 10:23:18 GMT ETag: "7bc8b-61e0fc892cf94" Accept-Ranges: bytes Content-Length: 507019 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 76 61 72 20 66 6c 75 73 68 50 65 6e 64 69 6e 67 3d 21 31 2c 66 6c 75 73 68 69 6e 67 3d 21 31 2c 71 75 65 75 65 3d 5b 5d 2c 6c 61 73 74 46 6c 75 73 68 65 64 49 6e 64 65 78 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 73 63 68 65 64 75 6c 65 72 28 74 29 7b 71 75 65 75 65 4a 6f 62 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 71 75 65 75 65 4a 6f 62 28 74 29 7b 71 75 65 75 65 2e 69 6e 63 6c 75 64 65 73 28 74 29 7c 7c 71 75 65 75 65 2e 70 75 73 68 28 74 29 2c 71 75 65 75 65 46 6c 75 73 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 65 71 75 65 75 65 4a 6f 62 28 74 29 7b 6c 65 74 20 65 3d 71 75 65 75 65 2e 69 6e 64 65 78 4f 66 28 74 29 3b 65 21 3d 3d 2d 31 26 26 65 3e 6c 61 73 74 46 6c 75 73 68 65 64 49 6e 64 65 78 26 26 71 75 65 75 65 2e 73 70 6c 69 63 65 28 65 2c 31 29 7d 66 Data Ascii: var flushPending=!1,flushing=!1,queue=[],lastFlushedIndex=-1;function scheduler(t){queueJob(t)}function queueJob(t){queue.includes(t)\|\|queue.push(t),queueFlush()}function dequeueJob(t){let e=queue.indexOf(t);e!==-1&&e>lastFlushedIndex&&queue.splice(e,1)}f
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 74 28 74 2c 73 65 74 53 74 79 6c 65 73 29 3b 6c 65 74 20 69 3d 21 65 2e 69 6e 63 6c 75 64 65 73 28 22 69 6e 22 29 26 26 21 65 2e 69 6e 63 6c 75 64 65 73 28 22 6f 75 74 22 29 26 26 21 72 2c 6e 3d 69 7c 7c 65 2e 69 6e 63 6c 75 64 65 73 28 22 69 6e 22 29 7c 7c 5b 22 65 6e 74 65 72 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 2c 73 3d 69 7c 7c 65 2e 69 6e 63 6c 75 64 65 73 28 22 6f 75 74 22 29 7c 7c 5b 22 6c 65 61 76 65 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 3b 65 2e 69 6e 63 6c 75 64 65 73 28 22 69 6e 22 29 26 26 21 69 26 26 28 65 3d 65 2e 66 69 6c 74 65 72 28 28 64 2c 5f 29 3d 3e 5f 3c 65 2e 69 6e 64 65 78 4f 66 28 22 6f 75 74 22 29 29 29 2c 65 2e 69 6e 63 6c 75 64 65 73 28 22 6f 75 74 22 29 26 26 21 69 26 26 28 65 3d 65 2e 66 69 6c 74 65 72 28 28 64 2c 5f Data Ascii: t(t,setStyles);let i=!e.includes("in")&&!e.includes("out")&&!r,n=i\|\|e.includes("in")\|\|["enter"].includes(r),s=i\|\|e.includes("out")\|\|["leave"].includes(r);e.includes("in")&&!i&&(e=e.filter((d,_)=>_<e.indexOf("out"))),e.includes("out")&&!i&&(e=e.filter((d,_
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 21 3d 3d 6e 26 26 21 65 26 26 74 72 61 63 6b 28 69 2c 22 68 61 73 22 2c 74 29 2c 21 65 26 26 74 72 61 63 6b 28 69 2c 22 68 61 73 22 2c 6e 29 2c 74 3d 3d 3d 6e 3f 72 2e 68 61 73 28 74 29 3a 72 2e 68 61 73 28 74 29 7c 7c 72 2e 68 61 73 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 69 7a 65 28 74 2c 65 3d 21 31 29 7b 72 65 74 75 72 6e 20 74 3d 74 2e 5f 5f 76 5f 72 61 77 2c 21 65 26 26 74 72 61 63 6b 28 74 6f 52 61 77 28 74 29 2c 22 69 74 65 72 61 74 65 22 2c 49 54 45 52 41 54 45 5f 4b 45 59 29 2c 52 65 66 6c 65 63 74 2e 67 65 74 28 74 2c 22 73 69 7a 65 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 28 74 29 7b 74 3d 74 6f 52 61 77 28 74 29 3b 63 6f 6e 73 74 20 65 3d 74 6f 52 61 77 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 67 65 74 50 72 6f 74 6f 28 65 29 2e Data Ascii: !==n&&!e&&track(i,"has",t),!e&&track(i,"has",n),t===n?r.has(t):r.has(t)\|\|r.has(n)}function size(t,e=!1){return t=t.__v_raw,!e&&track(toRaw(t),"iterate",ITERATE_KEY),Reflect.get(t,"size",t)}function add(t){t=toRaw(t);const e=toRaw(this);return getProto(e).
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 61 72 69 61 62 6c 65 73 28 65 2c 64 2c 62 2c 61 29 3b 69 28 6d 3d 3e 66 2e 70 75 73 68 28 6d 29 2c 7b 73 63 6f 70 65 3a 7b 69 6e 64 65 78 3a 62 2c 2e 2e 2e 5f 7d 7d 29 2c 68 2e 70 75 73 68 28 5f 29 7d 29 3b 65 6c 73 65 20 66 6f 72 28 6c 65 74 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 6c 65 74 20 64 3d 67 65 74 49 74 65 72 61 74 69 6f 6e 53 63 6f 70 65 56 61 72 69 61 62 6c 65 73 28 65 2c 61 5b 62 5d 2c 62 2c 61 29 3b 69 28 5f 3d 3e 66 2e 70 75 73 68 28 5f 29 2c 7b 73 63 6f 70 65 3a 7b 69 6e 64 65 78 3a 62 2c 2e 2e 2e 64 7d 7d 29 2c 68 2e 70 75 73 68 28 64 29 7d 6c 65 74 20 79 3d 5b 5d 2c 63 3d 5b 5d 2c 70 3d 5b 5d 2c 67 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 62 3d 30 3b 62 3c 6c 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 6c 65 74 20 64 3d 6c Data Ascii: ariables(e,d,b,a);i(m=>f.push(m),{scope:{index:b,..._}}),h.push(_)});else for(let b=0;b<a.length;b++){let d=getIterationScopeVariables(e,a[b],b,a);i(_=>f.push(_),{scope:{index:b,...d}}),h.push(d)}let y=[],c=[],p=[],g=[];for(let b=0;b<l.length;b++){let d=l
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 61 5b 75 5d 2c 64 2c 5f 2c 6d 2c 76 2c 78 2c 54 2c 45 2c 41 2c 6b 3b 69 66 28 21 62 29 7b 69 66 28 6b 3d 72 2e 67 72 69 64 3d 3d 3d 22 61 75 74 6f 22 3f 30 3a 28 72 2e 67 72 69 64 7c 7c 5b 31 2c 5f 62 69 67 4e 75 6d 24 31 5d 29 5b 31 5d 2c 21 6b 29 7b 66 6f 72 28 45 3d 2d 5f 62 69 67 4e 75 6d 24 31 3b 45 3c 28 45 3d 67 5b 6b 2b 2b 5d 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 29 26 26 6b 3c 75 3b 29 3b 6b 2d 2d 7d 66 6f 72 28 62 3d 61 5b 75 5d 3d 5b 5d 2c 64 3d 6c 3f 4d 61 74 68 2e 6d 69 6e 28 6b 2c 75 29 2a 66 2d 2e 35 3a 6e 25 6b 2c 5f 3d 6b 3d 3d 3d 5f 62 69 67 4e 75 6d 24 31 3f 30 3a 6c 3f 75 2a 79 2f 6b 2d 2e 35 3a 6e 2f 6b 7c 30 2c 45 3d 30 2c 41 3d 5f 62 69 67 4e 75 6d 24 31 2c 54 3d 30 3b 54 3c 75 3b 54 Data Ascii: a[u],d,_,m,v,x,T,E,A,k;if(!b){if(k=r.grid==="auto"?0:(r.grid\|\|[1,_bigNum$1])[1],!k){for(E=-_bigNum$1;E<(E=g[k++].getBoundingClientRect().left)&&k<u;);k--}for(b=a[u]=[],d=l?Math.min(k,u)f-.5:n%k,_=k===_bigNum$1?0:l?uy/k-.5:n/k\|0,E=0,A=_bigNum$1,T=0;T<u;T
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 20 74 68 69 73 2e 5f 72 44 65 6c 61 79 3d 69 2c 5f 6f 6e 55 70 64 61 74 65 54 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 74 68 69 73 29 2c 6e 3f 74 68 69 73 2e 74 69 6d 65 28 6e 29 3a 74 68 69 73 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 72 44 65 6c 61 79 7d 2c 65 2e 79 6f 79 6f 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 74 68 69 73 2e 5f 79 6f 79 6f 3d 69 2c 74 68 69 73 29 3a 74 68 69 73 2e 5f 79 6f 79 6f 7d 2c 65 2e 73 65 65 6b 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 5f 70 61 72 73 65 50 6f 73 69 74 69 6f 6e 24 31 28 74 68 69 73 2c 69 29 2c 5f 69 73 4e 6f 74 46 61 6c 73 65 28 6e 29 29 7d 2c 65 2e 72 65 73 74 61 72 74 Data Ascii: this._rDelay=i,_onUpdateTotalDuration(this),n?this.time(n):this}return this._rDelay},e.yoyo=function(i){return arguments.length?(this._yoyo=i,this):this._yoyo},e.seek=function(i,n){return this.totalTime(_parsePosition$1(this,i),_isNotFalse(n))},e.restart
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 2c 73 74 61 67 67 65 72 2c 64 65 6c 61 79 2c 64 75 72 61 74 69 6f 6e 2c 70 61 75 73 65 64 2c 73 63 72 6f 6c 6c 54 72 69 67 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5f 73 74 61 67 67 65 72 50 72 6f 70 73 54 6f 53 6b 69 70 5b 74 5d 3d 31 7d 29 3b 76 61 72 20 54 77 65 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 5f 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 65 2c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 69 2c 6e 2c 73 2c 61 29 7b 76 61 72 20 6f 3b 74 79 70 65 6f 66 20 6e 3d 3d 22 6e 75 6d 62 65 72 22 26 26 28 73 2e 64 75 72 61 74 69 6f 6e 3d 6e 2c 6e 3d 73 2c 73 3d 6e 75 6c 6c 29 2c 6f 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 61 3f 6e 3a 5f 69 6e 68 65 72 69 74 44 65 66 61 75 6c 74 73 28 6e 29 29 7c 7c 74 68 69 73 3b 76 61 72 20 Data Ascii: ,stagger,delay,duration,paused,scrollTrigger",function(t){return _staggerPropsToSkip[t]=1});var Tween=function(t){_inheritsLoose(e,t);function e(i,n,s,a){var o;typeof n=="number"&&(s.duration=n,n=s,s=null),o=t.call(this,a?n:_inheritDefaults(n))\|\|this;var
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 73 69 6f 6e 3d 67 73 61 70 24 32 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 31 32 2e 32 22 3b 5f 63 6f 72 65 52 65 61 64 79 3d 31 3b 5f 77 69 6e 64 6f 77 45 78 69 73 74 73 24 32 28 29 26 26 5f 77 61 6b 65 28 29 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 30 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 31 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 32 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 33 3b 5f 65 61 73 65 4d 61 70 2e 50 6f 77 65 72 34 3b 5f 65 61 73 65 4d 61 70 2e 4c 69 6e 65 61 72 3b 5f 65 61 73 65 4d 61 70 2e 51 75 61 64 3b 5f 65 61 73 65 4d 61 70 2e 43 75 62 69 63 3b 5f 65 61 73 65 4d 61 70 2e 51 75 61 72 74 3b 5f 65 61 73 65 4d 61 70 2e 51 75 69 6e 74 3b 5f 65 61 73 65 4d 61 70 2e 53 74 72 6f 6e 67 3b 5f 65 61 73 65 4d 61 70 2e 45 6c 61 73 74 69 Data Ascii: sion=gsap$2.version="3.12.2";_coreReady=1;_windowExists$2()&&_wake();_easeMap.Power0;_easeMap.Power1;_easeMap.Power2;_easeMap.Power3;_easeMap.Power4;_easeMap.Linear;_easeMap.Quad;_easeMap.Cubic;_easeMap.Quart;_easeMap.Quint;_easeMap.Strong;_easeMap.Elasti
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 78 4f 66 66 73 65 74 2c 64 3d 69 2e 79 4f 66 66 73 65 74 2c 5f 3d 69 2e 66 6f 72 63 65 43 53 53 2c 6d 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 29 2c 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 2c 78 2c 54 2c 45 2c 41 2c 6b 3b 6c 3d 70 61 72 73 65 46 6c 6f 61 74 28 6c 29 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 68 29 2c 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 66 26 26 28 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 68 2b 3d 66 2c 6c 2b 3d 66 29 2c 6c 7c 7c 68 3f 28 6c 2a 3d 5f 44 45 47 32 52 41 44 2c 68 2a 3d 5f 44 45 47 32 52 41 44 2c 78 3d 4d 61 74 68 2e 63 6f 73 28 6c 29 2a 79 2c 54 3d 4d 61 74 68 2e 73 69 6e 28 6c 29 2a 79 2c 45 3d 4d 61 74 68 2e 73 69 6e 28 6c 2d 68 29 2a 2d 63 2c 41 3d 4d 61 74 68 2e 63 6f 73 28 6c 2d 68 29 2a 63 2c 68 26 Data Ascii: xOffset,d=i.yOffset,_=i.forceCSS,m=parseFloat(a),v=parseFloat(o),x,T,E,A,k;l=parseFloat(l),h=parseFloat(h),f=parseFloat(f),f&&(f=parseFloat(f),h+=f,l+=f),l\|\|h?(l=_DEG2RAD,h=_DEG2RAD,x=Math.cos(l)y,T=Math.sin(l)y,E=Math.sin(l-h)-c,A=Math.cos(l-h)c,h&
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 5d 5b 30 5d 2b 3d 44 2e 76 5b 77 5d 5b 30 5d 2c 44 2e 6f 5b 77 5d 5b 31 5d 2b 3d 44 2e 76 5b 77 5d 5b 31 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 44 2c 77 29 7b 76 61 72 20 4d 3d 77 3f 77 2e 73 70 6c 69 74 28 22 2e 22 29 3a 5b 31 30 30 2c 31 30 30 2c 31 30 30 5d 3b 72 65 74 75 72 6e 20 44 5b 30 5d 3e 4d 5b 30 5d 3f 21 30 3a 4d 5b 30 5d 3e 44 5b 30 5d 3f 21 31 3a 44 5b 31 5d 3e 4d 5b 31 5d 3f 21 30 3a 4d 5b 31 5d 3e 44 5b 31 5d 3f 21 31 3a 44 5b 32 5d 3e 4d 5b 32 5d 3f 21 30 3a 4d 5b 32 5d 3e 44 5b 32 5d 3f 21 31 3a 6e 75 6c 6c 7d 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 3d 5b 34 2c 34 2c 31 34 5d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 53 29 7b 76 61 72 20 50 3d 53 2e 74 2e 64 3b 53 2e 74 2e 64 3d 7b 6b 3a 5b 7b 73 3a 50 2c 74 3a 30 7d Data Ascii: ][0]+=D.v[w][0],D.o[w][1]+=D.v[w][1]}function T(D,w){var M=w?w.split("."):[100,100,100];return D[0]>M[0]?!0:M[0]>D[0]?!1:D[1]>M[1]?!0:M[1]>D[1]?!1:D[2]>M[2]?!0:M[2]>D[2]?!1:null}var E=function(){var D=[4,4,14];function w(S){var P=S.t.d;S.t.d={k:[{s:P,t:0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49820	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	735	OUT	GET /app/themes/ovivo/dist/scripts/main.js HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
2024-10-30 03:01:23 UTC	1462	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:23 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Tue, 21 Feb 2023 09:12:15 GMT ETag: "90aa7-5f5322cfb8b4d" Accept-Ranges: bytes Content-Length: 592551 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 73 29 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 6d 6f 64 75 6c 65 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 7b 7d 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 72 65 71 75 69 72 65 20 66 75 6e 63 74 69 6f 6e 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 20 7b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 6d 6f 64 75 6c 65 20 69 73 20 69 6e Data Ascii: /****/ (function(modules) { // webpackBootstrap/**/ // The module cache/**/ var installedModules = {};/**//**/ // The require function/**/ function __webpack_require__(moduleId) {/**//****/ // Check if module is in
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 49 6e 69 74 74 65 64 2c 0a 20 20 20 20 5f 64 6f 63 2c 0a 20 20 20 20 5f 67 6c 6f 62 61 6c 73 20 3d 20 7b 7d 2c 0a 20 20 20 20 5f 69 6e 73 74 61 6c 6c 53 63 6f 70 65 20 3d 20 7b 7d 2c 0a 20 20 20 20 5f 63 6f 72 65 52 65 61 64 79 2c 0a 20 20 20 20 5f 69 6e 73 74 61 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 73 74 61 6c 6c 28 73 63 6f 70 65 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 28 5f 69 6e 73 74 61 6c 6c 53 63 6f 70 65 20 3d 20 5f 6d 65 72 67 65 28 73 63 6f 70 65 2c 20 5f 67 6c 6f 62 61 6c 73 29 29 20 26 26 20 67 73 61 70 3b 0a 7d 2c 0a 20 20 20 20 5f 6d 69 73 73 69 6e 67 50 6c 75 67 69 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 6d 69 73 73 69 6e 67 50 6c 75 67 69 6e 28 70 72 6f 70 65 72 74 79 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 72 65 74 75 72 6e Data Ascii: Initted, _doc, _globals = {}, _installScope = {}, _coreReady, _install = function _install(scope) { return (_installScope = _merge(scope, _globals)) && gsap;}, _missingPlugin = function _missingPlugin(property, value) { return
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 6e 65 20 64 6f 69 6e 67 20 61 20 74 69 6d 65 6c 69 6e 65 2e 73 65 65 6b 28 30 29 20 61 6e 64 20 74 68 65 72 65 27 73 20 61 20 63 61 6c 6c 62 61 63 6b 20 74 68 61 74 20 73 69 74 73 20 61 74 20 30 2e 20 53 69 6e 63 65 20 65 76 65 6e 74 73 20 61 72 65 20 73 75 70 70 72 65 73 73 65 64 20 6f 6e 20 74 68 61 74 20 73 65 65 6b 28 29 20 62 79 20 64 65 66 61 75 6c 74 2c 20 6e 6f 74 68 69 6e 67 20 77 69 6c 6c 20 66 69 72 65 2c 20 62 75 74 20 77 68 65 6e 20 74 68 65 20 70 6c 61 79 68 65 61 64 20 6d 6f 76 65 73 20 6f 66 66 20 6f 66 20 74 68 61 74 20 70 6f 73 69 74 69 6f 6e 2c 20 74 68 65 20 63 61 6c 6c 62 61 63 6b 20 73 68 6f 75 6c 64 20 66 69 72 65 2e 20 54 68 69 73 20 62 65 68 61 76 69 6f 72 20 69 73 20 77 68 61 74 20 70 65 6f 70 6c 65 20 69 6e 74 75 69 74 69 76 65 Data Ascii: ne doing a timeline.seek(0) and there's a callback that sits at 0. Since events are suppressed on that seek() by default, nothing will fire, but when the playhead moves off of that position, the callback should fire. This behavior is what people intuitive
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 20 20 20 20 20 69 6c 3b 0a 0a 20 20 20 20 70 72 6f 67 72 65 73 73 20 3d 3d 3d 20 74 72 75 65 20 26 26 20 28 6d 75 74 61 74 65 20 3d 20 31 29 20 26 26 20 28 70 72 6f 67 72 65 73 73 20 3d 20 6e 75 6c 6c 29 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 53 74 72 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 73 74 61 72 74 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 70 3a 20 73 74 61 72 74 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 65 6e 64 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 70 3a 20 65 6e 64 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 5f 69 73 41 72 72 61 79 28 73 74 61 72 74 29 20 26 26 20 21 5f 69 73 41 72 72 61 79 28 65 6e 64 29 29 20 7b 0a 20 20 20 20 20 20 69 6e 74 65 72 70 6f 6c 61 74 6f 72 73 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 Data Ascii: il; progress === true && (mutate = 1) && (progress = null); if (isString) { start = { p: start }; end = { p: end }; } else if (_isArray(start) && !_isArray(end)) { interpolators = [];
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 5f 70 72 6f 70 61 67 61 74 65 59 6f 79 6f 45 61 73 65 28 63 68 69 6c 64 2e 74 69 6d 65 6c 69 6e 65 2c 20 69 73 59 6f 79 6f 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 65 61 73 65 20 3d 20 63 68 69 6c 64 2e 5f 65 61 73 65 3b 0a 20 20 20 20 20 20 20 20 63 68 69 6c 64 2e 5f 65 61 73 65 20 3d 20 63 68 69 6c 64 2e 5f 79 45 61 73 65 3b 0a 20 20 20 20 20 20 20 20 63 68 69 6c 64 2e 5f 79 45 61 73 65 20 3d 20 65 61 73 65 3b 0a 20 20 20 20 20 20 20 20 63 68 69 6c 64 2e 5f 79 6f 79 6f 20 3d 20 69 73 59 6f 79 6f 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 68 69 6c 64 20 3d 20 63 68 69 6c 64 2e 5f 6e 65 78 74 3b 0a 20 20 7d 0a 7d 2c 0a 20 20 20 20 5f 70 61 72 73 65 45 61 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: _propagateYoyoEase(child.timeline, isYoyo); } else { ease = child._ease; child._ease = child._yEase; child._yEase = ease; child._yoyo = isYoyo; } } child = child._next; }}, _parseEase = function
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 28 61 6e 69 6d 61 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 74 69 6d 65 20 3d 20 61 6e 69 6d 61 74 69 6f 6e 2e 5f 73 74 61 72 74 20 2b 20 74 69 6d 65 20 2f 20 28 61 6e 69 6d 61 74 69 6f 6e 2e 5f 74 73 20 7c 7c 20 31 29 3b 0a 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 20 3d 20 61 6e 69 6d 61 74 69 6f 6e 2e 5f 64 70 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 69 6d 65 3b 0a 20 20 7d 3b 0a 0a 20 20 5f 70 72 6f 74 6f 2e 72 65 70 65 61 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 72 65 70 65 61 74 28 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 69 66 20 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 72 65 70 65 61 74 20 3d 20 76 61 6c 75 65 20 3d 3d 3d 20 49 6e 66 69 6e 69 74 79 20 3f 20 2d 32 20 3a Data Ascii: (animation) { time = animation._start + time / (animation._ts \|\| 1); animation = animation._dp; } return time; }; _proto.repeat = function repeat(value) { if (arguments.length) { this._repeat = value === Infinity ? -2 :
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 61 6e 20 65 78 74 72 65 6d 65 20 65 64 67 65 20 63 61 73 65 20 2d 20 74 68 65 20 63 68 69 6c 64 27 73 20 72 65 6e 64 65 72 20 63 6f 75 6c 64 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 6b 69 6c 6c 28 29 20 74 68 65 20 22 6e 65 78 74 22 20 6f 6e 65 20 69 6e 20 74 68 65 20 6c 69 6e 6b 65 64 20 6c 69 73 74 2c 20 6f 72 20 72 65 70 61 72 65 6e 74 20 69 74 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 20 77 65 20 6d 75 73 74 20 72 65 2d 69 6e 69 74 69 61 74 65 20 74 68 65 20 77 68 6f 6c 65 20 72 65 6e 64 65 72 20 74 6f 20 62 65 20 73 61 66 65 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6e 64 65 72 28 74 6f 74 61 6c 54 69 6d 65 2c 20 73 75 70 70 72 65 73 73 45 Data Ascii: // an extreme edge case - the child's render could do something like kill() the "next" one in the linked list, or reparent it. In that case we must re-initiate the whole render to be safe. return this.render(totalTime, suppressE
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 68 69 6e 20 61 20 70 6c 75 67 69 6e 20 74 6f 6f 2c 20 74 68 75 73 20 22 74 68 69 73 22 20 77 6f 75 6c 64 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 70 6c 75 67 69 6e 2e 0a 0a 20 20 72 65 74 75 72 6e 20 70 74 3b 0a 7d 2c 0a 20 20 20 20 5f 61 64 64 50 72 6f 70 54 77 65 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 61 64 64 50 72 6f 70 54 77 65 65 6e 28 74 61 72 67 65 74 2c 20 70 72 6f 70 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 69 6e 64 65 78 2c 20 74 61 72 67 65 74 73 2c 20 6d 6f 64 69 66 69 65 72 2c 20 73 74 72 69 6e 67 46 69 6c 74 65 72 2c 20 66 75 6e 63 50 61 72 61 6d 29 20 7b 0a 20 20 5f 69 73 46 75 6e 63 74 69 6f 6e 28 65 6e 64 29 20 26 26 20 28 65 6e 64 20 3d 20 65 6e 64 28 69 6e 64 65 78 20 7c 7c 20 30 2c 20 74 61 72 67 65 74 2c 20 74 61 72 67 65 74 Data Ascii: hin a plugin too, thus "this" would refer to the plugin. return pt;}, _addPropTween = function _addPropTween(target, prop, start, end, index, targets, modifier, stringFilter, funcParam) { _isFunction(end) && (end = end(index \|\| 0, target, target
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 7c 20 5b 5d 3b 0a 20 20 20 20 5f 74 68 69 73 33 2e 5f 70 74 4c 6f 6f 6b 75 70 20 3d 20 5b 5d 3b 20 2f 2f 50 72 6f 70 54 77 65 65 6e 20 6c 6f 6f 6b 75 70 2e 20 41 6e 20 61 72 72 61 79 20 63 6f 6e 74 61 69 6e 69 6e 67 20 61 6e 20 6f 62 6a 65 63 74 20 66 6f 72 20 65 61 63 68 20 74 61 72 67 65 74 2c 20 68 61 76 69 6e 67 20 6b 65 79 73 20 66 6f 72 20 65 61 63 68 20 74 77 65 65 6e 69 6e 67 20 70 72 6f 70 65 72 74 79 0a 0a 20 20 20 20 5f 74 68 69 73 33 2e 5f 6f 76 65 72 77 72 69 74 65 20 3d 20 6f 76 65 72 77 72 69 74 65 3b 0a 0a 20 20 20 20 69 66 20 28 6b 65 79 66 72 61 6d 65 73 20 7c 7c 20 73 74 61 67 67 65 72 20 7c 7c 20 5f 69 73 46 75 6e 63 4f 72 53 74 72 69 6e 67 28 64 75 72 61 74 69 6f 6e 29 20 7c 7c 20 5f 69 73 46 75 6e 63 4f 72 53 74 72 69 6e 67 28 64 65 Data Ascii: \| []; _this3._ptLookup = []; //PropTween lookup. An array containing an object for each target, having keys for each tweening property _this3._overwrite = overwrite; if (keyframes \|\| stagger \|\| _isFuncOrString(duration) \|\| _isFuncOrString(de
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 5f 67 65 74 53 65 74 74 65 72 28 74 61 72 67 65 74 2c 20 70 72 6f 70 65 72 74 79 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 5f 69 73 46 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 5b 70 72 6f 70 65 72 74 79 5d 29 20 3f 20 5f 73 65 74 74 65 72 46 75 6e 63 20 3a 20 5f 69 73 55 6e 64 65 66 69 6e 65 64 28 74 61 72 67 65 74 5b 70 72 6f 70 65 72 74 79 5d 29 20 26 26 20 74 61 72 67 65 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 20 3f 20 5f 73 65 74 74 65 72 41 74 74 72 69 62 75 74 65 20 3a 20 5f 73 65 74 74 65 72 50 6c 61 69 6e 3b 0a 7d 2c 0a 20 20 20 20 5f 72 65 6e 64 65 72 50 6c 61 69 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 5f 72 65 6e 64 65 72 50 6c 61 69 6e 28 72 61 74 69 6f 2c 20 64 61 74 61 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 64 61 74 61 Data Ascii: unction _getSetter(target, property) { return _isFunction(target[property]) ? _setterFunc : _isUndefined(target[property]) && target.setAttribute ? _setterAttribute : _setterPlain;}, _renderPlain = function _renderPlain(ratio, data) { return data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49821	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	393	OUT	GET /m/5647cc391f6f25c0/original/Ovivo_Logo_Tagline.png HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	815	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 60722 Connection: close Date: Tue, 29 Oct 2024 17:31:43 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="Ovivo_Logo_Tagline.png" Access-Control-Allow-Origin: * X-API-Correlation-Id: 06b8eb88-f5e2-a8c3-3aff-208f4d8ba30f Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 bfad099b4e1fa2ec7d21876e0293dc20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: qt24AIvcbLvMsSt_ZS-TgRpiWX-cAqJ4Wn1XILMaWcjcKPRDn2s1JQ== Age: 34180
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 56 00 00 05 a7 08 06 00 00 00 31 15 4e af 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 ec d4 49 44 41 54 78 da ec dd 5b 6f 1c f7 79 c0 e1 29 1a a4 91 cd a5 4c 5a b6 c8 e5 2e 25 52 5c 51 67 9a 4b 52 12 45 da 96 25 45 27 ca 3a 52 f2 09 b6 65 d7 96 e3 14 2d 92 06 49 9a 04 2d 0a 14 45 3f 43 bf 44 bf 4d d1 fb 7c 83 de 51 7b 6a ff e3 1d 22 6b d9 b2 49 71 0f 33 3b cf 03 2c 5e d2 be 7b 6f 48 ea 87 99 37 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRV1NtEXtSoftwareAdobe ImageReadyqe<IDATx[oy)LZ.%R\QgKRE%E':Re-I-E?CDM\|Q{j"kIq3;,^{oH7
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 88 e9 4b b5 8a 86 d8 0b 3e 57 2a 91 0e 34 96 d7 7d 6a 68 70 07 dd b5 a9 41 f6 92 e7 ed ef b5 a2 81 5b c9 6c ff 5b be 0e 00 00 bf f8 79 87 53 00 00 00 82 01 7d 53 e0 24 9d 54 9a 38 77 b8 24 26 c7 db be 6d 9d 0c 0b c6 89 3e a5 c7 e5 c4 64 9f 56 ad f8 3a d9 67 ee d3 0b 6b 1c 39 5e 7f 99 30 d7 7d d0 7d b1 4a 43 84 e3 07 ca b8 01 fc ed 4e 60 2e 6d 65 d5 e0 11 7d 7c 5a ce ce 09 76 05 70 d7 6a a9 0c f1 a5 5a 45 43 ec f1 33 0b 6d df a7 f2 53 17 82 32 c4 56 7a 4c 2b 16 6e 92 9a aa 3a db b7 3d e7 be 12 e3 ff bb f0 f1 07 00 e0 da bf 7f 39 05 00 00 20 50 b5 ea 9b f2 10 7d 53 e0 e8 37 cd 5d ba c8 ec fb ec ef 41 a0 cb 59 e9 64 58 30 4e f4 99 e7 cd 3b d9 e7 c4 1a fd be 4e f6 e9 3e ad 5d ba 4d 2e 5f a8 b2 7d 9f fc 65 c2 5c f7 41 f7 c5 2a 0d 11 78 52 fd 6f 34 24 d0 a5 ad Data Ascii: K>W4}jhpA[l[yS}S$T8w$&m>dV:gk9^0}}JCN`.me}\|ZvpjZEC3mS2VzL+n:=9 P}S7]AYdX0N;N>]M._}e\AxRo4$
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 6d d7 1d 64 75 84 2c 2d f2 7c ab 2f 65 f9 6f f5 c2 05 cb 48 d5 bc f2 43 57 ed 65 e9 64 96 16 43 87 1d d5 41 7f 39 e1 95 17 3e 95 d5 47 b2 bc 2b e9 4c 62 01 08 0d 81 15 00 00 00 00 00 00 20 8b b3 cf bb e8 02 59 dd 13 d0 db 8d 1b 7f df d8 73 49 55 7b 26 a0 b2 ff d0 61 47 ed 2d eb e1 fa b3 2c fb e8 2f d7 d7 d4 d4 bd a6 69 b3 66 ba 9a 21 cb cd 13 5e 79 e1 5f d5 0b 17 24 48 39 00 61 20 b0 02 00 00 00 00 00 00 64 d0 b5 db ae 2d 0e 1e 78 e8 87 5e fd c8 88 40 bc f9 c6 eb ed ab 17 2e 58 4e ea fa ce 03 5d 69 40 e5 30 59 5f b0 be a6 66 1f 3f db 35 6d d6 ec 67 13 5e 79 e1 7e 46 08 01 08 43 63 92 00 00 00 00 00 00 00 d8 d6 89 27 8f 3a ae 36 91 f8 6e 90 ef b9 7b ef 3d 5f 9e fe de 3b 73 49 dd 86 75 ed b6 eb 6e 43 87 1d 75 46 f7 1e bd 6e 5e 5f 53 73 8e e4 45 7b bf db ca Data Ascii: mdu,-\|/eoHCWedCA9>G+Lb YsIU{&aG-,/if!^y_$H9a d-x^@.XN]i@0Y_f?5mg^y~FCc':6n{=_;sIunCuFn^_SsE{
2024-10-30 03:01:23 UTC	8412	IN	Data Raw: e1 f9 87 10 ea d4 87 3d cb 91 52 69 df e9 f6 b0 d3 cd 4c 23 65 75 07 b8 d4 c9 67 4a f9 6d 15 d2 71 a1 6d b0 53 e4 33 2e cf 54 b7 c9 fe c6 e9 f9 03 6f 5b bc 76 af 30 77 24 8f 8e 31 7d ee d0 79 4c 09 86 00 db 15 3b 87 5c 67 dd 2a ab 1a db ed 74 1a 48 bd 99 21 aa 04 93 cf 6a 26 ab 0b 7d be 7c a3 7c af 6b e5 38 a6 3d 5a 9e be 8e c1 35 a0 b6 a1 16 38 1c 57 77 4a 59 ef 48 16 02 48 22 b0 02 c4 d3 01 11 3f 44 58 a7 9f 70 0a 8e e8 45 ad 5e dc 92 65 db b0 e9 3c 8d 62 74 4b 31 8d a0 89 ec a2 c4 71 9e dd a6 7a 67 71 18 9d 32 7a 2c ca 7b df 9d e5 22 7d a6 b9 b3 6f bb 72 ca 23 9f 9a 59 a6 73 21 d3 30 b2 c0 b9 79 00 b8 d5 1d dd 3a 22 4b d2 a7 5b 08 65 bb 6e 24 96 bc ff cf b3 9c 4b 6e f0 18 e9 e7 92 bf ae d3 44 cd 93 ed 27 87 50 a7 ea 08 18 d7 91 34 6b cc b4 37 61 d7 fb Data Ascii: =RiL#eugJmqmS3.To[v0w$1}yL;\g*tH!j&}\|\|k8=Z58WwJYHH"?DXpE^e<btK1qzgq2z,{"}or#Ys!0y:"K[en$KnD'P4k7a
2024-10-30 03:01:23 UTC	3158	IN	Data Raw: 94 b8 de 30 e9 bf 17 94 f8 6e 2b b6 4b 7c 3f 1e b1 7d 69 c4 f6 9f aa 49 00 00 00 06 91 85 15 00 66 ad 53 4f 3b eb a4 e1 45 8b 6f 88 97 c7 fc 74 62 62 ff 99 90 e7 39 95 ca 73 a3 d5 91 cf c5 cb f7 ad 5b 7b 8f 4a 64 aa d8 ce e4 86 88 ef b7 46 ba 38 e2 7b 68 86 c4 f7 da 88 ef 8c ed ef a9 45 00 00 00 06 f6 f8 55 11 00 30 5b 3d b9 f1 2f 47 5e 79 c8 a1 b7 6c df b6 ed 15 07 1e f4 73 fb ee b3 cf 3e f3 76 be f8 e2 dc 81 dd 69 57 2a 8f 8e 56 47 3e b9 6e ed 3d 1f 8b bc ab 40 a6 8b ed dc be 19 f1 bd 31 e2 7b 6e c4 f7 9c 88 ef 83 23 be 07 35 b6 b7 45 fe 6e 8f f8 fe f5 88 ef 1f aa 41 00 00 00 06 99 2b 56 00 60 e8 67 67 f8 5f 3d bc 68 71 3e f0 fb 98 d8 5e 3d 28 67 f9 cf a9 54 36 47 f2 d0 68 75 e4 df ae 5b 7b cf a3 6a 8b 16 e2 fb a4 12 df f9 30 f9 bc 82 e5 e0 01 89 ed 4c Data Ascii: 0n+K\|?}iIfSO;Eotbb9s[{JdF8{hEU0[=/G^yls>viW*VG>n=@1{n#5EnA+V`gg_=hq>^=(gT6Ghu[{j0L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49822	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	396	OUT	GET /m/703a6c3b527e687e/original/Ind-TechSol_1000X1232.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	816	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 699127 Connection: close Date: Wed, 30 Oct 2024 03:01:19 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="Ind&TechSol_1000X1232.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: dab78376-9751-deb7-4d43-0e6fcbb202df Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 d9523e44e96d2539081596bb1d268d44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: MEW9tCIdtlQzAH24vq6gdpksL8keZpIh2pVQAPApUPHRYM4xlo_EyQ== Age: 4
2024-10-30 03:01:23 UTC	15990	IN	Data Raw: ff d8 ff e1 24 95 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 12 00 00 01 04 00 01 00 00 00 f0 15 00 00 01 01 04 00 01 00 00 00 a0 0e 00 00 02 01 03 00 03 00 00 00 e6 00 00 00 03 01 03 00 01 00 00 00 05 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0f 01 02 00 06 00 00 00 ec 00 00 00 10 01 02 00 15 00 00 00 f2 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 07 01 00 00 1b 01 05 00 01 00 00 00 0f 01 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 21 00 00 00 17 01 00 00 32 01 02 00 14 00 00 00 38 01 00 00 3b 01 02 00 19 00 00 00 4c 01 00 00 98 82 02 00 18 00 00 00 65 01 00 00 69 87 04 00 01 00 00 00 80 01 00 00 90 03 00 00 08 00 08 00 08 00 43 61 6e 6f 6e 00 43 Data Ascii: $ExifII*(1!28;LeiCanonC
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: b3 d6 6d 37 0c 7d c3 7b dc f1 65 ae bb d2 fa 6e 74 ad ef aa 54 66 b6 f6 59 7b 1e cf 5a 7d 8e 98 34 11 a3 df f9 bf 4f da c6 ab 96 74 eb e9 e9 f7 d6 d2 1f 90 e7 58 fa 9d 54 81 ef 3e cd df 47 77 3e f5 a3 48 75 15 64 35 ec 70 ae aa 9a d0 40 9d d0 d3 bb d3 fd e4 bd c3 c2 63 5f 35 1b 57 0d 91 2d 74 1b 79 b9 9f 64 e9 3f c9 fe 7f d3 e7 f3 7f d1 72 92 c1 fb 26 2f 8b ff 00 98 fd cf f0 7f bf ff 00 1b ff 00 06 92 6a ea 7f ff d3 e9 b1 eb 75 58 5e bf ad b9 ef 3b dc c8 10 27 b0 40 cd ea 15 57 8b 76 d9 dc 2b 99 d2 24 85 9b d2 ba be 3f 52 b7 d3 a0 98 d8 e6 09 e0 b9 be d5 46 d7 64 bc 5d 82 75 b8 82 1a 09 80 00 f1 71 53 4c 11 be 8c 60 8a fc 1d fb ac 70 c6 c7 e9 d5 3b d1 af 22 87 03 60 d5 c0 c3 60 fb be 97 d2 53 7e 6d b4 e1 ba d0 fd c1 81 ad 07 c6 08 63 a5 52 eb 15 e4 b2 bc Data Ascii: m7}{entTfY{Z}4OtXT>Gw>Hud5p@c_5W-tyd?r&/juX^;'@Wv+$?RFd]uqSL`p;"``S~mcR
2024-10-30 03:01:23 UTC	12371	IN	Data Raw: 78 1e 27 ad f8 41 86 a6 95 98 8f 2f 2e a1 48 2a 2a 0d eb ab 6a eb 2e 49 64 94 81 1a 86 fe c8 50 06 9b 7f 4f 6d 3b c9 21 fd 57 27 ec e9 c5 2a b8 a0 04 7f 3e bc 22 8e 35 0a 15 00 16 e1 4d ed c9 b3 9f f6 1c 7b 60 a6 a2 69 d5 c3 96 c3 70 eb 20 6e 79 20 69 5e 19 7f 1f f1 b3 ed b2 b4 24 8e b4 c4 7c 23 e1 1d 71 62 2c 5c a1 29 c5 f4 73 cf 02 e0 fe 6f 7f 6d 95 e1 5e ac ae 28 03 0c 8e bd 72 00 05 78 02 cc 42 df f5 03 6b 30 fc fe 0f bd e8 af 01 9e 9c d4 2a 0a b0 1d 74 94 f3 4a 05 a3 63 75 1c 01 eb b0 36 e1 8d 82 8f f0 f7 ef 0d 8d 46 9a 8e ac d2 c6 bf 8b ac 92 d1 68 52 65 74 8e ca 0f ee 32 ab 1f ea b6 bf 24 0f a0 f7 a1 6e 4f c4 00 e9 bf 14 30 aa 82 47 c8 74 d7 3d 7e 26 94 8b c8 6a 25 51 72 ab ca 8b 7d 48 37 e2 ff 00 9f 75 91 61 87 b9 a4 14 1d 54 34 b2 55 99 30 3a 60 Data Ascii: x'A/.H*j.IdPOm;!W'>"5M{`ip ny i^$\|#qb,\)som^(rxBk0*tJcu6FhRet2$nO0Gt=~&j%Qr}H7uaT4U0:`
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 9f f0 f6 a6 e6 55 34 25 f3 d3 31 c4 6a 2a 71 eb d4 e6 89 50 df f3 c9 1f d0 da d7 b5 bf d7 fc fb 44 64 ad 6b c3 a5 aa b9 a9 1d 67 8e 74 43 a0 9f c5 94 7f 6b 9f a9 b9 fe 9e d9 6a 10 2a 7a 73 41 fe 1e a5 ba 46 c8 48 e5 88 fa 03 6e 2d cf fa ff 00 ef 7e d8 12 69 6a 83 d3 9e 0b f9 af 48 7d cb 11 8a 8e 69 62 3a 0e 96 60 cb c1 0c 01 b0 24 7e a5 bf b3 9b 0b f8 c4 c8 b2 37 6d 73 fe 7e a8 f6 5e 20 2b 4a 1a 74 5b 8f 6d c1 8d af 7a 4a d9 cc 13 45 23 46 55 9a c3 eb fa af 7e 35 7d 7d c9 51 ec 56 b7 b6 eb 3d b3 06 0c 3a 0c cc 2e 6d 64 75 90 1e 38 e8 52 c0 76 6e 3a bf c6 8b 56 8e 58 0f d0 e0 f3 fe 24 f2 3d 90 de f2 c4 d0 06 75 5c 74 ec 37 79 2a c7 3e 7d 0a 14 59 48 ab 74 17 20 eb 20 82 39 e1 ad 6f f1 3e c3 53 da bc 2a 49 14 61 d2 d4 3a c8 03 a5 94 34 20 46 0d ee 1c 5d 4f Data Ascii: U4%1jqPDdkgtCkjzsAFHn-~ijH}ib:`$~7ms~^ +Jt[mzJE#FU~5}}QV=:.mdu8Rvn:VX$=u\t7y>}YHt 9o>SIa:4 F]O
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 86 a8 4d 60 86 5b 90 41 02 fc 8e 6d f4 3e d0 49 c0 1f 31 d2 a0 43 ae 3a 87 55 8f 9b c4 c4 96 17 04 15 60 49 5b 7e 05 bf d6 f7 a8 eb 5c 75 a2 31 c7 a0 fa b6 88 35 45 9d 49 24 f2 2d f5 b1 e2 e3 f1 ee ff 00 a8 2a 47 0e a9 af f0 9c 0e 94 38 c8 16 95 03 2a 9e 3f a7 e9 1c 1b de df e2 7d e8 3f f1 0c f5 ba 74 ee 2a 80 16 66 17 0a 4f 06 e3 9f f7 df 4f af b6 fb 98 d7 af 74 d3 54 3c df da 26 c7 9b 58 33 29 fc 01 f8 02 fe de 07 88 eb 5d 31 9a 65 42 09 b8 04 95 b7 03 95 b5 c8 fe a5 bf af bf 17 23 af 75 e7 9b 42 80 39 17 fa 7f 87 d6 e3 f2 b6 fe a7 8f 7e a8 a5 7a a2 87 d4 75 1c 74 d3 55 31 68 d9 43 00 58 7a 7d 60 70 3f 27 f3 7f 7a 20 54 13 d3 9d 07 59 96 98 93 ea f4 de c2 c0 ea 24 7f 8f 37 07 e9 ed f8 9e 8c c0 9c d3 1d 7b 1d 26 1a ba 6a 64 95 81 d2 08 20 5d b9 16 06 e3 Data Ascii: M`[Am>I1C:U`I[~\u15EI$-G8?}?t*fOOtT<&X3)]1eB#uB9~zutU1hCXz}`p?'z TY$7{&jd ]
2024-10-30 03:01:23 UTC	5608	IN	Data Raw: aa 69 e4 94 a3 5a df a7 d8 62 7e 7e 4d 6e 96 9b 53 3a d7 05 db 49 fd 82 a3 a3 94 d8 b7 19 14 fd 4e eb 1c 64 e6 91 a6 a2 3e 5a 8d 3a 3f 9d 5f fc b7 be 17 f5 33 47 3e 0f a7 f1 7b 8b 23 12 ae 8c 8e f2 b6 7e 70 ea 45 e4 53 58 ba 55 89 ff 00 0f 64 57 1c d7 bf 5c 46 d1 2d c2 45 19 35 ec 51 a8 7c b5 71 e9 54 3c b3 b5 c6 da ae 5a 6b 89 3f a6 c4 a7 fb cf 47 33 6f 60 f6 f6 d6 a5 5c 76 d6 db 78 2d b7 49 1a b2 45 4d 87 c6 52 50 a2 a8 06 c3 4c 31 28 22 c3 d9 1d d4 f7 57 ad aa f2 f6 59 a9 fc 4c 48 1f 67 46 d6 f6 d6 b6 a4 8b 4b 58 a3 c7 e1 50 0f ed cf 45 e7 e5 44 73 d7 fc 66 ef 7a 59 65 69 7e e7 62 e6 23 2a e0 00 43 68 04 10 2c 08 b7 b1 6f 29 2a 27 35 f2 e1 55 18 98 7f 80 f4 45 bd 6a 6d 97 74 d4 6b 55 ff 00 28 eb e7 fd fc c1 7a fa 2c 4f c4 ba cc bc 31 94 91 73 38 68 99 Data Ascii: iZb~~MnS:INd>Z:?_3G>{#~pESXUdW\F-E5Q\|qT<Zk?G3o`\vx-IEMRPL1("WYLHgFKXPEDsfzYei~b#Ch,o)'5UEjmtkU(z,O1s8h
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 93 a2 df 8b 7f bc fb f2 29 0e 2a 0f d9 4e 9d 4e e6 a5 3a d4 83 f9 93 77 76 e2 aa dc 35 98 48 1e a2 28 65 77 89 82 cc c2 3b eb 24 de c4 73 63 c7 b1 45 9d 22 85 a5 00 6a 14 04 74 a6 75 11 a2 8d 1c 07 f8 7a a2 ac d2 d4 cb 57 25 6b 54 4c b5 0e 4b 19 92 57 59 14 de e0 13 7e 6e 78 f7 49 6e 27 79 59 c4 ec 0f a8 3d 17 d7 c5 5a 32 13 f6 7a 74 9b ac dc 99 88 a2 31 cd 99 c8 15 26 c8 86 a9 fe a3 d2 17 eb e9 b0 f7 e1 7d 7b 81 e3 54 7c fa 6d 95 12 95 5c 74 96 ab c8 3c c4 97 9e 79 64 20 1f 5c 8e e6 c3 fa 82 7e bf e3 ee af 34 ec 0b b3 e4 f5 e0 05 2a 05 01 3d 32 fd d2 24 a2 c4 fe 48 f5 10 e0 f1 72 79 fa fb 48 01 5f c4 48 e9 4e 38 8e 94 f8 cc ab a6 83 1c d2 c6 d7 e3 c5 2b 8d 57 27 9b 5f eb 6f 77 0e 41 ad 4d 7a f0 c0 a5 31 d0 a3 b4 72 f5 49 92 88 cb 3c 92 ab 30 36 32 97 b9 Data Ascii: )NN:wv5H(ew;$scE"jtuzW%kTLKWY~nxIn'yY=Z2zt1&}{T\|m\t<yd \~4=2$HryH_HN8+W'_owAMz1rI<062
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 94 bc a1 ec 6f 2d cf ed f6 ed 7b ee 63 e9 fd e9 06 94 40 68 d0 c4 47 c4 7e 6d d0 27 72 e6 39 a4 dd ed ec b6 a5 d4 91 1e f3 e5 5f 4a f4 1a fc ad e8 bf 9e 3d 5d f0 27 76 7c 95 ee 9a 9c 4e e5 9b 7b e2 a8 e7 ec ad b3 93 a9 6f e2 9b 7a 8b 36 7c 34 f5 34 54 d2 b1 a4 81 55 a4 03 c2 08 00 5a c2 fe f0 d3 93 fe ed 3e d8 b7 bd 5b 24 bc bd 7e c9 69 b7 4e 5a 26 5a 80 c0 64 86 f3 35 f5 ea 46 dc 39 87 71 b9 d8 ae e3 94 56 e5 23 ec 23 80 c7 0f 5c 75 55 7f cb 7f 1b 8c da 92 6f 7e c0 a8 a0 96 9f 1a 36 fc a7 cc ca 52 03 3d 4c 0d e1 8e 24 20 27 93 d4 38 fe 9e fa a9 1c 3a e3 fa 7b 39 2b 01 70 05 32 28 b8 af 58 db bc cc f3 cd 6d f5 2c ba c6 78 67 e7 5e ae f3 f9 5f 77 16 0b a7 7b 53 7b e5 3b 23 78 e3 f6 9e c4 dd 38 c9 72 c2 bb 33 5c b4 d8 fa 4a 95 76 d0 d2 b4 ae 23 13 14 3c 01 Data Ascii: o-{c@hG~m'r9_J=]'v\|N{oz6\|44TUZ>[$~iNZ&Zd5F9qV##\uUo~6R=L$ '8:{9+p2(Xm,xg^_w{S{;#x8r3\Jv#<
2024-10-30 03:01:23 UTC	15318	IN	Data Raw: 93 00 05 3a 10 fb e3 08 32 7b 33 27 11 fe d5 2d 40 bf fa ab a1 52 a2 ff 00 95 bf b5 1b 4c 55 ba 42 c3 24 8f cb a4 65 ca 23 30 26 a3 ad 75 33 dd 2f 47 fd e3 cb 4e d4 e8 c5 aa e4 2e 85 41 12 59 d8 80 a7 f3 fe 3f d7 dc d2 96 8a 22 8c 33 12 74 f4 10 bd 9d cd cc 9c 69 4a 7e 7d 72 a7 ea bc 7c 6c 2d 4b f9 d4 02 20 25 7f da 4f a7 e9 fe f5 ef de 00 3f 84 11 d2 75 2c 69 55 f2 cf 4a 0a 5e b5 86 ca d1 63 cc d7 bf fb ae ed 72 48 2b 60 01 d2 a3 9f f0 f7 a6 8d 12 9a 8d 07 97 57 ab e4 0a d3 a7 b8 ba e6 a8 0d 29 8e 21 6e 4e 82 83 4d 82 d8 1f d3 f5 f6 db 00 4d 4e 4f 56 d0 fe 75 e9 d2 1e b8 c9 48 63 d3 44 c8 ac 40 b8 5d 37 01 79 16 b7 e0 fb ae a5 06 8c 45 7a b0 8a 4c 94 1f b7 a7 0a 8e ae ca 98 ec 69 65 76 36 1c a9 f4 a8 1f 5d 40 71 ff 00 13 ec f2 c2 48 70 ae c0 25 2b 41 d2 Data Ascii: :2{3'-@RLUB$e#0&u3/GN.AY?"3tiJ~}r\|l-K %O?u,iUJ^crH+`W)!nNMMNOVuHcD@]7yEzLiev6]@qHp%+A
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: ae 76 e6 c6 57 51 55 66 b6 ee 42 3f 16 4b 0b 5f 59 8a ac b7 20 cf 45 23 c2 b2 c0 4f 25 26 d0 18 1f e8 7d b9 34 42 d6 4f 0f 88 39 07 ed cf 55 96 3f 0e 56 45 f8 47 51 ba cb 77 57 ec fd cb b7 f7 03 79 60 97 6f e5 a3 7a b0 ca b2 bb d0 97 09 24 8a af 75 62 89 76 07 dd a8 86 45 27 21 85 08 e9 a7 45 75 74 03 b5 87 f3 ea ec b7 06 d3 d9 1d d1 b2 a8 37 00 77 79 2b e8 23 a8 a6 c9 42 ea 95 11 bb 22 b5 f5 27 2a 58 9b 91 ee e8 0d bb 32 a8 a2 8f 2f 23 d3 50 30 4a 2b 01 db 8a 7c ba 29 75 1d 66 70 55 13 52 c9 5c 6a e2 85 8a c6 d2 b1 72 cb c8 50 c4 fd 48 03 db 32 d6 46 ae 8a 0e 94 30 41 56 48 f3 f3 ff 00 27 4d 15 1b 47 14 f7 49 e9 92 53 6b 33 69 17 07 fd 8f fb cf ba 68 6f e3 c7 fa bf d4 3a 6b c5 3c 29 8e b3 51 e3 b1 f8 5a 69 97 1f 00 8a 4d 12 11 a4 01 7b 8e 7f a0 17 1f 4f Data Ascii: vWQUfB?K_Y E#O%&}4BO9U?VEGQwWy`oz$ubvE'!Eut7wy+#B"'*X2/#P0J+\|)ufpUR\jrPH2F0AVH'MGISk3iho:k<)QZiM{O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49823	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	393	OUT	GET /m/66db4c703d1dad5a/original/WhoWeAre_1000X1232.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	813	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 952816 Connection: close Date: Wed, 30 Oct 2024 03:01:19 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="WhoWeAre_1000X1232.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: ec8002fa-69b8-c457-13ca-631be8e5f4a5 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 82514a5a8cf35fb3132b0b5ab9cb724c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: 0hbZxg_134250Z0eM6QF3fiFVfzafojkn4FP1W_iLb8uzHUpHfQFHA== Age: 4
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: ff d8 ff e1 2c 25 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 10 00 00 01 03 00 01 00 00 00 7c 15 00 00 01 01 03 00 01 00 00 00 25 0f 00 00 02 01 03 00 03 00 00 00 ce 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 3d 00 00 00 d4 00 00 00 0f 01 02 00 06 00 00 00 11 01 00 00 10 01 02 00 0e 00 00 00 17 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 25 01 00 00 1b 01 05 00 01 00 00 00 2d 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 21 00 00 00 35 01 00 00 32 01 02 00 14 00 00 00 56 01 00 00 3b 01 02 00 0d 00 00 00 6a 01 00 00 69 87 04 00 01 00 00 00 78 01 00 00 fc 03 00 00 08 00 08 00 08 00 57 6f 72 6b 65 72 73 20 6f 6e 20 73 69 74 65 20 6f 66 20 77 61 73 74 65 77 61 74 65 72 20 74 Data Ascii: ,%ExifII*\|%=%-(1!52V;jixWorkers on site of wastewater t
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 7e 77 fa 3f 55 75 b9 54 6c 2d b1 b5 83 60 70 d9 3c 03 3f 48 ff 00 21 9f 49 4c 10 74 4d 99 99 d4 30 9b ea 5f 49 f4 87 d2 b5 9b 5c c1 fd 7f ce af fa ef 66 c5 5c 75 ea f6 6e 75 d5 33 9f 61 70 dd a7 f2 7f ea 56 8f 4c be cb 98 f6 e4 1d ed 03 67 bb 5d d3 ee 7e ef ec ae 47 eb 87 40 ea 18 77 b3 27 a0 7d 95 98 d6 bb 6d b8 96 51 51 2c 70 1b f7 63 da f6 ff 00 37 67 fa 27 7f 33 fe 0f f4 7f cd 22 7b 00 8a 2e d3 ba fb 4b 80 65 f5 90 79 f7 06 9e dd 83 5d e2 aa dd f5 8a af 56 da 8d 95 c5 0e af 73 df 61 83 21 d6 ed 6f b7 e9 b3 d2 f4 ad fd c5 c8 d6 cf ad 81 a5 cd c6 c5 b9 cd 26 0b 4e 33 63 4d 3d bb 1b f9 c1 06 aa fe b8 7d a1 d7 bf 07 18 3d ec 15 3b 5c 77 00 d1 3c 36 b7 b3 f7 bd c8 71 1e d1 fb 7f f4 14 f0 97 af fd b0 7c 28 fe 6f f6 87 f3 ef e7 fd 1f d1 ff 00 a7 f4 3f e0 d2 Data Ascii: ~w?UuTl-`p<?H!ILtM0_I\f\unu3apVLg]~G@w'}mQQ,pc7g'3"{.Key]Vsa!o&N3cM=}=;\w<6q\|(o?
2024-10-30 03:01:23 UTC	15121	IN	Data Raw: e7 fd ef f2 47 bd 54 9c 8a 53 ad a0 a6 a0 d8 1d 7a df 8f f7 dc f3 6f eb ef c5 85 7e 5d 5b 40 f3 19 fe 74 eb 97 d2 d6 bf f8 f1 fd 3f d6 ff 00 5b dd 75 0a f5 ad 3d ad e9 d7 76 fe 9f f1 03 fd b7 d7 df b5 70 a7 0e bc 23 15 cd 7a e5 6f f1 3f eb fe 2d fd 7d f8 b0 0b 4f 3e b6 8b a4 d4 f5 dd 8d b8 ff 00 0f a8 bf fb eb fb a7 da 3a 73 fc 3d 77 6f e9 c5 bf e4 7c 5f de ba 6d c6 54 0e bb 00 58 1e 01 06 df ed fe 9f eb 7b f6 7a f6 81 42 4f 11 d7 2b 73 fd 3e bf 51 c0 20 7f 5e 7d fb ab 90 18 11 d7 21 fe 17 fe bc 7e 3f 1c 1f a5 bd fb ad d2 83 1d 72 b5 bf db 0b 7f 87 1f 8f f5 fd fb ad 32 6a a6 7a ec 2f e0 fd 0f f8 58 7f b0 07 fd 7f 7e eb 7c 78 1e b2 2f 16 ff 00 6d 7b f1 63 fe b7 d7 90 7d fb ad f5 ed 20 7e 45 c5 cd c7 3c ff 00 5b 1b 00 2d ef de 98 eb dd 72 01 7f 23 93 6f ad Data Ascii: GTSzo~][@t?[u=vp#zo?-}O>:s=wo\|_mTX{zBO+s>Q ^}!~?r2jz/X~\|x/m{c} ~E<[-r#o
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: ee c7 f3 fe c7 8e 3f d8 fb f7 5e eb b1 cf fb ef f6 1f 5f f6 3e fd d7 ba ef 49 ff 00 7a fa fd 41 bd bf db 7b f7 5e eb 98 5b 7f 4f af d3 fc 38 fa ff 00 5b 7b f7 5e eb bd 3f d2 ff 00 ec 3e b6 fe 97 fa db df ba f7 5c c2 fd 09 e0 5f 9f f8 a7 f8 7b f7 5e eb 98 16 b7 d7 9e 6d c7 f8 7d 47 f8 7b d1 e2 3a f7 5c ac 3f 1c 7e 45 87 e7 f2 7f db 7b d1 23 d7 3d 7b ae 63 f3 fd 7f a5 bf 1c 7f bd df df 81 04 f1 eb dd 73 20 5f ea 6f fe c3 fc 39 e2 df 4f 7b 34 02 a7 87 5e eb ff d4 d9 fa c7 e9 61 6f f6 fc 71 fd 79 e3 dc 94 1a 83 80 e8 1e 6b 51 41 d7 56 e0 7e 78 ff 00 00 0d ff 00 a7 e3 de 89 eb c5 40 00 57 1d 7b 48 b7 fb eb ff 00 4b 71 ef d5 f9 f5 b3 5f 21 d7 20 38 fc db e9 7f f8 8f f0 b7 bf 56 9d 78 8d 40 83 d7 82 da e7 83 6e 2d f9 ff 00 7b ff 00 1f 7e cf 5a 0a 06 9a 70 1d 77 Data Ascii: ?^_>IzA{^[O8[{^?>\_{^m}G{:\?~E{#={cs _o9O{4^aoqykQAV~x@W{HKq_! 8Vx@n-{~Zpw
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: a1 3c 3f ee 2e 91 32 53 bd 56 3f 25 25 0c 0d 36 2e 78 ea 0c 04 c3 20 27 c3 ca dc 15 b0 0e 6d 96 bb 2e f1 74 6e 36 f7 96 31 1a 15 31 50 69 f8 b0 cb c4 71 c6 38 74 22 dc df 77 da 2d 23 8e f5 63 7f 15 83 09 41 ee a8 19 52 78 f0 3f 9f 43 8b d7 cf 88 85 67 15 b5 95 d1 34 5f 69 25 08 91 1e 92 19 74 eb 8a 7a 69 65 59 6a 69 d1 89 d2 d1 17 64 5f a8 b0 e3 d8 b4 78 d6 a6 38 8c b2 35 70 47 10 3d 08 e2 69 f2 cf 41 43 e0 cf aa 53 1a 29 e3 5f 3f cf c8 9f 9e 3a 66 a2 de a9 3c d9 78 6a 23 9a 4a bc 5c 31 54 ca c1 22 58 2a 69 58 3c 2b a2 aa 75 8e 29 a0 89 8b 34 8e 4d c2 9b f3 60 0a 4b 7b d9 a7 9e f9 2e 55 8c 69 4a 62 80 81 8a 02 69 5c e4 93 fe 4e 95 cb 67 1c 76 f6 92 42 e3 b8 9f 3a 90 78 f0 1c 3e 43 a2 f7 53 de d9 da dd c7 5b 8a a0 9f 09 b5 9b 19 93 c5 e0 6a 22 cd 54 4b 98 Data Ascii: <?.2SV?%%6.x 'm.tn611Piq8t"w-#cARx?Cg4_i%tzieYjid_x85pG=iACS)_?:f<xj#J\1T"X*iX<+u)4M`K{.UiJbi\NgvB:x>CS[j"TK
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 79 fa 8b 7b dd 3a b8 5f 3a f5 d0 ff 00 63 f9 b7 f8 fe 3d fb ad e3 cf 8f 5c 85 c7 f8 71 fd 4f f8 fb d7 55 61 c0 8e bb 37 b8 b7 04 ff 00 c5 7d ef ab 28 f3 a6 7a f5 ae 78 37 fc 7e 6f f5 fc ff 00 4f 7e eb 74 c6 3a ed 54 5b f1 f8 e3 fd f7 00 fb f7 5e 35 ae 3a e4 16 c4 ff 00 4f e9 f4 ff 00 91 f0 7d fb ad f5 de 9f f1 b8 fa 7f af fd 7f d7 f7 ee b4 0f 9f 97 5c 85 c0 27 8b db fa 7d 3e 9e fd 8e bc 68 7a ef 9f cd ae 07 fa df 8b fe 3f d7 f7 ec 75 ed 23 f2 eb 97 3e 93 f4 e3 fe 47 fe c2 de fd 8e bd a4 52 9d 72 03 e9 fe f7 7b 8f f1 b7 f8 5f df a9 d5 42 71 cf 5d ff 00 b0 bf e3 93 fe f3 ef 5a 87 0a f5 72 2b d7 63 fc 3f db 7f c5 7f 3e fd 50 7c f3 d7 88 af 5c 87 e6 f7 e7 fd 8f f4 ff 00 6d 7f 7a d5 53 d6 8a f5 d8 3f 5b f0 7f 07 fd 63 fd 48 3f ef 87 bf 35 07 97 56 eb b1 6f c7 Data Ascii: y{:_:c=\qOUa7}(zx7~oO~t:T[^5:O}\'}>hz?u#>GRr{_Bq]Zr+c?>P\|\mzS?[cH?5Vo
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: bf eb f1 ef da d7 d7 aa b2 03 5f 5e bc 01 b9 e0 9b 1f a5 ed 6f f5 88 e0 7d 7d ef 52 f1 d5 d3 6a 84 d6 b8 eb bd 17 bf 1c ff 00 42 7e bf e3 7f 7a d4 05 2b e7 d5 bc 21 fc 5d 76 50 ff 00 4b 13 f5 b7 fb c8 fa ff 00 5f 7e 0e a7 cf af 78 78 ad 7a f5 88 04 90 2d fd 2d c0 00 ff 00 87 fa fe fd ad 6b 4a f5 52 94 04 d7 af 69 3c 71 a8 93 71 6f c0 fc 71 7f c7 bf 6b 51 e7 d6 b4 b7 a7 5d 27 27 8f f5 ec 78 3f e2 6f f9 f7 ed 63 8d 7a d0 04 f0 eb 26 9f af e4 ff 00 ad ff 00 15 3e ea b2 57 8f 4e 78 62 bf 17 5e b1 fc 7f 87 d7 fe 23 f3 ef c5 c0 20 8e bc 53 14 00 7d bd 73 55 26 f7 04 5b 8f c7 3f ec 2f ef 5e 2f cb aa 84 39 ae 3a ec 2d cf e0 11 fe 03 e8 2d cf bf 17 a7 0c d7 f9 74 e6 95 d4 30 3e ce bb b6 a6 01 7e 83 8b ff 00 8f 3f d6 c4 12 7d d7 53 0f 3e b4 c3 51 1e 9d 65 0a 01 23 Data Ascii: _^o}}RjB~z+!]vPK_~xxz--kJRi<qqoqkQ]''x?ocz&>WNxb^# S}sU&[?/^/9:--t0>~?}S>Qe#
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: fa 4c a2 a4 33 78 e2 92 79 25 12 ab 4d 1b 12 49 25 48 63 e3 3c 37 a4 91 6b 7b 59 6f b9 6d f0 6a 48 c8 f0 c9 ad 7e de 99 93 ea a5 20 48 a4 91 8e 8c b6 c1 f9 0b 99 a3 a6 a8 d7 59 15 73 45 4c e2 08 e4 92 26 6e 64 d4 12 5b 00 ee d2 46 40 bf e0 fb 58 db bd 88 0c e1 f0 7f d5 f9 f5 41 0c c4 81 42 3a 32 9b 57 e4 f5 6d 66 3e 2d 2f 05 2c b0 53 ab c9 1c f3 2b 2b ea 0e 18 a0 b8 25 51 85 da fc e9 e2 de dc 8f 76 db 99 54 89 d4 7c ab d5 5a 19 c5 49 43 4e 84 cc 27 7e cb 2b 3b 47 4d 49 51 4e f1 45 29 68 ad a0 96 0b 23 59 af fe eb 70 1a de dd 5d c6 c5 9a 82 75 a7 55 65 9f 48 3e 11 e8 3d ec 6e fe c9 4d 3a 32 d1 45 34 d0 7a e3 a8 95 84 82 29 42 d9 f4 9d 43 49 78 af 63 c7 3f e1 ed 99 2e 2c 9a 47 5d 60 82 3d 7c fa b2 99 80 d5 42 08 c7 44 d3 79 fc 9c ce c4 7c 13 c0 5c bc cd 14 Data Ascii: L3xy%MI%Hc<7k{YomjH~ HYsEL&nd[F@XAB:2Wmf>-/,S++%QvT\|ZICN'~+;GMIQNE)h#Yp]uUeH>=nM:2E4z)BCIxc?.,G]`=\|BDy\|\
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: d7 94 e5 46 53 b9 de 50 8f 51 fe 6e ac bc e9 78 ad ab e9 22 d5 f9 f4 98 ac fe 4b dd 3d 45 14 50 8e f6 df 94 29 15 99 23 af c6 60 27 98 80 6f ea b6 89 dc 13 fe 1e d0 b7 dd e3 94 ad 63 55 fd fb 72 80 70 a9 5a ff 00 83 3d 3e 39 d2 f6 52 49 b0 8c b7 ca bd 25 32 5f c9 a3 af ea 23 91 71 3d ff 00 bc 16 59 59 9f 5c fb 3b 1d 3c 4c cc a5 4f fc a6 c1 65 b7 fb cf b6 cf dd ef 64 99 09 87 7f b9 0a 7d 55 7f d8 ea ff 00 d7 29 87 6c 96 0b f9 37 4c 98 2f e4 71 d5 b3 d7 a5 5e fa ee ee c1 cd d2 2b 29 38 cd b7 81 c1 ed e3 32 28 e0 4b 90 ad 6c a4 b1 13 ff 00 36 e2 f6 fd a7 dd df 97 c1 1f bc f7 ab 89 a2 07 e1 50 aa 0f da 72 7a 66 5e 70 94 e6 0b 14 56 f5 24 9f e4 29 d1 c4 d8 bf ca 83 e0 ae cd 8a 18 ea ba 4e 1d f9 51 10 51 25 5f 64 6e 6d c5 ba 5e 7b 01 72 d4 6b 5d 8f c6 47 7b 7d Data Ascii: FSPQnx"K=EP)#`'ocUrpZ=>9RI%2_#q=YY\;<LOed}U)l7L/q^+)82(Kl6Przf^pV$)NQQ%_dnm^{rk]G{}
2024-10-30 03:01:23 UTC	16329	IN	Data Raw: 9c 66 c0 fd 3f b0 3d 80 39 ea dc 5c 45 67 5e 0a 49 fe 5d 1b ed 12 98 e5 92 9e 63 fc dd 11 be 91 a7 82 97 69 45 1c ac 4a a2 06 52 6e 44 4e a8 a4 d9 ae 2d ca db dc 25 b8 26 92 a0 d3 18 e8 ef 51 1a 18 74 0e 77 7f 65 9c 46 6a a2 8e 29 4b 44 93 45 11 54 50 f1 e9 9a e6 e8 6f 62 7c 60 9f e9 71 ee fb 52 9d 25 f1 f2 fc ba 6a e4 9a 8f 4e b8 6c 1d c7 36 5a 38 aa a9 18 d8 48 ac e1 99 81 54 5b 10 47 23 96 16 36 fc 7b 11 40 da 88 27 88 e8 92 e9 b4 9d 23 cf ab 6e fe 5d af 56 dd d1 04 f2 4d a9 64 da b9 c8 9e 26 50 74 95 58 e4 32 09 17 9d 6e 08 16 3e 9b 0f eb ee 46 e5 16 26 77 f4 f0 ff 00 ca 3a 43 20 a1 51 e7 d5 e0 df d5 7b 9b 72 0f 1c ff 00 b0 b1 b7 b9 00 f4 df 59 14 82 3e b7 ff 00 89 f7 e0 41 c8 eb dd 65 0c 39 b7 24 fd 08 e6 ff 00 ef 5f 9f 7e a8 f5 eb dd 72 17 02 f6 ff Data Ascii: f?=9\Eg^I]ciEJRnDN-%&QtweFj)KDETPob\|`qR%jNl6Z8HT[G#6{@'#n]VMd&PtX2n>F&w:C Q{rY>Ae9$_~r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49825	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	641	OUT	GET /m/69f5dd10ed364d6a/original/IndList_SemiConductor408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	816	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 27254 Connection: close Date: Wed, 30 Oct 2024 03:01:23 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_SemiConductor408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: bdd3e94c-9180-8b41-5806-6b24842a611c Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 7abd55cee48606340f570b45718202b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: x5TWEDlKZ2gEKbIfUnqFGZx66NwAipf96ycGddXQ9APmYmC6JFJ52w==
2024-10-30 03:01:23 UTC	7715	IN	Data Raw: 52 49 46 46 6e 6a 00 00 57 45 42 50 56 50 38 20 62 6a 00 00 d0 07 02 9d 01 2a 88 01 e0 01 3e 6d 2e 93 47 24 22 21 a1 a6 92 6e 88 80 0d 89 63 2d 80 58 c7 10 d5 80 cf 6f 10 e4 5f aa 67 1f d7 4e e2 ff 9f a6 b6 02 9d 59 9b bf bf 7f c3 fb eb ab c7 2e c6 e5 bf ae 8f f8 f9 06 17 a8 72 b7 e6 b6 30 7e 4f f5 6f eb bf bf ff 9b ff bb fe 23 e6 0b f5 ac c9 f6 b5 a9 7f cd ff 32 7f 57 fc d7 a8 5f fa 3c 7f fc 97 f9 7f fb df e8 7d 86 bf 29 fe 89 fe e7 fc 07 ac 4b 5b 7f a1 e4 0f f9 af 2f 8a 4d 2e 55 fd 6f 51 8f f5 5e 8b 1f ec ff f5 f4 93 fa 3f fb 6f fe 1e e4 1f cf 7f c1 7f e0 35 63 17 9f 8a 69 b8 a9 84 12 a9 67 10 28 41 70 4c 43 c1 21 1a 08 3c bc 6f 81 9f 91 dd 58 0e dc 6a 86 b6 73 d3 5b cd ec 9e 83 b9 87 93 3c 9b 69 07 15 cb 6b 54 cc ee 9c a5 0f 57 c0 80 f4 2f 1f 1b 4c 08 Data Ascii: RIFFnjWEBPVP8 bj*>m.G$"!nc-Xo_gNY.r0~Oo#2W_<})K[/M.UoQ^?o5cig(ApLC!<oXjs[<ikTW/L
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 10 00 5a f9 54 c1 60 a8 b0 08 67 d7 c5 17 bf ce aa 60 6c db 43 18 34 0b 3d c9 3f db 41 21 6d c2 fc 46 1e d6 26 71 98 82 31 d9 6d 9f d9 45 b4 12 2f 69 2f 47 2a 82 1d cc 49 9a 5b 3a c3 3e 05 da 77 84 c8 7b f0 f1 37 e5 d1 e1 a2 56 15 30 4e 84 ce 49 74 59 27 a1 33 ea 72 90 b3 9a ab d7 1d d4 e9 b6 31 d4 70 7f c6 8d 8b cd af a0 fd dc a5 75 9c d6 d8 55 3e a8 4d 23 c7 41 f2 05 a9 d1 4f c3 7e b7 91 ab 0d f4 34 24 37 ca 4a 8b f5 5d 8a 92 58 df a3 a5 62 11 9c f5 bf b8 9b c2 f0 5d fa a9 88 4e 72 ff 5a 8e 6a 96 8b 12 60 f2 4e c4 97 e4 59 4c 28 f7 7f f0 09 1e 78 8a 1c 5f 5e fd f1 fe a4 61 b1 50 e5 bf a5 9f e6 07 51 22 1f 69 39 58 ac 82 9e 4c 24 f4 53 87 06 de 78 ca 11 7c 42 f0 8d 8c 97 c9 93 5f 81 5c 13 3c de da c2 1e 88 b8 fd b0 a8 1b 86 c5 67 ad 8a f2 a2 cf 50 f4 71 Data Ascii: ZT`g`lC4=?A!mF&q1mE/i/G*I[:>w{7V0NItY'3r1puU>M#AO~4$7J]Xb]NrZj`NYL(x_^aPQ"i9XL$Sx\|B_\<gPq
2024-10-30 03:01:23 UTC	3155	IN	Data Raw: b6 a0 0f 94 cd 4f bd 7d 46 dc 2e b7 a6 61 05 90 b7 06 db 19 a9 33 35 e6 1d 21 33 49 cd e9 61 83 0e 0c c8 5a cd e8 73 98 2f 54 d3 3a 31 a6 9d d5 b4 4c 77 fb f6 b4 ea 0f 88 23 45 57 b0 9d fb 74 ff 7f c4 f1 2e 05 a8 df c6 a8 49 97 09 a5 4a d3 d0 d0 dd 56 d3 f9 33 75 80 ae 79 0b 5e 45 df 7e 6d 81 28 9a 65 c8 8b 9e 81 b1 70 61 ea 1a 76 80 76 24 97 19 61 5f af 8d bb c8 19 ed 77 3d e7 6e bc 24 11 15 63 a6 58 3b d0 78 58 fb 76 99 ef 63 2d bb 3c 29 52 bd 6a 78 ec 69 33 e1 64 ea 89 3b 1f d6 b4 5f 9d d0 99 ac ef e5 29 f7 07 c0 bc bb 6c 13 d7 ba 4c 50 77 e5 af e0 2c 09 97 aa 60 09 80 85 cf 60 a1 9a 77 55 2b 56 d2 df 5b 19 e2 1c c7 8e ad f3 76 d3 7a a6 f0 90 61 ca 74 8e 2d e4 58 2d e3 52 1f 1d 4a 4a 76 09 9c 58 22 b7 5e 4d dd 2c 05 01 97 03 c4 14 35 dc 31 29 99 23 89 Data Ascii: O}F.a35!3IaZs/T:1Lw#EWt.IJV3uy^E~m(epavv$a_w=n$cX;xXvc-<)Rjxi3d;_)lLPw,``wU+V[vzat-X-RJJvX"^M,51)#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49827	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	398	OUT	GET /m/7b1a830a4efe120f/original/HomePage-Footer1920x456.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	818	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 14764 Connection: close Date: Wed, 30 Oct 2024 03:01:20 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-Footer1920x456.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: 14651087-818a-a441-eeb2-005d5305c905 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 626c544a24a86c6cd608360f520b6d8c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: cMmBwI_5mz2E5LHE_0pHiNJJNe3Cy4KCLv6EEGrsalo7K2jGVawnvw== Age: 3
2024-10-30 03:01:23 UTC	14764	IN	Data Raw: 52 49 46 46 a4 39 00 00 57 45 42 50 56 50 38 20 98 39 00 00 90 0b 02 9d 01 2a 40 06 7c 01 3e 6d 36 94 47 29 2c 37 23 28 36 8a a2 e0 0d 89 67 6e 50 ff de 9f ff bf fe bc 37 cc 2c 0f 1a e7 fe cf fa b6 bd 52 ff ff 4e bb b9 41 82 0b d5 5b e3 0f 62 ff b7 e5 2f c2 ff 4f ff c3 c5 6b cf ff ca fe c9 f5 a3 7f ad e1 b1 d7 bf e7 7a af fa 72 65 eb 85 7b af e7 ed fd 29 e7 81 7f 2e 35 c2 6f bf cc eb a8 ff 1f 97 fe 69 bf ff 8f 6e 0b bf fb 6d a5 ff c1 e6 77 fe d7 a0 57 a7 fe ef fe f5 af fe 9f 5f 2f 5b df ff fa 88 5f 24 ff f7 ea 4b e6 5f f1 f5 44 d3 f3 33 ff fb df da e7 bf 36 bc df c1 37 4f f5 7f d6 b7 f3 27 ff 77 ae 00 a9 c3 e4 08 2f 87 c8 10 5f 0f 90 20 be 1f 20 41 7c 3e 40 82 f8 7c 81 05 f0 f9 02 0b e1 f2 04 17 c3 e4 08 2f 87 c8 10 5f 0f 90 20 be 1f 20 41 7c 3e 40 82 f8 Data Ascii: RIFF9WEBPVP8 9*@\|>m6G),7#(6gnP7,RNA[b/Okzre{).5oinmwW_/[_$K_D367O'w/_ A\|>@\|/_ A\|>@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49826	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:22 UTC	393	OUT	GET /m/39bfef4335dc67b3/original/Services_1000X1232.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	813	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 787568 Connection: close Date: Wed, 30 Oct 2024 03:01:20 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="Services_1000X1232.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 754a46f3-7816-7164-b862-3d2c3bb20b7b Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 82514a5a8cf35fb3132b0b5ab9cb724c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: yG_q_vNPBqdE_Ea7fArnzrGLOYts_cR8jKr3JauRdHHBEdVVHuak_g== Age: 3
2024-10-30 03:01:23 UTC	15571	IN	Data Raw: ff d8 ff e1 25 3a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0f 01 00 00 03 00 00 00 01 14 88 00 00 01 01 00 03 00 00 00 01 09 c4 00 00 01 02 00 03 00 00 00 03 00 00 00 c2 01 06 00 03 00 00 00 01 00 02 00 00 01 0e 00 02 00 00 00 49 00 00 00 c8 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 01 11 01 1b 00 05 00 00 00 01 00 00 01 19 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 01 21 01 32 00 02 00 00 00 14 00 00 01 42 02 13 00 03 00 00 00 01 00 01 00 00 82 98 00 02 00 00 00 09 00 00 01 56 87 69 00 04 00 00 00 01 00 00 01 60 00 00 01 98 00 08 00 08 00 08 54 77 6f 20 70 65 74 72 6f 63 68 65 6d 69 63 61 6c 20 63 6f 6e 74 72 61 63 74 6f 72 73 20 63 6c 6f 73 69 6e 67 20 61 20 64 65 61 Data Ascii: %:ExifMM*I(1!!2BVi`Two petrochemical contractors closing a dea
2024-10-30 03:01:23 UTC	2327	IN	Data Raw: da 76 6f ab 57 3b d2 b9 df a3 7b 7f c0 ef af fe 0e c5 93 f1 3c fc f6 3c 23 26 3f d5 c0 69 23 11 0f 4f 17 c9 fb d2 8b 29 11 a3 46 cf 77 96 b3 a7 5d 6f 52 c9 bf 32 8a b0 ee a2 b1 59 7e 33 9e e2 67 68 0e 63 7f 9d b1 ae aa bf e7 bf cf 4f d1 70 bd 6c f6 da d8 69 0c de e2 5b 27 5b 1c 5e ee 7f 75 74 f9 58 ff 00 68 a9 c2 87 39 b6 41 6b 2c 69 0d 7e d3 f9 bb c8 76 d5 99 d3 3a 6d f8 59 26 c2 fd f4 96 8a c1 88 21 f3 bf dd b6 5b f4 5c ac 7c 3f 9c 1c d6 01 92 84 67 1f 46 48 fe ee 4f ea ff 00 52 69 84 b8 87 8f 54 9e 9e 6f fa 13 f4 a7 e9 d5 c7 fa 4f a5 f4 bf e0 52 57 76 fc 7e 8f e2 92 b9 6a b7 ff d3 d9 24 34 49 fe ff 00 c8 b5 b0 3e af 32 ca aa ca cf 0e aa d6 6e 79 a8 18 20 10 76 fa 91 f4 76 7f 39 b7 fd 22 c8 b7 ab d3 d1 45 39 cf a0 65 3c bd c1 b5 97 16 86 b5 a0 6e b3 da Data Ascii: voW;{<<#&?i#O)Fw]oR2Y~3ghcOpli['[^utXh9Ak,i~v:mY&![\\|?gFHORiToORWv~j$4I>2ny vv9"E9e<n
2024-10-30 03:01:23 UTC	8949	IN	Data Raw: ff 00 67 3c ee cc ea 36 64 31 a7 71 aa b6 ed 9f 26 ee 71 6f fd 15 ab 87 97 d4 71 dc cc ba 0b b0 9a f1 b2 9c 76 44 7a 6d 07 d3 f5 98 e0 ef 5b fb 6b 3f 2f 29 98 99 9c 19 86 2b ae 1c 7c 10 94 6f f4 a5 2c 9e b4 4e 32 af 49 a2 83 eb de 03 71 3a 96 33 eb 73 9c cc 8c 70 ef 70 1a 16 be c6 1e 15 2e 84 e0 5b 91 41 12 5c d0 f6 0f ea 1f 7c 7f 65 eb ad a7 17 1f ae de dc be b7 8f f6 a3 89 5b 31 f1 70 68 7b a9 76 46 46 4b dc fc 7a 6c 7c b9 d4 33 65 59 0f b2 cd cc f6 7e 91 75 19 1f 55 be ab f4 ed b7 b7 a2 b5 d7 62 b7 de ec 3b ad 2f 63 48 35 ef 35 b9 f5 bf 21 ad 6b bf 4b 73 ab 7a 58 e7 3c 50 8c 33 9b c8 07 ac c7 d5 fd df 97 fa ac d8 70 64 94 01 eb e6 1e 0f a6 e3 63 5d 91 63 ec a6 a7 ed 61 7b 9d 6b 9c 00 0d 80 e7 7b 1c d5 a7 47 5b c1 c5 c4 fb 3e 3d ad a1 af b5 c5 b6 31 8e Data Ascii: g<6d1q&qoqvDzm[k?/)+\|o,N2Iq:3spp.[A\\|e[1ph{vFFKzl\|3eY~uUb;/cH55!kKszX<P3pdc]ca{k{G[>=1
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 47 57 66 38 76 86 96 a6 b6 c6 d6 e6 f6 67 77 87 97 a7 b7 c7 d7 e7 f7 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 3e 3e fa 03 d6 10 75 c3 f2 7f d7 3e dd 07 02 bd 27 6e 27 ed eb af af bd f5 e0 09 e1 d7 2d 27 df ab d5 b4 1e b8 ff 00 af ef dd 53 ae c7 27 fc 3d e9 8d 05 7c fa d1 eb 9f b6 ba af 5c 49 fc 7b ba af 99 e1 d6 c0 e1 8e b9 0b fe 7d e9 80 f2 e9 f4 5d 39 3c 7a f5 af f4 f7 5e 9c eb de fd d7 ba e0 6f 7f af b7 47 01 d2 72 49 cf 5c 87 23 dd 18 50 f4 ea 13 4e b3 1f a1 ff 00 5b de ba 55 d4 39 81 fa ff 00 51 ff 00 1a ff 00 88 f6 96 5f 3f 97 4a e2 35 e9 9a 40 2e b7 e6 e4 7f c4 8f 65 6c 68 cd d1 92 00 05 7d 47 52 a9 95 49 bd 81 fc 7f bd 9f f8 8f 6e Data Ascii: GWf8vgwHXhx9IYiy*:JZjz?>>u>'n'-'S'=\|\I{}]9<z^oGrI\#PN[U9Q_?J5@.elh}GRIn
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: e7 e9 f5 f7 92 fc b0 3f 4d 71 e5 d4 09 cc 64 eb 93 f3 e8 d4 ec d9 41 a7 8b e9 fa 47 fb e1 ee 49 86 80 01 4f 2e a3 8b 8f 8c 9f b3 a1 5e 1e 54 7f be fc 0f 6f f5 a0 2a 47 59 b4 93 f4 e7 dd 0b 01 83 d7 98 69 f3 eb c7 fd 6f 74 8c 80 4d 4f 55 1d 63 b1 04 dc 9f f0 17 f6 f0 35 15 1d 6f ae c9 03 eb f9 f7 ee bd d7 5a d7 fa ff 00 bc 1f 7e eb dd 73 0d fe c7 fc 7d ea 9d 5c 3d 3c b3 d7 89 bf bd 81 4e b4 cd aa 9d 75 ef dd 57 af 15 07 eb ee a1 81 ad 0f 4d b9 f2 a6 3a e0 53 ea 41 e3 fa 5b 9f 7b 04 1e b6 ac 38 70 eb a5 b9 04 1b 8b 7f b7 37 fe b7 f7 be af 51 c6 bd 73 03 4f d3 fd 7f 7e eb c7 81 eb 9f bd 74 cd 0f a7 5d 1f 7e ea ca 32 09 1d 75 ef 7d 39 d7 77 b9 17 e3 e8 3f d6 1e fd d7 ba ef eb ef 5d 32 78 9e ba ff 00 8d ff 00 bd 71 ef c3 ab 20 e2 7a ea fe f7 d5 99 41 cf 9f 5d Data Ascii: ?MqdAGIO.^To*GYiotMOUc5oZ~s}\=<NuWM:SA[{8p7QsO~t]~2u}9w?]2xq zA]
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 09 44 25 2c 48 56 b5 ad 6f ad bd c6 b7 1b 80 d2 45 2b d4 90 96 88 33 5e aa 0b e7 f6 72 ba 0c 0e 42 79 4b 87 11 c8 49 24 df e8 7d 95 c1 39 6b 95 a1 c6 3a b4 b1 a8 8b 14 af 5a cc d7 77 05 4e 2f 77 b4 4a e5 6d 58 41 3a ad f4 92 c0 df dc b3 b1 85 68 d3 57 40 7b e9 19 64 6f 4e b6 36 fe 5c 9d a6 f9 ea 6c 74 72 d4 16 25 62 16 2d 7f c0 16 3e cd f7 58 17 c1 2c a3 a6 ad 27 d4 dc 7a b7 0e f5 92 39 b6 74 92 ca 46 93 4c 58 93 fd 34 5f dc 61 7e 07 8d 4f 3e 85 d6 a6 b1 54 71 ea a3 69 37 6e 07 17 9f ab 8a 47 88 48 67 71 f5 5f cb 7d 0f e7 d9 fe d9 06 b8 71 c7 a2 bb da 07 c0 e9 74 a9 45 b8 dc 4b 10 59 11 ad 6d 1e af e9 7f f0 fa 7b 5a d1 18 ea 29 43 d2 02 c4 f4 e2 98 1a 5a 60 42 a0 51 63 7b 8b 73 ff 00 23 f6 5b 30 21 49 f3 e9 e8 b0 45 7a 2f 5d 87 b6 a0 fb 96 a9 45 1c 12 d6 Data Ascii: D%,HVoE+3^rByKI$}9k:ZwN/wJmXA:hW@{doN6\ltr%b->X,'z9tFLX4_a~O>Tqi7nGHgq_}qtEKYm{Z)CZ`BQc{s#[0!IEz/]E
2024-10-30 03:01:23 UTC	4542	IN	Data Raw: a6 48 1d 28 f2 90 03 4e f7 ff 00 53 fe df f0 7f 3f e3 ed 21 14 c7 4e 83 42 3e de 8a bf 60 d3 0b 4d c7 d0 b0 fa 7f 5b d8 fb 55 19 3d 99 e9 e6 3f da 53 d3 a2 6d bb 69 14 4d 2f e6 e4 fb 31 8f 3a 4f 48 a4 3d b5 1c 69 d1 76 dc f4 8a 3c 87 8f a5 f8 1f ed ff 00 af b5 c8 2a a4 fa 74 89 da b4 cf 45 c7 77 53 80 64 20 7d 6f c8 fa 93 fe b7 fb 0f 6b a0 5a ad 3c fa 45 31 ae 3c fa 2c db a2 01 fb a2 ff 00 d7 eb 7f 6b d7 f9 74 89 bc c7 45 a7 73 53 0f 24 9c 02 09 27 fd ef fc 7f af b5 6a 70 3a 4c 09 34 03 a4 56 3e 91 44 fc 8e 01 b0 b7 fb ee 7d a4 99 6a 48 3d 28 85 4d 4d 7a 55 64 e9 d0 50 37 03 f4 1f c7 f5 1e c9 a7 5a 1a f4 6c 87 cb a2 57 d9 90 81 34 a4 01 6d 4d fd 38 fa ff 00 c4 7b 60 0e a8 e6 a7 a0 a7 6b 02 32 51 ff 00 8c a3 fd 88 d4 3d bc 16 b9 3c 29 d2 5a f1 03 a3 bf b5 Data Ascii: H(NS?!NB>`M[U=?SmiM/1:OH=iv<*tEwSd }okZ<E1<,ktEsS$'jp:L4V>D}jH=(MMzUdP7ZlW4mM8{`k2Q=<)Z
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: 40 29 8e 35 2c 7e 64 e7 a1 1e d1 bd bc 61 89 7a c8 c6 b5 ff 00 27 45 8f 79 e2 d2 92 4a 9a 79 d0 2b 00 c4 00 74 d9 6f f5 bf d4 8d 3f 81 ef 03 3d d8 e4 fb 2b 18 f7 2b 4b c8 54 39 53 41 5a 50 7d bf b0 d3 cc e3 a9 b7 97 2f 8d c2 c3 34 2d 55 34 fd bd 00 79 6a 55 56 91 91 91 8c 64 dc af d1 98 90 34 5c 9e 12 c3 eb fd 7d f3 93 9f b9 5e 1b 47 ba bb 86 58 e4 10 b1 ab a8 f8 98 95 01 1b 51 ae 8a 03 43 5a ea e1 40 69 d4 b1 b7 4e cc a8 ae 08 07 87 f9 fe df f2 74 93 f2 49 04 8b 34 4c 62 96 39 03 23 29 21 91 94 ea 0c 3e bf 42 3d c4 d6 57 57 56 37 56 f7 f6 57 0d 15 e4 32 07 46 53 46 56 53 50 c3 d2 87 fd 9e 84 1a 12 54 68 dd 75 21 1f cb cc 74 aa 9f 39 06 73 0f 3d 36 51 8a e4 e9 3c 0d 8a 78 a2 16 9c c9 29 35 a6 aa 52 46 80 90 a8 d2 07 ea 73 ee 6e e6 0f 72 36 cf 70 b9 06 fa Data Ascii: @)5,~daz'EyJy+to?=++KT9SAZP}/4-U4yjUVd4\}^GXQCZ@iNtI4Lb9#)!>B=WWV7VW2FSFVSPThu!t9s=6Q<x)5RFsnr6p
2024-10-30 03:01:23 UTC	10463	IN	Data Raw: 6e 3d e8 02 7c ba a9 3d 00 9b b3 3a 95 50 ca 0b 0b 59 ae 49 fc ff 00 52 7e 96 1e fc 63 18 c6 7a f6 be 89 9e fd 9e 98 cb 2b 12 b7 2c 6d 62 2d f5 3f ed c0 1e d4 42 9d d4 03 1d 31 2b d3 8f 45 f7 2b 92 a6 8b 55 99 78 bf 23 da ef 0b 50 a8 1d 23 d6 43 12 3c fa 0e 32 19 21 2c 8c 15 c9 e4 80 01 e0 7f c6 f9 f6 92 54 a5 69 d3 cb 20 6f b7 a6 af b7 96 6f 57 fb 63 f8 f6 9b 4b 7a 1e af d2 ff 00 64 d2 c8 95 f0 90 2c 03 a8 ff 00 63 7b da de d4 21 38 04 e7 a6 d9 47 1a d3 ab 34 ea 78 65 7a 48 05 89 e0 7f b1 e3 83 fe df da e8 09 ee ce 3a 43 72 54 21 a7 1e 8d ce d0 c7 d4 9a a8 4d 8f ea 04 f2 7e 9f 8f f7 9f 6b 9f 51 4e 3d 17 ae 95 6a 13 9e 8f 2e d1 81 a3 c4 c6 08 3f e6 85 af ff 00 05 ff 00 7a 17 f6 12 be 27 c4 27 ce bd 08 6d 68 63 04 1e 82 1e c8 16 9c ff 00 af f8 ff 00 5f fe Data Ascii: n=\|=:PYIR~cz+,mb-?B1+E+Ux#P#C<2!,Ti ooWcKzd,c{!8G4xezH:CrT!M~kQN=j.?z''mhc_
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: bf 4f e8 2f 63 cf b7 d1 80 f8 87 4d ae a2 32 3a c9 4d d6 b2 55 35 da 0f ad 8f 09 73 c1 1f e1 ed c3 2a 81 52 73 d5 c4 6c 4d 42 f4 a4 a7 ea 44 20 5a 98 92 2d f4 8c 70 79 fa 1b 7b 4d 24 c7 f8 b1 d3 c8 a0 71 23 a7 88 fa 8e c2 ff 00 68 f7 1f 8d 16 e7 fc 2c 3d a4 69 59 bc ff 00 97 4f 85 af 0e 3d 70 3d 34 f5 27 48 a3 6e 4d b9 8c 7f c5 3d e8 30 19 24 7e ce b4 62 20 e0 ff 00 2e a5 2f 40 17 4d 5f 64 7e 97 fd 00 9f f5 c7 a7 fa 7b 69 d9 49 c8 ea fe 1b 00 3a e7 47 f1 ce 7a 89 56 d4 66 c4 ff 00 c7 31 cf fb 61 cf bd 19 23 5e 3d 34 62 72 48 af 42 26 3f e3 53 2c 6a 4d 09 17 1c dd 3f d8 7f 87 1e d3 b5 d4 60 9c 82 7a 53 1c 0c 45 09 eb ff d3 b0 fb 73 7f 79 df d6 19 93 5f b3 ae fd fb ad 75 d8 f7 e3 d5 97 87 5d fb d7 56 eb de f4 dc 0f 5a a8 1c 7a e3 ed 8e b7 51 c6 bd 77 f4 ff Data Ascii: O/cM2:MU5s*RslMBD Z-py{M$q#h,=iYO=p=4'HnM=0$~b ./@M_d~{iI:GzVf1a#^=4brHB&?S,jM?`zSEsy_u]VZzQw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49828	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	639	OUT	GET /m/3ebf6c5896f14138/original/IndList_DrinkWater-408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	814	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 10540 Connection: close Date: Wed, 30 Oct 2024 03:01:23 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_DrinkWater-408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: d7161396-d8e4-b533-3ffe-b853c8747b11 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 740769d10d5ef217a54d33b1ec64faf4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: S28-Cyvzt2ihIKPmD4vBdPolS7gU3OE50fNN_EEHVTAj-v4GHQBcNg==
2024-10-30 03:01:23 UTC	10540	IN	Data Raw: 52 49 46 46 24 29 00 00 57 45 42 50 56 50 38 20 18 29 00 00 d0 f9 00 9d 01 2a 88 01 e0 01 3e 6d 34 96 48 24 22 ac a5 a4 12 ea 89 90 0d 89 67 6e e1 10 2e 6c cc da de 5f 51 b6 ad 80 87 ba 38 6b 5e bf 3a 5a e5 f3 d0 09 7c cd 8b 7d a7 26 d8 97 f8 1f 04 7f 2c bf d8 f5 0e fc 87 fa 07 fb 7f ee 1c 78 60 33 f5 5f f1 7f b1 fe c6 74 0d fa b2 8d 5c dc 7f cd cf 1b a9 f7 ad bd 21 08 70 b2 68 74 2d 3e 48 d7 ff fd 03 e0 81 f8 46 fe 2e 24 be c3 f2 b0 75 28 b3 c6 c8 41 ec 34 0b 4a 32 2f f6 f1 f2 a4 48 d9 52 24 6c a8 f6 77 ff f9 7c 4e 7f fc 5e fb 28 c0 36 15 89 71 4b 8b bb 58 0a ff b3 a3 91 62 66 27 a0 3d c5 8a 05 67 ff 7b 89 49 08 ab cb f5 c2 c9 a2 61 64 d1 30 93 e2 d9 fe d3 cb 2e 7f f9 4c 69 ea 25 c3 dc 7e 7b 34 6d 9f ff d5 6f 12 31 57 e9 77 54 a6 70 63 ab 13 33 a8 7f e0 Data Ascii: RIFF$)WEBPVP8 )*>m4H$"gn.l_Q8k^:Z\|}&,x`3_t\!pht->HF.$u(A4J2/HR$lw\|N^(6qKXbf'=g{Iad0.Li%~{4mo1WwTpc3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49829	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	641	OUT	GET /m/6db334456dad3140/original/IndList_WasteWater02_408X500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	816	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 54694 Connection: close Date: Wed, 30 Oct 2024 03:01:23 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_WasteWater02_408X500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: dca23aa5-3fc5-e32b-199f-499c2793060a Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 d9523e44e96d2539081596bb1d268d44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: XNbveEMp2gLHJBpkPzwUldM0GGv7tkkxQUG81Qdy-UeOeySUQa0pTg==
2024-10-30 03:01:23 UTC	7714	IN	Data Raw: 52 49 46 46 9e d5 00 00 57 45 42 50 56 50 38 20 92 d5 00 00 d0 17 02 9d 01 2a 88 01 e0 01 3e 69 28 90 45 a4 22 a1 98 eb ef 04 40 06 84 b1 b5 40 18 15 40 09 c7 e3 ee 51 e9 e7 e6 d9 c3 f6 e7 bd b3 73 d9 b7 d5 79 54 7c 7f 7b 1f fb 9e bd 79 c0 7f c4 f6 85 fd f7 fe 4f 9d ef ed df be 9f 9c 57 a6 87 a7 df ae 27 3f 57 ad 67 ad d7 ed 86 99 04 ab 7d 03 ec ef e4 97 99 3e 3f be 1f fb c7 fa 5f d9 9f 71 ec 33 f6 3d ff 6f fb 6f 50 ff a3 7e 64 fe c7 f9 cf 69 bf c9 ff e8 ff 45 f9 55 e8 5f c5 ef f8 bf c4 fb 02 fe 5f fd 6b fe 37 f8 0f dd ef 72 af a9 ff d3 fe df fe 8f 7d 7e bd fe a3 ff a7 fb 1f 60 8f 6f 3e e7 ff 57 fc b7 f9 af fd ff ec 7e 23 bf 17 cc ef dc bf db 7b 01 7f 52 ff 0b ff 6f f3 b7 e4 4f fa 5e 0d 1e ab ec 05 fa a3 ff 57 fb 1f 76 7f f2 3f fd 7f c5 ff 89 fb ad ee 9f Data Ascii: RIFFWEBPVP8 *>i(E"@@@QsyT\|{yOW'?Wg}>?_q3=ooP~diEU__k7r}~`o>W~#{RoO^Wv?
2024-10-30 03:01:23 UTC	68	IN	Data Raw: 62 f3 f5 2e 29 a8 e6 07 a1 4c 13 8b 6d a2 c4 8c 02 2c 40 16 f3 53 b2 33 6a e3 e0 bf 5e 04 cf d5 38 8a ce 52 61 fb b3 1f 5c a8 40 91 88 fc 68 54 66 5c dd ea fc 4a 3f eb de e4 4b 6a ea cc 71 ee 98 7f 45 51 Data Ascii: b.)Lm,@S3j^8Ra\@hTf\J?KjqEQ
2024-10-30 03:01:23 UTC	16384	IN	Data Raw: da 47 39 c9 a3 e8 4a 40 c5 7b 90 70 6c ce d7 cd 36 80 ae ed 6a b8 26 22 ba b9 13 39 ab ec c3 70 c0 a7 da a2 9f 77 0c 87 a3 dc d9 af 1c 71 8a be 13 89 23 0b 24 a5 01 de 2b 5e be 5b d5 91 86 d9 00 77 50 e0 87 55 3d ee 05 e9 b0 6e 1c c8 40 42 4d 01 a4 70 80 8f b8 b8 16 9a 34 9c 74 55 39 57 a7 f9 e2 6c 95 70 59 5d c4 98 05 65 6c 2e 5a 37 ea 1c e8 bd 70 a5 4e af 97 0a 1f 5e 50 cb c5 5b 09 69 9f 56 a8 d9 57 f2 72 b4 c9 fe e8 fd 65 7f ec fc a5 e9 0a b7 a6 5a 9e b9 a4 86 ea 06 62 fa d8 b3 c1 60 11 79 f7 48 10 9b e3 73 92 ea db ac 56 c7 a1 da de cf 7a e5 d3 dc c5 f8 f0 97 79 4a 44 bc cc fe 04 c1 f3 55 7b 51 21 dd 65 97 02 34 8e 59 bc 34 65 4c 82 aa 69 66 89 37 88 4d 2a ef b1 38 90 a8 7a e3 d8 03 f9 76 37 f0 a0 2d 54 45 09 26 f1 e7 dc 73 0a 75 d9 5b 33 dc c7 86 89 Data Ascii: G9J@{pl6j&"9pwq#$+^[wPU=n@BMp4tU9WlpY]el.Z7pN^P[iVWreZb`yHsVzyJDU{Q!e4Y4eLif7M*8zv7-TE&su[3
2024-10-30 03:01:23 UTC	6396	IN	Data Raw: 33 70 77 55 8a 17 d0 32 e0 69 47 69 4f bc 53 aa 6a ff a6 09 89 d2 3e 19 d7 6b 6b 5a fa 00 a6 e0 07 cd f8 00 b0 44 96 27 41 64 e6 92 78 74 07 5f 60 65 9b 57 6f 0f 63 73 6f b1 ca 81 54 6e 15 2f b6 5f 86 7c 72 83 01 6e 0a 4d 28 3e 2a 5d 3f 24 c1 3f b9 56 33 ac 43 4e 63 7e 79 30 65 e8 17 36 31 fc 87 a5 89 51 40 65 e7 fb 95 9d e4 2d 4b 90 af 0d ae a3 80 43 21 08 9c c4 d5 23 b4 fc 8d b6 6f 36 5a ea f8 e5 fa 50 fa a6 49 f7 87 7e 9c 64 4f 55 cd 1e 97 d8 85 9a f8 8b dd ff d3 ed e4 bb 4b 73 92 e2 79 28 c3 85 81 73 00 8b 9b 82 fe 5a e0 77 e0 c9 ba 85 56 2f 0b 83 88 e9 4d 03 3e 56 89 39 c5 02 b8 2b c7 a2 e5 88 5a 3e cc 98 95 5f 36 44 91 3c 84 01 1d c7 1e 57 25 dd fb e9 26 f4 ea 39 28 5d 44 15 69 79 92 53 8b 6c 45 ec ac fc 06 ca c4 a0 e0 f5 ac f2 30 16 cb 36 fb 0e a0 Data Ascii: 3pwU2iGiOSj>kkZD'Adxt_`eWocsoTn/_\|rnM(>*]?$?V3CNc~y0e61Q@e-KC!#o6ZPI~dOUKsy(sZwV/M>V9+Z>_6D<W%&9(]DiySlE06
2024-10-30 03:01:23 UTC	1796	IN	Data Raw: a3 a5 f2 1f 61 26 bf 55 e2 0e 33 77 78 a4 45 8a 6a ac 16 6b d1 96 fb f4 28 22 d9 4c 53 78 22 02 07 b5 33 9d 0a 9c ab 73 b1 70 1d f7 02 1c d7 29 28 ad 01 4f 19 e4 9d bc 5e b2 13 55 90 56 65 14 49 70 22 88 94 8b 89 38 50 40 7e 81 f4 3d 2c 57 40 f6 dd 6e c4 1e 88 25 d6 90 db 7e 07 37 ee f8 96 79 f9 21 a5 59 da d1 fa f0 24 07 96 80 86 c7 f8 c4 b2 90 c6 29 bd 24 c6 fd 95 6b 1f 98 7b 9f 4c fa 01 5d 96 e8 79 f6 28 0f f2 c9 4c b7 ee 49 c0 6e 58 4a 8d 58 62 b5 67 dd bd 66 c3 25 8f 42 6d a8 4a f1 17 ad 4d 9a a3 bb a4 fc 58 4b 38 35 c9 e4 e6 9f 06 8a a0 8a cb 96 59 c7 97 d4 94 eb 54 80 8f 97 9e df 80 2b 50 27 b1 9a d7 74 01 a5 32 71 bc a0 98 30 9e d7 81 ec 96 24 d2 e1 c4 d6 f5 8f 66 b5 e3 b7 db ba e8 3c 4e fb 54 8a a7 cb 18 36 87 05 17 a3 53 28 bb a0 bd 74 6a 50 dd Data Ascii: a&U3wxEjk("LSx"3sp)(O^UVeIp"8P@~=,W@n%~7y!Y$)$k{L]y(LInXJXbgf%BmJMXK85YT+P't2q0$f<NT6S(tjP
2024-10-30 03:01:24 UTC	16384	IN	Data Raw: 4d 35 d4 e7 54 03 64 c8 7d 7e 92 c8 94 4d 6c 2b 0e fb 3c 23 35 3e ee 61 36 79 a5 12 c6 47 fb 92 e8 53 ce 22 d2 1b f4 c1 05 13 6a 8d 15 9c ed 3a 68 84 cb c0 8b 5b 83 c4 f5 d6 d2 d3 fe 6b 7c c3 5b cd 05 4c 68 3e 3c af 23 0f bc 5f 74 e7 cd b7 41 0a 59 3a 58 f8 99 6c d3 c2 09 a4 21 26 24 38 14 c4 7b b3 df 49 53 cc db 02 23 bf 8c 96 d3 13 f8 5a ca dd a8 54 9a aa 23 38 bf bf 57 28 36 e9 dd ac 30 b6 61 e9 5a c9 b1 34 fb ee 72 db c1 57 3f f9 a4 d7 10 f1 48 df ff 2a 08 93 69 72 ed e4 35 a0 ad 83 d2 3d e7 d5 c8 b8 49 33 37 10 9b 99 ae c3 54 48 67 e0 b3 a6 85 5d 2d 69 5f 69 a4 c4 4e 8d 07 28 a9 80 b6 d0 64 68 82 3c 89 8f f0 65 9b bf f1 8a 6d 47 58 38 b3 10 6a 20 33 0b b6 2a c8 c3 df a1 91 24 f5 be ee db de 97 3a 39 df fb 0b e5 2b 88 41 0c 81 d8 3d 7c 6e 9c 5c e9 d6 Data Ascii: M5Td}~Ml+<#5>a6yGS"j:h[k\|[Lh><#_tAY:Xl!&$8{IS#ZT#8W(60aZ4rW?Hir5=I37THg]-i_iN(dh<emGX8j 3$:9+A=\|n\
2024-10-30 03:01:24 UTC	5952	IN	Data Raw: 05 b2 d3 03 bf 4b a8 3d 97 3d 6f 38 a7 e2 1e a1 49 34 bd 93 70 d2 ed 67 2e 3f 48 d2 0a 8c ef 36 d9 8c 52 8e 00 4c 6b db fb 4d 45 c5 d8 53 90 8f 9c cc 43 19 a7 43 59 d3 b5 d7 32 fc 08 12 69 1a 5f 1a 0d 56 29 9b ac d8 96 ba b4 bf af 62 a8 1c 57 f2 95 93 58 9e ac d7 b0 de e5 80 15 f8 89 d3 73 21 26 3f a2 fa 0f 36 7a 68 f5 97 7a 50 7a 5f 64 11 82 19 68 32 68 90 d2 dd 43 9e 5f 1a d7 4d 93 4e 0d d0 8e 94 0e f3 04 d3 d9 96 b7 4c b7 6e c4 52 5b f5 71 89 e0 0f 56 9f 4f 20 3c 0b ee 82 45 c9 2a 67 71 47 60 dd dc bb a8 01 14 21 fb b2 76 6c f3 7f 0a 11 50 d3 47 5a bd 9f 70 a7 54 a1 87 a2 f7 f5 9e 93 19 74 60 fc b7 93 6d ef cd f4 76 a5 9f c1 d8 04 d4 ac ea f5 21 47 37 5b 82 3d d5 37 f5 19 de 82 cf 92 dd ab f7 1f 2f 72 ab c1 b5 2e 75 8e 2c f9 c2 a0 ef 6e c0 ea 4e 45 af Data Ascii: K==o8I4pg.?H6RLkMESCCY2i_V)bWXs!&?6zhzPz_dh2hC_MNLnR[qVO <E*gqG`!vlPGZpTt`mv!G7[=7/r.u,nNE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49830	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	635	OUT	GET /m/65510963a54fda2/original/IndList_Oil-Gas-408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	811	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 40862 Connection: close Date: Wed, 30 Oct 2024 03:01:23 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_Oil&Gas-408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: be24cdba-bb45-17a2-47c0-8917fcd3343f Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 bfad099b4e1fa2ec7d21876e0293dc20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: j_x5OkmcrVcC_s3lG3E5QIncAPqM0_62yEopcD94cgcMvPmwZ5VrHQ==
2024-10-30 03:01:24 UTC	16384	IN	Data Raw: 52 49 46 46 96 9f 00 00 57 45 42 50 56 50 38 20 8a 9f 00 00 50 e9 01 9d 01 2a 88 01 e0 01 3e 6d 2e 92 46 24 22 a1 a1 2d 14 1d 58 80 0d 89 63 2d 52 5e 65 f4 26 60 f8 5c f3 f0 4c eb 25 fe 8a 5b f1 fe 65 99 4f e9 d9 b9 f6 27 b5 93 25 ff 77 b8 ff 82 ff b9 e6 25 ed bd ed 7f ea 7a f1 fe 9b fe ff a3 2f f7 3b e1 2f ee 57 ab cf db 6f da 4f 78 5f f8 ff bc 3f 03 7f c1 fa 40 7a 5f 7f d5 f6 b3 fd bb f6 87 f2 ee fd d2 f8 a7 fe e9 ff 97 d9 e3 f7 1f 06 67 d0 7e e5 f8 27 e5 67 e3 1f c0 7f 9d ff b5 f1 35 f9 3e 28 fd d7 fb 4f 31 3f a0 7e 5e fe 6f f9 8f 6a 9f d0 ff ea ff 57 e3 6f c8 5f f6 3f d0 7b 05 fe 6d fd 67 fe 07 a5 67 db 76 e1 6d df e9 3f 6c fd 83 bd ce fb 7f fe 3f f1 3e aa 5f 87 ff bb fc ef ac 1f 69 bf f7 7b 81 fe c0 ff e5 f6 0f ff 0f 87 df e8 7f ed 7b 05 fe a6 f5 72 Data Ascii: RIFFWEBPVP8 P*>m.F$"-Xc-R^e&`\L%[eO'%w%z/;/WoOx_?@z_g~'g5>(O1?~^ojWo_?{mggvm?l?>_i{{r
2024-10-30 03:01:24 UTC	16384	IN	Data Raw: 49 15 0f 98 23 50 f8 6b ad d3 6b ef ce f0 0b a6 8f 17 c1 73 0f d7 8c 56 17 37 42 59 a0 57 93 26 2b 95 10 8b e8 41 6b 20 73 7b 75 60 f6 f4 e7 17 2f e1 18 89 d3 5f 00 3a 4a 65 39 b0 04 4b dc fd 5a f4 f9 ac b3 e4 c5 03 28 53 33 e5 f2 c9 46 49 8a 04 74 fc ba 04 07 11 69 26 ca ea 2c 05 54 7e 7d 7b 94 5b f0 f7 ab 9c a1 bc c4 74 09 a8 1e 6e 36 b9 3e 36 ac a6 c1 95 ac 87 43 e7 b2 b2 c6 4a 78 c3 7d 9f 80 49 26 05 a4 b0 6b 66 4d 9b fe 0c c7 5f ff dc 31 77 10 4e 74 79 9a 60 6c f9 19 63 f7 09 9e 0f 39 8e 1b 62 05 f9 8e 98 0b 04 be 34 d5 fe 02 6a ba bb c0 d3 59 c7 64 64 51 55 38 c8 e7 fc de 66 1a 92 7d 5a af 06 40 66 ae b2 07 fe eb 00 d1 9e c5 b9 ea 86 6f b7 40 86 76 9e 2e ec 4c e8 5d e4 a4 eb d8 16 3a d8 ae c6 d0 a9 ba 67 0d 3d 2f 5b 8e 0a c8 45 c1 24 9d 98 ee 88 a1 Data Ascii: I#PkksV7BYW&+Ak s{u`/_:Je9KZ(S3FIti&,T~}{[tn6>6CJx}I&kfM_1wNty`lc9b4jYddQU8f}Z@fo@v.L]:g=/[E$
2024-10-30 03:01:24 UTC	5608	IN	Data Raw: 3d ed 4d a3 11 30 e3 30 79 a6 d8 62 8a 05 87 5a c3 e1 66 25 ec 94 b6 c1 d1 a2 b4 35 1d 56 9c 23 40 fb d0 20 14 a6 87 39 97 91 3d 5b c2 45 00 ce e5 ab 34 28 3f b3 81 4d 97 a9 85 cc 85 7c 33 b8 70 cb 89 a9 20 d2 59 5f c8 86 22 2c 97 ec cf d2 2e 3b 6f 3e 78 7a bc ef d8 3f fd e9 c4 3b bf 8f a0 08 88 b4 85 13 0c 6e ca f4 84 62 3c 68 fc a3 ff e4 c0 18 88 51 67 c3 90 4d 1b 13 00 11 57 ca e0 d4 8c a5 05 7d 75 91 97 f6 fd 04 5d 34 c6 dc d0 11 27 04 3f f6 78 26 c7 2c fe cc ba 64 f7 78 1a 7b a4 e1 7a 37 d4 21 06 e0 14 99 1e ee 35 7f 79 d4 64 d3 a9 32 17 e9 6b 82 f8 4e 8a ba 7d 0d 7a 5d 64 ca 34 d8 4f 10 c7 2e 03 81 58 cc 36 a4 d4 3e cb c6 ee 76 16 df 22 4f b6 25 8a 04 35 29 17 8f 64 7a 6c ff 09 bf 99 14 76 b1 b4 4d f0 07 0f 8c da 7f f9 ff 91 bb 6d 56 cc b9 e7 a8 fb Data Ascii: =M00ybZf%5V#@ 9=[E4(?M\|3p Y_",.;o>xz?;nb<hQgMW}u]4'?x&,dx{z7!5yd2kN}z]d4O.X6>v"O%5)dzlvMmV
2024-10-30 03:01:24 UTC	2486	IN	Data Raw: e0 56 69 ed b0 82 67 41 c0 0d ad 9a a6 26 83 d5 64 66 25 4a ab bd 72 c0 d9 41 d1 ac 54 4b fd db 3a e4 1d 4a cf 65 ea b3 f8 b7 86 3c ee f6 46 85 31 36 78 bf d2 35 b3 e8 40 92 e5 14 ac d2 48 5f a5 b1 3f 90 9e b8 73 af 81 fa 78 1c d7 06 88 c0 ec 5d 5a 45 6b c7 9e 14 e2 04 73 60 40 93 2f 06 a8 5a 83 d6 93 c3 20 71 78 d6 10 dc 58 69 17 3c 57 7b 1d f4 c5 80 97 df e0 aa e3 be 87 b9 4a 89 64 f5 b9 f7 33 70 5f cb 43 00 ae 61 85 73 92 59 25 ca 55 3c 4a 56 17 8d ef 33 28 1d 88 9e 55 63 90 5b 44 3b 83 9a 64 0c 27 82 b5 b4 37 90 3c 0a 9d 9c f6 45 72 ad 7c 25 0f 9b c2 c7 36 48 7b 29 ff ff 49 46 88 e9 f7 c4 41 e2 6c 89 3a fd 0a 13 b7 6a 29 fb 3d 12 16 81 61 52 bd 63 53 72 7c 3d c6 79 1d fd 57 23 27 d7 d1 1c f9 88 06 d8 e8 65 97 81 3f f2 68 a5 36 15 0b 35 b1 5f a9 79 63 Data Ascii: VigA&df%JrATK:Je<F16x5@H_?sx]ZEks`@/Z qxXi<W{Jd3p_CasY%U<JV3(Uc[D;d'7<Er\|%6H{)IFAl:j)=aRcSr\|=yW#'e?h65_yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49834	104.22.0.204	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	361	OUT	GET / HTTP/1.1 Host: accesswidget-log-receiver.acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	317	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:23 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: * x-cloud-trace-context: fc749d022839c01599fde52c7e7fd485 via: 1.1 google cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8da829147df53ac7-DFW
2024-10-30 03:01:23 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49835	104.22.1.204	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	386	OUT	GET /config/ovivowater.com/config.json?page=%2Fen%2F HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	828	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:23 GMT Content-Type: application/json Content-Length: 164 Connection: close x-goog-generation: 1687879534048394 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 164 x-goog-hash: crc32c=fBDmvg== x-goog-hash: md5=qowoeJMIzvZThiXPCa1ZrA== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: AHmUCY2GTD4XqIiRvAkTP_BhTwb_4EMfH9o5jXh1E6riT8_lyyFYkxGz8vo8B5kUsmC3CB1QYA7PMNOBXQ expires: Thu, 30 Oct 2025 03:01:23 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Tue, 27 Jun 2023 15:25:34 GMT etag: "aa8c28789308cef6538625cf09ad59ac" CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Server: cloudflare CF-RAY: 8da829176f9b3ab6-DFW
2024-10-30 03:01:23 UTC	164	IN	Data Raw: 7b 22 74 69 6d 65 22 3a 22 32 30 32 33 2d 30 36 2d 32 37 54 31 35 3a 32 35 3a 33 33 2e 39 38 34 5a 22 2c 22 61 70 70 22 3a 22 61 70 70 22 2c 22 73 70 65 63 69 66 69 63 73 22 3a 22 22 2c 22 61 64 64 6f 6e 41 6e 61 6c 79 74 69 63 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 4d 65 74 61 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 49 6d 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 53 74 79 6c 65 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 57 61 74 63 68 65 72 22 3a 66 61 6c 73 65 7d Data Ascii: {"time":"2023-06-27T15:25:33.984Z","app":"app","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"blockWatcher":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49832	18.245.60.71	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	537	OUT	GET /trackatron4.js HTTP/1.1 Host: cdn.loopanalytics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	526	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 15062 Connection: close Last-Modified: Tue, 01 Oct 2024 05:06:23 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 29 Oct 2024 16:26:54 GMT ETag: "9abc074d7ff14a653f3e74c353eff06b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f7bf54ada21ef4f1f7e0646051894136.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P5 X-Amz-Cf-Id: WI4okbLqhI4yRuzc9uWo9KbDBF59MDFJZoZmLLs8AuaLBSiPDBUjCA== Age: 38070
2024-10-30 03:01:23 UTC	12792	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 74 72 61 63 6b 61 74 72 6f 6e 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 36 38 30 38 3a 28 65 2c 6f 2c 74 29 3d 3e 7b 76 61 72 20 6e 2c 63 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 61 29 3f 6e 2e 63 61 6c 6c 28 6f 2c 74 2c 6f 2c 65 29 3a 6e 29 7c 7c 28 65 2e 65 78 70 6f 72 74 73 3d 63 29 2c 21 30 2c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 2c 21 21 30 29 7b 76 61 72 20 72 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 2c 69 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 61 28 29 3b Data Ascii: /! For license information please see trackatron4.js.LICENSE.txt /(()=>{var e={6808:(e,o,t)=>{var n,c;!function(a){if(void 0===(c="function"==typeof(n=a)?n.call(o,t,o,e):n)\|\|(e.exports=c),!0,e.exports=a(),!!0){var r=window.Cookies,i=window.Cookies=a();
2024-10-30 03:01:24 UTC	2270	IN	Data Raw: 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 63 6f 6d 70 61 6e 79 29 2c 22 26 22 29 3a 22 26 22 29 3b 69 66 28 21 6f 28 29 2e 67 65 74 28 22 5f 74 72 61 63 6b 61 74 72 6f 6e 49 64 22 29 29 69 28 73 28 29 29 3b 6c 28 29 2c 6f 28 29 2e 67 65 74 28 22 5f 74 72 61 63 6b 61 74 72 6f 6e 49 64 22 29 26 26 28 6e 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 5f 63 6f 6f 6b 69 65 5f 69 64 3d 22 29 2e 63 6f 6e 63 61 74 28 6f 28 29 2e 67 65 74 28 22 5f 74 72 61 63 6b 61 74 72 6f 6e 49 64 22 29 2c 22 26 22 29 29 2c 6e 2b 3d 64 28 7b 61 6c 74 52 65 66 65 72 65 72 3a 74 2e 61 6c 74 52 65 66 65 72 65 72 2c 6c 6f 63 61 74 69 6f 6e 3a 74 2e 6c 6f 63 61 74 69 6f 6e 7d 29 2c 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 2e 73 72 63 3d 6e 7d 7d Data Ascii: concat(encodeURIComponent(e.company),"&"):"&");if(!o().get("_trackatronId"))i(s());l(),o().get("_trackatronId")&&(n="".concat(n,"_cookie_id=").concat(o().get("_trackatronId"),"&")),n+=d({altReferer:t.altReferer,location:t.location}),new Image(1,1).src=n}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49833	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	399	OUT	GET /m/386e69de06af7c65/original/HomePageIndustry-735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	819	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 36274 Connection: close Date: Wed, 30 Oct 2024 03:01:21 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePageIndustry-735x551.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: c4588a3b-fa98-6308-ccba-64caaa69a883 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 68eb499493257a6d0620a0f6abdc78ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: bAk7FWNi_KL_KJpUHbQvhDVE8t4ER7qEZHVqQ2Prgt3eHE24-ft9Kw== Age: 2
2024-10-30 03:01:24 UTC	16384	IN	Data Raw: 52 49 46 46 aa 8d 00 00 57 45 42 50 56 50 38 20 9e 8d 00 00 70 d2 02 9d 01 2a 80 02 e0 01 3e 6d 32 93 47 a4 22 a2 27 24 74 5d a0 e0 0d 89 63 6d 00 b3 2b 0d 62 bd 91 c3 10 22 25 6f d7 7d 49 14 7a b3 eb d7 cb 09 1f e5 1f 3b fe 97 e4 ff 89 ac 71 f3 07 9d 1f 55 ff df fb bb f9 63 ff 87 fe af b9 4f d7 bf f6 fd 93 ff 1d fb 21 79 cf fd 8a fd ae f7 37 ff 8d fb 8b f0 87 fb 07 fa df 63 9f ed df de 3d 2c fd af 3f 75 bd 9e 7f 70 bd 38 7d a2 7f b1 ff cd f6 67 fd a9 d3 c1 97 77 94 fd db f0 ff d1 5f d9 bf 8e e4 7d 14 7f 0f f3 8b fe 9f 8e 3f 48 75 35 fc ff 80 c0 5c 33 10 f1 ff 4a be 45 74 17 fd 47 eb 0d ff 1f 9d ef d9 01 d8 34 f0 5c 07 0d eb 0a 56 30 31 78 ea 47 24 95 c4 6d 73 c7 a8 48 c0 2f 3d b8 e3 9e 6f d8 ed 37 41 4f fc d2 7d b9 23 e1 1d 57 62 54 1a 88 47 de 91 02 48 Data Ascii: RIFFWEBPVP8 p*>m2G"'$t]cm+b"%o}Iz;qUcO!y7c=,?up8}gw_}?Hu5\3JEtG4\V01xG$msH/=o7AO}#WbTGH
2024-10-30 03:01:24 UTC	16384	IN	Data Raw: e3 43 4c d7 18 c2 f3 bd c9 70 4e b1 5d ca a4 90 d5 cd 7b 33 f2 f7 ea 60 c3 44 e9 76 ae dc ed 9b fa 25 50 f3 37 6b 4b e4 02 4a 19 16 a9 ab 6c 5f f4 20 8e 1d c4 54 d9 4e 70 40 8e 8e 7e 7f 5f 62 3d 30 ca 76 42 35 2e b7 d5 35 33 ab 80 a6 a5 a9 77 4b ba 12 7f 27 3e c7 06 bf 7e 34 b1 73 11 a2 11 b7 e0 ea 6d 64 63 60 cb 5c 2e 8d 03 a9 43 e7 e0 7b 6c 91 bc 2d 68 05 bb 05 6f c8 cc 70 ec cf e0 56 5e 93 fb f2 4c 98 ec 6b bb a1 3a 58 03 61 c5 65 f5 ea fc a5 78 47 de fa ea d7 89 8c 95 5d 6b 6c d2 33 ad 75 84 2d a2 b4 f6 ac ea 87 8b c1 c1 56 bb cb 09 4e da 86 58 a6 fe 6c bb 6e d8 99 9c 9d c6 5d 6e 75 e5 9a e3 5c ec 26 82 f5 e0 38 73 07 f5 04 95 57 1d 3f 1f 77 0a d4 36 fd d0 39 e4 d0 83 7f cf aa 52 4b 66 ae bf 0d 97 3c 4d 0a 6e c0 75 a2 b8 16 14 b9 6a 09 78 9c 08 76 c0 Data Ascii: CLpN]{3`Dv%P7kKJl_ TNp@~_b=0vB5.53wK'>~4smdc`\.C{l-hopV^Lk:XaexG]kl3u-VNXln]nu\&8sW?w69RKf<Mnujxv
2024-10-30 03:01:24 UTC	3506	IN	Data Raw: 38 4e 09 02 d5 95 72 74 1b b8 44 47 56 d1 e6 36 f4 3a a1 25 f2 47 2f 26 12 5e b8 5c 95 77 5a e3 eb ee b0 4e 51 71 9e 7a a3 25 9c 55 db fb b2 18 62 6b 0d 41 0c e9 ae 04 57 7f 74 3a 95 8c 1e da b7 e3 5b be d1 72 e6 82 f5 47 25 4e 6e 82 85 c2 3f 66 29 01 33 61 bb f3 d4 13 7e 15 82 51 46 11 f8 1c 44 0d 64 46 c0 db 9c 8a b0 11 05 66 53 61 67 dc 02 90 1b 26 4d 3f 86 3d b8 25 ae 73 f5 fe c4 20 75 ab 3e 3f 61 1d 1b cc e4 39 70 aa 97 93 2b 48 67 8d a3 47 3d c8 bd 9f ee 00 62 d2 17 04 ba 9f 0a 55 15 ec 4e 4c 13 d0 f1 e8 2c 1e 62 9c ce 78 28 6e 42 e9 aa 1d 5a f2 5d 4b de 27 62 fc ef 64 c2 c6 12 3d 02 99 94 ce 90 58 9c 01 10 03 17 60 d3 0b 58 1e 5d 16 9c 6c 15 ad 96 00 5d fc 48 97 05 dd 40 a2 48 87 a1 62 7e 63 d8 bf cb c7 60 82 e4 2d 96 bd 36 0a fa ad 8c 13 3e 30 2d Data Ascii: 8NrtDGV6:%G/&^\wZNQqz%UbkAWt:[rG%Nn?f)3a~QFDdFfSag&M?=%s u>?a9p+HgG=bUNL,bx(nBZ]K'bd=X`X]l]H@Hb~c`-6>0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49838	150.171.28.10	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	535	OUT	GET /p/action/134002157.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:23 UTC	570	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 370 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C07EAA1E2F0B4778AC8E331E8BC7DBB2 Ref B: DFW30EDGE0410 Ref C: 2024-10-30T03:01:23Z Date: Wed, 30 Oct 2024 03:01:23 GMT Connection: close
2024-10-30 03:01:23 UTC	370	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49837	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	642	OUT	GET /m/22580ea3a018197c/original/IndList_PharmaLifeSci-408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:24 UTC	817	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 13850 Connection: close Date: Wed, 30 Oct 2024 03:01:24 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_PharmaLifeSci-408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: 3b74db0e-c780-f04b-2265-0a06affd070b Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 456733511c088f8435091e663b2c5430.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: g6SHe-kmbteVFSvZqFNhArSwmO6SfOt_xElF-ngvfDaBnYxtucOpIA==
2024-10-30 03:01:24 UTC	13850	IN	Data Raw: 52 49 46 46 12 36 00 00 57 45 42 50 56 50 38 20 06 36 00 00 d0 65 01 9d 01 2a 88 01 e0 01 3e 6d 32 95 47 a4 22 a4 a5 25 73 9b a8 a0 0d 89 67 6d c8 c8 92 8a c1 52 11 c9 a6 e6 b2 78 52 6f 87 cc 09 8b 2c 3c 3d f1 b6 49 ef 67 24 cd 95 b4 94 22 f4 c7 dc fe 7a bd 45 c8 77 79 bd ec a8 df c5 ed 4f 9f e7 6a de 14 09 d0 ab 8b f3 8e 65 74 2d 0c bc 32 71 71 d9 2c 4e 07 4b 28 74 cf e4 01 66 26 21 52 0d 68 cb 04 32 20 27 70 1f 92 38 d2 38 7d 03 05 27 c6 5d 57 c6 b7 3f 40 10 d2 ff 83 a8 1f e2 9f c8 a4 eb a9 ae 5f 00 f7 a8 61 e7 16 eb 3b 71 60 67 ad a9 82 65 91 d8 75 6a 6b 15 76 4a 90 61 c1 89 0a a6 fd 47 da 88 ea 41 1f e9 af 85 dd 27 ee 3b 00 c0 4e 13 35 65 9b b2 9b f5 d1 4f bd 5a f0 c9 70 7c d9 95 65 0a 60 27 b8 c4 e3 4a 83 90 0e 30 de 37 ae b2 e3 e1 18 2c 2c 92 52 db Data Ascii: RIFF6WEBPVP8 6e*>m2G"%sgmRxRo,<=Ig$"zEwyOjet-2qq,NK(tf&!Rh2 'p88}']W?@_a;q`geujkvJaGA';N5eOZp\|e`'J07,,R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49836	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:23 UTC	637	OUT	GET /m/1284fc475fef608a/original/IndList_PowerGen-408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:24 UTC	812	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 43124 Connection: close Date: Wed, 30 Oct 2024 03:01:24 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_PowerGen-408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: b09853e2-cdf3-5b59-fcde-888af79589df Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 920a6dce56a0ee957dbaa3bf4429f8fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: jr_EunAGx6iQiYNsyFqslf-Hv8kijltR5DBIC-Vs7dsOTBi4zxME7Q==
2024-10-30 03:01:24 UTC	15210	IN	Data Raw: 52 49 46 46 6c a8 00 00 57 45 42 50 56 50 38 20 60 a8 00 00 b0 fb 01 9d 01 2a 88 01 e0 01 3e 6d 2e 93 46 24 22 a1 a1 2b f4 6c 78 80 0d 89 63 67 97 46 77 9b e7 95 43 d7 fb f8 c0 3c 7f e5 a3 f4 81 62 97 fc 03 44 ef d5 58 40 ad fd 86 f6 25 15 bc b7 e5 f4 85 6f 42 f1 8c d3 fe 5f fe 1f 34 df f1 fd 65 fe bb ea 37 ff 77 da 27 f6 df fa be 8a 5f ee bd 6d 7f e0 fa 60 fa 66 7a 7f fa e8 f4 32 fa da 7a 4d 5f 81 f1 ab f7 de 04 fe 73 f6 1f f2 7f c2 fd 7f fd e3 fe 9d 85 3f 88 ff 17 cc 5f eb 3f ae 33 a5 fc cf ff 0f f5 5e 27 fc 91 ff 93 fc cf b0 47 e6 1f d4 ff 61 3d 49 7e e3 f7 03 fe 6f 7f 8e c1 fe bf f6 ff d8 47 de 6f bf fa 17 7e cf 9c df c8 7a 83 f9 cd df e9 fc 2f 50 4f f1 5e 8e 7f ee f9 9c fd 7b fe 6f b1 2e ed 28 b8 70 4f db 4f 60 bf 20 a2 33 01 2c f3 55 8c 33 ec 1c 9b Data Ascii: RIFFlWEBPVP8 `*>m.F$"+lxcgFwC<bDX@%oB_4e7w'_m`fz2zM_s?_?3^'Ga=I~oGo~z/PO^{o.(pOO` 3,U3
2024-10-30 03:01:24 UTC	768	IN	Data Raw: 1c 4a 38 6d bc 1c a9 53 61 90 4f 22 0b 64 49 43 c9 05 c3 11 37 3d c8 d5 0d 8d 66 17 2f 53 a3 d3 f0 90 4a 1a d0 9a c1 bd f4 32 90 be fa 51 a0 7f f5 59 47 08 e3 cf 82 06 1d 54 d0 c5 71 e1 7d 3f 85 ed 49 1a f8 11 c7 80 e3 56 90 ff 58 c8 2b 7f 35 45 d0 56 9e e1 d2 9a 05 2e ba 44 ca 38 c9 4a 90 4e 1c 23 d7 66 ce be f0 38 85 d2 8a cf 3b 41 43 ba 92 bd 3e 3f b6 b9 58 46 f3 b8 d8 b5 f7 4a 50 42 79 cb 12 50 af 5c 71 6f 6b c9 12 aa 4f 4b 39 f7 9c fa 76 10 a5 c4 3d 8e e4 fa f8 b1 5b a8 f8 b4 73 1e 96 6e dd 29 ea 4b f6 10 49 c3 8a 3d 0a a1 65 5c b6 1c d4 7c 03 59 55 7e c1 6b ff 72 03 e8 49 37 d2 07 52 a6 d1 46 d7 8b 71 7a a9 56 96 ae ab 35 95 a6 5a d3 d7 8f 62 66 8f a0 a5 73 06 42 6d e5 7e b7 10 00 ea d3 f8 bf 70 32 a2 bb a4 8d 8d 46 fe 1d e9 f1 05 4c d2 b2 0f 3c bd Data Ascii: J8mSaO"dIC7=f/SJ2QYGTq}?IVX+5EV.D8JN#f8;AC>?XFJPByP\qokOK9v=[sn)KI=e\\|YU~krI7RFqzV5ZbfsBm~p2FL<
2024-10-30 03:01:24 UTC	16384	IN	Data Raw: 73 57 d8 4b ec 79 1b c6 a5 39 b0 11 b4 32 d2 76 10 d8 b1 b3 1a c4 db 9d 0a 71 82 84 4d b2 94 aa a4 6a e4 6e bb 60 d4 8b 67 ec 35 7b 5b 2a a2 a9 c9 ee 54 a4 00 6f 08 b7 5f b5 68 27 98 ea 11 bf 5c 34 24 36 b0 dd d5 9c 88 f4 1d 0a 55 01 d0 49 e0 7d 32 21 a4 cd 45 b7 a4 8d dc 0b 8e 3f 12 34 d5 5b 2a 90 17 bc 80 aa f1 1a 56 f1 6e 0d 11 6a a9 52 63 cd 65 65 b1 86 8a e4 e5 da 2c 92 6f ef b5 85 8e 28 7c b7 a0 1b 6b 4d 3d ae e1 a6 9e 28 86 54 e3 f4 da 10 a5 5b bd 32 ab e4 0e b4 c2 0e 67 d9 1b c5 25 db a7 93 8f cc 1a 3a 62 92 70 1f 60 61 53 7c a5 f9 2a f5 82 28 59 01 c2 55 67 1b e2 e1 9a 5d b8 88 bb 6c 4a 9d 12 c5 d7 76 ab 43 ee f0 f7 af f6 68 8a b3 67 b7 d7 f8 8a 06 74 4a 9e 48 9f 1e ba 2f c6 34 9a 6a a0 22 0a 1c 33 7a ef 84 22 ed fa d4 17 71 7d 44 20 89 48 c5 84 Data Ascii: sWKy92vqMjn`g5{[To_h'\4$6UI}2!E?4[VnjRcee,o(\|kM=(T[2g%:bp`aS\|*(YUg]lJvChgtJH/4j"3z"q}D H
2024-10-30 03:01:24 UTC	9594	IN	Data Raw: 4e 67 f4 73 18 0e 3e c2 81 9d 41 93 ba 9f e1 d5 10 c7 01 01 6d 80 64 48 df 8d 20 72 93 05 39 33 25 cd f5 52 3a 2b bb be 67 8e b5 3d bc b2 86 3f d9 2e 7e 21 40 86 4f 65 21 fc 15 f0 52 02 a3 b2 86 47 74 d7 15 20 2d 43 e0 db 64 a0 22 af 63 44 73 60 61 5a dd e1 80 44 43 d8 ce 19 5b c9 5d ea c0 d3 48 f9 b5 b9 75 90 57 2d 64 0d 91 4e ad 4d d0 80 37 1b d4 fd b1 e9 a3 67 b3 87 5b da 2b fb 16 14 30 30 91 fa ba cc 40 00 f8 ec 09 d2 f6 4b 1a 1e 2d 17 76 b4 40 b7 03 ce 9e e0 f2 34 f7 b9 dc 42 27 02 7c d4 e1 40 a2 5a 33 cd 01 03 86 86 62 0e ca f4 b4 4d bd 36 29 92 09 38 48 3b f3 88 fb 97 12 80 b8 b3 75 a5 e0 6c e3 09 c7 8b af b9 52 a6 d2 ec 9d e2 39 12 bf 5e f9 6d 82 29 b9 cb fc 96 b3 9d 6a fb 4a 93 a3 88 9d b6 b3 55 0d d0 ac b6 07 92 65 d2 c9 e4 67 70 0e c9 cd 7c 52 Data Ascii: Ngs>AmdH r93%R:+g=?.~!@Oe!RGt -Cd"cDs`aZDC[]HuW-dNM7g[+00@K-v@4B'\|@Z3bM6)8H;ulR9^m)jJUegp\|R
2024-10-30 03:01:24 UTC	1168	IN	Data Raw: bb 3b 1d 79 f5 98 b8 e0 b1 b9 29 a4 1e 8b 8d 29 a7 53 e0 55 4b 78 8a e0 13 68 09 ae 3b f1 b9 30 aa 62 24 57 f8 23 a6 28 54 8f eb 06 c9 72 95 46 e4 2c bb 70 6c 0e 90 46 f0 87 81 27 ac 3d 67 36 03 a0 97 43 a8 f0 5e 27 16 67 ca e1 67 c2 3e 0a d0 55 1c cd 47 88 4d b6 81 8a d2 d5 55 e0 43 50 74 c1 8d 1d cf 18 65 c3 ce bd 1a 6e d4 f4 22 6a 00 47 e2 7a 47 c2 b9 6a 69 56 1f 0b cd 8d fd e4 53 54 a2 a4 79 c9 1e 08 d3 75 61 68 c4 a8 9f 06 e9 5e f9 36 9d 6f 32 4b f3 cf 5b 8e d1 a5 c0 de 1b 06 48 03 74 15 67 88 e8 7a f4 ff 0b 4d ca 3b bb 6c 0e e2 bc 72 60 b1 7a b5 37 4e 1e 93 9e bf f6 c5 1c d9 97 9c d8 2d 69 af c2 22 fe 38 fa b5 44 3c e6 8f 1d 38 ff 2d 32 75 08 32 08 90 d3 80 8c e8 52 78 12 24 aa 79 dd 76 19 f4 72 a1 22 d1 55 d1 99 53 7c c5 38 a7 be b8 06 56 5a 15 dd Data Ascii: ;y))SUKxh;0b$W#(TrF,plF'=g6C^'gg>UGMUCPten"jGzGjiVSTyuah^6o2K[HtgzM;lr`z7N-i"8D<8-2u2Rx$yvr"US\|8VZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49840	150.171.28.10	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:24 UTC	342	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:24 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 51385 Content-Type: application/javascript Last-Modified: Wed, 16 Oct 2024 22:47:44 GMT Accept-Ranges: bytes ETag: "028e0691d20db1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D6E5D11DCBD4473287A62B7616665556 Ref B: DFW311000106049 Ref C: 2024-10-30T03:01:24Z Date: Wed, 30 Oct 2024 03:01:24 GMT Connection: close
2024-10-30 03:01:24 UTC	2765	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-30 03:01:24 UTC	8192	IN	Data Raw: 7d 2c 66 61 74 61 6c 3a 7b 7d 2c 6d 65 74 68 6f 64 3a 7b 7d 2c 6e 61 6d 65 3a 7b 7d 2c 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 2c 62 65 61 63 6f 6e 3a 22 67 76 22 7d 2c 73 63 72 65 65 6e 5f 6e 61 6d 65 3a 7b 7d 2c 73 65 61 72 63 68 5f 74 65 72 6d 3a 7b 7d 2c 73 68 69 70 70 69 6e 67 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 74 61 78 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 3a 7b 7d 2c 72 65 70 3a 7b 7d 2c 76 69 64 3a 7b 7d 2c 74 70 70 3a 7b 7d 2c 67 74 6d 5f 74 61 67 5f 73 6f 75 72 63 65 3a 7b 7d 2c 69 74 65 6d 73 3a 7b 74 79 70 65 3a 22 61 72 72 61 79 22 7d 2c 22 69 74 65 6d 73 2e 62 72 61 6e 64 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 63 61 74 65 67 6f 72 Data Ascii: },fatal:{},method:{},name:{},revenue_value:{type:"number",beacon:"gv"},screen_name:{},search_term:{},shipping:{type:"number"},tax:{type:"number"},transaction_id:{},rep:{},vid:{},tpp:{},gtm_tag_source:{},items:{type:"array"},"items.brand":{},"items.categor
2024-10-30 03:01:24 UTC	5051	IN	Data Raw: 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 56 69 73 69 62 69 6c 69 74 79 45 76 65 6e 74 73 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 21 31 3b 6f 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 51 75 65 72 79 46 72 6f 6d 55 72 6c 73 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 61 6c 6c 52 65 70 3d 21 31 3b 6f 2e 61 6c 6c 52 65 70 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 61 6c 6c 52 65 70 3d 21 30 29 3b 6c 3d 22 5f 75 65 74 6d 73 64 6e 73 22 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6d 73 44 6e 73 43 6f 6f 6b 69 65 Data Ascii: .uetConfig.disableVisibilityEvents=!0);this.uetConfig.removeQueryFromUrls=!1;o.removeQueryFromUrls===!0&&(this.uetConfig.removeQueryFromUrls=!0);this.uetConfig.allRep=!1;o.allRep===!0&&(this.uetConfig.allRep=!0);l="_uetmsdns";o.hasOwnProperty("msDnsCookie
2024-10-30 03:01:24 UTC	8192	IN	Data Raw: 68 3e 31 26 26 6e 5b 30 5d 21 3d 3d 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 29 74 3d 6e 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 31 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 75 65 74 4c 6f 61 64 65 64 7c 7c 74 68 69 73 2e 65 76 71 43 44 69 73 70 61 74 63 68 26 26 74 68 69 73 2e 70 72 6f 63 65 73 73 45 61 72 6c 79 5b 74 5d 3f 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 5f 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 3a 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 65 76 65 6e 74 50 75 73 68 51 75 65 75 65 2e 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 7d 3b 74 68 69 73 2e 5f 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 Data Ascii: h>1&&n[0]!==this.pageLoadEvt)t=n[0],i=Array.prototype.slice.call(n,1);else return;this.uetInstance.uetLoaded\|\|this.evqCDispatch&&this.processEarly[t]?this.uetInstance._push([t,i,r]):this.uetInstance.eventPushQueue.push([t,i,r])};this._push=function(n){var
2024-10-30 03:01:24 UTC	8192	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 26 26 28 75 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 2e 63 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 75 29 26 26 28 6e 2e 6b 77 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 29 29 2c 74 3f 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 50 61 67 65 29 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 22 29 26 26 28 6e 2e 72 3d 74 68 69 73 Data Ascii: getElementsByTagName("meta").keywords&&(u=window.document.head.getElementsByTagName("meta").keywords.content,this.stringExists(u)&&(n.kw=encodeURIComponent(u).replace(/%2C/gi,","))),t?this.stringExists(this.previousPage)&&!n.hasOwnProperty("r")&&(n.r=this
2024-10-30 03:01:25 UTC	8192	IN	Data Raw: 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 22 29 3e 30 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 2e 70 61 67 65 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 22 22 29 26 26 64 65 6c 65 74 65 20 74 2e 70 61 67 65 74 79 70 65 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: &&(t.prodid=t.ecomm_prodid,delete t.ecomm_prodid);t.hasOwnProperty("ecomm_pagetype")>0&&(t.pagetype=t.ecomm_pagetype,delete t.ecomm_pagetype);t.hasOwnProperty("pagetype")&&(t.pagetype==null\|\|t.pagetype.toString()==="")&&delete t.pagetype;t.hasOwnProperty(
2024-10-30 03:01:25 UTC	8192	IN	Data Raw: 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 61 6c 74 26 26 64 65 6c 65 74 65 20 69 2e 61 6c 74 2c 74 68 69 73 2e 63 6c 6f 6e 65 28 74 2c 69 29 7d 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 65 3d 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 28 74 68 69 73 2e 75 72 6c 50 72 65 66 69 78 29 2c 74 3d 74 68 69 73 2e 63 6f 6d 62 69 6e 65 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2c 6e 29 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 2c 6f 3d 5b 22 72 22 2c 22 65 6c 32 22 2c 22 65 63 32 22 2c 22 65 61 32 22 Data Ascii: var i=this.clone(n);return i.alt&&delete i.alt,this.clone(t,i)};this.fireBeacon=function(n){for(var i,s,e=this.getClUrl(this.urlPrefix),t=this.combine(this.beaconParams,n),r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r),o=["r","el2","ec2","ea2"
2024-10-30 03:01:25 UTC	2609	IN	Data Raw: 6f 6d 6d 5f 74 6f 74 61 6c 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 55 61 73 50 72 6f 64 75 63 74 73 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 61 5f 65 22 3a 74 68 69 73 2e 6d 61 70 47 74 6d 45 63 6f 6d 6d 65 72 63 65 50 75 72 63 68 61 73 65 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 61 34 22 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 47 74 6d 50 61 72 61 6d 28 6e 2c 22 76 61 6c 75 65 22 2c 22 65 76 65 6e 74 5f 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 47 61 34 49 74 65 6d 73 28 6e 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 55 72 6c 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d Data Ascii: omm_totalvalue");this.mapGtmUasProducts(n);break;case"ua_e":this.mapGtmEcommercePurchase(n);break;case"ga4":this.replaceGtmParam(n,"value","event_value");this.mapGtmGa4Items(n)}return n};var t=window.location.href;this.documentUrlChanged=function(){var n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49841	18.66.102.11	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:24 UTC	365	OUT	GET /c/hotjar-1840342.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:25 UTC	640	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Wed, 30 Oct 2024 03:01:22 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/c99b657a986077c81f7b228d4276c36c Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 11e35514d631a9a9566fd489de935c06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: CV3XwhYUQgTunBBjHEUPF07su27o3DWswQa0OYZXYA9m0M5ii7LRcg== Age: 2
2024-10-30 03:01:25 UTC	13107	IN	Data Raw: 33 33 32 62 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 38 34 30 33 34 32 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 39 30 39 30 39 30 39 30 39 30 39 30 39 30 39 31 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 Data Ascii: 332bwindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1840342,"rec_value":0.09090909090909091,"state_change_listen_mode":"automatic","record":false,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console
2024-10-30 03:01:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49842	18.245.46.63	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:25 UTC	658	OUT	POST /group/0/d625593f098d4d02b587/12/swap_session.json HTTP/1.1 Host: js.calltrk.com Connection: keep-alive Content-Length: 636 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.ovivowater.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:25 UTC	636	OUT	Data Raw: 7b 22 63 69 64 22 3a 6e 75 6c 6c 2c 22 75 75 69 64 22 3a 22 30 30 30 31 39 36 61 36 2d 30 38 62 62 2d 34 65 36 34 2d 38 39 62 61 2d 31 30 35 31 39 34 34 66 31 62 33 33 22 2c 22 72 65 66 22 3a 22 64 69 72 65 63 74 22 2c 22 6c 61 6e 64 69 6e 67 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 76 69 76 6f 77 61 74 65 72 2e 63 6f 6d 2f 65 6e 2f 22 2c 22 75 73 65 72 5f 61 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 72 65 63 6f 72 64 5f 70 61 67 65 Data Ascii: {"cid":null,"uuid":"000196a6-08bb-4e64-89ba-1051944f1b33","ref":"direct","landing":"https://www.ovivowater.com/en/","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","record_page
2024-10-30 03:01:25 UTC	931	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 142 Connection: close Date: Wed, 30 Oct 2024 03:01:25 GMT X-Xss-Protection: 1; mode=block Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Max-Age: 7200 Cache-Control: max-age=0, private, must-revalidate Etag: W/"3c9b83e80c1f3e29b6c751fc381d9dec" Referrer-Policy: strict-origin-when-cross-origin Vary: Accept-Encoding Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 802c967a-f3b2-4436-a689-daf43979967d X-Runtime: 0.055758 X-Cache: Miss from cloudfront Via: 1.1 77e414816706879c16a3707f261f0b5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: pHusTNcC_M59IYl2EfFmULhtHw7YvhZBUCFAI0XLaI7b9EGqu4XH_g==
2024-10-30 03:01:25 UTC	142	IN	Data Raw: 7b 0a 20 20 22 61 22 3a 20 7b 7d 2c 0a 20 20 22 72 22 3a 20 7b 7d 2c 0a 20 20 22 64 6f 6d 6c 65 73 73 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 6e 75 6d 62 65 72 5f 61 73 73 69 67 6e 6d 65 6e 74 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 69 6e 74 65 67 72 61 74 69 6f 6e 5f 72 65 74 72 79 22 3a 20 74 72 75 65 2c 0a 20 20 22 69 6e 74 65 67 72 61 74 69 6f 6e 5f 72 65 74 72 69 65 73 22 3a 20 5b 32 30 35 30 33 35 38 33 36 5d 0a 7d 0a Data Ascii: { "a": {}, "r": {}, "domless": false, "number_assignment": false, "integration_retry": true, "integration_retries": [205035836]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49844	150.171.28.10	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:25 UTC	948	OUT	GET /action/0?ti=134002157&tm=gtm002&Ver=2&mid=fec503ff-1fd9-41d3-a1fc-a5d6c95669a9&bo=1&sid=3eaf7530966b11efad630ff01f787c14&vid=3eafde40966b11ef8d7c07f1fcc905fb&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Water%20Treatment%20Solutions%20%7C%20Ovivo&p=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F&r=&lt=10771&evt=pageLoad&sv=1&cdb=AQAA&rn=494405 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:25 UTC	866	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=1C935811F317675A22804D39F299665B; domain=.bing.com; expires=Mon, 24-Nov-2025 03:01:25 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Wed, 06-Nov-2024 03:01:25 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 96951A2839994A33B90D1435EABB4216 Ref B: DFW311000110009 Ref C: 2024-10-30T03:01:25Z Date: Wed, 30 Oct 2024 03:01:24 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49843	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:25 UTC	640	OUT	GET /m/2b78e8c676e644b5/original/CTABanner-Chemical-1920x650.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:26 UTC	815	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 92582 Connection: close Date: Wed, 30 Oct 2024 03:01:26 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="CTABanner-Chemical-1920x650.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: e6ac5ec3-cf30-4d77-f835-94188dbaa695 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 bfad099b4e1fa2ec7d21876e0293dc20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: EOjJg7iteydy0VYphVd7g_uebaByj8C3K5-ATcIDwbYa03npTxA92g==
2024-10-30 03:01:26 UTC	15569	IN	Data Raw: 52 49 46 46 9e 69 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 00 00 00 00 7f 07 00 89 02 00 56 50 38 20 2a 69 01 00 90 b2 08 9d 01 2a 80 07 8a 02 00 00 00 25 a5 05 73 8f 46 db 41 f2 ab c3 17 ce d9 d1 9c 67 78 75 6f fb 6d 54 4f 6d 27 9f e5 df f4 3f 78 fd 79 fc cf f9 ef ba df 3f fc cf fc c3 f8 9f f4 ff f0 3f c9 ff ef ff 75 f3 27 ff 3f e6 87 95 6f 63 fb ee f4 73 f9 cf e6 1f dc ff 94 fd c4 ff 1d fb 97 f4 b7 fe 2f 38 ff 41 fe ef ff 07 e7 0f fb 3f 94 1f cc 3f ae 7f a3 ff 0d fb 7b fd f7 f7 0b ee c3 96 9e 97 dd 27 ef 57 88 7f f8 ff e2 bf d1 ff e4 ff 21 ef fb de 4f 61 7e 79 fd c3 ff a3 ff 6b ff 6b fe 37 f7 a7 fc ff ff ff fc ff 80 79 85 d0 4f f5 7f ab bf fb 5f f9 7f d7 7f b5 fd b9 f8 cf f5 87 fd ef f4 7f ea 7f 6a be c4 ff 9f 7f 6a ff 67 fe 33 f7 7b fc df ff ff f9 7e Data Ascii: RIFFiWEBPVP8XVP8 i%sFAgxuomTOm'?xy??u'?ocs/8A??{'W!Oa~ykk7yO_jjg3{~
2024-10-30 03:01:26 UTC	406	IN	Data Raw: 66 65 d0 52 74 46 1a 7b 22 1e 4a fb 68 08 90 1d 64 c5 58 a8 aa c3 7d 7d c0 ac cf 27 cb 29 72 9b f9 b4 49 4e a6 fa 63 88 80 0a dc d2 be 27 52 d9 24 3b 92 38 ac 62 3d 90 b8 24 e1 aa 56 c2 9d e7 f2 85 c2 cc c8 c4 9c 08 e1 aa b0 2a ec bd 79 e8 a3 58 b9 1d f8 c2 dc 4b a3 ab 99 9f 93 9c 6c 47 a3 87 7d 95 b0 7b 6d ff 6b db 0d c0 0c b6 fa 6d 3e 78 e7 e1 4d 37 90 3b 00 fd cd 9a f0 e5 84 6a e3 a5 47 a0 6b 7d c0 26 30 b0 38 8a f2 31 4c 55 23 ed c8 d6 6b c5 7c 9a be cd a0 07 6e 10 70 25 67 65 76 49 e3 47 0f 44 72 a7 45 23 f1 54 a6 73 2f 14 c8 31 10 8d b3 6e 5e 19 c2 2b a5 6e fd 57 5a 1f be 90 ac 46 c6 e2 8a a2 b9 7d 07 bb 2c ff 34 50 86 45 4c 43 4e 23 c9 ae 78 b5 b0 37 6f 7f 65 32 a8 30 20 32 52 3f 7a a6 9f bc cc 28 25 d2 b6 4c 60 1a 13 7f bb d4 fe 04 1b de 2f 0b 33 Data Ascii: feRtF{"JhdX}}')rINc'R$;8b=$V*yXKlG}{mkm>xM7;jGk}&081LU#k\|np%gevIGDrE#Ts/1n^+nWZF},4PELCN#x7oe20 2R?z(%L`/3
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 0f ff 11 5d 45 80 cc 41 56 e0 d7 d8 5f 7a 6e dd 37 a5 7e 23 34 11 84 b9 b1 47 12 94 30 22 cf 99 71 b4 ec 59 0e 5b 11 a5 51 e2 b0 80 66 4d 97 ee 79 cf 57 41 ae e1 1c 78 17 89 85 89 ff e7 0f e8 42 85 a1 ae db ac 56 33 55 59 68 45 a0 bd eb 02 04 5b 73 01 47 0a 82 b5 7f 67 7b 3b 62 90 8c 49 60 dc c5 57 b0 cb bb c5 c2 20 4e f7 56 47 fe 9f 25 56 29 3f 1a 99 cd 09 fc d7 e3 77 b2 f6 e5 c9 28 24 fd f7 d4 3a c4 d3 ce ab 77 d5 c9 7e 4c d0 28 ee 13 b7 a1 27 84 88 0f 12 df 03 66 00 00 42 1e fc d7 1d d6 fa 36 2f 88 87 a8 88 00 44 21 20 23 02 b3 f2 6c d4 98 47 03 f8 c8 db 5c 93 cd ca b8 da c7 7c 9b f3 a8 6c 2a 7c 0e 7a 36 4b 46 ff 8c a4 ab 98 91 1e 04 8b 37 37 2e 78 74 6f a0 01 0a 3d 71 83 6a 66 85 b9 9c e4 35 60 3a fe 3b d6 d2 12 d6 44 f0 47 b7 da e8 2d 99 99 47 81 2d Data Ascii: ]EAV_zn7~#4G0"qY[QfMyWAxBV3UYhE[sGg{;bI`W NVG%V)?w($:w~L('fB6/D! #lG\\|l*\|z6KF77.xto=qjf5`:;DG-G-
2024-10-30 03:01:26 UTC	13661	IN	Data Raw: af 16 98 bc 00 8f 51 65 9c 1a 41 0b dd 1f da c1 0e dd b2 4c 10 eb 38 17 b7 46 2b 2c 05 27 39 71 e1 04 24 0a 08 8d b6 f2 67 1c f9 c4 ab 2b 34 31 bb a6 24 07 8d d5 96 99 05 45 24 59 2c e3 3c 47 ef e4 22 1e 7e 61 93 af 94 83 00 91 0f 60 34 a8 ee 1e b7 ae 31 25 2a b8 12 dc 2c 0e 8c 86 ff 0f 3f bb 4a 71 8e 48 e2 7b 87 7b 3d 3c 37 9a c3 22 ef 38 3e 3b c7 33 3f 57 1f 8e 55 21 60 14 c7 5b a1 4b d5 74 79 a9 9e 37 c2 de f8 9f ba 79 77 2c 70 ca 98 22 c1 94 cf 64 08 8e ef 23 bf bc 73 b8 ca f4 b5 45 a7 65 ee d0 92 c8 50 af 8d bb cc 21 6f 09 b0 28 d5 46 00 27 3e 7d 5d 94 76 b2 eb 5e ca 48 2d 8c 9f e4 81 a0 4d 5d 53 ca 9e 63 40 93 c8 d2 23 c5 19 15 3e 4b a9 b0 03 a2 fc ac 1f 24 4e 1d 29 59 50 7b 24 71 07 1c 09 51 78 53 7f 8d c2 2e 20 79 d7 fc 91 7f d3 b4 7d 90 03 a6 97 Data Ascii: QeAL8F+,'9q$g+41$E$Y,<G"~a`41%*,?JqH{{=<7"8>;3?WU!`[Kty7yw,p"d#sEeP!o(F'>}]v^H-M]Sc@#>K$N)YP{$qQxS. y}
2024-10-30 03:01:26 UTC	2723	IN	Data Raw: ce 3f 18 6b 1d b6 90 2f fc bb 94 64 7e 7d 62 4a a2 1b b6 f0 40 f4 66 56 c7 b3 18 1a e7 2a 7e bb d6 f2 a1 cd 17 a5 3a 6a 23 ff 35 7c bd 1b 22 b1 d3 33 c8 17 8b b8 87 61 fe ac 89 cd 6a 19 6e 9d e5 43 11 0a 09 0e c1 e6 71 9c 50 ab 06 31 19 5c 17 24 57 ad 49 db 81 49 4a 4f 8c 55 fe 61 ce 17 a7 9a 98 1f c0 1b 95 e6 ad ae 24 ff 9c 93 21 3a 4c 84 61 86 73 68 68 0a 50 0c 9a 72 ef d0 42 67 77 bb db 6e 7d 9f 8a b2 2f 1d 04 ca 23 a8 f7 d9 d5 60 04 6e 58 48 e0 89 c0 1e 58 4b 3a bd bf 1f 89 ff 2e b7 91 c0 29 20 50 18 fa 11 2e 5a a0 8a ed ed e9 a4 3e 32 e4 15 d4 da 69 05 0e 57 b2 3f 1c ed a2 82 3c 47 51 ad fa 6e d1 ab 11 c0 77 f9 6d 5f 5d 76 00 52 3b 9d 13 70 89 de f4 30 92 5d 09 db 9d b3 1a fc 7a b1 e3 b7 08 49 55 91 ad 56 0a a3 a1 6f dc 5c 66 46 84 93 8e d9 a1 13 58 Data Ascii: ?k/d~}bJ@fV*~:j#5\|"3ajnCqP1\$WIIJOUa$!:LashhPrBgwn}/#`nXHXK:.) P.Z>2iW?<GQnwm_]vR;p0]zIUVo\fFX
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 91 fa 06 ac 7f b1 9b 40 11 1f e8 6a 25 d8 d4 97 9e 50 29 a4 85 59 32 c6 b6 9d fd d1 e2 9a 31 a1 98 49 3e 87 0a 37 1a e1 72 e0 24 1b e3 67 f7 0d 89 f7 8b 10 e6 ed 69 83 9d d2 21 32 55 8e 38 ef fa 29 80 09 09 c4 8b d7 71 42 59 1e 48 b9 87 63 15 88 7a c2 54 c7 83 45 76 fe e1 eb b1 d8 f9 50 87 d5 a3 6f 37 fc ba 0d 9c a5 89 d0 71 36 0b a4 0f b2 9e e6 a4 91 03 9a ff 36 63 93 38 52 e1 c4 e6 27 04 ab a5 65 9a 1d 31 5e f7 e3 99 0b a7 25 ab ee e6 10 dd 91 62 27 56 bf c9 35 dc 50 09 9e 96 66 04 71 97 10 2b 6c 56 55 ae 42 5e fc 1a f9 03 f1 b9 a3 ef 2f 52 bf 3a e4 5d ec f0 58 25 de d1 cd 31 69 1c e7 1a c7 45 59 fb 1d 5e 9e ac a0 5c 21 48 58 bc 62 4e 2c df 52 ff 79 09 ff 0c 89 7a c6 5d b2 36 dd 35 90 b6 2a e1 86 16 a0 4f 3d d7 d0 31 b4 7d 8d 97 96 b3 c3 7e b5 9e 23 d3 Data Ascii: @j%P)Y21I>7r$gi!2U8)qBYHczTEvPo7q66c8R'e1^%b'V5Pfq+lVUB^/R:]X%1iEY^\!HXbN,Ryz]65*O=1}~#
2024-10-30 03:01:26 UTC	13045	IN	Data Raw: 8b 57 43 d8 72 71 a4 e2 54 45 14 c7 6c e4 c8 ec fd 71 2a c0 e8 dd 43 65 f9 53 46 59 2f b2 20 a4 fe 97 78 a6 43 35 b6 e4 e8 ac c5 df ee 82 e1 56 96 a6 99 b3 ab d2 eb 60 1d 64 c6 57 ac 08 ad cb 8f 70 41 bc 39 56 79 05 04 8c c0 6c 86 d2 60 56 e8 c2 0a 5e c9 45 88 cc 47 65 20 7d a7 93 fe 94 e1 83 53 37 a0 39 ea 13 57 8e bb 18 c6 df 49 28 57 43 82 14 ee b9 13 61 f9 20 91 c6 ea 74 94 92 56 f9 dc b5 a7 26 44 b8 fc fc 1f 3e b1 c2 7e 6b 41 0e bd d0 cf 2c b5 90 ec 15 06 b9 ff 5a 9c 93 80 c4 50 56 c5 64 c0 01 fb f6 79 21 fa 74 3b 04 7c 68 27 a4 7a cf 02 df c4 54 56 01 7a 40 d9 a5 33 f6 38 de 51 fb d2 50 1e 63 f9 18 cf a7 d4 73 ed a1 d0 e4 89 67 e3 4b 9e c6 5d 80 f4 04 0d c5 79 35 0c 01 14 b9 5e ce 64 b2 40 c4 73 b5 31 1a a5 d1 27 0b b8 ac e7 48 9a 1d 16 cb fa ee 04 Data Ascii: WCrqTElq*CeSFY/ xC5V`dWpA9Vyl`V^EGe }S79WI(WCa tV&D>~kA,ZPVdy!t;\|h'zTVz@38QPcsgK]y5^d@s1'H
2024-10-30 03:01:26 UTC	14410	IN	Data Raw: aa 9d 0c d9 2c 87 6f e8 c7 96 6d 6a e2 bb 0e 79 89 65 da 39 86 3c a7 4f e8 6c af 5a 98 b9 e7 7b 3f 89 e2 55 14 a5 de 46 d5 08 fd c3 1e 63 d3 4d 09 70 78 0a 85 c2 79 ab de 75 63 af 99 c6 13 b0 40 7b 8e 4d 46 d3 95 e6 d7 27 f4 2a 38 9b d9 e4 f7 94 55 fc 41 0a da b7 08 7e d5 9f fa b7 82 88 78 ee 99 bb 83 60 a4 93 a4 e9 db 19 e8 77 88 d2 b9 c3 d3 d3 37 e8 7a 28 d1 d6 6a f0 18 84 e4 da be df bf 92 1d 23 b0 2b 6a 27 f5 8b 69 b1 78 57 7c d9 da db fa d8 64 51 d4 65 d1 c3 65 d3 a8 70 7a 7c ea 14 99 9e 15 66 6b e5 dd 2a 46 6a 54 63 ac 78 0e 4d bd bc ed 0b 27 bc 2f fa 26 bc 87 b1 68 75 eb 5b 99 49 0e 2a f4 73 d4 f5 83 57 8c dc 2f 1d 5d b5 b2 35 34 6d e5 3f 1f 01 23 31 71 e6 94 df ad f1 39 be 32 16 cf a2 15 51 a5 0a 04 6f a5 3e 27 ea a2 fc 7d 71 79 3f 11 db 63 78 3b Data Ascii: ,omjye9<OlZ{?UFcMpxyuc@{MF'8UA~x`w7z(j#+j'ixW\|dQeepz\|fkFjTcxM'/&hu[I*sW/]54m?#1q92Qo>'}qy?cx;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49845	52.222.236.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:25 UTC	550	OUT	GET /modules.625495a901d247c3e8d4.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:26 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226541 Connection: close Date: Mon, 28 Oct 2024 16:03:23 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "ec34f7a549bb7b8a0957652de86e3475" Last-Modified: Mon, 28 Oct 2024 16:02:55 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f2c65205154aaf89a2c7bbc8fe8fdaba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: tlmz19SD73A5qqyyHP-RMBijsktkJBWHc7RMnyEqTtsU8JcfJXw_tQ== Age: 125882
2024-10-30 03:01:26 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 32 35 34 39 35 61 39 30 31 64 32 34 37 63 33 65 38 64 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.625495a901d247c3e8d4.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 29 29 2c 68 6a 2e 62 72 69 64 67 65 2e 66 6c 75 73 68 55 73 65 72 41 74 74 72 69 62 75 74 65 73 28 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 2c 65 28 6e 75 6c 6c 2c 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 7d 65 6c 73 65 20 65 28 45 72 72 6f 72 28 22 6e 6f 5f 75 73 65 72 22 29 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 66 6c 75 73 68 22 29 2c 67 65 74 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 73 65 72 5f 69 64 22 3d 3d 3d 65 3f 6f 2e 69 64 3a 65 26 26 6f 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 67 65 Data Ascii: own_failure")}),"userAttributes"))),hj.bridge.flushUserAttributes(o.id,o.attributes),e(null,o.id,o.attributes)}else e(Error("no_user"))}),"userAttributes.flush"),get:hj.tryCatch((function(e){return"user_id"===e?o.id:e&&o.attributes[e]}),"userAttributes.ge
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 7c 53 6b 79 66 69 72 65 7c 54 65 61 72 7c 58 56 36 38 37 35 7c 58 56 36 39 37 35 7c 47 6f 6f 67 6c 65 2e 57 69 72 65 6c 65 73 73 2e 54 72 61 6e 73 63 6f 64 65 72 2f 69 29 7c 7c 74 28 2f 4f 70 65 72 61 2f 69 29 26 26 74 28 2f 57 69 6e 64 6f 77 73 2e 4e 54 2e 35 2f 69 29 26 26 74 28 2f 48 54 43 7c 58 64 61 7c 4d 69 6e 69 7c 56 61 72 69 6f 7c 53 41 4d 53 55 4e 47 5c 2d 47 54 5c 2d 69 38 30 30 30 7c 53 41 4d 53 55 4e 47 5c 2d 53 47 48 5c 2d 69 39 2f 69 29 3f 22 6d 6f 62 69 6c 65 22 3a 74 28 2f 57 69 6e 64 6f 77 73 2e 28 4e 54 7c 58 50 7c 4d 45 7c 39 29 2f 29 26 26 21 74 28 2f 50 68 6f 6e 65 2f 69 29 7c 7c 74 28 2f 57 69 6e 28 39 7c 2e 39 7c 4e 54 29 2f 69 29 7c 7c 74 28 2f 4d 61 63 69 6e 74 6f 73 68 7c 50 6f 77 65 72 50 43 2f 69 29 26 26 21 74 28 2f 53 69 6c Data Ascii: \|Skyfire\|Tear\|XV6875\|XV6975\|Google.Wireless.Transcoder/i)\|\|t(/Opera/i)&&t(/Windows.NT.5/i)&&t(/HTC\|Xda\|Mini\|Vario\|SAMSUNG\-GT\-i8000\|SAMSUNG\-SGH\-i9/i)?"mobile":t(/Windows.(NT\|XP\|ME\|9)/)&&!t(/Phone/i)\|\|t(/Win(9\|.9\|NT)/i)\|\|t(/Macintosh\|PowerPC/i)&&!t(/Sil
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 2e 6a 6f 69 6e 28 22 2e 22 29 3a 22 22 29 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 74 2e 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 74 65 72 73 52 45 2c 22 22 29 7d 3b 72 65 74 75 72 6e 20 63 28 65 29 7d 76 61 72 20 77 3d 7b 32 3a 7b 69 67 6e 6f 72 65 43 6c 61 73 73 4c 69 73 74 3a 5b 22 6f 76 65 72 22 2c 22 68 6f 76 65 72 22 2c 22 61 63 74 69 76 65 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 73 63 72 6f 6c 6c 65 64 22 5d 2c 69 67 6e 6f 72 65 42 6f 64 79 43 6c 61 73 73 65 73 3a 21 30 2c 69 67 6e 6f 72 65 55 55 49 44 43 6c 61 73 73 65 73 3a 21 30 2c 6d 61 78 43 6c 61 73 73 65 73 41 6c 6c 6f 77 65 64 3a 35 2c 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 Data Ascii: .join("."):"")},_=function(e){return e.replace(t.disallowedTagNameCharactersRE,"")};return c(e)}var w={2:{ignoreClassList:["over","hover","active","selected","scrolled"],ignoreBodyClasses:!0,ignoreUUIDClasses:!0,maxClassesAllowed:5,disallowedTagNameCharac
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 73 73 3a 5b 5d 2c 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 3a 5b 5d 2c 61 63 74 69 76 65 3a 21 31 7d 29 2c 68 6a 2e 65 76 65 6e 74 53 74 72 65 61 6d 2e 63 6c 65 61 72 50 61 67 65 43 6f 6e 74 65 6e 74 28 29 2c 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 72 65 73 65 74 4d 75 74 61 74 69 6f 6e 4c 69 73 74 65 6e 65 72 73 28 29 2c 47 3d 21 31 7d 2c 69 6e 69 74 69 61 6c 69 7a 65 54 72 65 65 4d 69 72 72 6f 72 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 6d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 41 76 61 69 6c 61 62 6c 65 26 26 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 67 65 74 54 72 65 65 28 4a 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 2c 58 29 7d 29 2c 22 62 65 68 61 76 69 6f Data Ascii: ss:[],autoTagsToProcess:[],active:!1}),hj.eventStream.clearPageContent(),hj.treeMirror.resetMutationListeners(),G=!1},initializeTreeMirror:hj.tryCatch((function(e){hj.treeMirror.mutationObserverAvailable&&hj.treeMirror.getTree(J.bind(null,e),X)}),"behavio
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 74 22 29 2c 74 68 69 73 2e 69 6e 73 65 72 74 65 64 49 6e 74 6f 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 68 69 6c 64 4c 69 73 74 3d 21 30 2c 6e 2e 61 64 64 65 64 3d 21 30 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 69 6e 73 65 72 74 65 64 49 6e 74 6f 50 61 72 65 6e 74 22 29 2c 74 68 69 73 2e 67 65 74 4f 6c 64 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 2e 63 68 69 6c 64 4c 69 73 74 29 7b 69 66 28 6e 2e 6f 6c 64 50 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 2e 6f 6c 64 50 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 6e 2e 61 64 64 65 64 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 2e 6e 6f 64 65 2e 70 61 72 65 6e Data Ascii: t"),this.insertedIntoParent=hj.tryCatch((function(){n.childList=!0,n.added=!0}),"NodeChange.insertedIntoParent"),this.getOldParent=hj.tryCatch((function(){if(n.childList){if(n.oldParentNode)return n.oldParentNode;if(n.added)return null}return n.node.paren
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 65 65 4d 69 72 72 6f 72 43 6c 69 65 6e 74 2e 73 65 72 69 61 6c 69 7a 65 41 64 64 65 64 41 6e 64 4d 6f 76 65 64 22 29 2c 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 41 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 74 65 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 5b 6e 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 28 65 29 3b 72 7c 7c 28 28 72 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 65 29 29 2e 61 74 74 72 69 62 75 74 65 73 3d 7b 7d 2c 74 2e 73 65 74 28 65 2c 72 29 29 3b 76 61 72 20 69 3d 65 2e 67 Data Ascii: eeMirrorClient.serializeAddedAndMoved"),this.serializeAttributeChanges=hj.tryCatch((function(e){var t=new te;return Object.keys(e).forEach((function(n){e[n].forEach((function(e){var r=t.get(e);r\|\|((r=o.serializeNode(e)).attributes={},t.set(e,r));var i=e.g
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 2e 69 6e 73 65 72 74 52 75 6c 65 2c 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 6e 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 3d 74 68 69 73 2e 6f 77 6e 65 72 4e 6f 64 65 7c 7c 74 68 69 73 2e 6f 77 6e 65 72 48 6f 73 74 4e 6f 64 65 2c 73 3d 74 5b 30 5d 2c 63 3d 74 5b 31 5d 2c 75 3d 21 21 6f 26 26 6f 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 44 4f 43 55 4d 45 4e 54 5f 4e 4f 44 45 3b 69 66 28 75 7c 7c 28 30 2c 72 2e 6d 24 29 28 6f 29 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 73 68 65 65 74 49 64 Data Ascii: .insertRule,CSSStyleSheet.prototype.insertRule=function(){var t=Array.prototype.slice.call(arguments),n=e.apply(this,arguments),o=this.ownerNode\|\|this.ownerHostNode,s=t[0],c=t[1],u=!!o&&o.nodeType===Node.DOCUMENT_NODE;if(u\|\|(0,r.m$)(o)){var l=this.sheetId
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 75 6c 64 20 73 65 6e 64 20 65 6e 64 20 73 69 67 6e 61 6c 20 74 6f 20 57 65 62 20 53 6f 63 6b 65 74 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 66 6c 75 73 68 22 2c 22 77 65 62 73 6f 63 6b 65 74 22 29 2c 53 2e 73 68 6f 75 6c 64 53 65 6e 64 45 6e 64 53 69 67 6e 61 6c 3d 21 30 7d 29 2c 22 64 61 74 61 22 29 2c 73 65 6e 64 45 6e 64 53 69 67 6e 61 6c 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 53 65 6e 64 69 6e 67 20 65 6e 64 20 73 69 67 6e 61 6c 20 74 6f 20 57 65 62 20 53 6f 63 6b 65 74 22 2c 22 77 65 62 73 6f 63 6b 65 74 22 29 2c 53 2e 5f 77 73 2e 73 65 6e 64 28 53 2e 5f 77 73 2e 5f 6d 73 67 50 72 65 66 69 78 2b 22 65 6e 64 5f 73 69 67 6e 61 6c 22 29 2c 53 2e 5f 77 73 2e 63 6c 6f 73 65 Data Ascii: uld send end signal to Web Socket with the next flush","websocket"),S.shouldSendEndSignal=!0}),"data"),sendEndSignal:hj.tryCatch((function(){hj.log.debug("Sending end signal to Web Socket","websocket"),S._ws.send(S._ws._msgPrefix+"end_signal"),S._ws.close
2024-10-30 03:01:26 UTC	16384	IN	Data Raw: 6d 7d 7d 29 3b 76 61 72 20 72 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 75 6e 6b 6e 6f 77 6e 22 3b 73 77 69 74 63 68 28 68 6a 2e 75 72 6c 2e 67 65 74 50 61 72 61 6d 65 74 65 72 28 22 68 6a 49 6e 63 6c 75 64 65 49 6e 53 65 73 73 69 6f 6e 53 61 6d 70 6c 65 22 29 29 7b 63 61 73 65 22 30 22 3a 72 65 74 75 72 6e 20 65 3d 21 31 2c 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 59 6f 75 20 68 61 76 65 20 73 65 74 20 69 6e 63 6c 75 64 65 64 49 6e 53 65 73 73 69 6f 6e 53 61 6d 70 6c 65 Data Ascii: m}});var r=Math.random(),o=function(){return function(){var e,t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"unknown";switch(hj.url.getParameter("hjIncludeInSessionSample")){case"0":return e=!1,hj.log.debug("You have set includedInSessionSample

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49847	18.66.147.58	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:25 UTC	726	OUT	GET /beacon?_wid=1347&_referer_url=&_action_name=pageview&_type=pageview&_cookie_id=snzthm7h2&_alt_referer=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F& HTTP/1.1 Host: www.loopanalytics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:26 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 03:01:26 GMT x-amzn-Remapped-Date: Wed, 30 Oct 2024 03:01:26 GMT x-amzn-RequestId: 89cbcb39-d252-4b2e-82cb-cfcc214cd9d7 x-amz-apigw-id: AcYs-GA7IAMEodg= Cache-Control: must-revalidate, no-cache, no-store, private X-Vapor-Base64-Encode: True X-Amzn-Trace-Id: Root=1-6721a185-7952687f146567f954b21d34 Pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 18c9dea802c00b7c060142aad49f7288.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: Az0Ple60MwCK6e4wbMnZBd0M87OoS763vD8ObyIfbfPKG9ZDKbqNvw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49849	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:26 UTC	399	OUT	GET /m/48eb07922352251c/original/HomePageServices-408x306.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:27 UTC	819	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 133055 Connection: close Date: Wed, 30 Oct 2024 03:01:22 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePageServices-408x306.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 01bf0430-6b79-1fbb-77f9-fdaa1b0ab7d6 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 f3e00d74aa4544d776f78a159416d17a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: qG6MhWCcPnTPq1vNsdWikdH5fG11-sX5w1jLfSO2UvbGth-x6DRYZg== Age: 4
2024-10-30 03:01:27 UTC	15565	IN	Data Raw: ff d8 ff e1 11 7e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 31 3a 30 33 3a 31 35 20 31 35 3a 31 31 3a 35 30 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 98 a0 03 00 04 00 00 00 01 00 00 01 32 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ~ExifMM*bj(1r2i-'-'Adobe Photoshop 22.3 (Windows)2021:03:15 15:11:502"
2024-10-30 03:01:27 UTC	425	IN	Data Raw: 32 65 31 38 2d 34 32 34 36 2d 62 63 34 31 2d 66 33 32 37 35 63 63 36 65 63 31 38 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 33 2d 31 35 54 31 35 3a 31 31 3a 35 30 2d 30 34 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 70 68 6f 74 6f 73 68 6f 70 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 Data Ascii: 2e18-4246-bc41-f3275cc6ec18" stEvt:when="2021-03-15T15:11:50-04:00" stEvt:softwareAgent="Adobe Photoshop 22.3 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li s
2024-10-30 03:01:27 UTC	1908	IN	Data Raw: 35 31 2d 39 39 34 63 2d 38 65 30 65 2d 38 38 39 34 39 37 32 32 30 38 63 36 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 33 2d 31 35 54 31 35 3a 31 31 3a 35 30 2d 30 34 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 33 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 33 36 32 36 65 33 64 2d 32 65 31 38 2d 34 32 34 36 2d 62 63 34 31 2d 66 33 32 37 35 63 63 36 65 63 31 38 22 20 73 74 52 65 66 Data Ascii: 51-994c-8e0e-8894972208c6" stEvt:when="2021-03-15T15:11:50-04:00" stEvt:softwareAgent="Adobe Photoshop 22.3 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:33626e3d-2e18-4246-bc41-f3275cc6ec18" stRef
2024-10-30 03:01:27 UTC	12792	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-30 03:01:27 UTC	3592	IN	Data Raw: bc 41 e9 9e a8 a6 be 7d 77 63 a4 83 f8 fa 7f c5 3d da a3 ab 71 eb 1c aa 5a 16 fc 1d 24 5f fd bf 3f ed fd a7 b8 6f d2 94 7c ba bc 38 99 00 f5 1d 15 0d e4 99 a1 b8 e6 8e 96 69 1e 32 c7 d2 a4 d8 0f f5 81 fe 9e e1 3d ee 6b 86 6b a6 8d e8 01 3d 4d bb 22 c0 b6 f6 8b 22 03 51 d1 42 f9 01 9a c9 6d da 8c 4d 4d 5c d3 c1 08 95 7c a1 8b 00 d6 61 ff 00 11 ee 30 8a ee e0 5c 48 aa dc 4e 7a 92 45 bc 2d 6e 85 93 80 c7 4e bb 9b b7 f6 5d 0f 4f 9a 8a 88 c4 d3 49 4a 03 1b 82 d7 d1 c9 bf d7 eb ec be f6 d4 c9 3a d6 4c 9e 8c 6d a5 11 44 48 18 a7 5d fc 4c f9 a9 b6 b6 26 2e ba 8f 11 8a a8 a9 9e 59 5f e9 72 05 cf d0 01 fe 3e ef 2e da 8e 83 c4 97 03 aa 2d f9 57 3a 57 3d 18 cd d1 f2 b3 31 b9 e9 6b b2 30 d1 4f 46 92 2b 02 a6 eb c1 1f eb f1 ef 51 db 44 80 08 cd 47 56 7b a6 70 4b 8a 74 Data Ascii: A}wc=qZ$_?o\|8i2=kk=M""QBmMM\\|a0\HNzE-nN]OIJ:LmDH]L&.Y_r>.-W:W=1k0OF+QDGV{pKt
2024-10-30 03:01:27 UTC	10463	IN	Data Raw: 56 ed 6d 6b 0d 9c 85 a2 50 d4 c7 46 d2 29 09 8d 2d f8 50 39 fe bf 9f 72 30 04 71 e3 d4 63 2d 03 b0 1c 2b d7 26 7f cd ec 3f 3c fb df 4d d0 54 74 2c f5 c7 65 52 6c 08 6b 24 a5 c6 4c b9 7a ff 00 3c 13 e7 e9 1e 2f e2 31 e3 a5 8e 34 4c 7d 14 d2 34 73 63 60 2c 1d a7 f0 3a 3d 4d d5 5d f4 2e 83 81 1f 7d ff 00 ba 9f bc bf 7a dd 97 6c e4 ce 50 f7 d6 df 96 bd ba 58 1b eb 36 d6 b5 b8 3f 5f 72 58 e8 92 e6 ea da 74 92 4b 78 d3 48 5b 32 82 23 20 32 48 64 a8 55 c8 1f 64 3d d0 f6 f3 da fb 8b dd cb 99 fd be b8 dd b9 85 a5 1e 0d c2 cd 16 98 22 a0 aa 24 12 ae 9f 11 9a a4 ca 58 d5 48 50 ab 4a 99 b9 3e c6 c0 e4 66 4a a9 bf 88 4f 59 13 b4 b1 bd 5d 1c 72 3c 72 1b fa d2 a0 d7 54 3a b9 b9 e7 df 22 ee ff 00 b8 d7 df bd b6 de 58 b9 7f de 2e 51 b9 88 8a 14 71 b8 5b 02 07 01 41 69 2a Data Ascii: VmkPF)-P9r0qc-+&?<MTt,eRlk$Lz</14L}4sc`,:=M].}zlPX6?_rXtKxH[2# 2HdUd="$XHPJ>fJOY]r<rT:"X.Qq[Ai*
2024-10-30 03:01:27 UTC	12792	IN	Data Raw: 59 96 2d 50 cd e3 6d 3a 54 d8 dc 3f b5 53 5b 5c 3c b0 95 94 e8 04 74 99 7c 05 8e 43 a4 6a 20 f4 1b fc 1b df d5 b9 6d d3 b8 31 70 99 4e 21 ea 67 96 92 3e 7c 51 21 90 e8 54 1f a4 0b 7b c8 ee 4e dc 04 fb 74 70 13 dc 82 9d 40 bc e1 66 22 bb 6b 80 b8 62 7a b6 a5 61 60 48 fa 80 47 fc 6f d8 b9 89 a8 15 a0 e8 00 c0 1a 8e bb 0d 6e 7f db fb b3 61 4f 5e f9 75 95 4d ef 63 ff 00 1b 1e da 20 ae 0f 5a 2d a7 80 eb b3 fe f8 7b d0 3e b9 ea d4 25 54 d2 bd 2d 7a d7 74 41 b1 bb 0b 69 6f 19 61 8d d7 09 94 47 aa 7f 1a 34 c3 17 5b 1c 94 19 58 e2 90 83 20 0f 41 53 25 d4 1f 51 00 1f 60 6f 71 f9 36 d7 9e 79 37 7e d8 9a d2 37 dc 64 b7 6f a7 76 55 2c 93 2f 7c 7a 58 8d 4a 19 d4 2b 50 8a ab 1a f4 34 f6 ff 00 9b ae b9 37 9a 36 ad d1 6e e6 8f 6d f1 82 dc 22 b3 05 78 5b b5 cb 20 3a 58 a2 Data Ascii: Y-Pm:T?S[\<t\|Cj m1pN!g>\|Q!T{Ntp@f"kbza`HGonaO^uMc Z-{>%T-ztAioaG4[X AS%Q`oq6y7~7dovU,/\|zXJ+P476nm"x[ :X
2024-10-30 03:01:27 UTC	3592	IN	Data Raw: 51 a0 7c 06 6a 59 4b 54 d3 52 d5 46 05 f0 59 1b 97 a7 56 e6 9a 42 d1 7e 8f 1f bf a2 bf b8 4f df 05 3d ee e5 81 ed df 3d dc 06 f7 5f 68 b7 15 95 a8 0e e7 66 94 51 72 38 03 75 08 d2 b7 4a 32 e3 4d c0 f8 a4 0b 29 7b 7f cd 33 6e d0 9d 8b 75 9f fd d9 c0 9f a6 cd c6 58 c0 f3 3e 6e 83 e2 fe 25 a3 71 0d d4 3e cc eb 0c 4e 4b 61 2e 63 77 66 76 56 13 2c 04 55 95 50 57 e4 69 d2 a6 59 82 16 fd b5 66 0d ac bf d0 7b e8 a9 b7 98 48 d3 c3 6c 4c 64 7a f5 22 e1 55 51 e4 1a ab d5 4c ed 24 5a 5d e3 b9 cd 33 52 cf 8e c7 cb 91 a9 39 1a 77 d5 e7 2e 58 78 e1 71 c1 e3 fa 7b 31 db c1 10 5c 6b 1a 4e 82 0f 49 af 00 d5 16 91 50 1b f2 e8 e5 7c 25 18 3a 7d e9 9e c8 41 24 92 55 cb 90 a3 a8 a8 a2 9b f5 2a 07 b8 d4 c6 f7 0f ed 97 5d 16 e2 18 e4 aa 67 3d 3f 15 0c ba d9 68 7a b6 ed cd 5b 4b Data Ascii: Q\|jYKTRFYVB~O==_hfQr8uJ2M){3nuX>n%q>NKa.cwfvV,UPWiYf{HlLdz"UQL$Z]3R9w.Xxq{1\kNIP\|%:}A$U*]g=?hz[K
2024-10-30 03:01:27 UTC	12792	IN	Data Raw: 37 4f ba 73 34 91 26 b5 88 65 1e ee b0 92 09 93 c1 22 29 04 d8 e1 f7 de 83 6c ba dc f6 cb 2d ca 10 cf 69 66 ec 8e 07 05 12 05 1e 21 f4 01 94 29 3e 55 eb 38 3e eb f7 50 6d d1 4d 65 30 54 bc ba 1e 2a 93 82 da 4d 02 fc ce 9a 90 3e de 96 df 31 3a f8 ee 4a a4 a1 78 52 2a aa 28 e6 ab c5 d7 2d f5 c1 58 e9 a8 10 c0 16 10 4e 08 f2 af d1 90 7f 50 3d f3 82 fa ca 68 6f cd 63 1a 7a ce 39 02 df d8 88 cb 54 8e 1f 2e a9 7b 73 e0 b2 d8 89 32 75 19 04 ad a3 ad c7 d6 98 b2 14 a3 58 8a 18 78 34 b5 a9 1b 13 0f db d4 96 b1 71 e9 26 c4 5b 55 bd af 5d be 29 63 52 38 1e a3 bb db 29 a0 99 aa a4 30 e3 fe 7f b3 a4 b5 16 e0 ac a8 43 4c 6a a4 62 5f 50 d5 1c 4d 64 b6 a5 d0 42 a8 31 00 2c 14 93 62 2d ef 43 6a f0 da aa 4f fa be 5d 17 18 e6 6e 23 1d 05 fd e1 bd b2 bb 23 61 6e 6c f6 05 e1 Data Ascii: 7Os4&e")l-if!)>U8>PmMe0TM>1:JxR(-XNP=hocz9T.{s2uXx4q&[U])cR8)0CLjb_PMdB1,b-CjO]n##anl
2024-10-30 03:01:27 UTC	3592	IN	Data Raw: 31 00 00 2a 49 38 00 0f 32 4f 01 d5 b6 7c 46 e9 ee a8 ea 4d d3 8c aa ec de c3 eb bf f6 60 b3 18 d1 59 b6 fa ce a3 79 6d b3 b8 76 b6 23 22 9e 11 51 4d 82 6c 87 f1 0c 96 72 ba 37 31 c9 3c 51 bc 50 2b 34 51 92 4b b1 c2 1e 77 fb c9 fb 6b cf 77 b7 5c ab ca 1e e0 6d 17 1b 74 12 aa ca 63 ba 85 84 d2 f6 b2 2e b0 fa 34 f7 2b 24 61 8b 31 21 88 c0 02 74 e4 ee 50 5d 97 c3 dc 77 62 bf bd dd 7b 63 24 56 20 71 c2 b5 2e 78 13 4a 0e 03 cc 9b 34 a9 91 a2 70 85 48 0c 8c 75 fe 2f 6f a0 ff 00 5f dc 51 bf dd dc d9 dd 2d bb a3 05 78 c9 af ad 78 53 a9 2d 48 02 94 c6 7f 97 40 cd 51 c9 e2 6a ab 4b 5f 23 47 55 28 49 f1 d5 13 3b 47 3c 04 12 1a 91 dc b4 74 b5 c8 a7 d3 7b 2b da c6 d7 bf bc 58 dc a1 df 76 1b cd ca 58 87 d6 ed f3 c9 47 b6 91 d8 89 23 ce 61 66 aa c5 70 a0 f6 86 a2 49 40 Data Ascii: 1*I82O\|FM`Yymv#"QMlr71<QP+4QKwkw\mtc.4+$a1!tP]wb{c$V q.xJ4pHu/o_Q-xxS-H@QjK_#GU(I;G<t{+XvXG#afpI@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49850	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:26 UTC	398	OUT	GET /m/2a48842e9777443c/original/HomePageProduct-735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:27 UTC	818	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 32194 Connection: close Date: Wed, 30 Oct 2024 03:01:22 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePageProduct-735x551.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: 8bed4278-e1b2-6b84-1e20-c09667656ead Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 102d8cf947b68167e34dd1299c206242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: 3ryH6EwxHuWVPU8q08XvEmd22gnfs-PR-lsHFWIb69at18rDaqm_CA== Age: 4
2024-10-30 03:01:27 UTC	15566	IN	Data Raw: 52 49 46 46 ba 7d 00 00 57 45 42 50 56 50 38 20 ae 7d 00 00 f0 a7 02 9d 01 2a 80 02 e0 01 3e 6d 2e 94 48 24 22 29 29 a3 f2 7d d1 30 0d 89 65 6d e0 26 fb 5d 5e a8 fb 12 29 ed a2 83 06 fa 94 8a e4 3a 77 34 97 72 31 cd e6 71 e8 95 3d 6f 2e a2 7c 77 f8 f7 39 5f 2b e3 97 cb cf 9f f3 3b ae df b0 4d c8 9c e7 dd 10 1d 5a 3d 0b df fa 7d a9 b1 ac e5 bf e6 1f d5 f7 ff f9 7f dc 7f c5 ff 1d fb c9 f0 ff 84 ff 7a f0 4f ef 67 f7 3d 11 f1 97 f3 7f ec 3d 0e 3f 29 fe bb e8 8e d8 bc 45 bf 1b ff 77 d0 ba 87 1f 57 f4 31 e9 2d a9 57 b0 ff 6d 3e 07 7f a2 7f 8e eb a4 7d 4a ba d7 a6 fe 75 32 c5 d2 2b 36 8f 6f 85 09 e2 27 c1 13 d9 8a 46 fb f4 34 90 7b aa f3 17 9f a8 a9 29 fd d6 f4 7c 65 77 32 2f 5e 35 07 fd de 1a 8c 87 8b 98 c7 38 8c de af fa 65 b8 cf 33 f0 17 d7 60 14 bf e0 3e e0 Data Ascii: RIFF}WEBPVP8 }*>m.H$"))}0em&]^):w4r1q=o.\|w9_+;MZ=}zOg==?)EwW1-Wm>}Ju2+6o'F4{)\|ew2/^58e3`>
2024-10-30 03:01:27 UTC	424	IN	Data Raw: 38 f4 a4 42 85 2d 60 66 b2 37 0e 43 22 1a 0f ea bc 0b 62 84 3d 2a 13 df f8 42 a8 aa 1f d5 65 d5 a9 01 39 44 c6 3b f3 35 2d b2 a7 9b fb fd e6 d7 60 ef 4d 37 2f ad 9a 33 8f 95 ae f2 ec 7f 7f 71 ee 35 03 2f 4c 14 f0 94 f5 2a 94 20 20 81 a5 6e 8b 2e b0 c3 ca 82 ba 1e 9e 7b 3f 4c e2 f6 87 37 77 8a 2b 2d a9 ba cd ae 1c a4 4f 1b d3 ab 75 57 8c fd cf 44 8f 80 f9 da 0f b3 e0 8d 37 85 80 0e 58 f8 3d d8 cd 0d f4 f7 6f 17 dc 17 d9 fd c1 da f2 8b fa f0 a4 5e 52 9c 97 24 e2 1c a9 68 48 ac a2 02 0d 02 ea 32 25 f7 71 96 f4 b7 53 35 4c 6f c4 6d 8a 46 5b d6 96 d7 4c 2f 1c b7 eb e9 29 0a 2d b5 d7 65 0d ae ae 2b fc ad cd 2d 93 4a 13 d1 62 aa 97 e7 64 47 19 c7 0d 6a c7 80 9c 4c b0 3c 28 36 da c0 89 9e 4b cb c5 e5 03 32 3f f4 13 41 ef 44 7f 1a 37 de fe 9f 93 bc fb ff aa ad 99 Data Ascii: 8B-`f7C"b=Be9D;5-`M7/3q5/L n.{?L7w+-OuWD7X=o^R$hH2%qS5LomF[L/)-e+-JbdGjL<(6K2?AD7
2024-10-30 03:01:27 UTC	1908	IN	Data Raw: 4e 5c 21 ac 4f 37 9f d1 2d 8c 9e 7d 3c cc 98 d4 94 59 59 c2 4e 42 fc 73 ac ef 37 9e db aa 67 c2 f8 8a 23 9c c6 22 5e 5d bd 1c 58 6c 20 69 bb 51 f1 61 be b4 b3 8e 64 4c 71 27 c0 28 84 88 a6 22 47 52 a9 c6 fd d9 d7 98 43 25 ee 52 64 50 22 bd f8 b9 77 ef 4d 73 f3 ab de 5c 13 12 22 3b fc 37 07 95 94 07 4e 23 64 96 49 c3 74 5e 98 ba 1e f2 df 51 3b 63 32 01 cc 4b 10 15 0a 81 0d 9a 23 ca 83 64 6e 3f 00 c8 09 5b d9 9d 2f 4e 98 4b a8 39 57 78 91 d3 6e fe 4d 30 de c0 a1 6c 7d 5b 75 7d 6f 91 30 c5 e8 90 cf b1 64 84 81 87 3b 3c 24 3a 88 13 17 1e 05 86 1e 01 8a 83 09 56 cb 5f 5b 5c 3a 81 84 f3 3f e0 88 2a df fe ee 7b 12 4d eb 9e dd d5 b2 67 4f 56 ce de 28 dc 66 ec 2a 46 33 02 3f 0b 94 54 d6 d6 36 40 9b e2 f7 55 e1 c1 89 c4 09 fa 09 a2 d4 ea 25 22 97 03 b0 ce 0c 87 3a Data Ascii: N\!O7-}<YYNBs7g#"^]Xl iQadLq'("GRC%RdP"wMs\";7N#dIt^Q;c2K#dn?[/NK9WxnM0l}[u}o0d;<$:V_[\:?{MgOV(fF3?T6@U%":
2024-10-30 03:01:27 UTC	14296	IN	Data Raw: 2a a3 81 7d c1 71 16 4b 83 03 f9 e1 9a b6 1a f3 53 77 8c dc 54 b4 6e 58 c3 7f f1 ea e5 e3 7c fa b9 4f 24 e1 9e 2d 8d cc ad 6d 31 7a b4 f4 4a 44 1b 24 a4 01 c2 f2 96 ec ff 78 d8 eb 6b e2 01 20 2f e8 03 f9 97 9b 95 0c ab 4a ae 1d bd e7 64 9e 9b b5 35 34 b6 64 02 8c c9 b8 30 9b 62 0a b0 e3 e5 2c c6 ba 97 66 8b 2e ce ae 77 71 95 62 29 22 af a8 1f 6a bf 56 e3 08 e1 ca 94 b1 30 93 b3 c2 9e ac 89 e1 db d4 7e e1 89 61 ee fa ca 9f 59 71 d5 59 a1 2b 43 61 7f 97 af 97 27 97 89 a2 5a 39 28 92 8b fe 23 ea 5b 79 c2 f1 5c 80 a8 b9 54 82 77 3b 79 12 8d 8a f4 1f b4 64 63 af f2 aa 8e 54 ce fd 77 b7 e4 6b bd 71 5d 1f 56 03 f3 24 97 9d 98 e0 5d 9f 17 db d7 2d ce 1b 88 2e 0b 20 4b c3 56 c4 ea 43 38 7e 01 a8 81 96 42 a3 9c 78 46 02 c7 a8 df 35 56 70 bc c8 24 59 a6 0b 62 4a e2 Data Ascii: *}qKSwTnX\|O$-m1zJD$xk /Jd54d0b,f.wqb)"jV0~aYqY+Ca'Z9(#[y\Tw;ydcTwkq]V$]-. KVC8~BxF5Vp$YbJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49851	18.245.46.63	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:26 UTC	782	OUT	GET /group/0/d625593f098d4d02b587/12/icap.js?t=1730257284920&ga=GA1.1.833971690.1730257278&GoogleAnalytics4__ga=GA1.1.833971690.1730257278&GoogleAnalytics4__ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0&uuid=000196a6-08bb-4e64-89ba-1051944f1b33&ids%5B%5D=205035836 HTTP/1.1 Host: js.calltrk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:27 UTC	744	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 22 Connection: close Date: Wed, 30 Oct 2024 03:01:26 GMT X-Xss-Protection: 1; mode=block Cache-Control: max-age=0, private, must-revalidate Etag: W/"1643b5cec44cc597bc2cce3448ce5434" Referrer-Policy: strict-origin-when-cross-origin Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 03c25fdf-445e-4b39-8a0f-db9d6b044458 X-Runtime: 0.018849 X-Cache: Miss from cloudfront Via: 1.1 129f13101f12370407d42127c62b1bd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: dfmZmJa80v1faB4SfHxHCsP-DLkkzyRjHThvsKzO1vAJUB1-wDXV5Q==
2024-10-30 03:01:27 UTC	22	IN	Data Raw: 2f 2a 20 63 68 61 6e 67 65 73 20 72 65 63 6f 72 64 65 64 20 2a 2f Data Ascii: /* changes recorded */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49853	52.222.236.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:27 UTC	555	OUT	GET /browser-perf.8417c6bba72228fa2e29.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:27 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 5259 Connection: close Date: Wed, 24 Jan 2024 14:32:12 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "fb9f7dae39619642ed5890e40763ef2e" Last-Modified: Wed, 24 Jan 2024 14:31:37 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 88f858f045c3909fad9cebbada511aee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: DUDrABnoIC_G43I6jqifnCUIHlGnyzYIL33VyrSsYueDl7DvP2Ch8Q== Age: 24150555
2024-10-30 03:01:27 UTC	5259	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 65 28 74 29 7d Data Ascii: !function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49854	150.171.28.10	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	410	OUT	GET /p/action/134002157.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=1C935811F317675A22804D39F299665B; MR=0
2024-10-30 03:01:28 UTC	572	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 370 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F62394766D2546148F8C8FAB25D5616F Ref B: DFW311000103029 Ref C: 2024-10-30T03:01:28Z Date: Wed, 30 Oct 2024 03:01:27 GMT Connection: close
2024-10-30 03:01:28 UTC	370	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49855	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	397	OUT	GET /m/65510963a54fda2/original/IndList_Oil-Gas-408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	818	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 40862 Connection: close Date: Wed, 30 Oct 2024 03:01:23 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_Oil&Gas-408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: be24cdba-bb45-17a2-47c0-8917fcd3343f Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 910a343c3141ba3fe805e18bded62490.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: FBk4YmzuBT0xm3greU0_UxiZHII99aEa-0Rwnv-476QXFH2pjoSMdA== Age: 5
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 52 49 46 46 96 9f 00 00 57 45 42 50 56 50 38 20 8a 9f 00 00 50 e9 01 9d 01 2a 88 01 e0 01 3e 6d 2e 92 46 24 22 a1 a1 2d 14 1d 58 80 0d 89 63 2d 52 5e 65 f4 26 60 f8 5c f3 f0 4c eb 25 fe 8a 5b f1 fe 65 99 4f e9 d9 b9 f6 27 b5 93 25 ff 77 b8 ff 82 ff b9 e6 25 ed bd ed 7f ea 7a f1 fe 9b fe ff a3 2f f7 3b e1 2f ee 57 ab cf db 6f da 4f 78 5f f8 ff bc 3f 03 7f c1 fa 40 7a 5f 7f d5 f6 b3 fd bb f6 87 f2 ee fd d2 f8 a7 fe e9 ff 97 d9 e3 f7 1f 06 67 d0 7e e5 f8 27 e5 67 e3 1f c0 7f 9d ff b5 f1 35 f9 3e 28 fd d7 fb 4f 31 3f a0 7e 5e fe 6f f9 8f 6a 9f d0 ff ea ff 57 e3 6f c8 5f f6 3f d0 7b 05 fe 6d fd 67 fe 07 a5 67 db 76 e1 6d df e9 3f 6c fd 83 bd ce fb 7f fe 3f f1 3e aa 5f 87 ff bb fc ef ac 1f 69 bf f7 7b 81 fe c0 ff e5 f6 0f ff 0f 87 df e8 7f ed 7b 05 fe a6 f5 72 Data Ascii: RIFFWEBPVP8 P*>m.F$"-Xc-R^e&`\L%[eO'%w%z/;/WoOx_?@z_g~'g5>(O1?~^ojWo_?{mggvm?l?>_i{{r
2024-10-30 03:01:28 UTC	1514	IN	Data Raw: 49 15 0f 98 23 50 f8 6b ad d3 6b ef ce f0 0b a6 8f 17 c1 73 0f d7 8c 56 17 37 42 59 a0 57 93 26 2b 95 10 8b e8 41 6b 20 73 7b 75 60 f6 f4 e7 17 2f e1 18 89 d3 5f 00 3a 4a 65 39 b0 04 4b dc fd 5a f4 f9 ac b3 e4 c5 03 28 53 33 e5 f2 c9 46 49 8a 04 74 fc ba 04 07 11 69 26 ca ea 2c 05 54 7e 7d 7b 94 5b f0 f7 ab 9c a1 bc c4 74 09 a8 1e 6e 36 b9 3e 36 ac a6 c1 95 ac 87 43 e7 b2 b2 c6 4a 78 c3 7d 9f 80 49 26 05 a4 b0 6b 66 4d 9b fe 0c c7 5f ff dc 31 77 10 4e 74 79 9a 60 6c f9 19 63 f7 09 9e 0f 39 8e 1b 62 05 f9 8e 98 0b 04 be 34 d5 fe 02 6a ba bb c0 d3 59 c7 64 64 51 55 38 c8 e7 fc de 66 1a 92 7d 5a af 06 40 66 ae b2 07 fe eb 00 d1 9e c5 b9 ea 86 6f b7 40 86 76 9e 2e ec 4c e8 5d e4 a4 eb d8 16 3a d8 ae c6 d0 a9 ba 67 0d 3d 2f 5b 8e 0a c8 45 c1 24 9d 98 ee 88 a1 Data Ascii: I#PkksV7BYW&+Ak s{u`/_:Je9KZ(S3FIti&,T~}{[tn6>6CJx}I&kfM_1wNty`lc9b4jYddQU8f}Z@fo@v.L]:g=/[E$
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 4b e9 80 45 e7 53 51 56 39 89 46 35 03 52 18 71 d5 b8 01 3b 9b c9 c8 46 b3 08 51 00 2a 95 5d c7 a7 30 b7 ed f4 e1 5a 93 9e 0c 9c d0 7e 52 90 6a 5f 1f 20 38 ca 93 df ce 5e c2 bb e0 bf e4 76 7e 0c 8c 07 0b b4 3f 8a d8 13 21 8d 22 79 b1 84 75 a2 24 91 53 5f f9 c7 a3 f2 87 00 83 d6 f1 fd 67 0d a7 03 bc 11 a9 1b 20 ed db 8a 5c 22 49 61 e7 ac 7e 04 9e fa b9 d1 2a 63 c0 31 15 96 d0 59 bb f1 0d 3e 56 04 d3 c6 8b 8a c8 fa 8b c4 27 e8 d1 08 a4 8e b2 ea 35 82 d0 37 e1 92 f9 52 ff df e2 4a a9 9c ae a9 48 6a 66 2d 07 98 3a 10 08 80 f4 50 c0 cf 5a 0b 68 46 51 21 21 69 ef d3 ab 38 ee cb 7f 10 eb aa 23 32 d7 21 e3 70 54 17 1a 36 13 15 92 f5 5f dd ec b1 4a 35 13 2e f6 8f 4b d9 42 38 9b 6a 52 0f a1 0e 52 cc 09 20 2b ca 96 91 90 f1 ce 3b c1 97 62 3a dd 08 42 bb 50 81 39 5f Data Ascii: KESQV9F5Rq;FQ]0Z~Rj_ 8^v~?!"yu$S_g \"Ia~c1Y>V'57RJHjf-:PZhFQ!!i8#2!pT6_J5.KB8jRR +;b:BP9_
2024-10-30 03:01:28 UTC	6580	IN	Data Raw: 8c dc 04 f9 f8 71 9e fb b6 cf 48 06 8f 5c 90 5c 7b fa 41 32 99 5d ee e7 f5 41 2d 18 60 55 01 0a c7 dd d3 e8 5b e6 17 5f 28 3f cd 47 1a cf 8c 90 d8 b8 0b 62 36 6c 19 e5 8f 9b 02 6b 21 3a db 13 4f 06 32 aa a0 1e 7a 96 94 56 88 6d 35 01 e8 17 92 b9 c3 e7 c5 29 07 29 74 fb b1 0f c5 ba a3 14 89 f4 07 68 bb 38 11 13 00 3a f0 bd d9 a2 d7 03 7a e6 ab c2 d2 d7 fa 6c ea 73 b1 66 9e 87 28 bb 00 9b 70 ab 09 3e d5 63 76 65 43 f8 60 2e d1 22 89 94 ad 99 5b cf 4f 26 d7 fd 11 14 54 f4 cd a5 9a 23 ba ac e3 a9 7f f5 c6 5e 4d 09 4c a6 88 2d 3c 71 4a f2 bc 6f 60 10 e1 fa 35 06 c1 42 f1 80 39 59 79 75 86 21 1d bd be d8 e6 aa 0c 29 b3 8b bb f5 67 8f d0 1e ca 9c e0 14 75 17 2e 12 ad ca dc 3f 10 3f d8 2c 6f 03 f4 fb 61 f6 7f 23 d1 8c fd 53 de 81 c4 3e 29 45 b3 04 88 1b d1 aa 46 Data Ascii: qH\\{A2]A-`U[_(?Gb6lk!:O2zVm5))th8:zlsf(p>cveC`."[O&T#^ML-<qJo`5B9Yyu!)gu.??,oa#S>)EF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49856	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	401	OUT	GET /m/3ebf6c5896f14138/original/IndList_DrinkWater-408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	821	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 10540 Connection: close Date: Wed, 30 Oct 2024 03:01:23 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_DrinkWater-408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: d7161396-d8e4-b533-3ffe-b853c8747b11 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 bafea69ec4368ee11760779ffcfbd4fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: IVEF2ljgZZ0dDceOzbDSbvcyFJHKPXmeP493-t9fwCoEH-No-an-gw== Age: 5
2024-10-30 03:01:28 UTC	10540	IN	Data Raw: 52 49 46 46 24 29 00 00 57 45 42 50 56 50 38 20 18 29 00 00 d0 f9 00 9d 01 2a 88 01 e0 01 3e 6d 34 96 48 24 22 ac a5 a4 12 ea 89 90 0d 89 67 6e e1 10 2e 6c cc da de 5f 51 b6 ad 80 87 ba 38 6b 5e bf 3a 5a e5 f3 d0 09 7c cd 8b 7d a7 26 d8 97 f8 1f 04 7f 2c bf d8 f5 0e fc 87 fa 07 fb 7f ee 1c 78 60 33 f5 5f f1 7f b1 fe c6 74 0d fa b2 8d 5c dc 7f cd cf 1b a9 f7 ad bd 21 08 70 b2 68 74 2d 3e 48 d7 ff fd 03 e0 81 f8 46 fe 2e 24 be c3 f2 b0 75 28 b3 c6 c8 41 ec 34 0b 4a 32 2f f6 f1 f2 a4 48 d9 52 24 6c a8 f6 77 ff f9 7c 4e 7f fc 5e fb 28 c0 36 15 89 71 4b 8b bb 58 0a ff b3 a3 91 62 66 27 a0 3d c5 8a 05 67 ff 7b 89 49 08 ab cb f5 c2 c9 a2 61 64 d1 30 93 e2 d9 fe d3 cb 2e 7f f9 4c 69 ea 25 c3 dc 7e 7b 34 6d 9f ff d5 6f 12 31 57 e9 77 54 a6 70 63 ab 13 33 a8 7f e0 Data Ascii: RIFF$)WEBPVP8 )*>m4H$"gn.l_Q8k^:Z\|}&,x`3_t\!pht->HF.$u(A4J2/HR$lw\|N^(6qKXbf'=g{Iad0.Li%~{4mo1WwTpc3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49857	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	403	OUT	GET /m/69f5dd10ed364d6a/original/IndList_SemiConductor408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	823	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 27254 Connection: close Date: Wed, 30 Oct 2024 03:01:23 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_SemiConductor408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: bdd3e94c-9180-8b41-5806-6b24842a611c Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 59439a13f6db75e801a63663b4f79372.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: u7SIC0eD7qZWVqjFZVqelk6__D_S4mAvz_F-tutmP1lT8MkuJd2TKw== Age: 5
2024-10-30 03:01:28 UTC	15111	IN	Data Raw: 52 49 46 46 6e 6a 00 00 57 45 42 50 56 50 38 20 62 6a 00 00 d0 07 02 9d 01 2a 88 01 e0 01 3e 6d 2e 93 47 24 22 21 a1 a6 92 6e 88 80 0d 89 63 2d 80 58 c7 10 d5 80 cf 6f 10 e4 5f aa 67 1f d7 4e e2 ff 9f a6 b6 02 9d 59 9b bf bf 7f c3 fb eb ab c7 2e c6 e5 bf ae 8f f8 f9 06 17 a8 72 b7 e6 b6 30 7e 4f f5 6f eb bf bf ff 9b ff bb fe 23 e6 0b f5 ac c9 f6 b5 a9 7f cd ff 32 7f 57 fc d7 a8 5f fa 3c 7f fc 97 f9 7f fb df e8 7d 86 bf 29 fe 89 fe e7 fc 07 ac 4b 5b 7f a1 e4 0f f9 af 2f 8a 4d 2e 55 fd 6f 51 8f f5 5e 8b 1f ec ff f5 f4 93 fa 3f fb 6f fe 1e e4 1f cf 7f c1 7f e0 35 63 17 9f 8a 69 b8 a9 84 12 a9 67 10 28 41 70 4c 43 c1 21 1a 08 3c bc 6f 81 9f 91 dd 58 0e dc 6a 86 b6 73 d3 5b cd ec 9e 83 b9 87 93 3c 9b 69 07 15 cb 6b 54 cc ee 9c a5 0f 57 c0 80 f4 2f 1f 1b 4c 08 Data Ascii: RIFFnjWEBPVP8 bj*>m.G$"!nc-Xo_gNY.r0~Oo#2W_<})K[/M.UoQ^?o5cig(ApLC!<oXjs[<ikTW/L
2024-10-30 03:01:28 UTC	12143	IN	Data Raw: 61 4a fe af 6e d2 f2 ad d3 72 84 ab 6b 38 24 48 8a 0a db 90 3a 43 65 95 c1 ee 1e 34 a0 e9 32 d8 57 5a 3f 3f b2 d3 d9 6d a4 56 b5 eb eb 7b cf 27 1a c9 dc ad 47 59 ac fb 6b 27 f0 f1 83 f4 9b 1b 78 49 0b d7 7d 5c 8a 8d 2f f1 eb 46 c2 12 8d 55 8a bc df 91 cc 05 92 b6 8a 05 78 1f 85 c2 80 46 a1 04 c3 ee 65 48 bb 86 26 67 60 c9 a5 19 24 d0 00 93 20 64 3a 3a 23 b5 a3 01 d1 95 d4 63 ac b8 70 1c 57 47 3c 30 3d b5 b8 cd a0 1f 24 fe 9a 08 5f 1c 1a 5e c9 9e 83 26 6e 5d e4 26 25 df 5e 51 66 32 9a 57 62 9f 57 bb d4 9d 67 b5 96 b7 5e 1a 59 18 36 bf 68 e6 6b b1 b7 03 62 de 65 27 a4 55 b2 cc 7b ab 80 7a 76 3d c1 ff 3d 3d e6 f7 75 60 e1 54 5b fe c7 c0 55 9d e5 72 fc 33 9f 49 ae ae 0f 30 66 9b 8a 13 ff 53 39 2a 70 ab a3 98 44 53 6c e1 0f 7f 10 db 1c cf c0 7b 01 f9 0a f2 09 Data Ascii: aJnrk8$H:Ce42WZ??mV{'GYk'xI}\/FUxFeH&g`$ d::#cpWG<0=$_^&n]&%^Qf2WbWg^Y6hkbe'U{zv===u`T[Ur3I0fS9*pDSl{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49859	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	403	OUT	GET /m/6db334456dad3140/original/IndList_WasteWater02_408X500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	823	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 54694 Connection: close Date: Wed, 30 Oct 2024 03:01:23 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_WasteWater02_408X500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: dca23aa5-3fc5-e32b-199f-499c2793060a Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 f3e00d74aa4544d776f78a159416d17a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: NDC1Vk1hH-NBr_Uc3MeNVstxGV4FT4u5933JX5_ROH6LwwC8peHH1w== Age: 5
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 52 49 46 46 9e d5 00 00 57 45 42 50 56 50 38 20 92 d5 00 00 d0 17 02 9d 01 2a 88 01 e0 01 3e 69 28 90 45 a4 22 a1 98 eb ef 04 40 06 84 b1 b5 40 18 15 40 09 c7 e3 ee 51 e9 e7 e6 d9 c3 f6 e7 bd b3 73 d9 b7 d5 79 54 7c 7f 7b 1f fb 9e bd 79 c0 7f c4 f6 85 fd f7 fe 4f 9d ef ed df be 9f 9c 57 a6 87 a7 df ae 27 3f 57 ad 67 ad d7 ed 86 99 04 ab 7d 03 ec ef e4 97 99 3e 3f be 1f fb c7 fa 5f d9 9f 71 ec 33 f6 3d ff 6f fb 6f 50 ff a3 7e 64 fe c7 f9 cf 69 bf c9 ff e8 ff 45 f9 55 e8 5f c5 ef f8 bf c4 fb 02 fe 5f fd 6b fe 37 f8 0f dd ef 72 af a9 ff d3 fe df fe 8f 7d 7e bd fe a3 ff a7 fb 1f 60 8f 6f 3e e7 ff 57 fc b7 f9 af fd ff ec 7e 23 bf 17 cc ef dc bf db 7b 01 7f 52 ff 0b ff 6f f3 b7 e4 4f fa 5e 0d 1e ab ec 05 fa a3 ff 57 fb 1f 76 7f f2 3f fd 7f c5 ff 89 fb ad ee 9f Data Ascii: RIFFWEBPVP8 *>i(E"@@@QsyT\|{yOW'?Wg}>?_q3=ooP~diEU__k7r}~`o>W~#{RoO^Wv?
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 7f db 2e 60 11 e3 5f c6 74 3b ef 54 08 ef e3 0f 93 6f 00 e8 e3 74 b0 fd a1 6a e6 cf 0e 2a 93 68 87 3f a5 2c a4 31 9d 85 48 4d b6 c7 3d 65 a9 b4 05 c9 1e d6 9b 20 de 6a db a1 92 db a2 58 fe 2b d4 b6 f0 bd 6c 28 0d df 34 e0 0b f7 da 37 a6 59 64 25 03 c8 69 de 75 95 cb a9 6d 54 12 23 f3 da 00 f3 0f 6c 1e d7 cb d7 05 64 ea 5b a3 20 3b 84 b9 38 64 98 96 24 6e 48 ed c1 ea e4 e2 30 e3 fd 2e 13 35 32 a4 a4 32 30 71 6b 93 cc 67 5a 83 df 6d a0 31 a9 77 6c b8 95 2a 62 ab 76 82 30 a0 8e 1a a0 65 20 9e 51 b4 cc f3 2e be 8c 39 3f d9 16 5e 2c 37 55 6c ba a3 62 a8 49 77 e8 ff df 8f d1 f8 83 b7 e8 4d e8 35 18 42 0e d9 ce c3 94 a6 ef 33 40 e5 80 d8 ab 03 a1 b7 ab e8 6a 79 18 10 e0 61 d4 cc 91 2b c2 6d 90 70 c9 41 17 77 02 04 8f 7d 72 28 fa d6 c6 36 c9 71 8f ff 92 97 87 95 Data Ascii: .`_t;Totjh?,1HM=e jX+l(47Yd%iumT#ld[ ;8d$nH0.5220qkgZm1wlbv0e Q.9?^,7UlbIwM5B3@jya+mpAw}r(6q
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 9e 63 f3 8c fb a1 f7 3d 56 80 4e 14 1a 02 9a ce 49 e6 f4 29 ee 38 9d eb 69 8e 4a 9d 0d 1e fe 63 83 63 41 96 bc b2 5f 24 b4 0f 54 e8 a6 30 20 34 77 17 b5 d5 d0 a8 12 ca 8b 2c 94 61 95 ca aa 22 b0 7b 9a 83 90 13 7b 42 b7 62 45 15 6c 34 6b fa 7b ce 3b 1b 70 cc 54 4c bc 7d 08 cf b0 ee 7d d8 fa 02 02 04 2f 17 f1 8a aa 1f 2a 24 2d 25 54 7c 59 cf 6d 03 16 72 39 75 f1 c5 d9 e2 14 35 35 9b 4b 5d 6a 5c 89 3b 59 ce 2e 8c bb d2 37 51 37 28 b7 e4 80 b6 45 bb 7c e0 2a 3a fc bf 89 30 90 af 56 36 0d 31 a3 51 8a 33 88 ae 82 20 bd 07 2e 1d 5f 0a 90 e2 0c 72 ac 25 e8 76 29 d6 22 79 46 23 07 31 8b f1 a4 95 5e 57 fc b5 cf a7 fd 14 7a 52 ba 3d 2f b7 86 aa 15 0d bf 13 6c 40 9f 23 87 0d 8f af 49 60 4f 05 07 12 b1 df 8f d6 f0 84 ac a7 d0 0c 89 a1 46 2e 31 7e b2 00 43 9d 91 47 ce Data Ascii: c=VNI)8iJccA_$T0 4w,a"{{BbEl4k{;pTL}}/$-%T\|Ymr9u55K]j\;Y.7Q7(E\|:0V61Q3 ._r%v)"yF#1^WzR=/l@#I`OF.1~CG
2024-10-30 03:01:28 UTC	5542	IN	Data Raw: d9 1c e3 7c 76 74 de 3a cf 52 42 a3 4c a8 7f 4d c0 91 a1 58 37 74 d8 7d c6 37 7c 6c 93 85 5b ce af 04 4d 19 4b cd 9d e8 b7 9b 3d 63 df b2 2d f9 92 38 3b a6 c7 77 61 e5 0d c9 e5 72 e9 1e 8f 9f bd 90 20 e4 6d cb 4d a1 f8 22 ab 75 2f bf f2 0a 4d c9 d1 fb a2 b1 58 da 28 ae f5 a6 81 33 bf d6 78 a7 d6 35 7c 3d f8 e0 27 3d 83 94 ec 20 45 e4 0c 98 05 5c 88 3a fd 5e b0 55 9d 0f 51 49 ce 5e 2c 6a 66 16 99 cc c5 de 75 75 8e 6e 0d ef 8a c7 8c f4 49 4f a4 c6 5b 65 f2 95 24 e7 d0 44 02 92 77 83 d4 d3 73 40 98 58 6d 8e e8 d3 f4 e3 5d 66 36 04 8b 4a ae ee b0 60 97 ab 4e 53 9b dd 3c fd 21 d0 aa 1a 40 25 e4 bc 4b d2 83 a8 19 e5 96 a3 38 28 5d e0 df e3 66 e0 84 a4 d7 66 7f d9 37 7e dc 49 00 02 22 98 23 09 a7 87 a4 84 d8 e8 e9 6c 04 53 47 52 93 ba 2f 12 10 2b c5 10 1c b2 1d Data Ascii: \|vt:RBLMX7t}7\|l[MK=c-8;war mM"u/MX(3x5\|='= E\:^UQI^,jfuunIO[e$Dws@Xm]f6J`NS<!@%K8(]ff7~I"#lSGR/+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49860	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	404	OUT	GET /m/22580ea3a018197c/original/IndList_PharmaLifeSci-408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	824	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 13850 Connection: close Date: Wed, 30 Oct 2024 03:01:24 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_PharmaLifeSci-408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: 3b74db0e-c780-f04b-2265-0a06affd070b Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 82514a5a8cf35fb3132b0b5ab9cb724c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: fT_aO3O6YyWIPhlh6hBMqg0GE2A5gusG7LPEblsBkzfMPELOdZh02w== Age: 4
2024-10-30 03:01:28 UTC	13850	IN	Data Raw: 52 49 46 46 12 36 00 00 57 45 42 50 56 50 38 20 06 36 00 00 d0 65 01 9d 01 2a 88 01 e0 01 3e 6d 32 95 47 a4 22 a4 a5 25 73 9b a8 a0 0d 89 67 6d c8 c8 92 8a c1 52 11 c9 a6 e6 b2 78 52 6f 87 cc 09 8b 2c 3c 3d f1 b6 49 ef 67 24 cd 95 b4 94 22 f4 c7 dc fe 7a bd 45 c8 77 79 bd ec a8 df c5 ed 4f 9f e7 6a de 14 09 d0 ab 8b f3 8e 65 74 2d 0c bc 32 71 71 d9 2c 4e 07 4b 28 74 cf e4 01 66 26 21 52 0d 68 cb 04 32 20 27 70 1f 92 38 d2 38 7d 03 05 27 c6 5d 57 c6 b7 3f 40 10 d2 ff 83 a8 1f e2 9f c8 a4 eb a9 ae 5f 00 f7 a8 61 e7 16 eb 3b 71 60 67 ad a9 82 65 91 d8 75 6a 6b 15 76 4a 90 61 c1 89 0a a6 fd 47 da 88 ea 41 1f e9 af 85 dd 27 ee 3b 00 c0 4e 13 35 65 9b b2 9b f5 d1 4f bd 5a f0 c9 70 7c d9 95 65 0a 60 27 b8 c4 e3 4a 83 90 0e 30 de 37 ae b2 e3 e1 18 2c 2c 92 52 db Data Ascii: RIFF6WEBPVP8 6e*>m2G"%sgmRxRo,<=Ig$"zEwyOjet-2qq,NK(tf&!Rh2 'p88}']W?@_a;q`geujkvJaGA';N5eOZp\|e`'J07,,R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49858	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	399	OUT	GET /m/1284fc475fef608a/original/IndList_PowerGen-408x500.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	819	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 43124 Connection: close Date: Wed, 30 Oct 2024 03:01:24 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="IndList_PowerGen-408x500.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: b09853e2-cdf3-5b59-fcde-888af79589df Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 eaedf92fd05c53aa96f20b6322b473e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: SJvYf4Vt3yEn0dPg47Wl2U0r64xTPmYB92S8ZKstUG5KFAcLf5uNyQ== Age: 4
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 52 49 46 46 6c a8 00 00 57 45 42 50 56 50 38 20 60 a8 00 00 b0 fb 01 9d 01 2a 88 01 e0 01 3e 6d 2e 93 46 24 22 a1 a1 2b f4 6c 78 80 0d 89 63 67 97 46 77 9b e7 95 43 d7 fb f8 c0 3c 7f e5 a3 f4 81 62 97 fc 03 44 ef d5 58 40 ad fd 86 f6 25 15 bc b7 e5 f4 85 6f 42 f1 8c d3 fe 5f fe 1f 34 df f1 fd 65 fe bb ea 37 ff 77 da 27 f6 df fa be 8a 5f ee bd 6d 7f e0 fa 60 fa 66 7a 7f fa e8 f4 32 fa da 7a 4d 5f 81 f1 ab f7 de 04 fe 73 f6 1f f2 7f c2 fd 7f fd e3 fe 9d 85 3f 88 ff 17 cc 5f eb 3f ae 33 a5 fc cf ff 0f f5 5e 27 fc 91 ff 93 fc cf b0 47 e6 1f d4 ff 61 3d 49 7e e3 f7 03 fe 6f 7f 8e c1 fe bf f6 ff d8 47 de 6f bf fa 17 7e cf 9c df c8 7a 83 f9 cd df e9 fc 2f 50 4f f1 5e 8e 7f ee f9 9c fd 7b fe 6f b1 2e ed 28 b8 70 4f db 4f 60 bf 20 a2 33 01 2c f3 55 8c 33 ec 1c 9b Data Ascii: RIFFlWEBPVP8 `*>m.F$"+lxcgFwC<bDX@%oB_4e7w'_m`fz2zM_s?_?3^'Ga=I~oGo~z/PO^{o.(pOO` 3,U3
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 6f e0 e0 c2 b2 28 24 10 45 e2 c1 9a ac db ac 29 77 9a e8 1a a1 33 a0 51 4e c6 a4 24 99 3e 75 f1 00 72 f8 93 8a 40 1c 8d ba c6 df 63 ef 4f c4 92 39 f9 7d 68 cc 8f 78 e7 34 27 06 ef 31 20 01 30 a9 16 b1 c7 d2 57 6d 42 74 d4 e7 a5 17 70 0a ac 05 d7 84 54 66 ed 3d 7d ca da f3 ee 57 02 8d 5b 9e 10 35 14 12 63 52 ee c5 d8 09 98 1f 95 6f c7 5d 73 18 8a 7f bb 8d 28 72 32 72 8c e8 bf 3f 73 02 ff 76 af 18 d0 c2 a0 e8 43 3c f5 0b 72 50 41 04 fa 07 68 c2 f0 e7 25 bb b6 5a be 2a e5 c9 26 cb 00 79 39 ff 12 f1 a7 83 9a 1a 2c d9 d0 0f 0d 5c b2 65 2c 5a df 7d 74 32 af 4f fb 18 00 e6 ef dd 40 04 d4 85 a5 c5 8d 68 c0 3c 6c c4 2c c5 7a 1f 66 c9 07 71 79 d8 f6 a0 9f 7f 46 1a 1d 7f 0b 55 d6 c2 9f 53 c1 12 4d c1 dd f0 47 79 5c be d0 f2 1e 9f 0f 70 f2 d4 b7 3a 29 69 6c b7 a6 a4 Data Ascii: o($E)w3QN$>ur@cO9}hx4'1 0WmBtpTf=}W[5cRo]s(r2r?svC<rPAh%Z*&y9,\e,Z}t2O@h<l,zfqyFUSMGy\p:)il
2024-10-30 03:01:28 UTC	10356	IN	Data Raw: 77 f1 5a d1 2b 30 6c 70 c2 23 e5 4a 43 be 9b e6 2b bc d1 72 19 93 da 7f fb 26 b1 d9 2e b9 7c 21 83 54 64 c0 8f 97 e7 fd 4b 93 28 77 89 75 f0 70 1c d1 bc 4f 45 d7 6d 39 fa 39 55 0a 22 2c 38 19 30 cb 8f 1c a6 de 9a 19 d7 12 65 57 a7 20 5c cd 2a ce 56 30 4b 8f d0 d6 0e 7e 82 51 5a 76 01 6c 31 8a d9 6e 15 38 33 d2 e6 bd 08 62 e1 7f c6 36 88 f9 95 bc 7c 26 7d 15 46 bc 23 c5 52 3a e1 c7 ec c0 32 aa 2c 86 ed a2 b1 5a e0 c4 4c de 4c 15 22 c8 8b 94 57 fc 83 f6 c2 26 ba a0 87 75 b1 4b 6f 9a b4 f6 68 28 86 39 e2 4b 33 d9 75 18 1f 71 56 a9 06 b3 18 20 3f 51 6e 09 65 c4 39 e8 64 b9 9e 97 ef aa bd b8 96 70 b7 64 08 fe 64 c8 26 33 b5 d3 00 fc c0 39 bd 07 87 3c c4 61 86 ad 97 2e b9 b4 63 fe 13 60 62 71 f7 14 86 2b 54 5c e9 4e b3 7f ee 62 1d 24 cd 93 b7 62 c4 8c ff 8f 3f Data Ascii: wZ+0lp#JC+r&.\|!TdK(wupOEm99U",80eW \*V0K~QZvl1n83b6\|&}F#R:2,ZLL"W&uKoh(9K3uqV ?Qne9dpdd&39<a.c`bq+T\Nb$b?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49861	18.245.60.33	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	359	OUT	GET /trackatron4.js HTTP/1.1 Host: cdn.loopanalytics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	526	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 15062 Connection: close Last-Modified: Tue, 01 Oct 2024 05:06:23 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 29 Oct 2024 16:26:54 GMT ETag: "9abc074d7ff14a653f3e74c353eff06b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0254a3d4b384cab4933ea28efe6685c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P5 X-Amz-Cf-Id: 5BXIzbJY2J7IVp3vHSySHU01p26TVZOmuoOET9ojVdsQow4RSWqgfQ== Age: 38075
2024-10-30 03:01:28 UTC	12792	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 74 72 61 63 6b 61 74 72 6f 6e 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 36 38 30 38 3a 28 65 2c 6f 2c 74 29 3d 3e 7b 76 61 72 20 6e 2c 63 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 61 29 3f 6e 2e 63 61 6c 6c 28 6f 2c 74 2c 6f 2c 65 29 3a 6e 29 7c 7c 28 65 2e 65 78 70 6f 72 74 73 3d 63 29 2c 21 30 2c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 2c 21 21 30 29 7b 76 61 72 20 72 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 2c 69 3d 77 69 6e 64 6f 77 2e 43 6f 6f 6b 69 65 73 3d 61 28 29 3b Data Ascii: /! For license information please see trackatron4.js.LICENSE.txt /(()=>{var e={6808:(e,o,t)=>{var n,c;!function(a){if(void 0===(c="function"==typeof(n=a)?n.call(o,t,o,e):n)\|\|(e.exports=c),!0,e.exports=a(),!!0){var r=window.Cookies,i=window.Cookies=a();
2024-10-30 03:01:28 UTC	2270	IN	Data Raw: 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 63 6f 6d 70 61 6e 79 29 2c 22 26 22 29 3a 22 26 22 29 3b 69 66 28 21 6f 28 29 2e 67 65 74 28 22 5f 74 72 61 63 6b 61 74 72 6f 6e 49 64 22 29 29 69 28 73 28 29 29 3b 6c 28 29 2c 6f 28 29 2e 67 65 74 28 22 5f 74 72 61 63 6b 61 74 72 6f 6e 49 64 22 29 26 26 28 6e 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 5f 63 6f 6f 6b 69 65 5f 69 64 3d 22 29 2e 63 6f 6e 63 61 74 28 6f 28 29 2e 67 65 74 28 22 5f 74 72 61 63 6b 61 74 72 6f 6e 49 64 22 29 2c 22 26 22 29 29 2c 6e 2b 3d 64 28 7b 61 6c 74 52 65 66 65 72 65 72 3a 74 2e 61 6c 74 52 65 66 65 72 65 72 2c 6c 6f 63 61 74 69 6f 6e 3a 74 2e 6c 6f 63 61 74 69 6f 6e 7d 29 2c 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 2e 73 72 63 3d 6e 7d 7d Data Ascii: concat(encodeURIComponent(e.company),"&"):"&");if(!o().get("_trackatronId"))i(s());l(),o().get("_trackatronId")&&(n="".concat(n,"_cookie_id=").concat(o().get("_trackatronId"),"&")),n+=d({altReferer:t.altReferer,location:t.location}),new Image(1,1).src=n}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49863	18.245.46.63	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	390	OUT	GET /companies/205035836/d625593f098d4d02b587/12/swap.js HTTP/1.1 Host: cdn.calltrk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	756	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 40282 Connection: close Date: Wed, 30 Oct 2024 03:01:28 GMT X-Xss-Protection: 1; mode=block Cache-Control: max-age=3600, public Etag: W/"585b39e8f0661a1f2cf6c9e55d9f44d6" Referrer-Policy: strict-origin-when-cross-origin Timing-Allow-Origin: * Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 9c709f8a-f255-44bf-9e77-f9e3e90a324a X-Runtime: 0.006967 X-Cache: Miss from cloudfront Via: 1.1 b6a955345e4fcc7881bd0a9815e8286e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: bXbQa8cvuUDBLpfHytdnvbp8iMyp32ydWIPTONaijzGmNbwvIRSKrA==
2024-10-30 03:01:28 UTC	3556	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 72 61 70 70 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 64 6f 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 2c 65 2e 64 6f 63 75 6d 65 6e 74 55 52 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 7d 2c 65 2e 64 6f 63 75 6d 65 6e 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 3a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 2c 65 2e 69 73 44 65 62 75 67 3d Data Ascii: !function(){"use strict";var Wrappers=function(){function e(){}return e.documentReferrer=function(){return document.referrer},e.documentURL=function(){return document.URL},e.documentCookie=function(e){return e?document.cookie=e:document.cookie},e.isDebug=
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 61 29 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 61 3d 22 63 61 6c 6c 74 72 6b 2d 22 2b 65 5b 74 5d 3b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 61 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 7d 28 29 2c 53 65 73 73 Data Ascii: dow.localStorage.getItem(a);if(n)return JSON.parse(n)}return null},t.removeItem=function(){for(var e=[],r=0;r<arguments.length;r++)e[r]=arguments[r];for(var t=0;t<e.length;t++){var a="calltrk-"+e[t];window.localStorage.removeItem(a)}return null},t}(),Sess
2024-10-30 03:01:28 UTC	9662	IN	Data Raw: 70 2e 6c 61 73 74 50 6f 6c 6c 3c 74 7c 7c 28 43 61 6c 6c 54 72 6b 53 77 61 70 2e 6c 61 73 74 50 6f 6c 6c 3d 72 2c 53 65 73 73 69 6f 6e 2e 69 73 4d 75 6c 74 69 28 29 7c 7c 28 65 2e 69 64 73 3d 53 65 73 73 69 6f 6e 2e 6e 61 6d 65 73 70 61 63 65 49 64 73 28 29 29 2c 65 2e 70 65 72 66 3d 50 65 72 66 6f 72 6d 61 6e 63 65 2e 72 75 6e 74 69 6d 65 50 65 72 66 44 61 74 61 28 29 2c 44 6f 6d 2e 67 65 74 53 63 72 69 70 74 28 61 2e 70 6f 6c 6c 53 65 73 73 69 6f 6e 55 52 4c 28 29 2c 65 29 29 7d 2c 61 2e 70 6f 6c 6c 49 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 43 61 6c 6c 54 72 6b 2e 66 69 72 73 74 4e 61 6d 65 73 70 61 63 65 28 29 2e 73 65 73 73 69 6f 6e 5f 70 6f 6c 6c 5f 69 6e 74 65 72 76 61 6c 3b 43 61 6c 6c 54 72 6b 53 77 61 70 2e 70 6f 6c 6c 49 Data Ascii: p.lastPoll<t\|\|(CallTrkSwap.lastPoll=r,Session.isMulti()\|\|(e.ids=Session.namespaceIds()),e.perf=Performance.runtimePerfData(),Dom.getScript(a.pollSessionURL(),e))},a.pollInit=function(){var e=CallTrk.firstNamespace().session_poll_interval;CallTrkSwap.pollI
2024-10-30 03:01:28 UTC	8226	IN	Data Raw: 79 70 65 2e 68 61 73 53 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 6e 75 6d 62 65 72 5f 74 61 72 67 65 74 5f 65 78 69 73 74 73 7c 7c 30 3c 74 68 69 73 2e 73 65 73 73 69 6f 6e 5f 65 78 61 63 74 5f 74 61 72 67 65 74 73 2e 6c 65 6e 67 74 68 7d 2c 43 61 6c 6c 54 72 6b 53 77 61 70 2e 73 77 61 70 45 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 43 61 6c 6c 54 72 6b 53 77 61 70 3b 65 2e 73 74 61 72 74 53 77 61 70 73 28 29 2c 77 69 6e 64 6f 77 2e 53 71 75 61 72 65 73 70 61 63 65 26 26 77 69 6e 64 6f 77 2e 53 71 75 61 72 65 73 70 61 63 65 2e 6f 6e 49 6e 69 74 69 61 6c 69 7a 65 26 26 77 69 6e 64 6f 77 2e 53 71 75 61 72 65 73 70 61 63 65 2e 6f 6e 49 6e 69 Data Ascii: ype.hasSessionTracker=function(){return this.session_number_target_exists\|\|0<this.session_exact_targets.length},CallTrkSwap.swapEntry=function(){var e=CallTrkSwap;e.startSwaps(),window.Squarespace&&window.Squarespace.onInitialize&&window.Squarespace.onIni
2024-10-30 03:01:28 UTC	2454	IN	Data Raw: 28 76 61 72 20 72 20 69 6e 20 65 3d 65 26 26 65 5b 6e 73 2e 69 64 5d 7c 7c 7b 7d 29 6e 5b 72 5d 3d 50 68 6f 6e 65 4e 75 6d 62 65 72 73 2e 64 65 66 61 75 6c 74 4e 75 6d 62 65 72 46 6f 72 6d 61 74 28 65 5b 72 5d 29 3b 74 28 6e 29 7d 29 2c 6e 7d 2c 73 2e 6b 6e 6f 77 6e 53 77 61 70 41 73 73 69 67 6e 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 3b 73 2e 65 61 63 68 4e 61 6d 65 73 70 61 63 65 28 66 75 6e 63 74 69 6f 6e 28 6e 73 29 7b 76 61 72 20 65 3d 6e 73 2e 67 65 74 53 74 6f 72 65 64 53 77 61 70 73 28 29 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 74 5b 72 5d 3d 65 5b 72 5d 7d 29 3b 66 6f 72 28 76 61 72 20 65 3d 43 61 6c 6c 54 72 6b 53 77 61 70 2e 6d 61 74 63 68 69 6e 67 53 6f 75 72 63 65 54 72 61 63 6b 65 72 73 28 29 2c 72 Data Ascii: (var r in e=e&&e[ns.id]\|\|{})n[r]=PhoneNumbers.defaultNumberFormat(e[r]);t(n)}),n},s.knownSwapAssignments=function(){var t={};s.eachNamespace(function(ns){var e=ns.getStoredSwaps();for(var r in e)t[r]=e[r]});for(var e=CallTrkSwap.matchingSourceTrackers(),r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49864	52.222.236.43	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	372	OUT	GET /modules.625495a901d247c3e8d4.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:28 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226541 Connection: close Date: Mon, 28 Oct 2024 16:03:23 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "ec34f7a549bb7b8a0957652de86e3475" Last-Modified: Mon, 28 Oct 2024 16:02:55 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 387adc951beb5181d840dfb5d1f09488.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: J0QhYj9s5Ag29SUH-Eyvdo5XFxC-Sq3UYk_0nzwWmumUiUwNF_vClA== Age: 125885
2024-10-30 03:01:28 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 32 35 34 39 35 61 39 30 31 64 32 34 37 63 33 65 38 64 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.625495a901d247c3e8d4.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-10-30 03:01:28 UTC	15596	IN	Data Raw: 22 2c 22 66 72 22 2c 22 68 65 22 2c 22 68 72 22 2c 22 68 75 22 2c 22 69 64 22 2c 22 69 74 22 2c 22 6a 61 22 2c 22 6b 6f 22 2c 22 6c 74 22 2c 22 6c 76 22 2c 22 6d 69 73 22 2c 22 6e 62 22 2c 22 6e 6c 22 2c 22 70 6c 22 2c 22 70 74 5f 42 52 22 2c 22 70 74 22 2c 22 72 6f 22 2c 22 72 75 22 2c 22 73 6b 22 2c 22 73 6c 22 2c 22 73 71 22 2c 22 73 72 22 2c 22 73 76 22 2c 22 73 77 22 2c 22 74 68 22 2c 22 74 6c 22 2c 22 74 72 22 2c 22 75 6b 22 2c 22 76 69 22 2c 22 7a 68 5f 43 4e 22 2c 22 7a 68 5f 54 57 22 5d 2c 63 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 50 4f 50 4f 56 45 52 3a 22 70 6f 70 6f 76 65 72 22 2c 46 55 4c 4c 5f 53 43 52 45 45 4e 3a 22 66 75 6c 6c 5f 73 63 72 65 65 6e 22 2c 45 58 54 45 52 4e 41 4c 3a 22 65 78 74 65 72 6e 61 6c 5f 6c 69 6e 6b 22 2c 42 Data Ascii: ","fr","he","hr","hu","id","it","ja","ko","lt","lv","mis","nb","nl","pl","pt_BR","pt","ro","ru","sk","sl","sq","sr","sv","sw","th","tl","tr","uk","vi","zh_CN","zh_TW"],c=Object.freeze({POPOVER:"popover",FULL_SCREEN:"full_screen",EXTERNAL:"external_link",B
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 4f 4c 54 7c 46 65 6e 6e 65 63 7c 49 72 69 73 7c 4d 61 65 6d 6f 7c 4d 69 6e 69 6d 6f 7c 4d 6f 62 69 7c 6d 6f 77 73 65 72 7c 4e 65 74 46 72 6f 6e 74 7c 4e 6f 76 61 72 72 61 7c 50 72 69 73 6d 7c 52 58 2d 33 34 7c 53 6b 79 66 69 72 65 7c 54 65 61 72 7c 58 56 36 38 37 35 7c 58 56 36 39 37 35 7c 47 6f 6f 67 6c 65 2e 57 69 72 65 6c 65 73 73 2e 54 72 61 6e 73 63 6f 64 65 72 2f 69 29 7c 7c 74 28 2f 4f 70 65 72 61 2f 69 29 26 26 74 28 2f 57 69 6e 64 6f 77 73 2e 4e 54 2e 35 2f 69 29 26 26 74 28 2f 48 54 43 7c 58 64 61 7c 4d 69 6e 69 7c 56 61 72 69 6f 7c 53 41 4d 53 55 4e 47 5c 2d 47 54 5c 2d 69 38 30 30 30 7c 53 41 4d 53 55 4e 47 5c 2d 53 47 48 5c 2d 69 39 2f 69 29 3f 22 6d 6f 62 69 6c 65 22 3a 74 28 2f 57 69 6e 64 6f 77 73 2e 28 4e 54 7c 58 50 7c 4d 45 7c 39 29 2f Data Ascii: OLT\|Fennec\|Iris\|Maemo\|Minimo\|Mobi\|mowser\|NetFront\|Novarra\|Prism\|RX-34\|Skyfire\|Tear\|XV6875\|XV6975\|Google.Wireless.Transcoder/i)\|\|t(/Opera/i)&&t(/Windows.NT.5/i)&&t(/HTC\|Xda\|Mini\|Vario\|SAMSUNG\-GT\-i8000\|SAMSUNG\-SGH\-i9/i)?"mobile":t(/Windows.(NT\|XP\|ME\|9)/
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 67 6e 6f 72 65 43 6c 61 73 73 4c 69 73 74 29 7c 7c 73 2e 74 65 73 74 28 65 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 72 2e 70 75 73 68 28 67 28 62 28 65 29 29 29 7d 29 29 2c 72 2e 6c 65 6e 67 74 68 3f 22 2e 22 2b 72 2e 6a 6f 69 6e 28 22 2e 22 29 3a 22 22 29 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 74 2e 64 69 73 61 6c 6c 6f 77 65 64 54 61 67 4e 61 6d 65 43 68 61 72 61 63 74 65 72 73 52 45 2c 22 22 29 7d 3b 72 65 74 75 72 6e 20 63 28 65 29 7d 76 61 72 20 77 3d 7b 32 3a 7b 69 67 6e 6f 72 65 43 6c 61 73 73 4c 69 73 74 3a 5b 22 6f 76 65 72 22 2c 22 68 6f 76 65 72 22 2c 22 61 63 74 69 76 65 22 2c 22 73 65 6c 65 63 74 65 64 22 2c 22 73 63 72 6f 6c 6c 65 64 22 5d 2c 69 67 6e 6f 72 65 42 6f 64 79 43 6c 61 73 73 65 Data Ascii: gnoreClassList)\|\|s.test(e)\|\|""===e\|\|r.push(g(b(e)))})),r.length?"."+r.join("."):"")},_=function(e){return e.replace(t.disallowedTagNameCharactersRE,"")};return c(e)}var w={2:{ignoreClassList:["over","hover","active","selected","scrolled"],ignoreBodyClasse
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 74 28 7b 70 61 67 65 56 69 73 69 74 4b 65 79 3a 76 6f 69 64 20 30 2c 70 61 67 65 49 6e 66 6f 3a 76 6f 69 64 20 30 2c 70 61 67 65 43 6f 6e 74 65 6e 74 3a 76 6f 69 64 20 30 2c 74 61 67 73 54 6f 50 72 6f 63 65 73 73 3a 5b 5d 2c 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 3a 5b 5d 2c 61 63 74 69 76 65 3a 21 31 7d 29 2c 68 6a 2e 65 76 65 6e 74 53 74 72 65 61 6d 2e 63 6c 65 61 72 50 61 67 65 43 6f 6e 74 65 6e 74 28 29 2c 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 72 65 73 65 74 4d 75 74 61 74 69 6f 6e 4c 69 73 74 65 6e 65 72 73 28 29 2c 47 3d 21 31 7d 2c 69 6e 69 74 69 61 6c 69 7a 65 54 72 65 65 4d 69 72 72 6f 72 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 6d 75 74 61 74 69 6f 6e Data Ascii: t({pageVisitKey:void 0,pageInfo:void 0,pageContent:void 0,tagsToProcess:[],autoTagsToProcess:[],active:!1}),hj.eventStream.clearPageContent(),hj.treeMirror.resetMutationListeners(),G=!1},initializeTreeMirror:hj.tryCatch((function(e){hj.treeMirror.mutation
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 61 72 65 6e 74 4e 6f 64 65 3f 6e 2e 61 64 64 65 64 3d 21 31 3a 6e 2e 6f 6c 64 50 61 72 65 6e 74 4e 6f 64 65 3d 65 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 72 65 6d 6f 76 65 64 46 72 6f 6d 50 61 72 65 6e 74 22 29 2c 74 68 69 73 2e 69 6e 73 65 72 74 65 64 49 6e 74 6f 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 68 69 6c 64 4c 69 73 74 3d 21 30 2c 6e 2e 61 64 64 65 64 3d 21 30 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 69 6e 73 65 72 74 65 64 49 6e 74 6f 50 61 72 65 6e 74 22 29 2c 74 68 69 73 2e 67 65 74 4f 6c 64 50 61 72 65 6e 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 2e 63 68 69 6c 64 4c 69 73 74 29 7b 69 66 28 6e 2e 6f 6c 64 50 61 72 65 6e 74 4e Data Ascii: arentNode?n.added=!1:n.oldParentNode=e}),"NodeChange.removedFromParent"),this.insertedIntoParent=hj.tryCatch((function(){n.childList=!0,n.added=!0}),"NodeChange.insertedIntoParent"),this.getOldParent=hj.tryCatch((function(){if(n.childList){if(n.oldParentN
2024-10-30 03:01:29 UTC	1622	IN	Data Raw: 65 28 73 29 2c 61 2e 70 75 73 68 28 69 29 2c 65 2e 64 65 6c 65 74 65 4e 6f 64 65 28 72 29 2c 72 3d 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 7d 6e 3d 65 2e 6b 65 79 73 28 29 7d 7d 29 29 2c 61 7d 29 2c 22 54 72 65 65 4d 69 72 72 6f 72 43 6c 69 65 6e 74 2e 73 65 72 69 61 6c 69 7a 65 41 64 64 65 64 41 6e 64 4d 6f 76 65 64 22 29 2c 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 41 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 74 65 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 5b 6e 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e Data Ascii: e(s),a.push(i),e.deleteNode(r),r=r.nextSibling}n=e.keys()}})),a}),"TreeMirrorClient.serializeAddedAndMoved"),this.serializeAttributeChanges=hj.tryCatch((function(e){var t=new te;return Object.keys(e).forEach((function(n){e[n].forEach((function(e){var r=t.
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 29 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 50 6f 73 74 4d 75 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 65 3d 6f 2e 70 6f 73 74 4d 75 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 73 2e 73 68 69 66 74 28 29 3b 29 65 28 29 7d 29 2c 22 54 72 65 65 4d 69 72 72 6f 72 43 6c 69 65 6e 74 2e 70 72 6f 63 65 73 73 50 6f 73 74 4d 75 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 73 22 29 2c 74 68 69 73 2e 6f 6e 4d 75 74 61 74 69 6f 6e 3d 6e 2c 74 68 69 73 2e 6e 65 78 74 49 64 3d 31 2c 74 68 69 73 2e 72 65 64 61 63 74 65 64 43 6f 6e 74 65 6e 74 49 64 3d 2d 31 30 30 2c 74 68 69 73 2e 6d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 3d 5b 5d 2c 74 68 Data Ascii: ),this.processPostMutationCallbacks=hj.tryCatch((function(){for(var e=void 0;e=o.postMutationCallbacks.shift();)e()}),"TreeMirrorClient.processPostMutationCallbacks"),this.onMutation=n,this.nextId=1,this.redactedContentId=-100,this.mutationSummaries=[],th
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 35 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 6e 29 7b 74 3d 74 7c 7c 68 6a 2e 68 71 2e 6e 6f 6f 70 2c 6e 3d 6e 7c 7c 68 6a 2e 68 71 2e 6e 6f 6f 70 2c 68 6a 2e 68 71 2e 61 6a 61 78 28 7b 75 72 6c 3a 65 2c 73 75 63 63 65 73 73 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 74 2c 22 44 61 74 61 22 29 2c 65 72 72 6f 72 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 6e 2c 22 44 61 74 61 22 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 34 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 34 5d 3a 7b 63 6f 6e 74 65 6e 74 54 79 70 65 3a Data Ascii: 553:function(e,t,n){"use strict";function r(e,t,n){t=t\|\|hj.hq.noop,n=n\|\|hj.hq.noop,hj.hq.ajax({url:e,success:hj.tryCatch(t,"Data"),error:hj.tryCatch(n,"Data")})}function o(e,t,n,r){var o=arguments.length>4&&void 0!==arguments[4]?arguments[4]:{contentType:
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 2e 68 71 2e 69 6e 41 72 72 61 79 28 65 2c 68 6a 2e 68 71 2e 76 61 6c 75 65 73 28 6f 29 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 73 6f 6d 65 28 43 29 7d 29 29 7d 3b 72 65 74 75 72 6e 20 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 70 61 67 65 56 69 73 69 74 4b 65 79 3a 65 7c 7c 70 7d 3b 53 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 74 29 7d 29 2c 22 64 61 74 61 22 29 2c 6e 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d 53 2e 65 76 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 6f 3d Data Ascii: .hq.inArray(e,hj.hq.values(o))},E=function(e){return e.some((function(e){return Object.keys(e).some(C)}))};return t=hj.tryCatch((function(e){var t={pageVisitKey:e\|\|p};S.events.push(t)}),"data"),n=hj.tryCatch((function(){for(var e,n=S.events.length,r=[],o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49865	18.66.147.82	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	488	OUT	GET /beacon?_wid=1347&_referer_url=&_action_name=pageview&_type=pageview&_cookie_id=snzthm7h2&_alt_referer=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F& HTTP/1.1 Host: www.loopanalytics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:29 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 03:01:29 GMT x-amzn-Remapped-Date: Wed, 30 Oct 2024 03:01:29 GMT x-amzn-RequestId: 27ac4821-452a-4140-af78-fa154862062d x-amz-apigw-id: AcYtcEVBoAMEjqA= Cache-Control: must-revalidate, no-cache, no-store, private X-Vapor-Base64-Encode: True X-Amzn-Trace-Id: Root=1-6721a188-48e43492651b05b27e5432e2 Pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 a5a8e743f28968822c126102a78bb7c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: mK4UYWkf6xQd2vnfaH9jvC4E6c2wGKN9qUMyj7HoeAdI_xIbcpEtAQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49866	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	1570	OUT	GET /app/themes/ovivo/dist/images/favicon/favicon-32x32.png HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:28 UTC	1421	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:28 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 22 Jul 2022 16:32:23 GMT ETag: "3a6-5e46760f533c0" Accept-Ranges: bytes Content-Length: 934 Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: image/png
2024-10-30 03:01:28 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 58 49 44 41 54 58 85 ed 97 4b 68 9c 55 14 c7 7f 67 66 32 19 67 ae d3 d8 4c 63 9b 4a 28 a9 56 0d 55 6a 25 1a 5c 48 02 46 25 14 cc 47 c1 60 d3 4d b5 11 1f 48 69 c3 7c 50 7c a2 0b c1 85 8f 6e 75 51 c9 a6 4a a1 b5 d0 82 28 d5 96 2e 5a 0d d6 17 51 88 1b 6b b0 8d 46 d3 d8 34 8f c9 64 fe 2e 66 92 7c 33 79 60 a4 89 42 fb df dc 7b ee f9 ee f9 ce e3 7f cf e5 c2 0c 42 2c 8c 25 d5 97 2a 97 4d b6 82 90 2b 51 e4 4a 36 2d b5 fe ff 89 65 e5 c4 7f c6 81 ab 1b 9e f3 37 46 02 72 f0 34 cc 85 2b a6 f7 12 e9 6a 61 af 01 8f da 3c 9b 97 44 6e 4d f8 49 8c 34 b0 07 88 23 46 22 2c 43 1f f0 9c 1f 03 3d 05 ec 05 52 Data Ascii: PNGIHDR szzpHYs+XIDATXKhUgf2gLcJ(VUj%\HF%G`MHi\|P\|nuQJ(.ZQkF4d.f\|3y`B{B,%*M+QJ6-e7Fr4+ja<DnMI4#F",C=R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49867	52.222.236.43	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	377	OUT	GET /browser-perf.8417c6bba72228fa2e29.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:29 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 5259 Connection: close Date: Wed, 24 Jan 2024 14:32:12 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "fb9f7dae39619642ed5890e40763ef2e" Last-Modified: Wed, 24 Jan 2024 14:31:37 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2ffde5fadc46cbcc3a678e8713ed76b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: uza76BeMsWOPbeoBLamfz4j1q2Whlvl_zcix104GA3fsrpd5S6ld2w== Age: 24150556
2024-10-30 03:01:29 UTC	5259	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 65 28 74 29 7d Data Ascii: !function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49868	18.245.46.63	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	387	OUT	GET /group/0/d625593f098d4d02b587/12/swap_session.json HTTP/1.1 Host: js.calltrk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:29 UTC	705	IN	HTTP/1.1 400 Bad Request Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Wed, 30 Oct 2024 03:01:29 GMT X-Runtime: 0.000943 X-Xss-Protection: 1; mode=block Cache-Control: no-cache Referrer-Policy: strict-origin-when-cross-origin Vary: Accept-Encoding Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 3def7d2c-787a-4fd4-a515-a7c0641c576b X-Cache: Error from cloudfront Via: 1.1 5335ce80c0b9264bc591cce2c73bef5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: iTaHFb_G2PdTgh2dHLWpS24GsXIjh0YapDCYxYKv_UyUihnSR-rONw==
2024-10-30 03:01:29 UTC	23	IN	Data Raw: 31 31 0d 0a 2f 2a 20 62 61 64 20 72 65 71 75 65 73 74 20 2a 2f 0d 0a Data Ascii: 11/* bad request */
2024-10-30 03:01:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49869	18.245.46.63	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:28 UTC	604	OUT	GET /group/0/d625593f098d4d02b587/12/icap.js?t=1730257284920&ga=GA1.1.833971690.1730257278&GoogleAnalytics4__ga=GA1.1.833971690.1730257278&GoogleAnalytics4__ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0&uuid=000196a6-08bb-4e64-89ba-1051944f1b33&ids%5B%5D=205035836 HTTP/1.1 Host: js.calltrk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:29 UTC	744	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 22 Connection: close Date: Wed, 30 Oct 2024 03:01:29 GMT X-Xss-Protection: 1; mode=block Cache-Control: max-age=0, private, must-revalidate Etag: W/"1643b5cec44cc597bc2cce3448ce5434" Referrer-Policy: strict-origin-when-cross-origin Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: d210dae1-1f08-4b33-abd4-a54c0b7f2362 X-Runtime: 0.014578 X-Cache: Miss from cloudfront Via: 1.1 6c21a88f98dc05bf345d31b96407e6d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: z7IF9c2Ry44Z3loGRz14y2is5AIcFH_ay4c5Nvfb6cHkA2JxoGddtw==
2024-10-30 03:01:29 UTC	22	IN	Data Raw: 2f 2a 20 63 68 61 6e 67 65 73 20 72 65 63 6f 72 64 65 64 20 2a 2f Data Ascii: /* changes recorded */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49870	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:29 UTC	402	OUT	GET /m/2b78e8c676e644b5/original/CTABanner-Chemical-1920x650.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:29 UTC	822	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 92582 Connection: close Date: Wed, 30 Oct 2024 03:01:26 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="CTABanner-Chemical-1920x650.webp" Access-Control-Allow-Origin: * X-API-Correlation-Id: e6ac5ec3-cf30-4d77-f835-94188dbaa695 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 bfad099b4e1fa2ec7d21876e0293dc20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: cVwy9H4klvZReRSE2h9zZFq5l1lixY0JNqZap7sOdYqsysDjqU4gjg== Age: 3
2024-10-30 03:01:29 UTC	15562	IN	Data Raw: 52 49 46 46 9e 69 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 00 00 00 00 7f 07 00 89 02 00 56 50 38 20 2a 69 01 00 90 b2 08 9d 01 2a 80 07 8a 02 00 00 00 25 a5 05 73 8f 46 db 41 f2 ab c3 17 ce d9 d1 9c 67 78 75 6f fb 6d 54 4f 6d 27 9f e5 df f4 3f 78 fd 79 fc cf f9 ef ba df 3f fc cf fc c3 f8 9f f4 ff f0 3f c9 ff ef ff 75 f3 27 ff 3f e6 87 95 6f 63 fb ee f4 73 f9 cf e6 1f dc ff 94 fd c4 ff 1d fb 97 f4 b7 fe 2f 38 ff 41 fe ef ff 07 e7 0f fb 3f 94 1f cc 3f ae 7f a3 ff 0d fb 7b fd f7 f7 0b ee c3 96 9e 97 dd 27 ef 57 88 7f f8 ff e2 bf d1 ff e4 ff 21 ef fb de 4f 61 7e 79 fd c3 ff a3 ff 6b ff 6b fe 37 f7 a7 fc ff ff ff fc ff 80 79 85 d0 4f f5 7f ab bf fb 5f f9 7f d7 7f b5 fd b9 f8 cf f5 87 fd ef f4 7f ea 7f 6a be c4 ff 9f 7f 6a ff 67 fe 33 f7 7b fc df ff ff f9 7e Data Ascii: RIFFiWEBPVP8XVP8 i%sFAgxuomTOm'?xy??u'?ocs/8A??{'W!Oa~ykk7yO_jjg3{~
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 5d d3 1b b8 db 91 f5 66 65 d0 52 74 46 1a 7b 22 1e 4a fb 68 08 90 1d 64 c5 58 a8 aa c3 7d 7d c0 ac cf 27 cb 29 72 9b f9 b4 49 4e a6 fa 63 88 80 0a dc d2 be 27 52 d9 24 3b 92 38 ac 62 3d 90 b8 24 e1 aa 56 c2 9d e7 f2 85 c2 cc c8 c4 9c 08 e1 aa b0 2a ec bd 79 e8 a3 58 b9 1d f8 c2 dc 4b a3 ab 99 9f 93 9c 6c 47 a3 87 7d 95 b0 7b 6d ff 6b db 0d c0 0c b6 fa 6d 3e 78 e7 e1 4d 37 90 3b 00 fd cd 9a f0 e5 84 6a e3 a5 47 a0 6b 7d c0 26 30 b0 38 8a f2 31 4c 55 23 ed c8 d6 6b c5 7c 9a be cd a0 07 6e 10 70 25 67 65 76 49 e3 47 0f 44 72 a7 45 23 f1 54 a6 73 2f 14 c8 31 10 8d b3 6e 5e 19 c2 2b a5 6e fd 57 5a 1f be 90 ac 46 c6 e2 8a a2 b9 7d 07 bb 2c ff 34 50 86 45 4c 43 4e 23 c9 ae 78 b5 b0 37 6f 7f 65 32 a8 30 20 32 52 3f 7a a6 9f bc cc 28 25 d2 b6 4c 60 1a 13 7f bb d4 Data Ascii: ]feRtF{"JhdX}}')rINc'R$;8b=$V*yXKlG}{mkm>xM7;jGk}&081LU#k\|np%gevIGDrE#Ts/1n^+nWZF},4PELCN#x7oe20 2R?z(%L`
2024-10-30 03:01:29 UTC	4598	IN	Data Raw: f9 42 67 b5 7a 11 8d b9 44 e5 1f 41 ff a6 df 65 2b 50 7f 1f d9 9a b2 4c a6 51 5b 21 a8 38 d6 05 14 d0 f8 6e e0 d8 a4 7d 9b d6 3c 98 d1 22 51 44 d4 c5 41 58 79 1c 4d 84 0a 55 f7 7e ca 1b a9 a7 fc 6b 24 3b 87 f9 3b 28 f6 19 89 a3 8d 39 1d 43 ce 88 61 3d 33 3e f6 b6 71 3e 5f 85 12 82 0f 8f 39 64 48 b7 33 f2 e8 be 27 c6 1b fe c9 d7 4f 9c b3 84 0e eb 21 e6 26 4f 8b fc 11 02 03 73 72 a9 9a 0b ee fe fa 45 f8 ac f2 a5 c8 9a 74 e3 bb 4d ea 49 d1 20 b2 54 c4 ce 0d f1 15 ca 64 6e 10 28 27 b0 de e3 3c 81 2a e1 14 3d 81 62 86 eb 7c 79 9c e7 6d b3 b2 3f b3 2c f6 fe 75 48 1c 87 bc 47 b9 f3 13 be bf a6 d7 51 3f f1 1b 05 9b e2 75 52 16 ff 28 a4 80 02 d1 28 e0 67 fb 51 b4 00 4a 8e 7e 3d 7d 55 a4 36 04 98 00 8b 3d 06 1b 89 da 1b e3 52 81 47 05 f6 7a e4 79 ee 09 e2 b6 c6 3f Data Ascii: BgzDAe+PLQ[!8n}<"QDAXyMU~k$;;(9Ca=3>q>_9dH3'O!&OsrEtMI Tdn('<*=b\|ym?,uHGQ?uR((gQJ~=}U6=RGzy?
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: fa 87 c2 ec 46 a6 07 76 31 c8 18 5b f1 28 65 6b c1 53 ab 2a 90 31 89 c3 b4 b6 3f 59 c8 8b 34 af 15 03 7b 45 f9 1e 58 63 ad 8a 6c be e1 b2 b7 63 5a 74 40 2d 11 c7 15 82 e3 e4 ce ba b8 08 7b 45 3b dd bb 77 09 76 67 27 50 34 95 30 ba b0 b6 ed 02 54 9a e0 02 71 24 61 72 0b e0 14 26 73 90 40 40 0a ad a7 c2 0a ec 7d bc 32 45 37 4d 53 53 59 da 63 62 3e e5 3d 7c b7 31 55 09 a3 c2 55 34 c5 06 2b f0 94 a9 58 b7 4a ea 39 67 a0 1d 45 d7 d3 98 ff 98 1a cc 7b 75 78 2a 18 8a 87 7a 2b c6 ed c5 86 24 b4 2d 97 33 d7 d1 2b f3 9a 8c 8a 24 80 4d e5 fd 55 58 64 bd 63 8e 15 fc 82 d6 6d c3 ac 4d 72 50 f8 de dc a0 e8 33 d9 37 d8 63 53 a1 97 4c 7b f9 e8 f4 18 39 71 b1 fd c2 7c e7 33 b5 75 0b 8e 4e 4c 62 2f ad 58 9c 62 fb 24 02 27 a5 71 73 15 8b 21 16 47 d1 05 5a b8 e8 31 64 ae 5d Data Ascii: Fv1[(ekS1?Y4{EXclcZt@-{E;wvg'P40Tq$ar&s@@}2E7MSSYcb>=\|1UU4+XJ9gE{uxz+$-3+$MUXdcmMrP37cSL{9q\|3uNLb/Xb$'qs!GZ1d]
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 37 e1 c1 0a 2b f3 71 72 43 0a b5 31 39 ed 69 ad 82 ff 02 d8 43 65 fd 76 f5 30 83 4a aa 60 a7 a6 a6 ba c7 0d a6 ef 4e 0a e3 b9 94 04 14 8b 65 8e 5b d1 1d 4d 20 69 19 ba 8d ee 16 ea c7 cd 4f 5a 36 fa c9 97 b0 68 a5 66 85 05 eb 29 ae 8d e6 68 e0 28 9f 61 66 94 af db 15 b5 d7 8f 53 f9 f2 75 4f 85 bb 62 9b 3c 1d 05 bf 87 ac 45 a2 a5 ec c2 0a 35 07 42 24 9f f9 8c 81 bf 21 e3 30 09 36 e1 f0 33 8e 0f aa 34 a5 cc c6 c8 3b 1e 6c 56 5c 21 25 a0 9e 15 61 19 fc 9d 9c 06 7f fd 09 cc b0 82 62 c9 8c 5a 6b 0c 17 43 2d 94 4e 49 63 a8 3b 48 51 a8 4b b5 73 77 82 7c 44 ab c5 dd 24 69 54 5b b3 6d 75 2e 9d 50 6a ed 46 40 37 3c fb bf 84 0d 41 7c 81 ce db 7c 90 f1 bd 1b b2 b1 85 91 ee 4d e8 2b 02 31 33 ed f7 4e 49 34 31 92 89 b7 62 16 ac 8d 67 08 92 b0 e1 30 e4 1a 00 4d 24 fa e2 Data Ascii: 7+qrC19iCev0J`Ne[M iOZ6hf)h(afSuOb<E5B$!0634;lV\!%abZkC-NIc;HQKsw\|D$iT[mu.PjF@7<A\|\|M+13NI41bg0M$
2024-10-30 03:01:29 UTC	16384	IN	Data Raw: 61 dc 33 4c ef e2 30 dd 06 ac a6 c1 b2 58 32 69 9c 80 17 f9 00 d1 90 27 73 27 58 3a e8 77 60 dc 30 91 e8 09 2f ab 48 77 7a ff dc e7 a1 e5 bd 1c 0b c4 9f e7 a9 fd 88 72 7c c1 67 13 23 a9 09 07 fc 7b a0 46 1a ea fd 2d 97 8a 30 74 bd 1c 73 8b f4 69 3f 80 6c f2 dc 1e c1 67 10 b1 f5 8e d8 7c 71 9b 46 7c 90 c5 e7 72 b8 65 95 1d 1d ad c5 56 89 2f f4 82 71 b6 f2 c7 21 d4 30 a0 ad 7d 47 75 6d 21 30 45 70 6a d3 5d 41 ad fe 44 0b e7 9d f3 f9 76 16 e3 e6 df c5 fc 90 dc 4f 76 38 f5 31 20 80 25 0d 6a 85 00 c1 20 da 20 ce 76 2f 52 5c fb 0c 3a f5 de 61 85 11 12 9e 21 5f 1b a9 51 a5 cc c0 ca d0 65 a0 80 a0 b1 db e4 6a 77 95 00 3c 6e 5c 67 54 2d d8 d5 99 3e da cf b7 83 20 0b 4f a4 aa 42 a7 3c 34 2e 0d 7d cb 0d 15 ab 77 58 fa 6e 82 15 50 25 0f 66 6a 76 73 9b 08 b2 f0 56 dc Data Ascii: a3L0X2i's'X:w`0/Hwzr\|g#{F-0tsi?lg\|qF\|reV/q!0}Gum!0Epj]ADvOv81 %j v/R\:a!_Qejw<n\gT-> OB<4.}wXnP%fjvsV
2024-10-30 03:01:29 UTC	6886	IN	Data Raw: 61 15 1f f2 37 17 a0 a8 ca 49 5f c0 8a 32 f3 42 8a 76 ce 3f 5e 87 4a de 23 ef 5c 20 69 5a e5 5c c3 41 fe da 1f 74 2b 8e d9 8c 68 d2 9a 01 74 fc a7 72 bf 53 bd aa 51 fe 20 ca e9 e4 dc 30 21 28 54 c4 6a ff e5 4b ba 74 dc b3 90 ba 5c e9 f7 f3 dd b8 06 f3 6c 84 cc ab 10 d3 38 3f bd 2b 40 9a db 32 f2 16 68 33 bb 63 90 e6 2e 2b 97 17 74 00 c7 06 f7 c0 09 da e5 1a c0 24 0e 45 27 43 2c 65 4d 78 1b fd f6 02 ec 52 02 af db ee 94 05 a9 39 af 55 a8 f6 a2 1a be a2 0a 34 12 ee 17 0c 16 0a c5 02 89 9d fc ae a5 02 91 fb e8 88 f6 4d a5 7c 55 f2 42 53 76 44 f6 37 ba 43 bc 16 2f 06 eb 83 51 4e e5 e1 5c a2 32 ca 61 77 15 95 08 e1 b1 4c 39 5b 6e 71 b3 25 71 57 e9 73 4e 24 78 15 89 1a 56 ce 9e 81 53 ce d3 00 9d d6 6f 1e fe 1a 37 6b c3 b1 42 06 5c 19 ec 5f 49 15 14 6e 94 cf 34 Data Ascii: a7I_2Bv?^J#\ iZ\At+htrSQ 0!(TjKt\l8?+@2h3c.+t$E'C,eMxR9U4M\|UBSvD7C/QN\2awL9[nq%qWsN$xVSo7kB\_In4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49871	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:29 UTC	1328	OUT	GET /app/themes/ovivo/dist/images/favicon/favicon-32x32.png HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:30 UTC	1421	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:29 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 22 Jul 2022 16:32:23 GMT ETag: "3a6-5e46760f533c0" Accept-Ranges: bytes Content-Length: 934 Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: image/png
2024-10-30 03:01:30 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 58 49 44 41 54 58 85 ed 97 4b 68 9c 55 14 c7 7f 67 66 32 19 67 ae d3 d8 4c 63 9b 4a 28 a9 56 0d 55 6a 25 1a 5c 48 02 46 25 14 cc 47 c1 60 d3 4d b5 11 1f 48 69 c3 7c 50 7c a2 0b c1 85 8f 6e 75 51 c9 a6 4a a1 b5 d0 82 28 d5 96 2e 5a 0d d6 17 51 88 1b 6b b0 8d 46 d3 d8 34 8f c9 64 fe 2e 66 92 7c 33 79 60 a4 89 42 fb df dc 7b ee f9 ee f9 ce e3 7f cf e5 c2 0c 42 2c 8c 25 d5 97 2a 97 4d b6 82 90 2b 51 e4 4a 36 2d b5 fe ff 89 65 e5 c4 7f c6 81 ab 1b 9e f3 37 46 02 72 f0 34 cc 85 2b a6 f7 12 e9 6a 61 af 01 8f da 3c 9b 97 44 6e 4d f8 49 8c 34 b0 07 88 23 46 22 2c 43 1f f0 9c 1f 03 3d 05 ec 05 52 Data Ascii: PNGIHDR szzpHYs+XIDATXKhUgf2gLcJ(VUj%\HF%G`MHi\|P\|nuQJ(.ZQkF4d.f\|3y`B{B,%*M+QJ6-e7Fr4+ja<DnMI4#F",C=R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49872	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:43 UTC	1495	OUT	GET /?_gl=11wj41xj_gaODMzOTcxNjkwLjE3MzAyNTcyNzg._ga_3N3F1TJNT7MTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA. HTTP/1.1 Host: careers.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:43 UTC	1817	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 30 Oct 2024 03:01:43 GMT Server: Apache Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: Content-Type, Authorization Content-Security-Policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; Cross-Origin-Embedder-Policy: unsafe-none; report-to='default' Cross-Origin-Embedder-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Opener-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=, usb=(), xr-spatial-tracking=(), gamepad=(), serial=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000 X-Content-Security-Policy: default-src 'self'; img-src ; media-src * data:; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Expires: Wed, 30 Oct 2024 04:01:43 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: https://careers.ovivowater.com/?_gl=1%2A1wj41xj%2A_ga%2AODMzOTcxNjkwLjE3MzAyNTcyNzg.%2A_ga_3N3F1TJNT7%2AMTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA. Access-Control-Allow-Origin: * Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49873	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:43 UTC	1505	OUT	GET /?_gl=1%2A1wj41xj%2A_ga%2AODMzOTcxNjkwLjE3MzAyNTcyNzg.%2A_ga_3N3F1TJNT7%2AMTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA. HTTP/1.1 Host: careers.ovivowater.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:44 UTC	1829	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:43 GMT Server: Apache Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: Content-Type, Authorization Content-Security-Policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; Cross-Origin-Embedder-Policy: unsafe-none; report-to='default' Cross-Origin-Embedder-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Opener-Policy-Report-Only: unsafe-none; report-to='default' Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=, picture-in-picture=, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=, usb=(), xr-spatial-tracking=(), gamepad=(), serial=() Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000 X-Content-Security-Policy: default-src 'self'; img-src ; media-src * data:; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none Link: <https://careers.ovivowater.com/wp-json/>; rel="https://api.w.org/" Link: <https://careers.ovivowater.com/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json" Link: <https://careers.ovivowater.com/>; rel=shortlink Vary: Accept-Encoding Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-30 03:01:44 UTC	7	IN	Data Raw: 31 35 32 30 33 0d 0a Data Ascii: 15203
2024-10-30 03:01:44 UTC	16384	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c Data Ascii: <!doctype html><html lang="en-US"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0, user-scalabl
2024-10-30 03:01:44 UTC	16384	IN	Data Raw: 31 61 32 32 39 22 2c 22 62 75 74 74 6f 6e 5f 33 5f 62 75 74 74 6f 6e 5f 68 6f 76 65 72 22 3a 22 23 34 65 38 32 32 31 22 2c 22 62 75 74 74 6f 6e 5f 33 5f 6c 69 6e 6b 5f 63 6f 6c 6f 75 72 22 3a 22 23 66 66 66 22 2c 22 62 75 74 74 6f 6e 5f 33 5f 61 73 5f 62 75 74 74 6f 6e 22 3a 22 22 2c 22 62 75 74 74 6f 6e 5f 33 5f 6e 65 77 5f 77 69 6e 22 3a 22 22 2c 22 62 75 74 74 6f 6e 5f 34 5f 62 75 74 74 6f 6e 5f 63 6f 6c 6f 75 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 75 74 74 6f 6e 5f 34 5f 62 75 74 74 6f 6e 5f 68 6f 76 65 72 22 3a 22 23 63 63 63 63 63 63 22 2c 22 62 75 74 74 6f 6e 5f 34 5f 6c 69 6e 6b 5f 63 6f 6c 6f 75 72 22 3a 22 23 30 30 30 30 30 30 22 2c 22 62 75 74 74 6f 6e 5f 34 5f 61 73 5f 62 75 74 74 6f 6e 22 3a 22 31 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 62 Data Ascii: 1a229","button_3_button_hover":"#4e8221","button_3_link_colour":"#fff","button_3_as_button":"","button_3_new_win":"","button_4_button_colour":"#ffffff","button_4_button_hover":"#cccccc","button_4_link_colour":"#000000","button_4_as_button":"1","button_7_b
2024-10-30 03:01:44 UTC	16384	IN	Data Raw: 6c 73 2d 69 74 65 6d 20 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 66 72 20 77 70 6d 6c 2d 6c 73 2d 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 77 70 6d 6c 5f 6c 73 5f 6d 65 6e 75 5f 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 77 70 6d 6c 5f 6c 73 5f 6d 65 6e 75 5f 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 77 70 6d 6c 2d 6c 73 2d 34 31 2d 66 72 20 6e 61 76 2d 69 74 65 6d 22 3e 3c 61 20 74 69 74 6c 65 3d 22 46 72 65 6e 63 68 22 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 72 65 65 72 73 2e 6f 76 69 76 6f 77 61 74 65 72 2e 63 6f 6d 2f 66 72 2f 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 3e 3c 73 70 61 6e 20 69 74 65 6d 70 72 6f 70 Data Ascii: ls-item wpml-ls-item-fr wpml-ls-menu-item menu-item-type-wpml_ls_menu_item menu-item-object-wpml_ls_menu_item menu-item-wpml-ls-41-fr nav-item"><a title="French" itemprop="url" href="https://careers.ovivowater.com/fr/" class="dropdown-item"><span itemprop
2024-10-30 03:01:44 UTC	16384	IN	Data Raw: 20 4c 65 76 65 72 61 67 65 20 79 6f 75 72 20 65 78 70 65 72 74 69 73 65 20 74 6f 20 64 65 76 65 6c 6f 70 20 6d 75 6e 69 63 69 70 61 6c 20 61 6e 64 20 69 6e 64 75 73 74 72 69 61 6c 20 77 61 74 65 72 20 73 6f 6c 75 74 69 6f 6e 73 2c 20 74 6f 64 61 79 20 61 6e 64 20 69 6e 74 6f 20 74 68 65 20 66 75 74 75 72 65 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 65 6e 65 72 69 63 2d 74 69 6c 65 73 5f 5f 73 69 6e 67 6c 65 2d 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Leverage your expertise to develop municipal and industrial water solutions, today and into the future. </div> <div class="generic-tiles__single--link">
2024-10-30 03:01:44 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </div> </div> </a> </div>
2024-10-30 03:01:44 UTC	4611	IN	Data Raw: 20 63 6f 6f 6b 69 65 73 20 64 6f 20 6e 6f 74 20 73 74 6f 72 65 20 61 6e 79 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 69 2d 74 61 62 2d 73 65 63 74 69 6f 6e 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 69 2d 74 61 62 2d 68 65 61 64 65 72 22 3e 0a 09 09 09 09 09 09 09 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 63 6c 61 73 73 3d 22 63 6c 69 2d 6e 61 76 2d 6c 69 6e 6b 20 63 6c 69 2d 73 65 74 74 69 6e 67 73 2d 6d 6f Data Ascii: cookies do not store any personal information.</div></div></div></div><div class="cli-tab-section"><div class="cli-tab-header"><a role="button" tabindex="0" class="cli-nav-link cli-settings-mo
2024-10-30 03:01:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-30 03:01:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49875	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:46 UTC	1572	OUT	GET /app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.min.css?ver=1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://careers.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:46 UTC	1444	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:46 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "6b4-6242f8fe0a2ea" Accept-Ranges: bytes Content-Length: 1716 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:46 UTC	1716	IN	Data Raw: 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 7b 77 69 64 74 68 3a 31 35 2e 35 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 3e 75 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 70 6d 6c 2d 6c 73 2d 63 75 72 72 65 6e 74 2d 6c 61 6e 67 75 61 67 65 3a 66 6f 63 75 73 20 2e 77 70 6d 6c 2d 6c 73 2d 73 75 62 2d 6d 65 6e 75 2c 2e 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 2e 77 70 6d 6c 2d Data Ascii: .wpml-ls-legacy-dropdown{width:15.5em;max-width:100%}.wpml-ls-legacy-dropdown>ul{position:relative;padding:0;margin:0!important;list-style-type:none}.wpml-ls-legacy-dropdown .wpml-ls-current-language:focus .wpml-ls-sub-menu,.wpml-ls-legacy-dropdown .wpml-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49874	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:46 UTC	1398	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.2 HTTP/1.1 Host: careers.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://careers.ovivowater.com/?_gl=1%2A1wj41xj%2A_ga%2AODMzOTcxNjkwLjE3MzAyNTcyNzg.%2A_ga_3N3F1TJNT7%2AMTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:46 UTC	593	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:46 GMT Server: Apache Last-Modified: Fri, 11 Oct 2024 09:32:11 GMT ETag: "1b72b-624302959c2c9" Accept-Ranges: bytes Content-Length: 112427 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; Access-Control-Allow-Origin: Connection: close Content-Type: text/css
2024-10-30 03:01:46 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-30 03:01:46 UTC	16384	IN	Data Raw: 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 Data Ascii: ock-cover.has-background-dim.has-background-dim-90 .wp-block-cover__background,.wp-block-cover.has-background-dim.has-background-dim-90 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-90:not(.has-background-gradi
2024-10-30 03:01:46 UTC	16384	IN	Data Raw: 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 20 66 69 67 75 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 20 66 69 67 75 72 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6d 61 72 67 69 6e 3a 30 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 Data Ascii: -gallery:not(.has-nested-images) .blocks-gallery-image figure,.wp-block-gallery:not(.has-nested-images) .blocks-gallery-item figure{align-items:flex-end;display:flex;height:100%;justify-content:flex-start;margin:0}.blocks-gallery-grid:not(.has-nested-imag
2024-10-30 03:01:47 UTC	16384	IN	Data Raw: 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 66 69 67 63 61 70 74 69 6f 6e 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 2e 69 73 2d 73 74 79 6c 65 2d 63 69 72 63 6c 65 2d 6d 61 73 6b 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 7d 40 73 75 70 70 6f 72 74 73 20 28 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 20 6f 72 20 28 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 29 20 6f 72 20 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 Data Ascii: er{margin-left:auto;margin-right:auto}.wp-block-image :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-image.is-style-circle-mask img{border-radius:9999px}@supports ((-webkit-mask-image:none) or (mask-image:none)) or (-webkit-mask-image:none
2024-10-30 03:01:47 UTC	16384	IN	Data Raw: 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 5f 5f 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 29 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 61 67 65 2d 6c 69 73 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6c 6f 73 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 Data Ascii: lock-navigation-item__content:not(.wp-block-navigation-submenu__toggle){padding:0}.wp-block-navigation .wp-block-page-list,.wp-block-navigation__container,.wp-block-navigation__responsive-close,.wp-block-navigation__responsive-container,.wp-block-navigati
2024-10-30 03:01:47 UTC	16384	IN	Data Raw: 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 7b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 3a 77 68 65 72 65 28 2e 61 6c 69 67 6e 6c 65 66 74 2c 2e 61 6c 69 67 6e 72 69 67 68 74 29 7b 77 69 64 74 68 3a 31 Data Ascii: eatured-image .wp-block-post-featured-image__overlay.has-background-dim-90{opacity:.9}.wp-block-post-featured-image .wp-block-post-featured-image__overlay.has-background-dim-100{opacity:1}.wp-block-post-featured-image:where(.alignleft,.alignright){width:1
2024-10-30 03:01:47 UTC	14123	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 23 31 64 61 31 66 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 69 6d 65 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 62 37 65 61 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 38 30 63 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a Data Ascii: d-color:#1da1f2;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-vimeo{background-color:#1eb7ea;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-vk{background-color:#4680c2;color:#fff}:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49876	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:46 UTC	1371	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: careers.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://careers.ovivowater.com/?_gl=1%2A1wj41xj%2A_ga%2AODMzOTcxNjkwLjE3MzAyNTcyNzg.%2A_ga_3N3F1TJNT7%2AMTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:46 UTC	606	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:46 GMT Server: Apache Last-Modified: Wed, 29 Nov 2023 09:17:13 GMT ETag: "15601-60b47002bc699" Accept-Ranges: bytes Content-Length: 87553 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:46 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-30 03:01:46 UTC	16384	IN	Data Raw: 5d 7d 29 2c 6c 61 73 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2d 31 5d 7d 29 2c 65 71 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 5b 6e 3c 30 3f 6e 2b 74 3a 6e 5d 7d 29 2c 65 76 65 6e 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6f 64 64 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6c 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 6e 3c 30 3f 6e 2b 74 3a 74 3c 6e 3f 74 3a 6e 3b 30 Data Ascii: ]}),last:X(function(e,t){return[t-1]}),eq:X(function(e,t,n){return[n<0?n+t:n]}),even:X(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:X(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:X(function(e,t,n){var r;for(r=n<0?n+t:t<n?t:n;0
2024-10-30 03:01:46 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 2c 22 66 78 22 3d 3d 3d 74 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 65 5b 30 5d 26 26 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 74 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 31 2c 69 3d 63 65 2e 44 65 66 65 72 72 65 64 Data Ascii: this,t,n);ce._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&ce.dequeue(this,t)})},dequeue:function(e){return this.each(function(){ce.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(e,t){var n,r=1,i=ce.Deferred
2024-10-30 03:01:46 UTC	16384	IN	Data Raw: 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 63 65 28 65 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 2d 31 2c 6f 3d 30 3b 6f 3c 3d 69 3b 6f 2b 2b 29 74 3d 6f 3d 3d 3d 69 3f 74 68 69 73 3a 74 68 69 73 2e 63 6c 6f 6e 65 28 21 30 29 2c 63 65 28 72 5b 6f 5d 29 5b 61 5d 28 74 29 2c 73 2e 61 70 70 6c 79 28 6e 2c 74 2e 67 65 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 29 7d 7d 29 3b 76 61 72 20 5f 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 47 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 7a 65 3d 2f 5e 2d 2d 2f 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 Data Ascii: ){ce.fn[e]=function(e){for(var t,n=[],r=ce(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),ce(r[o])[a](t),s.apply(n,t.get());return this.pushStack(n)}});var _e=new RegExp("^("+G+")(?!px)[a-z%]+$","i"),ze=/^--/,Xe=function(e){var t=e.ownerDocument
2024-10-30 03:01:46 UTC	16384	IN	Data Raw: 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 2c 6c 65 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 Data Ascii: opFix:{"for":"htmlFor","class":"className"}}),le.optSelected\|\|(ce.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parent
2024-10-30 03:01:46 UTC	5633	IN	Data Raw: 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 76 28 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 61 3f 65 5b 61 5d 3d 65 5b 61 5d 2e 72 65 70 6c 61 63 65 28 5a 74 2c 22 24 31 22 2b 72 29 3a 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 65 2e 75 72 6c 2b 3d 28 41 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 65 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 72 29 2c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 63 65 2e 65 72 72 6f 72 28 72 2b 22 20 77 61 73 20 6e 6f 74 20 63 Data Ascii: dataTypes[0])return r=e.jsonpCallback=v(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Zt,"$1"+r):!1!==e.jsonp&&(e.url+=(At.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o\|\|ce.error(r+" was not c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49877	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:46 UTC	1379	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: careers.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://careers.ovivowater.com/?_gl=1%2A1wj41xj%2A_ga%2AODMzOTcxNjkwLjE3MzAyNTcyNzg.%2A_ga_3N3F1TJNT7%2AMTczMDI1NzI3OC4xLjAuMTczMDI1NzI3OC42MC4wLjA. Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:46 UTC	605	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:46 GMT Server: Apache Last-Modified: Wed, 16 Aug 2023 05:55:18 GMT ETag: "3509-60303f0b16bba" Accept-Ranges: bytes Content-Length: 13577 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:46 UTC	13577	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49878	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:46 UTC	1558	OUT	GET /app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://careers.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:46 UTC	1457	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:46 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "199-6242f8fe0a2ea" Accept-Ranges: bytes Content-Length: 409 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:46 UTC	409	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 61 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 74 6f 67 67 6c 65 Data Ascii: "use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49880	104.16.41.28	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:46 UTC	901	OUT	GET /t/1.css?apiType=css&projectid=c4bec1eb-18b2-4d07-9dd7-cfb6ba64c12c HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ovivowater.com/app/themes/ovivo/dist/styles/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=UQ8BQXypsztCMtxIcMb8MOwbHefGUXUvQqIP1YhMeNM-1730257276-1.0.1.1-qU5tzOCywaPfnvssaHnbMgV.4_RkZCIIIqH8sRmPL7TdabjBFjUkmFQffxy5jCoQeRtrivoffmyfVJg3Nfs2tQ If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 30 Jul 2024 12:03:08 GMT
2024-10-30 03:01:46 UTC	636	IN	HTTP/1.1 304 Not Modified Date: Wed, 30 Oct 2024 03:01:46 GMT Connection: close x-amz-id-2: Aew1PclQyxxFtZfcgTIomN8W7Y2/C1VQfAHbviJGODlhs9O+ODV39pGxfEl+6nbotH3dDhws5VbE73rRk45VExGMf7pJIBEl x-amz-request-id: 0QR077HPRM2TWSTG x-amz-replication-status: COMPLETED Last-Modified: Tue, 30 Jul 2024 12:03:08 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" x-amz-server-side-encryption: AES256 x-amz-meta-mtime: 1519217722 x-amz-version-id: S7lzDmdDI0noOXFTwuZlTK1jzSNI0TZH CF-Cache-Status: HIT Age: 3457120 Expires: Wed, 30 Oct 2024 03:01:47 GMT Cache-Control: public, max-age=1 Server: cloudflare CF-RAY: 8da829a4382de6fe-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49882	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:47 UTC	638	OUT	GET /m/6a120e9794038848/original/HomePage-Work_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://careers.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:48 UTC	809	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 284834 Connection: close Date: Wed, 30 Oct 2024 03:01:48 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-Work_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 10991a83-c84a-442c-228b-efb823b94e81 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 e94c77a12a65a84cbcef7856ed7e0fb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: Z8GUzxK_2UMo6j1UwbHmk-_q-vS4H5WvHfeXUruZcpN7p4MYrVLsSg==
2024-10-30 03:01:48 UTC	15575	IN	Data Raw: ff d8 ff e1 1b 79 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 df 00 00 01 01 00 03 00 00 00 01 02 27 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 33 30 20 31 35 3a 31 39 3a 31 38 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: yExifMM*'(12i -'-'Adobe Photoshop 23.3 (Windows)2022:05:30 15:19:180
2024-10-30 03:01:48 UTC	406	IN	Data Raw: 6d 3b bc 12 04 1e aa a2 ff 00 ff d6 c6 c7 76 4d a4 c8 2b 99 ea ec 0c ea 99 4d 02 3f 49 31 e6 43 5c ef fa 4b 25 25 0e 2b e2 3e 4d 9c dc 3e dc 76 bb e8 da 48 01 e0 aa a4 a6 6b 3e b5 f5 64 37 fe 68 f4 77 fe 79 19 2c 71 f2 65 b3 5f fd 1b 16 8f 65 e2 89 2e 7b 9f af bc e4 af 0f fa 11 5e 1f 6a d1 38 81 3a 02 0c c8 f1 9f a5 3f d6 5e 28 92 aa 97 d8 71 70 30 f1 30 86 05 35 c6 30 6b 98 e6 13 25 c1 e3 6d ae b1 ff 00 9c f7 b7 f3 95 2c 56 75 3e 97 8c dc 3a b1 46 7b 31 c1 6e 2d cd b5 95 4b 27 75 6c cb aa ed ae 6b eb fc e7 d1 ea 7a 8b ca d2 56 63 ee 7e b3 dd ae 1e 31 ee 7b de e7 f3 de af f3 5f ad e3 fe 71 4f af 7d 57 e9 57 e1 90 cc 97 b6 cc 9c 9b ce 46 41 67 d1 07 e9 6c 64 fd 2f a2 ba 5c 81 00 d8 c3 c6 a4 7c 17 cf 89 2d 6e 47 8b f5 de e5 7b 9e e7 ae b6 ae 18 f0 f0 ff 00 Data Ascii: m;vM+M?I1C\K%%+>M>vHk>d7hwy,qe_e.{^j8:?^(qp0050k%m,Vu>:F{1n-K'ulkzVc~1{_qO}WWFAgld/\\|-nG{
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: c6 b2 77 47 03 da f5 c9 24 9b 3f 96 5e 45 74 3e 68 f9 87 d7 45 14 38 6a c0 56 77 51 c4 c6 00 90 c1 21 79 9a 4a ae 1b e2 ea d8 cb 5c 2f ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 32 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 00 00 00 01 01 00 ff e1 18 1b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 Data Ascii: wG$?^Et>hE8jVwQ!yJ\/8BIM!WAdobe PhotoshopAdobe Photoshop 20228BIMhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?>
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: 69 f8 0c 6e 6e 07 bb 20 15 ea 91 81 ac 8a 63 a4 74 56 53 e0 d0 41 89 c3 5d 41 17 fd b6 2a de 91 aa 43 18 fa 5b 8f eb c7 b7 ea 4e 2b 8e bc 87 ba 87 85 7a 79 c0 41 13 e6 71 b5 4d 01 65 8a 6a 59 55 52 02 f2 19 04 e1 56 ce 65 be b4 7f 50 fc 06 b7 e7 8f 7a e9 48 0d a8 85 c2 f5 b1 4e c3 dc f9 3c 75 46 d4 85 ea 66 97 1f 59 47 8a a2 ae 8a 44 b3 b3 4d 4f 14 22 aa 60 a5 f4 94 2d 72 5b f3 cf b6 08 0a 68 a3 1d 3c aa 06 69 9e 87 a7 08 2a 5d 90 eb 3f 55 2a 54 9d 2c d7 56 6b 58 91 73 6b 5f e9 ee a6 bd 6c ea 25 88 3c 7a 10 30 d5 92 4b 06 8d 66 49 0b 8f a3 ea 1a 0f f6 7e a4 0d 1a 78 27 df ba bc 6e 41 ed 6e ee 1d 2c e9 aa 52 e0 3b be 96 1c c5 e3 01 d8 a8 0a 59 4f 37 50 41 b8 fa 7e 7d f8 64 81 f3 eb 52 bb 1d 02 b8 ff 00 67 a5 26 3e 48 cc d4 e1 95 d4 e9 d0 58 59 48 0c 1f 80 Data Ascii: inn ctVSA]AC[N+zyAqMejYURVePzHN<uFfYGDMO"`-r[h<i]?U*T,VkXsk_l%<z0KfI~x'nAn,R;YO7PA~}dRg&>HXYH
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: bc 55 14 05 49 70 5e 92 a2 34 4b 8e 1f c6 1d 54 ea 3c 38 70 3e bc 9f 6f 6a 05 55 56 ba a9 d6 c1 aa e0 e4 74 1e 4b 2c 93 45 0a 9d 7a a3 48 c9 2c aa a3 81 e3 2b 76 fa f0 b7 36 e2 fe ee 07 6d 1b 8f 4c 92 09 d2 47 49 7c 8c 1a 2a 24 47 50 5d 99 18 12 9a 55 da da 49 2a 45 a3 20 7e 7d a9 f1 22 a7 03 d7 82 80 4d 07 49 f9 21 30 b4 40 89 bc 92 05 57 0b ca a9 89 ca a9 d6 3f a6 9b 71 f8 f7 47 3a 48 a7 0e 98 62 41 60 78 79 f5 5f df 33 ea eb 0f 61 f5 c5 04 fa d7 1e b8 6d d3 90 56 47 28 ad 99 92 0a 0c 6d 3c d1 c6 dc c9 55 4f 43 24 ea c5 6f e3 59 3e 9c fb a0 70 38 d7 a4 ed 42 6a 3a 2e 12 49 52 ca 52 42 e7 c7 4f 02 a3 a9 71 2a 95 4b 8d 2a 57 4c ae 24 e4 9b df eb ee f4 43 9a 74 d9 d7 5c 11 4e 90 f9 2a 88 e5 46 d6 be 3a a7 59 22 d7 2a 95 8e 43 a2 44 e6 32 6e 3c 9a 88 fc 8b Data Ascii: UIp^4KT<8p>ojUVtK,EzH,+v6mLGI\|$GP]UIE ~}"MI!0@W?qG:HbA`xy_3amVG(m<UOC$oY>p8Bj:.IRRBOqKWL$Ct\NF:Y"CD2n<
2024-10-30 03:01:48 UTC	12288	IN	Data Raw: 28 c7 3d 39 53 4a 0e 3d 32 cf 2c f5 b3 28 5e 03 78 c9 2c 4b 6a fa 28 26 e4 29 ff 00 6d 7e 3d d8 15 7e e1 d6 81 60 29 5e 87 5d ab 92 c3 63 76 b8 c7 3d 45 6d 3e 5b c9 51 2f fc 03 49 e9 2a 1e 47 2d 17 ef 47 22 c9 4e 0c 6c 52 e5 5b 49 17 fc 8f 7a d1 42 49 e1 e5 d6 8c 8e b4 00 0d 3f cf a6 79 27 35 33 79 18 c9 a7 5b de cb fa ac 6f ea 37 fe c9 5f af bb 68 0a 18 b0 c7 5b 0f ab 1d 29 28 a7 54 48 d9 58 78 42 7a 43 1f c0 f4 df 81 f8 d4 6d 6b fb 60 f5 a6 24 0c 74 eb 15 42 b7 fb b5 0e a5 50 43 5d 19 d8 12 01 b0 ff 00 7a 3f f1 3e de 54 20 57 cf aa 8d 55 04 f0 ea 62 cc 45 8d ec c3 85 02 c4 03 7d 37 b5 be 80 de ff 00 e3 ef da 58 e0 9a 8e af d4 a1 52 2d ac fa 99 6c 39 00 30 3e 9b 29 b8 bd 88 6f 7a 60 00 c0 eb 60 90 6a 3a 25 1f 38 7e 3b 51 7c 85 e8 ed fd b4 2c b1 e4 2b f6 Data Ascii: (=9SJ=2,(^x,Kj(&)m~=~`)^]cv=Em>[Q/I*G-G"NlR[IzBI?y'53y[o7_h[)(THXxBzCmk`$tBPC]z?>T WUbE}7XR-l90>)oz``j:%8~;Q\|,+
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: f6 78 14 05 42 0f 11 d1 37 88 07 10 69 d3 7e 55 63 92 a2 9f 1e 16 25 6a aa 88 e9 59 53 ca 61 90 d4 ca 94 cd 1b 14 d5 29 9a 78 c9 09 70 47 1f 92 7d dc 20 f0 e4 7f 3a 74 ec 34 91 b3 80 7a fb 38 56 ed 31 80 db 3b 27 6b 51 a4 4d 49 b6 b6 86 cb db b4 a5 23 68 9a 45 c2 e0 71 38 f8 cb 80 7f 67 53 d3 8b a8 37 1f 4f 61 f9 10 86 38 c7 4b e3 55 54 50 58 d7 3f e1 ff 00 37 5f 3a af 9b 7d b9 2e fa fe 64 1f 29 ea 70 bb a3 70 4d 5d 8f ef 9e c5 db 19 da 59 64 34 f4 98 9a 9d ab ba 2a 36 ad 2d 06 28 a2 2c ff 00 67 0c 58 3d 04 13 a4 14 f4 d8 5e eb a2 41 a7 50 f4 e9 25 c3 0d 41 14 e3 a1 87 0d 57 95 93 08 90 3d 4d 54 b7 2c d2 97 9e 59 7c d2 12 06 b7 2c ec ac 6c d6 1f d3 df 89 f3 e9 8e 3d 31 c9 41 5a f3 92 51 ff 00 51 fc 37 f5 bf f4 1f 8f 7a a8 f5 eb c4 13 8e 95 78 ba 6a b8 d4 Data Ascii: xB7i~Uc%jYSa)xpG} :t4z8V1;'kQMI#hEq8gS7Oa8KUTPX?7_:}.d)ppM]Yd4*6-(,gX=^AP%AW=MT,Y\|,l=1AZQQ7zxj
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: de eb a4 9f 87 8f 4e 2b 93 a6 a3 a7 0a 8a e0 b1 c8 86 66 d4 0b 14 00 b0 95 54 93 e4 65 67 20 69 fe 82 d6 0a 2f f4 3e d9 95 95 62 ef 7a 64 7c bd 7a 50 90 48 ef 55 42 49 34 1d 19 8f 8f 9f 1d f3 fd 97 94 a2 c8 e7 e9 eb 60 db 8d 34 53 a1 52 a1 ea a3 8e a6 0f 0a 44 c5 34 a4 13 c2 ae c5 c8 23 48 b0 e4 db dc 6b cc dc d9 0d 88 96 da de 40 66 cf cc 70 ea 44 e5 9e 53 9e e0 c7 71 38 a0 a0 3f cf ab 99 db 5b 57 07 b4 b0 f4 94 18 da 6a 58 62 a4 8f c7 18 80 2a c5 a5 98 b3 32 22 d8 69 b8 27 fc 3d c2 d3 dd cd 79 29 96 66 ab 13 fe aa 75 31 da d9 a5 bc 4b 1a 20 a0 e9 93 71 e7 5a 22 a9 1f 2a 75 82 c4 1d 4a b7 2a 83 d3 c1 50 5b e9 f5 e7 f1 ed 40 7a 85 d4 45 40 e9 e6 46 ad 54 01 d0 39 9e cd 8f 24 84 bb 05 6d 23 50 4f dc 52 80 1d 2d eb 56 1a 88 b2 fb f0 3d da 7c ba 6d 89 af 70 Data Ascii: N+fTeg i/>bzd\|zPHUBI4`4SRD4#Hk@fpDSq8?[WjXb2"i'=y)fu1K qZ"uJ*P[@zE@FT9$m#POR-V=\|mp
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: 60 02 0f 6d 49 2f 78 20 8c 75 7a 18 d7 4a f1 3d 07 72 53 94 f0 47 a5 c3 31 74 91 8d 96 77 0b 4e 55 9c 29 1a 4a b5 be b6 07 e8 4f b7 3c 4f 97 49 29 9e bd 47 85 ae c8 c7 24 f4 d3 f8 a9 a3 98 42 51 a3 1a de 32 be a4 01 34 d9 40 04 97 1c 5c 5b de ff 00 4d f2 dc 7a bc 84 6a 24 1c 53 fc 9d 4d fe ee d4 c1 1c d3 cd 4e 93 07 4d 31 c9 08 40 b2 ab 70 08 72 46 ad 2e 54 d9 85 f9 23 f1 ef d4 43 d3 40 ea 34 1c 7a 6a 92 37 a5 89 fc 91 78 54 bc b1 ba 94 25 5a 20 8e 55 91 51 c1 0c 5c de e6 f7 22 ff 00 e3 ef 4e a0 2d 40 f3 ea c4 15 cb 0a 0e 9b be ec c6 ab fb ab e1 51 f7 2d 12 cc c1 2a 4c 84 42 91 3b b6 a4 52 14 fe 92 39 26 c6 d6 f6 e0 2a 54 02 e3 ad 2e 92 4e 7a 90 82 39 10 00 cb 12 ba b3 32 a8 3f bc aa 74 b2 1d 3a bc 30 80 ad 61 c8 3c 0b 7b 66 76 50 ba 01 af 5a 6a 29 e3 d3 Data Ascii: `mI/x uzJ=rSG1twNU)JO<OI)G$BQ24@\[Mzj$SMNM1@prF.T#C@4zj7xT%Z UQ\"N-@Q-LB;R9&T.Nz92?t:0a<{fvPZj)
2024-10-30 03:01:49 UTC	4096	IN	Data Raw: 8d aa 2e 22 57 03 d4 3e a7 ea 6c 7d e8 be 92 45 3a b2 10 28 49 27 e5 e5 d7 05 5f 08 44 51 09 2b c2 e9 59 82 91 2e b3 23 3f d2 d6 f4 83 f4 fc 9f 7a 6d 61 43 02 73 d5 4e 49 34 c7 5c 1a e2 f2 ca d1 97 8c f8 a1 e4 ac 71 02 c3 d6 c8 da 99 9e 45 e1 47 d5 7e be dc a7 55 ea 4f 94 99 a1 56 50 91 ac 3a 59 63 08 0a 47 3e af a0 8d 55 17 50 72 1c 8d 5c b7 d7 dd 4c 72 01 52 d8 eb c7 d6 9d 72 6a a8 a4 25 88 55 88 2f 9a f1 03 63 50 59 63 8c 28 57 00 cd 75 fa 0b 02 2f 7f eb ed ad 4c 71 5e 9c d0 ba 03 06 cf 53 7c 40 06 26 43 2c 91 5a 26 3c 29 70 ca ac 4c 82 34 29 fb 6e 2d c9 37 2d f5 fa fb b8 91 d0 00 07 5b 55 00 16 ea 4b 12 8c 1b ca b1 36 a8 8f a9 35 88 e4 48 c5 c4 6c ea 42 33 3d c7 04 58 5e ff 00 4f 7b 79 24 a0 24 f1 e9 c0 fa 40 00 63 a5 06 1e ad 29 e7 8a 25 6f 20 77 8d Data Ascii: ."W>l}E:(I'_DQ+Y.#?zmaCsNI4\qEG~UOVP:YcG>UPr\LrRrj%U/cPYc(Wu/Lq^S\|@&C,Z&<)pL4)n-7-[UK65HlB3=X^O{y$$@c)%o w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49881	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:47 UTC	638	OUT	GET /m/4fac9f08596efdc2/original/HomePage-Life_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://careers.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:48 UTC	809	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 376145 Connection: close Date: Wed, 30 Oct 2024 03:01:48 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-Life_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: eaba2665-2314-e840-6ed7-9b8edad84f67 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 51bcd21e941ceaec99864557d86202ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: L2QcjY1Wew2QU2GIqKQpVDGyK8rudmiO1J37x2kockmbc-MElRuvJA==
2024-10-30 03:01:48 UTC	15575	IN	Data Raw: ff d8 ff e1 1f 1a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 31 37 20 31 35 3a 31 36 3a 33 39 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 df a0 03 00 04 00 00 00 01 00 00 02 27 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 23.3 (Windows)2022:05:17 15:16:39'"
2024-10-30 03:01:48 UTC	406	IN	Data Raw: 1b 4b 9a df a2 f6 d9 5b 5b fe 62 87 15 fa 81 3d 7b b3 e7 a3 c2 62 3a 76 7d 7d 25 85 d3 fe b6 e2 66 5a da df 45 b8 cd b0 81 5d 96 16 91 2e e3 7f a6 e7 3a b5 b9 aa 95 ae 45 6e ff 00 ff d3 f3 fe b9 d5 33 3a 9f 53 bb 27 33 20 64 da 08 a9 b6 b4 6d 69 65 5f a2 ad d5 b3 f3 1a fd be a7 f6 d5 10 e5 02 e1 d9 48 78 84 e4 24 10 5a 47 92 f4 7f f1 69 03 a6 1c 8d d3 7e f7 e3 b1 ee f7 7a 55 02 2f f4 a8 63 bd b5 31 f7 5b eb 5b fe 91 79 bb 0e ab 7f ea 6f d6 23 d1 73 47 ac e3 f6 0b 9c d1 90 df dc 27 da cc a6 7f c5 ff 00 86 ff 00 49 4f f6 13 66 09 8e 8b a2 45 ea fa eb 32 0d ac 2c bd 8d 24 12 cb 07 69 f8 1f cc 7f d3 43 3d 3f 04 58 d2 ca 83 1c c7 48 db a0 69 8f cd 6f d1 66 f8 da 87 98 d7 d6 5c fa fe 8d 9b 4c b6 0f f5 b6 bb e8 fb 99 f4 51 85 f4 b6 a3 13 ed 13 11 ac f3 f4 5b f0 Data Ascii: K[[b={b:v}}%fZE].:En3:S'3 dmie_Hx$ZGi~zU/c1[[yo#sG'IOfE2,$iC=?XHiof\LQ[
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: f6 a3 d2 5b a0 83 a8 d5 66 f5 46 5c eb 7f 43 b0 6e af 63 f7 c6 ad 27 56 1d df 49 a9 f1 8f 11 ad bc 58 65 e9 16 12 61 75 ce 9d 9b 85 46 6e 3b cb a9 c9 60 b2 b9 10 60 fe 61 fe 5b 5d ed 72 2f ed 1c 6f e5 7d cb 39 d4 e1 e3 63 ed 0c 6d 75 d4 37 40 80 d6 02 67 76 d1 f4 7d ce 41 fb 4e 31 63 ec 6b da e6 56 37 3d c0 e8 01 d3 73 94 83 10 ae ab 7d c9 0d e9 d7 fd a5 8f d8 38 fc bf da 99 bd 53 10 b8 35 ce 2c 71 d0 02 0f 3f d9 95 8e cc bc 57 87 39 ae 0e 6d 60 39 e4 76 07 46 b8 e8 85 b6 bb e1 ee 22 c0 d3 23 91 af ef 35 c9 de cc 7a d8 41 cb 2d c5 14 9f 5e 9f 5d df 56 5c d6 45 82 eb f1 c5 60 f0 e2 db ab b7 6b a7 fe 29 79 bf 40 6d 95 e4 5b 97 6c fa d7 00 5e 1d 1b 83 c3 c7 a8 c7 7f d6 dc bb bf ac 37 3b f6 25 8d 79 70 aa 8b a9 35 83 04 8d ae ff 00 a5 ba c2 b9 27 b6 df d1 bf Data Ascii: [fF\Cnc'VIXeauFn;``a[]r/o}9cmu7@gv}AN1ckV7=s}8S5,q?W9m`9vF"#5zA-^]V\E`k)y@m[l^7;%yp5'
2024-10-30 03:01:48 UTC	8192	IN	Data Raw: 5f f1 7f a1 36 3f e1 ff 00 1b f7 e1 43 40 7a f7 5d 7f be ff 00 7d 7f 6e 54 75 ae bb 06 df 9f f6 1f d7 fd 87 f5 f7 57 15 eb 7d 73 d4 3f 3c 7f c4 7f af ed bd 24 0a 9e bd d7 63 fc 3f 37 3f ec 7f e2 9e f5 d7 ba f7 fc 6b fe 47 ef 7d 38 29 4a 79 f5 dd ff 00 db ff 00 af ef 5d 7b 48 f5 eb af 7b ea c0 01 d7 af fe fb fa 7f 4b 5f df ba df 5e ff 00 63 ef df 97 5a 27 d0 75 ef f8 af fa ff 00 ef 1f ec 7d fb ad f5 cf 49 ff 00 8d ff 00 5e 0f 24 1f 7e eb d4 eb 90 5f c9 fa f3 fe f3 fd 7f c7 df ba f7 5c ad ef dd 5a 87 ae 40 5c db fd bf ba 96 a0 af 5e 0b 9e b3 58 7f 4f 6c ea 3c 6b d5 e9 8a 75 ff d1 b0 7f 99 7f 08 3e 0f fc 14 fe 5e bd a3 b8 7e 60 f7 36 ef dc 9d cd d9 74 78 8c 0a 77 26 47 2b b9 f3 7b b3 7d 76 7e 1a 6c b6 e0 da db 3f 68 ed 8a 59 4d 5c bb 44 cb 55 33 e7 20 65 58 Data Ascii: _6?C@z]}nTuW}s?<$c?7?kG}8)Jy]{H{K_^cZ'u}I^$~_\Z@\^XOl<ku>^~`6txw&G+{}v~l?hYM\DU3 eX
2024-10-30 03:01:48 UTC	8192	IN	Data Raw: a6 3d cd 5f 96 a1 8f 14 d0 c5 55 4d 26 23 37 06 07 2d 8d 5a b0 69 86 07 24 f5 7f 63 4d 34 69 00 90 cb 47 57 56 d0 c9 2a 98 99 bd 22 c0 0b 7b 8d 39 41 2d e5 e6 13 66 c1 58 ac 4c e8 f4 f3 ed 27 cf cc 0a 81 9a 67 ac 85 e6 3d be 11 6e 9b d1 80 ad ea fe 9b 67 f0 b7 01 81 c4 7c 24 e3 1e 5d 04 dd 91 36 ff 00 ce f6 34 38 ac 2a 4d 8f c2 e1 f2 b2 49 16 ed 92 10 3c 39 20 b1 35 5d 4c 15 d2 12 e8 69 22 58 e2 44 52 58 11 72 7e 96 10 f3 77 30 5b ed 36 e6 de ee 43 1d bc a3 4a c7 f0 89 cf 98 18 c8 ce 73 41 c7 a8 7f 75 bb be 9b 77 b5 b7 b6 91 a2 55 90 01 25 69 dc 48 a9 d5 fd 1c 0e 3d 6c 19 ff 00 09 f8 df bd 93 86 fe 62 32 61 a9 72 95 35 b8 be cf d9 9b b3 0f d8 71 c9 4d 78 72 38 5c 16 da ac dc 98 5a e9 ed a8 51 cf 41 9d c3 d3 3c 2c 08 55 13 b2 5a d2 7b 4b ed 05 e3 a7 31 4f Data Ascii: =_UM&#7-Zi$cM4iGWV"{9A-fXL'g=ng\|$]648MI<9 5]Li"XDRXr~w0[6CJsAuwU%iH=lb2ar5qMxr8\ZQA<,UZ{K1O
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: 0c b0 b3 c6 ec 88 58 33 28 95 9d 49 21 cb 31 6a 12 dd a3 48 05 4e 91 d4 37 cc 32 6e 32 a3 b4 86 46 bd 64 90 40 23 2c 56 30 89 55 5d 22 95 55 02 ac 02 b3 3a eb 25 58 06 a0 55 fc e4 ff 00 95 ee 4f e1 f7 71 53 ef 1e 8b c3 52 51 7c 7a f9 13 90 39 ad b5 b6 ce e7 c3 54 6e 8d ab ba ea 66 7c ae 5b ae ff 00 83 bd 5c 59 99 36 5e 2a a4 a5 4e 2a 4a 78 aa a9 a1 13 2d 2c d5 12 4b 0c 25 dd df b6 a8 85 cb 6e 36 74 65 f1 34 3a 00 45 25 35 ab 46 a7 8a c9 93 41 42 a6 a0 aa a9 5a 8d e1 82 7d a6 01 b5 ac 6c 2d 65 8c 48 b2 16 56 d5 18 a1 11 bb 0a 69 11 1c 2d 70 e0 06 2e ee ad 4b a5 fe 44 fd dd d9 98 df 82 bd d3 d7 1f 24 32 cd 82 ea 1e 80 df ad b4 69 77 ae ef ca 54 6d 55 ea ae b6 c9 e1 e1 c9 6e 7c 0d 7e e0 4a 9a 2c f4 06 8f 39 5e 63 c3 7d b2 89 b1 e6 59 5b cd 12 c5 4e ac 29 da Data Ascii: X3(I!1jHN72n2Fd@#,V0U]"U:%XUOqSRQ\|z9Tnf\|[\Y6^NJx-,K%n6te4:E%5FABZ}l-eHVi-p.KD$2iwTmUn\|~J,9^c}Y[N)
2024-10-30 03:01:48 UTC	8949	IN	Data Raw: ff 00 8f bf 75 ee bb bf 1f ef 23 fc 7f 36 fe bf 4f 7e eb dd 77 ef dd 7b af 7b f7 5e eb de fd d7 ba ff d6 af bf e4 c5 f1 93 b6 fe 6f 7c 8b ea ef f4 81 41 57 95 e9 ee a8 ae a6 dd 95 db 9e a7 11 17 f0 6a cc 97 54 d2 d0 6e ed b7 d6 39 19 29 e3 a4 a3 9b 2b bd 61 a3 8e 30 25 d7 37 f0 f5 96 a6 45 70 17 c8 83 93 f9 5d 9e f5 77 55 89 e3 db a0 99 0c 8f 4d 42 ac d4 51 93 c2 b9 34 e0 05 06 48 ea 33 ba e6 f9 af 6d 4e c7 24 a2 5b c6 85 96 31 f0 f6 c6 b5 c9 5f 3a 63 39 cd 72 01 eb e8 f2 d2 7d d0 5a a2 ae 9f 70 04 fa 64 42 8e a2 61 e4 d0 e8 40 28 e8 1e c5 6d c1 16 f7 25 8a 21 31 e3 18 f5 e1 8e 3d 78 10 e0 38 14 04 57 f6 ff 00 ab f2 ea 35 35 34 28 6a 6a 63 85 12 5a f9 12 7a a9 15 02 c9 3b c5 0c 74 d4 fe 57 00 34 86 1a 68 91 16 f7 d2 a2 c3 dd a4 95 ce 98 cb 1d 28 28 3e 59 Data Ascii: u#6O~w{{^o\|AWjTn9)+a0%7Ep]wUMBQ4H3mN$[1_:c9r}ZpdBa@(m%!1=x8W554(jjcZz;tW4h((>Y
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: e2 58 c2 9d 4a 42 89 25 20 3c 8c c3 12 05 d4 54 35 7d 6a 72 7e 4f 7f 26 af 93 74 f2 ed 5e cf dd 3d 82 9f 33 b6 56 c4 c9 6d 8d d1 55 d1 bb 0f 6a e2 fa 6e 78 f1 98 9a cc 7e 4b 75 61 a8 36 9e 30 e4 ea bb 0e 8b 72 e0 22 ab c7 41 35 3e 66 97 2f 09 aa 49 51 18 6a 2a b2 f7 da 87 e5 d0 97 7c af 4d c2 55 9c 49 3c 17 6c e0 dc b8 26 a4 38 93 c3 52 49 ee 0c aa 74 92 03 31 c1 6e 5f 71 e3 e6 a8 67 b4 e6 b2 6c 62 d1 fa 13 da aa b2 40 a3 49 d2 d1 98 cc 8d 54 04 06 56 61 aa 84 aa 8c 83 01 f0 ab 68 ff 00 2c 3f 94 1f 34 25 ef 0e 9c d8 1b 6b a3 37 57 40 6d 8d 8d b6 b6 67 56 ae d5 c6 f5 c6 5e 93 bb b1 d9 5e c4 7d d9 bb aa 29 eb a8 12 b3 29 95 db bb 7b 33 8c a0 8e 9e b5 63 9d 2b 15 e4 68 9a 58 c3 fb 16 f2 fe ff 00 ca 73 ee 16 11 6e 3b 29 da f9 d1 16 44 36 d3 52 35 a1 c1 d0 23 Data Ascii: XJB% <T5}jr~O&t^=3VmUjnx~Kua60r"A5>f/IQj*\|MUI<l&8RIt1n_qglb@ITVah,?4%k7W@mgV^^})){3c+hXsn;)D6R5#
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: f0 8c e7 a8 bb 79 e4 5e 60 da 39 6b 76 dc 2f ad cd be ea 2c a4 9a de 3a a9 66 0a b5 d6 46 45 07 f0 d7 57 a8 c8 1d 0e 9f cd e3 a6 7e 35 7c 57 f9 9b dc 3f 19 7e 22 e1 ea e1 eb 7c 0e d3 eb ba 3e c0 4d cf 55 59 b9 e5 c6 76 cd 34 f9 dc a6 e4 c7 6d 7c ce 5a 69 f2 54 d8 1c 65 06 46 92 1d 0f 24 b6 a8 49 01 77 d2 ac 25 3e 73 b3 d9 ec 37 cb 17 da 62 10 28 8c eb 89 19 99 51 98 92 a2 ac 4b 6a 31 98 cb 8a d0 31 20 05 c8 01 fe 5e bb bb 4b 3b eb 49 6b 24 6d 36 91 24 8a 03 b6 9a 6a d3 4a 0d 0b 26 a4 43 4d 4c 16 a4 b6 1b a2 4d d2 7d 59 82 df 3b 6f b0 b2 db d3 3f 41 8c da fb 17 6d 49 9d c6 c0 b5 54 d1 e5 bf 8f d3 c8 c6 82 5a aa 59 9c ce 71 b1 4f 12 59 59 41 a8 96 54 d2 42 2b 13 1b ef db fd cd 9e e5 b6 d8 ed d6 c5 ae 26 63 ad 8f c0 17 03 48 3e 6e d5 24 f1 0a aa 6b 92 3a 1a Data Ascii: y^`9kv/,:fFEW~5\|W?~"\|>MUYv4m\|ZiTeF$Iw%>s7b(QKj11 ^K;Ik$m6$jJ&CMLM}Y;o?AmITZYqOYYATB+&cH>n$k:
2024-10-30 03:01:48 UTC	3339	IN	Data Raw: 81 e8 4b 1a d4 d7 35 3d 04 94 f1 ed 6c 85 17 87 72 ee 7a ed a5 80 c4 ff 00 1a c9 d1 cf 81 a2 19 6c d6 e9 dc b4 f4 b4 e2 83 05 4b 49 0c c8 d4 11 55 55 b0 5f bc 95 64 8e 25 0c fc b3 2d d5 6d 36 9b 91 98 ee 71 c4 65 bb 9c 24 64 33 69 58 e1 d4 cc 49 ae 09 ce 40 a1 e0 29 41 d2 58 1c 1b 76 66 be 68 60 f1 ab 54 15 79 0a 8c a8 1f 33 4c 90 40 e3 d3 ae 2b 29 4d d7 fb 47 b9 b1 99 3e b7 db 19 ba de d7 da 1b 62 95 df 72 49 90 fe 2f d4 59 ac 7e ea a1 dc 38 5e c6 db 71 e3 2a 68 a8 df 7a 65 30 4b 51 8a a8 6a cf b8 a6 8e 9f 28 ec d1 99 88 d2 2f 9b 77 11 ed 37 36 72 ed 51 5d 3c 9d 89 23 54 98 87 e3 29 e7 9e 15 14 3d a0 65 2a 0a 0e 62 da ee 6e 63 83 73 81 e4 81 35 86 9a 34 34 04 83 d8 d2 01 40 7c c3 03 55 ab 56 9a a8 54 3b c7 e4 36 06 42 2c ce df df 99 0a fa 3a 59 36 d5 4b Data Ascii: K5=lrzlKIUU_d%-m6qe$d3iXI@)AXvfh`Ty3L@+)MG>brI/Y~8^qhze0KQj(/w76rQ]<#T)=ebncs544@\|UVT;6B,:Y6K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49883	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:47 UTC	1377	OUT	GET /app/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.min.js?ver=1 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:47 UTC	1457	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:47 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "199-6242f8fe0a2ea" Accept-Ranges: bytes Content-Length: 409 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:47 UTC	409	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 50 4d 4c 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 44 72 6f 70 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 6c 65 67 61 63 79 2d 64 72 6f 70 64 6f 77 6e 20 61 2e 6a 73 2d 77 70 6d 6c 2d 6c 73 2d 69 74 65 6d 2d 74 6f 67 67 6c 65 Data Ascii: "use strict";var WPMLLanguageSwitcherDropdown=function(){function t(e){(e=e\|\|window.event).preventDefault&&e.preventDefault(),e.returnValue=!1}return{init:function(){for(var e=document.querySelectorAll(".js-wpml-ls-legacy-dropdown a.js-wpml-ls-item-toggle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49884	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:47 UTC	1079	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: careers.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:47 UTC	605	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:47 GMT Server: Apache Last-Modified: Wed, 16 Aug 2023 05:55:18 GMT ETag: "3509-60303f0b16bba" Accept-Ranges: bytes Content-Length: 13577 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:48 UTC	13577	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49885	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:47 UTC	1071	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: careers.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:47 UTC	606	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:47 GMT Server: Apache Last-Modified: Wed, 29 Nov 2023 09:17:13 GMT ETag: "15601-60b47002bc699" Accept-Ranges: bytes Content-Length: 87553 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: 5d 7d 29 2c 6c 61 73 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2d 31 5d 7d 29 2c 65 71 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 5b 6e 3c 30 3f 6e 2b 74 3a 6e 5d 7d 29 2c 65 76 65 6e 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6f 64 64 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6c 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 6e 3c 30 3f 6e 2b 74 3a 74 3c 6e 3f 74 3a 6e 3b 30 Data Ascii: ]}),last:X(function(e,t){return[t-1]}),eq:X(function(e,t,n){return[n<0?n+t:n]}),even:X(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:X(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:X(function(e,t,n){var r;for(r=n<0?n+t:t<n?t:n;0
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 2c 22 66 78 22 3d 3d 3d 74 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 65 5b 30 5d 26 26 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 74 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 31 2c 69 3d 63 65 2e 44 65 66 65 72 72 65 64 Data Ascii: this,t,n);ce._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&ce.dequeue(this,t)})},dequeue:function(e){return this.each(function(){ce.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(e,t){var n,r=1,i=ce.Deferred
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 63 65 28 65 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 2d 31 2c 6f 3d 30 3b 6f 3c 3d 69 3b 6f 2b 2b 29 74 3d 6f 3d 3d 3d 69 3f 74 68 69 73 3a 74 68 69 73 2e 63 6c 6f 6e 65 28 21 30 29 2c 63 65 28 72 5b 6f 5d 29 5b 61 5d 28 74 29 2c 73 2e 61 70 70 6c 79 28 6e 2c 74 2e 67 65 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 29 7d 7d 29 3b 76 61 72 20 5f 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 47 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 7a 65 3d 2f 5e 2d 2d 2f 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 Data Ascii: ){ce.fn[e]=function(e){for(var t,n=[],r=ce(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),ce(r[o])[a](t),s.apply(n,t.get());return this.pushStack(n)}});var _e=new RegExp("^("+G+")(?!px)[a-z%]+$","i"),ze=/^--/,Xe=function(e){var t=e.ownerDocument
2024-10-30 03:01:48 UTC	16384	IN	Data Raw: 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 2c 6c 65 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 Data Ascii: opFix:{"for":"htmlFor","class":"className"}}),le.optSelected\|\|(ce.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parent
2024-10-30 03:01:48 UTC	5633	IN	Data Raw: 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 76 28 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 61 3f 65 5b 61 5d 3d 65 5b 61 5d 2e 72 65 70 6c 61 63 65 28 5a 74 2c 22 24 31 22 2b 72 29 3a 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 65 2e 75 72 6c 2b 3d 28 41 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 65 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 72 29 2c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 63 65 2e 65 72 72 6f 72 28 72 2b 22 20 77 61 73 20 6e 6f 74 20 63 Data Ascii: dataTypes[0])return r=e.jsonpCallback=v(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Zt,"$1"+r):!1!==e.jsonp&&(e.url+=(At.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o\|\|ce.error(r+" was not c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49886	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:48 UTC	1538	OUT	GET /app/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.13 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://careers.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:48 UTC	1457	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:48 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "10f-6242f8fde12a9" Accept-Ranges: bytes Content-Length: 271 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:48 UTC	271	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 66 6f 72 28 76 61 72 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 69 6e 20 77 70 6d 6c 5f 63 6f 6f 6b 69 65 73 29 20 7b 0a 09 09 76 61 72 20 63 6f 6f 6b 69 65 44 61 74 61 20 3d 20 77 70 6d 6c 5f 63 6f 6f 6b 69 65 73 5b 63 6f 6f 6b 69 65 4e 61 6d 65 5d 3b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 27 3d 27 20 2b 20 63 6f 6f 6b 69 65 44 61 74 61 2e 76 61 6c 75 65 20 2b 20 27 3b 65 78 70 69 72 65 73 3d 27 20 2b 20 63 6f 6f 6b 69 65 44 61 74 61 2e 65 78 70 69 72 65 73 20 2b 20 27 3b 20 70 61 74 68 3d 27 20 2b 20 63 6f 6f 6b 69 65 44 Data Ascii: document.addEventListener('DOMContentLoaded', function() {for(var cookieName in wpml_cookies) {var cookieData = wpml_cookies[cookieName];document.cookie = cookieName + '=' + cookieData.value + ';expires=' + cookieData.expires + '; path=' + cookieD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49888	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:48 UTC	652	OUT	GET /m/7c917fa51fcc97e4/original/HomePage-FieldWork-Engineer_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://careers.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:49 UTC	823	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 233803 Connection: close Date: Wed, 30 Oct 2024 03:01:49 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-FieldWork-Engineer_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: dc4f6503-a54b-d72f-5b59-cb79a7cfa91f Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 eaedf92fd05c53aa96f20b6322b473e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: BQkI9lnouH-nQxnU5ZSuwxE9l7wm5kNKQO1DYDYRGIydCxGNftuIiA==
2024-10-30 03:01:49 UTC	15561	IN	Data Raw: ff d8 ff e1 15 33 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 31 37 20 31 35 3a 33 32 3a 30 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 df a0 03 00 04 00 00 00 01 00 00 02 27 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: 3ExifMM*bj(1r2i-'-'Adobe Photoshop 23.3 (Windows)2022:05:17 15:32:02'"
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 36 61 65 39 38 30 65 2d 35 39 33 32 2d 35 62 34 31 2d 61 31 62 64 2d 35 37 65 35 65 61 61 35 38 34 34 65 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 33 37 63 62 35 65 35 66 2d 32 39 38 38 2d 66 66 34 39 2d 39 63 38 65 2d 63 31 66 33 34 37 35 65 38 35 66 33 22 20 73 74 52 65 66 3a 6f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 61 61 31 39 66 36 35 33 2d 30 61 62 31 2d 63 62 34 33 2d 39 34 37 32 2d 38 64 61 63 34 63 65 37 62 65 32 30 22 2f 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c Data Ascii: vedFrom stRef:instanceID="xmp.iid:06ae980e-5932-5b41-a1bd-57e5eaa5844e" stRef:documentID="adobe:docid:photoshop:37cb5e5f-2988-ff49-9c8e-c1f3475e85f3" stRef:originalDocumentID="xmp.did:aa19f653-0ab1-cb43-9472-8dac4ce7be20"/> <photoshop:DocumentAncestors> <
2024-10-30 03:01:49 UTC	2442	IN	Data Raw: 63 cd ac 3f af bb 88 f5 82 35 67 f6 d0 75 a2 a3 82 e4 9f f5 7d 9d 2f 28 f7 05 16 64 a1 59 95 18 95 3a 1d 42 fd 7f d7 e0 d8 1f 76 0a 55 88 19 a7 af 4d e9 a7 1e 1e 5d 08 74 58 c8 a2 a7 35 11 54 10 08 04 aa 38 b3 7d 2e 0f f8 73 fe c3 df a3 9c a8 a6 9e 9b 28 0e 2a 0b 7a 74 db 9b a1 8b 72 62 ab 31 55 51 ab c3 53 0b c1 21 95 03 0d 2c 0a 9e 39 27 83 ed 4a dd b2 f7 46 4f 54 78 d4 82 0d 3a 00 f6 d7 5b d7 f5 a6 42 be 7c 65 2a d6 62 eb 8a b4 d1 53 ea 13 c4 c3 e8 ca 1d 42 b0 37 b1 07 f1 ec c8 6e 0b 3a 85 95 48 27 cf a6 56 d9 61 52 50 64 9e 80 2e dd c5 d4 e6 77 7d 26 e1 fb 16 a2 a7 a0 58 0c 82 70 11 e7 68 25 0c a1 c0 1e ae 16 df 9e 0f b3 6b 69 07 84 ca 1a b5 1d 17 5c 9a ca a7 c8 79 74 ad dd dd f1 b1 aa 36 5d 66 00 d1 d6 cd 93 9b 1e 68 de 93 c5 13 c3 1c a6 30 a1 cc 9a Data Ascii: c?5gu}/(dY:BvUM]tX5T8}.s(ztrb1UQS!,9'JFOTx:[B\|ebSB7n:H'VaRPd.w}&Xph%ki\yt6]fh0
2024-10-30 03:01:49 UTC	2060	IN	Data Raw: 81 4f 97 5a 62 41 18 af 4b be b0 88 54 76 1e cb b9 16 19 fc 79 b7 f5 3e 74 b1 03 9e 7d b3 72 09 82 43 5e 03 ab a1 fd 48 e8 0d 09 eb 69 ea 10 df c2 f1 61 40 00 63 e8 57 e8 6f 71 4d 19 b5 bf d8 fb 0f ea c5 7c fa 38 55 38 23 cb ae a4 2d 7b 7f 4e 39 ff 00 5f fc 3d b4 6b 4c 74 e1 c9 3d 60 70 df d4 7d 2d fe b7 06 c7 81 f4 f6 d9 ae 2b d7 ab f2 eb 11 07 f1 fe b0 ff 00 8d fe 7d e8 f5 b1 5f 2e bd 63 f5 1c 1b 7f c8 87 3e fd 5a e0 f5 ea 0a 93 d7 46 e3 fa 71 fd 7f db 7d 6d ef 5d 6f ae 25 8d ff 00 e2 9e fd c3 af 75 8c ca 01 b1 b8 b9 03 91 c1 27 90 05 f9 e0 1f 7b eb c4 d0 57 ae 8c 8a 2f cf d0 5f ea 0f fc 4f e3 de aa 3c ba d8 e0 29 c3 ae 0d 32 8f f1 fc f1 63 fe c3 83 fe f5 7f 7a af cf af 53 e6 3a e8 cc bf 5e 48 fe bf d7 f1 c0 e3 dd 7c f1 d7 a8 69 5f 2e bd f7 0b fd 1b fa Data Ascii: OZbAKTvy>t}rC^Hia@cWoqM\|8U8#-{N9_=kLt=`p}-+}_.c>ZFq}m]o%u'{W/_O<)2czS:^H\|i_.
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: 22 d2 4c 27 55 5a 8a 6a 82 01 0c 2d e9 68 98 fd 3f de 7d b5 6f 76 b2 38 56 4a 1e 9c ba b5 f0 d7 57 97 cf a5 07 57 fc 6f a8 df bb 41 37 35 4e 6c e3 65 ad 59 7f 86 d3 24 7e 44 fd b6 2a ad 50 4f a8 6a 23 f1 f8 3e eb 2d d8 8d 8a 11 53 d5 ad ec bc 44 d4 5b 3f e4 f4 e8 2b c6 6c 3c c5 4e fe fe e0 33 47 16 4d 72 2f 43 2c 87 98 91 12 ec 6a 01 3c 94 31 9b db fa fb 78 5c 2f 85 e2 0e 1d 25 fa 53 e2 f8 75 ff 00 67 a1 7b b4 3a 0f 21 d7 38 48 f7 04 19 55 ca d1 2c 91 c3 5e b2 46 63 92 99 e5 21 51 e3 fa 87 88 c8 d6 bf e3 f3 ed 98 ef 15 d9 40 5a 0e 95 4f 6a 63 42 e8 6b eb d4 6e af e9 2c af 64 62 aa 72 f1 e4 a0 c6 d1 c7 23 d3 d3 b3 c6 f2 34 d2 c6 0e ae 05 80 8c 37 1e ef 25 d2 c6 68 47 54 82 d4 c8 99 34 1f cb a0 e7 3b b3 33 58 1d dc fb 2e ae 34 7c a1 ae a7 a4 81 a3 24 45 3f Data Ascii: "L'UZj-h?}ov8VJWWoA75NleY$~D*POj#>-SD[?+l<N3GMr/C,j<1x\/%Sug{:!8HU,^Fc!Q@ZOjcBkn,dbr#47%hGT4;3X.4\|$E?
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: 8c 93 c3 a2 c1 b8 76 ee 4b 2b 5d f7 0a 19 1f 50 3a d6 32 15 fe bf 80 6c 14 93 63 6f c7 b5 21 fc 3f 88 0a 75 63 47 a9 56 e9 cf 11 b7 32 cb 1a c4 f2 38 61 70 23 2a cc a0 fd 2e 0d b9 bf d6 de f4 4a 11 5f f8 be b5 4e 19 a8 ea 16 57 05 98 a3 91 bc 2c c1 98 d8 aa a3 58 90 09 17 fc 82 4f bb 0d 2c 47 6e 3a de aa 03 43 e5 d7 74 19 4d c3 88 88 bf dd f8 e4 4e 6d 31 b3 00 2d ce 93 6f f7 8f 7a 91 03 d6 80 75 5d 5e 9c 3a 8b 55 dd 5b b7 16 19 1f c1 34 44 fe b0 59 09 20 db fd 51 5b fe 7f a7 bd 2d b4 4d 4a d4 37 5b d4 6b 83 8f 97 a7 4c 14 9d c9 94 c8 54 1f b8 aa f1 10 dc c0 2e 2e 09 e7 9b da e4 ff 00 87 b5 1f 4c a8 06 91 da 7a d1 cd 3a 53 c5 ba 0e 4b 43 cd 51 fa de c5 58 9f 49 6f cf fa d6 fe 9e f7 18 03 52 81 9e 9b 2a 01 34 18 af 51 33 18 f9 9d 3e f2 92 4b 38 b3 5c 6a b1 Data Ascii: vK+]P:2lco!?ucGV28ap#.J_NW,XO,Gn:CtMNm1-ozu]^:U[4DY Q[-MJ7[kLT..Lz:SKCQXIoR4Q3>K8\j
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: 8b 4c 78 b9 b7 b5 71 7b cb 7f f8 f6 48 0f d8 cc 3f cb d2 84 f7 2e 6f c5 b4 c6 47 fa 72 3f 67 52 57 b1 31 a6 fa b6 f4 8b cd bf 6b 2d 56 38 fc 8f 59 6e 7f e2 7d dc 7b d1 35 7b b6 28 cf d8 ed 5f e7 d3 bf eb 96 b8 d5 b3 8a 7a 07 3f e6 eb 91 ec 3c 41 24 1c 46 4e 21 f8 09 97 04 0f f1 01 e2 27 da 85 f7 9a 22 b9 e5 d3 5f 94 9f ec 74 f2 7b 9b 6d 80 db 33 e9 f9 3f fb 1d 70 6e c1 c4 7e 9f b4 cc 27 d0 7f c0 da 77 d2 7e bf 98 03 7d 3d bc 9e f3 58 0c be c8 f5 f9 49 5f f2 74 e1 f7 2f 6e 23 bf 6b 94 7f b7 1f e6 eb b5 ec 1c 29 03 d3 9a 56 bd 81 f2 d2 1b db f2 3f 6c 11 ed d1 ef 2e d0 e3 bf 6a 98 1f f9 a8 bf e6 e9 e1 ee 46 ce 14 13 63 30 fc d7 ac 8b d8 18 12 d6 fb bc cc 7c dd 81 8e 96 4e 5b 8f c6 9f a0 ff 00 62 7d a9 8f de 1e 5d 24 eb b0 b9 00 7a 15 3d 38 be e2 ec 99 ad bc Data Ascii: Lxq{H?.oGr?gRW1k-V8Yn}{5{(_z?<A$FN!'"_t{m3?pn~'w~}=XI_t/n#k)V?l.jFc0\|N[b}]$z=8
2024-10-30 03:01:49 UTC	4096	IN	Data Raw: 9c 0f 4d 5d ed db 98 5e c1 df b8 5d c9 b7 e9 19 e8 b0 22 90 09 aa 22 29 2d 79 82 71 21 0e bf ab 40 51 a4 5f de ed e0 92 38 99 5d bb 88 fd 9d 56 e6 e9 1e 64 78 d3 b4 74 65 77 87 c9 fe b9 cd f5 85 76 26 3f 2d 46 63 25 87 38 ff 00 e0 cf 01 3e 2a 93 18 4d 4e 48 28 91 c6 c2 e0 df f1 ed 24 76 93 ac c0 e9 ed af 1f f5 71 e9 63 dd c0 d1 35 5b 3e 9e 7d 03 9f 16 bb 8f 6a 75 cf f1 ec 46 e7 75 c7 c3 92 95 6a e9 b2 65 49 52 e8 18 98 25 75 04 80 07 d3 fe 2b ed 4d ed bc b2 69 2b 53 8a 1e 93 d9 4f 14 60 a3 9d 26 b5 e9 25 dd dd 93 b5 f7 7f 6c e2 b7 56 df 81 2b 31 98 b6 a3 5a c9 8c 5a 17 24 69 e6 0f 25 d4 80 5c 69 16 04 ff 00 4f 6e 59 c7 28 85 95 c9 0c 78 74 cd d4 f1 3d c2 b0 ca 8f cf a2 a5 b8 6b 69 eb b7 3e e1 c8 d2 a8 4a 6a dc ce 42 aa 9e 3e 53 c7 0d 45 43 48 a9 a4 72 02 Data Ascii: M]^]"")-yq!@Q_8]Vdxtewv&?-Fc%8>*MNH($vqc5[>}juFujeIR%u+Mi+SO`&%lV+1ZZ$i%\iOnY(xt=ki>JjB>SECHr
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 06 ff 00 53 f5 bd ed ee be 10 35 c7 5e 15 24 d3 a8 a3 35 14 f0 99 6f f4 d4 18 b5 80 00 fd 2f 7f e8 7f de 3d b4 52 9d a0 d0 f5 ba d3 1d 20 f2 39 ba aa 79 de 6a 47 21 e1 90 b2 14 bd 99 49 01 81 3c 58 71 fe bf b7 34 02 02 bf 54 e1 5e 22 bd 22 b7 16 f8 ab ae a2 7a 7a 85 3a 75 92 03 5f 55 ec 41 4b fe 40 bd fd d7 c1 44 f8 72 7a de b1 ea 6b d0 53 8d 56 f2 c9 38 50 ba 9d 98 10 0e a0 2e 3e a7 80 0f 36 ff 00 1f 74 2d 4a d4 79 75 e5 18 fb 7a 37 5f 1c f6 cc f9 3d c7 0d 7b ad e3 8d d4 21 6d 4a af 6b 1b f3 f8 f6 5b 7f 26 88 82 83 93 d1 ae db 01 2e 58 9c 0e 8d 87 c8 3c 75 0a 6d 0a ba 0c 8d 34 73 a4 91 0f b6 91 91 59 e0 9c 2f ed cb 1b 10 74 00 78 ff 00 5b d9 76 df 74 d1 4a 02 e0 70 a7 f9 3a 57 b8 59 78 f1 b6 a5 c9 1d 04 5f 19 73 3b 02 87 6d 65 b0 d9 91 8a 83 31 15 5c ad Data Ascii: S5^$5o/=R 9yjG!I<Xq4T^""zz:u_UAK@DrzkSV8P.>6t-Jyuz7_={!mJk[&.X<um4sY/tx[vtJp:WYx_s;me1\
2024-10-30 03:01:50 UTC	10463	IN	Data Raw: ed ad 79 9f ef 0d aa f7 68 b9 dd f6 f8 ee 66 77 89 4f ea 4a aa 4d 0b 31 f9 d2 bd 00 bb 83 1f 47 17 f7 77 3f 3f 55 e3 36 fe 5b b0 21 ae c9 d4 66 2b 66 49 f3 d8 ea c8 1d 23 0b 31 81 52 09 2a 6a d4 86 2e 00 fc df 9b fb 10 5a f3 14 bb cd f6 ef 6c 39 89 ee 56 cc 80 74 83 a2 4a 8f 2a f9 75 97 df 78 69 f9 7b 93 fd ae b5 b6 db 7d bf b6 b2 9f 75 ec ab 69 32 db d2 87 c8 65 88 f9 e3 a5 2f cd 0d 91 bd f7 0f 59 75 2f 5e 6c ac 15 46 51 31 14 93 6e 8d c1 e0 96 9e 11 04 74 34 51 41 02 38 9a 48 c4 b3 4b 59 58 c5 51 6e 4d bd eb 90 f7 fd 8b 66 df 37 4d cf 78 bf 58 4c 84 24 75 04 d6 a7 3c 01 a0 f9 9e b0 c7 d8 ef 6f f9 9f 9c b7 1e 61 dc f6 1d a9 a7 5b 75 0a cd 50 00 2d 9d 20 b1 cb 10 30 06 4f 55 0f 5f 8e c8 e1 72 53 e3 f2 74 d5 18 dc 95 0c 86 3a 9a 6a 98 e4 82 a6 9e 45 17 b3 Data Ascii: yhfwOJM1Gw??U6[!f+fI#1Rj.Zl9VtJuxi{}ui2e/Yu/^lFQ1nt4QA8HKYXQnMf7MxXL$u<oa[uP- 0OU_rSt:jE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49890	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:48 UTC	652	OUT	GET /m/497b31218fd8e7fe/original/HomePage-FieldWork-Operator_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://careers.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:49 UTC	823	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 274646 Connection: close Date: Wed, 30 Oct 2024 03:01:49 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-FieldWork-Operator_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 89e2c870-696e-58d6-cb2e-f82109838251 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 740769d10d5ef217a54d33b1ec64faf4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: I1DAtfMfcO4MtPEQJq8pog3k8MweK7WJkdjY2JUDV1Wd7HV1xVeafQ==
2024-10-30 03:01:49 UTC	15561	IN	Data Raw: ff d8 ff e1 1c 87 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 31 39 20 31 31 3a 31 35 3a 34 37 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 df a0 03 00 04 00 00 00 01 00 00 02 27 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 23.3 (Windows)2022:05:19 11:15:47'"
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: b3 ea 9d 73 0b 1f 76 3d 96 13 63 48 36 b5 a0 b8 ff 00 26 bd 3e 8a ca 7f d6 7a 9f 68 6b 59 66 cf ce 7b 80 98 fe 4b 07 fe 49 60 38 97 3f e7 cf 9a 2b 48 60 d4 8f 9a 6c b1 89 1b 25 7c 72 18 8a 14 f5 3d 3b aa f4 47 de cf b6 e4 38 53 3e e6 d8 1f 5e 9f d7 6b 76 ff 00 d3 5d 4d 7d 0b a1 75 06 33 d3 3e 95 36 0d f5 d9 55 8e 2d da 46 e6 b9 ba d8 c7 fb 57 13 f5 73 ea b6 4f 5d 3f 69 bd cf c5 e9 40 ed 6d ad 81 65 c4 18 2c c6 dd b9 bb 5b fe 13 23 de cf f8 cb 17 57 8f 7e 4d 7d 1b 10 74 6a c5 34 fb aa 2d 76 d2 5a c6 17 d3 f4 9c 7f 90 8c 22 20 2a ef c4 fc c8 c9 33 33 64 01 e1 1f 95 da 75 42 8e 96 cc 2a f7 3f d1 a0 d4 c7 1d 5e e8 69 63 37 6d 0d f7 2c 5c ba 6c c4 fa a0 5b 63 1f 55 f7 58 1d 6d 76 03 20 ee f4 98 d0 df cd f6 06 bd 5d e9 f6 db 77 40 c3 26 d2 fc 9b 31 80 75 ae 32 Data Ascii: sv=cH6&>zhkYf{KI`8?+H`l%\|r=;G8S>^kv]M}u3>6U-FWsO]?i@me,[#W~M}tj4-vZ" 33duB?^ic7m,\l[cUXmv ]w@&1u2
2024-10-30 03:01:49 UTC	3233	IN	Data Raw: 8f a5 89 bf b5 8a c0 0c 0e b4 d4 00 6a 38 eb d8 e4 db 18 e9 52 0a 64 59 a7 2e 58 48 c4 bb 82 00 e7 55 c9 fa fb 65 f5 35 4f 89 8f b3 aa 83 19 22 87 35 e9 f6 ac 29 68 dd 0f 04 5c 7e 05 81 fa 7b 63 a7 fa 68 dc 5a 5f 07 5a a1 7e b1 3f d7 fd a9 3f e2 3d eb ce bd 78 b7 e9 b0 a7 af 54 8f dc b8 c7 a5 dd 39 3a 9d 41 54 56 92 10 db e9 72 7f 24 fb d7 44 2d 1d 55 f3 c4 f4 19 ee 2e ca dd b8 5c 14 d4 d8 31 47 0d 25 05 00 9a a5 ea 64 09 24 b1 bc a2 32 29 d5 d8 07 36 e4 d8 dc 0f 76 56 a1 a9 1d 5a 38 4b c7 e1 09 02 9a d6 bf e4 e9 53 b1 3b 47 22 d1 cb 4f 53 fc 3a 6a aa 77 a5 35 31 33 2c 91 4c af 1e b4 73 76 ff 00 38 43 03 c7 23 e9 ed 74 72 8a 8c 79 74 cc 8e d0 d5 7c 50 7a 30 34 dd ab 91 82 1f 09 c5 63 9a 27 08 ce 14 68 05 85 ec 40 22 c0 8f 6f f8 9f d1 e9 e8 af 66 8d 34 6b Data Ascii: j8RdY.XHUe5O"5)h\~{chZ_Z~??=xT9:ATVr$D-U.\1G%d$2)6vVZ8KS;G"OS:jw513,Lsv8C#tryt\|Pz04c'h@"of4k
2024-10-30 03:01:49 UTC	13557	IN	Data Raw: 50 52 d2 ec cc 54 8a b6 77 c1 d2 c6 5b 8e 40 85 01 5f c0 e5 ff 00 de 7d f3 e7 dd fb 18 5a ee ea 41 1d 4d 0f 5d 31 f6 52 ed bf 71 f2 bd 65 ad 21 1d 55 77 c8 4f 1c df 21 f6 a4 1e a0 24 cd e3 f5 00 08 05 d5 93 83 f4 05 85 fd e2 13 82 b7 33 78 75 ae ac 8e a7 e9 ca 4c 81 9c e0 93 fe 13 d6 de df 06 68 1d b6 76 1f 55 db 4d 04 00 72 74 8f da 01 6d c1 e7 9f 6c dd 55 74 12 6a 4d 7f c9 d1 95 88 1e 11 50 3b 45 29 d5 8b d5 d1 14 83 57 e0 7d 40 e7 9e 05 be 80 71 ed 28 72 48 1d 2c 74 a2 93 4e 90 b5 b0 86 62 3e b6 3c 7f b0 3f e0 3f c7 dd fa 67 a4 c6 56 97 4c 45 80 17 b1 1f ef 80 1c 5b da 7f 33 d5 ca b0 15 23 a4 fd 03 f8 aa 62 90 d9 2c 6c df e0 7f 24 0e 7e be ec b4 04 1e ae 99 5e 96 15 b1 e3 ab a2 53 2d 4c d7 d6 97 54 26 fe 93 7f 4d ad fa ad 6f 6e b3 d1 7b 48 ad 7a ac 88 Data Ascii: PRTw[@_}ZAM]1Rqe!UwO!$3xuLhvUMrtmlUtjMP;E)W}@q(rH,tNb><??gVLE[3#b,l$~^S-LT&Mon{Hz
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: 00 33 a8 36 77 b5 f4 3f e0 eb 51 1f 94 74 e2 3e c1 ca 85 fa 38 d5 7b 58 70 ed f8 1f 4f 79 cd ca f2 2b ec f1 38 ad 34 ff 00 94 f5 cf 9e 6a 43 1f 35 5e c8 7e 13 27 e7 c0 74 56 f1 fc d4 a8 b5 ee 49 ff 00 0f d4 3e be ce 54 e8 8a 1a fa 9f f0 f4 5f b8 1a c7 23 8e 14 1d 58 bf c7 cc 37 dc 51 51 bb ea b1 d2 4d 87 1e a6 27 fc 38 e7 d8 0b 99 e6 a3 9a 1e a5 1f 6e ad 34 59 2b c8 a3 bb 87 56 31 8a da 6a f8 ab 98 cf f9 be 09 17 e0 f3 f5 b0 f7 1a c9 7a 12 53 52 7a 9a e0 b3 d7 08 c7 97 44 f7 bb 36 e7 83 ef db c6 57 4a c9 c0 fd 3f a4 ad ef 61 cf 3f 4f 6a 1a e7 c5 9a 3a 1c 63 a2 cb 8b 7f 08 ce 00 ee 2a 7f c1 d5 55 e5 a9 f4 67 b3 57 04 15 9b d3 7f f6 00 dc 8b fb 96 39 3a 44 64 97 07 55 0f 58 dd cc e5 a2 dc 24 46 f3 6e 9b bf 17 ff 00 1f 63 38 7f 17 db d1 03 8d 14 43 c7 af 69 Data Ascii: 36w?Qt>8{XpOy+84jC5^~'tVI>T_#X7QQM'8n4Y+V1jzSRzD6WJ?a?Oj:c*UgW9:DdUX$Fnc8Ci
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: bc 6b fe 41 d0 21 42 1b ee 90 9f c1 3f 9f f1 1f f1 3e cc 95 80 94 d4 e0 f4 c5 f6 21 90 79 f5 6e df 0e 72 3e 3a 3c 72 6a 37 4d 2a 7f a5 c1 03 fd 7f 71 67 3f 43 5f 19 c0 f2 ff 00 28 ea 73 f6 ae e1 5f 6e b7 8d 1a b4 e3 fb 3e 7d 5f c7 56 d6 99 31 30 dc de f1 5a df 5f e8 79 ff 00 63 ef 19 f7 b5 51 70 f5 14 eb 27 76 a7 a5 ba 9f b3 a6 6e d2 a0 5c 85 1d 4a cb c0 11 48 7f ad ee 3e 9c 5e fe d8 db 6f 7c 37 04 e0 74 dd f5 a8 95 4d 3a a4 4f 90 3b 26 9a bb 33 38 58 f8 f3 3e 90 54 9b d9 ee 6f 6f c0 f6 2e 8f 98 e4 b6 55 28 f8 19 e8 1f 73 b1 43 73 2b 89 13 b0 ad 3a 00 cf 47 d3 6e 3c 50 9a 3a 61 0d 5c 28 e8 24 89 5c 1e 01 d2 5b 93 ac 9f f1 f7 22 72 f7 b8 53 c6 56 36 97 b5 85 3c fd 47 51 4f 34 fb 4f b7 5e ac b3 c6 b4 90 54 d4 79 fe ce 8b 1e f4 d8 39 9d a9 52 d0 d6 53 b9 8b Data Ascii: kA!B?>!ynr>:<rj7M*qg?C_(s_n>}_V10Z_ycQp'vn\JH>^o\|7tM:O;&38X>Too.U(sCs+:Gn<P:a\($\["rSV6<GQO4O^Ty9RS
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 9e 15 e9 b7 62 6b 9c 75 2c 5a dc 8b fb f7 4d 06 a5 71 d7 60 da ff 00 e2 08 f7 b0 2b 5e a9 d7 ff d0 d5 43 72 4e 20 c7 a4 7a 85 e4 20 81 f5 36 d5 6b 5b 8e 7d 9b 74 db 90 40 a1 e8 2f c9 d5 8a 7a 59 59 4f ea f4 8b 71 73 cd d4 0b ff 00 8f bd 54 75 4e 83 7c 7d 33 e5 f2 b4 b4 6a 0b 34 b3 0d 40 1b 10 a1 d5 9c 30 fc 86 02 c7 fd 7f 6d 48 0b 15 a0 ea 92 36 94 63 5c f9 74 64 33 b7 c6 63 a9 31 94 fc 08 e1 d0 52 ef fa dc 2c 46 e0 1e 40 62 c4 7b 74 63 8f 45 05 cb 93 ab 0c 3a 49 d1 eb 16 16 06 ec 35 13 e4 1c 3b ac 57 40 4f 37 44 bf fa de ed d6 ba 53 d3 b1 d4 b0 34 50 98 4b b3 33 12 e0 a8 69 35 1f c5 80 28 3f db 7b f7 5e eb 3d 45 4b ca 64 26 15 fd a6 55 8c 7e 08 66 bb 96 b8 fa e8 00 7f ad ef dd 7b a8 e2 77 6d 55 0f 4f fb d2 46 54 ad e3 07 d4 6e 40 b7 27 d2 a3 f3 f4 f7 ee Data Ascii: bku,ZMq`+^CrN z 6k[}t@/zYYOqsTuN\|}3j4@0mH6c\td3c1R,F@b{tcE:I5;W@O7DS4PK3i5(?{^=EKd&U~f{wmUOFTn@'
2024-10-30 03:01:50 UTC	4096	IN	Data Raw: a3 b1 3e 43 6e ea 2d a3 b0 71 35 15 09 24 d0 c7 55 5d e3 75 a4 a1 85 e4 d2 d2 ce e1 7c 64 e9 b9 0b c9 3f e1 ef d0 86 9d c2 46 32 7f 67 47 71 db fd 34 22 e2 72 a1 00 ad 2b 9a 7d 9d 6d 07 f0 d7 e0 0e cd f8 ed 84 a3 c9 e4 68 e9 f3 5b ca a2 18 64 ae c9 54 53 ac cf 14 cf 18 25 21 2c 08 8d 63 63 70 07 37 f6 36 da 76 25 8e 35 9e e8 0f 12 a7 87 a7 97 40 bd ef 98 64 b9 d5 06 dd a9 6d c6 3b b0 6b e7 c2 b8 f4 ea ce a8 69 04 11 24 47 f6 97 4a aa 85 16 26 df d5 3f af fb 1f 62 31 ab e0 14 11 8e 1d 06 00 8c a8 72 4f d4 13 9f 4a 74 f9 45 4c 05 60 8d 7f 70 15 07 4d c6 be 41 3c 80 7f c3 f1 ee ca 3b 86 47 5b 52 43 2b 0e 35 e9 01 db 3d 8d 53 d7 b4 6b 1e 3f 0d 5b 96 ac ab 1e 2a 74 a2 88 c9 22 bc a9 64 12 95 bb 28 04 fb 4d 34 8a 82 86 bd 18 db 41 f5 ad e1 92 aa 7e 78 ea af bf Data Ascii: >Cn-q5$U]u\|d?F2gGq4"r+}mh[dTS%!,ccp76v%5@dm;ki$GJ&?b1rOJtEL`pMA<;G[RC+5=Sk?[*t"d(M4A~x
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: d2 37 af f1 6b 83 6f 61 b8 01 65 65 1e b5 fd 9d 1e 48 ba d9 61 1f 19 74 3f 2e d2 6b fe c7 5a f7 fc ad c7 09 3e 42 f6 b3 a8 1a 0e e5 fa 13 73 eb c7 51 38 fa 0e 45 bf de 7d f6 0f d8 7b 61 37 b4 7c 8f 7a 3f b2 7b 18 54 7a d4 03 5a 8f 4c 1e b9 6b ef dd c6 8f 75 b9 a8 03 f8 c3 7e 5a 40 e8 b6 be 30 13 c0 ff 00 6c 2d fe df 8f af b9 96 3b 28 f0 08 ea 25 4b e6 a7 58 ce 36 c3 e9 fe de dc ff 00 b0 1c fb 70 db 01 e6 3a 70 5e 29 f3 3d 49 87 1a a4 7e 38 fe 9c 7e 3f 1e ee b6 e6 98 e9 89 6f 48 35 52 69 d3 88 c7 28 52 2d fd 47 d7 fa fe 2f 6f 76 fa 63 f2 e9 11 bc 62 72 7a ff d5 a3 9e c2 a7 a2 ab a2 ab 4a 8a 78 e5 56 88 ab 24 91 a4 8a 5a f7 2d ea e3 f3 f5 1e c4 1a 3e 42 bd 13 3c 94 97 27 a0 ab 1d f1 b7 6d 6e 4d 9f 06 fd c7 c6 f4 35 b4 b2 b4 6d 1c 0a 4c 08 f1 fa 8c b2 25 88 Data Ascii: 7koaeeHat?.kZ>BsQ8E}{a7\|z?{TzZLku~Z@0l-;(%KX6p:p^)=I~8~?oH5Ri(R-G/ovcbrzJxV$Z->B<'mnM5mL%
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 1d c1 fb 63 ff 00 67 a7 3a 51 90 50 cf 36 3b 23 4f 00 24 bc f3 51 54 c3 16 ab d8 5e 47 8c 21 07 f3 cf d7 da 08 f9 9f 94 77 0d c5 b6 7b 1e 62 82 6b a6 b6 12 2a 2c f1 b3 b3 6a 50 50 2a b3 13 40 49 a8 ce 38 74 be 3d bf 7a b4 2b 71 71 b5 49 1c 6b 92 5a 2a 00 29 e6 6b c3 a3 79 f0 ba e7 e4 2e d6 42 f7 f2 6d ee c2 89 07 3c b3 ec 5c f9 5f ad bf d4 fd 3f c3 d8 37 dd ad 6f c9 b7 d0 c4 ef 18 82 58 1a a1 ab 5f f1 a8 b0 46 29 f6 e7 a1 ff 00 b4 e8 8d cf 1b 0a c8 a8 da 92 e0 7c 20 71 82 59 3f 97 0f e7 f2 e8 9a f6 e9 33 6c 1e c2 81 14 eb 6d af b8 96 e5 54 31 2b 47 52 4b a9 1f d9 20 11 fd 7d c8 7b 47 0b 56 e2 4c 6a 7f 90 e8 03 ce 6f ad 39 b6 dc a8 00 34 9f c9 8f 54 a0 b3 11 fa 8f e6 e2 e7 f0 6c 47 e3 d8 ee ba 96 23 fd 11 d6 3a 4c 9a bc 3c 7e 11 d7 2a aa a0 b4 84 6b 0a c2 Data Ascii: cg:QP6;#O$QT^G!w{bk,jPP@I8t=z+qqIkZ)ky.Bm<\_?7oX_F)\| qY?3lmT1+GRK }{GVLjo94TlG#:L<~k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49889	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:48 UTC	652	OUT	GET /m/691e6b52125d4762/original/HomePage-FieldWork-Business_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://careers.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:49 UTC	823	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 280377 Connection: close Date: Wed, 30 Oct 2024 03:01:49 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-FieldWork-Business_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 789c31f7-bc8e-b07e-82a5-63a8ceca2e25 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Miss from cloudfront Via: 1.1 29f7132906866b79866659848b3a3b68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: 5yrP0MfAUlFG4EbUNAH6xLsfNlEwI9Y-2XADTDKO_qivSCuHH7JGPg==
2024-10-30 03:01:49 UTC	15561	IN	Data Raw: ff d8 ff e1 1d 8f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 31 37 20 31 35 3a 33 35 3a 32 34 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 df a0 03 00 04 00 00 00 01 00 00 02 27 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 23.3 (Windows)2022:05:17 15:35:24'"
2024-10-30 03:01:49 UTC	406	IN	Data Raw: 59 95 8f be 77 3b 1f 32 aa b3 3d 60 5d ee b1 9f 6e 7e 6b 3d 45 45 ef 6e 16 47 d6 26 dc 03 1f 65 0d cf a5 c7 f3 e9 f4 06 0d 91 ff 00 85 72 6a d8 ef f8 fa d4 53 87 ab bb 24 65 e9 7f ff d5 f3 02 ad 57 9c 6c ab d0 c8 24 ce d0 2d 9e cc 9d 8d b0 7f 27 77 d2 55 52 63 65 c3 58 93 c9 ec 8a 9d d6 e4 0b 6e 60 bf dd 5d 0c 96 1e c6 07 b5 ad 2d fd f7 0f 72 3e 3e 4d f4 83 65 2f 2c 3c b9 d5 90 0e 9f 1d cd 72 a9 d2 3a 17 57 cd 20 e2 6d 66 26 e3 39 2f fe 66 7f 3b 66 e6 ef b5 df f1 2c 5b 4e fa ab 9d 5e 94 dd 55 c3 be e0 6b 3f fa 31 34 e4 88 d2 d2 22 4e b4 d7 ab 27 ed f6 45 fb 5b 69 d0 dc d1 b5 8e fc ed b6 d7 3e c7 7f c2 54 e5 ad 57 52 38 77 0f 40 bf 21 fb 43 77 1d 25 bf 9c cd df b9 ed fe 5a c7 3f 57 fa c5 20 ed c6 de 74 20 d7 63 0f fd 17 7a 6e 4f 61 ca c3 ae 4e 3d f4 3c 73 Data Ascii: Yw;2=`]n~k=EEnG&erjS$eWl$-'wURceXn`]-r>>Me/,<r:W mf&9/f;f,[N^Uk?14"N'E[i>TWR8w@!Cw%Z?W t cznOaN=<s
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: cd 7b b6 ff 00 55 67 5f d4 4d 2d 18 99 6c 6d 95 38 c5 0f 71 3e 9b 89 fc d1 64 8b 31 ee fe df fc 5a 7c 7a 5f 88 0e 7e 06 71 19 18 c4 bc d1 71 db 63 5a 35 f5 31 72 9f fa 2b bd 36 fd 3a 32 36 3e d6 7f a5 fe 6d 1e 39 48 ef 5e 48 f6 a0 07 f1 74 cf d5 0f ad ce 9d dd 6b 3c 8e f2 5d ff 00 a5 d0 9d f5 17 af 31 85 ce ea 99 6d 60 e4 81 f7 08 6d db 9d b9 df 98 d5 db 7d 5b eb 2d eb 7d 26 9c d3 02 c2 4d 77 ed 1e dd ed 83 bd 9f c9 b1 8e 65 9b 3f 33 f9 b5 90 ff 00 ad dd 49 f9 83 11 bd 0e c7 1a ae 3b 9e 72 2a 63 1c 18 5c 1a 68 be ed 95 59 f9 96 b5 fe cf f4 69 d4 7f 7c eb e4 b3 bf a4 68 f3 ed fa 8b f5 9a c7 8a 7e d7 90 c6 30 17 3e e2 f7 fa 84 bb fc 13 99 eb bb 17 da df f4 5e ff 00 f4 8b 47 a6 fd 47 eb 14 f5 3c 1c 8c ee a5 97 91 4e 36 4d 57 1a ac 74 b0 9a de 2c 66 ed d6 db Data Ascii: {Ug_M-lm8q>d1Z\|z_~qqcZ51r+6:26>m9H^Htk<]1m`m}[-}&Mwe?3I;r*c\hYi\|h~0>^GG<N6MWt,f
2024-10-30 03:01:49 UTC	8192	IN	Data Raw: 3d 54 9e ef ca 75 f6 e7 cd cc bb e7 0b 51 25 3e 2e ad b1 b4 b8 c8 69 2a b0 d0 d3 cd 0b 18 ea e8 a9 a8 e7 98 3e 4a be 5a a0 64 89 a4 50 b2 47 7d 64 95 f6 51 72 24 86 00 f0 ca 6a 7c eb 5e 84 d1 24 f0 42 1a 09 72 47 1a 82 7a e7 57 bb b6 ee 0b 67 ee 3a 6d 9d 85 c6 62 29 51 2a 45 16 32 16 5a 78 2a 2a 45 36 88 de a9 ee c0 cf 54 ca 15 98 70 2f 7b 7b 02 6e b7 02 25 69 2e ae 00 1e ac 7f c1 d1 65 c4 73 bc b1 99 19 9a a7 27 aa da ea 9f 97 bb 6b 3d bd 86 c3 9f e3 ef 61 8a e9 f1 47 13 9b 5a 2c 3e 83 b3 b7 44 b9 a4 c7 d2 57 e0 eb a3 06 7a ed b9 58 b2 bb 54 d4 a9 b4 6c 15 8a 9f af b2 6b 3b c8 58 02 67 d6 8c 71 4f 2e 96 de d9 4d 45 31 5d 28 a0 ae 4e 08 f9 fc fa b2 8d cb b3 5b 6f cd 2e 06 aa 92 6a 6c ac 74 82 08 e6 ac 8c c4 d3 3d 44 0a 69 e7 a9 d0 81 65 59 11 c2 b9 d2 41 Data Ascii: =TuQ%>.i>JZdPG}dQr$j\|^$BrGzWg:mb)QE2Zx**E6Tp/{{n%i.es'k=aGZ,>DWzXTlk;XgqO.ME1](N[o.jlt=DieYA
2024-10-30 03:01:49 UTC	8192	IN	Data Raw: 14 15 d1 d0 14 48 e4 8d 58 a3 3b 1e 1b e8 72 9b 67 8b 61 1d 9d ad c2 a1 3f 11 35 c8 f4 c7 cf 8f 4a 6f 36 f7 5b 58 ed 6d 59 00 06 ad 9a 57 f3 a1 eb 60 ce a1 ee bc 17 73 ed 4a fc fe 23 17 95 c2 4f 41 a6 2c 86 2f 2c b1 19 e9 64 9a 26 92 10 2a 69 d9 e9 a7 0e 8a 6f a4 dd 4f 07 d8 7a f7 6a 7d ba ea de 23 32 48 ae 70 57 fc a0 f4 09 dd c1 b3 b4 bd d6 c2 ab 19 38 3f 2e be 63 5f cf 47 7e 9d e9 fc c9 3e 40 d4 ac a1 e2 c2 e5 31 bb 7a 22 1a e0 0c 5d 12 44 cb 70 48 5b 39 3e c6 7c c9 d8 76 f8 41 a6 88 14 74 0b e5 95 ff 00 10 d4 2b 56 62 7a a9 dd 99 2b cd 9c 85 7e aa 19 47 fa d7 23 92 6f 73 7f 61 62 c4 15 ce 2b d0 9f 48 4c 1e be 8b 1f c9 5b 7b 8c b7 c5 7d bb 81 69 af 51 82 68 82 a1 3c a4 52 c2 83 8b 12 47 a9 7d c9 1b 73 0b 8d b8 29 cd 07 40 0d f1 00 b8 2c bd 5e 75 0e 6a Data Ascii: HX;rga?5Jo6[XmYW`sJ#OA,/,d&*ioOzj}#2HpW8?.c_G~>@1z"]DpH[9>\|vAt+Vbz+~G#osab+HL[{}iQh<RG}s)@,^uj
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: b5 d8 5b dd 91 9b c0 52 a6 83 a5 7a 41 02 bc 69 e9 d5 9e ed 6c fe 77 01 f1 7b 6e 6d f4 69 0d 4e e8 ce 56 e6 a2 9a 66 7f da c4 24 49 49 0e 99 9c 0b 17 68 98 f1 70 ab 6b 1b fb 51 73 23 98 e3 46 35 3d 0e f9 6a db c3 80 bb 0f 3e 82 dc 75 53 54 e3 05 0e 5a ae 9a 2a 3a 3a c6 ac 31 c5 1e 85 5a 48 e3 2d 50 a2 f7 67 77 2a 00 d4 7d 27 9f 65 c0 77 02 7a 16 d4 8e 3c 3a 09 b7 06 e7 c7 67 a7 a6 4a 2f 0a 50 c1 54 90 c1 2c a7 4f d6 48 75 c8 1c 0f 58 66 56 b0 b8 b8 3e d5 24 46 a0 8e a8 d2 50 53 cc 7a 75 03 78 e3 69 b2 98 b6 9e 69 90 ad 42 3c 50 c4 c1 4b 53 88 e0 fd 96 55 23 57 21 ac a6 fc 11 cf b7 15 8a b1 c6 3a d0 21 c6 49 07 a0 26 6c 65 05 1d 4c 18 f4 4d 0d 47 42 04 87 58 2d 3c ef 10 74 79 98 8e 1d 24 7b 30 06 e0 03 ed 55 6a 01 f9 75 50 42 9a 9e 1d 29 b0 58 19 5e 2c 2b Data Ascii: [RzAilw{nmiNVf$IIhpkQs#F5=j>uSTZ::1ZH-Pgw}'ewz<:gJ/PT,OHuXfV>$FPSzuxiiB<PKSU#W!:!I&leLMGBX-<ty${0UjuPB)X^,+
2024-10-30 03:01:49 UTC	4096	IN	Data Raw: 6c a5 46 4f 62 bc 95 36 d6 7d 2e 6d 60 7d 60 5c 0f c0 23 dc 1d ee 85 84 36 ca a6 3f 26 c7 ec e8 7d ca 9b 84 d7 64 89 4d 40 1d 00 79 25 ff 00 2a 89 40 e1 60 16 1f 82 3d 5c fb 81 64 a5 58 9e a4 b8 87 68 e8 67 ea d1 fe fd ea 6f ea d5 93 71 fe 3e 42 3d 96 c5 4f ab 5f b7 aa dd 11 e1 bd 7d 3a 66 ec a3 7c d0 b7 e2 14 ff 00 89 bf fb 1f 66 d7 df db 8c e3 1d 26 b0 34 88 fa 57 a5 af 5c c6 17 11 52 df 5b 87 36 e7 fd 48 1c 5f fc 7d 9c ed 7f ee 35 c1 a7 e1 3d 14 ee 86 b7 50 e7 cf a0 6b 31 ea c8 d4 01 f5 f3 4a 7f e4 f3 ec 2b 20 01 d8 9e 8f 62 1d 8b 53 8a 74 59 bb 68 91 b9 30 cb f9 fb 60 39 e0 73 20 b5 cf fb 1f 77 b5 6a 4a 68 31 d3 ff 00 83 1c 3a 5c 44 97 ab c1 29 fa de 94 01 fe 3a 93 fd ee fe d5 82 4c ab 9f 3e b4 d8 46 af a7 46 8f 70 40 b4 db a5 73 0f 25 85 06 dd 83 c6 Data Ascii: lFOb6}.m`}`\#6?&}dM@y%*@`=\dXhgoq>B=O_}:f\|f&4W\R[6H_}5=Pk1J+ bStYh0`9s wjJh1:\D):L>FFp@s%
2024-10-30 03:01:50 UTC	8192	IN	Data Raw: 49 af da 17 62 14 af 97 45 9b 95 c3 5a c7 ad 16 bd 16 6a bd c9 35 64 5e 26 a5 86 24 4e 0b 29 6d 7c 8f e8 6c 2c 3d ca f0 ed 89 03 ea 12 b1 27 f6 74 18 9a fd e5 52 ad 18 e9 35 f7 72 a3 93 af 86 60 08 36 fa 37 f4 fc 5f d9 b7 82 a4 0e de 8b f5 1a d7 af ff d5 da 57 e3 0f c8 8d d7 da f9 fc b5 26 76 8b 17 44 71 c9 4c f1 8c 78 98 6b 59 c9 57 12 79 58 9e 08 e0 8f 79 25 cd 5c b1 65 b6 d8 19 22 d5 aa be 7d 63 79 72 cc 35 1e 8f 8e 7e aa 6a 6c 55 5c d0 5b 58 88 95 bf f5 2b c7 1e e2 dd ba 14 9a ee 18 e4 f8 6b d5 09 6d 44 75 51 1b a7 e6 a7 60 6d ed cf 9e c2 c1 82 c0 ce b8 bc ad 6d 0a 49 23 55 09 1d 29 a7 68 d5 9f 49 d2 18 aa 8b db 8f 73 c5 bf 25 6d 73 c1 13 96 6c a8 e9 d1 3b e9 00 f1 e9 80 7c f0 ec 76 92 cd 80 db d6 fa 70 f5 97 fc 7f b5 1f cf b7 7f a8 7b 50 c5 5a 9d 6c Data Ascii: IbEZj5d^&$N)m\|l,='tR5r`67_W&vDqLxkYWyXy%\e"}cyr5~jlU\[X+kmDuQ`mmI#U)hIs%msl;\|vp{PZl
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 0d c0 cb b8 26 c6 cb 18 96 8a 7a 35 3a 1c 92 c8 cd c5 f4 fd 6c 0f d3 da 58 40 3a 8a e0 f4 ac 44 42 d5 7a 4d d6 50 47 41 86 a6 64 98 3a b4 a5 96 3b d9 c2 3f e3 eb f5 07 f3 ee e8 e5 9c 8d 22 a3 ad 04 f4 e3 d5 b1 7f 2d 3d b3 b3 f3 1b 67 b5 b2 63 21 96 c7 ee 8c 4e 0f ec ab 98 d1 c3 4d 83 9e 9b 23 29 7a 2a 73 90 9a b0 17 c8 ab 46 74 fa 02 e9 62 7f 1e cf 6d 12 33 1b 36 93 aa 9d 29 80 91 20 a9 14 e8 33 ed 5c 2e 72 93 72 d6 a9 92 29 e1 8d ea 02 47 42 64 a8 7d 72 3b c6 1d 5e 30 c9 2b aa 93 7d 26 c2 fe cb a4 a6 a6 20 d3 3d 0b ad db 52 00 17 a4 ee c7 c5 e6 f0 99 ca 7c a4 31 6a a3 8e 19 23 ac 59 01 58 92 06 51 23 34 a5 c8 10 85 97 4d af 72 e7 e9 ed 14 d1 f8 8a c2 b8 e8 e7 6f 9d a0 99 1a 99 e8 7c ca 6d ac 65 26 3e 97 7f ec fa b7 a1 c8 d4 4d 1b 64 68 d0 de 28 42 b0 32 Data Ascii: &z5:lX@:DBzMPGAd:;?"-=gc!NM#)z*sFtbm36) 3\.rr)GBd}r;^0+}& =R\|1j#YXQ#4Mro\|me&>Mdh(B2
2024-10-30 03:01:50 UTC	1514	IN	Data Raw: f6 e6 73 b9 76 ac 3b e3 68 ac 14 f4 3b af 33 b5 29 a3 a6 dd 9b 76 b4 05 8d aa aa b1 c6 41 4b 91 a6 d5 76 62 0a 31 06 e2 fe c7 d6 77 68 42 34 a0 b4 7e 7e a3 a8 fe f7 6c d3 a9 63 c4 9e 5e 9d 6c 3b d0 ff 00 2e 3a 93 e4 6e 3a 97 31 d5 f9 45 cc e2 aa e2 0f ac 78 d2 a6 91 ed 73 0d 65 38 91 9e 09 90 f0 41 1f 5f 62 4f 0a c2 7b 53 34 07 ba 9d 06 1a 3b d8 66 f0 e5 18 e8 cd b4 84 11 fe bf d0 fe 3d 93 12 45 47 4a c8 20 00 78 f5 29 64 24 0e 3f df 0e 3d d0 33 79 f5 e0 3d 4f 58 25 63 cd 87 f5 ff 00 7d f5 fe 9e ed 9a ae 3a f7 0a 8e 83 5d e5 ff 00 01 81 52 11 bc d1 d8 8b 83 fe 75 78 b8 e7 9b fb 1a 6d c2 b6 6b d0 6a ec 93 70 d5 e1 d4 ec 6d 55 5a 46 62 89 19 95 e3 60 48 bd c8 bf b0 9f 37 dd df 45 18 8a de 32 c8 46 69 5e 8f b6 02 8a e5 88 cf 58 29 a9 e4 a5 ad 7a 81 4e c5 a4 Data Ascii: sv;h;3)vAKvb1whB4~~lc^l;.:n:1Exse8A_bO{S4;f=EGJ x)d$?=3y=OX%c}:]RuxmkjpmUZFb`H7E2Fi^X)zN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49891	52.222.214.74	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:49 UTC	602	OUT	GET /m/19b3430eb5bf5b46/original/CorpMontage-BLK80_3840x1634.mp4 HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://careers.ovivowater.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-10-30 03:01:49 UTC	910	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 36120753 Connection: close Date: Tue, 29 Oct 2024 20:55:58 GMT Server: nginx Content-Encoding: identity Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="CorpMontage-BLK80_3840x1634.mp4" Access-Control-Allow-Origin: * X-API-Correlation-Id: df5712fe-4059-d5b8-74ba-8532eddf4b54 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() Content-Range: bytes 0-36120752/36120753 X-Cache: Hit from cloudfront Via: 1.1 a23fc047c59f0902384fa94644607c00.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: BdgmHdqRTXKWWspQ4yIHl7jrlN4tSdg6MHK7wFMwY0fi1Af3mkWNGA== Age: 21951
2024-10-30 03:01:49 UTC	15990	IN	Data Raw: 00 00 00 18 66 74 79 70 6d 70 34 32 00 00 00 00 6d 70 34 32 6d 70 34 31 00 00 22 e5 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 de d6 0f d3 de d6 0f d5 00 01 5f 90 00 27 ba 51 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 22 31 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 01 de d6 0f d3 de d6 0f d3 00 00 00 01 00 00 00 00 00 27 ba 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 0f 00 00 00 06 62 00 00 00 00 00 24 65 64 74 73 00 00 00 1c 65 6c 73 Data Ascii: ftypmp42mp42mp41"moovlmvhd_'Q@"1trak\tkhd'Q@b$edtsels
2024-10-30 03:01:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 0a 20 20 20 20 20 20 20 20 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 39 34 39 63 34 33 31 2d 66 31 32 38 2d 33 34 34 33 2d 39 63 62 66 2d 66 30 66 36 66 31 65 63 30 63 65 34 22 0a 20 20 20 20 20 20 20 20 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 32 2d 30 36 2d 31 33 54 31 39 3a 35 39 3a 31 36 2d 30 34 3a 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 72 65 6d 69 65 72 65 20 50 72 6f 20 32 30 32 32 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 0a 20 20 20 20 20 20 20 20 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 6d 65 74 61 64 61 74 61 22 2f 3e 0a 20 20 20 20 Data Ascii: stEvt:action="saved" stEvt:instanceID="xmp.iid:0949c431-f128-3443-9cbf-f0f6f1ec0ce4" stEvt:when="2022-06-13T19:59:16-04:00" stEvt:softwareAgent="Adobe Premiere Pro 2022.0 (Windows)" stEvt:changed="/metadata"/>
2024-10-30 03:01:49 UTC	9594	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-10-30 03:01:49 UTC	2816	IN	Data Raw: 36 df 6e f9 ea 1b f2 80 ca d0 78 de 4e 0d 70 ad ef d3 ba fc 22 e8 cd ed de f5 5b 88 37 db da 24 a8 32 93 17 b9 e9 56 40 0e 49 9a 0e 45 5a 8c 78 25 c2 e7 17 ae be 92 1c fe 73 c5 04 f0 67 1a d2 71 97 c1 a9 b7 2f 3a 01 39 62 10 66 03 5c dc 17 2a 5d f2 6e ab 53 1c ac 8c 25 2f e2 dc 48 ab 43 3f 62 a5 5c 3f 97 5c 65 08 ae 10 cb 45 aa f6 11 2a cb 21 9e 4e e0 8a a5 71 f3 76 62 c2 0f 08 27 8e e8 8b a3 5a bb 39 f5 7b 80 a3 a8 79 41 fd 9e 1c 08 da b0 3c 2d 02 ca 9b b3 66 41 9f 03 88 8a 65 c8 3a 70 09 ee 1b 80 69 f5 28 d1 6f 9a d3 3d af 67 5a ef b6 52 96 44 fe 0e 4c 01 bc fe b7 e2 8c 0f 4a 58 1d cf 1c 05 de b7 ca 83 9f 5d 31 25 bc e8 a6 1a 0d 4e c1 c7 c2 74 ff ca 57 37 7a 89 fe 62 1d c0 e3 f7 98 18 25 08 cc 51 61 64 bf 11 39 a9 d1 97 8f ab 21 32 18 8e 51 1c 7b 06 0a Data Ascii: 6nxNp"[7$2V@IEZx%sgq/:9bf\]nS%/HC?b\?\eE!Nqvb'Z9{yA<-fAe:pi(o=gZRDLJX]1%NtW7zb%Qad9!2Q{
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 33 45 d0 a8 28 91 f9 60 ab b9 cd 52 89 01 ed 5b d7 58 f3 67 15 29 32 61 b5 e6 a9 17 0e 57 52 1e 71 fe 7f 53 79 a1 b9 3d ca 70 5a a3 71 99 1c 1e fc c0 fc 8c dd 55 95 a8 b7 e9 a2 76 74 61 ec 03 20 7e bc a6 ac 95 18 e3 4a 06 dd 97 2b c2 86 b0 b9 da 81 8e b9 cb 74 b5 05 c4 b7 79 94 0a c3 d9 ef dd 6b e3 08 2e 6e b4 bf 79 8d 9a 9d a9 b2 06 7e 21 ca 28 b0 e7 72 6c 15 a0 b1 68 78 e9 3b 82 d2 b8 08 82 d0 4e ce 46 a5 65 cb 93 23 2a 7f 71 ef f5 ec 29 86 a0 45 ab 33 f0 63 74 bd 4c 87 55 7e 7d 9d 11 f6 81 b3 ae 42 a4 f8 57 06 a7 0a 9e e8 f4 af f3 74 e9 9b 9c 00 f0 4d 9c 49 03 6c e9 20 0d d5 2e 7f 60 98 a3 d6 43 43 9e b6 69 78 66 89 9b f9 92 81 d6 ab 66 1a 40 4d 23 76 c1 83 da fd 6f 01 32 d1 0a 4b 61 f0 cc 7f 1c 55 d5 e7 af 6f 89 9e 00 4a c2 16 33 e8 f3 69 10 51 80 a4 Data Ascii: 3E(`R[Xg)2aWRqSy=pZqUvta ~J+tyk.ny~!(rlhx;NFe#*q)E3ctLU~}BWtMIl .`CCixff@M#vo2KaUoJ3iQ
2024-10-30 03:01:50 UTC	2804	IN	Data Raw: 4f c4 28 05 04 24 39 69 31 e1 38 38 d0 58 dc e6 a9 6c 4f 7a d1 ab a1 af a2 03 37 3d 56 c1 8c 37 ed 27 4f da 11 e6 31 c9 6a b1 10 7d 97 e4 94 5c 7c e8 7d 3f 00 7e 11 6d a8 79 d4 91 36 f3 26 84 47 b2 3c 6c 27 82 9c 30 7c e9 d5 af 16 2a f3 ae e4 b8 21 47 c5 0a 0c 5d 8a 36 32 b9 bc 89 e1 4f 2d c5 56 be f6 42 d6 bc f0 45 a8 d1 6f 2f cc 1f b8 c3 76 bf e8 4a 49 6e a9 5a fc f6 4f b6 1d c7 8b d7 ad 56 4c 0a ea 6a 32 f7 d4 78 f2 18 52 6e 4d 3e 73 f0 69 39 6e eb 63 f9 71 fe 38 16 ff bb 00 23 8b 19 3d dc ab e0 07 e9 dc 8c bc db be 4a 09 00 33 28 e5 42 29 49 b0 7d 85 66 9b d2 8e 2c 05 cc b3 5f 1f f3 31 50 67 86 12 23 73 95 a7 6e 8b 37 89 1c 83 ad 71 e8 71 a4 7a b1 e4 fa 1a 1c 9f 3b 6a 09 2c fb 52 e4 7f 13 39 94 a4 57 48 90 1a 99 df 89 37 90 60 f8 e2 50 76 7b 69 bc 85 Data Ascii: O($9i188XlOz7=V7'O1j}\\|}?~my6&G<l'0\|*!G]62O-VBEo/vJInZOVLj2xRnM>si9ncq8#=J3(B)I}f,_1Pg#sn7qqz;j,R9WH7`Pv{i
2024-10-30 03:01:50 UTC	103	IN	Data Raw: 17 9f b4 cc 6d 24 44 05 3d 32 a1 a5 a3 f5 e2 07 17 70 ad 11 11 8d 27 4e 83 02 2d 2f f6 4a 1f 7e f6 ed a2 60 2b 82 3f 7e 57 84 1d d3 8c 33 15 9a db 5a 14 31 ce be f6 b6 22 b8 10 3a 9e be 77 66 44 a7 77 73 e4 e8 1f 75 f6 7c 01 fd f0 83 34 d0 76 f1 fb fc 53 dd 89 a4 84 a8 fc 01 5b 89 7f 18 84 2e 35 73 74 51 96 Data Ascii: m$D=2p'N-/J~`+?~W3Z1":wfDwsu\|4vS[.5stQ
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 46 d1 74 c2 99 c7 a3 f3 64 b2 8b c6 fa ad 4f d3 a7 0f c6 2a 96 f8 60 d6 ae 38 00 6c 47 ed 20 11 57 52 43 8b a8 06 89 4e c2 b3 39 a4 d4 f8 75 0d a8 1a 12 79 7f 42 40 30 6e 84 09 01 d7 44 49 c5 b1 2a 18 e5 da 2a 5a 3e d8 74 84 01 5c 87 14 9f f6 86 30 fb aa f3 2c e1 e4 99 5f 9a db 49 de 98 75 5e 5d 8f b4 b4 75 ea b9 bc c1 0c ac dc c0 df 46 23 17 d1 4c 33 25 75 17 8a 40 e3 ad 9d 2c 9d bc ae 7c 71 34 2c 18 83 70 b5 86 08 02 93 36 aa 2d 56 3e 2f 56 52 66 21 a0 fe d0 0f 91 78 59 1e 2d 71 75 ff e1 fc 93 50 6b cb e5 6d 73 29 a2 b3 a1 f2 0c 92 09 7e 26 3a a7 a6 b2 28 00 03 d4 d6 8d 00 60 8e d8 93 ee 24 3c 74 6a 2f 92 73 20 e6 62 0b 47 41 01 f7 20 31 8e 51 2e 7f fe 35 a8 88 71 2d 02 22 24 9d e0 fd b9 96 f9 7f a8 e9 b7 a8 50 c6 b4 24 be 30 06 cb 3c 8b 1b 71 2d ab 44 Data Ascii: FtdO`8lG WRCN9uyB@0nDI*Z>t\0,_Iu^]uF#L3%u@,\|q4,p6-V>/VRf!xY-quPkms)~&:(`$<tj/s bGA 1Q.5q-"$P$0<q-D
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: a8 94 67 db 53 ff 96 84 3e 19 77 34 2c 30 be e3 f5 47 81 c1 c1 6f 30 d0 d2 d7 58 ac 80 e7 50 98 cf 55 7f d7 4f 42 b0 33 35 78 49 e8 33 2f 0e 2f 10 c1 86 01 93 ab c0 b3 f4 f8 fb 10 8f 89 6a 63 bf 31 18 9d 3a c4 fb 2c f8 5f 69 f4 fa 7e 3f d2 25 8a 86 60 70 3b ed cd f4 7d 9a aa b8 a1 90 e6 58 85 11 59 cc c8 9d 7b ad a5 d9 58 81 36 56 6c 46 61 e1 13 be 0e ac 46 0f 9a e7 dd 6e 96 67 7f 64 43 62 5a 5b 48 d5 83 6e ac 66 04 62 41 d3 a0 fe 46 a6 a2 2d a8 04 23 42 b2 70 50 ab 75 21 ed 84 8f dc fa 23 e7 ba ed 15 35 b5 e1 b3 8a 3c e9 31 5d 85 09 6c ac 65 e3 16 a8 0c 76 b2 6b 5b ce ee 58 b8 9a 2e 25 a9 ce 8c e9 0e 25 2d f3 56 81 3b 80 4b 8f 7d f4 43 11 28 52 0a 6b e8 70 2f f2 fc 16 7a d2 86 38 b0 96 a7 67 d0 3d 8f 98 0a e6 35 8b 0f 70 62 fa 43 ed fb c5 3d 2e 1e a6 fb Data Ascii: gS>w4,0Go0XPUOB35xI3//jc1:,_i~?%`p;}XY{X6VlFaFngdCbZ[HnfbAF-#BpPu!#5<1]levk[X.%%-V;K}C(Rkp/z8g=5pbC=.
2024-10-30 03:01:50 UTC	1514	IN	Data Raw: 8a a5 02 7a bb 5d 18 ba da f9 83 a2 e9 9b e2 fe db 02 c6 79 ab 38 1f 92 e7 63 7a 03 1a eb 75 3d d8 0e 15 e1 af 04 a7 d4 35 38 97 6d 31 e3 58 a4 08 16 5a 19 fb 5b 68 36 93 79 4b 3a 0d f0 64 83 dd b9 7e 6f 77 65 5a a4 a9 ba cf f9 09 37 40 a0 f2 9d 3a ab a6 24 98 b5 67 4e 50 46 fe 1f 87 48 89 ec 70 62 49 45 65 03 07 a9 8d 9c 9b 0a 86 fa 8c 9b f0 6d aa 2b 32 77 6b d4 85 21 b2 2d b0 47 70 35 e4 49 74 9a e3 13 d2 3c 80 17 67 5a a4 5e e5 38 82 ab ab 8d 9a 6a 48 4f 3a f7 23 21 1b 83 23 f4 5f 05 0e 65 11 7e 01 1b 72 57 59 62 fe b7 23 46 03 d6 51 7d 91 6b 7d e3 a0 35 21 a6 29 c3 08 8b 44 dd b9 00 a3 96 91 30 08 1b 80 6b fc a8 e3 c3 cb ed 28 2a e1 27 1c f3 4a 91 e2 5d ad bb cf 3d 06 4a fa 67 c5 ec cf 79 6a 3e a2 0c fe 8a 3c ed ea 66 42 8d 6e 52 1e ff df 7e 5b 0d 4e Data Ascii: z]y8czu=58m1XZ[h6yK:d~oweZ7@:$gNPFHpbIEem+2wk!-Gp5It<gZ^8jHO:#!#_e~rWYb#FQ}k}5!)D0k(*'J]=Jgyj><fBnR~[N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49893	54.72.117.121	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:50 UTC	1357	OUT	GET /app/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.13 HTTP/1.1 Host: www.ovivowater.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_3N3F1TJNT7=GS1.1.1730257278.1.0.1730257278.60.0.0; _ga=GA1.1.833971690.1730257278; _gcl_au=1.1.969400457.1730257280; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no; calltrk_referrer=direct; calltrk_landing=https%3A//www.ovivowater.com/en/; calltrk_session_id=000196a6-08bb-4e64-89ba-1051944f1b33; _uetsid=3eaf7530966b11efad630ff01f787c14; _uetvid=3eafde40966b11ef8d7c07f1fcc905fb; _trackatronId=snzthm7h2; _trackatronId=snzthm7h2; _hjSessionUser_1840342=eyJpZCI6IjA0NTBjNWQ2LWRjZDItNTI0ZC1hN2FhLTAyYzE2NjkwNjE1OSIsImNyZWF0ZWQiOjE3MzAyNTcyODU4NDMsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_1840342=eyJpZCI6IjAyNjViODgzLTkxZTItNDEzMy04NjkyLTg5NWEwMzZlZGVhNSIsImMiOjE3MzAyNTcyODU4NDYsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-10-30 03:01:50 UTC	1457	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:50 GMT Server: Apache X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: geolocation=(), microphone=(), accelerometer=(), gyroscope=(), magnetometer=() Strict-Transport-Security: max-age=63072000; includeSubDomains Last-Modified: Fri, 11 Oct 2024 08:49:16 GMT ETag: "10f-6242f8fde12a9" Accept-Ranges: bytes Content-Length: 271 Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; script-src 'self' https://forms.hsforms.com/ https://script.hotjar.com/modules.625495a901d247c3e8d4.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://js.hsforms.net/forms/embed/v2.js https://js.calltrk.com/group/0/d625593f098d4d02b587/12/swap_session.json https://script.hotjar.com/modules.67d7d905831ab88336d0.js https://js.calltrk.com/ https://static.hotjar.com/ https://cdn.calltrk.com/ https://cdn.loopanalytics.com/ https://bat.bing.com/p/action/134002157.js https://bat.bing.com/bat.js https://www.googletagmanager.com https://careers.ovivowater.com https://acsbapp.com https://www.ovivowater.com 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; media-src ; object-src 'none'; connect-src ; frame-src ; X-Content-Type-Options: nosniff Access-Control-Allow-Origin: Connection: close Content-Type: application/javascript
2024-10-30 03:01:50 UTC	271	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 66 6f 72 28 76 61 72 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 69 6e 20 77 70 6d 6c 5f 63 6f 6f 6b 69 65 73 29 20 7b 0a 09 09 76 61 72 20 63 6f 6f 6b 69 65 44 61 74 61 20 3d 20 77 70 6d 6c 5f 63 6f 6f 6b 69 65 73 5b 63 6f 6f 6b 69 65 4e 61 6d 65 5d 3b 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 27 3d 27 20 2b 20 63 6f 6f 6b 69 65 44 61 74 61 2e 76 61 6c 75 65 20 2b 20 27 3b 65 78 70 69 72 65 73 3d 27 20 2b 20 63 6f 6f 6b 69 65 44 61 74 61 2e 65 78 70 69 72 65 73 20 2b 20 27 3b 20 70 61 74 68 3d 27 20 2b 20 63 6f 6f 6b 69 65 44 Data Ascii: document.addEventListener('DOMContentLoaded', function() {for(var cookieName in wpml_cookies) {var cookieData = wpml_cookies[cookieName];document.cookie = cookieName + '=' + cookieData.value + ';expires=' + cookieData.expires + '; path=' + cookieD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49894	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:50 UTC	396	OUT	GET /m/4fac9f08596efdc2/original/HomePage-Life_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:50 UTC	816	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 376145 Connection: close Date: Wed, 30 Oct 2024 03:01:48 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-Life_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: eaba2665-2314-e840-6ed7-9b8edad84f67 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 4c692717a0e85914a993c3aa5c8a2ef6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: E5FHjifRgMQJu2ERkHiinAtitTKPViw2oigw-xWIY-5OTGtU9BwQ4g== Age: 2
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: ff d8 ff e1 1f 1a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 31 37 20 31 35 3a 31 36 3a 33 39 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 df a0 03 00 04 00 00 00 01 00 00 02 27 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 23.3 (Windows)2022:05:17 15:16:39'"
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 83 69 9b 69 3e 9b cf 8c 7d 17 ff 00 69 ab ca be a8 f4 fe aa dc 07 8c a6 3b 17 1c d8 2c c5 75 c0 87 38 3c 46 47 a7 4f f3 9b 1c e6 52 f6 3f e8 2e ef ea b6 53 ab cd bf 19 ee dd ba ad e0 8f e4 10 d6 fb 63 fe 11 08 69 23 10 99 eb 1e 22 ff 00 ff d4 e1 46 50 2e 93 46 3c 1e 7f 43 57 fe 41 5c ca c2 e9 d7 61 da fa e8 6d 37 b5 85 cc 75 66 35 1e ed bb 7e 83 9a e5 96 d5 a5 53 bf 44 41 e0 b4 8f c1 33 65 fb b8 0d 79 99 28 95 87 17 6d ac 17 1b 01 63 44 77 77 b1 ad ff 00 a4 80 d7 1d 3b a2 57 73 d8 ed cd 71 6b 81 04 39 a6 08 23 8d 90 a5 63 7d 0e 9e b3 d5 71 f1 aa c5 39 52 28 63 2b 30 d6 44 b5 ad 69 73 66 b4 e3 eb 1f 55 ab 41 78 6c 77 35 d4 f9 fc d7 03 b9 9f e6 2e 5b 17 ab 5b 7d 53 6f d3 07 69 78 10 d7 18 3c fe 6b 6c 73 5b f4 54 dd 97 b8 c1 77 97 2a 8f 06 40 68 92 cf c4 29 Data Ascii: ii>}i;,u8<FGOR?.Sci#"FP.F<CWA\am7uf5~SDA3ey(mcDww;Wsqk9#c}q9R(c+0DisfUAxlw5.[[}Soix<kls[Tw*@h)
2024-10-30 03:01:50 UTC	7516	IN	Data Raw: 53 25 4b 88 e3 6b 33 27 b2 3e 48 f7 81 57 71 bc b6 e6 cd b9 2d d6 dd 74 a1 81 19 99 ea 0a 18 4c 45 8a 54 a1 24 3a 95 55 6e e6 af 52 0f 33 7b 79 6b 06 df b7 4d cb bb a2 9b 2b 9f d4 3e 2b 05 0b 4a 48 b3 24 84 07 3d c3 31 95 66 61 da b4 e8 d0 6d af e6 0b be fb 57 1d b6 fb 43 7b ec e5 ea ee ae df d0 e0 37 3f c7 2c e6 2a 78 72 34 bb 9a 87 72 50 54 57 64 36 f6 67 76 e3 b2 95 f8 57 ec cc 3e 3a 38 d2 bf 0d 0b d3 d5 50 01 3c 73 c0 19 58 02 0f 71 39 df 9c a1 82 d2 7d 9f 6a 9a cf 96 ff 00 49 d6 ea 39 92 5f 19 98 1a 47 37 86 48 88 a9 57 22 32 a4 12 0f 7b 15 c1 9f 20 6d fc bd 77 7f bb 6d fb a3 f8 fb b8 1d 91 cb 6e d1 28 8f f1 18 59 ea 24 34 64 d6 55 83 28 22 aa a1 ba 63 e8 9c 5f c0 09 3b d3 7b ef 1a 1d 9b f1 fb a2 7e 52 6d fc b6 d3 c4 61 77 97 6c 6c a1 5d 06 51 b7 66 Data Ascii: S%Kk3'>HWq-tLET$:UnR3{ykM+>+JH$=1famWC{7?,*xr4rPTWd6gvW>:8P<sXq9}jI9_G7HW"2{ mwmn(Y$4dU("c_;{~Rmawll]Qf
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 4f 5a 6c 1a 1e dc ed 7c 07 fa 4f da d9 0c 55 65 4e 4e a2 87 ad 3a cf a5 77 66 73 62 c1 d9 bb ea 9b 0a b5 b5 9f c0 e9 a9 b1 98 fa 5f 35 44 f4 d0 54 d5 33 13 2d f5 2f b2 1f 71 37 d9 b9 62 d6 ff 00 78 b3 d9 a5 be 95 82 ca b1 a1 d2 a1 1a 2f 16 59 65 20 33 08 a3 38 6a 00 49 60 03 0a 12 08 26 de 67 b4 82 c3 6f 86 68 85 e1 32 2b 17 04 e8 54 7d 0a 42 2d 01 67 fc 3a 88 4c 12 6b c3 ad 74 bf 98 cf 64 f6 8f c8 4f 87 9f 19 3b 4b b9 63 dd fd a9 bd 3b 17 b8 7b 53 39 3e 03 05 5d 57 16 db ea cc 45 25 2e da ad da b5 3b 47 f8 2e d9 4c 56 1f 25 3d 4c 72 b6 46 08 d6 72 28 e7 f1 3d 4c d3 23 44 91 9e f3 ba ef 3b 97 b7 9b 1e f1 bd ef 96 b1 ee 93 dd 96 31 44 14 c6 22 31 48 a2 09 63 0f a8 34 69 a4 ab 39 76 d6 ed 52 00 24 8f 7d b9 47 1c e1 33 7f 57 6f da d8 d9 bb 09 24 67 62 0b 49 Data Ascii: OZl\|OUeNN:wfsb_5DT3-/q7bx/Ye 38jI`&goh2+T}B-g:LktdO;Kc;{S9>]WE%.;G.LV%=LrFr(=L#D;1D"1Hc4i9vR$}G3Wo$gbI
2024-10-30 03:01:51 UTC	16384	IN	Data Raw: 63 a7 6e 36 38 6e 9e e1 da 52 05 c8 50 c0 00 48 29 ae 8c a4 e4 03 e2 16 60 29 ac aa 93 c2 84 f8 fc dc fe 7b bf 2b fe 42 75 a7 60 f5 ae d5 c2 ed 5f 8e 95 1d b7 d8 18 ed e3 dc 1b cb a4 b2 bb d3 6e 6e bd e5 45 b6 76 7e db d9 f8 ad 96 32 35 f9 69 72 b8 1c 44 7f c0 44 b9 16 a5 a9 12 e4 1a 35 88 c8 29 da 58 e4 59 27 3d 5d 5e da 6d 36 76 b0 18 27 81 19 03 eb d6 55 59 d9 fb 0d 05 19 b5 50 b7 15 50 15 69 52 7a 3b dc 39 7d ed ae 6f 05 dc ea e6 ed 92 59 55 57 c3 04 84 08 aa c3 51 3a 40 5a 95 ad 19 c9 2c 0d 07 54 61 d7 be 7d ed d8 d8 fc 7e eb dd 78 fc 75 2e e0 ca d3 c5 5b b9 f7 5f dc 54 c5 4b 5f 9d ce 79 1b 2b bb 32 f1 c7 2e 52 b6 98 64 72 52 4d 57 59 2b 54 d5 2c 25 9f d5 a0 0f 65 17 92 b6 e1 73 61 6d 75 78 b1 09 65 d0 65 7f c3 aa a4 b3 91 dc dd dc 4b 54 8a f1 a0 a7 Data Ascii: cn68nRPH)`){+Bu`_nnEv~25irDD5)XY'=]^m6v'UYPPiRz;9}oYUWQ:@Z,Ta}~xu.[_TK_y+2.RdrRMWY+T,%esamuxeeKT
2024-10-30 03:01:51 UTC	15202	IN	Data Raw: 34 c4 15 54 0a a5 d4 6a 66 01 89 24 10 37 ef 06 dc b7 28 64 8f 74 b8 60 a3 52 68 8d 58 28 2a a9 92 19 82 44 4d 59 8b 15 0e 68 a0 90 0a 1f f3 1e fe 6b 9d e5 fc c2 be 25 75 6e dc dd db 6b 69 6d 2e c6 87 b0 2a 6b 77 45 3e d5 db b8 9c 14 f8 fd b9 1e 2e bf 1b 49 16 db 83 22 db 8b 7d ed fd bf bb a4 dc 94 eb 54 f2 66 42 d7 cf 49 24 66 0f 0a c6 48 2b 72 e7 89 b7 eb 68 76 89 9e c0 59 86 2d 24 48 cf 24 86 68 c8 65 94 16 ed 44 09 d8 08 ab 16 0d 90 2a 3a 90 ac ad 63 50 15 3c 53 be 15 ee 70 02 20 81 a8 3c 30 01 d4 4b 31 d4 49 a0 a5 28 31 d5 3b f5 ee d0 df 98 4e bf ec 6d f9 86 c4 50 be c3 d9 09 1e 1b 33 b8 77 2d 0d 52 61 77 b6 f9 ce 55 52 e2 71 9d 75 b6 26 89 e9 8e 53 35 04 33 4f 91 a8 68 dd a1 a1 a2 a1 92 5a 8d 2a c8 ae 17 dc a5 b1 69 6c 6d 26 9c ad d4 a4 69 0a 46 a5 Data Ascii: 4Tjf$7(dt`RhX(DMYhk%unkim.kwE>.I"}TfBI$fH+rhvY-$H$heD:cP<Sp <0K1I(1;NmP3w-RawURqu&S53OhZilm&iF
2024-10-30 03:01:51 UTC	10185	IN	Data Raw: 34 20 ab 49 e9 86 1f 6e 7a 0a ff 00 9b 2f 56 77 07 4a 7c e6 ec da 1e c5 dc bd 27 93 ec be c6 c6 ed 8d f7 d8 db 2f e3 61 ac 8b 64 f5 55 6e 67 05 49 89 c7 74 ee 4b 6f c5 45 49 16 2b 33 b7 f0 f8 88 1a 1a 75 59 de 5a 5a 98 6a 0b 09 25 65 12 47 b8 db 05 c4 fb f5 85 e5 f3 c3 2d c5 cd b4 46 38 a2 52 0a 08 c0 48 ea a6 ae c5 82 82 ae 7f b5 03 5e 90 08 ea 1d e5 ab e3 63 6b b9 25 c4 c8 92 c7 3c 86 67 0c 04 7a 9c eb 65 f2 54 d1 aa 86 31 5f 0c 9d 25 89 af 4e 5b 7f a2 ba 93 63 7f 2e a7 ec 9f 90 54 79 76 ed 6e c6 ef 0e a2 ec ca 5c 74 78 49 30 59 1d 8f f1 8e bf 6a e6 e6 d9 b4 34 7b cf 26 66 c7 64 37 37 7d 8a 0a 8a dc 36 22 92 8e ba 5a 7c 7a 47 5b 56 60 57 b0 36 b5 e5 4d b3 6e e5 91 77 7d b6 d7 77 52 25 8d c1 d0 51 25 2c 9a 4b 90 56 b2 04 6a 27 73 06 a1 d0 00 63 d7 97 74 Data Ascii: 4 Inz/VwJ\|'/adUngItKoEI+3uYZZj%eG-F8RH^ck%<gzeT1_%N[c.Tyvn\txI0Yj4{&fd77}6"Z\|zG[V`W6Mnw}wR%Q%,KVj'sct
2024-10-30 03:01:51 UTC	16384	IN	Data Raw: a6 31 b5 54 bb 33 23 50 4d 56 ea c2 ef 05 67 7d 9b 53 81 18 49 71 79 89 67 a7 dc 73 41 47 58 68 d8 41 5b 4b ab 5a 29 50 fe c0 73 72 f5 c6 cb b8 db 73 2e d5 71 12 dd 29 d7 34 4d 85 f0 92 86 52 c6 b5 d3 a3 bb 24 15 34 a3 74 20 fe b5 ed 57 3b 6b ec fb f0 d3 58 98 44 dd ad 28 73 85 d2 00 c9 0c 42 b1 50 55 87 11 4e aa 4b 73 3e 7b 3d 2e 7f 37 b8 33 43 39 bc 29 7e ca 6c cb ce ed 57 5b 94 ca 55 53 46 d9 09 e7 ab aa 91 da b9 a0 95 0c 44 17 77 72 81 54 36 a6 3e e4 76 ba 12 de c1 1c 61 8d bc 9a 9b 51 35 02 86 b9 27 35 35 ad 78 71 a9 e1 d4 15 0e dd 73 ba 5c 5d 5d c9 20 2d 0d 09 14 a5 4d 2b 41 e5 8a 52 9e 9c 3a 0f fa db 71 e7 33 14 f9 fe c6 c7 e1 a9 69 e9 b0 54 d8 fd ab d8 7a 58 43 41 57 26 f3 ab 9e 8b 09 45 15 12 4d 15 4c b1 e5 28 30 b5 d0 bc 51 e9 58 51 6c 58 0d 1e Data Ascii: 1T3#PMVg}SIqygsAGXhA[KZ)Psrs.q)4MR$4t W;kXD(sBPUNKs>{=.73C9)~lW[USFDwrT6>vaQ5'55xqs\]] -M+AR:q3iTzXCAW&EML(0QXQlX
2024-10-30 03:01:51 UTC	16384	IN	Data Raw: 06 3a 41 22 a0 9c 0a 80 03 13 8a 0c 8e 90 7b fb 77 e5 b1 7b db 70 c7 b3 aa 97 21 86 a2 c8 d7 63 31 54 19 e8 69 72 83 23 86 85 d2 82 65 cb 42 af 78 9f 37 49 1f 96 58 0c 85 a1 6b 03 eb 40 42 fb 5d be 06 d9 e0 92 f0 01 36 8d 4c 41 22 87 8e 3f d2 f9 1a 67 ec 3d 15 6f 7c c3 79 63 bd 6e 16 f6 44 7d 0a be 90 8e 15 d5 96 9a 4e af 3e ee 24 56 a2 be a3 a1 c7 ab b6 de d2 aa ca 62 77 9d 0e 1a 90 ee c9 e9 9f 01 b7 d3 31 94 a8 ca e1 76 56 e5 6f 33 52 e6 a9 69 6a 26 8d 5d a3 a3 d4 31 eb 5c 24 a6 80 c7 e4 01 e4 8c 29 0b 49 7f 3d ed ab 40 b2 94 b5 56 25 80 50 19 d0 52 aa 48 e1 52 41 62 b9 20 d3 00 f4 34 e5 9d bf 62 bd fa 6d dd 36 f1 f5 75 2a a1 9c b2 c5 27 00 c1 49 a1 a0 fe cc 35 42 f1 c9 1d 34 ed 3d 9d bd bb 5f 25 bf b6 2c 34 78 7c 9e eb c4 ec 1d e3 be 77 c6 eb af 9e 78 Data Ascii: :A"{w{p!c1Tir#eBx7IXk@B]6LA"?g=o\|ycnD}N>$Vbw1vVo3Rij&]1\$)I=@V%PRHRAb 4bm6u*'I5B4=_%,4x\|wx
2024-10-30 03:01:51 UTC	16384	IN	Data Raw: f5 4b a6 17 8c 26 97 48 a8 35 62 a2 80 80 dc 40 a0 ee 23 24 9a f9 74 db b6 f7 0d 16 f5 9b 73 6d 5a aa 36 c3 6d 2a 7a 3f e2 d2 54 2b 99 25 a7 a6 8a a9 6a 25 89 63 91 e4 09 90 a9 f1 bf 81 c6 a7 d6 4b 3e a2 39 2f b8 b2 92 de 3b 4b a4 93 5d e1 60 bf 22 69 4a fd 83 cf cb d3 a3 91 cc 31 5d ed 9b 96 d9 f4 b4 b6 2a 0a 9a d4 fc 40 9a fa 1f 30 7f 6e 7a 78 d8 f5 3b 6a 8f 2f 90 93 19 32 ec 26 59 68 64 db d9 7a 5c 35 5e 4d b0 31 d1 c9 49 59 51 91 ce d7 63 e1 c8 e6 2a e9 9a b6 9c 7d d0 09 2d e9 0b 47 6b 7a 58 e7 6d 8d e0 96 c8 dd 4c 24 b9 13 ab 19 24 27 42 d0 92 b4 8c 0a 50 1a 1c 02 6a 38 57 3d 12 5a cd 6d f4 9b b5 b9 0e 89 24 0c 8a 23 1d dd c2 8d 56 f9 8c 1a f9 1a 75 b2 ff 00 5f ff 00 c2 92 fb fd 36 17 72 63 7b 17 62 6c 6c 9f 62 6e 6e bc cc e3 3a 0b b0 7a ef 17 57 85 Data Ascii: K&H5b@#$tsmZ6mz?T+%j%cK>9/;K]`"iJ1]@0nzx;j/2&Yhdz\5^M1IYQc*}-GkzXmL$$'BPj8W=Zm$#Vu_6rc{bllbnn:zW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49895	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:50 UTC	396	OUT	GET /m/6a120e9794038848/original/HomePage-Work_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:50 UTC	816	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 284834 Connection: close Date: Wed, 30 Oct 2024 03:01:48 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-Work_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 10991a83-c84a-442c-228b-efb823b94e81 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 4c692717a0e85914a993c3aa5c8a2ef6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: UOth-Kaqst1NlCmRSWZgP6pModKkRTrGi7bnmtOXzynUFiW9E9QTnQ== Age: 2
2024-10-30 03:01:50 UTC	15118	IN	Data Raw: ff d8 ff e1 1b 79 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 02 df 00 00 01 01 00 03 00 00 00 01 02 27 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d3 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 33 30 20 31 35 3a 31 39 3a 31 38 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: yExifMM*'(12i -'-'Adobe Photoshop 23.3 (Windows)2022:05:30 15:19:180
2024-10-30 03:01:50 UTC	2780	IN	Data Raw: 8e ab 2f 56 cb 2e 69 20 b4 12 39 1f 05 31 79 77 22 3e 1c 2e 74 f5 1f db 02 af 4e c7 d5 d3 f1 6a 66 5f 54 c8 a8 96 b9 d6 06 7a df 60 a1 fa 3b f9 77 23 e0 65 75 ee a3 8e 3a 85 6f c6 c6 65 f2 ec 5c 37 d6 e7 ee 6c ed 67 ad 94 db 18 fa bd 4f e4 31 57 97 29 28 c6 e6 63 02 34 90 97 e8 ca 5f 24 7f bd 3f 9f fa 90 4d bb cd b1 5c a5 b3 50 71 fc ed 42 c2 e9 7d 4a be a3 88 32 2b 61 a9 e1 c6 ab a9 71 97 57 6b 74 7d 65 df 9d fc 87 ae 8f 60 63 43 47 e6 80 3e e5 73 e1 78 25 1c d9 4c 85 4b 18 e0 fa c8 ff 00 eb b4 4c e8 1a f6 de cc 46 59 97 61 86 63 56 fb 9c 7c ab 69 b4 ff 00 d4 2a df 55 68 76 37 d5 be 9a c7 99 b2 ca 7e d1 61 8d 4b b2 1c ec a3 3f f6 ea a5 f5 b6 e7 33 a2 e4 63 b0 ed b3 3d f5 60 d4 75 e6 f7 86 bf e8 ff 00 c0 b6 d5 af 5e 6b 28 bd d8 2e 21 bf 67 0d 65 16 c0 87 Data Ascii: /V.i 91yw">.tNjf_Tz`;w#eu:oe\7lgO1W)(c4_$?M\PqB}J2+aqWkt}e`cCG>sx%LKLFYacV\|i*Uhv7~aK?3c=`u^k(.!ge
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 61 34 65 63 63 32 31 63 2d 63 64 62 63 2d 36 30 34 30 2d 38 36 65 62 2d 34 66 61 37 64 34 66 30 34 37 34 65 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 31 2d 30 32 2d 31 39 54 31 30 3a 30 36 3a 30 32 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 32 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a Data Ascii: li stEvt:action="saved" stEvt:instanceID="xmp.iid:a4ecc21c-cdbc-6040-86eb-4fa7d4f0474e" stEvt:when="2021-02-19T10:06:02-05:00" stEvt:softwareAgent="Adobe Photoshop 22.2 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:
2024-10-30 03:01:50 UTC	16384	IN	Data Raw: 0b 31 11 d8 9b 8f a0 6b 81 ef 5f 51 18 14 d2 6b d5 f4 1c 1a 0f d9 d4 54 ea 5d e6 da 5b 23 94 c5 52 a5 8e b2 d3 d4 4c e5 15 81 0a a2 38 a3 56 12 00 47 d4 69 1f d7 db 75 3e bd 36 62 a9 ae ac f4 23 45 8b ae c7 52 55 51 35 4d 1b 2d 3c 54 f0 24 c8 8e 53 c3 2a 1f 34 b7 90 dd 82 02 06 93 fe bd f9 f7 e2 49 f3 eb 5e 11 f5 1d 00 f9 ae 98 c3 ee 8a 96 ab cb 67 2b c4 02 41 e4 8e 89 d2 06 91 d5 6d c9 3a ff 00 6f 50 07 fc 7d f8 1a 10 6b d5 1e 26 1f 67 48 fa df 8f dd 55 85 a8 47 14 39 4c a2 cd 1a b3 9c 8e 4a 49 c7 f9 c2 d2 78 ed a1 11 4b 01 c7 26 e7 eb 6f 7b 72 75 50 1e 9b d0 c3 81 a7 4b 18 fa b3 a8 62 a0 a6 4a 1e bf db e6 af 42 c7 50 d3 63 e3 99 a6 0b a9 59 a7 6a 8d 6a 09 24 13 6e 75 01 ef da dc 70 62 3a 71 e2 22 9d 2b 69 76 ee ce c7 7f 94 e2 b6 ce 12 8e 6f 02 a1 58 31 Data Ascii: 1k_QkT][#RL8VGiu>6b#ERUQ5M-<T$S*4I^g+Am:oP}k&gHUG9LJIxK&o{ruPKbJBPcYjj$nupb:q"+ivoX1
2024-10-30 03:01:50 UTC	8806	IN	Data Raw: 13 41 d0 01 59 2e 5b e9 c9 b8 3e db 6d 23 50 03 3d 5e 3a ea 1d 6c f1 fc 8e 77 41 df bf 16 bb 6b 66 65 23 8a b0 75 b7 72 eb c5 b8 d3 ae 97 11 bd 36 b6 36 bc d2 12 2e 8e 7f 8a 62 2a a4 04 0b 8d 76 3c fb 45 2e a4 00 f9 f4 64 92 f6 d0 8e 1d 59 d5 66 d1 c6 b5 5b c3 14 6b 15 c9 73 70 14 a8 72 4d d4 a8 08 c5 5c 7f 4b df db 42 43 5c f0 eb 6c f1 b1 53 9c 57 a5 f6 df d8 14 11 44 95 33 eb 52 aa 7d 48 81 d8 26 ae 5a 43 62 d2 35 be 80 0f 77 02 37 c8 1d 55 d8 39 14 1c 3a d6 d7 f9 94 ff 00 33 fe ed da ff 00 23 b3 bd 35 f1 af b1 e5 eb ad a3 d3 b5 e7 6d 6e 3d c3 82 c6 63 26 cf ee fd eb 01 8b fb c3 43 59 53 91 86 b6 14 c0 60 27 ff 00 26 58 22 54 69 66 57 77 63 70 a9 b0 8b a8 d4 76 f5 5f 18 c6 00 a6 3a 0a fa ab f9 ff 00 fc e8 eb 2a 98 69 bb 0b 0d d5 9d df b7 a0 a7 8e 1d 3b Data Ascii: AY.[>m#P=^:lwAkfe#ur66.bv<E.dYf[ksprM\KBC\lSWD3R}H&ZCb5w7U9:3#5mn=c&CYS`'&X"TifWwcpv_:i;
2024-10-30 03:01:51 UTC	16384	IN	Data Raw: 78 a8 d1 6a 6b 25 a4 85 10 54 13 33 c6 a0 a4 61 d8 05 97 c9 0b 5f 4b c8 60 52 e7 e8 d6 07 eb ef 7c 38 75 a6 3a 69 4e 95 8a 9a 69 da 25 22 49 27 54 57 47 50 47 f9 b3 c7 a8 12 6e 2f f4 fe 9e f7 d5 cf 0c 7a 75 9e 2b 53 d1 a2 39 42 39 fd a5 b2 85 bb 30 28 ac 3d 2a ac 96 e2 c7 eb cf ba 7c 4d 43 c0 75 58 d4 b6 40 cf 4e f8 0a af b4 aa 62 84 23 3c 80 12 0a a0 72 57 48 65 04 fe 00 b0 3f d7 dd 89 c0 fb 7a 73 4d 08 d5 81 d1 45 fe 60 59 fc 5d 4d 17 5c ed 4c bd 7c b4 d0 e6 1e 6d cb 4a 69 e6 29 fe 51 8c 84 e3 ad 56 d1 91 a9 14 e4 5f eb f5 24 8f c7 b7 e3 56 34 a0 c5 3a 6e 62 ab 5d 07 14 ea b6 d7 1d 4b 8c f2 08 aa 92 a6 95 5b 40 70 aa af 18 f0 98 d9 43 0f 53 b3 ea 06 c6 e0 db 8b 7d 43 80 31 1c 3a 44 e6 a7 f2 1d 65 a7 a9 d0 d1 b2 32 02 23 d4 8a 49 7b ca 03 28 84 bb 2e a0 Data Ascii: xjk%T3a_K`R\|8u:iNi%"I'TWGPGn/zu+S9B90(=*\|MCuX@Nb#<rWHe?zsME`Y]M\L\|mJi)QV_$V4:nb]K[@pCS}C1:De2#I{(.
2024-10-30 03:01:51 UTC	2777	IN	Data Raw: b8 fa c2 0c 1e db ca 64 b1 ad 5c 2b 77 0e 39 f3 58 8a 19 72 0e 25 c8 be 33 1f 3d 4c 92 4d f6 94 e2 6f 12 49 ad 14 85 3a 5c b2 a9 3c d7 0a a6 43 ac f0 c7 ec ea e0 70 27 e1 eb 68 9e a2 e9 ef f4 4b b1 f0 98 3a 6a 23 05 3d 35 3c 62 59 a3 a3 34 ab 24 b7 28 42 20 05 22 0a 13 40 5d 44 80 07 f8 7b 2c 69 04 8d dc 68 3a 76 10 83 50 d5 9a f4 29 33 2a 1f a7 a5 89 70 05 af 7b f0 49 37 d2 56 df 4f 76 74 1a 07 76 3a 70 a6 9e e1 c3 ae 42 5b 86 2c 49 64 26 c3 92 50 5c b7 d7 f3 62 3d e9 4a aa 80 0f 55 29 ab 8f 52 12 60 96 04 1b 1d 7a 8d cb 12 35 1f 55 8d 8d ff 00 c4 7b d0 22 ad 9e 27 ad 85 45 c1 60 09 e9 c1 6a 59 0a f8 c9 b1 3a d5 45 d6 da 4e a3 ac 82 2c d6 ff 00 79 f7 73 f3 eb 61 14 0a 57 ac 73 57 7e bf 50 67 16 0a 75 0b 3d 9b fd 89 fc 71 fe 3e da 2d a2 4a 57 fd 54 ea da Data Ascii: d\+w9Xr%3=LMoI:\<Cp'hK:j#=5<bY4$(B "@]D{,ih:vP)3*p{I7VOvtv:pB[,Id&P\b=JU)R`z5U{"'E`jY:EN,ysaWsW~Pgu=q>-JWT
2024-10-30 03:01:51 UTC	394	IN	Data Raw: d5 61 7b 83 cd bd 94 ee 73 45 04 65 99 fb 7a 3b b0 86 49 64 11 2e 41 34 f9 75 72 7b 2f ad 33 5b b6 b1 72 79 68 be c7 07 3c 94 d5 74 a5 ef 14 b3 88 ec 92 b3 23 28 28 80 20 b7 27 50 e4 fb 87 b9 8b 99 58 48 f1 5b 49 8a f9 75 24 ec 5c b8 ba 75 ce bd dd 19 61 81 c4 63 61 48 68 69 52 3a 70 8c b2 68 e4 31 90 10 ce dc b3 16 93 fc 79 f7 1f a4 8e cd e2 48 ec 5b a1 d4 51 42 8a 11 54 01 d0 3f bc 3a eb 6f e7 8f 8e aa 27 2a 1a 42 d1 6b 0f 1b ba 98 99 1b 43 2b 29 65 d1 7f eb cf b5 70 ce 51 86 96 22 a7 a7 1a 35 3e 55 ff 00 67 a2 65 be fa 3b 68 19 2b a0 a8 c5 c3 4f 3f 12 2b 51 85 8a 42 5e 50 c0 0f 08 5d 1e 5f 31 2d ea 06 c6 ff 00 52 4f b1 34 1b cd ea 2d 56 66 f4 e3 d1 45 ce d3 66 c4 b3 db ae 92 7f 9f 44 83 b4 be 2d ec dd d7 98 4c ae 46 8a 0f b8 c6 f9 c5 1c d8 ea a3 49 51 Data Ascii: a{sEez;Id.A4ur{/3[ryh<t#(( 'PXH[Iu$\uacaHhiR:ph1yH[QBT?:o'*BkC+)epQ"5>Uge;h+O?+QB^P]_1-RO4-VfEfD-LFIQ
2024-10-30 03:01:51 UTC	16384	IN	Data Raw: 60 b6 76 dd c6 ec bd 81 b5 36 ee 3e 2c 36 cd eb cd a1 8b 86 7f b1 c2 6d cc 2d 32 c5 0c 1e 55 95 da 69 19 4c b3 4b 23 31 3a 6c 01 a2 01 18 d4 c3 bb a2 b9 19 72 c4 e7 a0 f7 23 b8 e3 c3 41 4d 47 80 92 01 34 25 ff 00 ca 34 cb a6 11 a7 45 44 f5 12 45 a0 1c 84 ce 2c 0b 5d 51 4d ff 00 a7 ba 04 12 ab 6a 14 07 a4 c6 72 a5 58 56 9d 19 9e bf ee 28 7b 2a 9f 6a e0 36 ca 52 50 ee 5c ee 76 83 69 2d 3c d3 ff 00 92 d4 67 27 29 4d f7 11 94 d3 2c b4 f2 9b 3b 30 53 f9 1c fd 3d 91 5e ed ea 9a 9b 4e 38 f4 77 65 b8 ea ed 27 ab 5a c9 7c 6a c5 75 b6 c1 c3 57 4f 53 26 4f 74 e5 68 6a 6a f2 99 49 d5 0c 32 d5 92 cf 2d 3e 39 6c bf 6f 4f 46 92 04 40 c2 e5 47 3c 93 ed bb 78 44 4a 07 9f 4c 5c dc eb 93 e2 c7 44 87 7a ed ba 98 a7 92 4f b4 d2 c8 75 04 a6 81 d2 49 8b 85 84 ca 82 05 b3 21 73 Data Ascii: `v6>,6m-2UiLK#1:lr#AMG4%4EDE,]QMjrXV({*j6RP\vi-<g')M,;0S=^N8we'Z\|juWOS&OthjjI2->9loOF@G<xDJL\DzOuI!s
2024-10-30 03:01:51 UTC	2804	IN	Data Raw: 8e a3 c9 6d 20 58 03 6f a3 10 6f ef 55 2c c1 89 cd 3a b2 1d 4c 01 1d 4c 84 83 61 c8 00 15 5e 0b 17 06 f6 bb 7d 00 2d fd 3f 3e ee 34 8c 9e 3d 3e fc 15 7a 79 a4 89 54 33 b2 9f d3 c8 e2 f7 53 72 01 3f d9 16 1f 9f 74 67 a9 14 f5 a7 55 65 0b 4a 79 f4 f5 4b 76 5d 45 95 41 07 96 5b 29 e0 32 27 1c 1e 4f d4 8f f7 9f 7b 69 15 28 34 e6 9d 32 cc 41 c7 4a 7a 38 8c c3 e8 2c ac 2e 78 20 1e 46 9e 3e a7 fc 7d a7 73 e2 32 d4 63 ad 82 4f 1e 3d 2c 69 a1 6b 47 aa ed 7b b0 b0 08 a4 db 4d 89 e0 dc 30 fa 0f 76 21 85 54 0c 75 b1 20 42 7a 51 53 b3 68 45 2a 16 33 ea 0c 6f e4 26 de 90 c4 1b 95 1c ff 00 ad ef 65 ca f6 d3 a6 f0 7c 87 4e 11 33 c6 35 96 55 0b 67 1a 49 d4 75 1e 1a cb c7 27 fd 8f 3e ed 19 a2 d3 af 16 34 a7 97 52 96 56 53 a9 9f 4e a5 5b ab 91 fa 59 b5 33 2d ad a4 83 f4 03 Data Ascii: m XooU,:LLa^}-?>4=>zyT3Sr?tgUeJyKv]EA[)2'O{i(42AJz8,.x F>}s2cO=,ikG{M0v!Tu BzQShE*3o&e\|N35UgIu'>4RVSN[Y3-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49897	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:51 UTC	410	OUT	GET /m/7c917fa51fcc97e4/original/HomePage-FieldWork-Engineer_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:51 UTC	830	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 233803 Connection: close Date: Wed, 30 Oct 2024 03:01:49 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-FieldWork-Engineer_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: dc4f6503-a54b-d72f-5b59-cb79a7cfa91f Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 54fc556adf6e8c787574c6f132d70178.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: CTVhGAUB33MpyyTP5XOwVVZBrA3g7bPMmHWpsP0JeXD2Nsk0LmGN-g== Age: 2
2024-10-30 03:01:51 UTC	16384	IN	Data Raw: ff d8 ff e1 15 33 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 31 37 20 31 35 3a 33 32 3a 30 32 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 df a0 03 00 04 00 00 00 01 00 00 02 27 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: 3ExifMM*bj(1r2i-'-'Adobe Photoshop 23.3 (Windows)2022:05:17 15:32:02'"
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: rdf:RDF> </x:xmpmeta>
2024-10-30 03:01:52 UTC	10463	IN	Data Raw: 1f f5 7f 2e a5 7c a3 df 7b 13 79 6e 1c 14 bb 4e 48 b2 13 d0 45 a7 27 5d 04 4a 90 d4 44 65 57 58 16 40 15 a5 75 50 7f c0 5f dd 6c a3 9a 8d e2 12 a0 8f 3f 5e bd 79 2a 16 52 86 a4 71 a7 9f 46 8f 6e 77 4f 4f cf d5 d1 d1 d5 55 d2 c0 20 c2 fd 8c f8 49 e0 8f ee 4c c2 9c c6 51 21 20 87 2c f7 b1 e3 da 49 22 9f c6 15 06 84 f9 74 a9 2e 60 31 0a f1 a7 0e 8a b7 40 6f 0d 9b b6 3b 06 bf 21 b8 10 53 d0 56 89 a1 c5 54 cf 12 3c 74 3a e7 76 8c cf 7b f8 81 8c 81 71 7f 6b ae 23 94 c4 85 72 de 7d 21 b4 92 35 9d b5 2d 2b c3 fd 5f e0 e8 44 f9 3d bb b6 26 e7 7c 02 6d aa 9a 7a ec bd 37 91 ab 6b 28 95 04 42 96 45 f4 c3 24 ca 06 b7 d5 f4 1f 81 ed 9b 51 32 b1 2d 5d 3f 3e 9d bd 68 9d 42 28 05 ab d0 d1 d5 bd 99 d5 54 dd 65 49 8c ad a8 a4 a1 96 93 1e f0 65 28 6b 61 84 4f 3c ba 1b c8 c1 Data Ascii: .\|{ynNHE']JDeWX@uP_l?^y*RqFnwOOU ILQ! ,I"t.`1@o;!SVT<t:v{qk#r}!5-+_D=&\|mz7k(BE$Q2-]?>hB(TeIe(kaO<
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: 85 93 9f 2e a7 fc 53 9b 60 4b d6 cb 49 38 c3 1c a2 cb 38 cd 2d 62 d3 7d c3 86 62 49 71 30 24 c4 53 e9 f8 f7 bb b7 71 31 39 a7 f2 c7 f8 7a d5 a2 c3 e0 80 29 fe 5e 8b 2b c1 b0 a9 3e 44 9a 68 de 90 ec f4 cf 6b 00 15 7a 11 33 03 74 bf e8 f0 09 db 81 f4 f6 fa 33 fd 35 4e 4f ec e9 13 78 62 f3 1f d9 fa 74 6a be 4c 63 b6 0c 9d 73 f7 b0 2e 1e 9f 2f 04 b0 9c 34 d4 7f 6c 93 cd a8 00 62 02 2f 54 91 b2 0f f5 bd b1 6d 2c 86 55 34 34 e9 5d da c3 e1 10 40 af 4c 9f 15 b1 db 1e af 68 64 7e f2 9b 17 55 9c 92 b2 45 c8 25 72 41 24 ab 05 ac 8a ab 2d ed 11 b9 fa 7b 76 f5 a4 12 02 b8 1d 37 63 e1 68 c9 1a ba 01 b7 ae 23 66 51 77 73 e3 a8 da 08 f6 bc 99 8a 1f bc 58 5d 4d 3c 05 e4 5f b8 8a 36 04 a8 8a ff 00 5f c0 bf b7 92 47 78 3e 60 7e 5d 27 31 42 b7 75 27 b2 bf ea c7 46 cf bc b6 Data Ascii: .S`KI88-b}bIq0$Sq19z)^+>Dhkz3t35NOxbtjLcs./4lb/Tm,U44]@Lhd~UE%rA$-{v7ch#fQwsX]M<_6_Gx>`~]'1Bu'F
2024-10-30 03:01:52 UTC	12792	IN	Data Raw: af fa df ef 27 dd 71 d5 87 9f a7 5c 4b 1f f6 3c f1 fe fa f7 bf bf 54 64 75 af 5c 67 ae 3a ac 3e a6 df ef bf a7 d7 df a9 c7 af 54 01 53 d1 7e f9 35 53 e1 e9 cd e2 e0 ff 00 cb aa b0 13 cf 3f e4 f2 71 fe f1 ee eb 8a 57 87 55 d7 e9 d6 a6 74 70 ea ad af 7e 47 96 ba a9 88 02 f6 bc ce d7 b0 fa ff 00 4f cf b1 d5 b8 fd 08 cf f4 47 41 d9 49 0e fe 84 f4 bb a5 43 a4 37 2b f4 b8 fe d0 e6 e0 05 fc 16 27 db c0 50 0e 99 c8 e2 3b ba 9e ca 08 17 bd 87 00 35 d4 1f a9 e4 1f 51 26 ff 00 5f 7a 07 af 1a af 00 38 f4 dd 56 3f 6c dc 8b 72 6c 40 fa dc 8b 0b 7e 45 bd b8 33 8e b4 4e 38 74 c6 d2 0f 1e 9b 7f bb 11 6c 6f 7f d4 9c 0e 6d f5 ff 00 1f a7 bd d4 7e 5d 7a be 60 75 ff d4 3b db e5 29 66 ae 68 98 01 72 19 18 1e 6f 6b 69 b8 e4 12 7d c6 27 56 69 c7 cf a1 82 0a ad 4f 48 29 f0 e2 78 Data Ascii: 'q\K<Tdu\g:>TS~5S?qWUtp~GOGAIC7+'P;5Q&_z8V?lrl@~E3N8tlom~]z`u;)fhroki}'ViOH)x
2024-10-30 03:01:52 UTC	3592	IN	Data Raw: b8 df 57 f5 e7 fd 7f ea 09 20 73 ec c4 70 e8 9c 92 08 f2 e8 9e 7c 9c db 1f 7d 81 c6 ee 8a 78 f5 54 61 6a 3e d6 b0 a8 f5 1c 7d 69 f4 12 07 f6 62 aa 03 fd 6d 47 dc 5f ee a6 d0 2f 36 58 b7 18 d6 b3 5b 3e 7d 4a b6 0f e4 0d 3a 8f b9 f3 6f 12 d9 c1 b8 20 ee 88 d1 bf d2 9f f3 1f f0 f5 5a fd 97 bc f2 7b 1b 09 8c dc d4 74 94 b5 78 8a 5d c5 89 a3 dd 8d 38 63 2d 0e 03 25 38 a2 93 25 48 ca 6c 92 d1 55 4d 1e bd 57 1a 18 fb 81 76 9b 08 b7 4b b7 b3 79 b4 48 50 94 f9 b0 cd 3f 60 3d 47 1b 65 92 6e 17 0f 6a 64 29 2e 86 29 8a 86 60 2a 17 ec 39 e9 57 9f ce 8c 06 1a a3 71 2c 62 ba 83 14 f8 ec a6 4e 18 bd 4f 57 b6 e3 ad a6 6c d8 a4 75 fd 15 4b 88 92 59 22 71 c2 b2 7b 4f b7 5b 5b cb b9 db 5b 5e b1 11 19 42 b5 30 69 5a 53 e5 52 38 f4 de db 6d 14 fb 95 b5 ad ef 6c 2f 20 56 23 88 Data Ascii: W sp\|}xTaj>}ibmG_/6X[>}J:o Z{tx]8c-%8%HlUMWvKyHP?`=Genjd).)`*9Wq,bNOWluKY"q{O[[[^B0iZSR8ml/ V#
2024-10-30 03:01:52 UTC	12792	IN	Data Raw: 0e 78 74 ba cb 63 de 83 25 1d 6e 21 cd 3c ca 03 96 89 b4 ab 86 00 d8 81 61 fe c7 fa 1f 69 c4 9a c7 86 df 67 e7 d3 9c 01 27 87 4b 1a 4a 9c b5 6c 0a 26 a9 91 66 d0 1d 03 7f 9b 2c a0 02 09 fe d1 fc 7b a8 08 94 5d 3d 55 89 06 be 5d 44 c9 78 ea 23 2a cc a1 e4 8d 96 61 c0 21 c7 d6 ff 00 82 6f f9 f7 b3 e6 00 1f ec 75 ba e7 b4 1f 97 40 be e0 98 d0 fa 26 8b 51 4b e8 91 47 f9 c5 e3 81 c7 04 81 cf fa de de 4a 3d 08 f8 87 1e ab 56 fb 7a 0b aa f7 a2 52 d4 08 51 74 01 70 40 20 5b e8 00 23 e8 40 07 fd 87 bb e9 a9 20 9c f5 e1 9a 62 a7 d3 fc 9d 0c 7d 61 9e a4 c8 65 28 9b 22 8b 2d 1c 55 23 ca 27 f5 46 cd 20 e1 9c 37 a7 4d f8 f6 8a 50 11 94 a8 f2 c7 fa bd 7a 57 1e 63 35 e3 fe aa f4 df f2 9b 11 b2 e8 b2 3b 77 21 80 4a 2a 6a ea e4 27 2d 4d 8f d0 11 e2 56 1f ba d1 c6 48 56 d3 Data Ascii: xtc%n!<aig'KJl&f,{]=U]Dx#a!ou@&QKGJ=VzRQtp@ [#@ b}ae("-U#'F 7MPzWc5;w!Jj'-MVHV
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: fa 52 3f cb d3 46 d2 dc 92 da 5a bf 6f fb 1d 25 ab 7f 91 4d 13 6b 14 bd bf 95 17 bf 12 e3 69 18 72 39 e0 54 03 7d 5c fb 70 6e 37 87 89 8c 8f b0 f5 53 65 6c 7f 8b a4 75 6f f2 1b c9 ba b7 da 77 04 85 99 af 79 70 f0 6a b8 3c 1b 8a bb f2 3d ec 6e 77 8b e5 1f ed 3f e6 eb 42 ca 0a d7 53 74 95 a9 fe 43 9b d6 26 d5 49 db 14 72 10 2c 04 b8 60 bf 4f a5 ca d4 b5 ff 00 e3 7e fc 77 2b de 22 38 aa 4f f1 1f f3 75 b1 61 6d c7 5b 7e c1 d2 df 6e 7f 23 87 a0 c1 e7 22 ce 6e d4 cb ee 0a bc 5e 46 9f 13 5c f4 de 2a 3c 6e 4a a2 8e 68 68 6b 52 99 64 2d 27 d9 d4 b2 49 c9 e7 4f b7 06 e3 31 04 b2 ae bf 2c f9 fd bf ec 74 db 59 26 b5 d2 e7 4d 73 f6 57 fd 5e 7d 7f ff d3 04 77 56 e5 96 ae 59 45 3d d5 63 47 5e 38 62 ba 47 ab 82 6d 7b 5b fd 6f 61 68 69 a4 7a 9e 8e 65 00 10 14 57 a8 9b 07 Data Ascii: R?FZo%Mkir9T}\pn7Seluowypj<=nw?BStC&Ir,`O~w+"8Ouam[~n#"n^F\*<nJhhkRd-'IO1,tY&MsW^}wVYE=cG^8bGm{[oahizeW
2024-10-30 03:01:52 UTC	2804	IN	Data Raw: 18 8c 85 0d 75 0d 74 f4 fe 46 9f 15 59 a6 98 d7 63 dc 29 00 b2 6a 0c 0f 36 f7 9e 7e c7 fb f5 b5 6c 1c 93 6b b3 5d d9 cf 76 22 6a 87 0c a8 41 39 64 20 83 50 0f 03 d4 2f cf 3f 4b ee 86 f2 39 a2 e3 9a 2c e2 dd 5e 30 26 0c 82 21 a8 0f c2 a2 83 1f b7 aa cd f9 99 2e d6 e8 47 83 ae 3a a6 ab 2b bf 3b b3 21 b8 31 3b ba 7e e5 da b5 79 3a 3d b3 b7 f0 14 0d 34 13 ec 55 db 35 02 7a 3c b5 4e 42 a0 89 9a b5 cd d1 46 80 0d cf b0 e7 ba 5c e9 b6 7b 85 bb db 5f c9 62 21 b7 86 3d 2a ae c1 9b 89 35 ad 07 cb 87 52 f7 b4 96 9b b6 df b1 de 6d 5c b1 bb 4d 71 6f e2 0f 15 ad f5 04 26 94 a5 47 1c 74 66 be 27 76 6e 77 b9 30 14 3b 7e 4c 44 5b 7f b2 b3 1b 92 86 92 b2 97 21 1a e3 61 ae 2e b0 3d 45 66 3e aa 14 2d 0d 35 77 86 5e 40 06 19 1f 9f 4d bd e2 4f 32 72 e5 d4 dc d9 66 96 57 25 ed Data Ascii: utFYc)j6~lk]v"jA9d P/?K9,^0&!.G:+;!1;~y:=4U5z<NBF\{_b!=*5Rm\Mqo&Gtf'vnw0;~LD[!a.=Ef>-5w^@MO2rfW%
2024-10-30 03:01:52 UTC	788	IN	Data Raw: 7e 74 e8 67 b5 6d 91 da 42 93 4a b5 95 b8 7c 87 f9 fa b5 dc af 54 6d 1c 7e 2d e8 8e 3e 99 6d 0e 8b f8 d0 2a d9 6d fe 02 f6 3e c3 20 ca 1f 56 ba b7 47 b8 60 4d 31 d5 35 fc 98 d8 98 7d bb bb a3 ab c6 45 14 42 59 99 24 58 c0 00 f2 4a ea 1c 73 61 ec 63 b4 dc c9 2d be 86 6c 0e 82 5b cd b4 6b 32 4c 8a 35 13 9e 1d 47 e8 f8 d1 73 d0 59 14 dd 92 e6 dc 90 2e 3e bf 43 cf 1e d4 dd 1f d3 fe 8f 48 2d 32 f9 e3 d1 ed ec 39 24 87 60 64 aa 54 94 68 31 ec f6 1c df 4a 5b eb c0 bf fc 57 d9 55 ba 6a b8 41 fd 2e 97 5e b1 48 98 8a d2 87 e5 d1 41 eb 5f 8f 7b 73 b1 36 ad 46 e6 cb 65 2a 17 27 92 96 aa 4a 73 04 a1 63 a4 75 66 08 b2 a8 27 51 d5 f5 bf b1 7b dd f8 25 10 2e 00 a7 40 d3 6b 1c fa e4 35 a9 ff 00 55 7f d5 fb 3a 03 f6 9f 53 0c f7 68 55 75 f5 5e 49 20 86 82 7a 94 9e b6 31 eb Data Ascii: ~tgmBJ\|Tm~->mm> VG`M15}EBY$XJsac-l[k2L5GsY.>CH-29$`dTh1J[WUjA.^HA_{s6Fe'Jscuf'Q{%.@k5U:ShUu^I z1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49898	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:51 UTC	410	OUT	GET /m/497b31218fd8e7fe/original/HomePage-FieldWork-Operator_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:52 UTC	830	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 274646 Connection: close Date: Wed, 30 Oct 2024 03:01:49 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-FieldWork-Operator_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 89e2c870-696e-58d6-cb2e-f82109838251 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 4c692717a0e85914a993c3aa5c8a2ef6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: arKVjjZtD9Oivp3nS_MeJl-sU0WSKE8rqE4uF2sXXQ1HjxE1LLxiQg== Age: 2
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: ff d8 ff e1 1c 87 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 31 39 20 31 31 3a 31 35 3a 34 37 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 df a0 03 00 04 00 00 00 01 00 00 02 27 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 23.3 (Windows)2022:05:19 11:15:47'"
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: 49 39 6b ed 1d 34 7f 90 f1 98 39 f4 0b 47 c6 5e d4 1c 5c 17 1c 7c b6 d8 1a 5c e1 5b aa 74 cf be bd e5 8e 3f 9c d6 ee fa 5f c8 5e 3a 92 5a 25 f4 a7 f4 cc b3 93 63 ad 3b 05 0d 16 48 6b b6 12 e9 3b 59 63 be 92 3e 0e 4b 29 c0 ea 74 b8 0d d9 75 b6 b6 79 9f d2 36 3f aa d6 bf 7a f2 e4 94 53 ba 3c 15 c5 af cd b2 f8 57 10 e3 be 1e bc 3f 33 eb 38 b9 af ab 06 9c 41 45 2e 15 34 07 5a 59 25 e4 19 0f db f4 7d aa b3 71 fe cf 9b 5f 50 a9 af 7e db 85 b7 52 c2 25 d2 7d de 8e e7 54 da ff 00 a9 bf fe 2d 79 7a 4a a7 f4 9e 31 7d ff 00 c0 ff 00 9a df fe 87 ed 9a ad ba 7f 39 f4 e2 7d 3b a9 5a 32 b3 be d3 40 9a 32 b6 56 d9 96 bd af af f4 2f a9 d5 d9 ee 76 d7 d3 ee f7 2e 4a 81 fa bd 5e 4d 03 ee d1 73 c9 2d 8e 43 e6 9d fe eb 8b cf 7c b1 af de d3 c9 ff d9 00 38 42 49 4d 04 21 00 00 Data Ascii: I9k49G^\\|\[t?_^:Z%c;Hk;Yc>K)tuy6?zS<W?38AE.4ZY%}q_P~R%}T-yzJ1}9};Z2@2V/v.J^Ms-C\|8BIM!
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: 91 56 e4 c8 61 36 24 dc 0d 2d fd 3e b7 f6 51 71 20 59 58 53 a7 63 8d c8 d4 17 8f 53 17 6a b5 43 b1 91 58 fa b8 03 9f af f4 07 da 57 b9 0a 0d 06 7a 59 15 ab 96 05 be 1e 9d 69 b6 0c 6e 43 78 49 04 d8 82 bf 4f eb fe c3 db 3f 58 7f 8b a5 7f 48 9f 2e ac 8f f9 68 e2 df 6b 7c 83 10 42 81 22 cf 6d ba cc 7d 42 8f ed 69 9e 9e b2 25 b0 b5 c3 34 1f 9f a7 b5 fb 7c e2 7d ba 68 08 ce a3 9f cf a2 3b f8 56 d7 78 e5 ab f5 e0 a2 64 a7 9d 64 a2 83 e9 8e 27 d7 ab 52 fe 62 db 54 67 7e 24 76 c5 32 44 0c b8 cc 24 d9 b1 61 c8 38 c4 f2 b3 0b f1 fb 65 49 ff 00 63 ec 4d ed 95 c8 b2 e7 1d a9 88 ab 34 a1 71 8f 3e 8b 3d ca 8d 9b 95 77 99 18 d5 90 99 3f 24 14 d3 f9 ea e3 e5 43 d7 ce 9f 79 43 e4 de 5b 85 80 b9 7c ad 44 97 ff 00 5e 46 36 ff 00 5e cd ef ae 71 86 09 65 46 fd 33 02 9a 7a 61 Data Ascii: Va6$->Qq YXScSjCXWzYinCxIO?XH.hk\|B"m}Bi%4\|}h;Vxdd'RbTg~$v2D$a8eIcM4q>=w?$CyC[\|D^F6^qeF3za
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: 89 c9 1b 35 9d b9 8e 0b 71 e2 0a 79 79 75 21 7b 51 ce 5b b5 f6 ed 72 97 d7 52 3a 44 0e af 3c 9a 52 99 cf 0f 97 53 bb 9f a5 f1 f3 6d a9 92 08 98 b5 6d 48 8d e3 62 a5 3c 0a 85 9e 57 42 6c 6c 78 e6 de e0 6e 59 f6 8e cb 7b dd 25 67 8a 3a 6a f3 fb 7e cf d9 d6 42 f3 f7 b9 b2 72 f6 c5 15 cc 73 b2 ad 29 f3 e1 f6 f4 09 6d 2f 8f f4 d4 7b 62 99 21 a7 8d 27 fb 87 04 98 c2 f2 cf aa e0 fd 49 b0 b7 b6 7d c2 f6 82 d3 6d 2c 6d 6d 00 a7 fa bd 3a 67 db 2f 76 1f 7c b2 0d 25 d9 26 9f ea f3 e8 5f da 9f 13 bf 8d 6e 7d a5 52 68 d1 8d 1e 5e 8e a9 48 8e cd ac 4a 5a e0 8e 2f 72 2d c7 b8 cb 68 f6 fa 20 92 48 63 50 e2 bc 7f e2 ba 90 f7 0e 68 96 6f 09 55 c9 5a f5 b7 57 c3 9d b3 3e d0 db 38 ac 74 ab a4 41 04 08 ab 71 71 e3 51 7f 71 9f 31 ed 3f 49 7a f1 a5 00 04 f4 39 d9 2e f5 db 02 c6 Data Ascii: 5qyyu!{Q[rR:D<RSmmHb<WBllxnY{%g:j~Brs)m/{b!'I}m,mm:g/v\|%&_n}Rh^HJZ/r-h HcPhoUZW>8tAqqQq1?Iz9.
2024-10-30 03:01:52 UTC	11977	IN	Data Raw: 4c 16 8d c7 e1 07 03 cf 8f 97 47 2b 6c c7 0c d1 52 35 29 13 d3 aa 09 15 11 ef ad 98 58 84 02 fc 5c ff 00 4f 78 25 ce 5b 06 e5 15 cc f3 4f 03 31 d5 c0 91 fe 7e b3 d7 97 77 bb 4b c8 ed e4 8d 94 44 50 d3 18 f2 e8 a8 fc 94 6a c8 27 ca 49 4f 4b 1c 53 c5 13 96 67 6f 24 8c e9 10 31 c7 10 50 09 60 3e a4 9e 3d c6 96 9c b3 73 bb 5c 18 ad ec 8b 3d 7e 43 fc 3f e4 e8 5b 73 cc 76 fb 54 66 59 d9 42 05 26 bc 78 67 ca bd 56 be d1 dd 5b f3 2d 96 aa 86 3a 59 61 89 2a d8 a0 08 c1 ee ae c1 e3 bb 03 7f a0 23 fa fe 3d 9f de 7b 4f bb ed b6 e2 f1 ec 9b e9 fd 6a 3f c1 5a f4 1f db bd c8 da f7 f7 68 ad ef 50 bf 98 a1 1f e1 03 a1 ab 35 87 df 59 1a 6a 73 4b f7 21 8c 94 ce e5 b5 8d 3f b8 18 aa 85 e6 e5 ae 3f e3 5e c8 6d f9 66 f4 dc 04 16 c6 84 e2 a4 0f f0 f4 63 b8 ee f6 d1 d9 78 a2 5f Data Ascii: LG+lR5)X\Ox%[O1~wKDPj'IOKSgo$1P`>=s\=~C?[svTfYB&xgV[-:Ya*#={Oj?ZhP5YjsK!??^mfcx_
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: cc f4 73 79 cc 1e 3c 22 2d 55 6f b0 0e 82 ba d6 f3 48 da f9 6f 53 b3 7d 07 ab eb f4 e2 fc 7b 5b a0 70 f2 e8 a2 df 57 73 fa f4 c9 52 05 81 03 90 7e 97 3c 73 f9 f7 b0 a1 4d 47 1e 8d 21 63 4a d7 3d 36 b5 c9 bf d7 9b 70 3f 17 3e d5 c6 03 71 f4 e9 72 66 95 eb a0 4d f8 fa 8f f0 f6 ef 86 be 9d 6d 8a 8e a4 00 43 02 41 23 fa 5b dd 94 05 14 1c 3a 4c 5b 57 db d4 85 51 62 39 e1 08 fa ff 00 85 bf db f3 ef 75 f9 74 c5 7c fa ff d7 d5 9e b0 a8 8a ae a6 57 3a b5 33 21 36 e4 1b d9 7d 9b 75 52 68 05 7a 0f e3 af 05 9e 59 80 b6 a2 49 24 d8 58 fe 45 ec 45 bd d4 8a 9a f4 d9 35 24 f4 13 ee 7c 9b 55 d5 4a c8 c3 42 92 a0 73 6b 0e 78 ff 00 5b 4f ba bb 53 4e 3a f2 d2 b4 23 a1 5f ad 31 23 1b 8c 9b 39 54 ba 66 99 4c 70 ea e0 8d 60 04 d3 c1 36 8e 3d 4e 7f c7 de d4 79 f4 5f 78 d4 26 3a Data Ascii: sy<"-UoHoS}{[pWsR~<sMG!cJ=6p?>qrfMmCA#[:L[WQb9ut\|W:3!6}uRhzYI$XEE5$\|UJBskx[OSN:#_1#9TfLp`6=Ny_x&:
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: 2a 08 57 f4 c7 4e 8b 6d 3f 4b b2 af 22 ee a4 d9 7f a0 f7 75 24 22 d3 a2 f6 45 79 1f 51 eb 94 73 bb ca 2f 1d ac 50 80 00 5d 57 91 c9 b6 97 5b 06 e3 fa 70 3d dc 13 5e b4 51 50 16 5a d4 74 f5 0f 96 50 a3 c2 e6 ea 80 91 73 63 67 73 63 ad b9 27 dd ba 6f c5 6f 41 d4 c6 0d 02 2b b5 a2 44 d1 72 f6 36 1a 0b 7d 4a 0f cb 7b f7 5b 48 cb 9e a1 e3 31 9b a3 b1 33 94 3b 47 66 63 2a b2 99 0a e9 92 15 82 92 23 2f ea 36 f2 c8 52 de 38 40 fa b7 3e f5 5d 4d e1 a0 ac 9d 19 5a 59 2a b7 d4 4f 51 0f f9 ba d8 bf e0 17 f2 ce c3 f5 dc 38 fe c5 ed 4a 38 f2 7b a6 68 a0 a8 a5 a3 9a 20 63 c7 2b c5 ac c6 b0 be b5 27 51 1e a3 66 f6 29 da 76 43 27 eb 5e 29 00 0c 53 d7 f9 f9 74 4b be f3 1a 04 fa 3b 10 b5 07 24 d6 b4 a5 31 42 3c fa bc 3c 5e 36 9a 96 9e 1a 4a 08 e3 a6 82 05 0b 14 51 20 44 45 Data Ascii: WNm?K"u$"EyQs/P]W[p=^QPZtPscgsc'ooA+Dr6}J{[H13;Gfc#/6R8@>]MZY*OQ8J8{h c+'Qf)vC'^)StK;$1B<<^6JQ DE
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: 7f 80 74 2e 91 75 35 c7 fc d1 6f f0 75 43 1f 29 83 53 f7 c6 ff 00 84 b5 d8 57 63 89 3f 4b 86 c3 63 cf fb c7 be c6 fd dd a4 d5 ec cf 25 f9 fe 81 ff 00 8f 1e b9 75 f7 8d 8b fe 62 d7 31 92 3c a1 ff 00 ab 63 a2 f0 d3 f3 f5 fa 71 fe fa fe e6 f4 e2 bd 41 fe 08 f4 3d 72 8e 60 e7 eb fe b8 fe 9e df ea 8f 16 91 51 d3 95 39 50 48 bd ee 3f a1 1f 9f 7b e9 31 ea 49 bf 1c 7f 43 f5 ff 00 1b 7b f7 48 c5 33 9e bf ff d7 ad ae c3 d8 39 6c ce 3e b2 3a 7c 15 49 93 c2 4a b9 8d 91 75 0b 80 1a e1 88 b7 b1 1c 68 58 e7 a2 0b 82 83 23 8f 49 9f 8d 5d 5f be f6 ee f2 35 15 18 28 1e 93 25 1c d4 72 c6 c1 8b 4f 4d 51 78 e5 11 48 05 e9 aa 14 7d 1a c7 de ae 6d 1a 48 88 53 42 7a f5 8d e7 83 3d 4f 42 87 c8 6e 99 a6 d9 79 16 af cc e4 22 86 3a ea 6f b9 c5 c3 34 b1 2d 48 a4 d2 c6 5f 2c 45 84 88 Data Ascii: t.u5ouC)SWc?Kc%ub1<cqA=r`Q9PH?{1IC{H39l>:\|IJuhX#I]_5(%rOMQxH}mHSBz=OBny":o4-H_,E
2024-10-30 03:01:53 UTC	16384	IN	Data Raw: 8e f5 ff 00 4b a3 fe 08 fa 1e 7a 53 37 8b 4e bc da 51 4f 5f 47 15 53 e3 29 ff 00 c9 a6 a8 8c 4c a0 c5 1b a8 64 b8 2a 7c 61 8f bf 99 3d f6 de 53 b9 6f 19 ff 00 89 4d ff 00 1e 7e ba 4d b7 e2 df 66 ff 00 9a 0b ff 00 1d 1d 28 3b 3d b2 59 2c 1e d7 3b 72 92 9f 30 92 6f 7c 14 f5 9e 38 61 ae 4a 6c 6d 22 e4 27 7a f4 b9 61 0b 53 d6 c1 12 09 57 d4 85 ff 00 1f 5f 6c 72 f3 68 bf 58 47 a8 e9 7d c7 fb 8e 7e ce ab 4f 0b 5f b4 f1 1b 7f 34 71 df df e6 c1 d7 50 75 96 2f b5 7e d6 8b 7e cd 91 8a 54 dc b9 ba ae c7 c5 e1 21 8e 99 32 f8 fc 75 15 35 45 22 bd 3e 29 92 11 e5 d5 1d ec cd ee 61 bc b7 9e 66 b3 b3 9e fa ca 35 68 66 78 16 4a 6a 62 b1 1a ea ab 0a f7 0c 7c a9 d1 1f 8a 62 8a 3c f1 27 fc 27 a3 15 da fb 77 a9 5b 62 75 c5 1e ca d9 3b 96 a3 74 4e b8 d9 fa 73 29 86 c0 6f 16 ad Data Ascii: KzS7NQO_GS)Ld*\|a=SoM~Mf(;=Y,;r0o\|8aJlm"'zaSW_lrhXG}~O_4qPu/~~T!2u5E">)af5hfxJjb\|b<''w[bu;tNs)o
2024-10-30 03:01:53 UTC	16384	IN	Data Raw: 6c cc 64 6f 86 8b ef a9 68 a7 79 98 9a c9 31 ee 56 a6 58 79 f5 46 26 05 09 e7 91 ed 6c 77 1e 03 af 8c 42 d7 85 7c fc ba 4f 68 9f 51 16 e6 6d 0f 89 1c 40 6a 2b 90 bd b5 ee f4 ea ac b1 9d e9 d9 5b 17 e4 0d 7e 27 17 8b a8 78 b1 99 8a 8c 76 51 02 35 e9 6a 21 99 a2 65 b5 ac 57 d3 6f f0 f6 c6 e3 19 b8 51 a8 e0 56 9f 9f 45 fb 65 c4 81 52 4b 54 2e 8c 48 a8 c8 ed e3 fb 3a bc cd 93 da bb a7 78 6d 14 ab 97 19 22 4b 1d 1a cf 2d e3 b9 40 89 76 1c 83 62 d6 f6 1a 4d bc 06 24 9c 74 27 37 ac ea 57 4f ea 01 c3 cf a3 2f f1 a2 8b 74 d5 64 23 df 73 63 d8 e3 a0 a6 ae 54 1e 33 74 f3 c2 e8 24 1f d5 c7 e3 fd 7f 67 3f 40 c2 34 56 14 63 c3 a2 d4 ba 73 23 b0 42 54 71 3d 1b ec f6 cd 7e d4 c6 d3 4e 90 bd a9 5e 47 61 a4 0b 16 5d 20 10 45 fe 9e d1 9d bd 86 08 3d 2e fa e4 75 3a 08 3f 67 Data Ascii: ldohy1VXyF&lwB\|OhQm@j+[~'xvQ5j!eWoQVEeRKT.H:xm"K-@vbM$t'7WO/td#scT3t$g?@4Vcs#BTq=~N^Ga] E=.u:?g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49899	52.222.214.76	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:52 UTC	410	OUT	GET /m/691e6b52125d4762/original/HomePage-FieldWork-Business_735x551.jpg HTTP/1.1 Host: ovivo.getbynder.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:52 UTC	830	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 280377 Connection: close Date: Wed, 30 Oct 2024 03:01:49 GMT Server: nginx Cache-Control: public, max-age=172800 Accept-Ranges: bytes Content-Disposition: inline;filename="HomePage-FieldWork-Business_735x551.jpg" Access-Control-Allow-Origin: * X-API-Correlation-Id: 789c31f7-bc8e-b07e-82a5-63a8ceca2e25 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubdomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Permissions-Policy: camera=(), geolocation=(), microphone=() X-Cache: Hit from cloudfront Via: 1.1 e94c77a12a65a84cbcef7856ed7e0fb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: IO57JZsXh4ZeKLX_g-CFWPiKJ6gZMDJ5kVQNcrKBho91dJYIubIPPA== Age: 3
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: ff d8 ff e1 1d 8f 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 33 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 32 3a 30 35 3a 31 37 20 31 35 3a 33 35 3a 32 34 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 df a0 03 00 04 00 00 00 01 00 00 02 27 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i-'-'Adobe Photoshop 23.3 (Windows)2022:05:17 15:35:24'"
2024-10-30 03:01:52 UTC	16384	IN	Data Raw: 3e 2e dc e5 5d d7 3c b1 d6 16 9b ed c6 b1 b9 35 35 c7 bb 0e d7 34 3a e7 35 8d fd 15 df 9e 93 d8 f1 a1 63 c6 e1 23 43 a0 fd e7 7f 27 fa ea 38 de a3 ed de 2b 73 ea db fa 62 01 80 c7 07 32 c3 c7 ee 39 3a 94 e5 e5 f4 1e a5 43 7e d3 f5 7e 2e bf 09 ae c5 c6 a5 cf 68 7d 75 9d b9 15 53 55 97 ec 75 d8 b6 35 f8 f9 38 ff 00 ad 55 7e 05 de ad 35 fd b3 0e df b2 57 cd 75 ef ae 14 f5 4c 07 e0 75 ae 90 68 ea 78 af 7b 31 f2 69 7f b1 99 0c 68 66 6b 1d a7 d0 fe 6f ed 18 b5 db 6b 3f 9b df f4 17 7d d2 ed 35 db 5d 56 bc ba c7 b1 f4 58 5e 5b b8 d9 41 75 b4 3b f4 4d ad 9e ea 5f 98 cf e6 d9 ec c7 ad 60 7f 8c 9b c5 5d 17 2a a6 c0 f5 ae c4 90 23 e9 6d c9 73 dd ff 00 18 ea d9 47 f6 14 72 86 e5 78 9f 47 ff d6 f3 ae 9d d2 f3 ba 9e 40 c7 c2 a8 d8 ed 37 be 0e c6 03 fe 12 eb 3e 8d 6c 5d Data Ascii: >.]<554:5c#C'8+sb29:C~~.h}uSUu58U~5WuLuhx{1ihfkok?}5]VX^[Au;M_`]*#msGrxG@7>l]
2024-10-30 03:01:52 UTC	11977	IN	Data Raw: 1a 88 f3 e9 fb 3b a1 69 79 0b b1 01 4e 2b d6 ba b9 99 62 c6 e6 24 a2 c8 e3 32 f0 23 d6 4f 8f c7 c9 2a 0a 43 3c d0 96 86 44 48 e5 40 d2 e8 b0 01 d4 31 37 b8 bf d7 d8 82 5b 49 a4 35 2e 33 d4 83 1c cd 2c 41 d2 45 e1 eb 5e 80 5e c7 92 5c 56 f0 a6 a4 2b 28 c7 61 71 af 53 3a 47 20 9e aa 6a aa da 72 10 c8 d2 32 c8 60 86 32 2e 01 17 6f 76 45 5b 44 32 bb 12 7a 37 b4 8f c5 b6 63 a8 6b 26 9d 14 df ef 3e dc cb ee 61 87 c3 e3 6a 24 c8 b3 cf 16 3d f2 00 d3 e2 fe f2 46 2e ec c5 0c d5 32 19 1f f5 15 1c 7b 4f 1e f1 02 bb 2d a5 93 3c c7 8d 70 3f 97 4f ca 97 36 b0 3f 84 a3 59 1f 97 5b 27 7c 6e ee bd d9 d5 db 63 a7 fb b3 67 fc 4c c9 ed 0f 89 fb d3 09 37 5c 7c 95 a7 db 5b d7 03 be b1 1b 6b 2f 81 a8 8b 15 8c ee b9 76 8c 51 2e 66 9f 1d 4b 38 a9 5c ec d2 21 66 c7 4b 1c 8e a4 c3 Data Ascii: ;iyN+b$2#O*C<DH@17[I5.3,AE^^\V+(aqS:G jr2`2.ovE[D2z7ck&>aj$=F.2{O-<p?O6?Y['\|ncgL7\\|[k/vQ.fK8\!fK
2024-10-30 03:01:52 UTC	12792	IN	Data Raw: 73 5d 27 fc 1d 2c 5b d8 da 22 ed 23 6b a1 23 3e 63 f9 f5 ff d6 dc 4b e3 64 ff 00 75 b1 31 26 43 ad bf 87 c4 18 b5 d8 dd 40 5b 5c dc f1 6f 73 8f 3f 29 4d c7 50 c7 58 d6 8a 0a d0 e7 a6 7f 95 34 31 c9 d7 59 77 0b a7 4d 3a 39 2a 2d fa 25 8d be a0 0f e9 ed 47 b7 92 9f de 25 58 e2 9d 54 d5 3b 17 87 55 49 1f a1 c3 26 ae 3e 8c 09 06 e6 c4 7b 9d b4 21 1c 05 3a d9 cf 59 24 32 34 81 9d 9e 4e 3e b2 b9 73 6e 2d 62 cc 6d ef c1 54 0c 28 af 5e 1f 33 d4 88 a1 89 f5 31 50 58 1e 45 bf 1f 5b ff 00 4f 7a a1 1c 07 5a 24 0a 75 2a 9d 09 66 0a a0 00 48 51 60 47 f5 3c 7e 0f bf 54 f5 ea f0 f5 eb 2b 46 dc d8 72 78 16 36 fe 9f f1 3e fd 43 c2 9d 7a 84 75 c8 1f a0 2b a5 bf d8 1f f0 bd c0 e6 e7 de b8 79 75 ec 0c 74 25 f5 13 08 fb 0f 6d 9b d8 9a 97 5f a7 17 68 d8 5b d9 4e f9 46 db 2e c7 Data Ascii: s]',["#k#>cKdu1&C@[\os?)MPX41YwM:9-%G%XT;UI&>{!:Y$24N>sn-bmT(^31PXE[OzZ$ufHQ`G<~T+Frx6>Czu+yut%m_h[NF.
2024-10-30 03:01:52 UTC	6396	IN	Data Raw: 6b f2 eb 97 98 c9 37 a0 00 2f 7f ad 97 fc 79 f7 ad 01 53 b8 e7 ad 54 ea e3 d4 87 aa 50 ed 76 64 3a 6d c7 e7 fd 8f e2 de da 58 49 51 40 08 af 5a af 1e ba 85 04 b1 6a 60 5d 15 af 77 b7 1c dc 7d 6f ef d2 1d 2f 41 82 7d 3a ba 12 2a 6a 7a 5f 6d dc 4d 3e e6 a7 9a 36 99 61 92 9b f6 c7 87 4a b1 24 70 ed 7f 61 cd ce f2 5d aa 44 61 19 2a d9 cf f8 3a 3c b4 84 6e 29 e1 ea 01 c7 49 cc ae de ca 61 66 78 96 06 ad a7 72 74 cd 1a 33 b8 b1 fc e9 e4 11 ec d2 cf 73 b3 bf 8d 5c c8 23 90 79 13 d2 2b ad b6 ea cd c8 65 2c 3d 40 e9 39 52 5c 32 ac ab 24 4e a0 dd 65 05 48 3f d2 c7 91 ec d2 1a 50 94 60 c3 e5 d1 6b 0c d0 82 0f 5e c7 93 34 8d 12 ea d4 ea 51 02 72 0b 9f a5 c7 04 de f6 f7 eb 91 a1 43 9e 03 39 f4 ea d1 ab 3b 05 5c b7 58 aa e9 aa a8 d8 a5 53 e8 fa 38 4f a3 35 cf d4 7d 49 Data Ascii: k7/ySTPvd:mXIQ@Zj`]w}o/A}:jz_mM>6aJ$pa]Da:<n)Iafxrt3s\#y+e,=@9R\2$NeH?P`k^4QrC9;\XS8O5}I
2024-10-30 03:01:52 UTC	6396	IN	Data Raw: 89 ae 49 26 ac da 99 ea 89 59 a1 fb 4b 87 32 63 32 11 87 04 72 52 53 fd 3d ca 3c 9f bb c7 e1 0b 59 a4 00 f9 75 09 7b 85 b3 33 cf f5 70 29 27 cf a9 b4 fa 3c 5e 3b b0 bd 8a bb 1b 03 cf f4 3f eb 7f b6 f7 23 a9 a8 f9 75 10 31 2a 7e c3 d2 ef ae aa 5e 93 73 e3 1c d4 78 c7 de 53 f3 60 6e 7c 8b 65 03 fc 7d bd 09 a3 8e 93 cf 94 24 0a 75 79 dd 75 2f 97 13 4c 59 b5 5e 9e 26 07 fa de 31 cf f8 7b 6f 76 18 88 8f 4e 92 42 38 82 3a 9f 9c 28 64 a8 1f 4f da 71 c7 fa cd f8 f6 85 69 d9 5e 3d 19 c4 0e 93 8c 75 5d 7b f2 55 8f 72 ee 05 fd 47 f8 93 1b 93 fa 7f 6d 3e 97 e7 d9 d4 27 f4 80 07 3d 22 60 35 11 4a 74 85 15 24 ab 01 c9 3f 8b 9f af fa d6 fc 7b b1 27 8f 97 5b d2 3c 8d 7a cd 1d 41 f1 93 2c 45 96 df 93 6b 1b 7f 88 ff 00 0f 74 d5 e4 47 56 d3 e6 78 f4 6e 3a b9 bc 9d 73 4f 61 Data Ascii: I&YK2c2rRS=<Yu{3p)'<^;?#u1*~^sxS`n\|e}$uyu/LY^&1{ovNB8:(dOqi^=u]{UrGm>'="`5Jt$?{'[<zA,EktGVxn:sOa
2024-10-30 03:01:52 UTC	12792	IN	Data Raw: 6d 47 e1 1d 18 5f bb 34 74 5f 8a 9d 20 36 15 0d 6c 98 9c a6 36 12 52 bf 21 59 41 fc 3b 1e 96 96 49 fe e2 78 e0 40 0e b5 55 21 8f a8 fd 00 fa db eb ec cd c2 68 2d c1 47 41 59 16 58 a4 55 22 a4 f4 6f 6a 7a e6 b3 68 62 28 e2 98 47 25 4c ba 7e f6 24 64 91 52 75 51 aa 21 66 24 3c 64 fd 41 d2 ca d7 fa 8f 65 2d 30 66 a2 fc 3d 2d 58 5c 29 2f c7 a7 cd b1 5d 8d a4 91 67 32 c9 e4 20 09 22 68 ca 2c 5e 37 f4 97 4d 0a 1a d6 e6 df 5f af b6 dc 99 05 34 f5 a0 81 45 74 f4 25 ff 00 7e 71 70 a3 c0 93 c6 0c fc 42 1a 3b 94 36 3c 17 08 24 08 c7 e9 f9 f6 91 e3 61 5f 4e 97 44 ca 69 d6 08 77 ac d7 96 49 65 c4 88 0d a3 9b ef 96 1a a8 ca 95 f5 9f 1c aa ff 00 d9 1c 7d 0f b4 4e a5 4d 6a 7f 67 46 51 ba 7e 7d 61 c9 50 d1 64 a8 a2 c9 51 75 ee 27 2d 53 55 27 8e 86 b2 a5 0e db a6 96 49 6c Data Ascii: mG_4t_ 6l6R!YA;Ix@U!h-GAYXU"ojzhb(G%L~$dRuQ!f$<dAe-0f=-X\)/]g2 "h,^7M_4Et%~qpB;6<$a_NDiwIe}NMjgFQ~}aPdQu'-SU'Il
2024-10-30 03:01:52 UTC	10776	IN	Data Raw: b7 24 df d8 b1 b9 f6 d4 5a 15 bb 8e aa 47 0e 93 5c f2 f7 81 70 af 6b 25 73 d0 89 82 da 1b 96 82 a5 45 75 1c 55 d1 14 b7 96 79 d6 46 8d b4 e8 b8 bd c9 5b 7f bc fb 09 dc 73 4e d5 32 33 da bf 87 43 c0 1a 74 6f 0d b5 c4 2c a9 3a 97 a8 e3 d7 2a ce 96 5c ad 7d 46 42 6a 81 1b ba 03 12 a2 92 11 87 3f 4e 2c bf ef 3e cc ad 3d cf b4 b4 b7 58 0a 6a 51 c4 fc ba 4d 75 cb 0d 71 29 99 64 a3 1e 03 a7 2d a5 b6 f7 5e 13 25 24 79 a9 4d 4e 36 94 69 c6 c9 14 ee 40 1c 80 24 8d 45 cb 05 fe be d0 6e 1c d7 ca fb a4 47 e8 ca 25 d1 f8 81 03 3d 6e 0d b7 79 db ca 99 4b b5 b8 f4 e8 66 a5 ad 75 53 7a 67 90 03 f5 22 f7 fe 84 82 3d c6 1b 9c 30 c9 39 78 ae 42 31 3e 47 a1 8d 96 e0 be 11 46 84 9a 7c ba 7c a7 9e 92 b2 58 92 7a 71 1a ea 06 c6 c3 d5 f4 bf 1e c8 ae 6e b7 2d b5 59 ad ee 49 f9 d7 Data Ascii: $ZG\pk%sEuUyF[sN23Cto,:*\}FBj?N,>=XjQMuq)d-^%$yMN6i@$EnG%=nyKfuSzg"=09xB1>GF\|\|Xzqn-YI
2024-10-30 03:01:53 UTC	12792	IN	Data Raw: 7b 53 34 07 ba 9d 06 1a 3b d8 66 f0 e5 18 e8 cd b4 84 11 fe bf d0 fe 3d 93 12 45 47 4a c8 20 00 78 f5 29 64 24 0e 3f df 0e 3d d0 33 79 f5 e0 3d 4f 58 25 63 cd 87 f5 ff 00 7d f5 fe 9e ed 9a ae 3a f7 0a 8e 83 5d e5 ff 00 01 81 52 11 bc d1 d8 8b 83 fe 75 78 b8 e7 9b fb 1a 6d c2 b6 6b d0 6a ec 93 70 d5 e1 d4 ec 6d 55 5a 46 62 89 19 95 e3 60 48 bd c8 bf b0 9f 37 dd df 45 18 8a de 32 c8 46 69 5e 8f b6 02 8a e5 88 cf 58 29 a9 e4 a5 ad 7a 81 4e c5 a4 fd 44 27 24 fd 79 36 1f 4b fb 09 ec 3c c9 73 b7 b3 a5 c5 9b 98 cf a0 3d 2a de ac 27 bd 5a c7 4a f4 91 dc bb df 6d 61 2b 23 83 3b 96 a4 c6 4f 51 73 04 55 4e 11 e4 b7 1e 90 6f f5 3e d4 ee 1c cb 77 7d 29 36 e8 52 31 e4 78 fe ce 98 b1 e5 e9 ed e1 f1 65 5c fc 87 49 49 f1 9b 6f 79 cc 92 ff 00 1b f2 d3 3e 9f 4d 1d 78 8d 78 Data Ascii: {S4;f=EGJ x)d$?=3y=OX%c}:]RuxmkjpmUZFb`H7E2Fi^X)zND'$y6K<s=*'ZJma+#;OQsUNo>w})6R1xe\IIoy>Mxx
2024-10-30 03:01:53 UTC	3592	IN	Data Raw: 58 11 e4 76 fe c9 b7 b2 03 a5 93 cb 4f 47 64 e9 34 a9 af 45 3b e5 3e 31 f7 96 06 1c 9e 12 3a 88 a5 a6 a9 76 cd 43 1a aa bb 4a 8a a6 18 e6 8f f5 0d 4f 76 4f ec 92 2d f9 1e d7 6d 7e 1a 4c 43 66 bd 25 be d4 f1 63 8f f8 7a aa cd cf b7 66 92 a7 f8 ad 3c 4d 41 9a c4 9d 53 98 63 1a 2b 22 00 10 02 02 aa d2 cc 87 e9 f5 b8 e7 d9 fc a9 e6 a7 23 a2 98 e4 d3 da 07 1e 9f b6 a6 62 9e 69 11 e9 e5 86 43 14 a9 25 45 78 0e 89 04 ee 01 7a 69 69 9f 9f b9 8d d2 e7 49 f4 fe 4f e3 dd 54 99 43 ad 3c ba db 02 34 b9 e0 3c ba 3b fb 93 66 64 f7 0e 0a 93 77 d3 e5 aa b7 0d 75 5e 2a 8a 3c 85 35 53 46 31 b9 6d be 11 43 62 a8 e3 89 55 28 96 99 8b 34 65 6c cb 2a dc f3 ec 2d 3c 5e 0c cd 55 a6 7a 11 43 30 92 30 2b 8a 74 5e 36 26 45 f6 67 74 65 fa d7 33 4b 4d 2d 36 f3 c5 c7 b9 36 55 5e 4e ba Data Ascii: XvOGd4E;>1:vCJOvO-m~LCf%czf<MASc+"#biC%ExziiIOTC<4<;fdwu^<5SF1mCbU(4el-<^UzC00+t^6&Egte3KM-66U^N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49900	18.66.147.58	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:52 UTC	840	OUT	GET /beacon?_wid=1347&_referer_url=&_type=event&_action_name=event&_event_category=Timer&_event_action=visit%20%3E%3D%2030%20seconds&_event_label=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F&_cookie_id=snzthm7h2&_alt_referer=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F& HTTP/1.1 Host: www.loopanalytics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:52 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 03:01:52 GMT x-amzn-Remapped-Date: Wed, 30 Oct 2024 03:01:52 GMT x-amzn-RequestId: 9fdb5f48-98ac-4e17-90ab-7284a3b9fe20 x-amz-apigw-id: AcYxKHXhoAMETag= Cache-Control: must-revalidate, no-cache, no-store, private X-Vapor-Base64-Encode: True X-Amzn-Trace-Id: Root=1-6721a1a0-04210d3912368ef105b37654 Pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 ad3c90e13b86d72e2a5e6bf65eab3450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: Pb2Tr_BMTxhv2WMGD6gubY9mgvmQszUamq0EBSQzjrud7oTckEgjtA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49901	18.66.147.82	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:54 UTC	602	OUT	GET /beacon?_wid=1347&_referer_url=&_type=event&_action_name=event&_event_category=Timer&_event_action=visit%20%3E%3D%2030%20seconds&_event_label=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F&_cookie_id=snzthm7h2&_alt_referer=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F& HTTP/1.1 Host: www.loopanalytics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:55 UTC	626	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 03:01:54 GMT x-amzn-Remapped-Date: Wed, 30 Oct 2024 03:01:54 GMT x-amzn-RequestId: 7c433f7c-34de-4956-ace1-0af716b63783 x-amz-apigw-id: AcYxfEGJoAMEL-g= Cache-Control: must-revalidate, no-cache, no-store, private X-Vapor-Base64-Encode: True X-Amzn-Trace-Id: Root=1-6721a1a2-3a29d10770439105334ba61d Pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 dde951f556570d42a581084479d8b0e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: --RtYhaQRjsOO_qnbGh54itfvVFf5Uu4m0KQI3gaYBzGkHXW_thuAw==

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:57 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:01:57 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:01:57 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030157Z-15b8d89586fzhrwgk23ex2bvhw0000000aag00000000bnym x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 03:01:57 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-30 03:01:58 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49903	216.239.34.181	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:01:58 UTC	1501	OUT	POST /g/collect?v=2&tid=G-3N3F1TJNT7&gtm=45je4as0v883110504z8853469589za200&_p=1730257276252&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&gdid=dZTNiMT&cid=833971690.1730257278&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=2&sid=1730257278&sct=1&seg=1&dl=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F&dt=Water%20Treatment%20Solutions%20%7C%20Ovivo&en=timer&ep.user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&ep.link_url=https%3A%2F%2Fwww.ovivowater.com%2Fen%2F&ep.link_text=30%2B%20second%20pageview&_et=23110&tfd=47014 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.ovivowater.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.ovivowater.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 03:01:58 UTC	849	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.ovivowater.com Date: Wed, 30 Oct 2024 03:01:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:02:02 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:02:02 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:02:02 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5d69bbb7-d01e-008e-6d6a-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030202Z-17c5cb586f6sqz6f73fsew1zd8000000016g000000005h60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 03:02:02 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:02:02 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:02:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:02:02 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: e9f225b3-c01e-0014-22e8-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030202Z-r197bdfb6b4gx6v9pg74w9f47s00000009dg00000000h596 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 03:02:02 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:02:02 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:02:02 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:02:02 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030202Z-16849878b78z2wx67pvzz63kdg00000006500000000006hs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 03:02:02 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:02:02 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:02:02 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:02:02 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030202Z-16849878b78hh85qc40uyr8sc800000007t00000000059wz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 03:02:02 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:02:02 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:02:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:02:02 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030202Z-16849878b78p49s6zkwt11bbkn000000072g00000000etyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 03:02:02 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:02:03 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:02:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:02:03 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030203Z-16849878b78z2wx67pvzz63kdg000000061g00000000c165 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 03:02:03 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:02:03 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:02:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:02:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030203Z-16849878b787bfsh7zgp804my4000000066g00000000etr1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 03:02:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 03:02:03 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 03:02:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 03:02:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: c60d5dca-401e-005b-2742-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T030203Z-17c5cb586f65j4snvy39m6qus400000002tg000000005e33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 03:02:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Target ID:	0
Start time:	23:01:03
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	23:01:07
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2220,i,14999809259448756908,12245541483753268675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	23:01:09
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.ovivowater.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: chromecache_208.2.dr	String found in binary or memory: <a href="https://www.facebook.com/ovivo/" class="icon-ovivo-facebook socials__single" title="facebook" target="_blank">facebook</a> equals www.facebook.com (Facebook)
Source: chromecache_250.2.dr	String found in binary or memory: <a href="https://www.facebook.com/ovivoholland/" class="icon-ovivo-facebook socials__single" title="facebook" target="_blank">facebook</a> equals www.facebook.com (Facebook)
Source: chromecache_250.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/ovivoholland/" class="icon-ovivo-linkedin socials__single" title="linkedin" target="_blank">linkedin</a> equals www.linkedin.com (Linkedin)
Source: chromecache_144.2.dr, chromecache_141.2.dr	String found in binary or memory: $('.video-modal__wrapper').append('<div class="embed-responsive embed-responsive-16by9"><iframe src="https://www.youtube.com/embed/' + video_id + '?rel=0&controls=1&showinfo=0&autoplay=1&playsinline=1" frameborder="0" allowfullscreen allow="autoplay; fullscreen"></iframe></div>'); equals www.youtube.com (Youtube)
Source: chromecache_218.2.dr, chromecache_205.2.dr, chromecache_180.2.dr, chromecache_195.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_180.2.dr	String found in binary or memory: N.getElementsByTagName("iframe"),ia=M.length,la=0;la<ia;la++)if(!v&&c(M[la],I.Qe)){fK("https://www.youtube.com/iframe_api");v=!0;break}})}}else G(t.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},u,v=!1;Y.__ytl=n;Y.__ytl.o="ytl";Y.__ytl.isVendorTemplate=!0;Y.__ytl.priorityOverride=0;Y.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_205.2.dr, chromecache_195.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_190.2.dr, chromecache_177.2.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.ovivowater.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ovivo.getbynder.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: acsbapp.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: cdn.calltrk.com
Source: global traffic	DNS traffic detected: DNS query: accesswidget-log-receiver.acsbapp.com
Source: global traffic	DNS traffic detected: DNS query: cdn.acsbapp.com
Source: global traffic	DNS traffic detected: DNS query: cdn.loopanalytics.com
Source: global traffic	DNS traffic detected: DNS query: js.calltrk.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: www.loopanalytics.com
Source: global traffic	DNS traffic detected: DNS query: careers.ovivowater.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.ovivowater.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Windows Analysis Report
https://www.ovivowater.com/